I'm trying to implement a DRM based around SDCard's serial number in Windows CE. There are a few question I'm concerning.
Can someone create a driver that reports a fictitious serial number? Absolutely. You can create a new SD driver to do whatever you like for any specific command.