The Cellar

The Cellar (http://cellar.org/index.php)
-   Current Events (http://cellar.org/forumdisplay.php?f=4)
-   -   Music Industry - Everyone is a potential Criminal (http://cellar.org/showthread.php?t=9536)

Kitsune 11-10-2005 09:47 AM

Music Industry - Everyone is a potential Criminal
 
To all of you that agued that DMCA wouldn't result in anything harmful coming out of the entertainment industry, well, it is now well known that newer Sony BMG audio CDs drop a little present on your Windows box. The importance of this? <a href="http://www.theregister.co.uk/2005/11/10/sony_drm_trojan/">It is already being exploited</a>, <a href="http://www.freedom-to-tinker.com/?p=919">is being used by other spyware to further compromise your system</a>, and is even <a href="http://online.securityfocus.com/brief/34">disrupting World of Warcraft</a>.

Besides, the moment you drop the money down on the counter for the CD, you're <a href="http://www.eff.org/deeplinks/archives/004145.php">agreeing to some really bizarre legal agreement</a>.

Shit, Sony, why you gotta be so nasty?

BigV 11-10-2005 03:03 PM

Ho-lee Cow! (scuse me, got to make another HoF induction)

A freakin' self-cloaking rootkit. That's just evil. Wait, I just read the third link...that EULA is evil.

One small bright spot...the default behavior on my XP system is to Prompt for Action when a cd/dvd is inserted into the drive. This is the default behavior for music, video, mixed, etc, all kinds of discs. I have regularly said Cancel to the little dialog box, and now I have changed to Take No Action.

Thanks for the tip Kitsune. Seriously. I publish internally a Tip of the Week for the company and this post is it. I'll have an extra 20 minutes Monday morning cause this is already done. :tips cap:

Kitsune 11-10-2005 03:43 PM

Quote:

Originally Posted by BigV
the default behavior on my XP system is to Prompt for Action when a cd/dvd is inserted into the drive. This is the default behavior for music, video, mixed, etc, all kinds of discs. I have regularly said Cancel to the little dialog box, and now I have changed to Take No Action.

From what I've read, it appears that the CDs drop their code through MS Media Player, not through the autorun. I could be wrong, though, but I'm not certain that the "take no action" security policy setting is enough to block it.

Anyways, the DRM software even <a href="http://www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html">contacts Sony servers to check for updates</a> and removal looks like a total bitch according to the finder.

You have to love something that <a href="http://www.internetnews.com/security/article.php/3561161">kills your CD player</a>. How nice of Sony, but how equally kind of Windows to have a security hole that allows software to create unlocatable files, registry keys, and invisible services.

<a href="http://news.yahoo.com/s/pcworld/20051108/tc_pcworld/123454">Looks like Italy is pursuing legal actions, now</a>, against Sony and the DRM kit creator.


I'm sticking with iTunes and my Mac.

Troubleshooter 11-10-2005 04:20 PM

What if you use something such as Winamp or some other media player?

BigV 11-10-2005 05:04 PM

"Here's your vocabulary word for the morning: rootkit". This story on NPR is a useful audio description of the story for those who aren't into reading "rootkit" and seeing "apocalypse". Recommended.

Kitsune 11-10-2005 05:30 PM

Woop! Spoke too soon! <a href="http://www.macintouch.com/#tip.2005.11.10.sony">Macs get it, too</a>, it just isn't concealed so well.

Addition: you have to run it manually and, well, you'd be stupid to do so. Macs prompt for admin passwords before doing any installs, although this Sony DRM doesn't notify you what it is.

Elspode 11-10-2005 08:05 PM

Sony/BMG has *deep* pockets. Some smart lawyer is gonna kick their ass with a class-action suit and retire on his share.

Stupid fucks. Greed. Purely greed. Not only do they own the product (you know, the one you shelled out $15 or more to "own"?), but now they've decided that they own your computer too.

BigV 11-11-2005 03:53 PM

BOO-YAH!!
 
Yeah! Score one for the good guys!
Quote:

Sony BMG pulls CD copy-protection software
WASHINGTON (AP) — Stung by continuing criticism, the world's second-largest music label, Sony BMG Music Entertainment, promised Friday to suspend making music CDs with anti-piracy technology that can leave computers vulnerable to hackers.

Sony defended its right to prevent customers from illegally copying music but said it will stop making CDs with the "XCP" technology as a precautionary measure. "We also intend to re-examine all aspects of our content protection initiative to be sure that it continues to meet our goals of security and ease of consumer use," the company said in a statement.

richlevy 11-11-2005 07:39 PM

Once the word got out, Sony risked people voting with their feet. A draconian solution like the one they were using only works if people don't have another choice. When people learned about it, it became a consumer issue. Very few people are so attached to a single artist that they couldn't weigh the alternatives and choose an unprotected CD by a different artist.

Elspode 11-12-2005 04:10 AM

Wait until the artists start suing Sony for having crippled their sales because of this.

Undertoad 11-12-2005 10:35 AM

They will find their contract allows Sony to do whatever they want.

Griff 11-12-2005 11:50 AM

Which in the long run could make UT a very wealthy man. :)

Undertoad 11-12-2005 01:08 PM

I would be happy enough if Sony were made poor by it.

The stories of big label horror are starting to really come through now, and not a week goes by where I don't hear about some really awesome music that is simply unavailable because a label maintains the publishing rights and has left it out of print.

For example the first two Bears albums cannot be purchased at any price. There may be only 1000 people who want that material. Nobody is going to make a dime off it. But no matter, it is music which cannot be had legally.

Typically, in these cases, the artist says go ahead and b**tleg it. They will not see a dime from it if it is ever sold anyway.

smoothmoniker 11-12-2005 03:09 PM

Quote:

Originally Posted by Undertoad
They will find their contract allows Sony to do whatever they want.

Maybe. In California contract law, there is a "good faith" implication, which states that both parties are acting in good faith, in accordance with the stipulations stated. It's the clause that allows you to sue your medical insurance company when they refuse to cover standard procedures based on their own non-standard classifications system (Chemotherapy as an experimental, non-covered procedure?).

I can see an artist bringing a case that holds the label liable for acting in bad faith. The intent of the recording contract is to secure distribution for the recorded content. The obligation of the artist is to provide and promote that content. The obligation of the label is to fund and distribute that content.

This kind of crippling DRM might be a "bad faith" act on the part of the labels - an act that essentially voids their obligation to distribute the content.

I dunno. Might be a shot in the wind, but if I were an artist whose fan base suddenly threw a riot and left because of the actions of my label, i might sue.

Beestie 11-13-2005 02:11 AM

Sony sued over rootkits

Italy kicks it off

CDs with Sony rootkit

Pest Patrol is the remedy.


Sony CD rootkit reportedly exploited by Trojan

The last link is to one of many stories coming out about how there are now real viruses showing up across the net that utilize the Sony rootkit "virus."

xoxoxoBruce 11-13-2005 10:51 AM

Beestie, the last link doesn't? :headshake

Elspode 11-13-2005 12:24 PM

This is going to go down in history as one of the most colossal corporate blunders ever.

wolf 11-13-2005 01:16 PM

I think that was New Coke.

Bullitt 11-13-2005 02:57 PM

I was waiting for this to happen.. a new twist

richlevy 11-13-2005 04:15 PM

This could be Bertelsmann's (BMG) biggest mistake since publishing "The Christmas Book of the Hitler Youth" back in the 40's.

Somewhere in the bowels of BMG is a real Dr. Strangelove

Quote:

[Strangelove admits that he investigated making such a machine]
Dr. Strangelove: Based on the findings of the report, my conclusion was that this idea was not a practical deterrent for reasons which at this moment must be all too obvious.

Undertoad 11-13-2005 06:18 PM

Via Boing Boing, the Sony rootkit contains copyrighted, licensed software and Sony is not in compliance with the license.

Kitsune 11-14-2005 09:48 AM

Bwahahaha! This just keeps getting better! This is the best free entertainment I've had in awhile!

Elspode 11-14-2005 04:08 PM

I'll bet someone in Sony's corporate headquarters is committing hari-kiri right about now.

SteveDallas 11-14-2005 04:20 PM

And the pathetic thing is it doesn't work. How much DRM would have to be put on a CD to prevent one person from making MP3's? I submit the answer is darn near infinite, and once there's one copy, well, there she goes.

Happy Monkey 11-14-2005 04:59 PM

They could send an invincible, uncorruptible RIAA executive to accompany each CD wherever it goes, to make sure the so-called 'customer' is not using it in an unapproved manner.

Kitsune 11-14-2005 07:20 PM

Quote:

Originally Posted by Elspode
I'll bet someone in Sony's corporate headquarters is committing hari-kiri right about now.

Nah. They'll survive this just fine, continue to sell lots of music, and turn a profit in the end. Even if they left the DRM install on their CDs, they'd do just fine.

In fact, I bet any sales losses they suffer from this will be blamed on piracy and further push their point to congress who will happily pass any Digital Copyright laws Sony requests.

xoxoxoBruce 11-14-2005 07:30 PM

It will be interesting to see if the indignation on the web will translate to financial backlash. :neutral:

richlevy 11-14-2005 08:48 PM

Quote:

Originally Posted by Happy Monkey
They could send an invincible, uncorruptible RIAA executive to accompany each CD wherever it goes, to make sure the so-called 'customer' is not using it in an unapproved manner.

Would shoving it up his ass be an 'unapproved manner'?http://www.cellar.org/images/smilies/cool.gif

Happy Monkey 11-14-2005 10:17 PM

He'd be fine with that. If it's up his ass, you can't copy it.

Unfortunately, since he's invincible, it might be hard to get it up there.

tw 11-20-2005 12:01 AM

You gotta love this guy Mark.

From SysInternal dated 1 Nov 2005:
Quote:

Sony, Rootkits and Digital Rights Management Gone Too Far
I entered the company name into my Internet browser's address bar and went to http://www.first4internet.com/. I searched for both the product name and Aries.sys, but came up empty. However, the fact that the company sells a technology called XCP made me think that maybe the files I’d found were part of some content protection scheme. I Googled the company name and came across this article, confirming the fact that they have deals with several record companies, including Sony, to implement Digital Rights Management (DRM) software for CDs. ...

At that point I knew conclusively that the rootkit and its associated files were related to the First 4 Internet DRM software Sony ships on its CDs. Not happy having underhanded and sloppily written software on my system I looked for a way to uninstall it. However, I didn’t find any reference to it in the Control Panel's Add or Remove Programs list, nor did I find any uninstall utility or directions on the CD or on First 4 Internet's site. I checked the EULA and saw no mention of the fact that I was agreeing to have software put on my system that I couldn't uninstall. Now I was mad.

... they were either configured as boot-start drivers or members of groups listed by name in the HKLM\System\CurrentControlSet\Control\SafeBoot subkeys, which means that they load even in Safe Mode, making system recovery extremely difficult if any of them have a bug that prevents the system from booting.

... Deleting the drivers had disabled the CD. Now I was really mad.

Not only had Sony put software on my system that uses techniques commonly used by malware to mask its presence, the software is poorly written and provides no means for uninstall. Worse, most users that stumble across the cloaked files with a RKR scan will cripple their computer if they attempt the obvious step of deleting the cloaked files.

xoxoxoBruce 11-20-2005 03:04 PM

DOXPARA says it's far and wide.
Quote:

Red signifies evidence of First4Internet accesses; Green signifies accesses to Sony's enhanced CD site (included with the rootkit, but also elsewhere). Most links are yellow, though: Over 3/4ths of networks found resolving Sony during the sampling period also resolved First4Internet. The geographic evidence lines up pretty nicely as well

xoxoxoBruce 11-20-2005 03:05 PM

And the Far East.

Troubleshooter 11-21-2005 12:34 PM

President of RIAA Says Sony-BMG Did Nothing Wrong
 
http://yro.slashdot.org/yro/05/11/21...tid=233&tid=17


Sony
Zellis writes "In a press conference held on Nov 18 Cary Sherman, the president of the RIAA, stated in reference to Sony BMG's "rootkit" software that "there is nothing unusual about technology being used to protect intellectual property." According to Sherman, the problem with Sony BMG's XCP DRM software was simply that "the technology they used contained a security vulnerability of which they were unaware". He goes on to praise Sony's "responsible" attitude in handling the problem, saying "how many times that software applications created the same problem? Lots. I wonder whether they've taken as aggressive steps as SonyBMG has when those vulnerabilities were discovered, or did they just post a patch on the Internet?" It seems that the latest spin is to portray the Sony rootkit as no more of an issue than a software coding error that unintentionally creates a security hole. Will they get away with it among the non-technical public?" Arguably, Sherman is right -- but I enjoy much more the fact that this whole r00tkit fiasco has set DRM back by years. Gogogo poor implementations!

Elspode 11-21-2005 11:45 PM

Sony has sex with sheep. I had pictures, but a rootkit sussed them out and deleted them. :headshake

Troubleshooter 11-22-2005 03:07 PM

Sony's woes grows...
 
http://www.techtree.com/techtree/jsp...297&cat_id=582

...snip...

The research note on the Gartner site says that what makes the Sony BMG incident even more unfortunate, is that the DRM technology can be defeated easily. The user can simply apply a fingernail-sized piece of opaque tape to the outer edge of the disc, rendering session 2 - which contains the self-loading DRM software, unreadable. The PC then treats the CD as an ordinary single-session music CD, and the commonly used CD "rip" programs continue to work as usual. (Gartner emphasizes that it does not recommend or endorse this technique.)

...more...

xoxoxoBruce 11-22-2005 06:20 PM

There is a link at the teachtree site to this program.
Quote:

In the latest twist to Sony BMG's music CD debacle, the company has announced a "mail-in program", wherein consumers can exchange CDs containing XCP copy protection software in return for replacement CDs without XCP software, plus MP3 files of the CDs, free-of-cost.
:D

Griff 11-22-2005 06:32 PM

Quote:

Originally Posted by Elspode
Sony has sex with sheep. I had pictures, but a rootkit sussed them out and deleted them. :headshake

They just got busted for payola as well, seriously.

tw 11-22-2005 09:09 PM

The Nightly Business Report (from PBS) provided this list of Sony products that may contain the DRM software. Steve Gurvey put this list up with a warning - don't play them:
CDs Containing XCP Content Protection Technology

Griff 11-22-2005 09:13 PM

Looks like they're testing the water with the artists nobody cares about?

tw 11-22-2005 09:22 PM

From the BBC on 22 Nov 2005:
Quote:

Sony sued over controversial CDs
Sony BMG's woes in the US over its much-criticised anti-piracy CD software have deepened.

It is facing two separate lawsuits in Texas and California.

The Texan lawsuit accuses Sony of installing spyware and is seeking damages of up to $100,000 in damages for each violation.

In California, digital rights group, the Electronic Frontier Foundation (EFF), is suing Sony for allegedly collecting personal data.

Elspode 11-22-2005 11:09 PM

Quote:

Originally Posted by Griff
Looks like they're testing the water with the artists nobody cares about?

Ummm...Neil Diamond has a rather large following. I'd be real surprised if his new release doesn't sell at least 500k copies worldwide, and probably twice that. That's a million pissed-off Sony customers right there.

SteveDallas 11-23-2005 09:05 AM

I've been wondering when the first big classical album with DRM attached with come out... :lol:

BigV 11-29-2005 05:25 PM

You knew their potential for evil, did you know they're lazy as well?

Quote:

Sony BMG's Costly Silence
The label was alerted to the secret, virus-vulnerable software on its CDs long before the scandal broke. Trouble is, it didn't act immediately to alert consumers
Quote:

"If [Sony] had woken up and smelled the coffee when we told them there was a problem, they could have avoided this trouble," says Mikko H. Hypponen, F-Secure's director of antivirus research.

richlevy 02-18-2006 05:31 PM

I just got an e-mail from United that offered me 5 free songs from Connect Music. I do not know much about the competing services, so I followed the link and found that Connect was owned by Sony and that some features would not work since I wasn't using Intenet Explorer.

Thank you Firefox.

BTW, I love their privacy statement.

Quote:

5. Sharing Your Personal Information.

Notice of Sharing. Sony CONNECT may share your personal information or other information as follows: (a) with affiliated Sony companies (i.e., (i) Sony Corporation, (ii) any company of which more than 50% of its outstanding shares are owned by Sony Corporation, directly or indirectly, and (iii) any company with the name "SONY" as a part of its trade name) who may want to contact you about products, services or other offerings that may be of interest to you; (b) with third parties with your consent (see "Sharing Subject To Your Consent," below); (c) with co-branded partners (see "Personal Information Provided Or Collected On A Co-Branded Web Site", below); (d) as may be required by law, legal process or court order; (e) as may be required to respond to an inquiry, request or complaint you have made; (f) to persons or companies whom Sony CONNECT engages to carry out or provide support for the operations of the Service or of Sony CONNECT’s business, which may include customer support services (such persons and companies are not permitted by Sony CONNECT to use the information for such persons’ or companies’ marketing purposes unless you indicate you provide your permission for such use by such entities); or (g) to protect the personal safety or property of you, our users, the public, our licensors or ourselves. You may need to communicate with the entities described in this section directly if you wish to amend or change any data you supply.


Elspode 02-21-2006 04:37 PM

Translation: "As soon as you give us your money and we let you borrow our property because of it, we own your ass."

Harlan 03-05-2006 07:34 PM

You called that one...


All times are GMT -5. The time now is 12:04 AM.

Powered by: vBulletin Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.