Sony Customer Care

R. · 11 Nov 2005, 23:31

This actually is old news, but this could be 2005's hottest story.

Sony has been found to install illegal Trojan-horse-based digital restrictions management (DRM) technology that installs itself as a rootkit on Windows PCs.

People who purchase certain Sony Music CDs are most likely subject to this rootkit - camouflaged as a CD player software - being installed on their machines. According to Sysinternals' Mark Russinovich the kit installs itself in hidden directories and attempts to mask its existence as "Essential System Tools". For 2006, Sony is planning to use this software for Windows and MacOS in Europe for "copy protection" purposes too. In the meantime, the first variations of malicious software have been found to utilize the rootkit technology.

Here's more info and details: Microsoft 'Concerned' by Sony DRM.

Thanks, Sony.

Oh ... just to quote Chris' blog again:

Quote:

Originally Posted by Chris

"I wouldn't touch any Sony BMG CD with a six foot barge pole."

Chris · 11 Nov 2005, 23:55

As an addendum to R's post:

1. If you do have the DRM kit installed, Sony have a form you can fill out to receive uninstall instructions. Clickety Click There is also a patch availble for download however you should USE THIS PATCH AT YOUR OWN RISK Sony have NOT i repeat NOT fully tested this patch. i have just spoken to Microsoft UK and they are refusing outright to certify the patch as safe for use on windows.

2. If you purchase a CD, you own the cd, you do NOT merely license the music. Sony DRM license agreement changes this.
Clickety Click for more on this

3. To find out what CD's are known to be infected and how to spot dodgy CD's Clickety Click

And finally, ignore what Sony say about you not being able to play your CD's on the computer if they have this kit and you don't install it. There are ways around this

EDIT> 4. The software that Sony installs also regularly contacts the Sony website (bypassing any firewalls you run) to check for updating info adn send Sony information about what CD you have been playing.

R. · 12 Nov 2005, 00:07

Quote:

Originally Posted by Chris

EDIT> 4. The software that Sony installs also regularly contacts the Sony website (bypassing any firewalls you run) to check for updating info adn send Sony information about what CD you have been playing.

Here's more technical info on the "Phoning Home Feature" and Sony's patch:
More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home

R. · 12 Nov 2005, 14:23

R. · 13 Nov 2005, 00:41

http://news.bbc.co.uk/2/hi/technology/4430608.stm

Pudding · 13 Nov 2005, 12:12

Seems Microsoft are going to sort it out Click ME

Pud

Chris · 16 Nov 2005, 20:48

Sony, it would seem, have a lot of DRM enabled CD's to try and shift!

A lass i know is at a Sony party this evening and they are giving the guests goodie bags containing several free DRM CD's.

The plan has backfired as several people haev made a point of opening the case, removing the CD, putting a beer mat in the case and then using the CD as a coaster!! The Sony people are not impressed!

R. · 16 Nov 2005, 21:55

http://cp.sonybmg.com/xcp/

Chris · 18 Nov 2005, 14:07

Well, it looks like those nice people at Sony are up to their necks in brown smelly stuff!!

In America there was a DVD hacker known by the alias of DVD Jon who was prosecuted for breaking the DRM protection on DVD's. He used to write open source software linked to this. It wuld appear Sony's rootkit consists of his code and some Apple code mixed together. both code samples were used without permission and in breach of license terms.

As Sony are so keen on prosecuting people for breaching copyright (file sharing) based on the number of people they have sent the file to, one wonders how big a prosecution they will face for sending thousands adn thousands of people stolen copyrighted material!!

R. · 19 Nov 2005, 00:09

Looks like the copy protection is using unlicensed code. Honi soit qui mal y pense.

Usenet, anybody?

And finally, here's a very interesting viewpoint.

11 Nov 2005, 23:55	#2
Chris Mega Loafer Join Date: 14.04.2002 Location: Somewhere in the real world. Posts: 7,527	As an addendum to R's post: 1. If you do have the DRM kit installed, Sony have a form you can fill out to receive uninstall instructions. Clickety Click There is also a patch availble for download however you should USE THIS PATCH AT YOUR OWN RISK Sony have NOT i repeat NOT fully tested this patch. i have just spoken to Microsoft UK and they are refusing outright to certify the patch as safe for use on windows. 2. If you purchase a CD, you own the cd, you do NOT merely license the music. Sony DRM license agreement changes this. Clickety Click for more on this 3. To find out what CD's are known to be infected and how to spot dodgy CD's Clickety Click And finally, ignore what Sony say about you not being able to play your CD's on the computer if they have this kit and you don't install it. There are ways around this EDIT> 4. The software that Sony installs also regularly contacts the Sony website (bypassing any firewalls you run) to check for updating info adn send Sony information about what CD you have been playing.

12 Nov 2005, 14:23	#4
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179

13 Nov 2005, 00:41	#5
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	http://news.bbc.co.uk/2/hi/technology/4430608.stm

13 Nov 2005, 12:12	#6
Pudding I'm A Prize Fight Lover... Join Date: 22.10.2003 Location: New Zealand Posts: 5,532	Seems Microsoft are going to sort it out Click ME Pud

16 Nov 2005, 20:48	#7
Chris Mega Loafer Join Date: 14.04.2002 Location: Somewhere in the real world. Posts: 7,527	Sony, it would seem, have a lot of DRM enabled CD's to try and shift! A lass i know is at a Sony party this evening and they are giving the guests goodie bags containing several free DRM CD's. The plan has backfired as several people haev made a point of opening the case, removing the CD, putting a beer mat in the case and then using the CD as a coaster!! The Sony people are not impressed!

16 Nov 2005, 21:55	#8
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	http://cp.sonybmg.com/xcp/

18 Nov 2005, 14:07	#9
Chris Mega Loafer Join Date: 14.04.2002 Location: Somewhere in the real world. Posts: 7,527	Well, it looks like those nice people at Sony are up to their necks in brown smelly stuff!! In America there was a DVD hacker known by the alias of DVD Jon who was prosecuted for breaking the DRM protection on DVD's. He used to write open source software linked to this. It wuld appear Sony's rootkit consists of his code and some Apple code mixed together. both code samples were used without permission and in breach of license terms. As Sony are so keen on prosecuting people for breaching copyright (file sharing) based on the number of people they have sent the file to, one wonders how big a prosecution they will face for sending thousands adn thousands of people stolen copyrighted material!!

19 Nov 2005, 00:09	#10
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	Looks like the copy protection is using unlicensed code. Honi soit qui mal y pense. Usenet, anybody? And finally, here's a very interesting viewpoint.