Experts raise alarm on Sony software Jim Finkle in Boston | August 29, 2007 SOFTWARE included with high-end memory sticks sold by Sony can make personal computers vulnerable to attack by computer hackers, according to researchers with two internet security firms. Sony's MicroVault USB memory stick and fingerprint reader includes software that creates a hidden directory on the computer's hard drive, researchers with Finnish security software maker F-Secure has reported in its company blog. Such software that hides itself, which is known as a root kit, leaves room for hackers to secretly infect personal computers, they said. Software that is installed on such hidden drives is not only invisible to the human eye; some types of computer security software are unable to detect viruses and other types of so-called malware, or malicious software, stored on them. F-Secure's blog posting said it attempted to contact Sony before alerting the public about the software, but the company had not replied. Sony spokesman Chisato Kitsukawa said he could not immediately comment on the situation. Researchers with McAfee recently said they had confirmed the vulnerability described by F-Secure. "The apparent intent was to cloak sensitive files related to the fingerprint verification feature included on the USB drives," McAfee spokesman Dave Marcus said. "However, software creators apparently did not keep the security implications in mind. The application could be used to hide arbitrary software, including malicious software." This is not the first time F-Secure has found Sony software installing hidden directories on the drives of its customers. In 2005 there was a similar situation involving the electronics maker's digital rights management software, security experts say.
