Researchers Find Flaw in RSA Authentication

University of Michigan scientists have found they could foil RSA authentication by varying the voltage supply to the holder of the “private key,” which would be the consumer’s device in the case of copy protection and the retailer or bank in the case of Internet communication. It is highly unlike...

Macrovision SafeDisc secdrv.sys Crafted METHOD_NEITHER IOCTL Local Overflow

Macrovision SafeDisc, a copy-protection application for Microsoft Windows, is installed on the remote host. The 'SECDRV.SYS' driver included with the version of SafeDisc currently installed on the remote host enables a local user to gain SYSTEM privileges using a specially crafted argument to the...

Tips copied page of the copy-prohibited word-vulnerability and early warning-the black bar safety net

We when the Internet to see like the text and pictures you want to copy is saved to the local hard drive slowly appreciate, but some sites in order to protect their content on the use of some technical means so that we can not copy. In some web pages, use the mouse drag method, can not select the...

Copy protection scheme SafeDisc allows privilege escalation

I have a found a serious flaw in the well-known and widely deployed copy protection scheme SafeDisc. The issues arrises from the how the installation of the driver secdrv.sys is managed. When installed, the associated driver service is assigned the SECHANGECONFIG flag, which means that any user i...