Film-Tech Cinema Systems
Film-Tech Forum ARCHIVE


  
my profile | my password | search | faq & rules | forum home
  next oldest topic   next newest topic
» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Sony puts malware on its music CDs. (Page 5)

 
This topic comprises 6 pages: 1  2  3  4  5  6 
 
Author Topic: Sony puts malware on its music CDs.
Joe Redifer
You need a beating today

Posts: 12859
From: Denver, Colorado
Registered: May 99


 - posted 11-22-2005 07:56 AM      Profile for Joe Redifer   Author's Homepage   Email Joe Redifer   Send New Private Message       Edit/Delete Post 
quote:
The problem with root kits is that they are well known to criminal hackers (crackers), and they are all but invisible to most off-the-shelf antivirus apps available today.
I take much offense to this sentence! It is extremely racist and I am calling it out. To insinuate that all hackers are white is racist enough as it is, but to use the derogatory term "crackers" is extremely hateful and contemptuous! Just because my people used to "crack" the whip unto the black man is no reason to refer to us as "crackers" in this day and age. Ever notice how any non-black person is highly admonished and/or beaten when they use the word "nigger"? I think any non-white individual who uses the term "cracker" should have their computers hacked in to!

 |  IP: Logged

Jeremy Fuentes
Mmmm, Dr. Pepper!

Posts: 1168
From: Corpus Christi, TX United States
Registered: Jan 2004


 - posted 11-22-2005 08:34 AM      Profile for Jeremy Fuentes   Email Jeremy Fuentes   Send New Private Message       Edit/Delete Post 
 -

 |  IP: Logged

Bruce Hansen
Jedi Master Film Handler

Posts: 847
From: Stone Mountain, GA, USA
Registered: Dec 1999


 - posted 11-22-2005 11:31 AM      Profile for Bruce Hansen   Email Bruce Hansen   Send New Private Message       Edit/Delete Post 
I have to wonder if Sony pre-loaded this software on their computers? Just in case the answer is yes, I don't think I will be buying a Sony computer any time soon.

When I checked my email just now, I found about 20 emails that were made to look like they came from the FBI, the CIA, and ISPs trying to get me to open an attachment. I would guess that these attachments contain a virus or worm or spyware that will use the Sony "hole" to do some nastyness to my computer. It looks like the "stuff" is just beginning to hit the fan. I hope that Sony is just about put out of business over this crap. They deserve it.

 |  IP: Logged

Jason M Miller
Master Film Handler

Posts: 284
From: Kalamazoo, Michigan, USA
Registered: Jul 2004


 - posted 11-22-2005 01:53 PM      Profile for Jason M Miller   Email Jason M Miller   Send New Private Message       Edit/Delete Post 
Tape works: InformationWeek

quote:
Sony BMG Music's controversial copy-protection scheme can be defeated with a small piece of tape, a research firm said Monday in a demonstration of the futility of digital rights management (DRM).
According to Gartner analysts Martin Reynolds and Mike McGuire, Sony's XCP technology is stymied by sticking a fingernail-size piece of opaque tape on the outer edge of the CD.

That, the pair said in a brief posted online, renders "session 2 -- which contains the self-loading DRM software — unreadable. The PC then treats the CD as an ordinary single-session music CD, and the commonly used CD 'rip' programs continue to work as usual."

Such simple work-arounds, said Reynolds and McGuire, make Sony's decision to copy protect is music CDs an even bigger mistake. "Sony BMG's DRM technology will prevent neither informed casual copiers nor high-volume 'pirates' from doing whatever they like with the content the disc," the analysts continued. "It does, however, load 'stealth' software — software that has been demonstrated to have suspect effects — on uninformed users' machines.

"The bottom line: Sony BMG has created serious public-relations and legal issues for itself, and for no good reason."

Only after 10 days of mounting criticism about its surreptitious installation of a hacker-style "rootkit" to users' PCs did Sony announce that it would end the copy-protection; a week later it said it would recall all unsold CDs and exchange those already in consumers' hands with unprotected discs.

Sony's exchange program also gives buyers of the 52 in-question CDs the option of receiving unprotected MP3 files of the album's tracks, in large part because the disc exchange process takes three to six weeks.

Those users will receive an e-mail directing them to a site where they can download the MP3 files, Sony said on its exchange program Web page.

This isn't the first time that simple methods have defeated a Sony copy-protection plan. An earlier technology that Sony used could be circumvented by using a black marker to draw a line near the edge of the disc.

"After more than five years of trying, the recording industry has not yet demonstrated a workable DRM scheme for music CDs," concluded the Gartner analysts. "It will never achieve this goal as long as CDs must be playable by stand-alone CD players."


 |  IP: Logged

Scott Norwood
Film God

Posts: 8146
From: Boston, MA. USA (1774.21 miles northeast of Dallas)
Registered: Jun 99


 - posted 11-22-2005 02:08 PM      Profile for Scott Norwood   Author's Homepage   Email Scott Norwood   Send New Private Message       Edit/Delete Post 
None of this would be an issue of people would just turn off Windows' stupid autorun "feature." The last thing you want when inserting a CD into your computer is for some random (and possibly malicious) software to run without user intervention. Since many people have set up their Windows user accounts to have full administrator-level permissions, the problem is just that much worse.

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 11-22-2005 06:23 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
Another recommendation is to do most general computing work using a login with limited permissions. Most Windows machines are setup by default with logins featuring full admin rights. Kinda risky.

But back to the Sony DRM thing. These entertainment companies have been told by critics until the critics were blue in the face that playing "prevent defense" by using DRM schemes is going to get them nowhere. You're only going to get more customers to buy a product by putting more value into it. A bare bones music CD just doesn't seem worth $20 when other kinds of products in the same price range offer so much more.

I remember when vinyl records were sold the customer would often get some additional stuff with the purchase, such as posters and other goodies. You don't get that with a CD. Naturally you can't physically fit a big poster into a CD case. But some added value needs to be included to provide more incentive for customers to buy the legit CD. Penalizing customers who actually bought the disc with malware style DRM software is a very stupid manuver. Even if the software itself doesn't turn out to be very harmful, it sends out an extremely hateful anti-customer message.

 |  IP: Logged

David Stambaugh
Film God

Posts: 4021
From: Eugene, Oregon
Registered: Jan 2002


 - posted 11-22-2005 06:50 PM      Profile for David Stambaugh   Author's Homepage   Email David Stambaugh   Send New Private Message       Edit/Delete Post 
I bet almost none of the people who frequently copy music care about extras like posters or cover art. All they want is free music and they don't understand or care what the big deal is with piracy or intellectual property rights. "I can copy it for free so why the hell should I pay for it? End of discussion." They might throw out the line "I wouldn't buy it anyway, so I'm not stealing it by copying it." Ethics registers a perfect "0".

In very rare cases they might actually buy a CD but it has to be an artist they're really fanatical about, not just "routine" music that they happen to like.

 |  IP: Logged

Leo Enticknap
Film God

Posts: 7474
From: Loma Linda, CA
Registered: Jul 2000


 - posted 11-23-2005 02:02 AM      Profile for Leo Enticknap   Author's Homepage   Email Leo Enticknap   Send New Private Message       Edit/Delete Post 
A while back the music industry floated the idea of releasing 'light' versions of music CDs at a reduced price. The idea was that they'd cost £2-3. The CD itself would be exactly the same pressing as the full price version, but it would come in a cardboard sleeve with only basic artwork and a track listing. Meanwhile, the full price version would have glossy packaging and extra crap thrown in, thereby giving consumers two product options for each release. The hope was that people who had previously made their own copies would henceforth buy the legit 'light' version. AFAIK the idea never went anywhere - probably because even £3 is around six times the cost of a blank. So, if you're the prepared to rip a CD off in principle, you're going to need more of an incentive than that to change your ways.

The root cause of this problem, IMHO, is that when the CD format was launched in the early '80s, no-one had any idea how easy it would become to make digital clones. Even in the late '80s, your typical PC at a high street store would have a hard disc capacity of 10-20mb: so in 1983, when the CD audio format was launched, the idea of PCs that could deal with 650mb at a time must have seemed like science fiction. In hindsight, we know that if the developers had paid any attention to Moore's Law, they'd have seen this coming. Making analogue copies of commercial music recordings and radio broadcasts had gone on ever since magnetic recording technology had been sold to domestic consumers. But the copies were usually of significantly lower quality, and could only be made in real time, thereby limiting the scale of the economic loss to the industry. Put simply, no-one ever foresaw a situation in which consumers would be able to 'clone' albums in 2-3 minutes and at virtually no up-front cost.

Two other factors are also clear: (i) that domestic copying of commercially published audio and video recordings is widely perceived to be a victimless crime; and (ii) that the technological approach to stopping it only works with a limited, technically less literate group of consumers.

I can't see any immediate hope of (i) changing any time soon. Sometimes public attitudes can be changed: for example, a friend of mine recalls that when he learnt to drive in the mid-60s, his instructor told him that 'it's probably best to leave the car at home if you're planning to have 5 or 6 pints, otherwise you may end up having to push it out of a ditch.' Now, of course, drink-driving is perceived as a taboo. If you casually mention over a coffee break that you drove home after drinking five pints the previous night, the reaction will probably be one of shock and hostility. But if you say that you listened to a CD which a friend copied for you, the response you'll probably get is: 'Oh, that sounds good; could you burn one off for me, too?'. But whereas public opinion was gradually convinced by the anti drink-drive arguments, they simply don't believe the music industry's claims that making one or two copies of a CD for friends or relatives damages artists' careers or supports drug smuggling and international terrorism.

So, given that neither technology nor PR is likely to significantly reduce domestic piracy any time soon, the industry is either just going to have to live with it and factor it in to its business planning, or come up with more attractive alternatives - it's as simple as that, as far as I can see.

 |  IP: Logged

Mike Blakesley
Film God

Posts: 12767
From: Forsyth, Montana
Registered: Jun 99


 - posted 11-23-2005 12:11 PM      Profile for Mike Blakesley   Author's Homepage   Email Mike Blakesley   Send New Private Message       Edit/Delete Post 
quote: Leo Enticknap
more attractive alternatives
There's the root of the problem. Can't beat "free."

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 11-23-2005 12:46 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
Yeah, but what are they getting for "free?"

Typically "free" means a lossy data compressed music file with fidelity hardly any better than what you hear over the radio airwaves. Often, uploaded and shared music files have the front and ends clipped and other nonsense mucking up the audio. Then you have the risk of getting various newly released trojans.

Still, a great deal of people see those compromises (and risks) as being no big deal compared to spending upwards of $20 for what they see as a plain, bare bones music only CD. And even these days, the LPCM audio quality on many of today's CDs is horrible. This is especially true for many rock and pop music recordings where the tracks are badly overdriven. You can open one of these tracks in an audio editor like Sound Forge and clearly see the audio clipping the red all over the place.

So, DRM? Nah. The music industry has a crappy product on average that badly needs improvement. For $15 to $20, I want a very good quality recording and other bonuses to go with it. The DualDisc format has a lot of great potential for its ability to combine standard CD content with DVD-V, DVD-A and SACD content. Unfortunately, the music industry isn't doing enough to promote good music production and disc mastering practices within its industry. It is doing absolutely nothing to educate customers about higher quality audio formats and the value they bring to a disc. The music industry could use that DualDisc format to make music discs seem worth buying again and make downloading MP3s suck by comparison.

 |  IP: Logged

David Stambaugh
Film God

Posts: 4021
From: Eugene, Oregon
Registered: Jan 2002


 - posted 11-23-2005 02:05 PM      Profile for David Stambaugh   Author's Homepage   Email David Stambaugh   Send New Private Message       Edit/Delete Post 
The general public has no interest in audio quality any better than what an iPod can do. Seriously, everyone where I work carries an iPod, and *nobody* is the least bit (heh) concerned that the audio quality isn't good enough. SACD etc. had their chance and failed miserably in the marketplace. Hell, I'm interested in audio quality and I don't own a single SACD. What would be the point in SACD unless I invest in a high-end audio system and acoustical room treatments (which my living room desperately needs).

There are a lot of good ideas being thrown around here, but the public has made it very clear that they don't care much about high quality, and they won't pay for anything they can get for free. [Shrug]

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 12-07-2005 09:54 AM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
More crap:

quote: cNet

New Sony CD security risk found
By John Borland, CNET News.com
Published on ZDNet News: December 6, 2005, 4:58 PM PT

Sony BMG Music Entertainment and the Electronic Frontier Foundation
digital rights group jointly announced Tuesday that they had found,
and fixed, a new computer security risk associated with some of the
record label's CDs.

The danger is associated with copy-protection software included on
some Sony discs created by a company called SunnComm Technologies. The
vulnerability could allow malicious programmers to gain control of
computers that have run the software, which is typically installed
automatically when a disc is put in a computer's CD drive.

The issue affects a different set of CDs than the ones involved in the
copy-protection gaffe that led Sony to recall 4.7 million CDs last
month, and which has triggered several lawsuits against the record
label.

"We're pleased that Sony BMG responded quickly and responsibly when we
drew their attention to this security problem," EFF staff attorney
Kurt Opsahl said in a statement. "Consumers should take immediate
steps to protect their computers."

The announcement is the latest result of the detailed scrutiny applied
by the technical community to Sony's copy-protected discs, after a
string of serious security issues were found to be associated with the
label's antipiracy efforts.

The record label's copy-protected discs have been on the market for
more than eight months. But in late October, blogger Mark Russinovich
discovered that they surreptitiously installed a "rootkit" programming
tool. Rootkit tools are typically used by hackers to hide viruses on
hard drives, so Sony's move opened up a potentially serious security
hole.

The controversy escalated as other researchers discovered new security
flaws associated with the copy-protected CDs, which used technology
from British company First 4 Internet. Virus writers began
distributing malicious code that took advantage of the holes. The
label recalled all the discs with the First 4 Internet technology
installed, offering an exchange program for consumers who had
purchased any of the 52 CDs affected.

Following those revelations, the EFF asked computer security company
iSec Partners to study the SunnComm copy protection technology, which
Sony said has been distributed with 27 of its CDs in the United
States. iSec found the hole announced Tuesday and notified Sony, but
news of the risk was not released until SunnComm had created a patch.

Sony said another security company, NGS Software, has tested the patch
and certified that it addresses the vulnerability.

The patch can be downloaded from Sony's site. A list of the CDs
affected in the United States, and a slightly different list in
Canada, is also posted on the site.

Sony said it will notify customers though a banner advertisement
directly in the SunnComm software, as well as through an Internet
advertising campaign.


 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 12-07-2005 10:33 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
Great. More rootkit shit from Sony. SunnComm even had a MacOSX version of that nonsense. Pushing around customers who actually bought the damned CD is just freaking insane. It gives people even more reason to download music illegally -or just buy the one good song off a disc from iTunes for just 99 cents.

quote: David Stambaugh
There are a lot of good ideas being thrown around here, but the public has made it very clear that they don't care much about high quality, and they won't pay for anything they can get for free.
If that turns out to be true, then the music industry is doomed no matter what. They can fold up their tents, but be justified in shooting a pretty hateful middle finger at the general public for playing a huge role in allowing it to happen.

Still, I think the music industry can reverse some of those trends of they will bother to make efforts in the right places to do it. For now, they just don't get it. Until they do, the music industry will continue its slow and steady decline.

 |  IP: Logged

Bruce Hansen
Jedi Master Film Handler

Posts: 847
From: Stone Mountain, GA, USA
Registered: Dec 1999


 - posted 12-08-2005 06:12 PM      Profile for Bruce Hansen   Email Bruce Hansen   Send New Private Message       Edit/Delete Post 
Everything they put out today is crap, and it is all the same. It is all the same crap. On top of that, the recording quality is pure s**t. It is way over recorded, and very distorted. Add to that, the price is WAY too high. This is the resipe for the death of the industry. Now they are screwing around with people's computers. I hope Sony Music is put out of business over this. They deserve it.

 |  IP: Logged

Brian Michael Weidemann
Expert cat molester

Posts: 944
From: Costa Mesa, CA United States
Registered: Feb 2004


 - posted 12-10-2005 05:12 AM      Profile for Brian Michael Weidemann   Author's Homepage   Email Brian Michael Weidemann   Send New Private Message       Edit/Delete Post 
Music should just be banned altogether. No good has ever come from it. Look at all the difficulty and controversy involved. Books, too! Nothing created by anyone is ever going to be worth anything, so why even bother?

(Sorry, I think I was possessed by Joe for a second there!) [Big Grin]

 |  IP: Logged



All times are Central (GMT -6:00)
This topic comprises 6 pages: 1  2  3  4  5  6 
 
   Close Topic    Move Topic    Delete Topic    next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:



Powered by Infopop Corporation
UBB.classicTM 6.3.1.2

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.

© 1999-2020 Film-Tech Cinema Systems, LLC. All rights reserved.