Lyrics & Knowledge Personal Pages Record Shop Auction Links Radio & Media Kids Membership Help
The Mudcat Cafesj

Post to this Thread - Sort Descending - Printer Friendly - Home


Tech: Sony Audio CDs INFECTED

JohnInKansas 04 Nov 05 - 03:24 PM
treewind 04 Nov 05 - 03:34 PM
GUEST,Jon 04 Nov 05 - 03:56 PM
JohnInKansas 04 Nov 05 - 03:59 PM
michaelr 04 Nov 05 - 04:09 PM
WFDU - Ron Olesko 04 Nov 05 - 04:22 PM
Q (Frank Staplin) 04 Nov 05 - 05:08 PM
JohnInKansas 04 Nov 05 - 05:24 PM
Cluin 04 Nov 05 - 05:28 PM
JohnInKansas 04 Nov 05 - 06:01 PM
Don(Wyziwyg)T 04 Nov 05 - 07:44 PM
treewind 10 Nov 05 - 09:00 AM
artbrooks 10 Nov 05 - 09:17 AM
JohnB 10 Nov 05 - 01:51 PM
JohnInKansas 10 Nov 05 - 02:48 PM
Metchosin 10 Nov 05 - 03:30 PM
Janie 10 Nov 05 - 03:54 PM
OldPossum 10 Nov 05 - 04:54 PM
Metchosin 10 Nov 05 - 04:56 PM
The Fooles Troupe 10 Nov 05 - 05:32 PM
Geoff the Duck 14 Nov 05 - 09:07 AM
GUEST 14 Nov 05 - 09:33 AM
JohnInKansas 17 Nov 05 - 07:08 PM
Metchosin 17 Nov 05 - 07:30 PM
JohnInKansas 17 Nov 05 - 09:32 PM
GUEST,.gargoyle 17 Nov 05 - 10:20 PM
The Fooles Troupe 18 Nov 05 - 05:22 AM
JohnInKansas 18 Nov 05 - 06:09 AM
Metchosin 18 Nov 05 - 11:57 AM
hesperis 18 Nov 05 - 12:50 PM
JohnInKansas 18 Nov 05 - 04:27 PM
Metchosin 18 Nov 05 - 05:10 PM
GUEST 18 Nov 05 - 07:48 PM
mack/misophist 18 Nov 05 - 09:07 PM
GUEST 18 Nov 05 - 11:40 PM
GUEST 18 Nov 05 - 11:46 PM
Peace 18 Nov 05 - 11:47 PM
JohnInKansas 19 Nov 05 - 12:55 AM
GUEST 19 Nov 05 - 01:09 AM
treewind 19 Nov 05 - 09:24 AM
number 6 19 Nov 05 - 03:28 PM
number 6 19 Nov 05 - 03:29 PM
JohnInKansas 19 Nov 05 - 04:05 PM
JohnInKansas 20 Nov 05 - 04:52 AM
JudyB 02 Dec 05 - 03:31 PM
Tootler 02 Dec 05 - 03:57 PM
JohnInKansas 02 Dec 05 - 08:39 PM
JudyB 03 Dec 05 - 09:02 PM
JohnInKansas 09 Dec 05 - 09:16 AM
JohnInKansas 09 Dec 05 - 09:50 AM
Stilly River Sage 09 Dec 05 - 12:26 PM
JohnInKansas 09 Dec 05 - 01:18 PM
JohnInKansas 09 Dec 05 - 01:46 PM
Stilly River Sage 09 Dec 05 - 03:41 PM
JohnInKansas 09 Dec 05 - 05:39 PM
GUEST 03 Jan 06 - 12:57 AM
JohnInKansas 03 Jan 06 - 02:07 PM
The Fooles Troupe 04 Jan 06 - 02:11 AM
Pied Piper 04 Jan 06 - 05:19 AM
GUEST 04 Jan 06 - 07:46 AM
The Fooles Troupe 05 Jan 06 - 12:20 AM
JohnInKansas 17 Feb 06 - 10:04 PM
The Fooles Troupe 23 Feb 06 - 04:20 PM
MMario 23 Feb 06 - 04:25 PM
The Fooles Troupe 23 Feb 06 - 04:55 PM
JohnInKansas 23 Feb 06 - 05:50 PM
JohnInKansas 23 Feb 06 - 05:56 PM
michaelr 23 Feb 06 - 08:36 PM
jeffp 23 Feb 06 - 08:52 PM
JohnInKansas 23 Feb 06 - 09:01 PM
The Fooles Troupe 24 Feb 06 - 02:11 AM
JohnInKansas 24 Feb 06 - 03:20 AM
Share Thread
more
Lyrics & Knowledge Search [Advanced]
DT  Forum Child
Sort (Forum) by:relevance date
DT Lyrics:













Subject: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 04 Nov 05 - 03:24 PM

It has been found that Sony has deliberately rigged a number of audio CDs so that if you play them on your computer a "root kit" and a number of "hidden" files are installed that hide portions of your own registry from you, change significant computer operating characteristics, and cannot be removed by most users. The method that Sony used to hide the registry entries has been shown to be capable of being exploited by others to install malware on your computer, which presumedly would be just as difficult to remove as the Sony program.

The only description thus far of what CDs may be affected is "Sony's latest batch of CDs from Switchfoot, Van Zant and others".


When Vendors Install Malware is an editorial comment by Larry Seltzer at eWeek that gives a general description of what Sony has done, in fairly non-technical terms.

Sony to Help Remove Its DRM Rootkit by Nate Mook, also at eWeek, summarizes a BetaNews report, and probably gives as much info as most will want. It includes a link to the full BetaNews article.

An "update" has been released that doesn't hide all of the crud that Sony installs, but expert opinion is that it does NOT make it removable. Attempting to remove it probably will disable your CD drive. It apparently only "makes visible to you" the vulnerability that can be exploited by other malware, but does nothing to remove it.

In order to get "Sony Help" to remove their crud, you must provide the specific identification for the CD you got it from (will you know which one it was?) AND authorize them to send you release information for the performer(s) on the CD (and presumably anything else they choose to use in the name of advertising).

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: treewind
Date: 04 Nov 05 - 03:34 PM

I can't imagine this massive cock-up by Sony will remain long in the marketplace. It's been discussed all over the net, and nobody has a good word to say about it.

Audio CDs should have the usual "CD Digital Audio" logo on them - copy protected stuff like this is not allowqed to carry that logo because it does not comply with the Red Book standard.

It also raised question of whether they are breaking the laws of many contries in "interfering with the operation of a computer without the owners consent". (this is not a simple software installation, it's patching the OS, like viruses do)

Don't buy Sony media, and make sure Sony know that you're not doing so and telling others not to.

Anahata


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST,Jon
Date: 04 Nov 05 - 03:56 PM

Thanks for pointing this one out John.

It is a disgrace and I believe Anahata is right that this Sony attempt will not last long in the market place.

I do fear however that this is still only the start with DRM.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 04 Nov 05 - 03:59 PM

"Don't buy Sony Media" might suggest to some that it's also blank disks that are affected. (We get sloppy with techy terminology sometimes.) I haven't heard that blank disds are affected, but Sony deserves an across the board boycot for this crap.

It's important to understand that it is recent releases of music CDs "by your favorite performers."

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: michaelr
Date: 04 Nov 05 - 04:09 PM

BASTARDS!


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: WFDU - Ron Olesko
Date: 04 Nov 05 - 04:22 PM

Sony added anti-piracy software which contained software known as a "rootkit". Hackers can use rootkits to take over operating systems. Sony's version did no such thing, but it did hide the anti-piracy software which prevents cloning of their CD's.

Sony's big mistake is that the did not disclose their CD's had this rootkit.

Even though Sony was really stupid, I think the bigger problem still lies in the issue of piracy. People think nothing of making copies of CD's and giving them to friends.   People download songs illegally and the artists do not get paid.    While it may not seem that some of the big name artists are going to miss the $$$, it does trickle down to the smaller name artists who are trying to latch on.

The music industry is a mess.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Q (Frank Staplin)
Date: 04 Nov 05 - 05:08 PM

Thanks for the alert.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 04 Nov 05 - 05:24 PM

Ron -

The Sony rootkit hides files with a particular filename structure. Once the Sony rootkit has hidden them, another malware can use the same filename type to conceal itself, without the need to separately install its own rootkit. This is a TREMENDOUS OPENING for other malware, and the ability to exploit it HAS BEEN SHOWN.

Common criteria for defining malware are:

1. It is installed without the users permission.
2. It is installed without informing the user.
3. It attempts to conceal itself from the user.
4. It is not easily removable.

The Sony "program" fails on all counts.

For the Sony program, one may add "It damages the OS and/or other programs if you attempt to remove it."

This crap meets ALL common and widely accepted criteria for MALWARE.

In addition, using a root kit is a change to the Operating System at a pretty fundamental level, and goes well beyond just "installing a program."

In addition, it causes demonstrable effects on the entire OS, and can disable other functions in other programs. (Specifically it disables existing device drivers and substitutes its own hidden ones, without necessarily making the new drivers accessible by all other programs.)

In addition, as noted above, it defeats security processes critical to maintaining protection against OTHER MALWARE.

I understand the needs and the difficulties associated with secure DRM, and I fully support the right of artists to be paid; but this is MALICIOUSLY APPLIED STUPIDITY.

It has been asserted that it violates British law. It remains uncertain whether the US, except in a few local jurisdictions, has any laws specifically prohibiting it; but that's just because the "media" here have far too rich a lobby and we have few literate legislators not being bought off by them. (Sarcasm intended. It's really just because we're stupid.)

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Cluin
Date: 04 Nov 05 - 05:28 PM

They probably figure everybody out there with a computer who likes music and plays CDs on it is into pracy so they weren't too troubled about scruples.

It was also a dumb move. It was sure to be discovered and make people wonder why they wanted to f___ over the people who actually bought their CDs.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 04 Nov 05 - 06:01 PM

A less damaging "innovation" was noted several months ago when one of the distributors used a non-standard format on some CDs and they wouldn't play on many common kinds of players. I think that one got disguised as "player incompatibilities" and drifted under the general fog. At least that one didn't break your boom-box, so only the few performers who lost sales when the word got out were harmed.

It also was intended as an "anti-copy" device; and I guess since you can't copy it if you can't play it, it was "successful(?)."

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Don(Wyziwyg)T
Date: 04 Nov 05 - 07:44 PM

Another example of those "Awfully nice Sony people" screwing over the people who keep them in business.

Since the "intellectual rights" legislation prevents them from from stealing rights from music composers, they now attempt the same sort of crookery against CD buyers.

I hope the result will be a huge drop in sales. I certainly will not be buying anything with a Sony label ever again, including blank CD-Rs, and electrical goods, such as TVs etc.

Don T


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: treewind
Date: 10 Nov 05 - 09:00 AM

California to Sue Sony (Washington Post)


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: artbrooks
Date: 10 Nov 05 - 09:17 AM

The link that treewind posted contains another link to a (complete?) list of the infected CDs.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnB
Date: 10 Nov 05 - 01:51 PM

Hell they even did it to a Pete Seeger CD according to that list.
Wonder what old Pete thinks about that.
JohnB.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 10 Nov 05 - 02:48 PM

I think it's rather "cute" that one blog commentor notes that changing the name of your burner program to hide it - using the rootkit that SONY installs, makes the rootkit think your burner is part of the program and completely defeats the copy protection Sony intended.

So much for saying that others can't use it for malicious purposes.

Another blog poster notes that Sony's "fix" for their trash can also kill your machine - if the original root kit doesn't.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Metchosin
Date: 10 Nov 05 - 03:30 PM

For those whose computer is a little old and tired and can't get into The Washington Post linked list, this site has it.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Janie
Date: 10 Nov 05 - 03:54 PM

Fox news reporting first virus that exploits Sony's rootkit--hitting British users. http://www.foxnews.com/story/0,2933,175188,00.html

Janie


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: OldPossum
Date: 10 Nov 05 - 04:54 PM

Thanks for the warning. By the way, this is not the first time that Sony is up to no good. Back in 2002, their attempt at copy protection could crash your PC, and do worse damage to your Mac. For some historical perspective, here are some links to reports from back then:

* Celine Dion disc could crash European PCs
* Marker pens, sticky tape crack music CD protection
* Dion's CD can crash PCs


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Metchosin
Date: 10 Nov 05 - 04:56 PM

Interesting that the "rootkit" will not install itself on a Mac.....yet. My wee beastie may be a bit old and tired, but I knew there had to be other reasons for my loyalty.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 10 Nov 05 - 05:32 PM

Good on you John - useful to know as ever!

Must meet up for a drink and a talk one of these days...


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Geoff the Duck
Date: 14 Nov 05 - 09:07 AM

I just happned across this link - mentioned on a computer site.
http://news.bbc.co.uk/2/hi/technology/4434852.stm.
It updates the story slightly.
Quack
GtD.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 14 Nov 05 - 09:33 AM

QUOTE:

"AnyDVD tackles Sony DRM Rootkit Virus!
If AnyDVD is installed and active on your PC, the new so-called "Sony DRM Rootkit Virus" has no access to your system and the affected audio CD appears unprotected regardless! Another good reason to get AnyDVD! "


http://www.slysoft.com/en/


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 17 Nov 05 - 07:08 PM

Security Vendors Clueless Over Rootkit Invasion, By Ryan Naraine, eWeek, November 16, 2005 gives a brief and fairly non-tech description of what was required to find the Sony rootkit and identify Sony as the creator.

A disturbing finding is that the Sony rootkit had been found on numerous machines for several months prior to recent announcements, but AS people were unable to figure out where it was coming from. This shows how "deeply" it was hidden, and perhaps indicates that Sony has used it prior to the CD releases to which they have admitted.

"Dan Kaminsky, a security engineer for DoxPara Research, has already seen evidence of the Sony DRM rootkit installed in places it should not be.

"There are networks that Sony got into that nobody should get into. I can't say where. But there's evidence that it [the Sony rootkit] got into some places where it doesn't belong. Now you have a real question of the collateral damage it can cause," Kaminsky said in an interview just moments after releasing statistics to show that at least 568,200 nameservers were collecting DNS queries related to the calling-home feature on the Sony."

Either Sony is engaged in extensive SPYING to which they have not admitted, or others have already made extensive use to the "rootkit" that they foisted on people.

Sony says "We just bought it from a supplier. We didn't know what it did."

Why not, and where's this bridge located?

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Metchosin
Date: 17 Nov 05 - 07:30 PM

Does this mean, with a Sony CD, it might be a good idea to record it to analogue tape and then burn it back on a CD, if you're going to play it on your computer?


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 17 Nov 05 - 09:32 PM

Sony claims that their "new" DRM system has only been used on about 20 titles, but appearance of the root kit used by their system several months before those titles were released suggests additional use. In the report by the fellow who first reported the Sony connection (linked in the first article above) he does note that the people who sold this system to Sony also had several other record distributors as customers, so total appearance of this (and/or similarly invasive DRM methods) is a bit uncertain. Sony may just be the only one who's been caught - so far.

My personal inclination is to suggest you just "don't have a Sony CD," and write to the artists you don't have to tell them why.

The CDs that Sony admits using this system on are "Clearly Marked" (if you really look for it) to indicate that a "Digital Rights Protectin System" is on the CD, so theoretically any CD not so marked is still safe to play. Trust them if you have a lot of confidence.

One would assume that an audio recording from one of the "protected" CDs, played in a non-computer probably would be safe, but I haven't seen comment on that.

A Copy CD made in a non-computerized player/burner may or may not copy the shit with the music, although one would suspect it would. The bits on the "protected" CDs supposedly are encoded so that only the "player" that comes on the CD and installs itself on your computer can play them on a computer.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST,.gargoyle
Date: 17 Nov 05 - 10:20 PM

YIPES!!!!!

Truly (unfortunately) believed this was B.S.

A major corporation with such problems "should not have much time" remaining on their play-list.

Heads-up and Buyer-Beware!!!

SONY - reports a current negative earnings growth of almost 60% perhaps the corporation is resorting to extra-ordinary efforts to eeeekkkkk out a "ray of sunshine." From a yearly high of 42 and current trade of 34 heading towards 32 or below...they are in trouble. Information such as you just posted, makes them a pyriah to the consumer.

Desperate times call for desperate measures (and then there is Mr. Michael Jackson weighing heavy on their woes.)

From garage-band mixers, to "FREE" for the asking....the small performers - through the internet are finally ripping (pun OK) control of the distribution of "entertainment media" out of the corporate hands that have controlled it for 70 plus years....I can download and play emerging bands (for free) that many times offer better mixes, and more originality than the "advertised products" in Rolling Stone.

I am glad to see the evolution of the revolution gaining momentum.

Sincerely,
Gargoyle

Won't find me purchasing SONY products...Unnnnhhh AHHHH....No Way!!!! No How!!!!

I smell "class action" brewing in the stew from this mix.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 18 Nov 05 - 05:22 AM

I have seen claims tha this willinfect Win98, but also claims that the fixes mentioned only work on XP...

Anyone else confused?

I haven't played any music CDs on my system since reinstall, but have friends who still run 98.

Robin


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 18 Nov 05 - 06:09 AM

Robin -

I haven't seen anything that indicates that any different Windows versions are unaffected.

One of the pros who's commented has indicated that the Sony uninstaller puts a different piece of shitware on your machine before the uninstall runs, and the "replacement" continues to attempt concealment and may in fact make the security and stability of your machine worse than with the original Sony rootkit.

Its also been reported that to get the Sony "uninstaller" you have to agree to their EULA that includes authorization for them to send you information about all future releases of new CDs.

The Sony uninstall runs a "getver" to see what version is on the machine before it installs the replacement crud, so it must be assumed that it's set up to adapt to whatever version you have.

The rootkit itself primarily just hides all the crap that Sony installs. The other crud replaces or modifies your CD/DVD drivers, and presumedly could load new drivers to work with any Windows version; so it must be assumed that Sony intended this to go on all Windows Versions that attempt to play the disks.

Some comment says that it goes on all Mac OS as well, and potentially causes greater OS instability there. There have been comments implying that it affects Linux also, although I haven't seen anyone specifically say so.

As released on the affected CDs, the Sony intention was if they couldn't fuck up your system, the disk simply couldn't be played on it since the disks are encoded to force you to use their playback program - which installs from the CD.

One AV maker has announced that their AntiVirus will (soon?) incorporate detection and removal for it, but I haven't seen whether it's an all-OS program. Microsoft says that removal will be incorporated "about Dec 1" in their AntiSpyware (still beta) program, but of course that's only available for WinXP.

Microsoft also says that detection and removal will be incorporated on their web AV/AS scanner, but I don't know whether that service is limited to current versions. For older, and unsupported, OS versions, it may come down to one of the few cases where you actually have to reformat and reinstall - but I'd hold off until there's more definite advice.

Several users have stated that they attempted to remove it manually, and lost all CD/DVD drive function. At least one fellow reported he bought a new drive because it looked like the drive itself had failed. We doubt that Sony will reimburse him.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Metchosin
Date: 18 Nov 05 - 11:57 AM

John do you have any suggestions where else to look to find more info regarding playing a Sony CD on a CD player and recording that to analogue tape, then taking that tape and burning it to a new CD? I still can't figure out any way that a tape recording of a CD will record or transfer anything but sound, but perhaps I'm missing something here as my knowledge of such stuff is limited.

There are not too many Sony recording artists that I'm interested in, but for the very few that I might want, I wouldn't hesitate to take a few extra steps if it is effective.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: hesperis
Date: 18 Nov 05 - 12:50 PM

The analog signal would only carry sound, Metchosin, so that would be a way to get around the copy protection for your personal use.

I really don't know why these companies bother. There's always a way to get around the protection, and it is supposed to be within fair use for users to make copies for personal use!!!

Trying to "protect their rights" in such stupid ways merely makes these companies look like greedy uncaring bastards who deserve to be ripped off, since they're trampling over the rights of others. They can gain no sympathy after actions such as these which affect innocent users as well as pirate users. Every human being on the planet is not an enemy of copyrights.

The only thing a company can do is to rise above the piracy, and educate customers about the effects of piracy on emerging artists. Madonna might be rich no matter what happens, but unless the record companies make money people won't see investment in new talent, and the people employed by the companies could lose their jobs. Only education and openness will ever be a deterrent to piracy.

I got a Heather Dale CD recently and I'm not putting it in my shared downloads folder - why? Because she's independent and I know it would actually cause her harm. I'll put any free downloads from independent artists in there to encourage other people to listen to them if they stumble across my collection, but not whole CDs.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 18 Nov 05 - 04:27 PM

Metchosin -

The "industry" is still busy trying to figure out exactly what Sony's crud does to computers, but there have been no suggestions that it can harm a standalone CD player, and the only thing the CD player puts on the speaker lines should be the analog audio signal.

Playing a CD and recording the audio is a standard method of "beating" any number of copy protection schemes, and I've never heard of any passing of infections/malware that way. There's little reason to expect that the Sony thing has changed that; but until someone knows, the only correct answer is "we don't know."

Sony's worm was found a few months ago, but was only connected to Sony within the past couple of weeks. Since the company that produced this crap has numerous other customers, there may actually be other distributors using it - or something as bad. There should be lots more info available in another few weeks; but at present the concern - and the published info - is all with what the CDs do when you play them in your computer drives. People will get around to the rest of it soon, and will publish what they find.

If you want absolute assurance, you'll have to ask "God" for now. Get a direct line, because Sony has their own prophets who will claim they've talked to him ...

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Metchosin
Date: 18 Nov 05 - 05:10 PM

Thanks hesperis and thank you John. LOL That is sort of what I would have expected re God and the recording industry giants.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 18 Nov 05 - 07:48 PM

Amazon has pulled the infected albums. They are labeled as "[SONY XCP CONTENT/COPY-PROTECTED CD] [ENHANCED]and are available only from third party sellers.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: mack/misophist
Date: 18 Nov 05 - 09:07 PM

Not only do the damn things contain a root kit (which is now being exploited by hackers) but they stole some of the code from DVD John. The guy who first discovered the cd's did some more tests and estimated 500,000 compromised machines, at a minimum.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 18 Nov 05 - 11:40 PM

so should recent sony DVD's be regarded with similar suspicion..


or are they only going as far as using updated protection like

macrovision rip guard ?


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 18 Nov 05 - 11:46 PM

recent star wars 'sith' rental dvd seems to have its own player installed..

it ripped ok with DVDdecr*pter

[at £4 rental for only 2 nights to watch over 6 hours of material..
DVD hire shops should be forced by law to include freeware ripping software with every rental !!!]


but results are quite 'jerky' on playback..



could this be a result any 'protection' ?


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Peace
Date: 18 Nov 05 - 11:47 PM

Y'all might want to give this a read. . . . and this.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 19 Nov 05 - 12:55 AM

The 500,000 compromised machines may be the statistical estimate from Kaminsky mentioned in the article I linked at 17 Nov 05 - 07:08 PM. He's not the one getting the credit for the first documented "discovery," but he's an impressive name in the business, and he's done a lot to fill in just how bad this thing is. Kaminsky's main contribution thus far has been in providing the first credible estimate of how far the thing has been spread - and it's MUCH MORE WIDELY DISTRIBUTED than can be accounted for by Sony's admissions to date of when and where they've distributed it.

Mark Russinovich is the guy getting the credit for the first trace of this crud to Sony. Others had found it, but had not been able to figure out where it came from. The first link above at 17 Nov 05 - 07:08 PM (Article by Ryan Naraine) has a link:

"In fact, as Russinovich himself explained in a fascinating blow-by-blow account of his findings, the detection of the Sony rootkit was not a straightforward task..."

The step-by-step procedure at this link gives Russinovich's description of just how tough it was to dig out who was responsible for all this.

I don't think we know yet how "guilty" Sony is, but my guess is they'll turn up more so than less. The vendor, "First 4 Internet," who supplied this garbage to Sony, reportedly has several other customers, and no one has reported whether they've sold the same, or similar or worse, stuff to others. I suspect First 4 Internet people are not answering the phone much.

At the Naraine article, you'll find a sidebar link to a commentary by Larry Loeb who's one of those reporting that the Sony "uninstall" may be worse than the original DRM program, so far as your own security and machine stability are concerned. A link in Loeb's commentary takes you to Sony's Uninstaller Is Worse than Its DRM, By Larry Loeb, IT Hub - Security, November 15, 2005, where you learn that the original web based Sony "uninstaller" opens a new "hole" that is left on the machine after the uninstall completes. External acces to the new hole by potentially malicious exploiters, and the ability to take over the machine and/or install any desired malware on it has been demonstrated. Sony has replaced the web based uninstaller with a downloadable .exe uninstaller that hasn't been fully analyzed yet. Who's gonna trust it?

For those who don't have enough to worry about, Russinovich reports that the "player" embedded in the Sony crapware is by Macromedia. No report yet on whether it's a standard or modified/bugged version. Macromedia has reported an extremely large and critical security hole in its Macromedia Flash utility, and are urging everyone to immediately upgrade to their newest version. I haven't, because their EULA (which you have to follow a link from their download site to find) incorporates by default 31 other separate "subprogram" EULAs, any one of which could "give them permission" to do virtually anything they want to to your computer. You have to follow separate links to each EULA to read them. This is a kind of "concealed permission" commonly used by malware distributors, and even when it works Macromedia is already "almost a virus." I WILL NOT INSTALL their junk before I've read all 31 of the incorporated EULAs, so in the meantime - untill I've got a week or so free - I've just disabled Flash. Unless you have a critical need for Flash, I'd suggest you do the same.

One wonders(?) if Macromedia participated in - or at least gave approval for - the development of the Sony crapware.(??????)

I think we need Sonygate hearings in the Senate - at the very least - so that all this can be properly whitewashed and we can forget about it. It may all come down to the fact that Sony has more lawyers - and certainly better paid lobbyists - than even Microsoft. Expect a lawsuit to block Microsoft's plan to remove the Sony DRM with their Anti-spyware and Anti-malware programs. Sooner or later.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 19 Nov 05 - 01:09 AM

fuck 'em !!!

lets all just buy acoustic guitars and only ever listen
to the music we make ourselves..


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: treewind
Date: 19 Nov 05 - 09:24 AM

There's another, ironic, twist to this story - Sony have infringed other software authors copyright in the development of their copy protection software! - and the code* they stole was written by "DVD Jon" Johansen, famous in turn for writing copy-protection-busting software himself.

More twists that a plateful of spaghetti...

Anahata

* BTW, the code in question was LGPL licensed, a free software license - this story illustrates that the GPL and LGPL are still copyright statements and do impose some obligations on anyone who copies it.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: number 6
Date: 19 Nov 05 - 03:28 PM


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: number 6
Date: 19 Nov 05 - 03:29 PM

Oooops here it is ..

interesting bit on the CBC


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 19 Nov 05 - 04:05 PM

number 6 -

The "in depth" link at your "interesting bit..." link provides an excellent summary of what's happened, although it omits some of the nastier "side effects."

The "Player" used in the Sony DRM installation has been identified by at least one reliable researcher as being by Macromedia. The ordinary assumption would be that First4Internet added all the "bad code" to an innocent suppliers product; but Macromedia's own predatory marketing and distribution of their other products suggests that perhaps they might be where the GPL and LGPL copyright infringements may have been first incorporated. Information on exactly what code was illegaly used are sketchy, but the bits appear to be something that might be useful for Macromedia's own distribution methods. Just a suspicion, and probably biased by my own "pissed at Macromedia" attitude. Hiding fragments of one's EULA so that it requires one to follow 32 separate links to find out what's being agreed to, as Macromedia has done on their latest Flash release, might not meet someone's description of "concealment," but it's a pretty #!@%! good "disguise."

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 20 Nov 05 - 04:52 AM

Sony's DRM Rootkit Comes in Mac Flavor, Too, By Larry Loeb, November 11, 2005 will perhaps be of interest to Mac users.

Previous reports of Sony infection by Mac users were vague, and although the above article is a bit old, relative to what's been going on in the Windows world, it does give some clue...

It appears that the infected CDs carried a separate, but similar, DRM program for Macs. The disks contain a "Start.app" file that opens a EULA, stating that software will be installed; but without any description of what it is. "It actually installs two kernel extensions, PhoenixNub1.kext and PhoenixNub12.kext, in the OS X system files."

The Mac version comes from a different supplier, SunnComm, and no removal program or instructions have been provided by Sony. Apparently the installed files remain on the machine after you remove the CD. (To date, Sony has declined to discuss the Mac installation, so far as has been reported.)

There is discussion at the above page, in which several Mac users protest "but ours is different." While adverse effects on Mac operation are not well understood, the fact is that the Sony CDs install software on your machine without telling you what it's for or what it will do. Other reports, equally preliminary, have indicated that the installation can affect operation of Mac computers for other uses.

The software installed is described as limiting the number of copies you can make from the CD, and as "capable of making 'limited time' and/or 'limited number of plays' copies" that "expire" and become unplayable after a preset time/no of plays. But they don't tell you that.

The article linked above cites and provides a link to "additional info" but I couldn't find the information cited at the link, MacInTouch. I guess I just don't follow "MacSpeak" well enough. Mac users may be able to find the info (and/or interested enough to try), although it's also apparently a few days old.

Note that the information here, and in the article linked, is based on limited "user reports" and doesn't necessary come from known tech labs of the kind who've been reporting on the Windows version.

No indication whether this affects only OS X, or if that's just the version in use by the users who contributed to the report.

There have been reports of "something" installed on Linux machines, and of effects on machine operation, but they remain vague and unverified.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JudyB
Date: 02 Dec 05 - 03:31 PM

John -

Do you know if the software that comes with mini-disc recorders has been checked to see if it also installs similar stuff? Seems a bit coincidental to me that Sony finally lifted the restriction on copying directly from an MD player to a computer about the time the rootkit surfaced. But I don't know much about MD recorders - or rootkits for that matter.

Thanks,
JudyB


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Tootler
Date: 02 Dec 05 - 03:57 PM

The software that came with my MD recorder, bought this summer, allows one transfer from MD to PC and then only in Sony's proprietry atrac format. If you want an MP3 you have to record from the MD to the PC. It annoys me that Sony have the gall to restrict my copying of my recordings.

The whole tone of the instructions and restrictions on the use of the software smacks of paranoia about copying and assumes that any copying from the MD to the PC must be illegitemate.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 02 Dec 05 - 08:39 PM

JudyB -

I don't do "portable music" so don't have direct knowledge of the minidisc stuff. I haven't seen complaints in the general news about infection of computers from them.

There have been complaints about "policies" imposed by the music distributors. Several of them have tried to maintain that downloaded music is "rented, not bought" and proposals have been made that systems would permit a specific and limited number of plays, and/or a specific limited time during which it could be played on the machine it downloaded to. The "license" would then expire and the music quits.

Any DRM system that requires you to use a specific "proprietary player" may be assumed to be doing things to your machinery, but it's only a suspicion until someone figures out - and publishes - the details.

Someone once said "people expect others to be about as honest as they are themselves," or something to that effect...

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JudyB
Date: 03 Dec 05 - 09:02 PM

Thanks, John -

I hadn't seen anything either, but I was curious and I have a suspicion you see more tech news on a regular basis than I do.

   Judy


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 09 Dec 05 - 09:16 AM

SONY ISN'T THE ONLY ONE.

Where are Rootkits Coming From?, By Ryan Naraine, eWeek, December 7, 2005.

"The sharp rise in rootkit detections on Windows machines is a direct result of adware/spyware vendors using sophisticated techniques to hide processes and prevent uninstallation, according to anti-virus vendor F-Secure Corp.

The Finnish company, which ships an anti-rootkit scanner in its security suite, has identified ContextPlus, Inc., makers of the Apropos and PeopleOnPage adware programs, as the company responsible for a large number of stealth rootkit infections.

"Howes said F-Secure's identification of ContextPlus and Apropos was rather significant. "Rootkits are commonly associated with out-and-out-malware created by black hats hacking servers and planting backdoors. Yet F-Secure is now saying the most common deployer of rootkits is a commercial adware firm.""

The "commercial use" is just spyware. It doesn't (apparently) install malicious(a matter of opinion?) stuff, or try to take over your machine; but the rootkits can be - and are being - stripped out and used for malicious purposes by others.

In a related story, linked from the above, Microsoft: Stealth Rootkits Are Bombarding XP SP2 Boxes, By Ryan Naraine, eWeek, December 6, 2005, reports that 50 percent of "basic" WinXP installations are found infected with just one of the several circulating root kits by the Microsoft Malware Removal tool, and up to 20 percent of WinXP installations with SP1 and SP2 installations are infected.

Micorsoft currently downloads to approximately 200 million users via "auto update" and the Malware Removal tool should be included and run monthly for anyone signed up for autoupdate:

"The worm zapper, which is updated and released once a month, has counted more than 1.7 billion executions since it first shipped in January." (That's 1,700,000,000 separate spyware/malware installations killed in the first year.)

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 09 Dec 05 - 09:50 AM

And YET ANOTHER Sony rootkit has been found, installed when you play a CD from a different list:

New Sony CD "Rootkit" Found; Patch Issued, By Mark Hachman, ExtremeDRM, December 7, 2005.

Those who want details should download the .pdf linked at the above site.

The list of CDs affected by this new crudware (according to Sony, whom we of course trust implicitly) is at CDs Containing SunnComm MediaMax Version 5 Content Protection Software. The list includes about 2 dozen titles released in the US, and a separate similar size list for Canadian releases.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Stilly River Sage
Date: 09 Dec 05 - 12:26 PM

Are Sony movies also coming along with this malware payload? What about people who watch movies on their computers? Another thread contains information about copying DVDs. Though Ron O. popped up with his standard "piracy" accusation, the families who take DVDs in the car for the kids to watch who don't want to destroy their original may have the same requirements for personal copies as those who copy their CDs to keep them safe.

The lists of those Sony CDs keep shifting away from the links above, so I'm going to post the list here. It's not in a table so it is long, but at least it will be here to refer to. It comes (this time) from this site.

ARTIST
ALBUM
ITEM NUMBER(S)
UPC(S)

1.
A Static Lullaby
Faso Latido
CK92772
827969277225

2.
Acceptance
Phantoms
CK89016
696998901629

3.
Amerie
Touch
CK90763
827969076323

4.
Art Blakey
Drum Suit
CK93637
827969363720

5.
The Bad Plus
Suspicious Activity?
CK94740
827969474020

6.
Bette Midler
Sings the Peggy Lee Songbook
CK95107             CK74815
827969510728    828767481524

7.
Billie Holiday
The Great American Songbook
CK94294
827969429426

8.
Bob Brookmeyer
Bob Brookmeyer & Friends
CK94292
827969429228

9.
Buddy Jewell
Times Like These
CK92873
827969287323

10.
Burt Bacharach
At This Time
CK97734
827969773420

11.
Celine Dion
On Ne Change Pas
E2K97736
827969773628

12.
Chayanne
Cautivo
LAK96819      LAK96818         LAK95886
037629681921   037629681822   037629588626

13.
Chris Botti
To Love Again
CK94823
827969482322

14.
The Coral
The Invisible Invasion
CK94747
827969474723

15.
Cyndi Lauper
The Body Acoustic
EK94569
827969456927

16.
The Dead 60's
The Dead 60's
EK94453
827969445327

17.
Deniece Williams
This Is Niecy
CK93814
827969381427

18.
Dextor Gordon
Manhattan Symphonie
CK93581
827969358122

19.
Dion
The Essential Dion
CK92670
827969267028

20.
Earl Scruggs
I Saw The Light With Some Help From My Friends
CK92793
827969279328

21.
Elkland
Golden
CK92036
827969203620

22.
Emma Roberts
Unfabulous And More: Emma Roberts
CK93950       CK97684
827969395028         827969768426

23.
Flatt & Scruggs
Foggy Mountain Jamboree
CK92801
827969280126

24.
Frank Sinatra
The Great American Songbook
CK94291
827969429129

25.
G3
Live In Tokyo
E2K97685
827969768525

26.
George Jones
My Very Special Guests
E2K92562
827969256220

27.
Gerry Mulligan
Jeru
CK65498
074646549827

28.
Horace Silver
Silver's Blue
CK93856
827969385623

29.
Jane Monheit
The Season
EK97721
827969772126

30.
Jon Randall
Walking Among The Living
EK92083
827969208328

31.
Life Of Agony
Broken Valley
EK93515
827969351529

32.
Louis Armstrong
The Great American Songbook
CK94295
827969429525

33.
Mary Mary
Mary Mary
CK94812            CK92948
000768353721             827969294826

34.
Montgomery Gentry
Something To Be Proud Of: The Best of 1999-2005
CK75324               CK94982
828767532424       827969498224

35.
Natasha Bedingfield
Unwritten
EK93988
827969398821

36.
Neil Diamond
12 Songs
CK94776            CK97811
827969477625       827969781128

37.
Nivea
Complicated
82876671562
828766715620

38.
Our Lady Peace
Healthy In Paranoid Times
CK94777
827969477724

39.
Patty Loveless
Dreamin' My Dreams
EK94481
827969448120

40.
Pete Seeger
The Essential Pete Seeger
CK92835
827969283523

41.
Ray Charles
Friendship
CK94564
827969456422

42.
Rosanne Cash
Interiors   
CK93655
827969365526

43.
Rosanne Cash
King's Record Shop
CK86994
696998699427

44.
Rosanne Cash
Seven Year Ache
CK86997
696998699724

45.
Shel Silverstein
The Best Of Shel Silverstein
CK94722
827969472224

46.
Shelly Fairchild
Ride
CK90355
827969035528

47.
Susie Suh
Susie Suh
EK92443
827969244326

48.
Switchfoot
Nothing Is Sound
CK96534          CK96437             CK94581
827969653425          827969643723          827969458129

49.
Teena Marie
Robbery
EK93817
827969381724

50.
Trey Anastasio
Shine
CK96428
827969642825

51.
Van Zant
Get Right With The Man
CK93500
827969350027

52.
Vivian Green
Vivian
CK90761
827969076125


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 09 Dec 05 - 01:18 PM

Stilly -

This newest Sony rootkit (again according to the honest and reliable Sony) is not used on DVDs. It's closer to what was the "Mac version" on the first Sony Audio CDs that were found to be damaging people's setups. The articles I've seen don't give any details on Sony's "patch" to fix this, but I'm dubious, since it appears that if you insert the CD after applying the patch, it will reinstall the rootkit.

DVDs generally have their own DRM "features," and there appear to be quite a few different systems. For the most part, DVDs attempt to block you from making any copies so the blocking function can be a feature of the DVD. The Sony Audio CD thing attempted to allow a limited number of copies, and since you can't write a record of how many copies have been made back onto the CD, a permanent record of copies made has to be on your machine. It's the attempt to modify your machine to make it keep track of what you do (with specific individual CDs) that seems to be causing all the problems.

And the post preceding the "new Sony rootkit" points out that there are apparently a number of "Adware" vendors selling potentially more destructive "rootkit equipped" tracking, and possibly DRM, programs to anyone with money.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 09 Dec 05 - 01:46 PM

Addend:
The list posted by Stilly appears to be the titles affected by the first DRM rootkit discussed when the thread started. The NEW ROOTKIT affects a different list of CDs, at the Sony website linked above and repeated here:
CDs Containing SunnComm MediaMax Version 5 Content Protection Software.

or:
No.   ARTIST   TITLE   SELECTION #
United States
1   Alicia Keys   Unplugged   82876674242   82876731662
2   Amici Forever   Defined   82876688832
3   Babyface   Grown & Sexy   82876705682
4   Black Rebel Motorcycle Club   Howl   8287671601
5   Britney Spears   Hitme - Remix   82876740622
6   Cassidy   I'm A Hustla   82876687072   82876680732
7   Chris Brown   Chris Brown   82876733222
8   Cook, Dixon & Young   Volume One   82876673342
9   David Gray   Life In Slow Motion   82876710682
10   Dido   Dido Live   82876658099
11   Faithless   Forever Faithless/ENH   82876710142
12   Imogen Heap   Speak For Yourself   82876725322
13   Judd & Maggie   Subjects   82876692492
14   Leo Kottke/Mike Gordon   Sixty Six Steps   82876689092
15   Maroon 5   Live   82876709742   82876699522
16   My Morning Jacket   Z   82876710672
17   Raheem Devaughn   The Love Experience   82876537232
18   Santana   All That I Am   82876597732
19   Sarah McLachlan   Bloom (Remix Album)   82876697982
20   Stellastarr*   Harmonies for the Haunted   82876688812
21   Syleena Johnson   Chapter 3: The Flesh   82876610932
22   T-Pain   Rappa Ternt Sanga   82876734472   82876732002
23   Various   So Amazing: An All Star Tribute To Luther Vandross   82876624722
24   Various   Songs Brown Hotel   82876714112
25   Wakefield   Which Side Are You On?   82876685072   82876681352
26   Charlie Wilson   Charlie, Last Name Wilson   82876694292
27   YoungBloodZ   Everybody Know Me   82876733402   82876731752
CANADA
1   Alicia Keys   Unplugged   82876674242   82876731662
2   Amici Forever   Defined   82876688832
3   Babyface   Grown & Sexy   82876705682
4   Britney Spears   Hitme - Remix   82876740622
5   Cassidy   I'm A Hustla   82876680732
6   Charlie Wilson   Charlie, Last Name Wilson   82876694292
7   Chris Brown   Chris Brown   82876733222
8   David Gray   Life In Slow Motion   82876710682
9   Imogen Heap   Speak For Yourself   82876725322
10   Judd & Maggie   Subjects   82876692492
11   Leo Kottke/Mike Gordon   Sixty Six Steps   82876689092
12   Maroon 5   Live Friday the 13th   82876709742
13   Melissa O'Neil   Melissa O'Neil   82876751572
14   My Morning Jacket   Z   82876710672
15   Our Lady Peace   Healthy In Paranoid Times   CK94777
16   Santana   All That I Am   82876597732
17   Say Anything   …Is A Real Boy   82876716682
18   Stellastarr*   Harmonies for the Haunted   82876688812
19   Syleena Johnson   Chapter 3: The Flesh   82876610932
20   The Trews   Den of Thieves   82876711162
21   T-Pain   Rappa Ternt Sanga   82876732002
22   Various   Canadian Idol High Notes   82876711202
23   Various   Tribute To Luther   82876624722


The above has three consecutive spaces inserted in place of each tab. Posted as <pre> - </pre> text the multiple spaces should be carried across. You should be able to copy, paste and do a global replace "three consecutive spaces" by tab (^t in Word) to get it back into neat columns if you like.

Note that Sony claimed that the first root kit was released only in the US, then later admitted some in Canada, but more functioning copies of the rootkit itself were found in China than anywhere else. But you can trust them.

Expect more and worse DRM systems, and more lists - soon.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Stilly River Sage
Date: 09 Dec 05 - 03:41 PM

So they haven't stopped putting these files on the CDs after all of this bad publicity? Geez.

I could have reformatted the list, but didn't take the time. I'll look into that tag, though.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 09 Dec 05 - 05:39 PM

W.e.e.e.l.l

Sony claims they've stopped putting the first one that was found on CDs, and have sort of shifty-footed their way around on whether they're recalling those CDs. Quite a few retailers have recalled them and given refunds, and it looks as if Sony will reimburse them.

They've apparently tried to come up with something "better" to do the same thing, but have stayed with incompetents for the programming, so the "new and better" is almost as bad a security risk as the old one, although it's a little less likely to directly disable your entire computer.

Now that the second one has been discovered, they've apparently learned to say "gosh gee we're really sorry" but haven't quite learned to say "we f...d up again."

Stand by for their next attempt...

In the meantime, they've provided a nicely packaged root kit that has been picked up by the subteen wannabees in a form that any juvenile delinquent with a cookbook can turn loose on all of us, for any malicious purpose he/she thinks might be "fun." - Or maybe they just brought it to our attention that the "crackers" are set on doing that. There's at least one similar rootkit kernal that's freeware.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 03 Jan 06 - 12:57 AM

Information gleaned from this article from PC World:
Copy Controls: How Far Will They Go?
http://www.pcworld.com/news/article/0,aid,124062,00.asp#

To find out if Sony's invasive DRM software is in your PC, Mark Russinovich advises users to choose Run from the Start menu, then type the following into the box that appears:

cmd /k sc query $sys$aries (copy and paste)

If the response is 'STATE: 4 RUNNING', you have the software. If you see, instead, 'The specified service does not exist as an installed service,' then you're clean. (Note that only Windows systems are vulnerable.)

I got the specified service does not exist message, but then that is what I expected.

I am still using Sony DVD-R blank media. Unfortunately, that is the only brand I have found that my Toshiba RD-XS32 will use with any reliability.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 03 Jan 06 - 02:07 PM

GUEST -

(Note that only Windows systems are vulnerable.)

This is NOT strictly true. The original Sony DRM installed additional files on Macs, and there have been reports that attempted removal of their "program" may cause damage to Mac operating systems. At least one report that I've seen claims that the first Sony DRM installed unwanted and hidden files on a Linux system that affected OS functions.

I'm not sure, but I believe that the Run command you provided only checks for the ORIGINAL DRM program installed by the first set of CDs that Sony released.

Their "improved version" that they released on a later batch operates differently. The second version is closer to what the first version did to Macs - creating new user identities with privileges that can cause security breaches in the OS - that can be used by anyone who wants to use them with malicious intent.

I've seen no comment on what the second version may do to systems other than Windows, but you cannot just assume that those recordings don't attempt to install something you don't want on other OS machines. I've left it up to those using non-Windows systems to do their own research - but ignoring it isn't research.

You should be safe in using Sony blank CD disks, since this malware has been found only on pre-recorded (commercially released) music CDs by the performers listed in the above posts, or at links that have been given above in this thread.

Microsoft has declared that the original Sony DRM is spyware according to the definitions that they use, and the Microsoft "Malware Remover" will take it out. This is a "beta" program that I think you have to sign up for, and so far as I know is only available for WinXP SP2 users who are also signed up for Automatic Updates, but those not in that category can check it out at the Microsoft security pages.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 04 Jan 06 - 02:11 AM

I acquired a few days ago, "The Best of Children's Songs' - EMI Gold 7243 5 63637 2 4 (c) 2005

The title is somewhat of a misnomer, as there are 30 songs by Bernard Cribbins, Rolf Harris, Benny Hill - many are old folk songs discussed here (such as Laughing Policeman), or songs previously popular among adults.

When I got home I discovered in vwey tiny print (in 5 languages including French, German & English)

QUOTE
This disc contains Copy Control technology.
On some equipment, for example car CD players playback problems may be encountered.
PC MS Windoes 95, Pentium2 233 Mhz, 64 Mb RAM * Mac OS8.6-9.2 + CarbonLib & Mac OSX
UNQUOTE

There is no offical 'CD' logo, by the way.

Advertised inside are about another 20 CDs, most of which were also for sale at $7 AUD in the same Myer Virgin outlet.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: Pied Piper
Date: 04 Jan 06 - 05:19 AM

Recorded music is dead

Long live

Live performance

PP


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: GUEST
Date: 04 Jan 06 - 07:46 AM

btw Laughing Policeman is not a Folk Song


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 05 Jan 06 - 12:20 AM

... in your opinion...


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 17 Feb 06 - 10:04 PM

GERMAN MOVIE FANS NOTE:

Heise Online, a German news outfit, has discovered that the movie "Mr & Mrs Smith," on DVDs distributed in Germany, incorporates a Digital Rights Management system called "Settec Alpha-DISC copy protection" that uses a root kit similar to the one previously used by Sony BMG on several audio CDs.

An eWeek Report, 'Mr. & Mrs. Smith' DVD Ships with Rootkit-like DRM, By Ryan Naraine, February 14, 2006 gives a brief report. The article includes links to additional sources.

[quote]
According to anti-virus vendor F-Secure, based in Helsinki, Finland, the German DVD release of "Mr. & Mrs. Smith"—a recent movie starring Brad Pitt and Angelina Jolie—contains a DRM (digital rights management) protection scheme that uses rootkit-like cloaking technology.
[end quote]

According to F-Secure analysts, the specific DRM device used on this DVD does not hide files on your hard drive like the Sony root kit did, but it does cloak processes so that the user or computer administrator cannot know that they are running. Since no files are hidden, AV and other antimalware programs can scan all files, but it is possible for malware processes running in RAM to cloak themselves using the "method" installed by the DVDs.

Thus far, this one DVD is the only one reported to be "infected" by this crud; and no distributor was named in the article. The report, at this point, indicates that only DVDs distributed in Germany are known to be afinfected.

Settec, the maker of the DRM software, provides a removal tool; but F-Secure advises that you NOT play this DVD on your computer.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 23 Feb 06 - 04:20 PM

In Australia Telstra is now pushing the concept of 'downloading movies to your PC' via BigPond.

I noted with interest that there was musch glossing over of the concept that 'after a week, the movie would make itself unplayable'!!!!!

So just how do you think they will do that?

:-)


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: MMario
Date: 23 Feb 06 - 04:25 PM

There are bunches of different methods to make a download file unavailable after a set time period - some easier to get around then others.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 23 Feb 06 - 04:55 PM

My point is that this seems very close to 'infecting the PC' - as there HAS to be some SW loaded on the PC that is run to change the access to the file.


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 23 Feb 06 - 05:50 PM

A somewhat disturbing subject I've seen popping up recently is a push for "secure hard drive" technology. Although only vaguely described, it appears that you could have a hard drive that is entirely encrypted with strict read, copy, write, etc controls enforced by "secure" (read encrypted) programs that will be a core part of your new PC. There is an "official" organization to advance development of this technology. Microsoft, and all major hard drive
makers are participants.

It reportedly will be an integral part of the next new Windows version, called "Vista" which is due out in 1999 (according to first reports) and is now expected to be offered "sometime," but seems likely to appear during the current year.

It appears that the encrypted drive technology would remain "optional," but it has been suggested that an OEM builder could provide all the software purchased with a new computer on a "secure drive" with very tight control over what one could do with respect to copying, moving, and/or replacing the programs supplied. The tech reporters indicate that when they ask the "industry experts" about this, they get no reply, but that the experts "just smile."

Vague and incomplete reports are that all Microsoft work on this technology, until quite recently when they created a new group for it, was done in their "Digital Rights Management" development organization. I find the association of security methods with DRM methods disturbing.

The "good news" about Vista is that it appears to require machine resources not available on most existing computers, so there will be few upgrades. The only way to get it may be to buy it preinstalled on a new OEM machine, for most people.

Ongoing work on DRM for DVDs, and potentially for audio CDs, will require a hardware decryption chip installed in the playback device. According to the most recent reports, the manufacturer(s?) of the required chips currently have no plans to make the chip available to anyone except OEM builders, and makers of add-on display/multimedia cards have thus far been "stone-walled" with respect to whether the chip will even be available to them. It appears, at least for now, that building your own computer incorporating the decoding chip, or adding it as an upgrade to an existing computer will not be possible. Vague reports suggest that an "analog quality" playback of protected DVDs may be possible without the chip, but hardware decryption will be required for "digital playback." The existence of even that option is unconfirmed.

Expect an advertising blitz soon, telling us why it's good for us.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 23 Feb 06 - 05:56 PM

Not sure what happened in my previous post. The "error" in the code isn't in the Word text I pasted???

Repeat post, since this thread is bloated enough a few more words won't matter(?)

A somewhat disturbing subject I've seen popping up recently is a push for "secure hard drive" technology. Although only vaguely described, it appears that you could have a hard drive that is entirely encrypted with strict read, copy, write, etc controls enforced by "secure" (read encrypted) programs that will be a core part of your new PC. There is an "official" organization to advance development of this technology. Microsoft, and all major hard drive makers are participants.

It reportedly will be an integral part of the next new Windows version, called "Vista" which is due out in 1999 (according to first reports) and is now expected to be offered "sometime," but seems likely to appear during the current year.

It appears that the encrypted drive technology would remain "optional," but it has been suggested that an OEM builder could provide all the software purchased with a new computer on a "secure drive" with very tight control over what one could do with respect to copying, moving, and/or replacing the programs supplied. The tech reporters indicate that when they ask the "industry experts" about this, they get no reply, but that the experts "just smile."

Vague and incomplete reports are that all Microsoft work on this technology, until quite recently when they created a new group for it, was done in their "Digital Rights Management" development organization. I find the association of security methods with DRM methods disturbing.

The "good news" about Vista is that it appears to require machine resources not available on most existing computers, so there will be few upgrades. The only way to get it may be to buy it preinstalled on a new OEM machine, for most people.

Ongoing work on DRM for DVDs, and potentially for audio CDs, will require a hardware decryption chip installed in the playback device. According to the most recent reports, the manufacturer(s?) of the required chips currently have no plans to make the chip available to anyone except OEM builders, and makers of add-on display/multimedia cards have thus far been "stone-walled" with respect to whether the chip will even be available to them. It appears, at least for now, that building your own computer incorporating the decoding chip, or adding it as an upgrade to an existing computer will not be possible. Vague reports suggest that an "analog quality" playback of protected DVDs may be possible without the chip, but hardware decryption will be required for "digital playback." The existence of even that option is unconfirmed.

Expect an advertising blitz soon, telling us why it's good for us.

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: michaelr
Date: 23 Feb 06 - 08:36 PM

Er... what's OEM?


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: jeffp
Date: 23 Feb 06 - 08:52 PM

Original Equipment Manufacturer


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 23 Feb 06 - 09:01 PM

OEM = Original Equipment Manufacturer

Sorry about that. Figured it was common 'nuff to be recognized.

The add-on to incorporation of hardware based DRM (Digital Rights Management) directly in PCs is that there is *speculation that Apple may already have made an arrangement with the Mickey club (Microsoft) for a "Windows with Mac front page" in connection with it's upcoming switch to Intel processors (the MacTel computer). The MacWindows would replace OS-X(?).

*Thus far the speculation isn't widespread, but a few prognosticators have some pretty good arguments about why it makes sense. The thought of running "Windows" on their Macs will probably be depressing enough that those affected won't notice that ther computers are under total control of the music/entertainment industry.

Another log on the fire: It has been officially stated that the next new Windows, Vista, will not permit the use of any hardware or software not showing a certificate of compatibility. NO LEGACY STUFF.

Brave new world...

John


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: The Fooles Troupe
Date: 24 Feb 06 - 02:11 AM

So no purchase od Vista without a new box! Looks like Linux becomes even more attractive. Of course, that means that Mickeysoft and the DRM team will just not want to sell anything to Linux Users - for a while...

So look after those standalone CD/DVD players - when the DRM boys get their claws into them, you won't even be able to use them to copy things, they hope!


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: Sony Audio CDs INFECTED
From: JohnInKansas
Date: 24 Feb 06 - 03:20 AM

The newletter I just got a couple of hours ago says that Microsoft has announced the first "Full Featured" beta copy of Vista. It's supposedly being sent out to all the beta testers as we speak, so to speak. One site has a bunch of screen shots of all the wonderful features but the site was apparently too loaded to get around on with my slow connection.

Perhaps in a few days when I get a chance to look at it, it will be worth posting a link --- or perhaps not. What I see isn't the sort of thing I'd hope for, but I couldn't get in to get any of the "in depth" ravings.

The beta versions are being run on existing machines, so there is apparently some hardware compatibility. Beta users are typically developers and "power users," so they tend to have good (late model) hardware with lots of resources. It's us little guys and gals that will be having upgrade problems.

Side note: TWO new Mac worms in the past week, and a "gaping hole" in the Mac browser (Safari?) about a week ago. Nothing really to worry about, but it appears that some of the hackers are getting interested in Macs recently. One of the new worms spawned at least two "variants" within a couple of days after it was first found, so obviously somebody's watching the Apple.

John


Post - Top - Home - Printer Friendly - Translate
  Share Thread:
More...

Reply to Thread
Subject:  Help
From:
Preview   Automatic Linebreaks   Make a link ("blue clicky")


Mudcat time: 28 May 9:26 PM EDT

[ Home ]

All original material is copyright © 2022 by the Mudcat Café Music Foundation. All photos, music, images, etc. are copyright © by their rightful owners. Every effort is taken to attribute appropriate copyright to images, content, music, etc. We are not a copyright resource.