Jump to content

New Sony Malware Software on Discs.


JJkizak

Recommended Posts

I read on the Sony Media Software forum where two websites have found and analized DRM software on Sony commercial discs that installs in your root system. It will allow only three copies to be made and the discs will not play without the software installed. The software cannot be removed unless all drives are re-formatted. The software continually scans your system as long as it is turned on and by doing so uses 2% of you CPU processing capability. After installation it then opens new pathways for hackers and spyware people to get into your computer. I don't know how this will relate to stand-alone players.

JJK

Link to comment
Share on other sites

More info about this than you might ever want to know is available here -

http://www.sysinternals.com/Blog/

"The entire experience was frustrating and irritating. Not only had Sony

put software on my system that uses techniques commonly used by malware

to mask its presence, the software is poorly written and provides no

means for uninstall. Worse, most users that stumble across the cloaked

files with a RKR scan will cripple their computer if they attempt the

obvious step of deleting the cloaked files."

It's all over the net. Google "Sony DRM malware"

It shouldn't effect stand alone players. I'm hoping some trial

lawyer gets his PC trashed by this virus-like software that Sony

installs via their audio CD's. Given that this operation is not

mentioned in their End User License Agreement, a person might want to

question the legality of what they are doing by re-writing the software

on *your* PC...

Link to comment
Share on other sites

I'd say it's time to teach Sony a lesson.

James

v

count me in on the Class Action Suit ..!

Count me in for some $$ when someone puts out contracts on Sony execs.

I've spend countless hours in my life removing software like

this. I've no patience for it and think it's inexcusable. Lets

hope they get a chance to use some of their high priced lawyers to try

and defend this behavior...

Link to comment
Share on other sites

A couple generic comments.

One, a cup of coffee says the end user agreement DOES say that Sony is entitled to install anything that is in their driver/SW package!! 95% of all spyware and malware is actively invited into systems by the blind clickthroughs required to access sites or install applications! But when was the last time YOU read through a 6 page microtype legalese document intentionally worded to obsfucate an issue> (OK!!! Besides this post!!![:P][:D])

Two, a firewall can indeed help you. If the SW dials out to communicate, a good firewall (heck, just Zone Alarm Pro) can be configured to monitor and control access of programs in dialing out to the net as well as allowing external access into your computer. Just make sure that under "Program Control", that you chose the proper restrictions.

And copy control is allowed under the new Digital Rights Millennium Copyright Goobledygoop law! Enjoy!!!!![:P][:'(]

And on that tact, get used to it!!! You 'ain't' seen nothing yet!! Wait until the HD-DVD and Blu-Ray units hit the market in force!!! It's going to get 'real fun'!!![6]

Link to comment
Share on other sites

A couple generic comments.

One, a cup of coffee says the end user agreement DOES say that Sony is entitled to install anything

that is in their driver/SW package!! 95% of all spyware and malware is

actively invited into systems by the blind clickthroughs required to

access sites or install applications! But when was the last time YOU

read through a 6 page microtype legalese document intentionally worded

to obsfucate an issue> (OK!!! Besides this post!!![:P][:D])

Two, a firewall can

indeed help you. If the SW dials out to communicate, a good firewall

(heck, just Zone Alarm Pro) can be configured to monitor and control

access of programs in dialing out to the net as well as allowing external access into your computer. Just make sure that under "Program Control", that you chose the proper restrictions.

And copy control is allowed under the new Digital Rights Millennium Copyright Goobledygoop law! Enjoy!!!!![:P][:'(]

And

on that tact, get used to it!!! You 'ain't' seen nothing yet!! Wait

until the HD-DVD and Blu-Ray units hit the market in force!!! It's

going to get 'real fun'!!![6]

I don't recall ever seeing an EULA in the package with an audio CD.

There's probably some ultra fine print somewhere on the CD label that

points you to a website that has it or something else just as

disingenuous.

Making copies is allowed under DMCA, but tampering with another

person's software is a somewhat of a gray area, and doing so to any

software that falls under any sort of loosely defined "encryption"

scheme is a lot less gray. It would be poetic justice if Sony

fell into one of the traps with the law that they've attempted to set

for everyone else who they "think" might be stealing their

product.

Things like this certainly make a person think Sony is crying crocodile

tears over their alleged lost revenue. As if we didn't know that

already...

Link to comment
Share on other sites

The EULA to which I referred pertained more to downloaded software where the privacy policies are not readily apparent (but often hidden in some obtuse link- or better yet, they must be requested! Or, they don't even have to post them!!)

Regarding copyrighted material such as CDs, they are not obliged to allow ANY copying of material they own/control. Nor do they have to disclose the copy protection nor the schema employed. And protection schemes be they SW or HW based, like it or not, are not prevented either. By using their software, you implicitly agree! This has been debated regarding the EULA being inside a package whereby you cannot return the SW after the package is opened! Nifty huh!?

I apologize for being the bearer of bad news, as I suspect I may be even more 'perturbed' by the situation then many/most of you! So please don't get me wrong! I am not in support of this nonsense!

And legally things are not getting better! Even 'fair use' has been restricted in many cases!

As I said, we have seen only the tip of the coming iceberg!

Link to comment
Share on other sites

Found it - http://www.sysinternals.com/blog/sony-eula.htm

The friendly Sony EULA. Good luck getting anything more out of it than

"We warranty nothing, we can change our mind anytime we like, and you

accept everything."

I'd post an embedded link but for some reason the link button doesn't work in Netscape. Anyone have a fix for that?

DMCA is a mess. There are unanswered questions like "Who*really* owns

the rights to a digital photo if your camera uses a form of encryption

to store the file or portions of it, and you don't have explicit

permission to unencrypt it from the camera manufacturer."

Link to comment
Share on other sites

Sony has caved and put up a patch that will show the hidden

files. Supposedly they also have an uninstaller for it. It

affects about 20 titles inlcuding discs from The Bad Plus and Vivian

Green.

Here's the link for the software removal: http://cp.sonybmg.com

XCP-Aurora Support

c.gif

Please choose an update from the list below.

Software Updates

icon_load2.gif Latest Update

Service Pack 2

2|Nov|2005, 3.253Mb

This

Service Pack removes the cloaking technology component that has been

recently discussed in a number of articles published regarding the XCP

Technology used on SONY BMG content protected CDs. This component is

not malicious and does not compromise security. However to alleviate

any concerns that users may have about the program posing potential

security vulnerabilities, this update has been released to enable users

to remove this component from their computers.

No matter how much they spin, Sony = 0wned by the internet once again.

Link to comment
Share on other sites

Those guys at sysinternals are well-respected and well-liked on the

net. I've been using Marks stuff since before it was winternals,

which was long before it was sysinternals. Good people all the

way around. Not many people could have torn Sony a new one like

he did. Really nice with all the screenshots and stuff. The

guy has no fear, he's gone up against M$ and came out ok on stuff.

No Sony CDs will be crossing my hardware ever again. I used to

really like thier hardware, but a lot of it has gone downhill lately

too. Who needs them?

Link to comment
Share on other sites

I just read about this issue on the Stereophile website and I gotta say I just find it depressing. The unmitigated greed of the big music and movie copyright holders never fails to astound me. Plus, it makes me wonder what the future holds for music and movie lovers; some kind of Orwellian scenario where no one can own any copyrighted content? And every time we want to hear a song, we have to pay? Where will it end???

Link to comment
Share on other sites

I just noticed this. It was filed right away. That didn't take long at all did it-

http://blogs.washingtonpost.com/securityfix/2005/11/calif_ny_lawsui.html

"A class-action lawsuit has been filed on behalf of California consumers who may have been harmed by anti-piracy software installed by some Sony music CDs."

"The suit alleges that Sony's software violates at least three California statutes, including the "Consumer Legal Remedies Act," which governs unfair and/or deceptive trade acts; and the "Consumer Protection against Computer Spyware Act," which prohibits -- among other things -- software that takes control over the user's computer or misrepresents the user's ability or right to uninstall the program. The suit also alleges that Sony's actions violate the California Unfair Competition law,

which allows public prosecutors and private citizens to file lawsuits

to protect businesses and consumers from unfair business practices. '

Link to comment
Share on other sites

Opps... As if this wasn't predicted too...

"Viruses exploit Sony CD copy-protection scheme

spacer.gifSAN JOSE, Calif. (AP) - A

controversial copy-protection program that automatically installs when

some Sony BMG audio CDs are played on personal computers is now being

exploited by malicious software that takes advantage of the antipiracy

technology's ability to hide files.

The Trojan horse programs -- three have so far been identified by

antivirus companies -- are named so as to trigger the cloaking feature

of Sony's XCP2 antipiracy technology. By piggybacking on that function,

the malicious programs can enter undetected, security experts said

Thursday."

http://www.mercurynews.com/mld/mercurynews/business/technology/personal_technology/13134753.htm


Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...