Sony, DRM, rootkit i virusi
)Slučaj već desetak dana izaziva pažnju nakon što je dr. Mark Russinovich u svom blogu objavio svoje nalaze.
Ovo je siže događaja:
Citat:
The DRM software Sony has been shipping on many CDs since April is cloaked with rootkit technology:
Sony denies that the rootkit poses a security or reliability threat despite the obvious risks of both
Sony claims that users don’t care about rootkits because they don’t know what a rootkit is
The installation provides no way to safely uninstall the software
Without obtaining consent from the user Sony’s player informs Sony every time it plays a “protected” CD
Sony has told the press that they’ve made a decloaking patch and uninstaller available to customers, however this still leaves the following problems:
There is no way for customers to find the patch from Sony BMG’s main web page
The patch decloaks in an unsafe manner that can crash Windows, despite my warning to the First 4 Internet developers
Access to the uninstaller is gated by two forms and an ActiveX control
The uninstaller is locked to a single computer, preventing deployment in a corporation
Consumers and antivirus companies are responding:
F-Secure independently identified the rootkit and provides information on its site
Computer Associates has labeled the Sony software “spyware”
A lawfirm has filed a class action lawsuit on behalf of California consumers against Sony
ALCEI-EFI, an Italian digital-rights advocacy group, has formally asked the Italian government to investigate Sony for possible Italian law violations
Već se pojavio prvi virus koji iskorišćava ovaj rootkit.
Odličan pregled je dat u The Inquirer-u
Sa EFF-a:
Citat:
If you thought XCP "rootkit" copy-protection on Sony-BMG CDs was bad, perhaps you'd better read the 3,000 word (!) end-user license agreement (aka "EULA") that comes with all these CDs.
First, a baseline. When you buy a regular CD, you own it. You do not "license" it. You own it outright. You're allowed to do anything with it you like, so long as you don't violate one of the exclusive rights reserved to the copyright owner. So you can play the CD at your next dinner party (copyright owners get no rights over private performances), you can loan it to a friend (thanks to the "first sale" doctrine), or make a copy for use on your iPod (thanks to "fair use"). Every use that falls outside the limited exclusive rights of the copyright owner belongs to you, the owner of the CD.
Now compare that baseline with the world according to the Sony-BMG EULA, which applies to any digital copies you make of the music on the CD:
1. If your house gets burgled, you have to delete all your music from your laptop when you get home. That's because the EULA says that your rights to any copies terminate as soon as you no longer possess the original CD.
2. You can't keep your music on any computers at work. The EULA only gives you the right to put copies on a "personal home computer system owned by you."
3. If you move out of the country, you have to delete all your music. The EULA specifically forbids "export" outside the country where you reside.
4. You must install any and all updates, or else lose the music on your computer. The EULA immediately terminates if you fail to install any update. No more holding out on those hobble-ware downgrades masquerading as updates.
5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm.
6. The EULA says Sony-BMG will never be liable to you for more than $5.00. That's right, no matter what happens, you can't even get back what you paid for the CD.
7. If you file for bankruptcy, you have to delete all the music on your computer. Seriously.
8. You have no right to transfer the music on your computer, even along with the original CD.
9. Forget about using the music as a soundtrack for your latest family photo slideshow, or mash-ups, or sampling. The EULA forbids changing, altering, or make derivative works from the music on your computer.
Ono što je još zanimljivo je da je ovu vest praktično nemoguće naći na CNN-u (pitam se zašto
hint)Zaključiću ovaj post sledećim citatom
Citat:
A cursory check of the file trading networks shows that the Van Zant album is available for download on a whim. The pirates who don't want to pay will have no trouble getting it, but those who abide by the law will get punished.
[Ovu poruku je menjao mannex dana 10.11.2005. u 21:46 GMT+1]
siptoP
Re: Sony, DRM, rootkit i virusi
Re: Sony, DRM, rootkit i virusi