User User name Password  
   
Sunday 8.11.2009 / 05:54 PM
Search AfterDawn.com:        In English   Suomeksi   På svenska
afterdawn.com > news > more insecure cds from sony bmg
Show topics
News
News

More insecure CDs from Sony BMG

7 December 2005 9:56 by James "Dela" Delahunty | 27 comments

More insecure CDs from Sony BMG Sony BMG, which was caught up in a Digital Rights Management (DRM) mess for the last month over the XCP copy protection has today announced, along with the Electronic Frontier Foundation that SunnComm has released a security update for its MediaMax Version 5 copy protection software, which ships on "certain Sony BMG CDs". The vulnerability discovered could allow an attacker to hijack a user's PC if the MediaMax software has been installed.

The EFF said the vulnerability centers around a file folder installed by the MediaMax software "that could allow malicious third parties who have localized, lower-privilege access to gain control over a consumer’s computer running the Windows operating system." This time around, Sony wasted no time in bringing this to consumer attention after being criticised for how badly it handled the XCP "rootkit DRM" situation.

Even besides the vulnerability, the EFF has pointed out other major problems with the DRM technology including "undisclosed communications with servers Sony controls… undisclosed installation of over 18 MB of software regardless of whether the user agrees to the End User License Agreement; and failure to include an uninstaller with the CD." So there are some obvious privacy concerns with this DRM too.

However this time it is not just Sony using the DRM, over 30 other labels also use it according to the EFF, which is investigating whether any of those labels' CDs include the same vulnerability. A link to the patch, a list of infected titles and more important information can be found at the EFF's website.

Sources:
The Register
Electronic Frontier Foundation


Permalink to this article

Get AfterDawn's news to your favourite feed reader! Share this story with your friends!
 

 
Related articles:

  • German retailer to pay damages over Sony BMG rootkit DRM (15 September 2009)
  • Judge Grants Final Approval for Sony BMG CD Settlement (24 May 2006)
  • Softvault sues Microsoft and others over DRM (18 January 2006)
  • Sony BMG to re-evaluate CD protection (12 December 2005)
  • EFF: SunnComm's MediaMax security patch is not secure (9 December 2005)
  •  

    « Previous news article
    Best Buy's Brian Dunn writes open letter apology to consumers
    Next news article »
    Matsushita sued by Samsung for patent violations
     Post your comment
    Discuss this article!  There are more user comments available, read them here
    McKeva (Newbie) 7 December 2005 13:12 Send private message to this user   
    I am just glad that I don't have any of these albums which have the DRM on. This one isn't as bad as the rootkit at least...
    warigra (Newbie) 7 December 2005 13:29 Send private message to this user   
    This things are as easy to fix... don´t buy any Sony BMG Cds any more... Them wil soon realize something.
    chesty (Inactive) 7 December 2005 15:47 Send private message to this user   
    Here's another option.

    If it gets to the point the recording industry does not get it and read the handwriting on the wall and get it through their thick heads drm is bad and it will cost them dearly for their own blatant greed then stop buying cds altogether and find other means of leisure and recreation.

    Even if people did not listen to another cd again i'm quite sure their lives would go on.

    I have over 1000 cds at home in my collection but i'm always at work making a living and i just don't have the time i would like to have to enjoy listening to my music collection.

    The only time i listen to cds or internet radio is when i'm piddling on my computer.
    StanH1000 (Senior Member) 7 December 2005 16:15 Send private message to this user   
    Does AnyDVD running in the background protect against this nonsense?
    djscoop (AfterDawn Addict) 7 December 2005 16:57 Send private message to this user   
    as much as I love sony for their techinical innovations, and great electronic components/equipment, they really need to re-think their stance on the DRM crap...many artists will start boycotting major record labels because they don't want their music with DRM protection anymore than comsumers.
    cufu (Junior Member) 7 December 2005 17:00 Send private message to this user   
    Hi to all....AnyDVD running in the backround, protects any pc with it's windows xp operating system.So copy protected cd's won't affect cd copying, as long you have AnyDVD running. For more info go to the slysoft.com website....cheers!
    llongtheD (Member) 7 December 2005 17:20 Send private message to this user   
    Don't hold your breath on the musicians boycotting them djscoop. Think of it this way: young upstart band living off of peanut butter sandwiches and wiskey for the last five years and finally getting a record deal. I doubt they will be too concerned about DRM when they sign their contract. I love music as well, but it seems like most musicians really don't get business minded about their music...until they have a couple million in the bank.


    If your fish seems sick, put it back in the water.
    djscoop (AfterDawn Addict) 7 December 2005 17:25 Send private message to this user   
    that is true, however there have already been a few news articles about already established bands who are complaining about their Cds being released with DRM protection. The latest one was Trapt's new CD, as the band got tons of email complaints to their website, because their fans couldn't rip the CDs they bought to itunes and play in their ipods.

    "I count to four and repeat...I'm a drummer." - Tre Cool of Green Day


    "I have no particular talent. I am merely inquisitive" - Albert Einstein

    This message has been edited since posting. Last time this message was edited on 7 December 2005 17:26

    llongtheD (Member) 7 December 2005 17:53 Send private message to this user   
    How many of them have seriously tried to get out of their contract? How many have actually started an effort to boycott? Its all about the money. When some of these bands actually start to take action, and not just send emails or letters, I'll start to believe. Of course they will send letters discouraging this DRM practice, but they know where their bread is buttered.

    If your fish seems sick, put it back in the water.
    djscoop (AfterDawn Addict) 7 December 2005 19:01 Send private message to this user   
    I'm not saying its at the point that tons of bands are striking or anything like that. My only point was that artists as well as consumers are pissed off with Sony's choices for DRM protection, so hopefully pressure from both sides will help Sony make better choices, thats all...

    "I count to four and repeat...I'm a drummer." - Tre Cool of Green Day


    "I have no particular talent. I am merely inquisitive" - Albert Einstein
    SithVader (Newbie) 8 December 2005 7:37 Send private message to this user   
    Let's not forget holding down the shift key.
    StanH1000 (Senior Member) 8 December 2005 8:08 Send private message to this user   
    What does holding down the shift key do?
    Dela (Staff Member) 8 December 2005 9:00 Send private message to this user   
    kills autorun
    mystic (Member) 8 December 2005 9:18 Send private message to this user   
    so lets sue them all burn them to the ground that stands between us and them and then stomp out the fire or piss on them till they smolder .... other then that its more up to the courts to provide us the consumer with safeguards to keep us from being used by companies like sony who explote the laws for their own financhal gain.... as I said SUE THEM ALL... but hey thats just my opion.....
    ireland (Inactive) 8 December 2005 10:07 Send private message to this user   
    just info for those that don't know..

    Enable/Disable Autorun

    How To Enable/Disable Autorun (Windows 95/98/Me)
    Access the System Properties Dialog. Using Control Panel: My Computer: Properties or Explorer: My Computer: Properties.

    Select the Device Manager tab.

    Select the CD-ROM folder.

    Select the entry for your CD-ROM drive.

    Select Properties.

    Select the Settings tab.

    Turn on or off the Auto insert notification option.

    Select OK.

    Select OK


    How To Enable/Disable Autorun (Windows NT/2000)
    Start RegEdit (regedt32.exe).

    Go to HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Cdrom.

    Edit the Autorun value to '1' to enable autorn, and '0' to disable autorun.

    Close RegEdit


    How To Enable/Disable Autorun (Windows XP)
    Open Windows Explorer by pressing the Windows + "e" key.

    Right-click the desired CD-ROM and select Properties from the menu.

    Select the AutoPlay tab.

    Select each item from the pulldown list and for the Action to perform, select "Take no action" to disable autorun, or pick the apporpriate action to take if enabling autorun.

    Select OK.
    runner121 (Inactive) 8 December 2005 13:20 Send private message to this user   
    Hopefully they will see that is was thier greed that got them into this.

    This message has been edited since posting. Last time this message was edited on 8 December 2005 13:22

    nonoitall (Member) 8 December 2005 22:09 Send private message to this user   
    Not likely.
    syeberman (Newbie) 9 December 2005 3:15 Send private message to this user   
    Now this may sound silly and illogical, but if Sony is so concerned about piracy. Why are they making the burning media and hardware for people to copy their music?
    runner121 (Inactive) 9 December 2005 3:18 Send private message to this user   
    Well I don't believe Im buying anything Sony for a while.They arent going to recall all of those discs
    with rootkits.They'd just assume we buy them and patch the crap.(which I won't do.)
    runner121 (Inactive) 9 December 2005 3:21 Send private message to this user   
    good question syeberman.I would have to say they're
    dillusional to think they can do that and be fighting
    piracy,copying or whatever.
    kaskibla (Newbie) 9 December 2005 5:24 Send private message to this user   
    Ireland, I was told to hold down the "shift" + "spacebar" keys when loading discs to avoid the protection code from being loaded. Does this actually work or is it a myth?
    Thanks.
    runner121 (Inactive) 9 December 2005 6:05 Send private message to this user   
    Is this binary visible on the disc when is inserted? or embedded in an installer?
    nonoitall (Member) 9 December 2005 15:09 Send private message to this user   
    @kaskibla:
    Holding the Shift key on a Windows computer (or Windows XP at least - I haven't checked others) disables auto-run, which, in the case of most CD "protection", is what installs the software that cripples the system's ability to copy the disc. I just tested it out on a game that normally opens up a splash screen when the CD is inserted and the screen did not come up, so apparently this works.
    Sledge13 (Newbie) 13 December 2005 13:19 Send private message to this user   
    Looks like Sony is targeting mainly Blacks music. Well, Sony is racist. Or is it that Sony recognises the truth. Blacks steal. That Blacks pirate more music than whites now. Or that Blacks are way behind Whites in the digital age and are just now getting up to speed on copying CDs? Or perhaps Sony thinks that Blacks won't squawk as much about this, as their more likely to not understand the significance of the software and the invasion of privacy and would allow them to get the proverbial foot in the door easier than if they had initiated this on White music. Whichever it is, Sony has targeted one racial groups music for this invasion of privacy. Racist!!!
    djscoop (AfterDawn Addict) 13 December 2005 19:09 Send private message to this user   
    are you sh*tting me? You have got to be the dumbest person in the world...someone please ban him!
    indo310 (Inactive) 18 January 2006 18:32 Send private message to this user   
    Sledge 13

    Has got to be one of the dumbest f***ers I have ever heard. And I am in total agreeance with DJScoop. This fool shoud just be banned to the wood shed out back and not let out until he has caught up with reality.

    Indo310
     Post your comment
     

    Subscribe to our newsfeed

    Get the latest headlines delivered directly to your favourite RSS reader or content aggregation service by using the links below.

    AfterDawn.com: News - RSS feed
    Add to Google
    Add to My Yahoo!
    Add to MyMSN

    Search for headlines

    Search through our news archive.

    Last week's most popular software downloads

    Digital video: AfterDawn.com | AfterDawn Forums
    Music: MP3Lizard.com
    Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
    Software: Software downloads
    Blogs: User profile pages
    RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
    International: AfterDawn in Finnish | AfterDawn in Swedish | download.fi
    Navigate: Search | Site map
    About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
    Contact us: Send feedback | Contact our media sales team
     
      © 1999-2009 by AfterDawn Ltd.