Campaign against Sony's DRM technology

[apcmiller]

Customers of Amazon.com have launched an informal campaign against Sony's decision to use a particular type of DRM on a music CD.

Over the last three days over 50 people have posted reviews on the Amazon.com Web site warning people against buying a Van Zant CD, called "Get Right with the Man".

"Don't put this in your PC," warned one reviewer. "Will damage your computer, may cost hundreds of dollars to repair," said another. "I won't buy media when [i'm] treated like a criminal," a third declared.

Amazon reviewer Chris Petersen explained that the software installed by the CD cannot easily be uninstalled.

"This CD will install dangerous software on your computer that is very, very difficult to remove. This software will reduce the performance of your computer even when you are not playing this CD," said Petersen.

Some postings called on Amazon customers to stop buying Sony products altogether, to discourage them from putting such software in future CDs.

"BOYCOTT SONY. This CD will destroy your computer, and it won't even play in a lot of car and stereo CD players because of this horrible DRM," said R. Johnson.

Mikko Hyppönen, the director of antivirus research at F-Secure, which has been researching potential security issues arising from this copy-restricted CD, told ZDNet UK that Sony's strategy could drive customers towards music download services, including illegal sites.

"I think the outcome of this is that Sony might be alienating more and more customers from buying CDs. For example, I know someone who always buys CDs and owns close to 1,000 CDs, but this has changed his mind. He has now started downloading music files from BitTorrent and P2P sites. He said to me, 'What's the points of buying a CD if you get extra grief.'"

The copy-restriction technologies on the Van Zant CD have not only been criticised for being difficult to remove, but could pose a security risk to computers, according to researchers. On Wednesday, Sony BMG's technology partner, First 4 Internet, said it has released a patch to antivirus companies to tackle this potential security problem.

ZDNet News

[Myrak]

Horrible shit. I'd comment further but most everything has been said here ->

http://www.slyck.com/forums/viewtopic.php?t=15729 (huge discussion of it there already, Slyck users have been informing news sites of this story for a couple of days now =D)

[apcmiller]

After taking a drubbing from computer enthusiasts, Sony BMG Music Entertainment has released a software patch that removes controversial cloaking technology found in copy protection software the company has been shipping with some of its CDs. Critics had slammed the software for being invasive and extremely difficult to remove because it uses some of the same "rootkit" cloaking techniques normally found in spyware or viruses.

Rootkit software uses a variety of techniques to gain access to a system and then cover up any traces of its existence so that it cannot be detected by system tools or antivirus software.

The patch, which was posted to Sony's Web site on Wednesday, was posted to "alleviate any concerns that users may have about the program posing potential security vulnerabilities," Sony said in a statement. By installing the patch, users will not remove the copy protection software, called XPC, but they will make it visible to system tools and antivirus software.

Quiet Debut

XCP has been shipping on some Sony music CDs since early 2005. Licensed by Sony from a Banbury, U.K., company called First 4 Internet, XCP prevents users from making more than three backup copies of any XCP-protected CD. Sony will not say how many of its CDs use the software, but the hobbyist site Slashdot has compiled a working list.

Critics had complained that because the software was virtually impossible to detect, hackers might somehow take advantage of it in order to hide their own malicious code from antivirus software. They had also slammed Sony for not adequately informing users of how it worked and for making it extremely difficult to remove XCP.

First 4 has described such concerns as "unnecessary."

In addition to writing the patch posted to Sony's Web site, First 4 has given software to antivirus vendors so that their products can now detect the XCP software, said First 4's CEO Mathew Gilliat-Smith.

Revisions in the Works

First 4 is also in the process of developing a new version of XCP that will not use the controversial cloaking techniques, he added.

"We feel it's sensible to allay any unnecessary fears," Gilliat-Smith said in a Thursday interview.

Gilliat-Smith said that the cloaking techniques were used in order to keep one step ahead of illegal copiers. "This is content protection software. One of the additional measures is to try and dissuade someone who is aggressively trying to circumvent the protections."

In this case, however, First 4 and Sony went too far, according to Mark Russinovich, the computer expert who first revealed how XCP works. "Not only had Sony put software on my system that uses techniques commonly used by malware to mask its presence, the software is poorly written," he wrote in a Web log posting. "Worse, most users that stumble across the cloaked files... will cripple their computer if they attempt the obvious step of deleting the cloaked files."

PcWorld News