Rootkits All Around: Universal Music Has It Too

from the no-surprise-there dept

I doubt this is surprising to anyone. But, following all the talk about Sony's rootkit-style copy protection found on some music CDs, people are looking to see who else the copy protection company works with. Riley turned up a press release, showing that the company is also outfitting certain Universal Music Group CDs with their special brand of malware copy protection -- even highlighting in the announcement that it's the same as found on SonyBMG CDs. Of course, given Universal Music's CEO Edgar Bronfman's history of believing he must control everything, it's no surprise at all that they'd be using this too. Given the lawsuits against adware firms for sneaky installs (and, recognizing that this rootkit stuff is actually much more dangerous by opening up additional holes in your computer), doesn't it seem like these record companies have just opened themselves up to a serious legal liability? They installed something on computers without asking or alerting you. They make it very, very, very difficult to remove. They break certain features of your computer and they open up a major security vulnerability that others can exploit. And then they call all their customers criminals. Can't imagine why they're having trouble with their existing business model.

Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    jan, Nov 2nd, 2005 @ 11:34am

    Rootkits All Around

    First the news about Sony, now this. What/who next? Who can we trust? Call me paranoid, but I won't be buying any music CDs from anyone until the dust settles. I don't NEED to buy any music right now; I DO need a functional and non-compromised operating system.

     

    reply to this | link to this | view in thread ]

  2.  
    identicon
    lar3ry, Nov 2nd, 2005 @ 11:40am

    Re: Rootkits All Around

    There's some good ways to avoid root kits that the companies are installing...

    Welcome to Linux...

    Welcome to OS X...

    Farewell, Windows...

    [smile]

     

    reply to this | link to this | view in thread ]

  3.  
    identicon
    SV, Nov 2nd, 2005 @ 12:40pm

    Re: Rootkits All Around

    I'm getting slightly tired of comments that switching to Linux, OSx or whatever is a solution. It's a temporary solution simply since the DRM doesn't target those OS (since the majority is on Windows). <br><br>If we all switch to Linux, next thing we know is we'll have F4I working on a Linux version of their crapware.

     

    reply to this | link to this | view in thread ]

  4.  
    identicon
    Weebit, Nov 2nd, 2005 @ 12:47pm

    Re: Rootkits All Around

    You can't trust anyone. It's getting worse each year that passes. It's like no one thinks the computer user has any rights. They forgot that users paid money for these machines and they are not going to tolerate software companies turning their computers into drones. I really suggest a boycott of the whole music industry. Force them into setting up some rules that will benefit the public and they can live with. I am not purchasing another CD till something is done. This includes a very large fine placed on Sony and BMG for the harm they have caused. Don't forget the misuse of their DRM. Or for the fact that Rootkits doesn't belong in a legit software. Maybe that was our first clue that Sony BMG was up to no good?

     

    reply to this | link to this | view in thread ]

  5.  
    identicon
    somebody, Nov 2nd, 2005 @ 1:18pm

    Re: Rootkits All Around

    Sony SUcks, we should all bycott their all products.

     

    reply to this | link to this | view in thread ]

  6.  
    identicon
    james, Nov 2nd, 2005 @ 1:22pm

    No Subject Given

    I bought a Mac, thinking my problems would all go away, and now I'm bored, cause I can't figure out what to do with it.

    What does one do with a Mac?

     

    reply to this | link to this | view in thread ]

  7.  
    identicon
    Ron, Nov 2nd, 2005 @ 1:51pm

    Re: No Subject Given

    "I bought a Mac, thinking my problems would all go away, and now I'm bored, cause I can't figure out what to do with it."

    You become a Quark snob.. :)

     

    reply to this | link to this | view in thread ]

  8.  
    identicon
    Roger, Nov 2nd, 2005 @ 2:25pm

    Re: No Subject Given

    You can post on blogs and whine about how bored you are. Oh wait, you've already figured out how to do that.

    Well, that's about it. Computers aren't good for anything else but whining.

     

    reply to this | link to this | view in thread ]

  9.  
    identicon
    Y Pennog Coch, Nov 2nd, 2005 @ 3:05pm

    Re: Rootkits All Around

    It's not a temporary solution, because on Linux and OSX you normally run as a limited user. The malware can't install itself unless the current user has admin rights.
    But you're right to be tired. The simplest answer is to (upgrade to WinXP if you're still using 9x/ME and) learn how to work with limited user accounts.
    OTOH, if Big Music's next step is to add privilege escalation exploits to the malware, then yes, it was a temporary solution :-O

     

    reply to this | link to this | view in thread ]

  10.  
    identicon
    Don Phillips, Nov 3rd, 2005 @ 2:33am

    Illegal

    This goes way beyond simply setting a cookie in someone's internet files. Rootkit's are a violation of a user's OS. The system techs at Sony are trying to sell us on an illegal hijack program. Say I pay good money for my Operating System. I can tweak it, modify it or change it any way I please. This person comes along and corrupts it. Their software runs without my permission and removing it might destroy the product I purchased. I would consider this illegal, yes?
    Found a reply website to Sony:

    http://cp.sonybmg.com/xcp/english/form2.html

     

    reply to this | link to this | view in thread ]

  11.  
    identicon
    Perihelium, Nov 3rd, 2005 @ 4:16am

    Re: Illegal

     

    reply to this | link to this | view in thread ]

  12.  
    identicon
    Riley, Nov 14th, 2005 @ 12:53pm

    RE: Universal Music using XCP

    It appears that they've removed that original article about Universal Music using XCP.

    http://www.xcp-aurora.com/press_article.aspx?art=aug_05_art3

    No longer exists.

     

    reply to this | link to this | view in thread ]

  13.  
    identicon
    Mike, Nov 14th, 2005 @ 5:41pm

    Any other offenders?

    Does anyone know if KODAK EasyShare Picture CD software uses the same type technology?
    I had a great deal of difficulty deleting their software after it installed and changed some of my settings without permission, particularly, loading itself into my startmenu without permission.
    While the EasyShare software is sitting in the faststart tray, the system runs at sub-286 speeds. When EasyShare is closed, the system returns to it's previous zippy self. My skillz are lacking, but it appears to use a lot of resources.
    KODAK EasyShare Picture CD software came with both a Kodak Picture CD received as a result of Kodak film processing, and a Kodak camera that we purchased recently, so there is the potential for it to be installed on a lot of systems.
    Nikon also distributes software with their digital cameras, but I haven't tried to remove it yet.
    Mike

     

    reply to this | link to this | view in thread ]

  14.  
    identicon
    C C, Nov 15th, 2005 @ 1:10am

    How many rootkits are there?

    1.XCP
    2.SunnComm
    3.??? "Specific Harm/Aware"
    4.??? ??? ???
    I got #3. It's rootkit installed AOL to get internet access. AOL or it's logo was not anywhere on the CD label. I have verified that the CD installs AOL and hides files but does not make $SYS$ files like XCP. It also wrecked the PC.

    Viruses make great copy protection.
    If you don't have one, you don't want a copy.
    But they don't sell very well.

    BIOHAZARD WARNING:
    DON'T PLAY CD'S ON INDUSTRIAL MACHINES!

     

    reply to this | link to this | view in thread ]

  15.  
    identicon
    C C, Nov 15th, 2005 @ 1:21am

    Re: Any other offenders?

    Get a photo printer that doesn't connect to the PC.
    It uses flash cards.
    That way, you'll never see your picture by accidentally clicking on a perv site.

    Every now and then some spyware has hit the firewall when I was looking at digital camera pictures.

     

    reply to this | link to this | view in thread ]

  16.  
    identicon
    Miffe, Nov 15th, 2005 @ 8:38pm

    what to do with a mac?

    You have Garageband bundled with it, right? Use it to create your own music and become a billionaire!

     

    reply to this | link to this | view in thread ]

  17.  
    identicon
    Da_ALC, Nov 18th, 2007 @ 5:16pm

    Re: Re: Rootkits All Around

    Lol you poor loser.. If everybody used those then the rootkit would be made for those instead... along with alot more obvious statements.

     

    reply to this | link to this | view in thread ]

  18.  
    identicon
    Da_ALC, Nov 18th, 2007 @ 5:18pm

    Re: Re: Rootkits All Around

    I agree and have been for years and tell people this on a regular basis. HOPE YOUR READING THIS SONY.

     

    reply to this | link to this | view in thread ]

  19.  
    identicon
    Da_ALC, Nov 18th, 2007 @ 5:21pm

    Re: No Subject Given

    Lol, quark is such a lame piece of software to.
    And garageband is as pro as dance ejay or fruityloops.

    Most people who do things with Macs, are emulating windows to do it.
    Sorry James, youve learned the hard way.

    Dont get me wrong, Mac and OSX is sweet for the little you can do with it. The very very little.

     

    reply to this | link to this | view in thread ]

  20.  
    identicon
    Da_ALC, Nov 18th, 2007 @ 5:29pm

    Re: How many rootkits are there?

    Haha fair comment! If you have a PC and are online why would you be wanting to buy Sony published music anyway?.. They lock their artists into terrible contracts, exploit every step along the way, from factory to consumer... Sony deserves no money.

    On the AOL note.. I have seen a few things that come with "free AOL" bundled but not labelled.. Usually its just an install exe and a shortcut to, but I wasent digging about so might have been more.
    In thit case its prob legal as its not actually installing, but placing an installer. Besides after the whole IE vs Netscape ordeal, isnt anybody allowed to stick what they want anywhere?

     

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
Advertisement
Essential Reading
Techdirt Deals
Techdirt Insider Chat
Techdirt Reading List
Advertisement
Recent Stories
Advertisement
Support Techdirt - Get Great Stuff!

Close

Email This

This feature is only available to registered users. Register or sign in to use it.