<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/1.5.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: More coverage, more vulnerabilities</title>
	<link>http://www.boycottsony.us/?p=46</link>
	<description>All about egregiously anti-customer behavior by everyone's favorite BigCo.</description>
	<pubDate>Thu, 09 Sep 2010 00:23:59 +0000</pubDate>
	<generator>http://wordpress.org/?v=1.5.2</generator>

	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Life Insurance blog</title>
		<link>http://www.boycottsony.us/?p=46#comment-211263</link>
		<pubDate>Sun, 09 Mar 2008 18:24:46 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-211263</guid>
					<description>&lt;strong&gt;Learn facts about the life insurance industry&lt;/strong&gt;

Information on the life insurance industry</description>
		<content:encoded><![CDATA[	<p><strong>Learn facts about the life insurance industry</strong></p>
	<p>Information on the life insurance industry
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Al Maloney</title>
		<link>http://www.boycottsony.us/?p=46#comment-405</link>
		<pubDate>Thu, 08 Dec 2005 12:35:38 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-405</guid>
					<description>If Sonyis doing this, what about the other labels?
Can we trust any of them?
Time to boycott all CDs long enough to bring the perps to their knees.
At the same time they should be prosecuted and a few of them put in prison.
Why should they be treated different from regular hackers?</description>
		<content:encoded><![CDATA[	<p>If Sonyis doing this, what about the other labels?<br />
Can we trust any of them?<br />
Time to boycott all CDs long enough to bring the perps to their knees.<br />
At the same time they should be prosecuted and a few of them put in prison.<br />
Why should they be treated different from regular hackers?
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Tom</title>
		<link>http://www.boycottsony.us/?p=46#comment-185</link>
		<pubDate>Thu, 17 Nov 2005 03:14:03 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-185</guid>
					<description>Sony will bend over to the media and especially the courts, and feel what a 'real' rootkit can do!</description>
		<content:encoded><![CDATA[	<p>Sony will bend over to the media and especially the courts, and feel what a &#8216;real&#8217; rootkit can do!
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: BizzyBlog.com &#187; Sony/BMG Humiliated over OS-Altering Rootkit</title>
		<link>http://www.boycottsony.us/?p=46#comment-184</link>
		<pubDate>Thu, 17 Nov 2005 02:37:19 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-184</guid>
					<description>[...] UPDATE: The Boycott Sony Blog has some coping suggestions. [...]</description>
		<content:encoded><![CDATA[	<p>[&#8230;] UPDATE: The Boycott Sony Blog has some coping suggestions. [&#8230;]
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Al Maloney</title>
		<link>http://www.boycottsony.us/?p=46#comment-180</link>
		<pubDate>Wed, 16 Nov 2005 22:51:42 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-180</guid>
					<description>Let me see now …

The &quot;little guy&quot; downloads a piece of music and is slammed with a large lawsuit.
A hacker exploits a weakness and goes to prison.

When are the Sony executives responsible for this egregious assault on our computers going to prison?</description>
		<content:encoded><![CDATA[	<p>Let me see now …</p>
	<p>The &#8220;little guy&#8221; downloads a piece of music and is slammed with a large lawsuit.<br />
A hacker exploits a weakness and goes to prison.</p>
	<p>When are the Sony executives responsible for this egregious assault on our computers going to prison?
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Blog Relations and The Angel Blog &#187; Blog Archive &#187; How Sony got its nickers in a twist over copyright</title>
		<link>http://www.boycottsony.us/?p=46#comment-177</link>
		<pubDate>Wed, 16 Nov 2005 17:07:02 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-177</guid>
					<description>[...] The Boycott Sony Blog has reason for good cheer. Sony is recalling its CDs that use an insidious copyright protection, that acts something like a virus, and can blow a hole in your computer&amp;#8217;s security. [...]</description>
		<content:encoded><![CDATA[	<p>[&#8230;] The Boycott Sony Blog has reason for good cheer. Sony is recalling its CDs that use an insidious copyright protection, that acts something like a virus, and can blow a hole in your computer&#8217;s security. [&#8230;]
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Daniel</title>
		<link>http://www.boycottsony.us/?p=46#comment-173</link>
		<pubDate>Wed, 16 Nov 2005 14:19:12 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-173</guid>
					<description>The problem with SONY is a symptom of a larger problem: corpocrisy, corporatism, and corporations in-league with government.

A fundamental change in government and law enforcement must take place first.  Otherwise, corporations will continue to do such things.

Consider the corporate/investor fraud; cooking the books; stock fraud; failure of the SEC to regulate and prosecute violators.

Consider the dysfunctional and corrupt legal system, a perversion of the laws to do the very things they are supposed prevent,  insufficient or selective law enforcement,  legal plunder (e.g. abuse of eminent domain laws and recent, alarming supreme court rulings), wealth re-distribution, plundered entitlement systems, Gerrymandering to manipulate votes based on geographical boundaries, too many greedy, corrupt, and parasitic ambulance chasers, and idiotic juries allowing astronomical judgments for personal injury litigation with million$ and billion$ going to lawyers, etc.); identity theft (the fastest growing crime in the U.S.), no reliable form of identification (e.g. iris and/or finger-print and/or voice-print, and/or hand-print, etc.),   releasing repeat offenders to repeat crimes of rape, child molestation, murder, etc.),  pardons by presidents to release convicted criminals,  violation or insufficient protection of basic rights (e.g. discrimination, and crimes based on religion, race, gender, age, wealth, sexual preference, etc.), and execution and incarceration of innocent people.

Corporations in-league with governments are in control.
Ever read the book:  &quot;Confessions of an Economic Hit Man&quot; ?

This sort of thing, and many other numerous &lt;a href=&quot;http://home.comcast.net/~d.a.n/PressingProblemsFacingTheUS_NoBackLinks.htm&quot; rel=&quot;nofollow&quot;&gt;pressing problems&lt;/a&gt; can never be resolved unless government enforces the laws justly (no selectively).

&lt;a href=&quot;http://VOIDnow.org&quot; rel=&quot;nofollow&quot;&gt;VOIDnow.org&lt;/a&gt; is dedicated to work to resolve these many issues.   The solution is not as complex as some believe.  The problem is not so much that each problem is complex.  It's that they're simply being ignored.  Government is so entrenched in petty partisan warfare, seducing voters into it too, consumed with corrupt campaign finance and graft, and so beholding to big money donors (puppeteers), they ignore the many problems that grow in number and severity, and threaten the future and security of the nation.

Please see &lt;a href=&quot;http://VOIDnow.org&quot; rel=&quot;nofollow&quot;&gt;VOIDnow.org&lt;/a&gt; to see the most, simple, easy, safe, inexpensive, responsible way to peacefully force government to be responsible and accountable too.</description>
		<content:encoded><![CDATA[	<p>The problem with SONY is a symptom of a larger problem: corpocrisy, corporatism, and corporations in-league with government.</p>
	<p>A fundamental change in government and law enforcement must take place first.  Otherwise, corporations will continue to do such things.</p>
	<p>Consider the corporate/investor fraud; cooking the books; stock fraud; failure of the SEC to regulate and prosecute violators.</p>
	<p>Consider the dysfunctional and corrupt legal system, a perversion of the laws to do the very things they are supposed prevent,  insufficient or selective law enforcement,  legal plunder (e.g. abuse of eminent domain laws and recent, alarming supreme court rulings), wealth re-distribution, plundered entitlement systems, Gerrymandering to manipulate votes based on geographical boundaries, too many greedy, corrupt, and parasitic ambulance chasers, and idiotic juries allowing astronomical judgments for personal injury litigation with million$ and billion$ going to lawyers, etc.); identity theft (the fastest growing crime in the U.S.), no reliable form of identification (e.g. iris and/or finger-print and/or voice-print, and/or hand-print, etc.),   releasing repeat offenders to repeat crimes of rape, child molestation, murder, etc.),  pardons by presidents to release convicted criminals,  violation or insufficient protection of basic rights (e.g. discrimination, and crimes based on religion, race, gender, age, wealth, sexual preference, etc.), and execution and incarceration of innocent people.</p>
	<p>Corporations in-league with governments are in control.<br />
Ever read the book:  &#8220;Confessions of an Economic Hit Man&#8221; ?</p>
	<p>This sort of thing, and many other numerous <a href="http://home.comcast.net/~d.a.n/PressingProblemsFacingTheUS_NoBackLinks.htm" rel="nofollow">pressing problems</a> can never be resolved unless government enforces the laws justly (no selectively).</p>
	<p><a href="http://VOIDnow.org" rel="nofollow">VOIDnow.org</a> is dedicated to work to resolve these many issues.   The solution is not as complex as some believe.  The problem is not so much that each problem is complex.  It&#8217;s that they&#8217;re simply being ignored.  Government is so entrenched in petty partisan warfare, seducing voters into it too, consumed with corrupt campaign finance and graft, and so beholding to big money donors (puppeteers), they ignore the many problems that grow in number and severity, and threaten the future and security of the nation.</p>
	<p>Please see <a href="http://VOIDnow.org" rel="nofollow">VOIDnow.org</a> to see the most, simple, easy, safe, inexpensive, responsible way to peacefully force government to be responsible and accountable too.
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Steve U.K.</title>
		<link>http://www.boycottsony.us/?p=46#comment-172</link>
		<pubDate>Wed, 16 Nov 2005 14:07:08 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-172</guid>
					<description>Yippee....The story has at last just made headlines all over Europe!....But as we all know, Sony have been brought down by the bloggers &amp;#38; not the media in this case, hats off &amp;#38; a bow to them I think &amp;#38; especially to Mark Russinovich!</description>
		<content:encoded><![CDATA[	<p>Yippee&#8230;.The story has at last just made headlines all over Europe!&#8230;.But as we all know, Sony have been brought down by the bloggers &amp; not the media in this case, hats off &amp; a bow to them I think &amp; especially to Mark Russinovich!
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Ex-Sony fan</title>
		<link>http://www.boycottsony.us/?p=46#comment-170</link>
		<pubDate>Wed, 16 Nov 2005 13:48:45 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-170</guid>
					<description>This Sony BMG rootkit issue is sooo bizarre...
Strictly speaking Sony should not use the term CD (Compact Disc) 
about these discs that come with the XCP software. I wonder if Sony 
could call them as &quot;My First Rootkit&quot; instead :)</description>
		<content:encoded><![CDATA[	<p>This Sony BMG rootkit issue is sooo bizarre&#8230;<br />
Strictly speaking Sony should not use the term CD (Compact Disc)<br />
about these discs that come with the XCP software. I wonder if Sony<br />
could call them as &#8220;My First Rootkit&#8221; instead <img src='http://www.boycottsony.us/wp-images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />
</p>
]]></content:encoded>
				</item>
	<item>
 		<title>Comment on More coverage, more vulnerabilities by: Mike</title>
		<link>http://www.boycottsony.us/?p=46#comment-169</link>
		<pubDate>Wed, 16 Nov 2005 13:01:16 +0000</pubDate>
		<guid>http://www.boycottsony.us/?p=46#comment-169</guid>
					<description>The what you should do list -

1 Turn Off Autorun
2 Avoid buying infected CDs
3 Sign the Boycott Sony petition

- is a good idea. May I suggest a further item?

You might also include: &quot;make sure anyone else using your machine uses a non-admin account&quot;.

This malware won't install on XP on a non-admin account, so people need to be aware of that and to take appropriate steps.

Actually, Microsoft's security model is broken: (1) &quot;admin&quot; is effectively &quot;root&quot;; (2) many programs are poorly written and outdated and consequently won't run for limited users; (3) the system doesn't invite the user to setup a non-admin account for use on installation on XP, so most people are not aware of the issue.

The Sony malware pretty effectively circumvents any security model, because it uses social engineering to persuade an user to grant it what privileges it needs to install. However, casual installation of such software is more difficult under a Unix security model.

Consider the Sunncomm DRM software than installs kernel extensions on Mac OS X. It's going have to ask for root privileges to do that. That means that even  if the owner of the machine walks out of the room without logging out, one of his kids can't pop in a Sony CD and click through to install it.  The machine just isn't going to do it even on an admin account.  The kid would have to submit an admin password to raise privileges temporarily from admin to root to allow the software access to system areas, and the kid won't know the password.

On a Windows box, as long as your machine is logged on to an admin account, you're wide open.  So because of software like the Sony rootkit (and for other reasons) it's an important safeguard to allow other users of your machine only to use an ordinary user account (or a guest account) and to make sure you log out if you leave your PC unattended and you've been working in an admin account.</description>
		<content:encoded><![CDATA[	<p>The what you should do list -</p>
	<p>1 Turn Off Autorun<br />
2 Avoid buying infected CDs<br />
3 Sign the Boycott Sony petition</p>
	<p>- is a good idea. May I suggest a further item?</p>
	<p>You might also include: &#8220;make sure anyone else using your machine uses a non-admin account&#8221;.</p>
	<p>This malware won&#8217;t install on XP on a non-admin account, so people need to be aware of that and to take appropriate steps.</p>
	<p>Actually, Microsoft&#8217;s security model is broken: (1) &#8220;admin&#8221; is effectively &#8220;root&#8221;; (2) many programs are poorly written and outdated and consequently won&#8217;t run for limited users; (3) the system doesn&#8217;t invite the user to setup a non-admin account for use on installation on XP, so most people are not aware of the issue.</p>
	<p>The Sony malware pretty effectively circumvents any security model, because it uses social engineering to persuade an user to grant it what privileges it needs to install. However, casual installation of such software is more difficult under a Unix security model.</p>
	<p>Consider the Sunncomm DRM software than installs kernel extensions on Mac OS X. It&#8217;s going have to ask for root privileges to do that. That means that even  if the owner of the machine walks out of the room without logging out, one of his kids can&#8217;t pop in a Sony CD and click through to install it.  The machine just isn&#8217;t going to do it even on an admin account.  The kid would have to submit an admin password to raise privileges temporarily from admin to root to allow the software access to system areas, and the kid won&#8217;t know the password.</p>
	<p>On a Windows box, as long as your machine is logged on to an admin account, you&#8217;re wide open.  So because of software like the Sony rootkit (and for other reasons) it&#8217;s an important safeguard to allow other users of your machine only to use an ordinary user account (or a guest account) and to make sure you log out if you leave your PC unattended and you&#8217;ve been working in an admin account.
</p>
]]></content:encoded>
				</item>
</channel>
</rss>
