Full Metal Jacket: John Gruber’s [endless] review of the/his new 15-inch PowerBook. You’d better have a good hour to kill, though, to read the whole thing.
Are you already infected? A list of titles from Sony with the Aries.sys/XCP rootkit. I’m glad I don’t buy CD’s anymore, because I own some of these in AAC format.
A followup on my post yesterday about the Sony rootkit issue, and why the DRM war is everyone’s battle.
Where do I begin with this? Sony has a massive PR mess on their hands, one that could potentially spell disaster for their BMG division.
I was, as confessed, a wee bit off on the details in my last post. After investigating further I now understand the rootkit nature and the [admitted] reason for the software in the first place. Let’s rehash (again), shall we:
- A rights-protected CD from Sony BMG is bought and placed in a computer CD drive
- The CD can be copied to three other “backup CD’s” but isn’t able to be played by Windows Media Player or any other CD player software but instead:
- Asks to install and use its own software to play the CD (see the ELA)
- The installer places more than the named player on the computer, but also installs a rootkit, which cloaks Sony’s DRM software and a process called Aries.sys
- Attempts to uncloak and unload the Sony DRM result in loss of CD drive operation (which can be restored with genius-like care and strategy)
Now here’s where it gets interesting because, as Mark points out, not only is this rootkit undisclosed, but there’s also no way to effectively uninstall the software. And Sony has yet to come clean about it!
Since the story broke Sony (or First 4 Internet, the developers of the Sony DRM) has released a “Service Pack 2” which claims to “patch” the problem, but it only updates the Sony DRM and can potentially crash the system when unloading the drivers. Yeah, nice fix. Most users don’t even know there’s a problem (since it’s a rootkit and hides every evidence of its existence).
And there’s still no uninstaller — at least not one readily available to the public!
So here we are, midway through November, and still no formal apology or fix from Sony or F4I. Here’s what Mark has to say (emphasis mine):
… the EULA does not disclose the software’s use of cloaking or the fact that it comes with no uninst facility. An end user is not only installing software when they agree to the EULA, they are losing control of part of the computer, which has both reliability and security implications. There’s no way to ensure that you have up-to-date security patches for software you don’t know you have and there’s no way to remove, update or even identify hidden software that’s crashing your computer.
Instead of admitting fault for installing a rootkit and installing it without proper disclosure, both Sony and First 4 Internet claim innocence. By not coming clean they are making clear to any potential customers that they are a not only technically incompetent, but also dishonest.
Then there’s the quote/soundbite from Sony Global Digital Business prez:
Most people, I think, don’t even know what a rootkit is, so why should they care about it?
As one commenter said, that’s like saying, “most people don’t even know what a thermite grenade is, so they won’t care if an active one is underneath their pillow.”
It gets even worse, though, because Sony is making this crap SOP before the end of the year, and others are following suit.
This gets back to my previous post regarding the nature of DRM and the war that’s brewing. Make no mistake, our freedoms, be they digital or otherwise, are being threatened. It goes beyond being able to burn our own CD’s or listen to music; it stems all the way to the way we interact with each other online, the ability to download files, and even ownership of content we’ve purchased.
Here’s the doom and gloom: The water’s already heating up, and if we’re not careful to take action, we’ll be boiling before we know it. We will be living in a rental world, where we own nothing and everything comes with a pricing scheme that rises and falls based on the whims of CEO’s and “creators” of content. The liberties we now have (to watch TV, record shows, buy and play movies, buy and play music, et al.) will be told of in stories, and remembered as the days of freedom and choice.
- We will no longer be able to show our friends our favorite track on the new Dave Matthews CD because our alloted playbacks have expired.
- We will miss the cliff-hanger episode of our favorite show because even though we TiVo’d it, the system deleted it after a predefined time period, and we forgot to watch it before it had.
- We will have to pay for each time we play a song, whether in the car, on iPod, from computer, as ringtone, or otherwise.
- We will have to pay for every time we watch a DVD
- We will have to pay extra for the burger at Red Robin because the franchise has to pay for each show on each TV they display, and each song that’s played, every time it’s played.
- We will no longer be able to keep our home movies, because the maker of the camera we used embedded a destruction algorithm in the media that, if not paid for, will corrode the data.
The possibilities go on, and get darker. Is DRM by nature evil? No. But just like money, what can come from the love of it, is evil. That is why this Sony thing scares me so much; and why I’m boycotting them. Once a company has become so paranoid about protecting their cash flow that they lower themselves to criminal-type methods of retaining control, they must be boycotted.
November 8, 2005 Rootkit
Thomas Hesse, President of Sony’s Global Digital Business, is not helping Sony clean up the mess they’ve made with the DRM rootkit issue. He’s quoted in this NPR brief as saying:
Most people, I think, don’t even know what a rootkit is, so why should they care about it?
Well, Mr. Hesse, you’re partially right. I had no idea what a rootkit was … prior to two weeks ago. Now, however, I’m very aware, and care a great deal about it. I think the world’s about to find out what a rootkit is, too, and I think your company stands to lose a lot if you don’t shut your yapper and start loosening your grip on rights management.
Just for the sake of review of my readership, here’s a recap:
- Sony puts DRM’d CD’s on the market that …
- Background-install a rootkit on PC computers (after a brief ELA message) that …
- Monitors which tracks are played and whatever other information might be “relevant” until …
- Mark’s Sysinternals reports that he’s discovered the rootkit forcing …
- Sony [or Sony’s third-party developer] to issue a patch that supposedly “fixes” the rootkit, but in turn causes …
- CD drives to be rendered inoperable.
At least that’s how I understand the issue. The details may be sketchy, but who cares. The bottom line is that Sony is attemping to usurp the music market (from Apple) by using tactics only comparable to priracy. This crosses lines of ethical business practice, and in my opinion, should only be responded to in a boycott of the company and its products.
The DRM fight is just heating up and there’s already losses on both sides. Hollywood, Nashville and companies like Sony (who make both the product and the content through their artist label) are bolstering their resources and throwing money at lawyers and technology in order to control their so-called empire of entertainment. At the same time, companies like Apple are taking advantage of this open opportunity and introducing new business models that are (seemingly) tolerated by consumers. The iPod is great not just because it’s white and cute; it’s an interface that works with DRM and still gives the consumer [at least the illusion of] ownership.
It’s a lose-lose for companies that don’t change their practices and adapt. Either they’ll waste their money on containment methods, or they’ll lose their market to companies that have already adapted. And it’s not enough to just adapt anymore: Now they must innovate. But that’s for another post …
DRM this, Sony! “Companies: You will never get the increasingly technology-aware, mass media-consuming populace to support your right to copy protection or digital rights management unless they are on your side.” The Sony boycott is in affect.