Secrecy is Weakness: Spin
It was recently revealed that Sony have been surreptitiously installing rootkits on the PCs of legitimate CD buyers. The rootkit software conceals files and running processes from the user and from scanning, anti-viral, administration and debugging systems. The intention is to run DRM services on the legal purchaser's machine to prevent them misusing the content of the media they legitimately bought. However, this cloaking system provides a huge breach in security that might easily be exploited by a hacker to run other invisible services on a victim's computer. This is, of course, deplorable. However the real problem here is how Sony are dealing with their exposure: not by apologising for their incredible stupidity and offering the tools for removing the insecure system but by supplying an update that merely alters it and then openly lying about the potential dangers:
SOFTWARE UPDATES/ PLUG-INS
November 2, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers. [via BoingBoing]
This is precisely the sort of spin activity that turned Cisco into the enemy. The problem is that their secret activities have now placed tens (perhaps hundreds) of thousands of computer systems in jeopardy and their attempted misdirection in this statement deliberately avoids conveying the true dangers posed by their actions. This means that many of those at risk have no proper indication of the gravity of their situation and so are less likely to take steps to protect their systems.
I suspect having a hundred viruses at the top of the threat list with 'Sony' in their names is price they may yet have to pay for this idiocy.
SOFTWARE UPDATES/ PLUG-INS
November 2, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers. [via BoingBoing]
This is precisely the sort of spin activity that turned Cisco into the enemy. The problem is that their secret activities have now placed tens (perhaps hundreds) of thousands of computer systems in jeopardy and their attempted misdirection in this statement deliberately avoids conveying the true dangers posed by their actions. This means that many of those at risk have no proper indication of the gravity of their situation and so are less likely to take steps to protect their systems.
I suspect having a hundred viruses at the top of the threat list with 'Sony' in their names is price they may yet have to pay for this idiocy.