Monday, January 29, 2007

Vista DRM Cracked by Security Researcher. Vista DRM Cracked by Security Researcher. An anonymous reader writes  "Security researcher Alex Ionescu claims to have successfully bypassed the much discussed DRM protection in Windows Vista, called 'Protected Media Path' (PMP), which is designed to seriously degrade the playback quality of any video and audio running on systems with hardware components not explicitly approved by Microsoft. The bypass of the DRM protection was in turn performed by breaking the Driver Signing / PatchGuard protection in the new operating system. Alex is now quite nervous about what an army of lawyers backed by draconian copyright laws could do to him if he released the details, but he claims to be currently looking into the details of safely releasing his details about this at the moment though." [Slashdot] 3:17:58 PM

Study Finds IE7 + EV SSL Won't Stop Phishing. Study Finds IE7 + EV SSL Won't Stop Phishing. An anonymous reader writes  "Stanford University and Microsoft Research have published a study that claims that the new Extended Validation SSL Certificates in IE7 are ineffective (PDF). The study, based on user testing, found that EV certificates don't improve users' ability to detect attacks, that the interface can be spoofed, and that training users actually decreases their ability to detect attacks. The study will be presented at Usable Security 2007 next month, which is a little late now that the new certificates are already being issued."  [Slashdot] 3:11:05 PM

© Copyright 2007 Paul Hardwick. Last update: 2/5/07; 2:43:43 PM.