Yay, Mark!!!
I haven't been in a music store lately. It might be fun to check out what is on the shelves.
Printable View
Yay, Mark!!!
I haven't been in a music store lately. It might be fun to check out what is on the shelves.
Hi, I realize this thread is a little dated, however I just read some interesting "new" information about this whole Sony Rootkit mess.
I was not aware that it would still install even if you deny the EULA! Yikes! It just keeps getting worse!Quote:
The new charges brought by Abbott contend that MediaMax software used by Sony BMG to thwart illegal copying of music on CDs violated state laws because it was downloaded even if users rejected a license agreement.
The story can be found here. http://news.com.com/New+spyware+clai...l?tag=nefd.top
-Deeboe
Seems like Sony has seen the error of their ways......
http://news.bbc.co.uk/2/hi/technology/4568670.stmQuote:
Sony to settle anti-piracy CD row
Free music downloads and cash refunds could soon be offered to owners of Sony BMG CDs loaded with controversial anti-piracy software.
The offers are part of a proposed settlement of lawsuits against Sony BMG over the use of software aimed at thwarting illegal copying of CDs.
The programs used left consumers open to attack from viruses that hijacked the music maker's software.
The proposed deal also forces Sony to stop using the controversial software.
oooooooo...that sure makes up for the BS that people had to do to get rid of said rootkit.....IMO it's not enough, new PC's for everyone.....yay :pQuote:
Owners of a CD with the XCP program are being offered a replacement disc free of anti-piracy software, $7.50 in cash and a free download of a Sony BMG album from an online music service. Consumers can forgo the cash and get three album downloads instead.
this story is pretty old but is still relevant to post here. ill give a link to the site that i read it on and this guy made a really big deal out of it. read the WHOLE story and see what sony did with their "fix" for their rootkit (they didn't really do anything). the page also has links to software that will uncover rootkits installed and other tools to remove them etc etc.
heres the link i hope its very useful for all of you:
http://www.sysinternals.com/blog/200...al-rights.html
Uhh thanks karmine.....Quote:
Originally posted here by karmine
this story is pretty old but is still relevant to post here. ill give a link to the site that i read it on and this guy made a really big deal out of it. read the WHOLE story and see what sony did with their "fix" for their rootkit (they didn't really do anything). the page also has links to software that will uncover rootkits installed and other tools to remove them etc etc.
heres the link i hope its very useful for all of you:
http://www.sysinternals.com/blog/200...al-rights.html
I know the story breaking back in Oct would be considered old, if it was what I was refering to...but the results of what has gone on afterwards and is still going on is relevant "today"hence the link I provided in the post before yours is for what is now being reported by the BBC Dec 30th 2005, and yes there are some other threads which relate....
http://www.antionline.com/showthread...Rootkits<br />
http://www.antionline.com/showthread...=Sony+Rootkits
http://www.antionline.com/showthread...=Sony+Rootkits
http://www.antionline.com/showthread...=Sony+Rootkits
http://www.antionline.com/showthread...=Sony+Rootkits
So I just thought I would bring everyone up to speed, and where I had 5 threads to choose from I picked this one kay.... :p
A free album or 3... Woo! If some 1337 h4x0r had infected loads folks puters, he'd be looking at some serious downtime. And screw the motive! Robert Morris didnt mean to mess up the net but no one cared that his motives werent evil.
Again - my apologies - but I just saw on this from Security Focus via the Register - there is an update on this topic... aaaad regurgitate:
Link: http://www.theregister.co.uk/2006/01...ll_widespread/
Story:
Quote:
'The global scope is the big mystery here'
By Robert Lemos, SecurityFocus
Published Monday 16th January 2006 18:35 GMT
WASHINGTON D.C. Hundreds of thousands of networks across the globe, including many military and government networks, appear to still contain PCs with the controversial copy-protection software installed by music discs sold by media giant Sony BMG, a security researcher told attendees at the ShmooCon hacking conference this weekend.
Building on previous research that suggested some 570,000 networks had computers affected by the software, infrastructure security expert Dan Kaminsky used a different address used by the copy protection software to estimate that, a month later, 350,000 networks - many belonging to the military and government - contain computers affected by the software.
"It is unquestionable that Sony's code has gotten into military and government networks, and not necessarily just U.S. military and government networks," Kaminsky said in an interview after his presentation at ShmooCon. The researcher would not say how many networks belonged to government or military top-level domains.
The latest research results comes as Sony BMG is attempting to finish up this particular embarrassing chapter in the company's use of digital-rights management software. Earlier this month, a New York district court judge gave the nod to a settlement penned by Sony BMG and the attorneys for six class-action lawsuits in the state. More than 15 other lawsuits are pending against the media giant, according to court filings.
The controversy surrounds several flaws in two types of copy-protection software used on Sony BMG music CDs and the company's previous practices of hiding the software from a computer's user and making removal of the software extremely inconvenient. The two practices - considered unfair by the Attorney General for the State of Texas, whose office sued Sony BMG--resemble "rootkit" techniques used by malicious internet attackers.
Sony BMG uses two types of digital-rights management (DRM) software: the Extended Copy Protection (XCP) program created by First 4 Internet and the MediaMax program created by SunnComm.
Kaminsky's research uses a feature of domain-name system (DNS) servers: The computers will tell whether an address has recently been looked up by the server. The security researcher worked from a list of nine million domain-name servers, about three million of which are reachable by computers outside their networks. Kaminskly sent DNS requests to the three million systems, asking each to look up whether an address used by the XCP software - in this case, xcpimages.sonybmg.com - was in the systems' caches.
During his first survey, carried out over three days in mid-November, he found 568,000 DNS servers had previously been asked to look up three different server addresses used by the XCP software. Another 350,000 servers had to be thrown out from the data set because they did not obey commands to only look in their cache, and instead asked for information from other servers on the Internet.
The most recent survey, which lasted between December 15 and December 23, he found 350,000 servers had the unique address in their caches. While other factors may increase or decrease the number, Kaminsky continues to stress that the experiment is about finding out the magnitude of the impact of Sony BMG's software.
"The data shows that this is most likely a hundreds-of-thousands to millions of victims issue," Kaminsky said.
The data might also show how widespread piracy has become. The 52 music titles released with the XCP software were only released in North America, he said. However, the network apparently affected by the Sony BMG issue covered 135 countries. About 4.7 million discs were manufactured and about 2.1 million had sold, according to Sony statements.
"The global scope is the big mystery here," he said. "It is fairly likely that a lot of the discs were pirated."
In December, Sony BMG changed the banner ad that displays on PCs that play a CD to a graphic that requests them to download the uninstaller. The graphical reminder showed that Sony BMG is taking the threat seriously, Kaminsky said, and could be responsible for much of the decrease in his numbers. Sony BMG could not be reached for comment on Monday.
While the security issues related to the copy-protection software have apparently affected US government and military computers, the Department of Justice will not likely get involved, said Jennifer Granick, executive director of the Center for Internet and Society at Stanford Law School.
"I don't see the federal government suing a big company like Sony," she said. "The fact that military networks have likely been affected by this won't change that."
This article was first published at SecurityFocus.
Copyright © 2006, SecurityFocus
Again - my apologies - but I just saw on this from Security Focus via the Register - there is an update on this topic... aaaad regurgitate:
Link: http://www.theregister.co.uk/2006/01...ll_widespread/
Story:
Quote:
'The global scope is the big mystery here'
By Robert Lemos, SecurityFocus
Published Monday 16th January 2006 18:35 GMT
WASHINGTON D.C. Hundreds of thousands of networks across the globe, including many military and government networks, appear to still contain PCs with the controversial copy-protection software installed by music discs sold by media giant Sony BMG, a security researcher told attendees at the ShmooCon hacking conference this weekend.
Building on previous research that suggested some 570,000 networks had computers affected by the software, infrastructure security expert Dan Kaminsky used a different address used by the copy protection software to estimate that, a month later, 350,000 networks - many belonging to the military and government - contain computers affected by the software.
"It is unquestionable that Sony's code has gotten into military and government networks, and not necessarily just U.S. military and government networks," Kaminsky said in an interview after his presentation at ShmooCon. The researcher would not say how many networks belonged to government or military top-level domains.
The latest research results comes as Sony BMG is attempting to finish up this particular embarrassing chapter in the company's use of digital-rights management software. Earlier this month, a New York district court judge gave the nod to a settlement penned by Sony BMG and the attorneys for six class-action lawsuits in the state. More than 15 other lawsuits are pending against the media giant, according to court filings.
The controversy surrounds several flaws in two types of copy-protection software used on Sony BMG music CDs and the company's previous practices of hiding the software from a computer's user and making removal of the software extremely inconvenient. The two practices - considered unfair by the Attorney General for the State of Texas, whose office sued Sony BMG--resemble "rootkit" techniques used by malicious internet attackers.
Sony BMG uses two types of digital-rights management (DRM) software: the Extended Copy Protection (XCP) program created by First 4 Internet and the MediaMax program created by SunnComm.
Kaminsky's research uses a feature of domain-name system (DNS) servers: The computers will tell whether an address has recently been looked up by the server. The security researcher worked from a list of nine million domain-name servers, about three million of which are reachable by computers outside their networks. Kaminskly sent DNS requests to the three million systems, asking each to look up whether an address used by the XCP software - in this case, xcpimages.sonybmg.com - was in the systems' caches.
During his first survey, carried out over three days in mid-November, he found 568,000 DNS servers had previously been asked to look up three different server addresses used by the XCP software. Another 350,000 servers had to be thrown out from the data set because they did not obey commands to only look in their cache, and instead asked for information from other servers on the Internet.
The most recent survey, which lasted between December 15 and December 23, he found 350,000 servers had the unique address in their caches. While other factors may increase or decrease the number, Kaminsky continues to stress that the experiment is about finding out the magnitude of the impact of Sony BMG's software.
"The data shows that this is most likely a hundreds-of-thousands to millions of victims issue," Kaminsky said.
The data might also show how widespread piracy has become. The 52 music titles released with the XCP software were only released in North America, he said. However, the network apparently affected by the Sony BMG issue covered 135 countries. About 4.7 million discs were manufactured and about 2.1 million had sold, according to Sony statements.
"The global scope is the big mystery here," he said. "It is fairly likely that a lot of the discs were pirated."
In December, Sony BMG changed the banner ad that displays on PCs that play a CD to a graphic that requests them to download the uninstaller. The graphical reminder showed that Sony BMG is taking the threat seriously, Kaminsky said, and could be responsible for much of the decrease in his numbers. Sony BMG could not be reached for comment on Monday.
While the security issues related to the copy-protection software have apparently affected US government and military computers, the Department of Justice will not likely get involved, said Jennifer Granick, executive director of the Center for Internet and Society at Stanford Law School.
"I don't see the federal government suing a big company like Sony," she said. "The fact that military networks have likely been affected by this won't change that."
This article was first published at SecurityFocus.
Copyright © 2006, SecurityFocus