Sony installs spyware!

[method77]

Sony releases the new Van Zant CD. On the computer, it only plays within its own executable, not via Windows Media Player or any other software. You are allowed to burn three copies of the CD, and then it's done with.

Well, it appears that, to enforce this DRM, Sony are installing device drivers, DLLs and registry hacks, then running a Rootkit process to mask their installation. If you attempt to uninstall the playing software, the device drivers are left installed, and are left active. Trying to delete the drivers manually - providing you can even find them - can leave your PC crippled. The code is programmed so badly, you can be losing 1-2% of your CPU time even when the CD isn't in the drive, as the DRM software is searching your machine to check nothing is going on that it should know about.

Read the whole story with pics and proof here.

Good job SysInternals (home of 100s of FREE utilities we have all used)

[Wolfie]

One more reason NOT to buy Sony's crap.

[CTC Command]

what a pile of crap. sony sucks.

[rainbowdemon]

I have a Sony dvd burner. Never had any problems with it, but it's going to be my last Sony purchase.

[Potato]

damnit i just bought some sony headphones.

[method77]

Sony released the following update to take the malware out of your system after they were exposed:

"November 2, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers."

http://cp.sonybmg.com/xcp/english/updates.html

[Wolfie]

That was quick.

[Potato]

How nice of them. Now maybe they should inform the general public because I have this odd feeling that a lot of people affected won't even know it.

[rainbowdemon]

Does anyone believe that bullshit? I don't.

alternatingFU 'em!!

[DudeAsInCool]

After Criticism, Sony Issues Fix for Hidden Rootkits

Sony (NYSE: SNE - news) has admitted that it included a stealth rootkit on some music CDs shipped in 2005 and has issued an update to remove the hidden software one day after it was discovered. The company had drawn criticism from security experts who warned that the technology could serve as a tool for hackers.

The nearly undetectable monitoring utility, part of the company's digital-rights management (DRM) technology, was aimed at preventing consumers from producing illegal copies of CDs. The software installed itself automatically in Windows systems whenever a CD was inserted. Any files contained in the rootkit are invisible and almost impossible to remove.

http://news.yahoo.com/s/nf/39083;_ylt=Anji...HNlYwMlJVRPUCUl

[method77]

A few updates on the story...

EFF wants your help to sue Sony.

Mark's Sysinternals Blog (guy who discovered it). He has a few good things about the "uninstall patch".

Microsoft 'Concerned' by Sony DRM.

Italian Police Asked to Investigate Sony DRM Code.