AfterDawn: Tech news

Sony BMG criticised over XCP

Written by James Delahunty (Google+) @ 03 Nov 2005 13:47 User comments (78)

Sony BMG criticised over XCP Sony BMG has come under criticism for the XCP (Extended Copy Protection) software included with some of its CDs. Mark Russinovich, a renowned Windows programming expert, said that the copy protection he encountered uses cloaked files to hide inside the Windows Operating Systems, making uninstalling a very difficult task. He commented that Sony's anti-piracy efforts have gone too far. XCP was developed by First 4 Internet, a UK based company. It is just one of several copy protection technologies that Sony BMG is trying out.
Russinovich, said that the methods used by this particular protection, are similar to those used by rootkits, which are often used to hide malicious software in the Windows Operating System, to avoid detection by anti-virus software. About 20 titles are thought to contain XCP software and in May 2005, Sony stated that more than two million discs shipped with the technology. It allows consumers to make only three copies of an album, and only allows consumers to listen to the music on a Windows OS through use of proprietary software.

The CDs play back fine in normal CD players and the copy protection is ineffective on either Macs or Linux. "Not only had Sony put software on my system that uses techniques commonly used by malware to mask its presence, the software is poorly written and provides no means for uninstall." Russinovich said on his blog. He said that the license agreement made no mention of the fact that you can't uninstall the software. It is possible that under the Computer Misuse Act in the UK, Sony BMG could be open to prosecution for making "unauthorised changes" to a machine, according to law expert Nick Lockett.

"There would be no problem if there's a big screen coming up saying as part of the anti-piracy measures this CD will amend your operating system," he said. Mikko Hypponen, CEO of F-Secure also shared the worries. "What we are scared of is when we find a new virus written by someone that relies on the fact that this [XCP] software is running on tens of thousands of computers around the world," he said. "The rootkit would hide that virus from pretty much any anti-virus program out there."

First 4 Internet however was quick to defend its technology from criticism. Mathew Gilliat-Smith, chief executive of First 4 Internet said there was absolutely no evidence that viruses were being written that took advantage of XCP and that the techniques used by the software are used by many other programs. He said that debate sparked by Russinovich's work, led to the company releasing information on the hidden files to anti-virus companies to help them identify them correctly.

He also said that users were properly warned about the copy protection. "It's clearly packaged on the CD that its copy-protected," he said.

Source:
BBC News

Previous Next  

78 user comments

13.11.2005 13:55

Anyone know a good lawyer. This is totaly grounds for a law suit, mainly trespass and destruction of property. Even following Sony's instructions you drive disappears. I sure hope the FBI goes after Sony, under the same law which they go after virus makers. Isn't there something illegal about invading a private computer? Fk'em....I say boycott the bastards.

23.11.2005 14:01

Die Sony!

33.11.2005 14:32
SkyDomain
Inactive

I'm getting real tired of Sony! They are scared of thier own shadow! I hope Spybot removes the Sony Malware in the next definition update :D

43.11.2005 15:07

I was on a Sony kick for a while but not no more. Installing what is basically a root kit on to the PC. I hope someone does go class action on them. I have not seen a post mortem onwhat the cd installs, but it could be a way for anyone to install anything (more DRM) on to your PC

53.11.2005 15:40

I read the www.sysinternals.com article by Mark Russinovich about this the other day where it really disects what it going on with the rootkit. What is the most disturbing part is that the Sony rootkit hides any file that starts with $sys$ - it's not viewable with explorer or task manager. How soon will it be before a virus takes advantage of this? It will be much harder to clean when the process and files are hidden from the OS. This is one of the worst security holes I have ever seen and very easily exploitable if installed on a pc since all it takes is renaming a file to hide it. I have already heard of it being used to bypass the cheat detection in World of Warcraft by hiding the cheat program so they can't see it. I really don't think it will be long before much more malicious exploits are released than just online game cheating.

63.11.2005 15:43

Quote:
The CDs play back fine in normal CD players and the copy protection is ineffective on either Macs or Linux.
thats why i have mac...

73.11.2005 15:51

thinking about installing Linux on one of my spare pcs. As soon as they come out with good ripping software for linux

83.11.2005 15:57

As for what the new viri will take advantage of this...check out BartPE. Bart will make easy work of any new viri or malware that comes out.

93.11.2005 16:05

another reason contributing to the slump cd sale. sad sad a double edge sword.

103.11.2005 16:22

Thanks christ93, but when I tried BartPE a while back it wouldn't even show the hidden Windows metafiles like $Secure, $Boot, etc so I wonder how effective it would be against real rootkits. There are many metafiles already on your pc that are hidden from the Windows API so explorer does not show them, and BartPE didn't either, unless you know of a plugin for it that does. You can see many of them with http://www.sysinternals.com/Utilities/RootkitRevealer.html

113.11.2005 16:30

Isn't it funny that Mr. Gilliat-Smith said that there isnt' any viruses out there that would take advantage of this. Well after this article is out for a while what then sir. Plus what about the fact that a person would unknowingly play a CD in a computer at work and install this software??? It's hard enough for the IT guys here at work to keep our computers working because some pinhead downloads a stupid game to play at lunch loaded with spyware and other malware.

123.11.2005 16:31

haha wonder if Windows XP , switch to power users can it copy the file down to computer? .. or most disc use autorun to activated the install of software .. un-run cd? ... or use stand-alone copy machine.. good softwares can help to tackle this and so as good writers can negociate the way of writing.. older writers may get confused about this and thus your medium is wasted...

133.11.2005 16:51

Yeah, fuck'em up and let's boycott their shit now. I used to buy Sony products i.e. dvd burner, DVD+R media, cd-r media, dvd movies - as a matter of fact, I owned a Sony 55' widescreen HDTV and I was going to get (support) their new generation of Blu-Ray dvds when it comes out, but NOT anymore. This is it for Sony, I'm not going to waste a "single penny" on their shit no more period. I hope their greedy ass will be sued by tons and tons and tons of people around the world. I mean c'mon.. who else would want to put a virus or "rootkit" into their music cds, and once you listen to it on your computer, it automatically installs some kind of hidden virus/shits/files inside your computer without your consent? In addition, it will eventually terminate your computer OS if you try to uninstall their kind of shits/files -- man this is bullshit and it is a definitely a crime. Sony is the real criminals, case closed!


WARNING: Do not "update/upgrade" your SAMSUNG BD-D5XXX series (Bluray Player), or else you cant enjoy any of your movie files.
How 2 downgrade Samsung BD-D5XXX Series Bluray player http://forum.samygo.tv/viewtopic.php?f=18&t=4244

143.11.2005 18:24

On a second tought i don`t i`ll support the blue ray technology,maybe hd-dvd is the way to go.

153.11.2005 18:42

http://edge.i-hacked.com/archives/717 a how to to get rid of this damn rootkit, sony has gone too far.

163.11.2005 19:29

Quote:
He also said that users were properly warned about the copy protection. "It's clearly packaged on the CD that its copy-protected," he said.
Unfortunately, he forgot that there is a fine line between copy protection and creating "unathortized changes" to your machine. Obviously, they are just trying to come up with an excuse for the rootkits and justify their actions. So anyways...the company that I work for owns Sony BMG. At this point, I am cleary staying away from all this type of music for now and will forever as well. I hope you all do the same. V

173.11.2005 23:46

Quote:
Quote: -------------------------------------------------------------------------------- He also said that users were properly warned about the copy protection. "It's clearly packaged on the CD that it’s copy-protected," he said. -------------------------------------------------------------------------------- Unfortunately, he forgot that there is a fine line between copy protection and creating "unauthorized changes" to your machine.
That is, unfortunately the sad truth.. Myself and A_Klingon had a good old-fashioned banter about this subject, in which we 'took over' the `Apple sells million videos in just 19 days` thread Take a look - some of the evidence Klingy found is absolutely astonishing! http://www.afterdawn.com/news/archive/6991.cfm AND, may I add, sony are FAST losing a lot of fans....
This message has been edited since its posting. Latest edit was made on 03 Nov 2005 @ 23:47

183.11.2005 23:48

most ppl don't copy music cd's anymore anyway just rip them to mp3. so why do they need this type of copy protection

194.11.2005 0:02

-catman- People can rip mp3's of the highest quality and share them around. And so people download and burn them - and with little or no quality loss from the actual cd - hence the DRM

204.11.2005 4:16

Hey, does somebody know if the latest Santana album "All that I am" has this protection? Cuz I just bought the CD and i'm afraid of playing it on my computer now... is there like a list of sony bmg albums that have this protection, so that we can avoid buying them?? Or is it like ALL the new albums that are coming out that have it?

214.11.2005 4:34

No one has the whole picture yeap think people if this is their protection and its in production then not only is it on the cds and dvds that have been bought but they are waiting at your local walmarts and best buys and targets everywhere in the usa and even farther then that talk about a world wide recall of all their products and yes with the new laws in the USA for installing hiden software on your system (which they are forcing you to install or you cant watch or listen to the cd on a computer, which means if you bought it no company will take it back because everyone has a burner then your out $20.00 so this is exstortion by sony to install the software that theydidnt tell you about and now everyone should install it on their system and start a class action lawsuit against them and show them how we as consumers feel about this type of disepstion and also hold the company who sold it libbel for damages think how quick they will drop sony from there shelves.......

224.11.2005 4:46

any one want to find a lawyer heres whos in charge at sony: Company Name Sony Corporation Founded May 7, 1946 Headquarters 6-7-35 Kitashinagawa, Shinagawa-ku, Tokyo 141-0001, Japan Access & Map Representative Corporate ExecutiveOfficers Chairman and CEO Howard Stringer President and Electronics CEO Ryoji Chubachi Executive Deputy President President of TV Business Group Katsumi Ihara this is the man who gets the big bucks or yens for them (sorry I had to) anyway as they say Sh#t rolls down hill from here....

234.11.2005 5:08

check out this one there are alsort of software manufacture getting pissed about this sony softwaes issues: World of Warcraft hackers using Sony BMG rootkit Rootkit beets spyware By SecurityFocus Published Friday 4th November 2005 10:23 GMT Get breaking Security news straight to your desktop - click here to find out how Want to cheat in your online game and not get caught? Just buy a Sony BMG copy protected CD. World of Warcraft hackers have confirmed that the hiding capabilities of Sony BMG's content protection software can make tools made for cheating in the online world impossible to detect. The software - deemed a "rootkit" by many security experts - is shipped with tens of thousands of the record company's music titles. Blizzard Entertainment, the maker of World of Warcraft, has created a controversial program that detects cheaters by scanning the processes that are running at the time the game is played. Called the Warden, the anti-cheating program cannot detect any files that are hidden with Sony BMG's content protection, which only requires that the hacker add the prefix "$sys$" to file names. Despite making a patch available on Wednesday to consumers to amend its copy protection software's behavior, Sony BMG and First 4 Internet, the maker of the content protection technology, have both disputed claims that their system could harm the security of a Windows system. Yet, other software makers that rely on the integrity of the operating system are finding that hidden code makes security impossible. I really liked the last line making security impossible

244.11.2005 7:13

heres the link to remove it from your systems: http://cp.sonybmg.com/xcp/english/updates.html hope it works

254.11.2005 9:21

Would the same $sys$ work for hidden cheats and mods form Xbox Live?

264.11.2005 11:46

The patch from Sony, from what I heard, does not remove it. It just unhides the files that comprise the root kit.

274.11.2005 12:04

christ93 is right. The $ony "patch" DOES NOT REMOVE the DRM from your PC. It only removes the "cloaking" module. Here's an excerpt from a p2pnet story "Yesterday, the companies [$ony & First 4 Internet] released a software update that they say “removes the cloaking technology component that has been recently discussed in a number of articles”. Reading that statement, and the press statements by company representitives, you might think that that’s all the update does. It’s not. The update is more than 3.5 megabytes in size, and it appears to contain new versions of almost all the files included in the initial installation of the entire DRM system, as well as creating some new files. In short, they’re not just taking away the rootkit-like function — they’re almost certainly adding things to the system as well. And once again, they’re not disclosing what they’re doing. No doubt they’ll ask us to just trust them. I wouldn’t. The companies still assert — falsely — that the original rootkit-like software “does not compromise security” and “[t]here should be no concern” about it. So I wouldn’t put much faith in any claim that the new update is harmless. And [First 4 Internet's] claim to have developed “new ways of cloaking files on a hard drive”. So I wouldn’t derive much comfort from carefully worded assertions that they have removed “the … component .. that has been discussed”. http://p2pnet.net/story/6858

284.11.2005 12:32

Die SonY? You getting real tired of sony? So are you guys saying you don't like the new PSP or you are not interested in the PS2 or the PS3 when it comes out?

294.11.2005 13:22

novicebb- Let's just say that installing cloaked rootkits on people's PCs without their knowlege or consent is not a game, it is an extremely serious breach of the public trust at the very least, even if it was perpetrated by the makers of the beloved playstation... and $ony wasn't looking too good on that front even before any of this nastiness. Ah, don't worry about it. Go kill some people in GTA or something.

304.11.2005 14:06

I, for one, am NOT interested in anything to do with Sony. I do not support them in any way anymore. I have had many bad experiences with them in the past, and this is just the icing on the cake for me. The Sony items I own at the moment (DVD Player, Receiver, and Video Camera) will die eventually, and will be replaced with another companies product if need be. I'll say it again, DIE SONY!

This message has been edited since its posting. Latest edit was made on 04 Nov 2005 @ 14:07

314.11.2005 16:42
OzMick
Inactive

Sony has been on my blacklist for years now. Hopefully more people can realise how crap their customer relations are and boycott this company. This is completely inexcusable, and if a class action starts up I'm going to go after them for the time and money it costs to remove their hack and any damage that any other viruses may cause through exploiting it, if it comes to that. Not to mention the blatent illegality of the program in just about every country with laws covering IT. Boycott Sony! Hit them where it hurts the most. And just think about the kind of crap that their BluRay disc is going to be packing... They have developed the thing from scratch, I don't want to know what one of the will do to my system.

324.11.2005 22:38
chasb441
Inactive

this is all very disturbing but not surprising that big companies like Sony get away with this crap. im all for boycotting there products but what about the average person on the street???? its only sites like this that promote the information and make it known but if you are not a 'nerd' (well we are!) then this news is not heard about. has anyone seen it in the public domain, news articles, tv?....if not then maybe a post to one of the big IT public news outlets might help....click online maybe (bbc)

335.11.2005 1:53

Nerd? The wife calls me a Geek....

345.11.2005 4:50

A reminder AnyDVD tackles Sony DRM Rootkit Virus! If AnyDVD is installed and active on your PC, the new so-called "Sony DRM Rootkit Virus" has no access to your system and the affected audio CD appears unprotected regardless! Another good reason to get AnyDVD! http://www.slysoft.com/en/download.html

355.11.2005 9:17

To Grey Area: First of all I never liked sony. I don't have a sony optical drive, I don't have a sony PSP or PS2. I don't own anything sony except maybe some columbia artist cd's and some columbia or sony studio's movies. I just a bit shocked that there are others on this board that says "screw" sony is all. Plus I read some time back that Congress was considering passing a measure where they would allow some companies to damage your harddrive if you have illegally obtained media material on your computer.

365.11.2005 12:26

so what your saying is, if i copy a sony cd it will put a virus of sometype on my comp? if so im not buying their products no more.

375.11.2005 12:39

I won`t buy anything with the name sony on it.

385.11.2005 14:08

I don't know about you all...but reading all of your comments have since made me realize that this is an "epidemic" between free information and right of use, and corporations trying to put a leash on innovative technology and interests. At this point, I am working on trying to locate my state senator and address a letter and get some petitions signed so that SOMETHING can be done. I am sure that it my be a useless thing, but if we as a community of media and technology users keep letting companies like Sony, MPAA, RIAA, and many others to deliberatly keep stifling our use to do what we want with our media and obtain more use of the internet....it will always be an issue and companies will always being using frivolous lawsuits to generate more money in their pockets at the expense of the people. Like it was once said..."The music is about the people, not the money." This also does apply to movies that are getting GREATER exposure on the internet than they would elsewhere. So I urge all, contact your congressman/senator, get some petitions signed, and do anything else you can so that we can finally let them know..."No...we're not going to take it!" (Hehe, sorry for the use of the song.) :P

395.11.2005 14:35

Isn’t it Hypercritical of sony putting out dvd movies and music cd's with copy protections and then still selling dvd-burners and dvd's and cd disks with there name on the disks. So we can copy there movies and music cd's,and in other words sony is working the right and left bank of the river..and laughing all the way to the bank.. with our money......... My 4 cents.

405.11.2005 16:37
chesty
Inactive

I just bought a G3 live cd by joe satriani stevie vai and john petrucci on epic / sony bmg music with xcp copy protection technology and the first thing i encountered was a end user agreement that stated that rootfile would be installed in my harddrive and it could be easily removed. ( which is a lie.) I was not about to download this crap in my harddrive BECAUSE THE ONLY SAFE AND EFFICIENT WAY OF GETTING A ROOT FILE OUT OF THE HARDDRIVE WOULD ENTAIL REINSTALLING WINDOWS XP AND A HARDDRIVE DRIVE REFORMAT. I promptly installed tht newest version of SLYSOFT AnyDVD with XCP removal and the program read those cds like to friggin' rootkit was not there at all. Just the cd wave files thank - you. I wonder how long this would keep up when people are not going to but cds that are clearly marked as being copy protected just like the retarded developer said of xcp. It's even worse when the cds are not marked. I just sitting here laughing my butt off because surely sony/bmg is going to backpedal on this from a lot of pissed of people and the ensuing drop in sales. This will not last long. dopes................... heheheheheheheheheheheheheheheheheheheheh !!!!!!!!

415.11.2005 16:38
chesty
Inactive

I just bought a G3 live cd by joe satriani stevie vai and john petrucci on epic / sony bmg music with xcp copy protection technology and the first thing i encountered was a end user agreement that stated that rootfile would be installed in my harddrive and it could be easily removed. ( which is a lie.) I was not about to download this crap in my harddrive BECAUSE THE ONLY SAFE AND EFFICIENT WAY OF GETTING A ROOT FILE OUT OF THE HARDDRIVE WOULD ENTAIL REINSTALLING WINDOWS XP AND A HARDDRIVE DRIVE REFORMAT. I promptly installed tht newest version of SLYSOFT AnyDVD with XCP removal and the program read those cds like to friggin' rootkit was not there at all. Just the cd wave files thank - you. I wonder how long this would keep up when people are not going to but cds that are clearly marked as being copy protected just like the retarded developer said of xcp. It's even worse when the cds are not marked. I just sitting here laughing my butt off because surely sony/bmg is going to backpedal on this from a lot of pissed off people and the ensuing drop in sales. This will not last long. dopes................... heheheheheheheheheheheheheheheheheheheheh !!!!!!!!

425.11.2005 17:32

Sony's DRM classed as Spyware and compromises PC security Posted by Seán Byrne on 06 November 2005 - 00:45 - Source: c|net news - Threats While Sony's use of rootkits and all its publicity may seem as bad as it is, apparently its DRM software is encountering further concerns including being classed as Spyware by Kaspersky Lab. It has also been found to introduce a security vulnerability as well as potentially crash Windows during its installation of the patch to 'decloak it'. Once the user agrees to the EULA when the CD is loaded, the rootkit is installed, which makes files, directories and registry keys beginning with '$sys$' invisible to the system, such as those used by the CD's DRM software. As Sony's rootkit can hide files and registry keys, this introduces quite a serious security risk, since hackers, viruses or other unwanted software can make themselves invisible also on any system with this rootkit installed just by adding a $sys$ to the beginning of its file/directory names or registry keys. This is what makes it such a concern for the companies behind antivirus software since it cannot detect these type of files. Also, up until now, rootkits have only ever been used by malicious software and viruses, so tools that check for rootkits would need to be designed to recognise the difference between this and those used maliciously. Finally, even though Kaspersky classes Sony's DRM software as Spyware, apparently the software has also been found to call home by connecting to Sony's website. While it appears like it only looks for updated lyrics or images each time one of its copy-protected CDs is loaded, there is a potential for the remote server to log the IP addresses and how often the disc is played. However, according to a company spokesman, no information is ever collected. The issue reaches much further than the individual PCs of those users who buy particular Sony CDs, the antivirus companies say. The DRM software uses what is known as a "rootkit," which means that it is invisible to the operating system, to most antivirus and security software and to IT departments trying to cope with security on desktop and notebook computers. Previous Next Furthermore, say the antivirus companies, the rootkit software can be exploited by hackers and viruses and used to cloak any file from the operating system. A rootkit takes partial control of a computer's operating system at a very deep level in order to hide the presence of files or ongoing processes. "The Sony rootkit can be used to hide any files from the operating system, so we think the way that Sony has implemented this is somewhat flawed," said Graham Cluley, the senior technology consultant at Sophos. "The danger is that other malware (malicious hardware) may come along which exploits the Sony rootkit." The full article can be read here. http://news.com.com/2100-1029_3-5933428.html Some further info can be read on this PC World article. Sony DRM Decloaking Patch Might Crash Windows http://www.pcworld.com/news/article/0,aid,123438,00.asp This has been a bad week for Sony, particularly when it comes to its policy to have all its CDs protected with anti-piracy measures. At least they have agreed to move away from its use of rootkits, however as they have 20 CD titles already on market using this version of DRM, they have done quite a bad mistake when it comes to loyal customers who have chosen to purchase these particular CDs. As audio CDs were not designed to have copy protection measures on them in the first place, it would be better for the record labels to just do away with risky anti-piracy measures altogether on CDs, since in the end, the only people these anti-piracy measures affect are those who buy the CDs! Those who choose to download music freely from P2P networks will never be affected, regardless of how sophisticated CD copy protection gets. CD anti-piracy measures may stop the casual user from making their music available online, however all it takes is for one person to successfully rip the contents in order for it to spread like a virus over P2P. http://www.cdfreaks.com/news/12639

436.11.2005 0:46

Quote:
He [Mathew Gilliat-Smith, CEO of First For Internet] said ... users were properly warned about the copy protection. "It's clearly packaged on the CD that it's copy protected."
What a load of friggen crap. Go ahead - keep avoiding the issue. I can't really blame First 4 Internet, I suppose. Attorneys cost a lot these days. This is not merely copy-protection, this is a stealthy, covert INVASION of people's home computers! Mr. Gillia-Smith: After reading Mr. Russinovich's exposure of the gall your company has, I sure as hell wouldn't want to be in your shoes right now. Expect litigation. You've earned it. I'd like to congratulate you. You've sunk DRM to an all-time unprecedented LOW. Anything for a buck, eh? (Or in your case, I guess, a pound). In the process of automatically foisting your filthy software into people's operating systems, you have also managed to drag a (compliant) Sory Corp down into the mud as well. Sony is going to pay for what it has done, and you along with them -- both of you are going to be wearing this albatross around your necks for one hell of a long time to come. Nice Work!

447.11.2005 6:27
chasb441
Inactive

oh dear....does not look good for us brits ??? have a read of this peoples.... http://news.zdnet.co.uk/software/0,39020381,39235647,00.htm

457.11.2005 6:51

chasb441 every thing on sony from the news i have posted in this thread,even what ye just posted http://dvdxcopy.afterdawn.com/thread_view.cfm/253611 a quote from lawman, It all comes down to the old Saying. Caveat Emptor' (let the buyer beware) Well I have one for SONY.... Change that to 'Caveat Vendor' (let the seller beware)".

This message has been edited since its posting. Latest edit was made on 07 Nov 2005 @ 6:59

467.11.2005 7:06
riplord
Inactive

Just another reason not to buy cd's. ;)

477.11.2005 8:43

Mathew Gilliat-Smith, chief executive of First 4 Internet: "It's clearly packaged on the CD that its copy-protected," he said. A copy-protection sticker on the back of a case, does not constitute the endorsement of installing spyware on a computer. The buyer is not informed about such spyware either on the cd label, or when playing the disc on a Microsoft Operating System. In effect, this is malicious code, stored on your computer without your knowledge or consent, Mr. Smith..

487.11.2005 8:57

read this, Why they say spyware is good for you Now the lawyers are taking aim, too. Robert Green, a partner at the San Francisco firm of Green Welling, says he's readying a class action lawsuit against Sony. http://forums.afterdawn.com/thread_view.cfm/254103

497.11.2005 9:46

bullshit. i bought a cd like that. the band was " a static lullaby". and i have an ipod, now i bought the cd so that i could have the best quality when i rip it to AAC. i was the owner of that cd i should have been able to rip it. i called up sony and bitched, they sent me a letter saing that the copy protection was stated right on the package. thats b/s, sony is cutting out a major player in the music industry, ipod users. i only bought the cd for best quality audio. so the cd was uslless to me, i had no use, i dont even own a cd player besides my computer cd-rom. so i figured out a way to take just the audio tracks frokm the cd, and made a copy, then returned it to the store i bought it from, saying that was b/s. i used slysofts, clone cd, or maybe it was elabote bytes. sony is being stupid, i wasnt tryin to do anything bad, i was just tryin to put it on my ipod, but i had to spend three hours doing it. fukers. i was try8ng to be honest , but from now on ill just d/l .... ha

507.11.2005 10:06

Just a dummy question. If I'm gonna use Linux or MacOS or a propietary OS, shall I be able to play on my workstation Sony's audio discs with xcp protection or not? While playing those discs, I suppose that I can rip the audio tracks with a third part application.

517.11.2005 10:35

Important Notice! spacer AnyDVD tackles Sony DRM Rootkit Virus! If AnyDVD is installed and active on your PC, the new so-called "Sony DRM Rootkit Virus" has no access to your system and the affected audio CD appears unprotected regardless! Another good reason to get AnyDVD! Read more information about Sony DRM Rootkit Virus: Sysinternals.com: Sony gone too far F-Secure.com: ...security implications http://www.slysoft.com/en/download.html every thing on sony from the news i have posted in this thread,even what ye just posted http://dvdxcopy.afterdawn.com/thread_view.cfm/253611 read this, Why they say spyware is good for you Now the lawyers are taking aim, too. Robert Green, a partner at the San Francisco firm of Green Welling, says he's readying a class action lawsuit against Sony. http://forums.afterdawn.com/thread_view.cfm/254103

This message has been edited since its posting. Latest edit was made on 07 Nov 2005 @ 10:45

527.11.2005 13:11

I wonder if they have tried this same thing on DVDs?

537.11.2005 18:49

Who knows? I don't think so, but it could be easily done if they (Sony) felt like it. But after all the shrapnel being fired at them right now, I wouldn't advise them to. Sony had better get it's act together and come up with something fair to consumers before it injects it's DRM measures into their soon-to-be blu-ray disc format.

548.11.2005 4:08

this is like... the most depressing thread ever... I need some tequila!!

558.11.2005 4:13

does anybody know how many "limited copies" does this new copy protection allow you to make?

568.11.2005 11:14

""For a breach [of the CMA], it would need to be proved beyond any reasonable doubt that access to the computer was unauthorised and that the provider knew that such access was unauthorised. An alternative charge of unauthorised modification of a computer under the Act is also likely to fail because it would be difficult to prove the necessary intent to impair the operation of the computer," said Robertson." Well, when we access the internet, we seem to be saying "go ahead, infect my pc" everytime we access a webpage. So, as with any intent to do my home or property harm, I can, by law, take whatever mesures needed to protect it or "defeat" the act. So, whatever software I must use, what ever techno item I need to stop it. So, I propose this. Sony can sell each cd for 1.00, that buys you use on your audio player. 3.75 to be able to play it on your PC. 8.00 for all the above plus xfer it to your MP3/WMA player. Thanks to VCR's and farther time, getting songs from CD to MP3 format is not a issue. :-)

578.11.2005 11:28

Sony provides executable to facilitate removal of rootkit Posted by Dan Bell on 08 November 2005 - 20:46 - Source: Sony Thanks to a posting here by member Alex Thyl, we learn that this morning Sony has taken another step to help those customers that are saddled with the infamous rootkit. It appears they have just uploaded a program called XCP-aurora. By downloading this "service pack" and running it on your system, it will supposedly undo the damage by removing the driver for the cloaking mechanism that can hide files from anti virus scanners. Or at least this is the impression we have at the moment, since we are not afflicted with this malware personally and cannot verify the effectiveness of this new tool. Therfore, we are not recommending it, just passing along the information. SOFTWARE UPDATES/ PLUG-INS November 8, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers. Please note, Service Pack 2a is a maintenance release designed to reduce the file size of Service Pack 2. It includes all previous fixes found in Service Pack 1 and Service Pack 2. "This component is not malicious and does not compromise security." Well, I beg to differ after reading articles from security experts and also anti virus companies. Some may say this is too little, too late and we can even suspect that the so-called tempest in a teacup as First 4 Internet and Sony would like us to believe, is not nearly over. You can visit the Sony/BMG page here for the downloads if you have purchased one of these Cd's. http://cp.sonybmg.com/xcp/english/updates.html Come to think of it, it seems prudent that now, not only should Sony be forced to recall these afflicted Cd's, but they should also post a listing of those products containing the malware. This would let the consumer know if there is a need to even run any more executables from Sony by reading said list, and also so that they can avoid purchasing these products in the first place. At least then it's a buyer beware situation. Right now, we are not sure which music Cd's carry this payload. Possibly, the best thing is to avoid all these Sony/BMG music Cd products until they are forthcoming with the information. If you have seen such a listing, please share it in the reactions below! While your at it, Wwhy not visit this link here in the CD Freaks Living Room and vote in our poll to say whether you think Sony needs to pull these controversial DRM products from the shelves. Whereas we can't realistically expect legislation to protect us from corporate decisions such as these, if enough people continue to keep the topic alive and then eventually a recall is performed, then the companies will think twice before unleashing such malware in the future. Recalls cost money and this is something corporations understand. http://www.cdfreaks.com/news/12651

588.11.2005 15:15

novicebb- Thread getting a bit stale. Didn't mean to offend. Your post fooled me into thinking you were a $ony fanboy. Even then I was just goofing. I remember the bill you were talking about. Don't think it saw the light of day (I hope). It's almost funny that they have released THREE patches for a lame-brained CD DRM scheme. Almost...


We mustn't lower ourselves to the level of those we loathe, lest we become loathsome ourselves.

599.11.2005 4:28

You know, it's ironic, ...... Many of you probably won't remember this, but .... Some years ago, at the very beginning of the time when a few, smaller labels were experimenting with copy-protected music cds, I sent a comment to the Sony website. Yes, I did get an official(-ish) response. This was at a time when no one had really heard of the concept "DRM", and a time when the patents for the original, standardized red book cd format was about to expire. These few labels figured that they could get away with 'fudging' with the red book specs since strict adherence to the standard itself would soon not be legally enforceable anyway. So, in ameteurish-fashion, they started dabbling with more and more highly-irritating DRM "initiatives". Well, even back then, people were getting more than a little pissed off at the increasing number of snags they were running into when, for example, they simply tried playing these discs back, say, on their car stereos. Almost 100% of the time these discs were NEVER marked as being "copy protected" or "copy restricted" or carried a warning of any kind. People started to complain more and more. I wrote to Sony, who - as you will recall - was the co-inventor of the cd red-book standard itself. Some lady-spokeswoman sent me back a (rather standardized) formulaic reply. She thanked me for my concern, and assured me that they were aware of the problem and would be pressing for compliance from those companies who violated the red-book standard that they (Sony) had invented! (I assumed that this would include taking LEGAL action against those companies who willfully disregarded the standard specs). MY, MY, MY, HOW TIMES HAVE CHANGED, EH? Sony is now singing a very _different_ tune, as you can see. Since they now own the entire Columbia Records back catalogue, which, presumably, needs "protection", they are now doing far worse things than those which they prohibited other companies from doing just a short time ago. They are rampantly distorting their own specs. In light of what they've recently done, they sure sound like a bunch of hypocrits to me. I won't even install their bloated "Sonic Stage" software (to make a few lossy-compressed Atrac3+ music files), because the software, which only makes restricted-use files anyway, leaves behind major DRM enforcers on your hard drive, even after you UNinstall it! Piss on 'em. [Shrug] (Etc. etc., blah-blah-bla.......)

609.11.2005 5:45

KLINGIE, Do not forget whos behind blue-ray..(sony virus corporation)i hate to see what crap they put on there blue ray disks.. as posted by glass, Lets all help by not supporting Sony, especially after their Rootkit B.S. Remember, they are the main people behind Blu-Ray. Looks like I am going to "root" for the HD-DVD format. and i agree,as anything backed or made by sony virus rootkit corporation is considered by me is nothing but a sony rootkit virus.

619.11.2005 6:01

I am wondering what the names of the CD's are. I also think that maybe everybody should stop buying anything that's Sony. I know that I personnaly will not be buying anything from them anymore. But I also know that I'll rip anything I can from them.

629.11.2005 17:56

For those interesred read: AnyDVD tackles Sony DRM Rootkit Virus ------------------------------------- Since March 2005, Sony BMG is using a rootkit-based DRM system on some newer audio CDs. This DRM system is a serious hazard to each Windows based PC. Well known websites like F-Secure.com and SysInternals.com (URLs below) are confirming this exposure. If AnyDVD is installed and active on a PC, this new so-called "Sony DRM Rootkit Virus" has no access to the operating system and the affected audio CD appears unprotected regardless! "What the heck Sony thought to themselves," SlySoft's CEO Giancarlo Bettini was kidding, "maybe they wanna build their own bot net?". This "anti rootkit protection" is not a new function of AnyDVD, rather it is the nature of AnyDVD to filter all undesired stuff between a CD/DVD drive and the operating system. It is just one example, how well AnyDVD's option to "Remove CD Digital Audio Protection" is working. AnyDVD v5.5.1.1 New: Added functionality to remove invalid VOBUs from a title set to the option to remove "Protection based on unreadable Sectors". This fixes the error message "Out of memory" from DVDShrink with some DVDs, which suffer from a certain mastering error. Fix: The option to remove "Protection based on unreadable Sectors" could cause DVDShrink to abort with an "invalid Navigation structure" error with some DVDs, which suffer from a certain mastering error. Fix: Setup program did not delete obsolete RegCheck.exe file from previous installations Fix: Undesired high CPU use for several minutes when checking for program update via internet connection http://www.bitburners.com/News/Software_Updates/AnyDVD_tackles_Sony_DRM_Rootkit_Virus/

6310.11.2005 2:54

Quote:
KLINGIE, Do not forget whos behind blue-ray..(sony virus corporation)i hate to see what crap they put on there blue ray disks..
Oh, I know it, Ireland. I know it. And just last month I bought yet another Sony DVD player (settop), because it's the first player I ever saw that can actually play .MP3 music files directly from a DVD disc instead of just from a CD-R. That's quite an accomplishment. Up until now, DVD players would only play mp3's off a cd. You could put one heck of a lot of Fats Domino .mp3 albums on a dual-layer DVD. (I'm guessing *at least* 80 (eighty) or so. (Wonder how many mp3 albums I could get on a single blu-ray disc?) Why, it just boggles my normally-unboggleable mind!!! And of course, it HAS HAPPENED. The inevitable - just as I stated (up above). Sony is now being sued. No surprise there, huh? Comment from Doom9's site: "Sony's DRM ends up in court in Italy as the Italian EFF is suing Sony for software that is alike to a virus." I don't have a link. (Doesn't matter - Sony's in deep s--- now). It's a pity, all of this. I had really looked forward to the new blu-ray format, preferring it over HD-DVD if for no other reason than it's much higher storage capacity. But I will absolutely *REFUSE* to allow Sony to install any software - (ANY!) on my computer in order to use the format. I'm not talking so much about computer-playback of commercial blu-ray movie discs (I doubt my computer has enough muscle to play Hi-Definition anyway), but rather, any future blu-ray burner I may care to buy. The blank blu-ray disc had better come SOFTWARE-FREE or else I will have nothing to do with it. Glass - I owe you an email. (Soon I hope - I haven't forgotten you). I'll cc. it to you too, Larry. -- Klingy --
This message has been edited since its posting. Latest edit was made on 10 Nov 2005 @ 3:11

6410.11.2005 14:40

Well after a few quick clicks after a google search I found the site I wanted. http://www.firstgov.gov/Agencies/Federal/Legislative.shtml This link will take you to our fine government and where you can send an email to you state senators and congress man or woman. What good it will do well that will left to be seen, the sqeaky wheel is always heard so lets make some noise.

6611.11.2005 3:57

Wow! (Great link, christ93). Yep - this had to happen too. (Others using Sony's/First 4 Internet's shitware to infect people's PCs.) Others are now using rootkits, and Sony is getting sued. Sounds about right. (!!!) This whole mess is probably the worst thing Sony's ever done in it's entire history. I could be wrong, but I think I read somewhere that Sony has now recalled (taken back) all of it's 20 music cd titles carrying their unacceptably-manipulative "copy protection". Blu-ray indeed. [sigh.....] I'm going to be watching this one very closely before I invest so much as a nickle. What do you wanna bet Sony has just set back the introduction of the blu-ray format by months ? Few people trust them now. This may be just the edge that the HD-DVD camp was looking for to win "The War". If they don't FarkUp like Sony did, they just might make it too.......

6711.11.2005 4:28

good morning klingon..and all the names of some of Sony Rootkit Virus Corp.,music cd's. EFF posts list of Sony rootkit Cd's- testing waters for lawsuit Posted by Dan Bell on 10 November 2005 - 23:06 - Source: Electronic Frontier Foundation The Electronic Frontier Foundation (EFF) is considering a lawsuit against Sony due to the rootkit fiasco and is taking names of affected customers. They have gathered at least a partial list of the Cd's that contain the malware so at least we can finally learn some of the titles. * Trey Anastasio, Shine (Columbia) * Celine Dion, On ne Change Pas (Epic) * Neil Diamond, 12 Songs (Columbia) * Our Lady Peace, Healthy in Paranoid Times (Columbia) * Chris Botti, To Love Again (Columbia) * Van Zant, Get Right with the Man (Columbia) * Switchfoot, Nothing is Sound (Columbia) * The Coral, The Invisible Invasion (Columbia) Acceptance, Phantoms (Columbia) * Susie Suh, Susie Suh (Epic) * Amerie, Touch (Columbia) * Life of Agony, Broken Valley (Epic) * Horace Silver Quintet, Silver's Blue (Epic Legacy) * Gerry Mulligan, Jeru (Columbia Legacy) * Dexter Gordon, Manhattan Symphonie (Columbia Legacy) * The Bad Plus, Suspicious Activity (Columbia) * The Dead 60s, The Dead 60s (Epic) * Dion, The Essential Dion (Columbia Legacy) * Natasha Bedingfield, Unwritten (Epic) * Ricky Martin, Life (Columbia) (labeled as XCP, but, oddly, our disc had no protection) Several other Sony-BMG CDs are protected with a different copy-protection technology, sourced from SunnComm, including: * My Morning Jacket, Z * Santana, All That I Am * Sarah McLachlan, Bloom Remix Album This is not a complete list. So how do you recognize other XCP-laden CDs in the wild? Tip-off #1: on the front of the CD, at the left-most edge, in the transparent "spine", you'll see "CONTENT PROTECTED" along with the IFPI copy-protection logo. A few photos make this clearer. You can visit the EFF for more information and also to read up on what else this organization is up to. We ought to think about kicking these guys some support, they always seem to be in the forefront when it comes to protecting peoples rights and fighting the big dogs. http://www.cdfreaks.com/news/12667 Sony-BMG Rootkit: EFF Collecting Stories, Considering Litigation November 09, 2005 EFF is collecting stories from EFF members and supporters who have purchased Sony-BMG CDs that contained the "rootkit" copy protection software. We've previously posted at least a partial list of CDs infected here We're considering whether the effect on the public, or on EFF members, is sufficiently serious to merit a lawsuit. If you satisfy the following criteria, we would like to hear from you: 1. you have a Windows computer; 2. First 4 Internet's "xcp" copy protection has been installed on your computer from a Sony CD (for more details, see our blog post referenced above or SysInternals blog); 3. you reside in either California or New York; 4. you are willing to participate in litigation. We have not made any final decisions about filing any legal action, but we would like to hear from music fans who have been harmed by the Sony-BMG "rootkit" copy protection technology. Please contact allison@eff.org. Posted by Cindy Cohn at 07:27 PM | Permalink | Technorati http://www.eff.org/deeplinks/archives/004149.php

6811.11.2005 5:04

I bought a Sony monitor about six months ago, and after installing it, my DVD backup software would no longer operate. It was obvious to me immediately that something about the install had disabled the DVD backup software. The DVD FOR FREE program has worked to enable the software again, though. I still don't know what was installed.

6911.11.2005 12:29

KLINGON MORE CRAP IN THE STATES Justice Dept. proposes tougher copyright laws WASHINGTON (Reuters) - People who attempt to copy music or movies without permission could face jail time under legislation proposed by the U.S. Justice Department on Thursday. The bill, outlined by U.S. Attorney General Alberto Gonzales at an anti-piracy summit, would widen intellectual-property protections to cover those who try but fail to make illicit copies of music, movies, software or other copyrighted material. It would also enable investigators to seize assets purchased with profits from the sale of illicit copies, as well as property such as blank CDs that might be used for future copying. Those found guilty of a copyright violation could be forced to pay restitution to the owner of the material in question, and repeat offenders would face stiffer sentences. "This legislation is a reflection of the sustained commitment on the part of the Bush Administration, including the Department of Justice, to ensure that we are doing everything we can to combat this problem," Gonzales said in a press release. A recording-industry trade group praised the bill, but a public-interest group, Public Knowledge, said the Justice Department should consider measures that would protect consumers' fair-use rights as well. The bill has not yet been introduced in Congress. Congress in recent years has strengthened copyright laws to help media companies battling the widespread copying of their works, and law enforcers have increasingly targeted groups that release movies on the Internet hours after they appear in theaters. The U.S. Supreme Court also struck a blow for the entertainment industry in June when it ruled 9-0 that Internet file-trading companies can be held liable if they induce users to break copyright laws. « Last Edit: Today at 5:07pm by Ireland » Logged http://today.reuters.com/news/newsArticle.aspx?type=technologyNew... US-MEDIA-COPYRIGHT.xml&archived=False

7011.11.2005 13:09

Thanks for the list Ireland. Not that I would buy anything from Sony now. As for you second post, any lawyer types out there reading this, does fair use become more restricted by this? I am allowed to make a backup copy of any media that I purchase. But if I try and fail and ask for some help on a forum such as this, from what I get from the article, I can be charged with copyright infringement. Correct me if Im wrong.. Thanks

7111.11.2005 14:07

Quote:
KLINGON MORE CRAP IN THE STATES ...
Ah, it doesn't much matter anymore, Ireland. We're bombared with this crap day after day after day after .... changing laws, litigation, more lawsuits, "crackdowns", you name it. 5 minutes from now, we'll have eighteen more 'earth-shattering' announcements. I'm sitting this one out. Let the chips fall where they may. (You and Glenn should have your e-mail by now). :)

7211.11.2005 17:11

@thelox714 Read the following http://www.theregister.co.uk/2005/11/11/sony_bmg_mac_drm/ Sony's $hitware has hit the mac!!!!


Beer is good...and stuff!

7312.11.2005 10:00

Quote: (christ93) Thanks for the list Ireland. Not that I would buy anything from Sony now. As for you second post, any lawyer types out there reading this, does fair use become more restricted by this? I am allowed to make a backup copy of any media that I purchase. But if I try and fail and ask for some help on a forum such as this, from what I get from the article, I can be charged with copyright infringement. Correct me if Im wrong.. I would like to know the answer, as I, myself, am guilty of the above. I am not a lawyer, nor do I know the ins and outs of what constitutes fair use and copyright infringement. Has it come to the point that I will no longer ask for help, afraid of the repercussions?

7412.11.2005 10:10

Bill of Rights 1. Users have the right to "time-shift" content that they have legally acquired. This gives you the right to record video or audio for later viewing or listening. For example, you can use a VCR to record a TV show and play it back later. 2. Users have the right to "space-shift" content that they have legally acquired. This gives you the right to use your content in different places (as long as each use is personal and non-commercial). For example, you can copy a CD to a portable music player so that you can listen to the songs while you're jogging. 3. Users have the right to make backup copies of their content. This gives you the right to make archival copies to be used in the event that your original copies are destroyed. 4. Users have the right to use legally acquired content on the platform of their choice. This gives you the right to listen to music on your Rio, to watch TV on your iMac, and to view DVDs on your Linux computer. 5. Users have the right to translate legally acquired content into comparable formats. This gives you the right to modify content in order to make it more usable. For example, a blind person can modify an electronic book so that the content can be read out loud. 6. Users have the right to use technology in order to achieve the rights previously mentioned. This last right guarantees your ability to exercise your other rights. Certain recent copyright laws have paradoxical loopholes that claim to grant certain rights but then criminalize all technologies that could allow you to exercise those rights. In contrast, this Bill of Rights states that no technological barriers can deprive you of your other fair use rights. http://www.digitalconsumer.org/bill.html HOME PAGE http://www.digitalconsumer.org/

7512.11.2005 10:11

Please give Ireland's link, I'm having a hard time finding it...........Thanks.

7612.11.2005 11:49

Thanks for the info Ireland. The proposed legislation flies in the face of fair use. Time to write Washington again.


Beer is good...and stuff!

Comments have been disabled for this article.

News archive