Author Topic: Those pesky Sony/BMG CDs  (Read 14008 times)

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Those pesky Sony/BMG CDs
« on: November 03, 2005, 01:05:00 pm »
Are real trouble!  Lets hope this latest flap hits them really hard where it counts in the bottom line.
 
  WaPo overview
T.Rex

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Re: Those pesky Sony/BMG CDs
« Reply #1 on: November 03, 2005, 01:10:00 pm »
The part of this thats priceless is that not only does the software one has to install in order to listen to the cd leave ones's Windows system open for potential viruses, hackers, etc.  It actually slows the system down in order to keep track of when you pop a Sony/BMG CD into listen to it.
T.Rex

vansmack

  • Member
  • Posts: 19722
Re: Those pesky Sony/BMG CDs
« Reply #2 on: November 03, 2005, 01:25:00 pm »
Once the gig was up, Sony released an update to reveal the hidden files.  Note that is doesn't add an uninstall feature though.  Amazing.
 
 http://www.washingtonpost.com/wp-dyn/content/article/2005/11/02/AR2005110202362.html
27>34

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Re: Those pesky Sony/BMG CDs
« Reply #3 on: November 03, 2005, 01:31:00 pm »
Quote
Originally posted by vansmack:
  Once the gig was up, Sony released an update to reveal the hidden files.  Note that is doesn't add an uninstall feature though.  Amazing.
 
  http://www.washingtonpost.com/wp-dyn/content/article/2005/11/02/AR2005110202362.html
and requires the use of Internet Explorer to run... and doesn't fix the potential security holes.  
 
 Another priceless quote about this software.
 
 But according to Mikko Hypponen, director of research for Finnish antivirus company F-Secure Corp., users who want to remove the program may not do so directly, but must fill out a form on Sony's Web site, download additional software, wait for a phone call from a technical support specialist, and then download and install yet another program that removes the files.
 
 Hypponen agreed that Sony's software could help hackers circumvent most antivirus products on the market today. He added that installing the Sony program on a machine running Windows Vista -- the beta version of the next iteration of Microsoft Windows -- "breaks the operating system spectacularly."
 
  More info from WaPo
 
 Considering what it's going to cost Sony to handle all these support requests they'll wont break even on the sale of these CDs.
T.Rex

vansmack

  • Member
  • Posts: 19722
Re: Those pesky Sony/BMG CDs
« Reply #4 on: November 03, 2005, 01:43:00 pm »
I laughed at that too, but mostly because he said "spectacularly."
 
 The truth is, I haven't found too many programs that are stable on Windows Vista.
27>34

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Re: Those pesky Sony/BMG CDs
« Reply #5 on: November 03, 2005, 02:00:00 pm »
and it gets better   :D  
 
 World of Warcraft hackers using Sony BMG rootkit
 Published: 2005-11-03
 
 
 Want to cheat in your online game and not get caught? Just buy a Sony BMG copy protected CD.
 
 World of Warcraft hackers have confirmed that the hiding capabilities of Sony BMG's content protection software can make tools made for cheating in the online world impossible to detect. The software--deemed a "rootkit" by many security experts--is shipped with tens of thousands of the record company's music titles.
 
 Blizzard Entertainment, the maker of World of Warcraft, has created a controversial program that detects cheaters by scanning the processes that are running at the time the game is played. Called the Warden, the anti-cheating program cannot detect any files that are hidden with Sony BMG's content protection, which only requires that the hacker add the prefix "$sys$" to file names.
 
 Despite making a patch available on Wednesday to consumers to amend its copy protection software's behavior, Sony BMG and First 4 Internet, the maker of the content protection technology, have both disputed claims that their system could harm the security of a Windows system. Yet, other software makers that rely on the integrity of the operating system are finding that hidden code makes security impossible.
 
 http://www.securityfocus.com/brief/34
T.Rex

Driveway

  • Member
  • Posts: 619
Re: Those pesky Sony/BMG CDs
« Reply #6 on: November 03, 2005, 02:44:00 pm »
Glad I never played my Foo Fighters in my cd-rom.

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Re: Those pesky Sony/BMG CDs
« Reply #7 on: November 10, 2005, 10:58:00 am »
EFF took the time to read the 3,000 word end-user license agreement (aka "EULA") that comes with these disc...
 
 http://www.eff.org/deeplinks/archives/004145.php
 
 Now the Legalese Rootkit: Sony-BMG's EULA
 November 09, 2005
 
 If you thought XCP "rootkit" copy-protection on Sony-BMG CDs was bad, perhaps you'd better read the 3,000 word (!) end-user license agreement (aka "EULA") that comes with all these CDs.
 
 First, a baseline. When you buy a regular CD, you own it. You do not "license" it. You own it outright. You're allowed to do anything with it you like, so long as you don't violate one of the exclusive rights reserved to the copyright owner. So you can play the CD at your next dinner party (copyright owners get no rights over private performances), you can loan it to a friend (thanks to the "first sale" doctrine), or make a copy for use on your iPod (thanks to "fair use"). Every use that falls outside the limited exclusive rights of the copyright owner belongs to you, the owner of the CD.
 
 Now compare that baseline with the world according to the Sony-BMG EULA, which applies to any digital copies you make of the music on the CD:
 
    1. If your house gets burgled, you have to delete all your music from your laptop when you get home. That's because the EULA says that your rights to any copies terminate as soon as you no longer possess the original CD.
 
    2. You can't keep your music on any computers at work. The EULA only gives you the right to put copies on a "personal home computer system owned by you."
 
    3. If you move out of the country, you have to delete all your music. The EULA specifically forbids "export" outside the country where you reside.
 
    4. You must install any and all updates, or else lose the music on your computer. The EULA immediately terminates if you fail to install any update. No more holding out on those hobble-ware downgrades masquerading as updates.
 
    5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm.
 
    6. The EULA says Sony-BMG will never be liable to you for more than $5.00. That's right, no matter what happens, you can't even get back what you paid for the CD.
 
    7. If you file for bankruptcy, you have to delete all the music on your computer. Seriously.
 
    8. You have no right to transfer the music on your computer, even along with the original CD.
 
    9. Forget about using the music as a soundtrack for your latest family photo slideshow, or mash-ups, or sampling. The EULA forbids changing, altering, or make derivative works from the music on your computer.
 
 
 So this is what Sony-BMG thinks we should be allowed to do with the music on the CDs that we purchase from them? No word yet about whether Sony-BMG will be offering a "patch" for this legalese rootkit. I'm not holding my breath.
T.Rex

HoyaSaxa03

  • Member
  • Posts: 7053
Re: Those pesky Sony/BMG CDs
« Reply #8 on: November 10, 2005, 11:35:00 am »
did the new my morning jacket CD have this issue?  it's an ATO / RCA / BMG / Sony release, and i ripped it on my PC but didn't notice anything like this
(o|o)

ggw

  • Member
  • Posts: 14237
Re: Those pesky Sony/BMG CDs
« Reply #9 on: November 10, 2005, 11:37:00 am »
Quote
Originally posted by HoyaParanoia:
  did the new my morning jacket CD have this issue?  it's an ATO / RCA / BMG / Sony release, and i ripped it on my PC but didn't notice anything like this
The MMJ disc uses a different type of copy protection.
 
 But that new Celine Dion disc you just bought is totally infected.
 
 http://www.eff.org/deeplinks/archives/004144.php

cubenoise

  • Member
  • Posts: 5
Re: Those pesky Sony/BMG CDs
« Reply #10 on: November 10, 2005, 03:15:00 pm »
I tried the MMJ cd at work and the Sony/BMG EULA complete with "the software" came up immediately.  
 
 When I tried it on my laptop to see what I got, nothing came up at all.  I have itunes working on that machine; not sure what difference it makes if any, but no message all the same.

brennser

  • Member
  • Posts: 3758
Re: Those pesky Sony/BMG CDs
« Reply #11 on: November 10, 2005, 03:17:00 pm »
Quote
Originally posted by HoyaParanoia:
  did the new my morning jacket CD have this issue?  it's an ATO / RCA / BMG / Sony release, and i ripped it on my PC but didn't notice anything like this
ripped on home and work pcs just fine

vansmack

  • Member
  • Posts: 19722
Re: Those pesky Sony/BMG CDs
« Reply #12 on: November 10, 2005, 03:24:00 pm »
A suit was filed in Europe yesterday.
27>34

walkonby

  • Guest
Re: Those pesky Sony/BMG CDs
« Reply #13 on: November 10, 2005, 03:26:00 pm »
soon . . . eight tracks and cassettes, re-rule the world.

kosmo vinyl

  • Administrator
  • Member
  • Posts: 15221
    • Hi-Fi Pop
Re: Those pesky Sony/BMG CDs
« Reply #14 on: November 10, 2005, 04:14:00 pm »
Quote
Originally posted by walkonby:
  soon . . . eight tracks and cassettes, re-rule the world.
and those can't be copied or ripped?
 
 no soon record companies will realize that not all record buyers are criminals...
T.Rex