Re: [Full-disclosure] the "Sony/BMG" virus

["Buford T. Pisser" <buford.t.pisser@xxxxxxxxxxx>]

Does anybody besides me believe that this may very well be an attempt by 
the misguided management of Sony / BMG to make all music buyers paranoid 
of ever inserting a music CD into a computer for any reason. Think about 
it, if they instill a fear of the possible presence of hidden "RootKits" 
or other malicious files on music CD's, it may just have the desired 
effect of keeping people through the use of fear tactics from ever again 
inserting a music CD in a computer CD drive ever again. Maybe they are 
not as stupid as they look at first glance. Very misguided, but not 
stupid. Sony / BMG will more than likely fire some mid level management 
employee for including the software without management approval and 
offer a free CD or two to appease those who may have been harmed by the 
installation of the software. That way they get to save face and some 
poor schmuck loses his job so the moron's at the top look like innocent 
bystanders. I hope that the security community at large does not let 
this thing go away for a very long time to come, and even more so takes 
action to prevent this type of blantant abuse from ever happening again.

Marvin R. Myers  CISSP

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/