Tuesday, February 8, 2011

Sony Turned To Rootkits Again?

Sony’s problems with PlayStation 3 began when its root keys were discovered and published in the Internet. Today the company is making another effort to fight against jailbreakers – the rumors are that Sony is using the latest firmware update to upload rootkit on to the console in order to spy on users.

In fact, it seems like the troubles of 2005 are all over again. 6 years ago Sony tried to curb music piracy of its albums, encoding the CDs with the infamous SunnComm/MediaMaxx technology, which was highly questionable under law. Actually, the mentioned technology installed a rootkit on to users’ PCs, unable to be detected by any anti-virus and anti-spyware software. Once this was discovered in the technology, virus writers simply hid their malware in rootkits and anti-virus software had no power against it. In other words,

Sony’s protections schemes went too far, which led to litigation in many countries. Finally, by 2007, the lawsuits against the company were settled.

Now the situation is similar: after the root keys to Sony’s PS3 had been posted online by a user nicknamed GeoHot, it became clear that games not authorized by the company can now be played. The company required that the tools used to find the root keys be handed over, but the user said it makes no sense because the keys are now public.

Although it seemed like there’s little Sony can do about it, it was wrong. CNet suggested that the company has been distributing a new firmware update, which is reported to contain rootkit technology, again. It would spy on users’ consoles to make sure they are playing only authorized games. Meanwhile, the report of CNet mentions that Sony has yet to activate this code.

If it is really so, this could cause more legal problems for the company. First of all, the very idea that some piece of software could spy on gamers will raise several legal privacy concerns. So far it is doubtful that such technology would be legal in the United States. Meanwhile, Canada has even tougher privacy laws, which also decreases the chances of such scheme being legal. By the way, privacy concerns became a huge problem for the company in Canada 6 years ago.

Actually, it’s really quite striking that the company might even consider choose this way again. If Sony really decides to try this, it would have to go over privacy legislation in every country to ensure it isn’t breaking any laws, at the very least.

No comments: