<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/css" href="/stylesheets/rss.css"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/">
  <channel>
    <title>@Lathi.net: Real Story of the Rogue Rootkit</title>
    <link>http://blog.lathi.net/articles/2005/11/17/real-story-of-the-rogue-rootkit</link>
    <language>en-us</language>
    <ttl>40</ttl>
    <description>On Life, Fatherhood, Christianity, and Computers</description>
    <item>
      <title>Real Story of the Rogue Rootkit</title>
      <description>&lt;p&gt;Here&amp;#8217;s an &lt;a href="http://www.wired.com/news/print/0,1294,69601,00.html"&gt;article&lt;/a&gt; written by &lt;a href="http://www.schneier.com/"&gt;Bruce Scheier&lt;/a&gt; talking about the story behind the story.  For those of you who don&amp;#8217;t know, Sony &lt;span class="caps"&gt;BMG&lt;/span&gt; has distributed software on their music CDs that automatically installs on Windows computers that is hidden, spys on you and reports back to Sony, and can be exploited by others to take control of your computer.  There&amp;#8217;s a fairly &lt;a href="http://www.boingboing.net/2005/11/14/sony_anticustomer_te.html"&gt;sordid tale&lt;/a&gt; of how this has played out.&lt;/p&gt;


	&lt;p&gt;As usual Bruce thinks about things a little differently.  Being part of the security industry, he looks at how his industry has responded to this incident:&lt;/p&gt;


&lt;blockquote&gt;That all the big security companies, with over a year&amp;#8217;s lead time, would fail to notice or do anything about this Sony rootkit demonstrates incompetence at best, and lousy ethics at worst.&lt;/blockquote&gt;

	&lt;p&gt;That&amp;#8217;s a fairly damning statement, but well grounded.  Why didn&amp;#8217;t the various virus protection companies notice the Sony rootkit for the year it had been in the wild?&lt;/p&gt;</description>
      <pubDate>Thu, 17 Nov 2005 06:22:40 -0600</pubDate>
      <guid isPermaLink="false">urn:uuid:940cf0a7-ad30-4ba1-852c-e4e6790b901f</guid>
      <author>Doug</author>
      <link>http://blog.lathi.net/articles/2005/11/17/real-story-of-the-rogue-rootkit</link>
      <category>Security</category>
      <category>Internet</category>
      <category>virus</category>
      <category>Sony</category>
      <category>rootkit</category>
    </item>
    <item>
      <title>"Real Story of the Rogue Rootkit" by chad</title>
      <description>&lt;p&gt;Nice blog&lt;/p&gt;</description>
      <pubDate>Thu, 17 Nov 2005 22:52:17 -0600</pubDate>
      <guid isPermaLink="false">urn:uuid:36f2f2d1-4477-43d8-9fda-ba8d8e485b8e</guid>
      <link>http://blog.lathi.net/articles/2005/11/17/real-story-of-the-rogue-rootkit#comment-101</link>
    </item>
  </channel>
</rss>

