Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iTunes + SONY XCP ( Malware ) = BAD

snowmoon

snowmoon

macrumors 6502a
Original poster
Oct 6, 2005
900
119
Albany, NY
Just wanted to give people the word of warning that the rootkit that SONY secretly installed on XCP discs screws up windows iTunes importing of ALL cd's. I just spent the better part of an hour uninstalling it from my mothers installation of windows. She is no idiot, but this one bit her because she buys a lot of music.

Just wanted to let people know that if they are having trouble importing songs they should be on the lookout for the SONY DRM ROOTKIT. It will affect more than just the copy protected CD's. SONY is rightfully getting it's A$$ handed to them in the new lawsuits.

http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html
 
This is good in a way. More people will get fed up with PCs and Windows and migrate over to the Mac. Yeah, I hope Sony gets fined a multi-billion dollar lawsuit. Time to squeeze these dickwads where it hurts -- in their pocketbook.
 
Lacero said:
This is good in a way. More people will get fed up with PCs and Windows and migrate over to the Mac. Yeah, I hope Sony gets fined a multi-billion dollar lawsuit. Time to squeeze these dickwads where it hurts -- in their pocketbook.
Click to expand...

I wish I could be so optimistic, but another few million OSX installations and this software will be designed for MAC as well... mark my word, we need to stop corporations from selling these "fake" CD's. they do not meet redbook standards and should NOT be sold as CD's.
 
snowmoon said:
I wish I could be so optimistic, but another few million OSX installations and this software will be designed for MAC as well... mark my word, we need to stop corporations from selling these "fake" CD's. they do not meet redbook standards and should NOT be sold as CD's.
Click to expand...
Exactly.

Does anyone know if these new CDs carry any sort of warning label to the effect that "this CD contains anti-ripping software which WILL be installed on your machine if you insert it into a computer"?
 
clayj said:
Exactly.

Does anyone know if these new CDs carry any sort of warning label to the effect that "this CD contains anti-ripping software which WILL be installed on your machine if you insert it into a computer"?
Click to expand...

It has "Copy protected" on the labels, but nowhere does it document the "root kit" or the fact that it will permenetly reduce the functionality of the computer.
 
snowmoon said:
It has "Copy protected" on the labels, but nowhere does it document the "root kit" or the fact that it will permenetly reduce the functionality of the computer.
Click to expand...
Yeah... just putting "Copy protected" ain't gonna cut it.

I like Sony, but anyone who puts crap on a music CD, so that it screws up my computer when I LEGALLY rip the CD's contents for my own use, deserves to have their ass handed to them.
 
It's even sillier than you'd think.

Now the Legalese Rootkit: Sony-BMG's EULA
November 09, 2005

If you thought XCP "rootkit" copy-protection on Sony-BMG CDs was bad, perhaps you'd better read the 3,000 word (!) end-user license agreement (aka "EULA") that comes with all these CDs.

First, a baseline. When you buy a regular CD, you own it. You do not "license" it. You own it outright. You're allowed to do anything with it you like, so long as you don't violate one of the exclusive rights reserved to the copyright owner. So you can play the CD at your next dinner party (copyright owners get no rights over private performances), you can loan it to a friend (thanks to the "first sale" doctrine), or make a copy for use on your iPod (thanks to "fair use"). Every use that falls outside the limited exclusive rights of the copyright owner belongs to you, the owner of the CD.

Now compare that baseline with the world according to the Sony-BMG EULA, which applies to any digital copies you make of the music on the CD:

1. If your house gets burgled, you have to delete all your music from your laptop when you get home. That's because the EULA says that your rights to any copies terminate as soon as you no longer possess the original CD.

2. You can't keep your music on any computers at work. The EULA only gives you the right to put copies on a "personal home computer system owned by you."

3. If you move out of the country, you have to delete all your music. The EULA specifically forbids "export" outside the country where you reside.

4. You must install any and all updates, or else lose the music on your computer. The EULA immediately terminates if you fail to install any update. No more holding out on those hobble-ware downgrades masquerading as updates.

5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm.

6. The EULA says Sony-BMG will never be liable to you for more than $5.00. That's right, no matter what happens, you can't even get back what you paid for the CD.

7. If you file for bankruptcy, you have to delete all the music on your computer. Seriously.

8. You have no right to transfer the music on your computer, even along with the original CD.

9. Forget about using the music as a soundtrack for your latest family photo slideshow, or mash-ups, or sampling. The EULA forbids changing, altering, or make derivative works from the music on your computer.

So this is what Sony-BMG thinks we should be allowed to do with the music on the CDs that we purchase from them? No word yet about whether Sony-BMG will be offering a "patch" for this legalese rootkit. I'm not holding my breath.
Posted by Fred von Lohmann at 12:24 PM | Permalink | Technorati
Click to expand...

From http://www.eff.org/deeplinks/archives/004145.php
 
devman said:
It's even sillier than you'd think.
5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm....
Click to expand...

Oh my God! You weren't kidding! :eek:
Sony:
Article 8. UPDATES TO THE LICENSED MATERIALS
The SONY BMG PARTIES may from time to time provide you with updates of the SOFTWARE in a manner that the SONY BMG PARTIES deem to be appropriate. All such updates shall be deemed to be part of the SOFTWARE for all purposes hereunder. In the event that you fail to install an update, the SONY BMG PARTIES reserve the right to terminate the term of this EULA, along with your rights to use the LICENSED MATERIALS, immediately, without additional notice to you. The SONY BMG PARTIES shall not be liable for any loss or damage caused by reason of your failure to install any such update or your failure to do so in the manner instructed.

How in the world would they be able to "Terminate" my licensce if I don't "update"? Would the "CD" blow up? :confused:
 
that sucks, how far will these companies go. I really did like sony but if they are going to treat my computer like trash then i think the same thing about them. I hope they get the pants sued off them and their million dollar socks.

<-----will be looking out for all sony cds & any other crappy company that tries to screw me...bastards

Nuff.
 
i downloaded over 100 sony cds just to spite those B@st@*ds! And im boycotting them because they are getting out of hand. Just way to their new HD:DVD format....hell for us...Hollywood will be loving it.
 
We'll definitely see more people turning to downloading music illegally. Who wants to put up with all the crap, especially this whole debacle concerning rootkits and Sony? I've never heard of a rootkit until now, thanks to Sony. I hope they fester in Hell.
 
Konradx said:
i downloaded over 100 sony cds just to spite those B@st@*ds! And im boycotting them because they are getting out of hand. Just way to their new HD:DVD format....hell for us...Hollywood will be loving it.
Click to expand...

You aren't boycotting anything if you are acquiring and using over 100 of their CDs. All your are doing is letting them know there is still a huge market for their product and they need to find out a better way to make sure you to pay for it.


Lethal
 
Win XP users should also be wary of certain DVD's with proprietary players -- they usually have similar malware. I usually watch 'Call for Help' with Leo Laporte, and I now have a new appreciation for the current lack of problems with using a Mac. Of course this is coupled with an ominous sense that it's only a matter of time...

Isn't there a way to simply open the CD as a folder in Win Xp? That way you could (ostensibly) choose not to have things installed (might have to play around with some control panel settings too?)

Sony is so.......nevermind, i'll not get on that soapbox
 
Can somebody send me the Sony DRM for OS X?

I'd like to get copies of those .kext files and reverse engineer them, just to see if they pose a security hazard to Mac users and what information they might be collecting. If anybody has one of these CDs, please PM those two files to me. Thanks
 
tsaxer said:
Isn't there a way to simply open the CD as a folder in Win Xp? That way you could (ostensibly) choose not to have things installed (might have to play around with some control panel settings too?)

Sony is so.......nevermind, i'll not get on that soapbox
Click to expand...

Select the properties of your CD/DVD drive, go to the autoplay tab, and then for each relevant content type choose the action "open folder to view files". Now I don't know if this is enough to prevent the installation of the malware; it may not be. I don't play music CDs in Windows (work laptop), so I can't tell.
 
dotdotdot said:
Did you know that on some CDs there is this:

Start.app

clicking it prompts you for your password and username and then its gone forever. it installs stuff so your mac is somewhat effected as well.

http://www.macintouch.com/#tip.2005.11.10.sony
Click to expand...

Most people who want to play or rip a CD would open iTunes and use it as per usual. They won't go looking through the CD and start clicking on things. In addition, they should realise that they've never needed to enter their password to play other CDs.
 
Well, this will only help out iTunes...how stupid are they...since your listening to wma or some drm files that aren't even real cd audio...people will get the idea to just buy it off iTunes...burn it to a cd, and rip it back into a normal mp3 file. Simple...but some people myself, want the original uncompressed cd audio...and this is what they're taking away which DOES make me angry along with everyone else.
 
aaaand this is supposed to stop piracy? I dont know about people here but this is the sort of thing that would push me towards illegal downloads.

way to go Sony!

... is Sony the new Microsoft?
 
I have confirmed with my mom that she did nothing except attempt to import the offending CD.

Nothing installed

No EULA

No consent of any kind

.. and the DRM was installed behind her back while iTunes was attempting the import.
 
It is illegal to download music illegaly. It is illegal run anti-virus software if you have purchased a Sony CD w/ XCP on your computer, because that is circumvention. I have already emailed Symantec and have asked them to cease distribution of their removal tool under the DMCA.

Aint this some crazy legal schizit we have gotten ourselves into all because someone decided that it was cool to download music for free back in 1998?
 
DeVry Student said:
It is illegal to download music illegaly.
Click to expand...

Wow, really? :rolleyes:

DeVry Student said:
It is illegal run anti-virus software if you have purchased a Sony CD w/ XCP on your computer, because that is circumvention. I have already emailed Symantec and have asked them to cease distribution of their removal tool under the DMCA.
Click to expand...

Thanks, I needed a good laugh :D
 
dotdotdot said:
Did you know that on some CDs there is this:

Start.app

clicking it prompts you for your password and username and then its gone forever. it installs stuff so your mac is somewhat effected as well.

http://www.macintouch.com/#tip.2005.11.10.sony
Click to expand...
I read this article yesterday and was wondering if there is some sort of automatic install of this .app or if you have to manually go looking for it.

Or if when you go to rip tracks in iTunes or another CD ripping app, it will force you to install this? Has anyone tested this?

I would hate to see the Mac being treated like Windows when it comes to CD copy protection.

*rant on*
Personally, I think Sony screwed themselves. They have only setback any improvment in the fighting of illegal downloading. This is not to say I encourage illegal downloading of music, but I can't blame users that want to get their music, trying to avoid these tactics that Sony and other companies are doing.

IMO, if they simply make a product that people will want to buy, they wouldn't have to worry about jumping through hoops to treat customers like criminals.

Also, if companies like Sony would stop trying to do their own thing (creating yet another format that isn't compatible with any other format out there) and work together with other companies, piracy wouldn't be so rampant and people would be more willing to pay for something that would be guaranteed to work with their device.

*rant off*
 
chillywilly said:
I read this article yesterday and was wondering if there is some sort of automatic install of this .app or if you have to manually go looking for it.
Click to expand...

According to reports, on the Imogen Heap cd, you have to run the extra AV content for the file to activate. Then it gives you a licensing agreement (which does not clearly explain what will happen), asks you to password into admin privileges, and then installs the kernel extension files.

So no, as of now, on Macs, this stuff does not get automatically executed.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back