Sony pleads innocent in latest rootkit fiasco

TalkBack 5 of 16:

Next »

« Previous

• Thread View
• Flat View

No security was gained

It was probably a poor attempt at preventing reverse engineering - and we know that preventing reverse engineering of stuff that gets put on a hard drive is a pretty pointless task.

Which probably means the encryption and security protocols they used were weak - good encryption only demands that the private key be kept a secret, not the whole protocol.

Today's most secure protocols are also the most public: They rely only on the private key being a secret, not on the protocol being a secret.

What they should have done was to keep the private key on the hardware itself - then they wouldn't need to try to hide their software.

You're right, security through obscurity does not work. They need to use encryption and time tested security techniques, not invent their own stuff.

Posted by: CobraA1   Posted on: 09/01/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Email Security and Archiving - Clearer in the Cloud Google The time is NOW for businesses and organizations of all sizes to implement ... Download Now