Don't run copy protected CDs from SONY!!!

[Eriana]

SONY was usually a good system...I don't know why...

[glitch1501]

http://www.theinquirer.net/?article=27508

the article talks about how there is a company in italy suing sony over these rootkits

[Kaligraphic]

The "patch" doesn't really help much with the basic problem.

[glitch1501]

if you would like to sign an online petition for sony to stop with this kinda of stuff, follow the link below

http://www.petitiononline.com/bcsony/petition.html

[Sync]

if people think this stuff is invasive just wait until Windows Vista and TCG enabled hardware starts rolling out :x

[shooraijin]

Some updates from NEWS.COM.

EFF's list of CDs affected: http://news.com.com/Are+these+the+Sony+rootkit+CDs/2100-1029_3-5944549.html?tag=nl

Switchfoot is on that list. :cry:

There are now bots and malware that will look for, and take advantage of, the hiding capabilities of the Sony DRM rootkit. The first generation was pretty buggy, but they're getting better at an alarming rate. There is also now a class-action lawsuit being filed in Los Angeles (in addition to the Italy case, which is unlikely to fly legally as the CDs in question were imported from the USA, and not domestic Italian issue -- this would hinge over whether the importation was allowed by Sony). Here's that article:
http://news.com.com/Bots+for+Sony+CD+software+spotted+online/2100-1029_3-5944643.html?tag=st_lh

[Arnobius]

Here's where you have to go to get the instructions to get rid of it.

http://cp.sonybmg.com/xcp/english/form14.html

Sony's being pretty arrogant for the fact that people are already exploiting the root kit.

I hope the lawsuits hit them like a ton of bricks.

6. I have heard that the protection software is really malware/spyware. Could this be true?

Of course not. The protection software simply acts to prevent unlimited copying and ripping from discs featuring this protection solution. It is otherwise inactive. The software does not collect any personal information nor is it designed to be intrusive to your computer system. Also, the protection components are never installed without the consumer first accepting the End User License Agreement.

This just in: Sony Headquarters struck by lightning

[glitch1501]

OH NOESSSSS da macs are being affected!!!!!!!
the sony discs install 2 kernel extensions on YOUR osx


"I recently purchased Imogen Heap's new CD (Speak for Yourself), an RCA Victor release, but with distribution credited to Sony/BMG. Reading recent reports of a Sony rootkit, I decided to poke around. In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext.
Personally, I'm not a big fan of anyone installing kernel extensions on my Mac. In Sony's defense, upon closer reading of the EULA, they essentially tell you that they will be installing software. Also, this is apparently not the same technology used in the recent Windows rootkits (made by XCP), but rather a DRM codebase developed by SunnComm, who promotes their Mac-aware DRM technology on their site."

taken from macintouch.com

[Arnobius]

OH NOESSSSS da macs are being affected!!!!!!!
the sony discs install 2 kernel extensions on YOUR osx


"I recently purchased Imogen Heap's new CD (Speak for Yourself), an RCA Victor release, but with distribution credited to Sony/BMG. Reading recent reports of a Sony rootkit, I decided to poke around. In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext.
Personally, I'm not a big fan of anyone installing kernel extensions on my Mac. In Sony's defense, upon closer reading of the EULA, they essentially tell you that they will be installing software. Also, this is apparently not the same technology used in the recent Windows rootkits (made by XCP), but rather a DRM codebase developed by SunnComm, who promotes their Mac-aware DRM technology on their site."

taken from macintouch.com

On one hand, it's a good argument to read the EULA (does anyone actually do that?). On the other, with the recent reports of people exploiting the rootkit, Sony needs to be held responsible for the damage the rootkit exposes computers to.

[shooraijin]

Note that the Mac version works through social engineering -- Mac OS X doesn't autostart CDs, and while OS 9 Macs can through QuickTime, this option is invariably disabled. To access the "enhanced" content, you have to run Start.app from the CD, which then gives you the EULA and installs the anti-copy kexts.

Solution: don't even think about looking at the "enhanced" content. You might be able to get at it by just browsing the disk and looking at resources. If you just play the audio tracks without starting the "naughty" program, you're a-ok.

This should also be a lesson for people to THINK ABOUT WHAT YOUR COMPUTER MIGHT BE DOING WHEN IT ASKS FOR YOUR PASSWORD. Why would a little light show program need superuser privileges? People don't think about this.

Obviously Mac OS 9 has no problem. Quick, dig out your old Macs!

[Arnobius]

Will the older Mac OS still handle newer programs? I thought Mac had a shorter drop off period than Windows for Software support... or did I get my facts mixed up again?

[shooraijin]

Yes and no. OS 9 can run Carbon programs, which was intended as a gateway programming interface between Classic Mac OS and OS X, both of which can run Carbon-compliant applications seamlessly in their own unique environments (in addition to Classic programs, which OS X can only run in emulation, and it looks like the Intel Macs won't run them at all). However, OS X, in addition to Carbon applications, can run Cocoa applications which are written specifically for advanced features and UI abilities of OS X that OS 9 doesn't offer (and Intel Macs will support Cocoa too).

All this to say that Start.app appears to be a Cocoa app, so OS 9 can't run it. Good thing, in this case.