- Related Stories
-
Attack targets Sony 'rootkit' fix
November 16, 2005 -
Sony CD protection sparks security concerns
November 1, 2005 -
iPod undermines Microsoft on copy-locked CDs
July 12, 2004
Sony announced on Tuesday that a new risk had been found with a batch of 27 of its compact discs, which automatically install antipiracy software on hard drives when put into a computer's disc drive. Along with the Electronic Frontier Foundation, a digital rights group, the record label released a patch aimed at fixing that flaw.
However, Princeton computer science professor Ed Felten wrote in his blog on Wednesday that the patch itself could open computers to attack by hackers.
Sony executives said Thursday that they are working as closely as possible with security professionals to address the issues identified by Felten, and would have a new patch available by midday that day.
"The security space is a dynamic one, as we have learned," said Thomas Hesse, president of Sony's global digital businesses. "Our goal is to be diligent and swift, and we have gone to experts to handle this issue."
Sony's ongoing troubles with copy protection software highlight the delicate line that record labels and other content companies are walking in trying to protect their products from widespread duplication.
On the one hand, labels have watched their revenues decrease over the past several years, as more people swap songs online and burn CDs for friends and acquaintances.
However, the labels' technological attempts to create a copy-protected CD that retains compatibility with millions of old CD players have opened them up to the unfamiliar hazards of software development. Several of Sony's attempts to patch security holes in its antipiracy software over the past weeks have turned out to raise their own new problems, instead of quelling concerns.
The current security flaw in Sony's discs is related to software produced by SunnComm Technologies and affects 27 titles that remain on the market.
It's separate from an earlier vulnerability that affected 52 other titles and that related to antipiracy software written by another company, First 4 Internet. Those titles have been recalled from store shelves.
The flaw found by Felten could allow Sony's original patch to trigger malicious software on a computer, if that software was already in place when the patch was installed.
See more CNET content tagged:
antipiracy, security hole, patch, Sony Corp., copy protection




Remember the one a year or two ago where you could take a Sharpie and draw a black line around the edge of the CD and bypass the copy protection software? :D How much did the lose over that?
They aren't going to stop people copying / downloading music. It would be cheaper for them to stop trying!
uninstall????
Actually, I will never grant Sony (or any other music company) permission to do so, and any time they do, it will be unauthorized and therefore illegal -- criminally so here in Canada.
So by treating their paying customers like criminals, they themselves become criminal. I wonder if they can see the irony.
They act like their customers just don't matter. They don't hear anything anyone says, they just steamroll their way through.
The process used to design the software they put on CDs is flawed. It's high level, technically inept and in the end, doesn't really protect the disc at all.
Again. Linux anyone?
The profits that the industry made were almost obscene a few years back. They have priced themselves out my pocketbook. Maybe they could sell more at lower prices? Instead I listen to my music online and hear what I want for free. No need to pirate it either.
Now with these debacles unfolding, I'm convinced even further to stay away from them. Far far away. I hope SONY hears this loud and clear along with the rest of the industry.
I will be illegally downloading anything that Sony sells from now on. It is much safer. It is cheaper. And it is easier.
I have had enough of Sony. I don't need their malware.
http://otherthingsnow.blogspot.com/2005/12/intel-to-develop-hardware-rootkit.html
The count is 0 and 2 on Sony. So what happens after the 3rd stike? The top executives all get 7 figure bonuses for trying so hard?
Mr Hesse is clearly a moron if he's just realizing security is a constantly changing arena. But I would appreciate it if he would continue his education on his own PC rather than jeapordizing millions of paying consumers as he figures out what everyone else already knows. It's not like they're preventing any piracy, just enraging their client base and making fools of themselves in the process.
I'm going to do the only thing I can, I'm going to stop buying all Sony products. I'm sure they won't notice but if everyone did that with just CDs then Sony would be ejected from the music business. What major band/artist would sign a contract with Sony if they couldn't sell CDs?
Napster isn't going to put Sony out of Business - Sony is going to put Sony out of Business.
B
- Shame on cnet
- by skeptik December 9, 2005 8:07 AM PST
- "On the one hand, labels have watched their revenues decrease over the past several years, as more people swap songs online and burn CDs for friends and acquaintances."
- Like this Reply to this comment
-
(18 Comments)This clearly implies that revenue decreas is because of piracy and this is far from a statistically supported fact. In fact other stories on cnet itself have indicated there are plenty of other reasons for the decline in revenue (end of people rebuying music owned on other pre-Cd formats, economic depression, increase in other entertainment product options, etc) and some studies indicating that heavy P2P users actually buy MORE CDs than non-users.