viodentia
Joined: 23 Aug 2006
Posts: 1
|
 Posted:
Wed Aug 23, 2006 1:39 am Post subject:
Is Microsoft's DRM implementation criminally negligent? |
|
|
It's a common recommendation in security-related programming that secrets must not be left unencrypted in memory.
Yet, Microsoft's individualization implementation leaves vital secrets - the ECC public/private key pair unprotected in the stack frame when calling into system DLL.
Worse, it has no checks for the trivial interception of these DLL functions, which is widespread industry practice (including the Detours package, provided by Microsoft itself)
Discussion on a program which exploits this flaw on WM10 and WM11 TAP can be found on distinct forum
http://forum.doom9.org/showthread.php?t=114916
I'm sure that Microsoft will add a minimal level of modification to prevent this simple example exploit, but there are many other distinct weaknesses in the code.
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in
