Sony CDs, A Computer Security Risk?

It is a disturbing trend when the tools and methods of computer hackers and virus writers are adopted by multinational corporations. Sony has been quietly installing a rootkit (Rootkits are cloaking technologies that hide files, Registry keys, and other system objects from diagnostic and security software, and they are usually employed by virus or spyware, attempting to keep their implementation hidden) on millions of CDs as part of the CD player software.

According to Computer Associates, maker of antivirus software, the following vulnerabilities are exploited: "These CDs install the pest XCP.Sony.Rootkit, which is a trojan that opens security vulnerabilities through rootkit functionality. They also launch Music Player, which is a media player that phones home to Sony BMG, sending information which could be used to compile profiles of the CDs played on a given computer."

If you have played any Sony CD on your computer, you should read the full advisory on the Computer Associates website.