[ale] OT: Are You Infected with Sony-BMG's Rootkit?

[Geoffrey]

Gotta love big brother Sony...

* Are You Infected with Sony-BMG's Rootkit?

EFF Confirms Secret Software on 19 CDs

San Francisco - News that some Sony-BMG music CDs install
secret rootkit software on their owners' computers has
shocked and angered thousands of music fans in recent days.
Among the cause for concern is Sony's refusal to publicly
list which CDs contain the infectious software and to
provide a way for music fans to remove it. Now, the
Electronic Frontier Foundation (EFF) has confirmed that the
stealth program is deployed on at least 19 CDs in a variety
of genres.

The software, created by First 4 Internet and known as
XCP2, ostensibly "protects" the music from illegal copying.
But in fact, it blocks a number of legal uses--like
listening to songs on your iPod. The software also
reportedly slows down your computer and makes it more
susceptible to crashes and third-party attacks. And since
the program is designed to hide itself, users may have
trouble diagnosing the problem.

"Entertainment companies often complain that fans refuse to
respect their intellectual property rights. Yet tools like
this refuse to respect our own personal property rights,"
said EFF staff attorney Jason Schultz. "Sony's tactics here
are hypocritical, in addition to being a security threat."

If you listened to a CD with the XCP software on your
Windows PC, your computer is likely already infected. An
EFF investigation confirmed XCP software on 19 titles, but
it's far from a complete list. Sony-BMG continues to refuse
to make such a list available to consumers.

Consumers can spot CDs with XCP by inspecting a CD closely,
checking the left transparent spine on the front of the
case for a label that says "CONTENT PROTECTED." The back of
these CDs also mention XCP in fine print. You can find
pictures of these and other telltale labeling at
<http://www.eff.org/IP/DRM/Sony-BMG/> .

"Music fans should protect themselves from this stealth
attack on their computer system," said EFF Senior Staff
Attorney Fred von Lohmann.

For EFF's list of CDs with XCP:
<http://www.eff.org/deeplinks/archives/004144.php>

The "legalese rootkit" - Sony-BMG's EULA:
<http://www.eff.org/deeplinks/archives/004145.php>

For this release:
<http://www.eff.org/news/archives/2005_11.php#004146>

: . : . : . : . : . : . : . : . : . : . : . : . : . : . :

* Sony-BMG Rootkit: EFF Collecting Stories, Considering
Litigation

EFF is collecting stories from EFF members and supporters who
have purchased Sony-BMG CDs that contained the rootkit copy
protection software.  We're considering whether the effect on
the public, or on EFF members, is sufficiently serious to
merit EFF filing a lawsuit.

If you satisfy the following criteria, we would like to hear
from you:

1. You have a Windows computer;
2. First 4 Internet's XCP copy protection has been installed
on your computer from a Sony CD (for more details, see our
blog post referenced above or the SysInternals blog,
http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-
digital-rights.html);
3. You reside in either California or New York; and
4. You are willing to participate in litigation.

We have not made a final decision about filing any legal
action, but we would like to hear from music fans who have
been harmed by the Sony-BMG rootkit copy protection
technology. Please contact allison at eff.org for more
information.

-- 
Until later, Geoffrey