IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New Play a Sony BMG music CD, get a rootkit.
[link|http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html|Mark's Sysinternals Blog].

Via The Inquirer.

Things like this are going to drive more people to pirate sites and/or to run Linux.

[edit:] It's even being covered by the [link|http://blogs.washingtonpost.com/securityfix/|Washington Post].

Cheers,
Scott.
Expand Edited by Another Scott Nov. 1, 2005, 06:26:04 PM EST
New ya beat me
I just read that article via [link|http://www.varlinux.com|VARLinux] and came back here to post it.

I hope this gets wheels.
--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
New As my boss said when I showed him this
Holy crap. I hope they get sued out of their socks.
-----------------------------------------
George W. Bush and his PNAC handlers sent the US into Iraq with lies. I find myself rethinking my opposition to the death penalty.

--Donald Dean Richards Jr.
New Patch to be posted
[link|http://news.com.com/Sony+to+patch+copy-protected+CD/2100-7355_3-5928608.html?tag=nefd.top|http://news.com.com/...html?tag=nefd.top]
Sony BMG's technology partner First 4 Internet, a British company, said Wednesday that it has released a patch to antivirus companies that will eliminate the copy-protection software's ability to hide. In consequence, it will also prevent virus writers from cloaking their work using the copy-protection tools.

The record label and First 4 Internet will post a similar patch on Sony BMG's Web site for consumers to download directly, the companies said.
Regards,

-scott anderson

"Welcome to Rivendell, Mr. Anderson..."
New I'm sure the whole issue is windows only



"Whenever you find you are on the side of the majority, it is time to pause and reflect"   --Mark Twain

"The significant problems we face cannot be solved at the same level of thinking we were at when we created them."   --Albert Einstein

"This is still a dangerous world. It's a world of madmen and uncertainty and potential mental losses."   --George W. Bush
New Re: I'm sure the whole issue is windows only
yes the other OSes probably can't play the CDs at all

A
Play I Some Music w/ Papa Andy
Saturday 8 PM - 11 PM ET
All Night Rewind 11 PM - 5 PM
Reggae, African and Caribbean Music
[link|http://wxxe.org|Tune In]
New from Sony's FAQ
[link|http://cp.sonybmg.com/xcp/english/faq.html#listening|Listening to Tracks on My Computer]
Mac Users: This disc will behave like a traditional CD in a Mac.
Darrell Spice, Jr.                      [link|http://spiceware.org/gallery/ArtisticOverpass|Artistic Overpass]\n[link|http://www.spiceware.org/|SpiceWare] - We don't do Windows, it's too much of a chore
New Reason to buy a MacMini?
New Reason to disable AutoPlay under Windows right away. :)
New Did you need one before?
Who wants their computer doing what somebody else desires without your permission? Duh...
New Nope.
First thing I disable after installing Windows on a beast.
New Patch site is IE only;
Going to [link|http://updates.xcp-aurora.com/|http://updates.xcp-aurora.com/] gets me [link|http://updates.xcp-aurora.com/unsupported.aspx|http://updates.xcp-a.../unsupported.aspx]

ActiveX Unsupported

Sorry, your Internet Browser does not support ActiveX Controls.

Please use Microsoft Internet Explorer to continue.

Download Internet Explorer from the Microsoft website


Thank goodness!

--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
New the patch that isn't
The patch doesn't disable the root kit, just allows it to be seen more easily.
Sony BMG's technology partner First 4 Internet, a British company, said Wednesday that it has released a patch to antivirus companies that will eliminate the copy-protection software's ability to hide. In consequence, it will also prevent virus writers from cloaking their work using the copy-protection tools.
[link|http://news.com.com/Sony+to+patch+copy-protected+CD/2100-7355_3-5928608.html?tag=nefd.top|Sony to patch copy-protected CD]

So, how does one "patch" a CD? I was under the impression that this kind of disc was write-once.
Have fun,
Carl Forde
New No, it isn't 'write once' . . .
. . it's "stamp once" just like the old vinyl phonograph records - if there's any volume to speak of anyway. Only for very short runs is it "write once".
[link|http://www.aaxnet.com|AAx]
New Charlie has a followup at TheInquirer.
[link|http://www.theinquirer.net/?article=27426|Here]:

If you read the Sony PR spin masquerading as a FAQ [link|http://cp.sonybmg.com/xcp/english/faq.html|here], the tepid responses it give are laughable. Number one states that the technology is used to prevent copying, but that is true for only Windows boxes, so why the discrimination? It only affects legitimate users. If you want to copy the music, all you need to do is hold down the shift key when inserting it and you are free to copy. That or have a non-Windows computer.

[...]

Number four tells you to consult the EULA when you want to copy the disc. Which madhouse did we step into that now means a CD needs a EULA? I stopped buying CDs so I wouldn't have to give money to rapacious weasels years ago, and none of the CDs I own have a EULA on them. It is madness. So, at Best Buy tonight, I tried to consult the EULA before I bought the Van Zant CD.

It wasn't on the CD package, not on the shelves near by, and the blue shirted aisle trolls had no idea what I was talking about. No, they could not provide me with one, I did ask though. So, if you are dumb enough to buy a Sony CD, and don't want to rootkit your machine, you can't find out beforehand, have to agree to a one sided contract that you can't read before you say yes, and can't get your money back. Wonderful, thank you Sony.


It's a nice rant and he makes more very good points, as usual. Take a peek.

Cheers,
Scott.
New And a lengthy rant on Intel + Beast + sheeple
[link|http://www.theinquirer.net/?article=24638| here]. East Fork appears to be the name of the latest Insanely Great [\ufffd Steve Jobs] route to Corp nirvana:
Everybody Pays to Play, Each Time (car, home or pocket).
Intel to cut Linux out of the content market

Comment East Fork off key

By Charlie Demerjian: Friday 15 July 2005, 10:01
INTEL IS ABOUT TO CUT Linux out of the legitimate content market, and hand the keys to the future of digital media to Microsoft at your expense. Don't like it? Tough, you are screwed. The vehicle to do this is called East Fork, the upcoming and regrettable Intel digital media 'platform'. The funny part is that the scheme is already a failure, but it will hurt you as it thrashes before it dies. Be afraid, be very afraid.

First, lets explore what East Fork (EF) is. It is basically a media server PC on steroids with a lot of interesting software. The downside is that it is aiming for you, not aimed at you. The first iteration, due out in Q1 2006, is based on a Smithfield dual core Pentium 4 with the Lakeport and ICH7-DH chipsets, a fairly plain combo. You also need a S-ATA HD with NCQ, and Intel HD Audio, but you can supplement that with anything else you need as long as it is on the board. You also need MS Media Center Edition 2006 (MCE 2006).

This will be replaced shortly after launch with a version based on Yonah, more like late Q1 2006, but since the Smithfield one slipped so much, this one might be delayed as well. It replaces the chipsets with Calistoga and ICH7-DHM, not a big change, and the rest remains the same. How they are going to sell a 64 bit launch and a quarter later an 'upgrade' to a 32 bit version is beyond me, but it isn't my idea. The replacement of the 130W Smithfield by the 31W Yonah won't cause many loud complaints, and the exhaust temperature of your stereo cabinet might go down a few orders of magnitude.

[+ a lot more super-techie TLAs re the means for morphing --> NO CHOICE, SUCKER]

I'll watch. Fortunately for moi, there's little 'audio-with-drums' or 'car-chases+plastic-sex' I'm apt to want a copy of. And if it comes to having to find obscure noir (or any sort of movies.. from the era of actual Movies with real plots and actors) - in analog formats? I can live with that.

I haven't noticed super-fine digital resolution to ameliorate, in the slightest - crappy acting, predictable inane plots or just incompetence. There are more than enough gems from the '20s on, that haven't made it to reissue yet, to satisfy my periodic cravings to see things happen on a screen. Pity about the ones already lost, still on nitrate film / in pieces. Oh well.

There may be more than a few of us with these Alien standards; I'm sure the $-motivated will eventually discover this rich untapped audience of folks who wouldn't walk across the street to see the latest demographic car chase/turf war.
And maybe smart enough to eschew the DRM..



Or, maybe not; gets a bit sillier every day.. why should movies escape?

New And in some good news...
the Italian group ALCEI is suing Sony over the rootkitting DRM infection.
[link|http://www.theinquirer.net/?article=27508|Inquirer link].

Ah, perhaps some consequences for Sony.
Alex

The trouble with the world is that the stupid are cocksure and the intelligent are full of doubt. -- Bertrand Russell
New that didn't take long
[link|http://www.theregister.co.uk/2005/11/10/sony_drm_trojan/|First Trojan using Sony DRM spotted]
Darrell Spice, Jr.                      [link|http://spiceware.org/gallery/ArtisticOverpass|Artistic Overpass]\n[link|http://www.spiceware.org/|SpiceWare] - We don't do Windows, it's too much of a chore
New Artists Need to Sue Sony
Your career takes a hit when your CD is pulled

A
Play I Some Music w/ Papa Andy
Saturday 8 PM - 11 PM ET
All Night Rewind 11 PM - 5 PM
Reggae, African and Caribbean Music
[link|http://wxxe.org|Tune In]
New I heard SwitchFoot are considering something like that.
They were reported to be mortified that their latest CD has copy-protection on it. I don't know if they were going to request it be removed, but I got the impression the decision is contractually out of their hands.

Wade.
"Insert crowbar. Apply force."
New They're at least telling fans how to get around it.
[link|http://www.theregister.co.uk/2005/09/21/christian_rockers_drm_tips/|Christian rockers risk wrath of DMCA with DRM tips]


The bassist of Switchfoot is teaching fans how to disable the copy protection measures in the San Diego rock band's own CDs, presumably upsetting Sony and perhaps unwittingly testing the anti-circumvention rules of the Digital Millennium Copyright Act.

Tim Foreman, brother of lead singer Jon, has taken exception to the Digital Rights Management software that appears on the platinum-selling Christian band's latest release, Nothing Is Sound.

"My heart is heavy with this whole copy-protection thing," he wrote on the band's website last week after it came to his attention that fans were having problems importing the band's latest songs from CD to iTunes. So he posted full instructions for disabling the DRM that accompanies the CD, including a link to an open source program that helps to rip CDs.
--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
New Aye.
It could get interesting, legally, if someone goes to court. It would bring up the band's contract, who owns the music, if the DRM was put there legally, if circumventing it is legal if the artist didn't want it...

Wade.
"Insert crowbar. Apply force."
New Triumph - for now anyway.
[link|http://news.yahoo.com/s/pcworld/20051111/tc_pcworld/123511|Sony Stops Shipping Controversial DRM Code]

Sony has temporarily suspended the manufacture of CDs that contain the software called XCP (Extended Copy Protection) said John McKay, a Sony spokesperson.

McKay did not say when Sony planned to resume the use of XCP, but XCP's developers have previously stated they are in the process of writing new copy protection software that does not use the controversial cloaking techniques that were in the original XCP and that have stirred up so much negative publicity for Sony.
--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
New M$ now providing tools to clean this up
[link|http://news.com.com/2100-1002_3-5949041.html|http://news.com.com/...02_3-5949041.html]

Microsoft will update its security tools to detect and remove part of the copy protection tools installed on PCs when some music CDs are played.

The Redmond, Wash., software maker has determined that the "rootkit" piece of the XCP software on some Sony BMG Music Entertainment CDs can pose a security risk to Windows PCs, according to a posting Saturday to a Microsoft corporate Web log.

The Sony BMG software installs itself deeply inside a hard drive when a CD is played on a PC. The technology uses rootkit techniques to hide itself. Experts blasted the cloaking mechanism, saying it could be abused by virus writers. The first remote-control Trojan horses that take advantage of the veil provided by Sony BMG have surfaced.

To protect Windows users, Microsoft plans to update Windows AntiSpyware and the Malicious Software Removal Tool as well as the online scanner on Windows Live Safety Center to detect and remove the Sony BMG software, the software maker said in its blog.
------------
Will M$ be prosecuted under the DCMA?



"Whenever you find you are on the side of the majority, it is time to pause and reflect"   --Mark Twain

"The significant problems we face cannot be solved at the same level of thinking we were at when we created them."   --Albert Einstein

"This is still a dangerous world. It's a world of madmen and uncertainty and potential mental losses."   --George W. Bush
Expand Edited by tuberculosis Aug. 21, 2007, 05:57:02 AM EDT
New To answer your question: No
===

Purveyor of Doc Hope's [link|http://DocHope.com|fresh-baked dog biscuits and pet treats].
[link|http://DocHope.com|http://DocHope.com]
New It Gets Worse
[link|http://www.msnbc.msn.com/id/10053831/|Fix causes bigger hole]


A
Play I Some Music w/ Papa Andy
Saturday 8 PM - 11 PM ET
All Night Rewind 11 PM - 5 PM
Reggae, African and Caribbean Music
[link|http://wxxe.org|Tune In]
New Taking lessons from usoft, I see :)
--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
New And more widespread.
[link|http://www.freedom-to-tinker.com/?p=925|Fun fun fun!]

Also a very good dress down of it from PJ on Groklaw: [link|http://www.groklaw.net/article.php?story=20051115001431715|More Sony DRM Hijinks - Now It's MediaMax]

It is gonna be a long and hard battle.
--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey
Freedom is not FREE.
Yeah, but 10s of Trillions of US Dollars?
SELECT * FROM scog WHERE ethics > 0;

0 rows returned.
New Ugh! Capital punishment would be too kind!
Alex

The trouble with the world is that the stupid are cocksure and the intelligent are full of doubt. -- Bertrand Russell
New EFF's letter to Sony (they can use a few $$)
[link|http://www.eff.org/IP/DRM/Sony-BMG/?f=open-letter-2005-11-14.html| EFF]
(Wonder if they got that reply, today?)

An Open Letter to Sony-BMG

To: Andrew Lack, CEO of Sony-BMG
Cc: Rolf Schmidt-Holtz, Chairman of the Board, Sony-BMG
Cc: Howard Stringer, CEO of Sony Entertainment
Cc: Gunter Thielen, CEO of Bertelsmann AG

Dear Mr. Lack,

The Electronic Frontier Foundation (EFF) has viewed with growing concern the revelations regarding the XCP Content Protection Software and the SunnComm MediaMax software that your company has chosen to include on at least two dozen of your music CD releases. We are also concerned by your company's limited response to the concerns of your customers and the computer security community.

As has been documented by independent researcher Mark Russinovich and many others, the XCP software appears to have been designed to have many of the qualities of a "rootkit." It was written with the intent of concealing its presence and operation from the owner of the computer, and once installed, elements of the software run continuously -- even when no Sony-BMG music CD is in use. It provides no clear uninstallation option. Additionally, without notifying users, the software appears to contact a remote machine under your control. The MediaMax software is somewhat different, but similarly has no true uninstall option and an undisclosed ongoing communication from the users\ufffd computer to SunnComm.

You must be aware that the discovery of this software has shocked and angered your customers. Software that deceives the owner of the computer it runs upon and opens that computer up to attacks by third parties may be expected to come from malicious cyber-attacks; it is certainly not expected nor acceptable to be distributed and sold to paying customers by a major music company. Accordingly, EFF welcomes your company's decision to temporarily halt manufacturing CDs with XCP and to reexamine "all aspects" of your "content protection initiative."

But if you truly intend to undo the harm you have caused, your company should immediately and publicly commit to the following additional measures:

* Recall all CDs that contain the XCP and SunnComm MediaMax technology. The recall must include removing all infected CDs from store shelves as well as halting all online sales of the affected merchandise. We understand from a recent New York Times article that well over 2 million infected CDs with the XCP technology are in the marketplace and have yet to be sold.
* Remove from all current and future marketing materials statements like that on [link|http://cp.sonybmg.com/xcp/english/updates.html|http://cp.sonybmg.co...lish/updates.html] that say the cloaking software "is not malicious and does not compromise security."
* Widely publicize the potential security and other risks associated with the XCP and SunnComm MediaMax technology to allow the 2.1 million consumers who have already purchased the CDs to make informed decisions regarding their use of those CDs. The publicity campaign should include, at a minimum, issuing a public statement describing the risks and listing every Sony CD, DVD or other product that contains XCP or SunnComm MediaMax. The publicity campaign should be advertised in a manner reasonably calculated to reach all consumers who have purchased the products, in all markets where the CDs have been sold.
* Cooperate fully with any interested manufacturer of anti-virus, anti-spyware, or similar computer security tools to facilitate the identification and complete removal of XCP and SunnComm MediaMax from the computers of those infected. In particular, Sony should publicly waive any claims it may have for investigation or removal of these tools under the Digital Millennium Copyright Act (DMCA) and any similar laws.
* Offer to refund the purchase price of infected CDs or, at the consumer\ufffds election, provide a replacement CD that does not contain the XCP or SunnComm technology. For those consumers who choose to retain infected CDs, develop and make widely available a software update that will allow consumers to easily uninstall the technology without losing the ability to play the CD on their computers. In addition, consumers should not be required to reveal any personally identifying information to Sony in order to access the update, as Sony is currently requiring.
* Compensate consumers for any damage to their computers caused by the infected products, including the time, effort, and expenditure required to remedy the damage or verify that their computer systems or networks were or were not altered or damaged by XCP or SunnComm MediaMax products. [Hah!!]
* Prior to releasing any future product containing DRM technology, thoroughly test the software to determine the existence of any security risks or other possible damages the technology might cause to any user's computer.
* Certify in a statement included in the packaging of every CD containing DRM technology that the product does not contain any concealed software such as the XCP rootkit, does not electronically communicate with Sony-BMG or any other party, does not initiate the download of any software update or other data without informed consent of the consumer immediately prior to each communication, can be uninstalled without any need to contact Sony or disclose personally identifying information to anyone, does not present any security risks to any consumer's computer, and will not damage or reduce the performance of the consumer's computer or data in any way.

We look forward to hearing that you are in the process of implementing these measures by 9:00am PST on Friday, November 18, 2005.

Sincerely,

Electronic Frontier Foundation
Emphasis de moi.
Sometimes it's a positive Advantage, when most of your fav composers have been dead for years or centuries...


(Now if the masses could ever Get how easy Billy makes it for this kind of crap and any kind of crap AND: that there are alternatives that aren't willing Quislings? - - hmmm, right after the masses see through Shrub; an epidemic of Thinking?)
     Play a Sony BMG music CD, get a rootkit. - (Another Scott) - (29)
         ya beat me - (Steve Lowe)
         As my boss said when I showed him this - (Silverlock)
         Patch to be posted - (admin) - (10)
             I'm sure the whole issue is windows only -NT - (tuberculosis) - (6)
                 Re: I'm sure the whole issue is windows only - (andread) - (5)
                     from Sony's FAQ - (SpiceWare) - (4)
                         Reason to buy a MacMini? -NT - (Another Scott) - (3)
                             Reason to disable AutoPlay under Windows right away. :) -NT - (inthane-chan) - (2)
                                 Did you need one before? - (hnick) - (1)
                                     Nope. - (inthane-chan)
             Patch site is IE only; - (Steve Lowe) - (2)
                 the patch that isn't - (cforde) - (1)
                     No, it isn't 'write once' . . . - (Andrew Grygus)
         Charlie has a followup at TheInquirer. - (Another Scott) - (1)
             And a lengthy rant on Intel + Beast + sheeple - (Ashton)
         And in some good news... - (a6l6e6x)
         that didn't take long - (SpiceWare)
         Artists Need to Sue Sony - (andread) - (3)
             I heard SwitchFoot are considering something like that. - (static) - (2)
                 They're at least telling fans how to get around it. - (Steve Lowe) - (1)
                     Aye. - (static)
         Triumph - for now anyway. - (Steve Lowe)
         M$ now providing tools to clean this up - (tuberculosis) - (1)
             To answer your question: No -NT - (drewk)
         It Gets Worse - (andread) - (3)
             Taking lessons from usoft, I see :) -NT - (Steve Lowe) - (2)
                 And more widespread. - (folkert) - (1)
                     Ugh! Capital punishment would be too kind! -NT - (a6l6e6x)
         EFF's letter to Sony (they can use a few $$) - (Ashton)

It didn’t ruin my childhood, but it did aggressively strip-mine several shallow deposits of nostalgia.
177 ms