WARNING--Sony music CDs secretly install software on your computer

[wtmusic]

Though Sony has recalled the CDs many people who already own them are unaware they are being hacked.

On Oct. 31, Mark Russinovich broke the story in his blog: Sony BMG Music Entertainment distributed a copy-protection scheme with music CDs that secretly installed a rootkit on computers. This software tool is run without your knowledge or consent -- if it's loaded on your computer with a CD, a hacker can gain and maintain access to your system and you wouldn't know it.

The Sony code modifies Windows so you can't tell it's there, a process called "cloaking" in the hacker world. It acts as spyware, surreptitiously sending information about you to Sony. And it can't be removed; trying to get rid of it damages Windows.

This story was picked up by other blogs (including mine), followed by the computer press. Finally, the mainstream media took it up.

http://www.schneier.com/blog/archives/2005/11/sonys_drm_rootk.html

[Cooley Hurd]

1. Yep, and if you don't accept the EULA, it'll scramble the music...

...on your iTunes. I bought Black Rebel Motorcycle Club's newest CD and tried to import it into iTunes without accepting the End User License Agreement, and it scrambled every tune on the album.:grr::grr::grr: From now on, I'm buying all new releases via iTunes music store...

[wtmusic]

2. You have to be freaking joking

no wonder the lawsuits. I hope Sony gets their head handed to them. Unreal.

[Cooley Hurd]

5. They're screwing themselves - no one will buy CD's from them anymore...

I'm certainly in favor of intellectual property rights (and I'm always happy to pay for music), but this is going too far. They're going to lose the retail markup $$$ on their CD's if everyone buys them directly from iTunes, Napster, etc... Serves them right! :grr:

[madokie]

11. You got that right, be kinda like going to walmart and buying barf brooks

cd's, ain't gonna happen. actually setting here listening to credence clearwater. rocking my old madokie ass off.

[neweurope]

3. Do you know for how long Sony have been doing this?

-----------

Remember Fallujah

Bush to The Hague!

[wtmusic]

4. List of affected CDs

http://cp.sonybmg.com/xcp/english/titles.html

[neweurope]

20. Thank you!

:hi:

------------------------

Remember Fallujah

Bush to The Hague!

[Solo_in_MD]

6. This is old news

There are fixes for it out there and Sony will replace any CDs returned to them. Look at slashdot.org for more

[Occulus]

8. That doesn't make it right

nor does it strengthen them morally with regards to filesharing.

They now deserve their "losses". Every cent, and more.

[Solo_in_MD]

13. Never said it was right

just that this was already well known

[neweurope]

21. Thanks!

:hi:

------------------------

Remember Fallujah

Bush to The Hague!

[Beelzebud]

7. Welcome to 2 months ago. :)

[peacetalksforall]

9. First thought - outrage. Second thought - Gonzales - telling us that

they have other methods of spying. Do they get a corp like Sony to participate?

Third thought - if they can do it on CD's, can they do it on their PC's?

Fourth thought - which CD's?

[Initech]

10. This is why you buy Macs, people!

Notice how the software only installs itself on WINDOWS machines?

[wtmusic]

14. They're working on it

"Now it comes out that Sony has licensed technology from SunnComm to rootkit your Mac. It's harder for Sony to install, because (unlike a PC) they need you to authorize the installation. It's possibly less damaging than on the PC, but we don't yet know what the two kernel extensions do. The Unofficial Apple Weblog suggests that they'll be disassembled, and I hope they're right."

http://www.emergentchaos.com/archives/001937.html

[upi402]

16. LOL, I suppose you're right

Everything seems to attack MS software. But Microsoft has invested in Mac, and so it goes...

[Beelzebud]

17. Sorry it affects macs too..

You should be basing Sony on this one. They're the ones hi-jacking peoples machines. Macs included.

[proud2BlibKansan]

12. And if you don't use Windows?

[upi402]

15. there's a company that has ads on AAR that rids that stuff

I wonder if they could restore Windows without the cloak?

[peacetalksforall]

18. If you were a musician or a trustee, would you -

join in on a class action lawsuit?

To defend truth in advertising and claim a violation of use?

A Static Lullaby
Acceptance
Amerie
Art Blakey
The Bad Plus
Bette Midler
Billie Holiday
Bob Brookmeyer
Buddy Jewell
Burt Bacharach
Celine Dion
Chayanne
Chris Botti
The Coral
Cyndi Lauper
The Dead 60's
Deniece Williams
Dextor Gordon
Dion
Earl Scruggs
Elkland
Emma Roberts
Flatt & Scruggs
Frank Sinatra
G3
George Jones
Gerry Mulligan
Horace Silver
Jane Monheit
Jon Randall
Life Of Agony
Louis Armstrong
Mary Mary
Montgomery Gentry
- other half not copied -

[wtmusic]

19. yep

A buddy of mine worked on a Chris Botti CD that was affected. He said when the word got out, sales went into the toilet.