Another MS DRM balls-up
Results 1 to 8 of 8

Thread: Another MS DRM balls-up

  1. #1
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190

    Another MS DRM balls-up

    M$ Windoze XP, Vista and Server 2003 ship with a nice little file called "secdrv.sys"

    What is it for?.......... to provide DRM to certain games providers.

    What does it do? ............ exposes your system to being owned, what else did you think given M$'s track record At that is even if you don't play the particular games it is intended to protect.

    More here:

    http://www.computerworld.com/action/...ce=rss_topic85

    There isn't a patch for it yet.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  2. #2
    Right turn Clyde Nokia's Avatar
    Join Date
    Aug 2003
    Location
    Button Moon
    Posts
    1,696
    Dodgy thing to patch...balls that up and billions of folks won't be able to play safedisc protected games..imagine the headlines then....

    Sounds like it's not directly MS's fault though.....more indirectly for not properly assessing the file before they included it.
    Drugs have taught an entire generation of kids the metric system.

    http://tazforum.**********.com/

  3. #3
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Sounds like it's not directly MS's fault though.....more indirectly for not properly assessing the file before they included it.
    I agree, it is a "sin of omission" rather than "commission" They bought in the technology.

    I have to admit that when you do that, there is a very great temptation to rely on the QA and development methodologies of your supplier.

    Another mitigating argument is that it has been out for 6 years (?) and has only just been discovered, so it can't have been that obvious.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  4. #4
    Junior Member
    Join Date
    Dec 2007
    Posts
    12
    Quote Originally Posted by nihil
    I agree, it is a "sin of omission" rather than "commission" They bought in the technology.

    I have to admit that when you do that, there is a very great temptation to rely on the QA and development methodologies of your supplier.

    Another mitigating argument is that it has been out for 6 years (?) and has only just been discovered, so it can't have been that obvious.
    Had it not been included, you would have hundreds of gamers complaning they couldnt play their games, in the end game publishers would ship the game with the driver, then we would be having this post just s/microsoft/EA.

    The exploit takes advantage of the IOCTL, METHOD_NEITHER its a good place to start looking for exploits in device drivers, as there is no check on the validity of the address or buffer, the ddk, strongely recommends against using this method, and explains that there is no error checking, and also suggests the functions to help you with this, so macrovision ignored all this and did it anyway, the question still remains did windows have access to the macrovision code(as im sure safedisk technology is something they want to remain as secret as possible), im pretty sure the blame lies with macrovision here.

  5. #5
    Senior Member
    Join Date
    Oct 2003
    Location
    MA
    Posts
    1,053
    I noticed that a long time ago. I dont think it came with the original xp but with sp2, i THINK... Im not sure why they decided to incorporate it into the OS and include the safedisk driver since there are many games that deploy their protections as they install. Safe disk used to be the same...

  6. #6
    Senior Member Ouroboros's Avatar
    Join Date
    Nov 2001
    Location
    Superior, WI USA
    Posts
    628
    I couldn't be a next-gen gamer if I wanted to, considering my hardware...but hey...try a little http://www.gametap.com love, and be happy.

    I will whip your ass in Street Fighter Alpha 3.

    O
    "entia non sunt multiplicanda praeter necessitatem"

    "entities should not be multiplied beyond necessity."

    -Occam's Razor


  7. #7
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    the question still remains did windows have access to the macrovision code(as im sure safedisk technology is something they want to remain as secret as possible), im pretty sure the blame lies with macrovision here.
    The whole thing strikes me as rather strange. I would expect a game to ship with all the software necessary to play it.

    Also, I don't see the benefit to Microsoft. By including this code they have accepted responsibility for something they did not own and did not develop.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  8. #8
    Senior Member
    Join Date
    Oct 2003
    Location
    MA
    Posts
    1,053
    Quote Originally Posted by nihil
    Also, I don't see the benefit to Microsoft. By including this code they have accepted responsibility for something they did not own and did not develop.
    My guess would be money, money, and money. They probably have a deal with them and get paid to include it..

Similar Threads

  1. SCO Sucks Balls
    By albn in forum AntiOnline's General Chit Chat
    Replies: 2
    Last Post: July 25th, 2004, 11:24 AM
  2. SCO Sucks Balls
    By alittlebitnumb in forum AntiOnline's General Chit Chat
    Replies: 3
    Last Post: January 12th, 2004, 01:32 PM
  3. Anyone know about chocolate BALLS?
    By txwebman in forum AntiVirus Discussions
    Replies: 13
    Last Post: April 2nd, 2002, 06:17 AM
  4. windoze "smart" file extensions & mouse balls
    By sumdumguy in forum AntiOnline's General Chit Chat
    Replies: 5
    Last Post: March 16th, 2002, 06:12 AM
  5. MEMO to all.......
    By intruder in forum AntiOnline's General Chit Chat
    Replies: 14
    Last Post: February 27th, 2002, 03:38 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides