Author |
Message |
Mtnchld
| Posted on Friday, November 04, 2005 - 04:08 pm: |
|
http://www.cnet.com/4520-6033_1-6376177.html?tag=nl.e501 On Monday, October 31, alert users discovered that Sony BMG is using copy-protected CDs to surreptitiously install its digital rights management technology onto PCs. You don't have to be ripping the CD, either--just playing it from your CD-ROM drive triggers the installation. The software installs itself as a root kit, which is a set of tools commonly used to make certain files and processes undetectable, and they're the favored tool of crackers who are, as Wikipedia puts it, attempting to "maintain access to a system for malicious purposes." In fact, root kits are often classified alongside Trojan horses. And Mark Russinovich, who created a root-kit detection utility and was one of the first to blog about the Sony intrusion, discovered another little gem when he tried to remove the DRM drivers. It broke his computer--disabling his CD drive. |
Buellzebub
| Posted on Friday, November 04, 2005 - 04:15 pm: |
|
here is the tool to remove it. http://updates.xcp-aurora.com/ |
Midknyte
| Posted on Friday, November 04, 2005 - 04:25 pm: |
|
the update does not remove it. the update un-obviates the files (removes the hiding schema that introduced a big freaking security hole). after this, I am now off the fence and have landed in the "other" yard. non-payed copies are wrong, but this is unforgivably wrong... |
Buellzebub
| Posted on Friday, November 04, 2005 - 04:43 pm: |
|
gotta agree with you midknyte. speak with your wallet to all the asshats that beleave they know whats best for the ignorant masses. sorry about the misleading post above... i didn't need to run the patch. i'm not sure if the digital rights management applies in canuckistan yet? |
Midknyte
| Posted on Friday, November 04, 2005 - 05:15 pm: |
|
nothing misleading about your response to apologize for - you didn't now... |
Mtnchld
| Posted on Friday, November 04, 2005 - 07:14 pm: |
|
Sad thing is- You don't have to be ripping the CD, either--just playing it from your CD-ROM drive triggers the installation.} |
Glitch
| Posted on Friday, November 04, 2005 - 07:30 pm: |
|
Ahhh...the blessed OS Linux... It's nice to have more than one OS option (Message edited by glitch on November 04, 2005) |
Midknyte
| Posted on Saturday, November 05, 2005 - 12:30 am: |
|
just playing it from your CD-ROM drive triggers the installation if you have auto-play enabled... do disable it! |
Reepicheep
| Posted on Saturday, November 05, 2005 - 09:40 am: |
|
I am in the information security profession, and as a professional in the field, this is un-*&^%$#@#-excusable. Its even worse for many games. And here is the terrible irony... this spyware *only * effects people that have the original CD! Once it has been ripped and put into an MP3, the thieves are not effected *at all*. So this, like most digital rights management scenarios, primarily hurts the paying customers. I don't know why I am more outraged, because they installed software on my computer without my permission, or because they are staggeringly stupid. Anyway, Midknyte is right. Go here to get "tweakUI" and install it. http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx Then launch it from the start menu, once it is up click down through MyComputer->Autoplay->drives and unselect all your CD's. |
Brad_buell
| Posted on Saturday, November 05, 2005 - 10:14 am: |
|
OK. I've unselected autoplay on both my CD drives. Now how do I play a Sony disk without installing their spyware. Also, is it possible to find out if you all ready have it(Sony spyware) on your computer? -Brad |
Reepicheep
| Posted on Saturday, November 05, 2005 - 01:43 pm: |
|
Fox news had another article about it. I believe it would automatically hide any files with a particular starting sequence of characters, $foo$xxxxx or something... I stopped buying sony stuff a long time ago over stuff like this. |
Midknyte
| Posted on Monday, November 07, 2005 - 11:17 am: |
|
Link to other links http://www.techdirt.com/articles/20051104/180213_F.shtml |
Scitz
| Posted on Monday, November 07, 2005 - 12:47 pm: |
|
Yes, Glitch it's time we all see the light and tell Microsoft and all these corporations where they can go. A lot of the Linux packages are easier to install and use now. Load it up on that old computer in the closet and see how you like it. Check out Fedora it's free. http://fedora.redhat.com/ I get most of my music from iTunes because it's cheaper. |
Midknyte
| Posted on Tuesday, November 08, 2005 - 04:32 pm: |
|
Lists of known CD's http://ukcdr.org/issues/cd/bad/ http://www.fatchuck.com/z3.html This is so messed up |
Midknyte
| Posted on Thursday, November 10, 2005 - 01:20 pm: |
|
Virus / Trojan writers are now exploiting Sony's Rootkit http://www.techdirt.com/articles/20051110/0814231_F.shtml |
Telewoodski
| Posted on Thursday, November 10, 2005 - 05:54 pm: |
|
http://www.cnn.com/2005/TECH/internet/11/10/sony.hack.reut/index.html getting worse for Sony, I was going to buy one of the new XBR TV's, but maybe now I'm not so sure. |
Midknyte
| Posted on Thursday, November 10, 2005 - 06:14 pm: |
|
They're legal department is out at the back shed smokin some bad weed too... Sony's EULA is worse than their rootkit http://www.boingboing.net/2005/11/09/sonys_eula_is_worse_.html EULA = End User License Agreement - the fine print & click thru's that are too verbose and intentionally confusing such that none of us pay attention to anymore... From the link: 1. If your house gets burgled, you have to delete all your music from your laptop when you get home. That's because the EULA says that your rights to any copies terminate as soon as you no longer possess the original CD. 3. If you move out of the country, you have to delete all your music. The EULA specifically forbids "export" outside the country where you reside. 5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm. 6. The EULA says Sony-BMG will never be liable to you for more than $5.00. That's right, no matter what happens, you can't even get back what you paid for the CD. 7. If you file for bankruptcy, you have to delete all the music on your computer. Seriously. There's more... follow the link... |
Midknyte
| Posted on Thursday, November 10, 2005 - 06:15 pm: |
|
Other EULA atrocities http://www.techdirt.com/articles/20051110/1412200_F.shtml |
Typeone
| Posted on Friday, November 11, 2005 - 10:18 am: |
|
Looks like that may end quick... Ooops! Sony sued over copy-protected CDs Sony BMG is facing three lawsuits over its controversial anti-piracy software. (Message edited by typeone on November 11, 2005) |
Chevysolid
| Posted on Friday, November 11, 2005 - 10:26 am: |
|
Don't know if this is the same one but here http://www.theregister.co.uk/2005/11/10/sony_sued_for_rootkit/ |
Mtnchld
| Posted on Friday, November 11, 2005 - 12:09 pm: |
|
Sony Music Sued Over Anti-Piracy Software Jonah Flicker and Amy Phillips report: In the slow and perhaps inevitable movement towards microchip implantation of the entire human race, Sony BMG Music just took the lead. According to the Washington Post, a class action lawsuit filed in Los Angeles Superior Court November 1 alleges that the label's anti-piracy software, installed in several recently released CDs, is harmful to computers. The suit claims that when a copy-protected CD is loaded onto a hard drive, it installs a hidden program known as a "rootkit," which not only keeps track of the computer's activity, but depletes the drive's resources in the process. So Sony is basically eating up your hard drive space while keeping track of all the porn you watch, just because you actually spent money on a My Morning Jacket CD. Thanks, guys. This is even better than getting the RIAA to sue us. The rootkit also makes the computer more susceptible to viruses. Sony falsely states that its copy-protection software can be easily removed, when in reality, getting rid of a rootkit can be damaging. Here's the crux of the suit, straight from the legal papers: "As a result of Sony's failure to disclose the true nature of the digital rights management (‘DRM') system it uses on its CDs, thousands of computer users have unknowingly infected their computers, and the computers of others, with this surreptitious rootkit. This rootkit has been responsible for conflicts within computer systems, crashes of systems, and other damage." The suit, which accuses Sony of "fraud, false advertising, trespass, and violation of state and federal statues prohibiting malware, and unauthorized computer tampering," claims that the suspect software has been included on certain Sony BMG Music CDs since this spring. Albums to watch out for include Amerie's Touch, My Morning Jacket's Z Kasabian's Kasabian, Neil Diamond's 12 Songs, Cassidy's I'm a Hustla, Kings of Leon's Aha Shake Heartbreak, and, appropriately, the Bad Plus' Suspicious Activity and the Coral's Invisible Invasion, among others. |
P0p0k0pf
| Posted on Friday, November 11, 2005 - 02:56 pm: |
|
http://www.cnn.com/2005/TECH/internet/11/10/sony.hack.reut/index.html Hmm.... |
Chevysolid
| Posted on Friday, November 11, 2005 - 03:55 pm: |
|
http://news.yahoo.com/s/ap/20051111/ap_on_hi_te/sony_copy_protection "temporarily suspend" They don't get it... |
Midknyte
| Posted on Sunday, November 13, 2005 - 05:53 am: |
|
Sony BMG faces digital-rights seige http://www.theregister.co.uk/2005/11/11/secfocus_sony_analysis/ |
Brad_buell
| Posted on Sunday, November 13, 2005 - 09:07 am: |
|
Is there a recent list of the 20 titles that have this software on it? Most articles only list Van Zant and The Bad Plus. What are the other 18? |
Jima4media
| Posted on Sunday, November 13, 2005 - 01:29 pm: |
|
The simple solution to all of this is - If you want to play music, Play Macintosh. |
Glitch
| Posted on Sunday, November 13, 2005 - 09:21 pm: |
|
http://news.com.com/Microsoft+will+wipe+Sonys+rootkit/2100-1002_3-5949041.html MicroSoft to the rescue? |
Jarhead
| Posted on Sunday, November 13, 2005 - 09:30 pm: |
|
Fedora...formerly known as RedHat....a great way to go. The first linux version that I ever got installed on a loptop trouble free. |
Bustybuell
| Posted on Sunday, November 13, 2005 - 10:28 pm: |
|
I use the latest version of Audio Cleaning Lab (cheap software). I have a good quality CD "Boom Box" Line out to Line In on my soundcard. Just hit play and Record what you hear. It is not as fast as ripping, obviously, but it cannot be, now or forever, protected. They will never be able to keep you from recording what goes to your speakers. NO WAY. I have ACL set to seperate tracks and convert to mp3's on the fly. Now I will wait for you quality police to say "It's not as good a quality" BS we are talking mp3's for FREE here. Wake Up, Duh!
|
Midknyte
| Posted on Monday, November 14, 2005 - 01:19 am: |
|
If you want to play music, Play Macintosh. Nope, Sony has also included Apple attacking copy protection on their CD's as well. It was an attempt to keep Sony / BMG music from being transferable to ipods. |
Midknyte
| Posted on Monday, November 14, 2005 - 01:29 am: |
|
Is there a recent list of the 20 titles that have this software on it? Yes, scroll back up a bit... http://www.badweatherbikers.com/cgibin/discus/show.cgi?tpc=4062&post=543160#POST 543160 |
Jima4media
| Posted on Monday, November 14, 2005 - 04:28 pm: |
|
Midknyte, I would just avoid Sony BMG Microsoft products all together for awhile, while continuing to support Apple iTunes, Macintosh and iPod, which don't have these virus problems. The next version of Mac OS X - Leopard, will play Mac OS, Windows, and Linux in protected windows, allowing you to use all applications in a safe protected environment and on Intel hardware from Apple. Jim (Message edited by jima4media on November 14, 2005) |
Bustybuell
| Posted on Monday, November 14, 2005 - 05:07 pm: |
|
Just D/L free music until they go out of business. Don't hold your breath for Mac OS on intel hardware. I have pre-(cracked)-release version, it works as good as any pre-release. But . . . It will never happen from Apple. The project is for different reasons than to compete against Mr Bill. Leopard will just Meow. |
Bomber
| Posted on Monday, November 14, 2005 - 05:21 pm: |
|
I dunno -- is it just me, or is computer doom and gloom a fairly fitting treatment for someone that plays Neil Diamond . . . . . just wonderin |
Buellzebub
| Posted on Tuesday, November 15, 2005 - 11:28 am: |
|
interesting read... from one of the guys who outed sony http://www.sysinternals.com/Blog/ |
Jlnance
| Posted on Monday, November 21, 2005 - 06:02 pm: |
|
The state of Texas doesn't seem amused with Sony's actions. http://www.groklaw.net/article.php?story=20051121153750666 |
|