sony spyware in cds

19th Nov 2005 11:04 #1

Member

Not sure if this is the right post, but found this article for Sony Canada from CBC:

Thousands of faulty CDs sold in Canada
Last Updated Sat, 19 Nov 2005 10:26:09 EST
CBC News
About 120,000 recalled Sony BMG CDs that create security glitches were sold in Canada, the company said Friday.

The discs contain XCP software, which is used to stop music piracy. But it leaves behind spyware, making computers that play the disc susceptible to hackers and viruses.

The company has not said which performers' albums are affected. However, it does say 37 titles are involved and a list will be posted on Sony BMG's website at http://cp.sonybmg.com/xcp on or before Monday.

A CD exchange program will also be implemented. In the meantime, consumers can identify if they have an affected CD by checking the packaging. They should look on the back side for a box labelled Compatible With. Discs with the XCP software will have the following URL at the bottom of that box: http://cp.sonybmg.com/xcp.

The company has also asked its retail partners to remove all unsold CDs with XCP software from their store shelves and inventories.

Sony BMG has yet to determine exactly where in Canada the 120,000 discs were sold. However, it stressed that most of its catalogue sold here utilizes an "alternative copy protection technology" and is safe to use.

Sony BMG has recalled all the discs. About 4.7 million had been made and 2.1 million sold, including the 120,000 in Canada.

The hidden XCP software, called a rootkit, first became public two weeks ago after a computer programmer noticed it and posted details on his blog. The company immediately created a patch to address the issue, but that resulted in another security hole.

INDEPTH: Sony and the rootkit

The XCP software is part of the music industry's strategy to add copy controls to albums. The technology allows labels to control how the music is used and how often it's copied or burned.