Oh no, you're thinking, yet another cookie pop-up. Well, sorry, it's the law. We measure how many people read us, and ensure you see relevant ads, by storing cookies on your device. If you're cool with that, hit “Accept all Cookies”. For more info and to customise your settings, hit “Customise Settings”.

Review and manage your consent

Here's an overview of our use of cookies, similar technologies and how to manage them. You can also change your choices at any time, by hitting the “Your Consent Options” link on the site's footer.

Manage Cookie Preferences

  • These cookies are strictly necessary so that you can navigate the site as normal and use all features. Without these cookies we cannot provide you with the service that you expect.

  • These cookies are used to make advertising messages more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases selecting advertisements that are based on your interests.

  • These cookies collect information in aggregate form to help us understand how our websites are being used. They allow us to count visits and traffic sources so that we can measure and improve the performance of our sites. If people say no to these cookies, we do not know how many people have visited and we cannot monitor performance.

See also our Cookie policy and Privacy policy.
Sign in

Sony bundles rootkit-like software on USB drive

Hits replay on CD debacle

John Leyden Wed 29 Aug 2007 // 10:29 UTC

A USB fingerprint authentication device from Sony contains rootkit-like technology, according to security watchers. The MicroVault USM-F fingerprint reader software bundled with the stick installs a hidden directory under Windows.

"Files in this directory are also hidden from some antivirus scanners (as with the Sony BMG DRM case) — depending on the techniques employed by the anti-virus software. It is therefore technically possible for malware to use the hidden directory as a hiding place," warns anti-virus firm F-Secure.

Attempts to hide MicroVault software in a hidden directory may be an attempt to protect fingerprint authentication from tampering and bypass. This aim is laudable but the technique Sony used is misguided, F-Secure argues.

Sony, which drew fire for its use of similar rootkit-like techniques as copy protection mechanism on CDs two years ago, is yet to respond to the latest criticism.

Back in 2005 Sony BMG endured a public-relations and legal nightmare after it emerged digital rights management (DRM) software installed on some of its music CDs (First4Internet XCP program) created a handy means for hackers to hide malware from anti-virus scanning programs. Under pressure, Sony has been forced to recall discs loaded with the technology and create an exchange program for consumers. The music label still faces class action lawsuits by users who allege that their PCs have been damaged by the technology. ®

29 Comments

Other stories you might like

  • Biotech firm: Graphcore IPUs faster for AI-based drug discovery than GPUs
    Someone's got to keep, say, Nvidia on its toes
    Dylan Martin Thu 21 Apr 2022 // 07:00 UTC

    In the race to provide the best machine-learning accelerators, one of Nvidia's top challengers has claimed a victory in the biotech space, London firm LabGenius, which said Graphcore's intelligence processing units (IPUs) provide significantly faster performance for AI-based drug discovery than some unidentified traditional GPUs.

    Founded in 2012, LabGenius is a venture-backed company that develops antibody treatments for cancer and inflammatory diseases by leaning on machine-learning algorithms and laboratory automation to discover proteins that have the right qualities to treat medical conditions.  

    In a blog post to be published Thursday, and seen by The Register, Bristol, UK-based Graphcore is set to reveal LabGenius turned to its IPUs to train a BERT Transformer model on a large data set of existing proteins to predict masked amino acids. This, in turn, we're told, helped LabGenius suss out important protein features that can help it develop new therapies.

    Continue reading
  • So, what happened with GitHub, Heroku, and those raided private repos?
    Who knew what when and what did they do?
    Jeff Burt Thu 21 Apr 2022 // 06:33 UTC

    Analysis GitHub says it has identified and alerted developers who have had their private repositories accessed and downloaded via stolen authentication tokens.

    In this multifaceted fiasco, Microsoft-owned GitHub insisted its security was not breached. Instead, we're told, "compromised OAuth user tokens from Heroku and Travis-CI-maintained OAuth applications were stolen and abused to download private repositories belonging to dozens of victim organizations that were using these apps."

    Salesforce-owned Heroku confirmed someone compromised an OAuth token – presumably an internal staffer's token – to get into Heroku's GitHub account and rifle through, and potentially update, users' GitHub repositories "using OAuth tokens issued to Heroku’s OAuth integration dashboard hosted on GitHub."

    Continue reading
  • Apple geniuses in Atlanta beat New York to the punch, file petition to unionize
    Cannot confirm reports of Tim Cook on the Midnight Train to Georgia
    Katyanna Quach Thu 21 Apr 2022 // 02:52 UTC

    Workers in Atlanta, Georgia, have become the first US Apple Store staff to file an official request to hold an union vote with America's National Labor Relations Board.

    "A number of us have been here for many years, and we don't think you stick at a place unless you love it," said Derrick Bowles, Apple Genius and Communications Workers of America (CWA) organizer.

    "Apple is a profoundly positive place to work, but we know that the company can better live up to their ideals and so we're excited to be joining together with our coworkers to bring Apple to the negotiating table and make this an even better place to work."

    Continue reading

Biting the hand that feeds IT © 1998–2022

Your Consent Options Cookies Privacy Ts&Cs