<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Rootkit</title>
  <link rel="alternate" type="text/html" href="http://rarepattern.com/tags/rootkit"/>
  <link rel="self" type="application/atom+xml" href="http://rarepattern.com/taxonomy/term/272/atom/feed"/>
  <id>http://rarepattern.com/taxonomy/term/272/atom/feed</id>
  <updated>2007-12-31T22:01:47-06:00</updated>
  <entry>
    <title>RIAA&#039;s legal rootkit: Copy your CD to your iPod, get sued</title>
    <link rel="alternate" type="text/html" href="http://rarepattern.com/nodes/2007/12/riaas-legal-rootkit-copy-your-cd-your-ipod-get-sued" />
    <id>http://rarepattern.com/nodes/2007/12/riaas-legal-rootkit-copy-your-cd-your-ipod-get-sued</id>
    <published>2007-12-31T19:26:53-06:00</published>
    <updated>2007-12-31T22:00:00-06:00</updated>
    <author>
      <name>Laura Scott</name>
    </author>
    <category term="contempt for the consumer" />
    <category term="copyright" />
    <category term="intellectual property" />
    <category term="music" />
    <category term="RIAA" />
    <category term="Rootkit" />
    <summary type="html"><![CDATA[<p>That's right. The RIAA lawyers are claiming you cannot legally copy for your own use music you bought and paid for. <a href="http://workerbeesblog.blogspot.com/2007/12/riaa-is-seriously-insane.html">Via Elisa Camahort</a>, I returned from the holidays to <a href="http://www.washingtonpost.com/wp-dyn/content/article/2007/12/28/AR2007122800693.html">read this</a>:</p>
<blockquote><p>The industry's lawyer in the case, Ira Schwartz, argues in a brief filed earlier this month that the MP3 files Howell made on his computer from legally bought CDs are "unauthorized copies" of copyrighted recordings.</p>
<p>"I couldn't believe it when I read that," says Ray Beckerman, a New York lawyer who represents six clients who have been sued by the RIAA. "The basic principle in the law is that you have to distribute actual physical copies to be guilty of violating copyright. But recently, the industry has been going around saying that even a personal copy on your computer is a violation."</p>
</blockquote>
<p>Maybe I'm just unique, but I feel that it's this kind of hostility and <a href="http://rarepattern.com/nodes/2005/11/more-on-sony-drm-and-infected-music-cds">contempt for the consumer</a> that is doing in the music business.</p>
<p>Elisa writes:</p>
<blockquote><p>Let me tell you how many CDs I own: somewhere between 1000 and 1500. </p>
<p>Let me tell you how many hours out of the day I listen to my music (my every-single-song-was-legally-acquired music) via my iPod or computer: at least 10 hours a day in my car, at work and at home.</p>
<p>Let me tell you how many of my CDs I would listen to if not for my iPod: probably very VERY few. Even a multi-CD player would be too inconvenient to rely on during the work day. I like being able to turn on Shuffle on my computer or iPod and have music all day without thinking about it or messing with it. Pre-iPod I did not listen to CDs at work ever. I did listen to CDs in my car, but tended to have the same 6 CDs in there for weeks without changing them.</p>
<p>Let me tell you how that would affect my music-buying habits: It would greatly diminish them. I would forget about artists I liked, I would fall into a musical rut, instead of maintaining the really quite broad musical taste I have. And broad taste leads to broad music-buying habits. iTunes has already massively increased my music-buying habits by being so simple and so immediate. By exposing me to more music. And by making it easy for a constant variety of music to accompany my life most of my waking hours.</p>
<p>So, here's what the RIAA is just begging me to do: Never buy another physical CD, ever.</p>
</blockquote>
<p><a href="http://www.news.com.au/heraldsun/story/0,21985,22948248-2902,00.html">Radiohead just might be onto something.</a></p>
    ]]></summary>
    <content type="html"><![CDATA[<p>That's right. The RIAA lawyers are claiming you cannot legally copy for your own use music you bought and paid for. <a href="http://workerbeesblog.blogspot.com/2007/12/riaa-is-seriously-insane.html">Via Elisa Camahort</a>, I returned from the holidays to <a href="http://www.washingtonpost.com/wp-dyn/content/article/2007/12/28/AR2007122800693.html">read this</a>:</p>
<blockquote><p>The industry's lawyer in the case, Ira Schwartz, argues in a brief filed earlier this month that the MP3 files Howell made on his computer from legally bought CDs are "unauthorized copies" of copyrighted recordings.</p>
<p>"I couldn't believe it when I read that," says Ray Beckerman, a New York lawyer who represents six clients who have been sued by the RIAA. "The basic principle in the law is that you have to distribute actual physical copies to be guilty of violating copyright. But recently, the industry has been going around saying that even a personal copy on your computer is a violation."</p></blockquote>
<p>Maybe I'm just unique, but I feel that it's this kind of hostility and <a href="http://rarepattern.com/nodes/2005/11/more-on-sony-drm-and-infected-music-cds">contempt for the consumer</a> that is doing in the music business.</p>
<p>Elisa writes:</p>
<blockquote><p>Let me tell you how many CDs I own: somewhere between 1000 and 1500. </p>
<p>Let me tell you how many hours out of the day I listen to my music (my every-single-song-was-legally-acquired music) via my iPod or computer: at least 10 hours a day in my car, at work and at home.</p>
<p>Let me tell you how many of my CDs I would listen to if not for my iPod: probably very VERY few. Even a multi-CD player would be too inconvenient to rely on during the work day. I like being able to turn on Shuffle on my computer or iPod and have music all day without thinking about it or messing with it. Pre-iPod I did not listen to CDs at work ever. I did listen to CDs in my car, but tended to have the same 6 CDs in there for weeks without changing them.</p>
<p>Let me tell you how that would affect my music-buying habits: It would greatly diminish them. I would forget about artists I liked, I would fall into a musical rut, instead of maintaining the really quite broad musical taste I have. And broad taste leads to broad music-buying habits. iTunes has already massively increased my music-buying habits by being so simple and so immediate. By exposing me to more music. And by making it easy for a constant variety of music to accompany my life most of my waking hours.</p>
<p>So, here's what the RIAA is just begging me to do: Never buy another physical CD, ever.</p></blockquote>
<p><a href="http://www.news.com.au/heraldsun/story/0,21985,22948248-2902,00.html">Radiohead just might be onto something.</a></p>
    ]]></content>
  </entry>
  <entry>
    <title>Your customer is the customer you expect</title>
    <link rel="alternate" type="text/html" href="http://rarepattern.com/nodes/2005/11/your-customer-is-the-customer-you-expect" />
    <id>http://rarepattern.com/nodes/2005/11/your-customer-is-the-customer-you-expect</id>
    <published>2005-11-14T10:19:34-06:00</published>
    <updated>2007-12-31T22:02:28-06:00</updated>
    <author>
      <name>Laura Scott</name>
    </author>
    <category term="business" />
    <category term="Cluetrain" />
    <category term="contempt for the consumer" />
    <category term="copyright" />
    <category term="media" />
    <category term="music" />
    <category term="patterns" />
    <category term="Rootkit" />
    <summary type="html"><![CDATA[<p>
On the <a href="http://rarepattern.com/nodes/2005/11/sony-bmgs-contempt-for-the-consumer">current nefarious Sony anti-piracy outrage</a>, a <a href="http://www.theinquirer.net/?article=27670">column in The Inquirer (UK) by Marc Ninthly</a> highlights what I think is the biggest issue here:
</p>
<blockquote><p>
My big problem is that we are not being told about these things. Decisions about the software we run on our systems – the ones we saved hard for, or stole from some drunk yuppie last night – are being made, and implemented without our consent. Now, some legal smart arse will undoubtedly point out that it was all outlined quite clearly in Section 3, paragraph 17, addendum III b of the user contract but let’s be realistic, who the hell reads that all of that mumbo jumbo in the first place? Most real people don’t and when it comes to products from big brands, I often don’t. It’s not just that it’s mind-numbingly boring, but that it’s written in a way to make it impenetrable to normal folk.</p>
<p>One could say that it’s been embedded with an Anti-Interest rootkit that prevents you from reading more than a few paragraphs before you start questioning your own existence. The only way to stop it is to press the ‘Accept’ button. Consumers allocate a certain amount of trust to household name companies when they buy one of their products. We figure, maybe naively, that forking out that extra bit of cash for a real CD instead of some cheapo knock-off at a car boot sale, entitles us to a certain level of quality and protection. Not so. We have now gone from being valued customers to potential criminals. That’s it in a nutshell.
</p>
</blockquote>
<p>
And, he points out, the ultimate consequence of Sony's treatment of its customers is that the customers will be more likely to go the illegal route and download pirated music -- Sony's customers will indeed become the "criminals" that Sony despises.
</p>
<p>
I'm reminded of a tenet of Eastern thought:
</p>
<blockquote><p>
You tend to receive from life that upon which you focus. If you focus on bad things, then you tend to cultivate bad things in your life.
</p>
</blockquote>
<p>
In other words, you reap what you sow. And the "why" is that your creativity is a powerful thing, and works in ways that you don't even realize. Put all your energy into positive endeavors and positive energy comes back to you.
</p>
<p>
Successful entrepreneurs know this -- they will be the first to tell you how once you commit to a venture, it's almost like doors are opened up before you and the universe conspires for your success. On the other hand, gloomy Murphys will tend to see the downside of any decision; they prove adept at snatching defeat from the jaws of victory.
</p>
<p>
In this sort of Zen-like way, we're seeing multinational megacorporations focusing on the negative, and therefore cultivating negative outcomes. Sony's corporate policies are being dominated by gloomy Murphys who see criminal intent in every customer. Meanwhile, whatever creative visionaries there might be in Sony's executive suites -- those who might see the new media developments as opportunities rather than threats -- seem to be having little or no impact on corporate decision-making.
</p>
<p>
The clichéd metaphor of corporate "dinosaur" seems especially apt in this context, for we see a large beast that is so angry that its feeding grounds are changing that its stomping out the food it has -- and seems to be too limited in intelligence to see the self-destructiveness of its actions.
</p>
<p>
That's not to say I'm predicting the fall of Sony over this. As entrenched as these corporations are in our global economy, it's pretty clear that they aren't going away any time soon.
</p>
<p>
But this does offer yet another clear indication that the market is changing in ways of which the megacorporations are not mentally, creatively or even lawyerly equipped to take advantage. Our economy is changing, and the old-time top-down hierarchical business models, where the consumer has little or no say in the vendor's business practices, are proving to be outmoded and, ultimately, counter-productive.
</p>
<p>
Sony is facing an expensive lesson in the new economics of the world. How many more lessons will it take, and how many other dinosaurs will have to suffer the same, before they join us rather than fight us?
</p>
    ]]></summary>
    <content type="html"><![CDATA[<p>
On the <a href="http://rarepattern.com/nodes/2005/11/sony-bmgs-contempt-for-the-consumer">current nefarious Sony anti-piracy outrage</a>, a <a href="http://www.theinquirer.net/?article=27670">column in The Inquirer (UK) by Marc Ninthly</a> highlights what I think is the biggest issue here:
</p>
<blockquote><p>
My big problem is that we are not being told about these things. Decisions about the software we run on our systems – the ones we saved hard for, or stole from some drunk yuppie last night – are being made, and implemented without our consent. Now, some legal smart arse will undoubtedly point out that it was all outlined quite clearly in Section 3, paragraph 17, addendum III b of the user contract but let’s be realistic, who the hell reads that all of that mumbo jumbo in the first place? Most real people don’t and when it comes to products from big brands, I often don’t. It’s not just that it’s mind-numbingly boring, but that it’s written in a way to make it impenetrable to normal folk.</p>
<p>One could say that it’s been embedded with an Anti-Interest rootkit that prevents you from reading more than a few paragraphs before you start questioning your own existence. The only way to stop it is to press the ‘Accept’ button. Consumers allocate a certain amount of trust to household name companies when they buy one of their products. We figure, maybe naively, that forking out that extra bit of cash for a real CD instead of some cheapo knock-off at a car boot sale, entitles us to a certain level of quality and protection. Not so. We have now gone from being valued customers to potential criminals. That’s it in a nutshell.
</p></blockquote>
<p>
And, he points out, the ultimate consequence of Sony's treatment of its customers is that the customers will be more likely to go the illegal route and download pirated music -- Sony's customers will indeed become the "criminals" that Sony despises.
</p>
<p>
I'm reminded of a tenet of Eastern thought:
</p>
<blockquote><p>
You tend to receive from life that upon which you focus. If you focus on bad things, then you tend to cultivate bad things in your life.
</p></blockquote>
<p>
In other words, you reap what you sow. And the "why" is that your creativity is a powerful thing, and works in ways that you don't even realize. Put all your energy into positive endeavors and positive energy comes back to you.
</p>
<p>
Successful entrepreneurs know this -- they will be the first to tell you how once you commit to a venture, it's almost like doors are opened up before you and the universe conspires for your success. On the other hand, gloomy Murphys will tend to see the downside of any decision; they prove adept at snatching defeat from the jaws of victory.
</p>
<p>
In this sort of Zen-like way, we're seeing multinational megacorporations focusing on the negative, and therefore cultivating negative outcomes. Sony's corporate policies are being dominated by gloomy Murphys who see criminal intent in every customer. Meanwhile, whatever creative visionaries there might be in Sony's executive suites -- those who might see the new media developments as opportunities rather than threats -- seem to be having little or no impact on corporate decision-making.
</p>
<p>
The clichéd metaphor of corporate "dinosaur" seems especially apt in this context, for we see a large beast that is so angry that its feeding grounds are changing that its stomping out the food it has -- and seems to be too limited in intelligence to see the self-destructiveness of its actions.
</p>
<p>
That's not to say I'm predicting the fall of Sony over this. As entrenched as these corporations are in our global economy, it's pretty clear that they aren't going away any time soon.
</p>
<p>
But this does offer yet another clear indication that the market is changing in ways of which the megacorporations are not mentally, creatively or even lawyerly equipped to take advantage. Our economy is changing, and the old-time top-down hierarchical business models, where the consumer has little or no say in the vendor's business practices, are proving to be outmoded and, ultimately, counter-productive.
</p>
<p>
Sony is facing an expensive lesson in the new economics of the world. How many more lessons will it take, and how many other dinosaurs will have to suffer the same, before they join us rather than fight us?
</p>
    ]]></content>
  </entry>
  <entry>
    <title>Sony temporarily halts use of crippleware, but Homeland Security still is not pleased</title>
    <link rel="alternate" type="text/html" href="http://rarepattern.com/nodes/2005/11/sony-temporarily-halts-use-of-crippleware-but-homeland-security-still-is-not-pleased" />
    <id>http://rarepattern.com/nodes/2005/11/sony-temporarily-halts-use-of-crippleware-but-homeland-security-still-is-not-pleased</id>
    <published>2005-11-11T12:47:46-06:00</published>
    <updated>2007-12-31T22:00:47-06:00</updated>
    <author>
      <name>Laura Scott</name>
    </author>
    <category term="business" />
    <category term="computers" />
    <category term="contempt for the consumer" />
    <category term="copyright" />
    <category term="music" />
    <category term="Rootkit" />
    <summary type="html"><![CDATA[<p>
Nothing like lawsuits to get a <a href="http://www.washingtonpost.com/wp-dyn/content/article/2005/11/11/AR2005111100632.html">response</a>, if only for the moment.
</p>
<blockquote><p>
Stung by continuing criticism, the world's second-largest music label, Sony BMG Music Entertainment, promised Friday to temporarily suspend making music CDs with antipiracy technology that can leave computers vulnerable to hackers.</p>
<p>Sony defended its right to prevent customers from illegally copying music but said it will halt manufacturing CDs with the "XCP" technology as a precautionary measure. "We also intend to re-examine all aspects of our content protection initiative to be sure that it continues to meet our goals of security and ease of consumer use," the company said in a statement.
</p>
</blockquote>
<p>
Note that customer satisfaction is not mentioned. We don't even get a crocodile tear.
</p>
<p>
I must say, I find their contempt for the customer -- or, at best, disregard for customer satisfaction -- astonishes me.
</p>
<p>
It apparently also <a href="http://blogs.washingtonpost.com/securityfix/2005/11/the_bush_admini.html">offended the sensibilities of the new assistant secretary for policy in the Department of Homeland Security, Stewart Baker</a>:
</p>
<blockquote><p>
"I wanted to raise one point of caution as we go forward, because we are also responsible for maintaining the security of the information infrastructure of the United States and making sure peoples' [and] businesses' computers are secure. ... There's been a lot of publicity recently about tactics used in pursuing protection for music and DVD CDs in which questions have been raised about whether the protection measures install hidden files on peoples' computers that even the system administrators can’t find."</p>
<p>In a remark clearly aimed directly at Sony and other labels, Stewart continued: "It's very important to remember that it's your intellectual property -- it's not your computer. And in the pursuit of protection of intellectual property, it's important not to defeat or undermine the security measures that people need to adopt in these days.</p>
<p>"If we have an avian flu outbreak here and it is even half as bad as the 1918 flu epidemic, we will be enormously dependent on being able to get remote access for a large number of people, and keeping the infrastructure functioning is a matter of life and death and we take it very seriously."
</p>
</blockquote>
<p>
Now that's an angle I hadn't thought of.
</p>
    ]]></summary>
    <content type="html"><![CDATA[<p>
Nothing like lawsuits to get a <a href="http://www.washingtonpost.com/wp-dyn/content/article/2005/11/11/AR2005111100632.html">response</a>, if only for the moment.
</p>
<blockquote><p>
Stung by continuing criticism, the world's second-largest music label, Sony BMG Music Entertainment, promised Friday to temporarily suspend making music CDs with antipiracy technology that can leave computers vulnerable to hackers.</p>
<p>Sony defended its right to prevent customers from illegally copying music but said it will halt manufacturing CDs with the "XCP" technology as a precautionary measure. "We also intend to re-examine all aspects of our content protection initiative to be sure that it continues to meet our goals of security and ease of consumer use," the company said in a statement.
</p></blockquote>
<p>
Note that customer satisfaction is not mentioned. We don't even get a crocodile tear.
</p>
<p>
I must say, I find their contempt for the customer -- or, at best, disregard for customer satisfaction -- astonishes me.
</p>
<p>
It apparently also <a href="http://blogs.washingtonpost.com/securityfix/2005/11/the_bush_admini.html">offended the sensibilities of the new assistant secretary for policy in the Department of Homeland Security, Stewart Baker</a>:
</p>
<blockquote><p>
"I wanted to raise one point of caution as we go forward, because we are also responsible for maintaining the security of the information infrastructure of the United States and making sure peoples' [and] businesses' computers are secure. ... There's been a lot of publicity recently about tactics used in pursuing protection for music and DVD CDs in which questions have been raised about whether the protection measures install hidden files on peoples' computers that even the system administrators can’t find."</p>
<p>In a remark clearly aimed directly at Sony and other labels, Stewart continued: "It's very important to remember that it's your intellectual property -- it's not your computer. And in the pursuit of protection of intellectual property, it's important not to defeat or undermine the security measures that people need to adopt in these days.</p>
<p>"If we have an avian flu outbreak here and it is even half as bad as the 1918 flu epidemic, we will be enormously dependent on being able to get remote access for a large number of people, and keeping the infrastructure functioning is a matter of life and death and we take it very seriously."
</p></blockquote>
<p>
Now that's an angle I hadn't thought of.
</p>
    ]]></content>
  </entry>
  <entry>
    <title>More on Sony DRM and infected music CDs</title>
    <link rel="alternate" type="text/html" href="http://rarepattern.com/nodes/2005/11/more-on-sony-drm-and-infected-music-cds" />
    <id>http://rarepattern.com/nodes/2005/11/more-on-sony-drm-and-infected-music-cds</id>
    <published>2005-11-10T15:49:58-06:00</published>
    <updated>2007-12-31T22:01:47-06:00</updated>
    <author>
      <name>Laura Scott</name>
    </author>
    <category term="business" />
    <category term="Cluetrain" />
    <category term="computers" />
    <category term="contempt for the consumer" />
    <category term="copyright" />
    <category term="Mac" />
    <category term="music" />
    <category term="Rootkit" />
    <category term="software" />
    <category term="Windows" />
    <summary type="html"><![CDATA[<p>
Following up on what I just posted, it <a href="http://owengary.blogspot.com/2005/11/sony-sued-over-drm-rootkit.html">seems</a> that <a href="http://arstechnica.com/news.ars/post/20051110-5549.html">Sony BMG is now being sued</a> for damage their secret RootKit software has done to PCs:
</p>
<blockquote><p>
Sony's now infamous decision to use <a href="http://arstechnica.com/news.ars/post/20051101-5514.html">system destabilizing DRM malware</a> in order to "fight piracy" (despite it being <a href="http://arstechnica.com/news.ars/post/20051109-5542.html">shockingly easy to defeat</a>) has earned Sony a lawsuit or three. A new class action suit has been filed in Los Angeles Superior Court, another is expected in New York this week, and there have been a handful of rumblings in other countries, as well.</p>
<p>In California, the class action suit alleges that Sony's DRM has caused harm to computers, and that the company failed to disclose precisely what the DRM technology would do to users' computers. According to sources, the suit alleges three distinct violations of California law, including violations of statutes relating to deceptive trade practices and obfuscated technological measures deemed to be anti-consumer. The suit seeks an injunction against the sale of the effected CDs as well as monetary damages for those who purchased the discs.
</p>
</blockquote>
<p>
The <a href="http://www.eff.org/deeplinks/archives/004149.php">Electronic Frontier Foundation also is considering legal action</a> and is seeking information from affected customers.
</p>
<p>
What's more, now the "Stinx-E trojan" has appeared to <a href="http://www.viruslist.com/en/weblog?calendar=2005-11">exploit</a> the Sony DRM software's code to open a back door to PCs.
</p>
<p>
And not only that, <a href="http://www.sysinternals.com/blog/2005/11/sony-you-dont-reeeeaaaally-want-to_09.html">Mark Russinovich reports</a> that the DRM software itself is harder to uninstall than many malicious viruses.
</p>
<p>
What's even <a href="http://fergdawg.blogspot.com/2005/11/sony-drm-cds-infect-macs-too.html">more</a>, <a href="http://www.boingboing.net/2005/11/10/sony_music_cds_infec.html">Cory at BoingBoing links to</a> Darren Dittrich's report that the <a href="http://www.macintouch.com/#tip.2005.11.10.sony">Sony CDs also infect Macs</a>:
</p>
<blockquote><p>
I recently purchased Imogen Heap's new CD (Speak for Yourself), an RCA Victor release, but with distribution credited to Sony/BMG. Reading recent reports of a Sony rootkit, I decided to poke around. In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext. </p>
<p>  Personally, I'm not a big fan of anyone installing kernel extensions on my Mac. In Sony's defense, upon closer reading of the EULA, they essentially tell you that they will be installing software. Also, this is apparently not the same technology used in the recent Windows rootkits (made by <a href="http://www.xcp-aurora.com/">XCP</a>), but rather a DRM codebase developed by SunnComm, who promotes their Mac-aware <a href="http://www.sunncomm.com/Brochure/">DRM technology</a> on their site.
</p>
</blockquote>
<p>
<a href="http://www.eff.org/deeplinks/archives/004144.php">EFF has a partial list</a> of infected CDs:
</p>
<blockquote><p>
Trey Anastasio, <em>Shine</em> (Columbia)</p>
<p>Celine Dion, <em>On ne Change Pas</em> (Epic)</p>
<p>Neil Diamond, <em>12 Songs</em> (Columbia)</p>
<p>Our Lady Peace, <em>Healthy in Paranoid Times</em> (Columbia)</p>
<p>Chris Botti, <em>To Love Again</em> (Columbia)</p>
<p>Van Zant, <em>Get Right with the Man</em> (Columbia)</p>
<p>Switchfoot, <em>Nothing is Sound</em> (Columbia)</p>
<p>The Coral, <em>The Invisible Invasion</em> (Columbia)</p>
<p>Acceptance, <em>Phantoms</em> (Columbia)</p>
<p>Susie Suh, <em>Susie Suh</em> (Epic)</p>
<p>Amerie, <em>Touch</em> (Columbia)</p>
<p>Life of Agony, <em>Broken Valley</em> (Epic)</p>
<p>Horace Silver Quintet, <em>Silver's Blue</em> (Epic Legacy)</p>
<p>Gerry Mulligan, <em>Jeru</em> (Columbia Legacy)</p>
<p>Dexter Gordon, <em>Manhattan Symphonie</em> (Columbia Legacy)</p>
<p>The Bad Plus, <em>Suspicious Activity</em> (Columbia)</p>
<p>The Dead 60s, <em>The Dead 60s</em> (Epic)</p>
<p>Dion, <em>The Essential Dion</em> (Columbia Legacy)</p>
<p>Natasha Bedingfield, <em>Unwritten</em> (Epic)</p>
<p>Ricky Martin, <em>Life</em> (Columbia) (labeled as XCP, but, oddly, our disc had no protection)</p>
<p>Several other Sony-BMG CDs are protected with a different copy-protection technology, sourced from SunnComm, including:</p>
<p>My Morning Jacket, <em>Z</em></p>
<p>Santana, <em>All That I Am</em></p>
<p>Sarah McLachlan, <em>Bloom Remix Album</em>
</p>
</blockquote>
<p>
They also tell you how to figure out if another CD is infected.
</p>
<p>
(Now I need to call my sister. I'd bought Santana's album, but didn't care for it and gave it to her. I'm glad I didn't pop it into my Mac first ... but she has a PC. Ack!)
</p>
<p>
<a href="http://blogs.zdnet.com/BTL/?p=2092">David Berlind on ZDNet</a> notes that the bands whose CDs are being sold with the crippleware are not happy about it:
</p>
<blockquote><p>
Z isn't the only band that's upset with the latest DRM developments.  Last month, CNN.com <a href="http://www.cnn.com/2005/TECH/ptech/10/04/music.copy.reut/index.html">reported</a> how a member of the band Switchfoot whose DRM-protected CD debuted at No. 3 on The Billboard 200 was equally disappointed.  Said Switchfoot guitarist Tim Foreman, "We were horrified when we first heard about the new copy-protection policy…. It is heartbreaking to see our blood, sweat and tears over the past two years blurred by the confusion and frustration surrounding new technology."</p>
<p>Even more demonstrative of the control points afforded to any market leading or dominating solution, the CNN story goes onto describe how Sony BMG is aware of the problems when it comes to transferring music from its DRM-protected CDs to iPods and is "urging people who buy copy-protected titles to write to Apple and demand that the company license its FairPlay DRM for use with secure CDs."  Even though Apple's Fairplay may not have a monopoly yet, the company is behaving very monopolistically, an issue I discuss in another <a href="http://blogs.zdnet.com/BTL/?p=2093">blog entry</a> that I posted today.
</p>
</blockquote>
<p>
<a href="http://www.cnet.com.au/hometheatre/audio/0,39025973,40058044,00.htm">Molly Wood's CNET column</a> last week expressed outrage at Sony's behavior:
</p>
<blockquote><p>
But this--using the tactics of criminals to invade our PCs without our knowledge and to expose us to further attack, just so you can keep us from, say, burning a mix CD and giving it to our friends--this is beyond the pale. And as many news sources are beginning to point out, there's some reason to think <a href="http://www.wired.com/news/rants/0,2350,69467,00.html?tw=wn_tophead_5">it might also be illegal</a>, under the U.S. Computer Fraud and Abuse Act.
</p>
</blockquote>
<p>
From the realm of unintended consequences, <a href="http://www.jasonn.com/node/310">jasonn wonders</a> if anti-virus companies could be prosecuted for removing the DRM software:
</p>
<blockquote><p>
The logical question, regarding the Sony rootkit scandal and the upcoming removal tools from antivirus companies, is when will the DOJ prosecute antivirus companies for violating the DMCA? It's not a question of whether or not they violate the law when they supply removal tools for Sony's rootkit, aka Digital Rights Management software, which now exposes PCs to a virus threat. The question is whether or not the government will apply the law.
</p>
</blockquote>
<p>
<a href="http://isaac.eiland-hall.com/2005/11/10/red-herring-sony-spyware-draws-lawsuits/">Isaac.Eiland-Hall is astounded</a> by all this:
</p>
<blockquote><p>
I mean really—I can’t imagine they thought they could get away with this.</p>
<p>I tell you what—if I had Sony stock, I’d be selling it like no tomorrow—because that’s what they might have.
</p>
</blockquote>
<p>
Perhaps the simplest and clearest response comes from over <a href="http://www.bythebayou.com/2005/11/more-sony-drm-fun.html">By the Bayou</a>:
</p>
<blockquote><p>
Nice going. Do they just really hate their customers? As I said before: this is why I almost never buy CDs anymore.
</p>
</blockquote>
<p>
At the very least, I think this is just another demonstration on why <a href="http://cluetrain.com">Cluetrain</a>-clued-in businesses and open source approaches to technology have bright futures.
</p>
    ]]></summary>
    <content type="html"><![CDATA[<p>
Following up on what I just posted, it <a href="http://owengary.blogspot.com/2005/11/sony-sued-over-drm-rootkit.html">seems</a> that <a href="http://arstechnica.com/news.ars/post/20051110-5549.html">Sony BMG is now being sued</a> for damage their secret RootKit software has done to PCs:
</p>
<blockquote><p>
Sony's now infamous decision to use <a href="http://arstechnica.com/news.ars/post/20051101-5514.html">system destabilizing DRM malware</a> in order to "fight piracy" (despite it being <a href="http://arstechnica.com/news.ars/post/20051109-5542.html">shockingly easy to defeat</a>) has earned Sony a lawsuit or three. A new class action suit has been filed in Los Angeles Superior Court, another is expected in New York this week, and there have been a handful of rumblings in other countries, as well.</p>
<p>In California, the class action suit alleges that Sony's DRM has caused harm to computers, and that the company failed to disclose precisely what the DRM technology would do to users' computers. According to sources, the suit alleges three distinct violations of California law, including violations of statutes relating to deceptive trade practices and obfuscated technological measures deemed to be anti-consumer. The suit seeks an injunction against the sale of the effected CDs as well as monetary damages for those who purchased the discs.
</p></blockquote>
<p>
The <a href="http://www.eff.org/deeplinks/archives/004149.php">Electronic Frontier Foundation also is considering legal action</a> and is seeking information from affected customers.
</p>
<p>
What's more, now the "Stinx-E trojan" has appeared to <a href="http://www.viruslist.com/en/weblog?calendar=2005-11">exploit</a> the Sony DRM software's code to open a back door to PCs.
</p>
<p>
And not only that, <a href="http://www.sysinternals.com/blog/2005/11/sony-you-dont-reeeeaaaally-want-to_09.html">Mark Russinovich reports</a> that the DRM software itself is harder to uninstall than many malicious viruses.
</p>
<p>
What's even <a href="http://fergdawg.blogspot.com/2005/11/sony-drm-cds-infect-macs-too.html">more</a>, <a href="http://www.boingboing.net/2005/11/10/sony_music_cds_infec.html">Cory at BoingBoing links to</a> Darren Dittrich's report that the <a href="http://www.macintouch.com/#tip.2005.11.10.sony">Sony CDs also infect Macs</a>:
</p>
<blockquote><p>
I recently purchased Imogen Heap's new CD (Speak for Yourself), an RCA Victor release, but with distribution credited to Sony/BMG. Reading recent reports of a Sony rootkit, I decided to poke around. In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext. </p>
<p>  Personally, I'm not a big fan of anyone installing kernel extensions on my Mac. In Sony's defense, upon closer reading of the EULA, they essentially tell you that they will be installing software. Also, this is apparently not the same technology used in the recent Windows rootkits (made by <a href="http://www.xcp-aurora.com/">XCP</a>), but rather a DRM codebase developed by SunnComm, who promotes their Mac-aware <a href="http://www.sunncomm.com/Brochure/">DRM technology</a> on their site.
</p></blockquote>
<p>
<a href="http://www.eff.org/deeplinks/archives/004144.php">EFF has a partial list</a> of infected CDs:
</p>
<blockquote><p>
Trey Anastasio, <em>Shine</em> (Columbia)<br />
<br />Celine Dion, <em>On ne Change Pas</em> (Epic)<br />
<br />Neil Diamond, <em>12 Songs</em> (Columbia)<br />
<br />Our Lady Peace, <em>Healthy in Paranoid Times</em> (Columbia)<br />
<br />Chris Botti, <em>To Love Again</em> (Columbia)<br />
<br />Van Zant, <em>Get Right with the Man</em> (Columbia)<br />
<br />Switchfoot, <em>Nothing is Sound</em> (Columbia)<br />
<br />The Coral, <em>The Invisible Invasion</em> (Columbia)<br />
<br />Acceptance, <em>Phantoms</em> (Columbia)<br />
<br />Susie Suh, <em>Susie Suh</em> (Epic)<br />
<br />Amerie, <em>Touch</em> (Columbia)<br />
<br />Life of Agony, <em>Broken Valley</em> (Epic)<br />
<br />Horace Silver Quintet, <em>Silver's Blue</em> (Epic Legacy)<br />
<br />Gerry Mulligan, <em>Jeru</em> (Columbia Legacy)<br />
<br />Dexter Gordon, <em>Manhattan Symphonie</em> (Columbia Legacy)<br />
<br />The Bad Plus, <em>Suspicious Activity</em> (Columbia)<br />
<br />The Dead 60s, <em>The Dead 60s</em> (Epic)<br />
<br />Dion, <em>The Essential Dion</em> (Columbia Legacy)<br />
<br />Natasha Bedingfield, <em>Unwritten</em> (Epic)<br />
<br />Ricky Martin, <em>Life</em> (Columbia) (labeled as XCP, but, oddly, our disc had no protection)</p>
<p>Several other Sony-BMG CDs are protected with a different copy-protection technology, sourced from SunnComm, including:</p>
<p>My Morning Jacket, <em>Z</em><br />
<br />Santana, <em>All That I Am</em><br />
<br />Sarah McLachlan, <em>Bloom Remix Album</em>
</p></blockquote>
<p>
They also tell you how to figure out if another CD is infected.
</p>
<p>
(Now I need to call my sister. I'd bought Santana's album, but didn't care for it and gave it to her. I'm glad I didn't pop it into my Mac first ... but she has a PC. Ack!)
</p>
<p>
<a href="http://blogs.zdnet.com/BTL/?p=2092">David Berlind on ZDNet</a> notes that the bands whose CDs are being sold with the crippleware are not happy about it:
</p>
<blockquote><p>
Z isn't the only band that's upset with the latest DRM developments.  Last month, CNN.com <a href="http://www.cnn.com/2005/TECH/ptech/10/04/music.copy.reut/index.html">reported</a> how a member of the band Switchfoot whose DRM-protected CD debuted at No. 3 on The Billboard 200 was equally disappointed.  Said Switchfoot guitarist Tim Foreman, "We were horrified when we first heard about the new copy-protection policy…. It is heartbreaking to see our blood, sweat and tears over the past two years blurred by the confusion and frustration surrounding new technology."</p>
<p>Even more demonstrative of the control points afforded to any market leading or dominating solution, the CNN story goes onto describe how Sony BMG is aware of the problems when it comes to transferring music from its DRM-protected CDs to iPods and is "urging people who buy copy-protected titles to write to Apple and demand that the company license its FairPlay DRM for use with secure CDs."  Even though Apple's Fairplay may not have a monopoly yet, the company is behaving very monopolistically, an issue I discuss in another <a href="http://blogs.zdnet.com/BTL/?p=2093">blog entry</a> that I posted today.
</p></blockquote>
<p>
<a href="http://www.cnet.com.au/hometheatre/audio/0,39025973,40058044,00.htm">Molly Wood's CNET column</a> last week expressed outrage at Sony's behavior:
</p>
<blockquote><p>
But this--using the tactics of criminals to invade our PCs without our knowledge and to expose us to further attack, just so you can keep us from, say, burning a mix CD and giving it to our friends--this is beyond the pale. And as many news sources are beginning to point out, there's some reason to think <a href="http://www.wired.com/news/rants/0,2350,69467,00.html?tw=wn_tophead_5">it might also be illegal</a>, under the U.S. Computer Fraud and Abuse Act.
</p></blockquote>
<p>
From the realm of unintended consequences, <a href="http://www.jasonn.com/node/310">jasonn wonders</a> if anti-virus companies could be prosecuted for removing the DRM software:
</p>
<blockquote><p>
The logical question, regarding the Sony rootkit scandal and the upcoming removal tools from antivirus companies, is when will the DOJ prosecute antivirus companies for violating the DMCA? It's not a question of whether or not they violate the law when they supply removal tools for Sony's rootkit, aka Digital Rights Management software, which now exposes PCs to a virus threat. The question is whether or not the government will apply the law.
</p></blockquote>
<p>
<a href="http://isaac.eiland-hall.com/2005/11/10/red-herring-sony-spyware-draws-lawsuits/">Isaac.Eiland-Hall is astounded</a> by all this:
</p>
<blockquote><p>
I mean really—I can’t imagine they thought they could get away with this.</p>
<p>I tell you what—if I had Sony stock, I’d be selling it like no tomorrow—because that’s what they might have.
</p></blockquote>
<p>
Perhaps the simplest and clearest response comes from over <a href="http://www.bythebayou.com/2005/11/more-sony-drm-fun.html">By the Bayou</a>:
</p>
<blockquote><p>
Nice going. Do they just really hate their customers? As I said before: this is why I almost never buy CDs anymore.
</p></blockquote>
<p>
At the very least, I think this is just another demonstration on why <a href="http://cluetrain.com">Cluetrain</a>-clued-in businesses and open source approaches to technology have bright futures.
</p>
    ]]></content>
  </entry>
</feed>
