Hello world,
I've been reading recently about Sony's move to secretly install
software on user's PCs to limit use of their CDs...ostensibly to prevent
piracy, but it also apparently prevents using anything other than Sony
software to play music, and prevents use of protected content on an Ipod
or other mp3 player. Apparently, Sony refuses to disclose which CDs
contain the software, though I've also heard rumors that they're
releasing a removal tool under the pressures of public scrutiny and bad
press. The tool, as far as I know (no personal experience, since I
boycotted the music industry years ago) is cloaked. Seems to fit all the
definitions of a virus to me, right?
Incidentally, the EFF reports the software to be buggy, to slow down
computer performance, and to cause crashes. You'd think Sony'd at least
hire some decent spyware writers to code for them, right?
Here's the EFF article, snipped from their most recent email update.
There's also a link at the bottom to email in stories if you've been
affected by this, to facilitate possible legal action. If you're
operating a CTC and allow users to play music from their own CDs, you
may have machines that are infected (given the large portion of the CD
market that Sony / BMG controls)...you may also want to post this
article in your labs, and / or encourage end-users to submit individual
complaints. Submitting a complaint as an organization might be more
effective.
<quoting EFF>
* Are You Infected with Sony-BMG's Rootkit?
EFF Confirms Secret Software on 19 CDs
San Francisco - News that some Sony-BMG music CDs
install
secret rootkit software on their owners'
computers has
shocked and angered thousands of music fans in
recent days.
Among the cause for concern is Sony's refusal to
publicly
list which CDs contain the infectious software
and to
provide a way for music fans to remove it. Now,
the
Electronic Frontier Foundation (EFF) has
confirmed that the
stealth program is deployed on at least 19 CDs in
a variety
of genres.
The software, created by First 4 Internet and
known as
XCP2, ostensibly "protects" the music from
illegal copying.
But in fact, it blocks a number of legal
uses--like
listening to songs on your iPod. The software
also
reportedly slows down your computer and makes it
more
susceptible to crashes and third-party attacks.
And since
the program is designed to hide itself, users may
have
trouble diagnosing the problem.
"Entertainment companies often complain that fans
refuse to
respect their intellectual property rights. Yet
tools like
this refuse to respect our own personal property
rights,"
said EFF staff attorney Jason Schultz. "Sony's
tactics here
are hypocritical, in addition to being a security
threat."
If you listened to a CD with the XCP software on
your
Windows PC, your computer is likely already
infected. An
EFF investigation confirmed XCP software on 19
titles, but
it's far from a complete list. Sony-BMG continues
to refuse
to make such a list available to consumers.
Consumers can spot CDs with XCP by inspecting a
CD closely,
checking the left transparent spine on the front
of the
case for a label that says "CONTENT PROTECTED."
The back of
these CDs also mention XCP in fine print. You can
find
pictures of these and other telltale labeling at
<http://www.eff.org/IP/DRM/Sony-BMG/> .
"Music fans should protect themselves from this
stealth
attack on their computer system," said EFF Senior
Staff
Attorney Fred von Lohmann.
For EFF's list of CDs with XCP:
<http://www.eff.org/deeplinks/archives/004144.php>
The "legalese rootkit" - Sony-BMG's EULA:
<http://www.eff.org/deeplinks/archives/004145.php>
For this release:
<http://www.eff.org/news/archives/2005_11.php#004146>
: . : . : . : . : . : . : . : . : . : . : . : . :
. : . :
* Sony-BMG Rootkit: EFF Collecting Stories,
Considering
Litigation
EFF is collecting stories from EFF members and
supporters who
have purchased Sony-BMG CDs that contained the
rootkit copy
protection software. We're considering whether
the effect on
the public, or on EFF members, is sufficiently
serious to
merit EFF filing a lawsuit.
If you satisfy the following criteria, we would
like to hear
from you:
1. You have a Windows computer;
2. First 4 Internet's XCP copy protection has
been installed
on your computer from a Sony CD (for more
details, see our
blog post referenced above or the SysInternals
blog,
http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-
digital-rights.html);
3. You reside in either California or New York;
and
4. You are willing to participate in litigation.
We have not made a final decision about filing
any legal
action, but we would like to hear from music fans
who have
been harmed by the Sony-BMG rootkit copy
protection
technology. Please contact [EMAIL PROTECTED] <http://us.f813.mail.yahoo.com/ym/[EMAIL PROTECTED]&YY=8333&order=down&sort=date&pos=0> for
more
information.
</quoting EFF>
--
Dave A. Chakrabarti
Projects Coordinator
CTCNet Chicago
[EMAIL PROTECTED]
(708) 919 1026
--
_______________________________________________
DIGITALDIVIDE mailing list
DIGITALDIVIDE@mailman.edc.org
http://mailman.edc.org/mailman/listinfo/digitaldivide
To unsubscribe, send a message to [EMAIL PROTECTED] with the word UNSUBSCRIBE
in the body of the message.