WoW and sony - let's d/l a patch so we can't cheat!

[Gadi Evron <ge () linuxbox org>]

Fergie wrote:
> Via SecurityFocus.
>
> [snip]
>
> Want to cheat in your online game and not get caught? Just buy a Sony BMG copy protected CD.
>
> World of Warcraft hackers have confirmed that the hiding capabilities of Sony BMG's content protection software can make tools made 
> for cheating in the online world impossible to detect. The software--deemed a "rootkit" by many security experts--is shipped with 
> tens of thousands of the record company's music titles.
>
> Blizzard Entertainment, the maker of World of Warcraft, has created a controversial program that detects cheaters by scanning the 
> processes that are running at the time the game is played. Called the Warden, the anti-cheating program cannot detect any files that 
> are hidden with Sony BMG's content protection, which only requires that the hacker add the prefix "$sys$" to file names.
>
> Despite making a patch available on Wednesday to consumers to amend its copy protection software's behavior, Sony BMG 
> and First 4 Internet, the maker of the content protection technology, have both disputed claims that their system could harm 
> the security of a Windows system. Yet, other software makers that rely on the integrity of the operating system are finding 
> that hidden code makes security impossible.

I don't see how this is a Bad Thing. Lacking proper functionality people 
are bound to come up with their own fu??ed up solutions.

I applaud Sony for not waiting for Windows to become more secure. The 
core system being insecure, naturally any patch is also vulnerable. This 
is an advancement in software protection and that needs to be admired, 
even if they did kind of did it with a lot of stupidity.

Good work, no finish.

Patch for people to install so they can't cheat/ Is that a joke?
This is funsec!

        Gadi.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.