Macs Not Totally Immune to Sony Spyware

Summary:It looks like I may have spoken too soon in my article on the Mac being immune to the Sony Rootkit—Advantage Macintosh.

It looks like I may have spoken too soon in my article on the Mac being immune to the Sony Rootkit—Advantage Macintosh.
On Macintouch Darren Dittrich reports that Sony's DRM software targets Macs too. Digging into the "enhanced" content on the disk, he found a Start.app that, when run, shows a license agreement, then asks you for an admin password. On entering this, it installs two kernel extensions, PhoenixNub1.kext and PhoenixNub12.kext.

Note that these aren't the rootkits that infect Windows PCs -- Sony's Mac crippleware comes from a different vendor called Sunncomm.

Dittrich reveals that the Sony EULA that he agreed to indicates that they will be installing software, so read those agreements and question anything asking you to login as an admin. Caveat emptor.

The good news is that this is apparently not the same technology used in the recent Windows rootkits (made by XCP), but rather a Mac-aware DRM codebase developed by SunnComm. And the second main difference between the Windows and Mac versions of Sony's Spyware is that it doesn't automatically install on Mac OS X.

I also reported on the PowerPage that Copy Control discs carry their own Mac OS 9 player, so watch out for that too. Keep an eye out for CDs that use the Copy Control trojan and avoid them like the plague. (Thanks Boing Boing)

Topics: Apple

About

Jason D. O'Grady developed an affinity for Apple computers after using the original Lisa, and this affinity turned into a bona-fide obsession when he got the original 128 KB Macintosh in 1984. He started writing one of the first Web sites about Apple (O'Grady's PowerPage) in 1995 and is considered to be one of the fathers of blogging.... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.