Comments on: The Sony BMG Rootkit Fiasco

By: Michael A. Iacono

Michael A. Iacono — Fri, 16 Jun 2006 14:06:22 +0000

Dear Charles,

Let’s be fair. Users cannot expect to get music for free online for the rest of eternity. As a lawyer and composer/producer myself, I can assure you that it takes a lot of money and effort to produce a serious album. Every sensible person knows this. And we do not steal the money or get the equipment and services for free. Composers and producers are not slaves, but even slaves were at least fed and lodged by their masters. Emerson’s law of compensation thus dictates that the fools who, today, insist on getting away with theft will, tomorow, have to pay a price in one way or another. If composers and producers are over-exploited, society will have to pay a price, just as it does when any other aspect of nature is abused (eg. rainforests, fisheries, etc.). What that price will be is presently unknown. DRM -and the laws governing it- should strive for an equitable technical and legal balance between the rights of composers/producers and users. Justice for all, n’est-ce pas?

Best regards,

Michael A. Iacono, B.A., B.C.L., LL.M.

By: Charles

Charles — Sun, 04 Dec 2005 22:04:01 +0000

The story continues in this excerpt from my review of a recent Sony BMG rootkit overview article, which follows (from Current Cites 16, no. 11 (2005).

Geist, Michael. "Sony's Long-Term Rootkit CD Woes" BBC News (21 November 2005)(http://news.bbc.co.uk/1/hi/technology/4456970.stm). - In this article, Michael Geist, Canada Research Chair in Internet and E-commerce Law at the University of Ottawa, overviews the Sony BMG "rootkit" fiasco. . . . The IT industry ramped up efforts to eradicate the rootkit (e.g., see "Microsoft Will Wipe Sony's 'Rootkit'"), and Sony BMG offered a First4Internet uninstaller. Unfortunately, the Sony BMG uninstaller created new security holes (see "Sony's Web-Based Uninstaller Opens a Big Security Hole; Sony to Recall Discs"). And the uninstaller for the SunnComm MediaMax RRM system also opened security holes (see "Not Again! Uninstaller for Other Sony DRM Also Opens Huge Security Hole"). To top it off, Sony BMG's rootkit may be violating some copyrights (see "Does Sony's Copy Protection Infringe Copyrights?"), and Sony BMG may have known about security issues before in advance of the Russinovich disclosure (see "Sony BMG's Costly Silence"). Believe it or not, there's more to the story. Geist's recap is the best I've seen so far. . . . (If you want to see if you have bought a rootkit CD, check out the Sony BMG list.)

By: Susan

Susan — Sat, 03 Dec 2005 04:57:01 +0000

$ony has destroyed any trust I had for their product. I am not overreacting, either. I tried to play the Santana “All that I am” album on my PC while working on a project for work, and the autorun feature came up. I don’t install things on my machine until I am sure of them, so I opted for “Do not Install” and went about my business.
I have since discovered that a program is instantiating every time I boot and is sending information to $ony. However, I did not elect to install the software and have banished the CD to the car CD player. Why does $ony want to collect data on my computer usage AFTER I elected NOT to install their software or use their CD on my computer? And, after I read information that stated that no data gets transmitted anywhere?
Why did they lie to me?
Now I get to spend countless hours blasting my hardrive back to the stoneage and then reinstall all of my software and recover my data. Will $ony pay me for my time? Or are they too concerned with their profit$ to give a crap about their customers?
They will never sell me anything again, not BMG, Arista or any electronics. If it is only made by $ony, I can live without it.
If there is a class action suit going in VA, count me in.

By: Mark Lyon

Mark Lyon — Sun, 20 Nov 2005 04:27:49 +0000

At least two class action lawsuits have been filed on behalf of Sony BMG Music Entertainment customers who were infected with the First 4 Internet Rootkit. Users who were infected do not have to wait for a class action to make its way through the courts, they can sue on their own in Small Claims Court.

For more information about the Sony BMG lawsuits, and about filing a lawsuit in your local Small Claims Court, visit SonySuit.com.

By: Norma

Norma — Thu, 17 Nov 2005 16:57:02 +0000

Although there’s much I don’t understand, you’ve helped a lot. I’ve linked to this rather than try to explain. Read Sony’s apology from yesterday.