Sony's DRM supplier XCP ripped off a free software project so that it could defeat Apple iTunes.
Remember when Sony got nailed for including code an open-source crack for iTunes in its rootkit DRM? Princeton researcher Alex Halderman has been patiently teasing apart the rootkit, looking for an explanation. — Read the rest
- Nov 21: Protest CD DRM in NYC on Nov 30!
- FreeCulture NYC is planning another street demonstration at a Tower Records store in Manhattan against DRM CDs, and have a great flier about the dangers of buying DRM music.
- Nov 21: Table compares different kinds of Sony music infections
- Sony CDs are infected with at least two different kinds of malicious software, the XCP rootkit and a spyware product from Suncomm called MediaMax.
— Read the rest
First4Internet ripped off code from at least two free/open source software projects for the malicious rootkit program they supplied to Sony. Yesterday, I posted some old mailing list and newsgroup messages from First4Internet programmers where they were seeking advice on breaking peoples' computers. — Read the rest
An old email thread shows the early efforts of the authors of Sony's infamous rootkit. In 2003, Ceri Coburn (to whom first4internet.com is registered) appeared as a novice programmer in a technical mailing list, asking questions about how to cripple CD drives. — Read the rest
The news of Sony's recall of its rootkit-infected CDs goes even more mainstream and is lampooned in this week's issue of The Onion, their What Do You Think? section.
Link
(Thanks, Ian!)
Previous installments of the Sony Rootkit Roundup: Part I, Part II, Part III
Businessweek has great coverage of the Sony rootkit fiasco from the perspective of artists, who are losing sales because Sony decided to infect their fans:
"We're really upset about this," says Patrick Jordan, director of marketing for Red Light Management, which represents Trey Anastasio, former front man to jam band Phish.
— Read the rest
These limited-edition tees from F-Secure bear the now infamous quote from Sony BMG president Thomas Hesse: "Most people don't even know what a rootkit is, so why should they care about it?" Nice one.
Link
(via Copyfight)
Previous installments of the Sony Rootkit Roundup: Part I, Part II, Part III
The Sony rootkit debacle continues to gain steam, with fresh revelations of incompetence and malice every day, and with fresh news of lawsuits too. Previously, I published two roundups of news on this leading up to Nov 17 (Sony Rootkit Roundup Part I, Sony Rootkit Roundup Part II, Sony Rootkit Roundup Part IV, Sony Rootkit Roundup V, Sony Rootkit Roundup VI) and what with all the news, it's time for a third:
- Nov 17: Sony still advising public to install rootkits
- 18 days after the revelation that Sony's CDs contain dangerous rootkits, Sony still has live web-pages advising its customers to go ahead and install their software (This is still the case as of Nov 22!).
— Read the rest
Amazon has not only pulled all of Sony's rootkit-infected CDs from its catalog, they're also contacting everyong who bought a rootkit CD and offering a full refunds, whether or not the CD has been opened.
Now this is a textbook example of how retailers should be responding to the news that Sony tricked them into selling CDs that screwed up their customers' computers. — Read the rest
See Part I, Part III, Part IV, Part V and Part VI of this post for more.
It's been three days since the first roundup post on Sony's rootkit DRM and lots of new stuff has come to light since. — Read the rest
Poetic rant (from 2002 or so, but it applies today just as well) against DRM writing coders on Pigdog Journal.
MY GOD MAN!!! Do you realize what you're doing? DO you? What kind of HONEY BITCH TOOL have you become? Have you no shame?
— Read the rest
Ernie Smith's Motherboard article on the early years of DRM gets into some fascinating stories about things like IBM's Cryptolope and Xerox PARC's Contentguard (which became a patent troll), Intertrust's belief that it is "developing the basis for a civil society in cyberspace" and the DeCSS fight.
Oct 31 2005: Security researcher Mark Russinovich blows the whistle on Sony-BMG, whose latest "audio CDs" were actually multi-session data-discs, deliberately designed to covertly infect Windows computers when inserted into their optical drives.
He'll serve under the brilliant Megan Smith, the CTO.
Michael Geist sez,
The business opposition to Canada's anti-spam and spyware legislation has added an unlikely supporter: the Canadian Recording Industry Association, now known as Music Canada. The organization has launched an advocacy campaign against the law, claiming that it "will particularly hurt indie labels, start-ups, and bands struggling to build a base and a career."
— Read the rest
Michael Geist sez,
A coalition of Canadian industry groups, including the Canadian Chamber of Commerce, the Canadian Marketing Association, the Canadian Wireless Telecommunications Association and the Entertainment Software Association of Canada, are demanding legalized spyware for private enforcement purposes. The demand comes as part of a review of anti-spam and spyware legislation in Canada.
— Read the rest
Make magazine's Phil Torrone has had enough of Sony. Provoked by Sony's lawsuits and raids against makers who reverse engineered the Playstation 3, Phil has composed a top-seven list of Sony's most egregious and corrupt uses of the law to fight makers. — Read the rest
In Denmark, it's legal to make copies of commercial videos for backup or other private purposes. It's also illegal to break the DRM that restricts copying of DVDs. Deciding to find out which law mattered, Henrik Anderson reported himself for 100 violations of the DRM-breaking law (he ripped his DVD collection to his computer) and demanded that the Danish anti-piracy Antipiratgruppen do something about. — Read the rest
Warner Music has announced that it will begin to sell non-DRM'ed MP3 music files on Amazon, making it the third (of four) major labels to sign up for DRM-free distribution of their music, Universal and EMI being the other two. Only Sony BMG have held out — and that's the same label that gave us the infamous Sony Rootkit, a dangerous hacker-tool that Sony infected millions of PCs with in a failed bid to prevent copying of its music. — Read the rest
Hallelujah! Apple and EMI just announced that they will be selling DRM-free Apple songs through the iTunes Music Store. The songs will cost 130 percent of the price of the existing crippled songs, and you'll get to choose. Weirdly, Apple seems to have sold this move to EMI by saying that the DRM-free version will be a "premium" offering for audiophiles who want higher-quality music. — Read the rest