Medical Forum / Diseases and Disorders / Arthritis / November 2005
Here is the Sony CD recall information
|
|
Thread rating:  |
Mary Z - 17 Nov 2005 15:19 GMT Hooray for the little guys! The bloggers and security expertise finally forced Sony to pull their malware. Sony has the recall information on their website, and there are a list of titles that are affected by this software. http://blog.sonymusic.com/sonybmg/archives/111505.html
Here are the titles of the CDs http://cp.sonybmg.com/xcp/english/titles.html
Here is what the information week had to say and the New York Times had similar comments.
"It seems crystal clear that but for the citizen journalists, Sony never would have done anything about this," says Fred von Lohmann, senior intellectual property attorney for the Electronic Frontier Foundation, a cyber liberties advocacy group that has been vocal in its condemnation of Sony and may eventually file a a lawsuit against Sony, in addition to three that have already been filed. "It's plain to me that it was Sony's intent to brush the story under the rug and forget about it."
Alan Scott, chief marketing office at business information service Factiva, said, "I think that we're in an entirely new world from a marketing perspective. The rules of the game have changed dramatically. The old way of doing things by ignoring issues, or with giving the canned PR spin response within the blogosphere, it just doesn't work."
Thomas Hesse, Sony BMG's Global Digital Business President, attempted to do just that by dismissing the online protests. "Most people, I think, don't even know what a rootkit is, so why should they care about it?" he said in a November 4 interview on National Public Radio's Morning Edition. He added, "The software is designed to protect our CDs from unauthorized copying and ripping."
Blog search site Technorati.com shows well over a hundred blog postings ridiculing this particular quote, each of which may have been linked to by other blogs.
The day before the NPR interview, Sony attempted to mollify its critics by offering an update that "removes the cloaking technology component" of the XCP DRM software. The update notes claim, "This component is not malicious and does not compromise security."
That's simply not true--the rootkit component allows attackers to take control of target computers. Moreover, another component, the uninstaller Sony provided to remove the XCP software, did compromise security. And once again, it was the blog community that brought this fact to light. "
Hooray for the little guy we won one for a change!-- MZ
Visit my website: http://www.mzuschlag.com
MikesBrain - 17 Nov 2005 17:21 GMT 2005-11-17, Responding to Mary Z...
> "It seems crystal clear that but for the citizen > journalists, Sony never would have done anything about > this," says Fred von Lohmann, ... Might be interesting to keep an eye on how the "citizen jounalist"'s career develops, or not. ;\
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Have a nice day, it really does do you good! :)
spodosaurus - 17 Nov 2005 19:45 GMT > Hooray for the little guys! The bloggers and security expertise > finally forced Sony to pull their malware. Sony has the recall [quoted text clipped - 4 lines] > Here are the titles of the CDs > http://cp.sonybmg.com/xcp/english/titles.html Thanks for that. Any that I/we own are going back.
 Signature spammage trappage: remove the underscores to reply
I'm going to die rather sooner than I'd like. I tried to protect my neighbours from crime, and became the victim of it. Complications in hospital following this resulted in a serious illness. I now need a bone marrow transplant. Many people around the world are waiting for a marrow transplant, too. Please volunteer to be a marrow donor: http://www.abmdr.org.au/ http://www.marrow.org/
Mary Z - 18 Nov 2005 03:16 GMT >Thanks for that. Any that I/we own are going back. I think you might be ok in oz not I am not sure they sold any of those drm infected CDs, but I hate sony ok and Micro$oft too. -- MZ
Visit my website: http://www.mzuschlag.com
Mary Z - 18 Nov 2005 23:07 GMT >I think you might be ok in oz not I am not sure they sold any of >those drm infected CDs, but I hate sony ok and Micro$oft too. -- MZ Geez that was nearly unreadable! What I meant to say was: I don't believe any of the DRM infected CDs were sold in Oz. I hate $ony and Micro$oft ; - ) -- MZ
Visit my website: http://www.mzuschlag.com
MikesBrain - 19 Nov 2005 15:12 GMT 2005-11-18, Responding to Mary Z...
>>I think you might be ok in oz not I am not sure they sold any of >>those drm infected CDs, but I hate sony ok and Micro$oft too. -- MZ > > Geez that was nearly unreadable! What I meant to say was: I don't > believe any of the DRM infected CDs were sold in Oz. I hate $ony and > Micro$oft ; - ) -- MZa And I hate the Romans already!
(Splitters! ;)
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Have a nice day, it really does do you good! :)
Mary Z - 18 Nov 2005 16:00 GMT >The bloggers and security expertise >finally forced Sony to pull their malware. Sony has the recall >information on their website, and there are a list of titles that are >affected by this software. Ok the saga is not over yet it seems that some of Sony's DRM source code was ripped off from an open source project. So Sony's copyright protection violated copy right protection!
From PC Pro: "If Sony BMG was hoping that the controversy surrounding its copy-protected CDs was going to die away, it was reckoning without infamous hacker Jon Lech Johansen, better known as DVD Jon. It seems that the XCP software from UK company First4Internet that Sony had been using to prevent unauthorised copying of its music CDs, until it agreed to recall some 4.7 million discs, contains code 'infringing the copyright of several open source projects', Johansen notes in his blog. This includes code that he himself wrote for VLC, a free cross-platform media player.
The code was uncovered by Finnish software developer Matti Nikki, who also discovered other copyright violations."
I hope the lawsuits go on for years. Sony needs to be kicked hard for this fiasco. This story seems to have taken on a life of its own. -- MZ
Visit my website: http://www.mzuschlag.com
MikesBrain - 18 Nov 2005 21:08 GMT 2005-11-18, Responding to Mary Z...
[...]
> From PC Pro: > "If Sony BMG was hoping that the controversy surrounding its [quoted text clipped - 12 lines] > I hope the lawsuits go on for years. Sony needs to be kicked hard > for this fiasco. This story seems to have taken on a life of its own. Nobody for kicking Micro$oft then? ;\
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Have a nice day, it really does do you good! :)
Mary Z - 22 Nov 2005 20:37 GMT > I hope the lawsuits go on for years. Sony needs to be kicked hard >for this fiasco. This story seems to have taken on a life of its own. Ok the latest update the state of Texas and the Electronic Frontier has taken Sony to court for spyware. From the LA Times:
Sony BMG Sued Over Anti-Piracy Software The music label's system for protecting its CDs allegedly weakens a computer's security.
By Charles Duhigg, Times Staff Writer
A California-based digital-rights group and the Texas attorney general sued Sony BMG Music Entertainment on Monday for selling compact discs with anti-piracy software that allegedly leaves computers vulnerable to hackers and viruses.
The cases highlight the narrow line walked by the recording industry as it experiments with ways to deter bootleggers. To be effective, copy-protection systems must be tough to crack. But software that's too intrusive risks alienating music buyers as Sony BMG's so-called XCP technology has. .... Texas Atty. Gen. Greg Abbott said at a news conference to publicize his suit that Sony BMG "hides on your computer secret files and then they stick it to you by making your computer vulnerable to things like viruses, spyware and even Internet-based crime." He wants the company to pay $100,000 for every time a Texas computer user downloaded the software.
A similar lawsuit filed by the Electronic Frontier Foundation alleged that Sony BMG violated California's consumer protection and unfair business practice laws by not adequately disclosing the effects of XCP-enabled discs. In addition, two lawsuits against Sony BMG seeking class-action status are pending in California and New York.
A representative for Sony BMG said the company did not comment on pending litigation, but would cooperate fully with Abbott in resolving the situation.
Hooray Sony is receiving their just rewards..... a solid Drming?
Visit my website: http://www.mzuschlag.com
Cooly - 23 Nov 2005 04:27 GMT Mary, You should check out the security groups at news.grc.com It's a free news server with groups discussing many topics, but particuarly security. The Sony fiasco has been a hot topic the last two weeks. Here's a link telling about them. http://www.imilly.com/noregrets Cooly
>> I hope the lawsuits go on for years. Sony needs to be kicked hard >>for this fiasco. This story seems to have taken on a life of its own. MikesBrain - 23 Nov 2005 11:40 GMT 2005-11-22, Responding to Mary Z...
>> I hope the lawsuits go on for years. Sony needs to be kicked hard >>for this fiasco. This story seems to have taken on a life of its own. [quoted text clipped - 5 lines] > The music label's system for protecting its CDs allegedly weakens a > computer's security. And still not a squeak about the company that sells the SOFTWARE that can be compromised in this way? (Note: WinDOHs is the ONLY system you can do this kind of thing to like this.)
Are we missing a HUGE point here perchance? ;\
If you buy a house with no back door lock and it gets burgled, while its obvious the burgler is a criminal, would it not also make sense to sue the house builder for incompetant design and construction? Especially if its only YOUR house getting burgled? 8(
Or better still, move house?
...
http://tinyurl.com/afc7p "Concepts of file permissions"
...explains the basics of something WinDOHs systems don't use. There are more things to understand when asking "Why is WinDOHs still so easy to hack?", but this will give you a clue-for-starters.
...
There is a defense Sony can/will use here, and that is that WinDOHs users are partially responsible for their own system compromises by using an OS as heavily documented as a security risk as WinDOHs still is. (Plus the Sony/BMG EULA of course, which won't be mentioned until its bail-out time.)
It won't be worded quite like this of course, but keep your eye on the news, it'll appear soon enough. ;)
(Ain't had this much fun since the SCO debacle! :)
Mike@N.UK
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Schauen Sie immer auf der hellen Seite des Lebens! :)
spodosaurus - 23 Nov 2005 13:17 GMT > 2005-11-22, Responding to Mary Z... > [quoted text clipped - 22 lines] > > Or better still, move house? Why not just fix the bloody door?
 Signature spammage trappage: remove the underscores to reply
I'm going to die rather sooner than I'd like. I tried to protect my neighbours from crime, and became the victim of it. Complications in hospital following this resulted in a serious illness. I now need a bone marrow transplant. Many people around the world are waiting for a marrow transplant, too. Please volunteer to be a marrow donor: http://www.abmdr.org.au/ http://www.marrow.org/
MikesBrain - 23 Nov 2005 15:12 GMT 2005-11-23, Responding to spodosaurus...
>> 2005-11-22, Responding to Mary Z... >> [quoted text clipped - 24 lines] > > Why not just fix the bloody door? Great idea!
However... to push the (still practical) analogy a tad further and reiterate my point in more detail...
What happens if the walls are so thin you can punch through them? Or the hinges are so cheap you can virtually pull the door out by hand? Or the Windows are so easy to get through its hardly worth locking the crappy door?
And how about those shared attic spaces? What if your next burgler comes through from inside next door's house? Or crawls through the underneath and pops up in your kitchen?
Your wonderful idea, unfortunately, would only work if the rest of the house was securable too.
Lets draw a more detailed picture here...
Two houses.
One has a typical layout, meaning once a burgler is in the front door, the back door, a window, or whatever, they're in and pretty much free to do as they like.
Now add a party full of house guests, who will inevitably invite THEIR freinds, and a few gate-crashers while the party continues.
Any suggestions as to how to hold on to your family silver in this house?
The other house was built to be secure.
To get in it at all, you have to get past the scanners that surround it. Fail this test and the house auto-locks. No way in. You'll get recorded trying as well, and reports sent to some other place.
Then, assuming you got to the front door, as trying anything else would trigger those alarms and protection devices, you'll need to convince it that you are who you say you are. Faking it MAY get you into the hallway, but this may be a containment trap (search "honeynet").
Then, IF you have a set of permission already allowed in the house database, you can start to acces the areas and things you have permission to access. Try switching on a light you don't have permission to use, and you may be lucky and get a caution its not your light. You may not even get to see the switch however.
Try accessing the house's database, again, you might get a warning, and certainly will be recorded and tracked, and a record of your activities sent somewhere.
Actually manage to break into something, or figure out a trick to get you past a door that does not have your name on it, and guess what, alarms and recordings, and probably a system shutdown if you push any harder.
Should you come back to this house, there's also a pretty good chance it will recognise you, deny access (or treat you to a "honeypot") and record where you came from for the benefit of the admin/engineers. You won't know how many mistakes it will allow you. It won't be many.
Try forcing a lock, and hear those bars drop behind you.
Try breaking a window. What window? >:)
Now which house would you keep your family silver in?
And which one would you let Cousin Sony into? (Obvious answer right? But the point is good. ;)
So my point here is to outline the fact that IF you have a house like the first example, its no surprise it got burgled. The main problem with the Sony thing seems to be that people got TOLD about it. This kind of thing is going on ALL THE TIME! All those Windows Freebies, M$ updates, other company's products, are all doing the same thing, stealing data from your computer, collating complex "demographic data" about you, but nobody seems to worry.
People don't usually worry because nothing TELLs them to worry. No "You have been hacked and your ID recorded in detail by a private commercial operation" warning messages, no "Microsoft issue yet another serious security warning!" (That'll be the day huh?)
What Sony have done is not new, its not even clever. The ONLY thing they did wrong was risking exposing how OPEN a Win_d'o$ OS is, and BillyCorp understandably got a bit pissed off at this.
So, does THAT answer your question about
"Why not just fix the bloody door?"
...perchance?
8)
http://tinyurl.com/aw52k
...should give you an idea of what you're missing with a Win_d'o$ OS. (There's plenty more sources of info available should you wish to learn more.)
Mike@N.UK
P.S. House number two is free, and you can customise it too! :)
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Schauen Sie immer auf der hellen Seite des Lebens! :)
Gwen Love - 23 Nov 2005 18:03 GMT Mike, I bet your brain is tired after thinking all that up! Gwen
> 2005-11-23, Responding to spodosaurus... >>> 2005-11-22, Responding to Mary Z... [quoted text clipped - 144 lines] > * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt > - Schauen Sie immer auf der hellen Seite des Lebens! :) MikesBrain - 23 Nov 2005 20:25 GMT 2005-11-23, Responding to Gwen Love...
[...]
>> So, does THAT answer your question about >> [quoted text clipped - 12 lines] > Mike, I bet your brain is tired after thinking all that up! > Gwen It was such a good question, it deserved the effort. :)
Actually, my biggest problem is cutting things back. The original post needed some heavy snipping to get it down to it's eventual size. ;)
As for a tired brain, its me that gets tired. My brain just keeps running, night and day, week after week, month after month, year after year, planet after planet....
er... ignore that last bit ok? Beep.
Mike@N.UK (Not an alien honest! :)
 Signature ---- * MikesBrain+WebStuff @ http://tinyurl.com/5ayqt - Schauen Sie immer auf der hellen Seite des Lebens! :)
|
|
|