Hatin’ on DRM (and other things)

The latest version of SafeDisc (v4) installs its own Windows device driver, named “secdrv.sys”, which enables ring0 access to the application. This means that even if you do run your games as a limited account, the game and trojans and other malware might still have admin access.

This has opened up one potential security exploit already, see http://www.microsoft.com/technet/security/advisory/944653.mspx if you’re interested.

Also, most installers don’t set the correct permissions, so every user could change this to point at whichever executable you might want, which would then run at the next reboot. And it would run with full admin access.

For more information: http://en.wikipedia.org/wiki/SafeDisc

This entry was posted on Saturday, November 29th, 2008 at 4:18 pm and is filed under Ranty McRant. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.