Schneier on Security: Sony’s DRM Rootkit: The Real Story

Schneier on Security: Sony’s DRM Rootkit: The Real Story:

It’s a David and Goliath story of the tech blogs defeating a mega-corporation.

On Oct. 31, Mark Russinovich broke the story in his blog: Sony BMG Music Entertainment distributed a copy-protection scheme with music CDs that secretly installed a rootkit on computers. This software tool is run without your knowledge or consent — if it’s loaded on your computer with a CD, a hacker can gain and maintain access to your system and you wouldn’t know it.

The Sony code modifies Windows so you can’t tell it’s there, a process called “cloaking” in the hacker world. It acts as spyware, surreptitiously sending information about you to Sony. And it can’t be removed; trying to get rid of it damages Windows.

This story was picked up by other blogs (including mine), followed by the computer press. Finally, the mainstream media took it up.

The outcry was so great that on Nov. 11, Sony announced it was temporarily halting production of that copy-protection scheme. That still wasn’t enough — on Nov. 14 the company announced it was pulling copy-protected CDs from store shelves and offered to replace customers’ infected CDs for free.

But that’s not the real story here.

fast cars and crazy partying for the rich and brainless

This year?s event starts with a public music concert in London and then cars will take off for Turkey passing through ten countries en route to Istanbul. Then the 120 cars and 250 people will fly to Hong Kong using three cargo planes and a private Gumball 3000 jet for all the drivers. Stage Two starts in Hong Kong and heads to Shanghai, Beijing and another concert in Tianamen Square. Then it?s back on the jets, this time to Salt Lake City. Stage Three starts there are with races across the salt flats and then of course, a little sojourn in Vegas. It all ends with a big finale in Los Angeles with another concert and a trophy ceremony at the Playboy Mansion.

The Plans for the Gumball 3000 2006 – Luxist – www.luxist.com

Sounds like fun though…

wanna bring your C6 Z06 to the track? these might prevent u from going fast

The tire pressure monitoring system does not seem very track-friendly… What happens if I run Hoosiers or R-Comp? it might turn on traction control for you!! and also might put your car in a power-reduced mode… WHOA! I guess even with reduced power u might still be able to go fast… (like a 20% reduction still gives u 400HP, LOL!)

C6 Z06 Track Problems – SCCAForums.com

The NEW Tire Pressure Monitoring System (TPMS) presents a whole list of problems:

(Note that the C5 TPMS wiring and programming were included on the C5 Z06 but not activated. However the C5 Tire Pressure Warning Sensors (TPWS) could be added to the C5 Z06 and then turned ON. Likewise it could be turned OFF for track use. The older TPMS ONLY functioned as a pressure Warning message.)

The New TPMS is more invasive and not only Warns the driver but activates Traction Control and a Reduced Power Mode.

– It is installed OEM on the car and NOT a delete option

– Currently the TPMS can NOT be turned OFF

– Currently the TPMS can NOT be reprogrammed

– The new TPMS is federally mandated on all cars by 2008. *

– The TPMS has a narrow range 28-38 psi.

– The TPMS MUST see 4 TPW sensors or it DeFaults to Traction Control ON and a Reduced Power Mode.

– The TPMS MUST see all 4 TPWS in range

– The TPMS MUST see ALL 4 TPWS in the correct position (LF/RF/RR/LR)

– The TPMS reads the TPWS above 20 MPH

– If an over pressure condition (+38 psi) is sensed the TPMS will alarm on the DIC

– If an underinflation condition (- 28 psi) is sensed the TPMS will alarm AND Default to TC ON and Reduced Power Mode

– A wheel without an emitting TPWS or in the wrong position is considered a 0 psi flat and causes the DeFault Mode

– Therefore ALL Race Wheels MUST have a NEW TPWS installed despite the narrow psi range.

– TPW sensors are $70 each, retail

– The TPW sensors are rotational dependant and produce a voltage and emit a readable frequency when spinning. The option to “fool” the TPMS by installing 4 in a pressure vessel in the rear of the car won’t work.

– The TPWS come in 2 different groups UJ9 and UH3 and must be matched according to VIN#

– The TPWS operate on 2 frequencies: 315 mHz, 433 mHz and possibly a third 309 mHz and have a 125 kHz activation/programming frequency.

– Each TPWS is unique and has a “rolling code”

– A new special programmer is necessary to initialize each TPWS to the TPMS as to frequency and position.($700 retail)

– Each time a wheel is installed on the car or wheels switch positions (wheel rotation/ wheel change/ wheel set change) it must be initialized with the programmer as to frequency AND position AND the rest of the wheels must be reprogrammed/verified as to position with the programmer.IN ORDER (LF/RF/RR/LR) This is a time consuming procedure performed at each wheel position.

Catfight in the blogosphere

What’s up with all this stuff about Dawn Yang and XiaXue? “Dawn Yang” has topped Technorati’s popular search list for a while…

apparently she got really popular and other bloggers got jealous and started saying things about plastic surgery… but who gives a shit? They should all give it a rest and pose for Playboy’s hottest bloggers special… 😉

found more info here

Veteran Day

It sucks when USPS doesn’t deliver mails, because it means I don’t get my Netflix’s. Which sucks!! I’m gonna have to figure out how to spend this weekend without any DVD from Netflix!!

update: I actually got my DVDs in the mail today, not sure how they did it, kudos to USPS… 🙂

new lowered prices on refurb’ed Apple products

The Unofficial Apple Weblog (TUAW)

these are some great prices… the PowerBooks and iBooks are not current though, they don’t ship iBooks with 256MB of RAM anymore… I think I would go for the Amazon rebate or the student discount (so you can upgrade the HDD on the 12″ iBooks)…

  • 23″ Cinema Display (aluminum enclosure) – $1,099
  • 30″ Cinema Display (aluminum enclosure) – $2,099
  • 17″ PowerBook (1.67 GHz, 512MB, 100GB, SuperDrive) – $1,999
  • 15″ PowerBook (1.33 GHz, 256MB, 60GB, Combo) – $1,299
  • 15″ PowerBook (1.5 GHz, 512MB, 80GB, Combo) – $1,449
  • 12″ PowerBook (1.5 GHz, 512MB, 60GB, Combo) – $1,199
  • 12″ PowerBook (1.5 GHz, 512MB, 80GB, SuperDrive) – $1,299
  • 14″ iBook (1.33GHz, 256MB, 60GB, Combo) – $899
  • 14″ iBook (1.33GHz, 256MB, 60GB, SuperDrive) – $999
  • 12″ iBook (1.2GHz, 256MB, 30GB, CD) – $699
  • 12″ iBook (1.2GHz, 256MB, 30GB, Combo) – $719