AfterDawn: Tech news

XCP CDs still on store shelves

Written by James Delahunty @ 30 Nov 2005 5:59 User comments (1)

XCP CDs still on store shelves New York Attorney General Eliot Spitzer has blasted Sony BMG for failing to live up to its promise to pull CDs containing XCP DRM software from store shelves. "It is unacceptable that more than three weeks after this serious vulnerability was revealed, these same CDs are still on shelves, during the busiest shopping days of the year," said Spitzer in a statement. Spitzer's office discovered that the CDs were still widely available after sending out investigators.
The investigators simply went out to the most popular stores and were able to buy CDs that contained XCP, copy protection that when installed, is cloaked using the same techniques used by virus writers (who often use "rootkits" to hide malicious software on a Hard Disk Drive). They were able to purchase the CDs at Virgin Megastore, FYE, Best Buy, Circuit City, Sam Goody, and Wal-Mart.

They also ordered the CDs and were promised "prompt delivery" from the websites of Circuit City, Best Buy, Sam Goody, FYE, and Wal-Mart. They couldn't get the CDs however from sites of J & R Music World or Tower Records. Sony BMG had promised to pull all copies of the 52 titles that contain XCP from shelves in mid-November. "I strongly urge all retailers to heed the warnings issued about these products, pull them from distribution immediately, and ship them back to Sony," said Spitzer.

First4Internet's XCP has caused a public relations nightmare for Sony in the last month. It started when Mark Russinovich discovered the rootkit-like techniques it uses after buying a CD and trying to play it on his computer. He then posted a warning on his blog. It also emerged that Finnish company F-Secure had warned Sony BMG in October about the problem. Sony BMG now faces lawsuits that claim it used the techniques of virus writers and put consumer's home PCs at risk.


Previous Next  

1 user comment

12.12.2005 08:49

This lack of concern by Sony is only making the lawyers and AG's job of building a lawsuit/criminal action case even easier! I see Sony becoming the next big Tabacco Lawsuit. BTW...Does Sony have as much money as the Tabacco companies or will something similiar to the Tobacco settlement put them out of business? Tobacco Settlemt: Up-front Payments ($12.742 billion) Annual Payments ($183.177 billion) Strategic Contribution Fund ($8.61 billion) National Foundation ($250 million over 10 years) National Public Education Fund ($1.45 billion over the next 5 years) Attorney General Enforcement Fund ($50 million - one-time payment in 1999) Payments to the National Association of Attorneys General ($1.5 million/10 years) lol...I know that in no way can the killing of people be compared to installing a rootkit. But just thought I'd be funny :)

Comments have been disabled for this article.

News archive