Film-Tech Cinema Systems
Film-Tech Forum ARCHIVE


  
my profile | my password | search | faq & rules | forum home
  next oldest topic   next newest topic
» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Sony puts malware on its music CDs. (Page 3)

 
This topic comprises 6 pages: 1  2  3  4  5  6 
 
Author Topic: Sony puts malware on its music CDs.
Monte L Fullmer
Film God

Posts: 8367
From: Nampa, Idaho, USA
Registered: Nov 2004


 - posted 11-11-2005 03:16 AM      Profile for Monte L Fullmer   Email Monte L Fullmer   Send New Private Message       Edit/Delete Post 
..and I didn't even have DFX Winamp Enhancer on in hearing this - since we know that with MP3 crunching, there is some data loss with the compressing.

I should have clarified that the muddiness was in the mid-range with the highs still coming through. A little flat in the "middies."

Heard buzz that SONY laid off 8000 employees for a restructuring program of sort. This came from an individual who had a CANON DV digital and has a friend with a SONY DV Digicam. Friend wanted to play his SONY recorded DV tapes in his friend's CANON, but wouldn't. Took the cameras back to the store and found out that SONY has implemented a coding signal in the recording circuit of the camera and transferred to the tape so that the tape is invalid in other cameras. What the coding signal was doing is causing the CANON's 30FPS (something like that) count to go off-kilter and be irratic making the playback unviewable. Yet, CANON tapes could be played in the SONY with no problem.

 |  IP: Logged

Brian Michael Weidemann
Expert cat molester

Posts: 944
From: Costa Mesa, CA United States
Registered: Feb 2004


 - posted 11-11-2005 03:37 AM      Profile for Brian Michael Weidemann   Author's Homepage   Email Brian Michael Weidemann   Send New Private Message       Edit/Delete Post 
Numbers 1, 2, and 5 are the digital ones. 3 is the mix.

It's not a matter of quality loss. Analog rips, with a clean enough line and a decent sound card, will be, for all intents and purposes, the same sounding signal. I, for one, never claimed that there would be a discernable difference. My system, which is not too shabby, didn't lend any help hearing the difference. After monitoring the files at various EQ settings, the only real thing I perceived at all was that the mixed one had subtle changes in the bass that the others didn't. Or maybe I was trying to hard to hear the differences.

I admit, I cheated slightly. [Big Grin] [Razz]

 |  IP: Logged

Joe Redifer
You need a beating today

Posts: 12859
From: Denver, Colorado
Registered: May 99


 - posted 11-11-2005 04:47 AM      Profile for Joe Redifer   Author's Homepage   Email Joe Redifer   Send New Private Message       Edit/Delete Post 
Brian wins!

 -

test1.wav = digital
test2.wav = digital
test3.wav = mix
test4.wav = analog
test5.wav = digital

Good job.

PS - You suck.

 |  IP: Logged

Leo Enticknap
Film God

Posts: 7474
From: Loma Linda, CA
Registered: Jul 2000


 - posted 11-11-2005 12:18 PM      Profile for Leo Enticknap   Author's Homepage   Email Leo Enticknap   Send New Private Message       Edit/Delete Post 
Sophos has released a removal tool for the Sony shite.

I did run it after remembering that I'd recently updated the file transfer software for my minidisc Walkman. But it came up clean, so presumably Sony is only putting the malware on its music CDs.

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 11-11-2005 04:09 PM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
Sony provided the top 5 vendors code to remove their crap the other day. They've probably all got tools out to take care of it now.

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 11-11-2005 06:37 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
Tools to take care of it without toasting your CD or DVD drive?

In a parallel story, several lawsuits against Sony and Bertlesman have been filed in California. A few have been filed in Europe as well.

I hope this arrogant hatred against customers costs them a shitload of money.

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 11-11-2005 10:38 PM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
quote: Bobby Henderson
Tools to take care of it without toasting your CD or DVD drive?
The tools currently only un-hide the crap so that trojans (like this one ) & viruses can't exploit it. AFAIK, they don't yet modify the cd-rom driver stack.

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 11-15-2005 09:25 AM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
quote: Daryl C. W. O'Shea
Wait till Sony figures out BSD. There are rootkits out there that affect Macs too, such as this one from last year...
Apparently Sony already figured out BSD, or rather, they hired another firm to do it. Here's a nice article that may shock some Mac users:
Sony DRM Mac Rootkit
quote:
Sony's DRM Rootkit Comes in Mac Flavor, Too
By Larry Loeb
November 11, 2005
Opinion: Sony says it will discontinue distribution of its DRM software, which could pose a "rootkit" security threat to users. But does that include the OS X version?

Sony is reportedly pulling its digital rights management "rootkit" from the market. But it isn't reporting everything.

"The Sony copy-protection software does not install itself on Macintosh computers or ordinary CD and DVD players," Reuters reported today. There's just one problem with that statement: it happens to be flat-out wrong. While the XCP version of copy protection is for Windows, there is another Mac-only version of copy protection installed by Sony/BMG CDs.

To establish this point, one simply has to refer to a poster on the popular Macintosh site MacInTouch. The poster notes that Imogen Heap's new CD, "Speak for Yourself," on RCA Victor (a BMG subsidiary), has an extra partition for "enhanced" content. Along with Windows files, there is a Mac file present called "Start.app."

When run, a EULA is first displayed (which does inform the user that software is going to be installed without saying exactly what that software will do).

The user then is prompted by the program for a user name and password. After that information is provided, the program seemingly quits. However, it actually installs two kernel extensions, PhoenixNub1.kext and PhoenixNub12.kext, in the OS X system files.

These turn out to be part of a DRM codebase developed by SunnComm.

According to the SunComm Web site, their MediaMax DRM allows for a limited amount of CD burns from the source material, and then will block further copying. The DRM also can make time-expiring (or number-of-play-expiring) copies of the tracks.

Repeated calls to SunComm for comment were not returned by the time this article was posted.

So, while Sony may be backing down from its acts regarding Windows modification, it is yet to be seen whether the recent firestorms will cause it to pull the DRM installed on Macs.

Apparently no operating system in existence can be considered a sure fire "security blanket."

quote: Daryl C. W. O'Shea
AFAIK, they don't yet modify the cd-rom driver stack.
Here's the passage from PC Magazine's first Security Watch bulletin "Sony CDs Make Your PC Play the Blues."
Linky

quote:
That's not the only problem with the First 4 Internet software. According to Russinovich, the software inserts itself into the CD-ROM driver stack in a way that a naive attempt by a user to remove it could result in making the CD-ROM drive unusable. Furthermore, many of the drivers in the First 4 Internet product are installed to run even when the system boots into safe mode, meaning that if a bug in the drivers interferes with the system or makes it unbootable, it could be very difficult to remove.
Further articles I've read suggest that if you know how to hack around in the registry really well you can fix what the Sony DRM software changes to properly restore all CD or DVD drive functions. But most ordinary users don't know how to do that. I wouldn't even know where to begin for fixing what it might damage on the Mac platform.

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 11-15-2005 12:02 PM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
I meant "AFIAK, they don't yet modify the cd-rom driver stack" when removing their crap. ie. the stack mods are left in place. The removal tools just un-hide the stuff so trojans can't hide behind it.

 |  IP: Logged

Joe Redifer
You need a beating today

Posts: 12859
From: Denver, Colorado
Registered: May 99


 - posted 11-15-2005 02:05 PM      Profile for Joe Redifer   Author's Homepage   Email Joe Redifer   Send New Private Message       Edit/Delete Post 
quote: Bobby Henderson
Apparently no operating system in existence can be considered a sure fire "security blanket."
What about Mac OS 9? That still ships installed on new Macs.

 |  IP: Logged

Jason Burroughs
Jedi Master Film Handler

Posts: 654
From: Allen, TX
Registered: Jun 99


 - posted 11-15-2005 04:20 PM      Profile for Jason Burroughs   Email Jason Burroughs   Send New Private Message       Edit/Delete Post 
Apparently the Sony provided removal tools only make the security risk even worse. They open the computer up to accepting executable code from internet resources, without even attempting to restrict who can submit such code. Even then such restrictions are easy to subvert.

http://www.msnbc.msn.com/id/10053831/

Microsoft has also issued tools to remove the malware. Everyone that was effected by this gross invasion of privacy should band together and issue a class action lawsuit against Sony and First 4 Internet Ltd.

[fu] Sony

 |  IP: Logged

Joe Redifer
You need a beating today

Posts: 12859
From: Denver, Colorado
Registered: May 99


 - posted 11-15-2005 06:00 PM      Profile for Joe Redifer   Author's Homepage   Email Joe Redifer   Send New Private Message       Edit/Delete Post 
Class action lawsuits will only bring you a $5 coupon good towards any Sony music CD. They win either way. There is no way to stop corporate America from doing evil things like this and certainly no way to make companies regret doing such things.

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 11-15-2005 06:46 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
quote: Joe Redifer
What about Mac OS 9? That still ships installed on new Macs.
Really? I thought Apple stopped shipping System 9 with new Macs early last year. The classic OS is not mentioned as being available for any new Mac system. OSX Tiger seems to be the only option.

 |  IP: Logged

Kyle McEachern
Expert Film Handler

Posts: 165
From: San Francisco, CA
Registered: Feb 2004


 - posted 11-15-2005 07:01 PM      Profile for Kyle McEachern         Edit/Delete Post 
It didn't come installed on mine, but as a separate disc that could be used to install it if desired (This was this past February).

 |  IP: Logged

Cory Isemann
Jedi Master Film Handler

Posts: 500
From: White Plains, MD, USA
Registered: Jun 2004


 - posted 11-16-2005 07:53 AM      Profile for Cory Isemann   Author's Homepage   Email Cory Isemann   Send New Private Message       Edit/Delete Post 
From CNN Money


Sony BMG recalls copy-protected CDs
Computer viruses had emerged that took advantage of security holes in the copy protection software.
November 16, 2005: 5:56 AM EST

AMSTERDAM, The Netherlands (Reuters) - Music publisher Sony BMG, yielding to consumer concern, said Wednesday it was recalling music CDs containing copy-protection software that acts like virus software and hides deep inside a computer.

"We share the concerns of consumers regarding discs with XCP content-protected software, and, for this reason, we are instituting a consumer exchange program and removing all unsold CDs with this software from retail outlets," Sony BMG said in an statement.

The XCP software used by Sony BMG, which was developed by British software developers First4Internet, leaves the back door open for malicious online hackers.

Sony BMG, in a separate statement, also announced it would distribute a program to remove the software from a PC where it jeopardizes security.

"We deeply regret any inconvenience this may cause our customers. Details of this (recall) program will be announced shortly," Sony BMG said.

The withdrawal is set to affect millions of compact discs from artists such as Celine Dion and Sarah McLachlan but Sony did not give exact figures or the names of the artists affected.

Sony reiterated that the copy-protection software only installs itself on personal computers and not on ordinary CD and DVD players.

Microsoft Corp.'s anti-virus team said Tuesday it would add a detection and removal mechanism to rid a personal computer of the Sony's DRM copy-protection software. The software installs itself only on PCs running Microsoft's Windows operating system.

Viruses emerge
The flaws of the copy-protection software became acute last week, when the first computer viruses emerged that took advantage of the security holes left by the program.

Responding to public outcry over the software, the music publishing venture of Japanese electronics conglomerate Sony Corp. (Research) and Germany's Bertelsmann AG had said Friday it would temporarily suspend the manufacture of music CDs containing XCP technology.

It then provided a patch to make the hidden program more visible. At the time it did not recall the CDs or offer a program to remove it from computers. The initial measures still left PCs vulnerable, according to software engineers.

The program will have installed itself on a Windows-operated personal computer when consumers wanted to play certain Sony BMG music CDs. The program forces consumers to use a music player that comes with the program.

Sony BMG has positioned itself as a defender of artists' rights. It re-emphasized Friday that copy-protection software is "an important tool to protect our intellectual property rights and those of our artists."

Sony BMG last week was targeted in a class action lawsuit complaining that it had not disclosed the true nature of its copy-protection software.

 |  IP: Logged



All times are Central (GMT -6:00)
This topic comprises 6 pages: 1  2  3  4  5  6 
 
   Close Topic    Move Topic    Delete Topic    next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:



Powered by Infopop Corporation
UBB.classicTM 6.3.1.2

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.

© 1999-2020 Film-Tech Cinema Systems, LLC. All rights reserved.