Slashdot Mirror


Sony Music CD's Contain Mac DRM Software Too

brjndr writes "A MacInTouch poster has found that certain Sony CD's also contain a smaller extra partition for 'enhanced' content. Running one of the applications found within this partition installs kernel extensions containing DRM software by SunnComm. In Sony's defense you're told what is being installed within a EULA which pops up when the program is loaded. Thankfully we all read our EULAs completely."

399 comments

  1. Think different... by Space+cowboy · · Score: 5, Interesting

    [See my journal entry for my previous comments on this]

    To summarise: it's impossible to protect against truly clueless users without severely inconveniencing everyone else, but Mac OS X at least lets you know something dodgy is going on (a request for administration rights, just to play a CD, say what ? No *other* CD's needed that!) I guess it helps to have gorms, though...

    THM: It's a difference in attitude. It *does* make a difference.

    Simon

    --
    Physicists get Hadrons!
    1. Re:Think different... by Andrew+Tanenbaum · · Score: 3, Insightful

      After a short while, typing in your password becomes as much of an unconscious acticity as pressing "OK" on a dialog box. I think we need blinking lights, horns, mandatory timers, and permission from your sysadmin before you can do anything stupid.

    2. Re:Think different... by Space+cowboy · · Score: 4, Insightful

      Maybe there ought to be a question when you set up your mac - "rate yourself on a scale of 1-10 on how good you are with computers, and we'll adjust the system alerts accordingly"...

      I'm not *so* sure about the after-a-while thing though - I'm struggling to remember any time I had to type in the sysadmin password when I wasn't installing software. If I equate that action with installing stuff, and all I've done is put a CD in to play the damn thing, I'd be pretty curious as to why... Maybe that's just cynical old me, though...

      Simon

      --
      Physicists get Hadrons!
    3. Re:Think different... by npietraniec · · Score: 5, Informative

      If you use a mac, you'll find that you type in your password far less than you might think you would. I don't do it that often, I don't think I'm that desensitized... I don't do it that often on my linux boxes either. My roommate however tried to set up a non-admin account on his windows computer and found it impossible to get any work done without changing over to admin all the time... Worse yet, things would fail mysteriously without any inidication of what the problem was "why can't I delete my documents on my external harddrive?!?!" He was just complaining about that today.

    4. Re:Think different... by SnowZero · · Score: 4, Insightful

      Maybe there ought to be a question when you set up your mac - "rate yourself on a scale of 1-10 on how good you are with computers, and we'll adjust the system alerts accordingly"...

      You'd have to make it more of a quiz. After all, there's a lot of people that think they know everything but who really don't have a clue (Go to your local computer shop if you don't believe me). It could be pretty funny:

      (1) what does RAM stand for?
      (2) what is 0xF?
      ...

    5. Re:Think different... by ryanr · · Score: 4, Insightful

      I'm struggling to remember any time I had to type in the sysadmin password when I wasn't installing software.

      That's the problem. Clueless mac user is probably expecting to be installing software about then. The CD told them they need a player to see the dancing pigs, for example.

    6. Re:Think different... by ReformedExCon · · Score: 5, Funny

      2) is obviously a fat little squirrel. I like to draw squirrels a little thinner: 1xf

      --
      Jesus saved me from my past. He can save you as well.
    7. Re:Think different... by Anonymous Coward · · Score: 2, Insightful
      Maybe there ought to be a question when you set up your mac - "rate yourself on a scale of 1-10 on how good you are with computers, and we'll adjust the system alerts accordingly"...

      The full details would have to always be readily available, if behind a "Scary Computer Words" button. If novices have a problem, they should be able to give all the information to a sysadmin or tech support, even if they don't understand it.

    8. Re:Think different... by boisepunk · · Score: 2, Funny

      /me skims parent post
      I Agree.

      --
      main(0)
    9. Re:Think different... by Nermal6693 · · Score: 3, Funny

      I don't know what's funnier: Your post, or that it's moderated Informative.

    10. Re:Think different... by josephdrivein · · Score: 5, Insightful

      "rate yourself on a scale of 1-10 on how good you are with computers, and we'll adjust the system alerts accordingly"...

      Think what a hell would become the customer support: everytime something happens the system may respond to the user in 10 different ways.

      And if a user logs into another mac (at Internet café, library, university etc..), she well have to know if it's configured for dummies or super-geeks or whatever. I may even add that as she gets used to her mac she will want to try to step to the next level, but the user has to learn again how the system behaves.
      And so on.

      It has been proposed more than once, but I doubt it will be ever implemented, as it is a usability nightmare.

    11. Re:Think different... by tm2b · · Score: 4, Informative

      No, it doesn't.

      You are not often challenged for your password in Mac OS X. The default installation location is /Applications, which is mode 775 (meaning users can create items in the directory, but not alter files owned by someone else, including root). Most installs you simply drag an item into the Applications folder.

      If something's asking you for your password and isn't (a) your security manager wanting to fetch your keychain for a website, or (b) something that should be installing drivers, be very worried and don't type your password until you understand exactly what it's doing. My mother has to type her password so infrequently on Mac OS X that she can never remember what it is.

      Even Microsoft Office is a drag-and-drop-to-install application (as well as being a drag), ferchrisakes.

      (and mods, please mod parent down for using Andrew Tanenbaum's name).

      --
      "It is our blasphemy which has made us great, and will sustain us, and which the gods secretly admire in us." - Zelazny
    12. Re:Think different... by Jezza · · Score: 4, Interesting

      This is very true - very little Windows software can cope like this, now Windows Vista (aka Longhorn) will work like this by default, so I expect LOTS of software to fail for this reason alone. Hopefully once everything get updated for Vista we can run our XP boxes in this mode too (which will be much better.

      Someone was saying that you get so used to typing your admin password on OS X that you just do it as a reflex - that hasn't been my experience. This simple change represents a great improvement over Windows XP.

      In the case of the Sony DRM I think it quite likely that Mac OS X users will find the request for their admin password "odd" - and hopefully a significant number would refuse to give it.

      Of course some will as we all tend to trust "big names", maybe that's the real lesson here - Sony can be as evil/stupid as anyone else. And if you can't trust Sony, who can you trust?

    13. Re:Think different... by @madeus · · Score: 5, Insightful

      That's the problem. Clueless mac user is probably expecting to be installing software about then. The CD told them they need a player to see the dancing pigs, for example.

      You don't need to authenticate to install applications on Mac OS X. Installing applications - like Microsoft Office - involves just dragging the application (or the folder it's in) from the CD into the Applications folder on your hard disk. Even things like Real One Player and Windows Media Player work this way.

      When you do actually get a dialog, Mac OS X also tells you what permissions are being requested on the password dialog (e.g. full admin access, or just permission to modify a specific system setting, etc) as well as which application is requesting the permission. In reality, most of the time people see a dialog in Mac OS X which requires authentication, it's because of an interaction with the OS itself (such as changing a system setting) that the user has just performed.

      If a users sees an Application (including plugins) requesting this sort of permission that should really ring alarm bells. Only things like new drivers (e.g. for that new camera you just bought) should be asking for things like that.

      It's fair to say here is room for some improvement in the dialog in that it should better reflect this (perhaps rasing a more severe looking alert when it's anything other than the OS or bundled Application requesting any sort of privileged access, which explains something along the lines of the previous sentence).

      On the subject, it could do with some means of forgery protection (things like an embedded image in the window have been suggested) so that you can better trust it's an authentic authentication dialog. If your paranoid.

      Technically Windows allows for roughly this sort of behaviour too (that is, you should never need admin permissions to install a regular application) but the large number of badly written installers - combined with the lack of a K.I.S.S. approach in the OS - seem to have conspired to make admin level access madatory for even the most mundane tasks.

      I bet if vendors (and I include both Apple and Microsoft in that) implimented privilage dialogs that were scary and intimidating enough to users (perhaps with a default action of 'deny') 3rd party application developers wouldn't ask for them unless they really needed those permissions.

    14. Re:Think different... by tricorn · · Score: 2, Informative

      In 10.3, the group for /Applications is admin, so only user accounts that are set to be Administrators can install or remove applications. Maybe they changed this in Tiger. All of the applications I looked at are also modifiable by group admin. That's why I tell people that they should set up an administrator account, and disable it for themselves. The obvious user name, admin, is blocked by Apple's account administration routines, though (you can create it as your initial user in 10.3, but they stopped that in 10.4). Yes, normally you get a group created that is the same as your user name, but it went ahead and used "staff" instead. I suppose it is a good idea not to have something obvious as your admin account, though.

      There are very few things that you need to actually be logged in as an administrator, and even fewer where you'd need to log in as root (usually easier to just open a terminal window and use su (if you've enabled the root password) or sudo).

      I don't know about Microsoft Office, but the Office "Test Drive" behaves abominably with respect to admin rights. You basically have to install it and run it as an administrator, but the failure modes if you don't are not obviously because you're not running as the right user. Stupid stupid stupid.

      Unless you have your keychain password set to something besides your login password, so it doesn't automatically unlock it when you log in, it shouldn't even ask you for your password then. My parents usually forget their password, since it is set to auto-login for them, except when I'm visiting and using the machine (and thus either logging them out, or using user switching, either of which requires they enter their password to get back on).

    15. Re:Think different... by Anonymous Coward · · Score: 2, Insightful

      In all fairness, Windows requires admin rights for this sort of installation as well. It's just that there's an awful lot of "legitimate" software that needs admin rights as well.

      If every fifth app required you to type in your admin password when you started it, the security measure would quickly lose its effectiveness.

    16. Re:Think different... by TapeCutter · · Score: 1

      Ummm, most corporate desktop SOE's are Windows boxes, the users do not have admin rights or passwords. I am not saying account management on Windows is either good or bad, easy or hard, secure or leaky, but it certainly exists in large scale corporate networks.

      --
      And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
    17. Re:Think different... by laughingcoyote · · Score: 2, Interesting

      I bet if vendors (and I include both Apple and Microsoft in that) implimented privilage dialogs that were scary and intimidating enough to users (perhaps with a default action of 'deny') 3rd party application developers wouldn't ask for them unless they really needed those permissions.

      Still, that'll never solve the problem of the user getting used to it. "WARNING: Email attachments may contain viruses! Are you sure you want to download nakedjlo.exe??????" "Duuuh...well it must be OK, my friend sent it to me!"

      --
      To fight the war on terror, stop being afraid.
    18. Re:Think different... by neoguri · · Score: 2, Informative

      I've given crash-Mac-courses to converted family & friends and I found that the concept "when you enter your password an installer wants to change the system so beware" was an easy one to understand and remember.

    19. Re:Think different... by onlyjoking · · Score: 3, Interesting

      Exactly. Doze software often won't work unless run from an Admin account. I recently installed a Belkin wireless card for a client and it wouldn't work when the user accounts were set to Limited User. Changed to Admin and everything ran fine. Another machine with Limited User accounts gave popup error messages at login generated by a USB webcam. Switched the account to Admin and all was fine. It's ****ing madness. You have software developers who seem not to be aware of the basic architecture of the platform they develop for.

    20. Re:Think different... by hunterx11 · · Score: 2, Interesting

      On OS X, an administrator may modify files in /Applications and /Library and may sudo as root for any command. That's pretty much the long and short of it. There is no reason not to use an administrator account for day-to-day use, nor is there any reason to disable it. You probably shouldn't login as root, but root login is disabled by default anyway.

      --
      English is easier said than done.
    21. Re:Think different... by thryllkill · · Score: 0, Offtopic

      Off topic I know. I currently have mod points, 5 pieces of dead horse beating, opinionated power. I almost went and did what you suggested, since I usually just mod up and down according to other posts, but then I thought about. You're being a dick, so I modded you down. Take that fucker.

      If I were to mod the parent down because you are some how offended by his name, that would really call into question the integrity of the mod system. I don't know about you but I take my mod point resonsibilities very seriously, and from now on will not listen to "mod parent up" posts or "mod parent down". No, from now on I shall only mod up posts that support my points of view, or mod down DNF jokes, or posts that somehow oppose my own interests. Hence, you have been modded down! ...D'Oh!

      --

      Note to self: No more arguing with the faithful.

    22. Re:Think different... by rcs1000 · · Score: 4, Insightful

      So: let me get this straight, you modded the grand parent down. Then you posted a comment. Which automatically removes the moderation.

      Are you feeling OK today? Would you like someone else to help you to moderate?

      (Not me, of course, as by posting I prevent myself from moderating...)

      --
      --- My dad's political betting
    23. Re:Think different... by mpe · · Score: 1

      You have software developers who seem not to be aware of the basic architecture of the platform they develop for.

      They develop on single user standalone machines as "administrator". If you are lucky they might consider issues like "What should the program do if the registry keys it expects to be in HKLU are absent?" or "How to handle if %USERPROFILE%\Application Data\%PROGRAM% isn't there".

    24. Re:Think different... by bhtooefr · · Score: 1

      It's actually been implemented in GeoWorks/New Deal Office/Breadbox Ensemble.

      Mode 1: Minimal features, no multitasking ... ...
      Mode 3 or 4, depending on app: Full features, multitasking

    25. Re:Think different... by tm2b · · Score: 1
      I don't know about you but I take my mod point resonsibilities very seriously
      Oh, I can tell.

      In fact, I heartily encourage you to reply to every post that you moderate and explain exactly why you moderated it the way you did - that'll really help the system work!
      --
      "It is our blasphemy which has made us great, and will sustain us, and which the gods secretly admire in us." - Zelazny
    26. Re:Think different... by Einstein'sOtherWoman · · Score: 1

      I like the idea of that question. Preferably my computer would go into lockdown mode once it realized my mother was touching it. Think I'm exaggerating? This is the woman who tried to DOWNLOAD RAM. *shudder* That virus hurt... especially explaining it to the tech support guys. As a matter of fact, there should be a "How good are you at life?" quiz every morning. Failures get vaporized.

    27. Re:Think different... by AvitarX · · Score: 1

      You're not just installing putting in a CD.

      You are installing "Extra Content". The one big advantage is you can neglect to give the password to children and they can't go on a mad free stuff binge fucking your computer for good.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    28. Re:Think different... by aled · · Score: 1

      pas1234... oh wait, this is public?

      --

      "I think this line is mostly filler"
    29. Re:Think different... by arminw · · Score: 3, Interesting

      .....After a short while, typing in your password becomes as much of an unconscious acticity as pressing "OK".....

      That's why most users around here don't KNOW the admin password. When we set up brand new Macs for others, we always make at least two accounts. One for administration and the others for everyday normal users. Users who must be given the admin password are admonished NEVER to give that password unless they are expecting to be asked for it when installing or upgrading software. So far, none of them has been hit with any shady programming because of this. Unlike our Windows users, the Mac users can do everything they need to without even knowing the admin password.

      This should work in most homes, where the parents are the only one who know the master password. That way the kids can't so easily mess up the whole computer. ALL games even work just fine without the master password, once they are properly set up.

      --
      All theory is gray
    30. Re:Think different... by arminw · · Score: 2, Informative

      ....involves just dragging the application (or the folder it's in) from the CD into the Applications folder ....

      For an ordinary user, the Mac ALWAYS asks for an admin password in order to make any change to the Applications folder. If the user is dumb enough to be logged in as an admin, then it does not. Making every user only a standard user goes a long way towards preventing a messed up system. A regular user can still install some, but not all programs in their own user space. However such installs will only affect that user and not the system or other users.

      --
      All theory is gray
    31. Re:Think different... by Anonymous Coward · · Score: 0

      FYI, your rating system sounds like a patentable idea. Can you do somthing about it before you-know-who does?

    32. Re:Think different... by EzInKy · · Score: 2, Funny


      After a short while, typing in your password becomes as much of an unconscious acticity as pressing "OK" on a dialog box. I think we need blinking lights, horns, mandatory timers, and permission from your sysadmin before you can do anything stupid.


      This is why I still use su instead of sudo. There's just something about typing in the root password and handing over the keys to my box that makes my sphincter pucker.

      --
      Time is what keeps everything from happening all at once.
    33. Re:Think different... by Blondie-Wan · · Score: 1

      Perhaps the moderator(s) who called it Informative wanted to give ReformedExCon some karma for that joke, and so chose to mod it that way since Funny moderations don't bestow karma.

    34. Re:Think different... by sqlrob · · Score: 1

      Make up your mind.

      Writing /Library and /System is damn good reason *NOT* to be logged in as an admin. Code can replace other code without notification, not a good thing.

      Should you make /usr and /etc writeable to ordinary users in Linux?

    35. Re:Think different... by Varun+Soundararajan · · Score: 1

      Looks like they have made a platform independent DRM (rootkits) ;). Kudos Sony ! I for one welcome our new Platform Independent overlords!

      =====
      This space is now not blank ;)

    36. Re:Think different... by Zaplocked · · Score: 1

      Thanks for explaining the joke, I probably never would have gotten it myself, even though the last line of his post was:
      Hence, you have been modded down! ...D'Oh! .

    37. Re:Think different... by TheRaven64 · · Score: 1
      I guess it helps to have gorms

      No, you need gorms for GNUstep. On OS X you need nibs instead.

      --
      I am TheRaven on Soylent News
    38. Re:Think different... by thryllkill · · Score: 1

      Uh... I seriously did not mod anything. It was a lie. I was trying to make a funny post, but somehow made an insightful one. *shrugs* I'll take my five mod points to a front page unworthly thread and make some AC's feel good now.

      --

      Note to self: No more arguing with the faithful.

    39. Re:Think different... by mattlt · · Score: 1

      Hey, I have mod points today! Let me help out. Oops.

      --
      My signature sucks!
    40. Re:Think different... by hunterx11 · · Score: 1
      Administrators cannot write to /System, nor /usr, nor /etc without providing their password. The group admin is not the same as wheel. If installing ordinary programs required a password, then Sony's rootkit would seem no more suspicious than installing, say, a text editor. That would hardly improve security.

      The OS X setup is more like allowing a privileged class of users on Linux to install files to /usr/local.

      --
      English is easier said than done.
    41. Re:Think different... by EggyToast · · Score: 1
      Well, OS X does make a distinction betwteen administrator and root. There's actually no easy way to even stay logged in as root when you're an administrator -- every program and setting has inherent time-outs built into it.

      So most of the time someone IS going to stay logged in as an administrator. But it won't bork the system, since a user can simply enter the admin password to accomplish the exact same tasks as the administrator.

      And the admin has to enter a password whenever he messes with system folder stuff, such as changing accounts, writing to the unix core folders (/usr, /etc, all those folders that are 'hidden' from view for even the administrator in the Finder).

      An easy test that it's NOT easy to screw up an OS X system is that if you're logged in as administrator, the standard 'rm -rf /' prank doesn't work -- it forces you to sudo. You can do that the same as a user, sudo up to an admin, so there's really no inherent difference if you're the main user of a computer. Users are for "everyone else." Root is disabled as a user by default, and once you turn it on, you need to reboot the computer, hold S, and then log in as root -- not something that "joe random" is going to do if he doesn't know what he's doing.

      Of course, the big difference is that Apple understands that most people are going to be admin so they make it rather safe to be admin.

    42. Re:Think different... by CastrTroy · · Score: 1

      The one thing I noticed about windows is that Admin isn't even a true super user account. My friend set up his drive as NTFS, and started messing around with the permissions on some files. He actually managed to get some files into a state that that not even the administrator could read, write, or even change the permissions on the files. What's the point of a super user account if you don't have full power to do everything. The files were completely useless, and he couldn't do a thing about it from windows.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    43. Re:Think different... by sqlrob · · Score: 1

      Is it a good idea to browse at a level where the browser and other commonly used apps can be changed? That's a security problem waiting to happen.

      There's little lost by not running as an admin level user, because of the authentication dialogs when needed, and no real gain with the opportunity for damage.

    44. Re:Think different... by SkipRosebaugh · · Score: 1
      RTFA:
      In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext.
      So, you have to insert the CD, ignore the fact that OS X automatically launches iTunes (unless you have turned that off or specified some other application), manually find, and manually run this program. Nobody in their right mind will think they have to use this program to play the CD. About the only semi-sane reason for running the program is "I wonder what this will do," except you should never enter your admin password after thinking that.
    45. Re:Think different... by zeugma-amp · · Score: 3, Insightful

      Jezza, this is not intended to be a personal slam on you. It's more of a general comment.

      This is very true - very little Windows software can cope like this, now Windows Vista (aka Longhorn) will work like this by default, so I expect LOTS of software to fail for this reason alone. Hopefully once everything get updated for Vista we can run our XP boxes in this mode too (which will be much better.

      Hope seems to spring eternal in the MS windows world. I've been hearing people say essentially the same thing since NT3.5. It hasn't happened yet, and unfortunately I don't believe it's going to happen with "vista" either. I just want to know how long people are going to fall for this "the next version will fix everything" line we constantly hear from microsoft apologists.

      I have nothing but Linux running in my household (1 desktop and 3 laptops). Sometimes my wife is annoyed that she can't do something right out of the box that windows lets you do, but Linux does not. This especially true of permissions issues. What she doesn't realize is that many times, what she'd wanted to do wouldn't have been possible for a user under windows either, but since she's never not been administrator on windows, she doesn't realize it.

      My point is, it is going to be really hard for windows users to change their ways from having administrative rights (and all the horrible pitfalls that entails), to just being a user even if more of the software actually supports user mode correctly.

      --
      This is an ex-parrot!
    46. Re:Think different... by hunterx11 · · Score: 1

      Non-admin users don't get authentication dialogs...because they don't have any sudo privileges. They will need to login as an admin "when needed." The kind of people who are paranoid enough to use a scheme where they have to login as another user just to install an application in case their existing applications are surreptitiously replaced should probably be running OpenBSD anyway.

      --
      English is easier said than done.
    47. Re:Think different... by mrgreen4242 · · Score: 1
      Yup, that's one of my favorite things about OS X. As a "power user" I can stay logged in as an Admin and be able quickly make settings changes, install apps, etc. BUT, as soon as something wants to modify the kernel or do anything that requires ROOT access I am prompted for a password. It keeps the number of times I entereing the root password pretty infrequently, and as such it keeps it from being a routine event, so I actually pay attention to what is going on.

      I can't wait until the first Intel iBook comes out and I can run WINE on it. I can bring my own Mac to work and never have to use Windows again. Bwahahah.

    48. Re:Think different... by DikSeaCup · · Score: 1
      Wouldn't "Underrated" do that too?

      Although, to be honest, I did find it both funny and informative - it's basically a smiley I've never heard of.

    49. Re:Think different... by vertinox · · Score: 1

      After a short while, typing in your password becomes as much of an unconscious acticity as pressing "OK" on a dialog box. I think we need blinking lights, horns, mandatory timers, and permission from your sysadmin before you can do anything stupid.

      I don't know about you but I don't install applications on my computer every day of the week.

      And btw... OS X apps usually don't have "OK" buttons unless the apps are made by Microsoft.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    50. Re:Think different... by rwise2112 · · Score: 1

      Actually, if I remember correctly, the true administrator account can only be accessed from safe mode or the recovery console and logging in as user name Administrator. I think most people do not realize that. However, it is extremely rare to have to resort that under XP.

      --

      "For every expert, there is an equal and opposite expert"
    51. Re:Think different... by @madeus · · Score: 2, Informative

      For an ordinary user, the Mac ALWAYS asks for an admin password in order to make any change to the Applications folder.

      This somewhat misses the point that if your dragging an Application into the "Applications" folder and your asked for a password, it's absolutely clear why the system (note: not the application) is asking you for a password. A kernel driver or global startup item can't somehow magically install itself when your only dragging a folder.

      As already pointed out, having admin privilages on your account in Mac OS X is absolutely not in anyway 'dumb', anymore than being in the wheel group is on a BSD system - in fact, it's exactly the same, only the group happens to be named 'admin' not 'wheel' (see NetInfo Manager application or nituils documentation for details).

      Having an 'admin' account in Mac OS X is not like having an 'Admin' account on a Windows sytem, or running as root on Linux.

      A regular user can still install some, but not all programs in their own user space. However such installs will only affect that user and not the system or other users.

      All programs can exist (and can be run from) in user space. Only drivers and frameworks (which are rare) must be in the admin-only accessible /Library/, rather than in the users own ~/Library/ (though things like plugins, screen savers, etc., can go in either). Obviously this only effects the current user (which is kind of the point), but there is of course the 'Shared' folder on the HD which exists out of the box to allow unprivilaged users to share items convienently if they want to.

    52. Re:Think different... by sqlrob · · Score: 1

      Have you ever tried running as a non-admin user on Tiger?

      The authentication dialog comes up, except it wants user name as well as password, and dragging stuff into Applications requires authentication.

      As I type this, I'm a non-admin user upgrading to XCode 2.2

    53. Re:Think different... by vertinox · · Score: 3, Informative

      You don't need to authenticate to install applications on Mac OS X. Installing applications - like Microsoft Office - involves just dragging the application (or the folder it's in) from the CD into the Applications folder on your hard disk. Even things like Real One Player and Windows Media Player work this way.

      I would also like to point out that even when you are dragging and droping apps into the Apps folder it will prompt you once to say "You are about to run (application name) for the first time. Are you sure you want to do this?" which is a pretty good fail safe for programs that are trying to run silently.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    54. Re:Think different... by @madeus · · Score: 1

      Still, that'll never solve the problem of the user getting used to it.

      Very true, I agree.

      That's why I think it's very important for any sort of warning message to be very rare in occurance (as well as being accurately descriptive, but short and to the point).

      Where there is a chance that the user might get used to that specific message (such as in the instance of an email attachment warning as you describe) that the application in question (Mail) should have a specific and unique looking appropriately alarmist dialog, so that it doesn't dilute the significance of other alerts, such as those triggered by applications trying to escallate their privilages.

    55. Re:Think different... by Anonymous Coward · · Score: 0
      If you use a mac, you'll find that you type in your password far less than you might think you would. I don't do it that often, I don't think I'm that desensitized...


      Exactly, and especially if you're a UNIX type. Personally every time that prompt appears I instantly go into "just why in the hell does this thing need root???" mode, and then instantly envision getting rootkitted by installing some moronic software.

      Then again, how many Mac users aside from the UNIX folks even recognize the implications of the root account?
    56. Re:Think different... by quanticle · · Score: 1

      In a corporate environment, though, the user does not expect to be able to install applications, or do mundane things like change the date/time on their machine. In a home environment, the user expects quite a bit more freedom on his/her machine, and therefore is likely to remain in Admin mode for the convenience, even though there are lower rights modes available.


      You're right. Account management exists in large scale corporate networks. But the topic of this discussion is account management on single-user machines, and this is an area in which Apple still has the lead.

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    57. Re:Think different... by Jeffrey0 · · Score: 1

      You can always "take ownership" and then change permissions.

      There is a decent advantage of having to use this hack: 99.9% of malware doesn't check or modify file permissions. Just like how setting the read-only flag used to work (perhaps still does?).

    58. Re:Think different... by CastrTroy · · Score: 1

      The owner of the files was Administrator. But for some reason, he couldn't change anything about them.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    59. Re:Think different... by Phisbut · · Score: 2, Insightful
      Hope seems to spring eternal in the MS windows world. I've been hearing people say essentially the same thing since NT3.5. It hasn't happened yet, and unfortunately I don't believe it's going to happen with "vista" either.

      And the reason why it's not going to happen is games. Any game that is available today will simply not run in user mode, be it XP or Vista, simply because their copy-protection schemes require access to some files and registers that a regular user should never have access to. When people get Vista and realize their games don't work, and they either go to forums or call tech support, they will be told that they need to run the game in admin mode. To avoid switching all the time, users will then always use the admin mode, and there goes all the security through the window...

      --
      After 3 days without programming, life becomes meaningless
      - The Tao of Programming
    60. Re:Think different... by Pollardito · · Score: 1
      If a users sees an Application (including plugins) requesting this sort of permission that should really ring alarm bells. Only things like new drivers (e.g. for that new camera you just bought) should be asking for things like that.
      iTunes patches seem to bring up the permission box every time :P
    61. Re:Think different... by Anonymous Coward · · Score: 0

      I want to know what genious sat down and though to him/herself:
      "How do I encourage people to buy sony CDs instead of downloading / illegally p2p-ing music?"
      "I know, lets infect peoples computers who buy CDs so that they cant use their music fairly and theyr security is compromised. Let's do it in a sneaky back door way like good virus writers do!"

    62. Re:Think different... by Jezza · · Score: 1

      I was restricting my comment to this aspect alone - I don't expect Vista to make EVERYTHING better, my Mac isn't for sale just yet ;-) but this would plug a major shortcoming with how Windows works at present. It is good that Microsoft are learning, and prepared to "break things" to move forward (for far too long this hasn't been the case). Of course this will (in the short term) represent a major road block to the adoption of Vista (if my experience trying to run XP like this is any indication YMMV). I won't be converting my Linux boxes to Vista on the day of release (or given their age anytime after that) but I would like to trade in my TabletPC for one that'll run it.

      I run XP on a TabletPC mostly for notetaking at clients, and also so I am aware of what's happening in Windows - so I can continue to help them with their problems, I've been using the NT strand on Windows since 3.51 so I know all about the "chain of broken promises" - I'm under no illusions that Vista will be no different, but if it can fix this one thing it'll represent a major step forward.

    63. Re:Think different... by Kadin2048 · · Score: 1

      If the application is just an executable that stands alone, generally there is not a permission dialog. You can copy that to anyplace on your file system, no problem at all. The exception is if you are a non-administrator user and you try to copy it to the Applications folder (which by default non-admins do not have write privs to).

      Where you see the 'enter password' dialog consistently is when installing software using an actual Installer package -- usually you will not be allowed to go past the first step in the "Wizard" type thing (which just describes what the package is) without authenticating. In general, the Installer packages are only necessary when an application requires files to be put in various places around the system, especially in the Library, and isn't just a standalone application bundle. I have definitely seen programs which could have just been distributed as an application on a disk image using an Installer, but they're the exception to the rule (in this case, laziness on the developer's part produces the desired result, since most people won't make an Installer package if they don't have to -- why some people do, I don't know).

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    64. Re:Think different... by gg3po · · Score: 1

      1 Mod point = 1 Mod point.
      1 Well placed comment = an army of inspired moderators that will do the dirty work for you.

      --
      ---
    65. Re:Think different... by jafac · · Score: 1

      I'm wondering if simply dropping a zero-byte, read-only kext with the same filename into the Extensions directory would prevent the install of this crap?

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    66. Re:Think different... by Orion_ · · Score: 1

      If I equate [typing an admin password] with installing stuff, and all I've done is put a CD in to play the damn thing, I'd be pretty curious as to why...

      Just as importantly, Macs will never run an application just because you've inserted a CD. There was once an autorun feature, but they eliminated it in OS X because of the OBVIOUS security issues involved.

      So, although there is some concern that CD manufacturers will try to get you to install their DRM in order to play the CD on your computer (e.g., by corrupting the audio data on the CD), they do have to convince you to run the installer yourself. It doesn't happen automatically.

    67. Re:Think different... by Anonymous Coward · · Score: 0

      It has been proposed more than once, but I doubt it will be ever implemented, as it is a usability nightmare.

      GNOME.

    68. Re:Think different... by Anonymous Coward · · Score: 0

      Some of those 'badly written installers' are merely struggling the required permissions for various Microsoft dependencies they need to get their applications working properly. It's no surprise that installing what are basically OS patches would require proper permissions.

    69. Re:Think different... by tricorn · · Score: 2, Insightful

      All of the applications in /Applications are writable by group admin. That's a huge security problem.

      /Library and a lot of stuff underneath it is writable by group admin. That's Internet plug-ins, printers, trusted certificates, help files, scripts, some frameworks, stuff in Application Support - a lot of stuff points things at executables, or has scripting capabilities, or is otherwise assumed to be trusted.

      Much of the stuff in /Developer is writable by admin. That means something could do a sneak attack, so anything you build and distribute is a virus vector.

      There is absolutely no reason to run as an administrator, except to do installations (you can do installations as a non-administrator, but ownership of installed files seems to be cleaner if you always do it from one login, and then the same principle applies - if you do it using your normal login, then some things will be owned by you which means they are vulnerable).

      With user switching enabled, there's even less reason to run as an administrator, since you can easily switch back and forth. Even for sudo, all you need to do in a terminal window is su to your admin login first, then you can sudo to your heart's content.

    70. Re:Think different... by forkazoo · · Score: 1
      On the subject, it could do with some means of forgery protection (things like an embedded image in the window have been suggested) so that you can better trust it's an authentic authentication dialog. If your paranoid.
      I've thought about things like this. A special image, of a window with a special colored frame. Unfortunately, it would be pretty easy for a malicious program to take a screenshot, and make it look like a legit authentication screen when it is actually just harvesting the password to use for all sorts of other badness.

      But, then I saw the ripple effect used for widget placement in Dashboard. What if whenever you needed to authenticate, you were instructed to go to the Dashboard, and there was a special authentication widget with a special animated pixel shader flames effect as a border, that no other widget can use as a border.

      Something like this would seem to be almost impossible to spoof. Because widgets are run in a sort of visual-sandbox, the potentially malicious app wouldn't be able to directly present a really convincing fake to somebody who is paying attention, if it was done right. (Widgets, naturally, should not be able to draw anything outide their given area, the system would force the auth-widget to appear with a fiery border because it has root permissions.)

      And, since every other widget is associated with a watery rippling effect, a fire-widget would reinforce a subconsious sense of danger whenever you interact with it. To even the most clueless user, it would be clear that they were doing something special. Sure, it would be an extra mouse-click / button-press, but given how rarely the user needs to authenticate, I would consider it a minor annoyance. It would also act as a really flashy, easy to demo way to show people how windows isn't as secure.
    71. Re:Think different... by TwoTailedFox · · Score: 1

      To me, it looks like a Fat Guy, with two penises, weraing two belts kriss-krossed on his beer belly, with one gigantic manboob.

      --
      ~The TwoTailedFox posts again....
    72. Re:Think different... by @madeus · · Score: 3, Informative

      iTunes patches seem to bring up the permission box every time :P

      Yeah, Mail and Safari patches do the same, I assume it keeps track of the Applications filename / it's location / MD5 of the binary / etc. which is why it requires confirmation the first time you run the new version of the application (so that someone - or some software - can't switch the legitimate application with a trojan copy).

      Good Thing(TM), even if the iTunes patches are a little too frequent. ;-)

    73. Re:Think different... by unDees · · Score: 1

      Yeah, that's what I do. There's only one thing I haven't figured out how to do as a non-admin user: get software updates to check automatically. It's set to check daily, but it never actually does unless I log in as an admin. Not that it's too big of a headache to check once a week manually, but still....

      --
      "I call a baby goat a 'goatse.'" -- my non-Internet-savvy 6-year-old stepdaughter
    74. Re:Think different... by bgspence · · Score: 1

      Remember the 'Clueless mac user' is everyone. Hardly anyone other than the developer will know exactly what an installer is really going to do when you give it the admin password. Even the developer may not know the full scope of the actions of their installer. Thats whats sometimes known as an installer bug.

      You can trust what you might have heard, but you really don't know what's been done until after the install and you poke around. An installer can do most anything and you, the clueless user, have no clue as to what the installer will do with those permissions.

      Installers are not open. You can't preview the pending actions of an installer. They don't provide a clue to the user. That's why we are all clueless users.

    75. Re:Think different... by Boomeringue · · Score: 1

      (1) Random Access Memory
      (2) The age of majority for cyborgs?

    76. Re:Think different... by Anonymous Coward · · Score: 0
      Running Windows as a non-admin is very easy to do using Aaron Margosis's system. I've found that I can everything I want as a non-admin except a.) install software (I have to switch to admin to do that) and b.) use Microsoft's Virtual CD control panel to mount an ISO as a drive. I don't play a lot of games, so I can't comment on them, but all the normal applications (Office, Firefox, IE, etc.) work just fine as a non-admin. Instructions on how to run as a non-admin but switch to admin easily are at http://blogs.msdn.com/aaron_margosis/archive/2004/ 06/17/158806.aspx


      It might take a techie to set up Aaron's system, but even non-techies can run with it once it's set up.

    77. Re:Think different... by tricorn · · Score: 1

      I haven't had any problems with it checking, but trying to download updates, without installing, as a non-admin IS a problem (and if you have it set to "automatically download in the background", that's what it is probably doing). It doesn't ask for privileges, but after it finishes downloading it tries to expand it into a directory that requires group admin. Telling it to install asks for privileges first, and then the expansion works. One of the very few places where things don't work correctly as non-admin (again, this is in 10.3, I don't know if they've fixed it in 10.4).

      It also doesn't remember if you've downloaded but not installed, once you leave the Software Update program, which is really stupid. In fact, it should check to see if the updates being requested are in the Packages directory already, whether or not it thinks it has downloaded it (and verify it against the checksum from the server). That way, if you are doing a re-install, it doesn't need to re-download things you already have. It would also be nice if it kept enough information to be able to re-update your system from downloaded packages automatically without needing to go to the server at all - i.e. keep track of which packages that you've kept are current, and in which order things need to be installed, to bring everything back to current.

    78. Re:Think different... by Reaperducer · · Score: 1

      Why not just use Virtual PC now, instead of waiting to run some hack?
      When I first "switched," being able to run Windowd XP in Virtual PC was a lifesaver.
      Of course, a month after I switched I stopped using it once I discovered all the prorgams I needed had Mac equivalents.

      --
      -- I'm old enough to have lived through six different meanings of the word "hacker."
    79. Re:Think different... by tricorn · · Score: 1

      Of course non-admin users get authentication dialogs. Why do you think there's an entry for the name? It is NOT simply "sudo". The only difference for authentication for admin and non-admin is that the non-admin has to enter an administrator name, the admin has the name already filled in.

      It is NOT paranoid to be worried about "existing applications [being] surreptitiously replaced". That's the WHOLE POINT of securing your system. System Preferences is not writable by admin, that's good. But I can delete System Preferences and replace it with my own version. Now you're screwed, the next time you go in to System Preferences and authenticate, my code can now do anything. I don't know what gets loaded and run just by being there in /Library/Preference Panes, but that's also read-write to admin. If some of that gets run just by opening System Preferences, without even clicking on the icon, then again you're screwed.

      If there are libraries that can be loaded from insecure places by a supposedly secure application (i.e. one that does run with elevated privileges), that application is insecure by definition unless it takes extreme measures to isolate the library (run in a separate process with no extra privileges). Same thing can be said of configuration files that are assumed to be secure, but aren't really. If there's no special checking by the privileged program, it's easy to get it to do insecure things by messing with its config file. And half of all files in Mac OSX seem to be config files, many of them writable by admin.

      Oh, HERE'S a good one, ANYONE can write to /Library/Caches - which means that if an application that uses it doesn't validate what's in the cache, you could probably compromise it.

      How about putting stuff in /Library/StartupItems (not writable by admin, but it can be deleted and recreated, and the system will run stuff in it as root at next restart). 10.4, they've tightened security on this (if the item isn't owned by root or isn't read-only to other than owner, system startup will ask the user if they want to run it), and they've also put in a different mechanism which may also improve security there.

      The fact is, admin can do things that can compromise the system with no further authentication, and there is NO good reason to actually be running as that user except when doing administrative stuff (installing/removing programs, updating the system), and with fast user switching, there's no drawback at all to not running as an administrator.

    80. Re:Think different... by rbannon · · Score: 1

      Yes, I agree, but why do so many simple application installs ask for a admin password?

      So far inserting a CD has not asked me for a password, but that day may come and I'm afraid most Mac users, at least the ones who install software, will think nothing of typing in a password.

      Apple needs to be proactive and start developing a utility that checks a user's drive for malware.

      Free iPod?

    81. Re:Think different... by Em+Adespoton · · Score: 1

      Virtual PC is a computer emulator; WINE allows you to run apps compiled for the Windows API under another system. My guess is that he doesn't want to run Windows; he just wants to run a few apps compiled to run on Windows, but keep OS X as is OS.

    82. Re:Think different... by Em+Adespoton · · Score: 1
      When packages are installed instead of just dragging the app to the appropriate location, the OS gets involved and creates a package manifest file that records where everything is installed. There are even a few programs out there that read this data and use it to uninstall previously-installed apps.

      I would guess Apple apps use an installer to work well with the Software Update system; Software Update then knows at a glance exactly what has been installed, and where.

    83. Re:Think different... by mkiwi · · Score: 1
      download nakedjlo.exe???

      You are living in a slum, have lost all your teeth, and are high on crack if that sl*t with the fat ass turns you on. JLo = ghetto booty

      And just what type of friend sends that crappy kind of porn? Honestly.....

  2. Why yes, I give my admin password out on request! by jx100 · · Score: 3, Insightful

    I think the fact that it asks for your password on install should throw up *some* sort of red flag. And tosses in a rather easy way to get past the DRM.

  3. Does the DRM software do anything? by Anonymous Coward · · Score: 0

    It sounds like the CD can be played without installing the DRM, so why bother to include it anyway?

  4. Admin Privileges by josephdrivein · · Score: 2, Funny

    a request for administration rights Oh, yeah I love to have to be root to play a CD...

    1. Re:Admin Privileges by Bananatree3 · · Score: 5, Insightful
      YOU may not even consider such an idea, but not everyone is so tech-savvy. Think of all the Joe users out there...

      Joe user: What's this I see? I have to enter my password to play a music CD? Oh no biggy, its just a music CD. What harm could it do?

      That is my concern. The average user sees it comes from Sony, a "trustable" company, and doesn't give it a second thought. A very lethal combo
    2. Re:Admin Privileges by Tim+C · · Score: 1

      A more likely scenario is:

      Joe user: What's this I see? I have to enter my password? Ok.

      People are just getting around to the idea that random crap mailed to them might contain a virus (although enough people still run them...). It'll be a while yet before they're even the least bit suspicious of stuff on CDs, especially ones they've bought from reputable sources.

      I agree that they won't give it a second thought; I just don't think they'll give it a first thought, either.

    3. Re:Admin Privileges by josephdrivein · · Score: 1

      Joe user: What's this I see? I have to enter my password to play a music CD? Oh no biggy, its just a music CD. What harm could it do?

      You got your point.

      Anyway, you should notice that there's a great difference beetwen the Windows rootkit that installs without you letting you know about it, because Win XP Home has all users by default with admin privileges, and OsX in which you have to type in your admin password.

    4. Re:Admin Privileges by Anonymous Coward · · Score: 1, Informative

      As the summery says, you need the DRM software to play the *enhanced* content. Which means that if all you want to do is rip the music, you'll never run into it. But if you want to see the artist interview, or watch the "Making of the album" video, that's when you run the program that with the EULA and DRM software. And there's actually a reasonable case for needing a password to install software in this case: A/V Codecs for Quicktime. I'm a programmer, and I have a Mac; I even program my Mac. I don't know off the top of my head where Codecs go, but if the program wants to install them in /Library (as opposed to /User/me/Library), I can certainly see needing to enter a password to give permissions for that install. And unless I've actually read the EULA, I won't know that the software they're installing isn't a Codec, but is actually DRM.

    5. Re:Admin Privileges by CaptainZapp · · Score: 1
      The average user sees it comes from Sony, a "trustable" company, and doesn't give it a second thought.

      With articles popping up in the New York Times, The Washington Post or the Globe and Mail Sony should have just about lost any trust with the public.

      If I'd be their (stunningly inefficient and stupid) spokesflack I'd be searching now for a pack of razor blades or a plastic bag.

      What a bunch of losers...

      --
      ich bin der musikant

      mit taschenrechner in der hand

      kraftwerk

    6. Re:Admin Privileges by RandomJoe · · Score: 1

      If only that were the case. Don't underestimate the ability of "the masses" to be uninformed!

      I was reading stories from various sources on the riots in France with great interest. The story was seemingly being covered everywhere. But nearly two weeks after they had started, I was still finding people in my office who hadn't heard a single word about them.

      Of course, these same people can quote every lame sports statistic in the known universe, so they have to be watching the news at some point. They just don't even hear the bits that don't "affect" them!

      So all Sony needs is to hope that the bulk of their customers have TVs that never leave ESPN or HBO. And lately that doesn't seem to be much of a stretch!

    7. Re:Admin Privileges by PHPfanboy · · Score: 1
      if all you want to do is rip the music, you'll never run into it. But if you want to see the artist interview, or watch the "Making of the album" video, that's when you run the program that with the EULA and DRM software.

      ....isn't it kind of odd that they'd protect the extra crap and let you rip the good stuff?
      --
      29 mpg. YMMV.
    8. Re:Admin Privileges by Kadin2048 · · Score: 1

      From what I understand of the DRM scheme, once you install those kernel extensions, it keeps you from ripping the CD from there on out.

      But the obvious flaw is that most users are going to rip the CD before they get around to listening to or checking out the additional content -- I know quite a few people who have iPods and their Macs are set up so that when you put in an Audio CD, iTunes is automatically launched, and when iTunes detects a new music CD, it automatically rips it into their Library. So by the time they'd get around to looking at that Data volume with the DRM installer, the music is already on their iPod.

      I think the end result of this setup is that people will accidentally install the DRM after the fact, and never notice until for some reason they want to rip it again (maybe years later, if they haven't done a clean install of their system) and not be able to -- and I think to most people their first response will be to assume that the CD is scratched or otherwise bad, not that the computer is (since it rips all other music fine, and even ripped the CD fine originally).

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  5. Well one clear warning sign... by radicalskeptic · · Score: 4, Insightful

    According to the comments on the linked page, you have to type in your name/password after agreeing to the EULA. This is really non-standard and hopefully will set off alarms in people's heads when they wonder why they have to do that (OS X doesn't ask for your password often). But something tells me most users will just go ahead and give the app free reign anyway. Not that I blame them, you'd expect to be able to trust Sony, a freaking huge "legitimate" corporation for Pete's sake.

    --
    WARNING: If accidentally read, induce vomiting.
    1. Re:Well one clear warning sign... by steelfood · · Score: 1

      Well, there are bound to be users that will do exactly that, but with the recent publicity that Sony's rootkit has received, I think people will more than likely think twice before typing in their password after they pop in a Sony CD to be played. I think the media coverage (not to mention the lawsuit) has made people very wary of Sony and Sony CD's in general. While there's likely a good number of Mac users that switched from Windows to avoid the security problems of the latter, and really are no better than the typical Windows user when it comes to security, they also tend to be more savvy in terms of keeping up with current events, as the really clueless would've probably stuck with Windows, or not be among the demographics at which these Sony CD's are targeted.

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    2. Re:Well one clear warning sign... by Khuffie · · Score: 2, Insightful

      Recent publicity? You think someone who doesn't read Slashdot will have heard of Sony's rootkit?

    3. Re:Well one clear warning sign... by myspys · · Score: 1

      Yes

    4. Re:Well one clear warning sign... by notthepainter · · Score: 1

      Yes, I think many will have. CNN even obliquely covered it this morning. See http://www.cnn.com/2005/TECH/internet/11/10/sony.h ack.reut/index.html/. This was on cnn.com's front page this morning.

    5. Re:Well one clear warning sign... by renderhead · · Score: 1

      Yes, they will if they listen to NPR regularly. They covered this story on Morning Edition last week. When a computer-related story gets to NPR, it must be getting around. The average NPR listener is assumed to be intelligent, but not necessarily computer-literate.

      --
      I wish that my inferiority complex were as good as yours.

      -RenderHead

    6. Re:Well one clear warning sign... by Hatta · · Score: 1

      you'd expect to be able to trust Sony, a freaking huge "legitimate" corporation for Pete's sake.

      I generally expect to be unable to trust freaking huge corporations. I'm seldom disappointed.

      --
      Give me Classic Slashdot or give me death!
  6. Make a fortune by ReformedExCon · · Score: 2, Interesting

    Business idea:

    Customers buy DRM CDs and hand them over to you. You give them back a copy of the CD with the DRM removed, for the cost of the blank CD and a small service fee. Hold onto the original CD with customer records as evidence that the customer bought the CD and has the right to copy for personal use.

    Not workable?

    --
    Jesus saved me from my past. He can save you as well.
    1. Re:Make a fortune by Anonymous Coward · · Score: 0

      The DMCA is specifically targeted at such behavior. No one cares that you have "bought" the CD, you don't have permission to remove copy protection under the law.

      Even if you can find a legal loophole you'd get buried in lawsuits. See what happened to mp3.com.

    2. Re:Make a fortune by gcatullus · · Score: 4, Interesting

      Reasonable, yes, but legally workable not really, at least according to Sony. The sony eula says you must destroy any and all fair use copies of the music you possess, if you are no longer in possession of the actual cd. What a concept, your car gets robbed, you get cds stolen and then SONY makes you delete any copies you may have. I'd love to see it in court.

    3. Re:Make a fortune by Mitsoid · · Score: 1

      I only use copy's in my truck... I've had issues with CD playes (in general) eatting/scratchign CD's, especially when in motion (such as in the old days, running with a CD player on you)...

      So I keep my 'fair use' backups in my truck... if it gets broken into, I don't loose the 'actual' CD, and thus dont have to destroy them ;-)

      and if something is stolen from me, Sony can't hold me responsible if my door was locked, and someone violated multiple laws to steal my property, I don't think the EULA can force me to protect an artist's work with my life, or face paying millions in court...

    4. Re:Make a fortune by Anonymous Coward · · Score: 0

      So what is the difference between locking the CDs in your house, putting them in a safe deposit box, or giving it to a third party for the express purpose of safeguarding it?

    5. Re:Make a fortune by SteveAyre · · Score: 1

      Ahhhhh... but in that case you're illegally distributing copies of the original CD. ;o)

    6. Re:Make a fortune by Have+Blue · · Score: 1

      It's not just the EULA- it's always been upheld, for all forms of media, that you do not have the right to retain a copy of media you gave up through a commercial transaction. This is a far more reasonable doctrine that would protect you in the car theft example, but you couldn't make a business out of copying CDs as the GP suggested even if the EULA was struck down or not present.

    7. Re:Make a fortune by Lord+Kano · · Score: 1

      The obvious difference is that you have given up possession of the items. Perhaps if you *Rented* space from the third party in which you store your originals, you could argue that you have no given up possession and as such are entitled to retain your fair use copies.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    8. Re:Make a fortune by KeithIrwin · · Score: 1

      Yes, but you don't need to agree to the EULA. You've already got the right to play any CD you own and to make fair use copies of it. What's the benefit in agreeing to the EULA?

      In general, companies are promoting the idea that you must agree to some licensing to be able to use the copies of things that you own, but this is not, in general, true. You can't make copies of things without permission because this right is explicitly denied you by copyright law. The ability to play things or run software or exercise your fair use rights is not. Hence you don't need license from anyone else to do these things.

      Keith Irwin

    9. Re:Make a fortune by awol · · Score: 1

      Not so. The OP business model is similar (if not identical) to one called "Custody" and it is used all the time for lots of different markets but in particular for the finance (securities) industry. I think that the model would be legal under existing law (US, UK and Europe) and Sony's definition of "posession" would have to be broad enough to include the custodian model in order for it to be legal in any sense.

      --
      "The first thing to do when you find yourself in a hole is stop digging."
    10. Re:Make a fortune by adrianmonk · · Score: 1
      Reasonable, yes, but legally workable not really, at least according to Sony. The sony eula says you must destroy any and all fair use copies of the music you possess,

      Why would I bother reading or agreeing to any license agreement just to play a CD?

      Yes, I realize it has copy protection that asks me to do so, but is there any legal requirement for me to enter into some kind of agreement when I've already bought the thing? I don't have to enter into agreement with other CDs I've bought, so I can't see why I'd be legally required to pay any attention to the EULA that comes with some Sony CD even if it has one.

      Similarly, if there is a company that offers the service of making copies that are DRM-free, if it truly is an End-User License Agreement, then they can ignore it as well, for two reasons. The first is the reason described above -- that there is no legal requirement to pay attention to it. The second is that the company that offers this service of copying the media isn't an end user. They are a service provider who makes the content easier to use.

      And even if all this turns out to be wrong, the company that performs the service can keep the original copy but specify in their policy that you continue to own the original copy-protected CD even if they store it for you.

    11. Re:Make a fortune by Anonymous Coward · · Score: 0

      I don't see any reason it wouldn't work. It's no different than storing your original in a bank and using only you legal fair use copies..

    12. Re:Make a fortune by funkatron · · Score: 1

      Most CD's say something about no copying, lending, hiring or public performance on them but I'm not sure if you automatically agree to that by buying the CD.

      --
      "Welcome to our world. We are the wasted youth. And we are the future too." Yes, I know these are stupid lyrics.
    13. Re:Make a fortune by Anonymous Coward · · Score: 0

      If you never agreed to the EULA how can it be enforced? If you provide a shrink-wrapped copy and never open the shrink wrap yourself then you never acceded to the agreement. Thus, said agreement is not enforcable. The EULA only has force if you click YES.

      As for violating the DCMA, the reverse engineering restrictions has a interoperability loophole. Installing root kits, damaging the CD-ROM driver, and most especially deliberately making third-party software not work does impede interoperability and IMHO would be subject to the loophole.

      Usual IANAL disclaimer...

  7. daft... by Phil246 · · Score: 3, Insightful

    are sony that determined to bury themselves?
    Surely, they realise that its only going to create a backlash against DRM if they continue this nonsense?

    1. Re:daft... by dorkygeek · · Score: 5, Insightful
      Joe Desktop doesn't care and simply installs whatever malware is needed to listen to the cd.

      --
      Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
    2. Re:daft... by sgant · · Score: 2, Interesting

      The thing is, Joe Desktop is getting bombarded now with this story all over the main stream press. Heck it was even in my local Podunk newspaper!

      I see this beginning to be the backlash of DRM for the average "Joe Desktop". Especially when the media is throwing in the scary worded "root kit" voodoo around.

      --

      "Leo Fender was in a 'state of grace' when he designed the Stratocaster." -- Paul Reed Smith
    3. Re:daft... by adrianmonk · · Score: 2, Insightful
      are sony that determined to bury themselves?

      Well, they are still using Memory Stick in cameras, laptops, etc. even though it's clear that SD Card has won that battle. Sony is weird like that. The seem to have an attitude that since they are such a big electronics manufacturer that they can single-handedly define industry standards.

      (But if that were true, we'd be talking about copy-protection on Minidisc, not CD...)

    4. Re:daft... by swissfondue · · Score: 1

      I think you meant "back/".

      --
      Rubies and Pearls are not what you think.
    5. Re:daft... by Anonymous Coward · · Score: 0

      Sony won't stop until every last machine is Infected with DRM

      Sony music wants your machine infected with DRM
      Sony corporate wants your machine infected with DRM
      I won't buy a playstation because I'm afraid it will leave my stereo equipment Infected with DRM

    6. Re:daft... by vertinox · · Score: 1

      Joe Desktop doesn't care and simply installs whatever malware is needed to listen to the cd.

      Joe Desktop does care when that malware crashes his system and makes it unusuable.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
  8. bondage by heatdeath · · Score: 4, Funny

    Man, actually buying online music is starting to look more and more like S&M. I can hardly wait 'till they come out with CDs that come with shackles that have to be worn while listening to the CD.

    --
    I'm sorry. The number you have reached is imaginary. Please rotate your phone 90 degrees and try again.
    1. Re:bondage by ME-iac · · Score: 1

      And ear plugs so others can't hear it for free.

    2. Re:bondage by Mistshadow2k4 · · Score: 5, Funny

      Hey! Even we aren't that cruel. Bondage is fun, this crap isn't. Leave us kinksters out of this, please.

      --
      I dream of a better world... one in which chickens can cross roads without their motives being questioned.
    3. Re:bondage by Anonymous Coward · · Score: 0

      I almost feel the need to go back to stop ripping cds and start buying vinyl and ripping that instead -_-

      CDs were meant to be a step forward in makeing music EASIER to listen to.

      Actually DVDs are a step back as well - no longer can you fastforward thought all the crap at the start like on VHS you have to sit there for 3 mins and wait for it all to finish. I didnt pay to watch that crap - i paid to watch the movie!

    4. Re:bondage by Anonymous Coward · · Score: 0

      r u a girl
      ??/

  9. Re:Why yes, I give my admin password out on reques by RzUpAnmsCwrds · · Score: 4, Insightful

    Why yes, I give my admin password out on request!

    You would be amazed at what most users will do for music, porn, wallpapers, or screensavers.

    Mac OS isn't immune to this kind of crapola - at least not for the average user.

  10. Jesus by KingVance · · Score: 4, Insightful

    Boy it seems like sony is just running around pissing everybody off...

    Well, I for one pledge to no longer purchase any sony products. Nor will I buy online music from sony, purchase any games, or watch any sony movies until they stop being overbearing assholes with their stuff.

    1. Re:Jesus by Lemmy+Caution · · Score: 1

      It is enough, to be honest, to put an Xbox 360 on top of my gonna buy list over a PS3. (Of course, I have great hopes for the Revolution!) Sony is, at this point, more evil and more dangerous than MS: they and other **AA bulwarks are willing to go to lawmakers to screw over the consumer; MS largely screws over its competition.

    2. Re:Jesus by C_nemo · · Score: 1

      I sceond that. I bought a cheap ps2 a few months ago. Im very happy with it, and as I have gotten more into console gaming I was considering to buy a ps3 if not on launch, during the first price drop. This recent crap from Sony has got me thinking about buying a Xbox360 instead when they come down in price. The way things are right now, I'will probably get a 360 if they dump the prices to compete against the ps3 when it launches.

    3. Re:Jesus by Anonymous Coward · · Score: 0

      make the pledge official then:
      http://www.pledgebank.com/BoycottSony

      Stand up and be counted!

  11. Illustrates why... by rsborg · · Score: 5, Insightful
    the basic OSX security of "Administrator == sudo rights" as opposed to the Windows approach of "Administrator == anything goes" really does make a difference. In the windows portion, Sony just ignores the user and installs all sorts of crap (using autorun)... but on the Mac side, they have to play nice, or the user will not be "convinced" to enter their password to install the software.

    Who knows how evil the DRM is, once the install is made, but jeebus... talk about an issue of trust (just for the installer)!

    --
    Make sure everyone's vote counts: Verified Voting
    1. Re:Illustrates why... by WalterSobchak · · Score: 1

      I had heard rumors that someone had written a Sony "DRM" tool for Mac, and I wondered if Sony created a rootkit.

      Obviously, not so easy. And yes, I agree that this shows the Windows model is way too easily outsmarted.

      I imagine some users will be "convinced" to enter the password (if they can). But a lot will wonder "WTF"?

      Alex

      --
      Absinthe makes the heart grow fonder
    2. Re:Illustrates why... by spxero · · Score: 0

      But a lot will wonder "WTF"?

      I wouldn't be to sure about that. From my personal experience the Apple community is getting a lot more folks fed up with crapware. These people have bought an Apple because they are fed up- not because they are more experienced Apple users. Granted, they still might be a small percentage, but they are still users that will type in a password when prompted.

    3. Re:Illustrates why... by Anonymous Coward · · Score: 0

      Will *someone* commenting on Windows security on this website *please* find out an iota about it first?

      Windows conception of Administrator is EXACTLY THE SAME as in Mac OS X, BSD, Linux, etc. etc. etc.

      The only difference is, no-one uses root as their primary username on Linux, and everyone does on Windows, hence the difficulty of running a process as root on Windows when you're not root yourself. I say difficulty - it can still be done using RunAs.

    4. Re:Illustrates why... by ettlz · · Score: 1

      Hang on, I thought that under MacOS, Linux (but not necessarily SELinux), etc., root was God and can do anything. Administrator under NT et seq. is not omnipotent (I've been denied access to files owned by unprivileged users on my own machine as Administrator because of botched ACLs). Apparently SYSTEM, however, is.

    5. Re:Illustrates why... by otomo_1001 · · Score: 1

      Difference being that the root user is disabled by default in OS X. You have to either enable it manually, or you use an administrative level account which basically acts like sudo for installation stuff.

      Regular unix permissions apply for all files.

  12. Episode 3 by Turn-X+Alphonse · · Score: 1

    I know it's off topic but google isn't helping any.

    Is there any DRM on the Star wars : episode 3 DVD? I know the movie files are encoded but i mean rootkit type DRM bullshit.

    Thanks.

    --
    I like muppets.
    1. Re:Episode 3 by radicalskeptic · · Score: 1

      I'm reasonably sure the answer is "no." If it did, everybody on slashdot would be constantly bitching about how they aren't going to buy it.

      --
      WARNING: If accidentally read, induce vomiting.
    2. Re:Episode 3 by Doppler00 · · Score: 1

      All DVD's sold are encrypted so yes, there is DRM on all DVD's. Probably no root-kits though. I've seen some DVD's that do try to install their own DVD "player" software which ends up usually just being spyware.

    3. Re:Episode 3 by minus_273 · · Score: 1

      i remember some movies having something called infinity film on them. Obnoxious stuff that tried to autorun in windows

      --
      The war with islam is a war on the beast
      The war on terror is a war for peace
    4. Re:Episode 3 by kg4czo · · Score: 1

      LoTR has a "player" that came in it. Autorun would always try to install it, of course I use something else, so it never hit my system, but this kind of thing just sucks. If you have a DVD-ROM/Burner, then more than likely you already have a player. No need in shipping a "player" on any DVD.

    5. Re:Episode 3 by el_chicano · · Score: 1
      All DVD's sold are encrypted so yes, there is DRM on all DVD's.
      If that was true then they would not be playable in regular DVD players. DVDs are encoded, not encrypted...
      --
      A man who wants nothing is invincible
    6. Re:Episode 3 by Nermal6693 · · Score: 1

      Hmm, I have all three LOTR movies and there are no third-party players on them. I have the region 4 extended DVDs.

    7. Re:Episode 3 by TrancePhreak · · Score: 1

      You forgot to mention how people would mention that they aren't going to buy it, but then they turn around and buy multiple copies anyways.

      --

      -]Phreak Out[-
    8. Re:Episode 3 by shmlco · · Score: 2, Funny

      No, he forgot to mention how many people here think it's a piece of shit and refuse to buy it... while anxiously waiting for their torrent to complete.

      --
      Any sect, cult, or religion will legislate its creed into law if it acquires the political power to do so.
    9. Re:Episode 3 by Anubis350 · · Score: 1

      In fact they are encrypted (CSS). Regular DVD players have the decryption scheme built-in since the encryption was built into the standard. See here for info on CSS.

      --
      "goodbye and hello, as always" ~Prince Corwin, from Zelazny's Amber series
    10. Re:Episode 3 by Anonymous Coward · · Score: 0

      If you RTFP he was asking if there was anything OTHER THAN CSS on the disc.

    11. Re:Episode 3 by micpp · · Score: 1

      I think it's only on the Region 1 DVDs. I've seen it mentioned in reviews and stuff but on my R4s there isn't any player stuff on them.

    12. Re:Episode 3 by Anonymous Coward · · Score: 0

      None that I know of, but my version is the free DivX download edition. :)

    13. Re:Episode 3 by Anonymous Coward · · Score: 0

      Not that I can tell. I was able to rip it to mp4 with HandBrake and put it on my iPod with no problems. Maybe there's something Windows specific . . .

    14. Re:Episode 3 by el_chicano · · Score: 1
      In fact they are encrypted (CSS).
      You're right, I forgot all about the Jon Johansen reverse engineering of CSS incident. I knew that you could rip DVDs into MPEGs, I just forgot about the DeCSS step!
      --
      A man who wants nothing is invincible
    15. Re:Episode 3 by nigham · · Score: 1

      I can pretty safely say no rootkit type trash is involved. I just watched it on my Mac and was not prompted for any installs or admin rights. Of course I expect its encrypted like they usually are. I also notice the DVD had a title of "Charlotte" and then found the reason here.

      --
      I don't want to read /. I want to go home and re-think my life.
    16. Re:Episode 3 by milkman_matt · · Score: 1

      I'm reasonably sure the answer is "no." If it did, everybody on slashdot would be constantly bitching about how they aren't going to buy it.

      Pfft, the slashdot crowd has been bitching about how they weren't going to buy it since SWIV,V,VI 'Special Edition's. ...and more recently with the release of EpI, and then again with EpII, I think it's SOP around here by now. ;)

    17. Re:Episode 3 by Lehk228 · · Score: 1

      i''ve got a copy i can assure you doesn't have a rootkit, it's also free*

      not responsable for any bandwidth or storage costs.

      --
      Snowden and Manning are heroes.
  13. Even more thankfully by Have+Blue · · Score: 4, Informative

    Autorun is turned off by default on Macs, and there's never a good reason to turn it on. There's no way this could interfere with the usual insert/launch iTunes/click Rip method most people use.

    1. Re:Even more thankfully by eobanb · · Score: 4, Informative

      Actually, there IS no autorun on Mac OS X.

      --

      Take off every sig. For great justice.

    2. Re:Even more thankfully by CrackedButter · · Score: 2, Interesting

      How does the DVD player auto start then when a DVD movie is put in the disc drive?

    3. Re:Even more thankfully by protohiro1 · · Score: 2, Informative

      The os recognizes it as a movie and plays it. It will not "just run" some executable on a cd.

      --
      Sig removed because it was obnoxious
    4. Re:Even more thankfully by dorkygeek · · Score: 1
      You are confusing the detection of content and player launch with automatically running a program contained on the CD. Two very different things!

      --
      Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
    5. Re:Even more thankfully by mj_1903 · · Score: 1

      There are settings in System Preferences that tell the system what do to when certain media is inserted (CDs and DVDs of various types). The system of course has to know that a piece of media has been inserted so it can mount it so I am sure it is just a global system notification being sent off that triggers it.

    6. Re:Even more thankfully by Have+Blue · · Score: 1

      Quicktime did have the option under OS 9. I never noticed it was gone in X, thanks.

    7. Re:Even more thankfully by QuaZar666 · · Score: 1

      That is for cd/dvd burning not for anything else.

    8. Re:Even more thankfully by Nermal6693 · · Score: 1

      It's also for automatically opening particular apps (such as iTunes or DVD Player) when you insert a particular type of disc (the options are Music CD, Picture CD, and Video DVD).

    9. Re:Even more thankfully by blibbler · · Score: 2, Interesting

      it was also the source of the last Mac virus (well worm) that I am aware of. Perhaps that is why it wasn't included in OSX.

    10. Re:Even more thankfully by Tibor+the+Hun · · Score: 2, Funny

      Actually, there IS no autorun on Mac OS X.

      And see, that is exactly what bugs me about OS X, and why Windows is easier to use. On OS X, I stick a CD in, and it shows up on my desktop but doesn't autorun. iTunes pops up, and allows me to rip the CD by clicking on a button.

      This is completely backwards to me. I like it when Windows autoruns the CD, starting up the elegant "Let's display hidden windows" WMP and having me search around for my CD. (Autorun also allows the CD to install programs in the background, whithout bothering me.) And if Autorun is disabled, finding a CD is as easy as clicking on the Start, finding My Computer and clicking on it, and then finding the icon for the CD player and clicking then on that. On OS X, I just stare at the mounted CD and it doesn't do anything.

      --
      If you don't know what AltaVista is (was), get off my lawn.
    11. Re:Even more thankfully by mzs · · Score: 1
      MacOS X still supports Quicktime 2.0 AutoStart. You put 106 bytes into block zero you write 0x006A7068, then you write a string length in the next byte, followed by up to 11 bytes of a file to launch. The -auto option to mkisosf does this for you. You can disable the autostart on MacOS X with:
      defaults write com.apple.finder AutoplayAudioCD -bool false
      Change the AutoplayDVD pref too.
    12. Re:Even more thankfully by vertinox · · Score: 1

      On OS X, I just stare at the mounted CD and it doesn't do anything.

      As a power user on Windows I usually turned the Autoplay off. Mostly because I usually wanted particular data off the cd or just wanted in the drive to play a game that needed the cd in the drive, but not actually do anything.

      Having the quite the autoplayed app was more annoying than not having it run... at least for me.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    13. Re:Even more thankfully by Anonymous Coward · · Score: 0

      If you're ripping a large number of CDs you don't even have to click. Go to Itunes>Preferences>Advanced>Importing and choose On CD Insert:Import Songs and Eject.
      If you want to do the same thing with DVDs go to System Preferences from the Apple Menu, select CDs and DVDs and change "When you insert a video DVD:" to call your ripping app of choice. If you want the same no-click functionality you either have to set your ripper's preferences to do this on launch, or you have to write an Applescript that tells the ripper to start and have "When you insert a video DVD:" call your script instead.

    14. Re:Even more thankfully by Orion_ · · Score: 1

      The AutoplayAudioCD and AutoplayDVD options control, respectively, whether to open a music player when an audio CD is inserted or a DVD player when a DVD is inserted. OS X has never supported autostart or any other scheme for automatically executing arbitrary code on insert of a CD.

    15. Re:Even more thankfully by Mattintosh · · Score: 1
      Not quite true...

      In OS9, as another poster stated, "autorun" was provided by the Quicktime plugins. Quicktime still has some similar features relating to autoplay of downloaded movies.

      In OSX, there is a "CDs & DVDs" preference pane. It has 5 options, all of which are "autorun" options.

      Here are the 5 items and their available options on a relatively clean install:

      When you insert a blank CD: Ask what to do, Open Finder, Open iTunes, Open Disk Utility, Open other application..., Run script..., Ignore

      When you insert a blank DVD: Ask what to do, Open Finder, Open iDVD, Open iTunes, Open Disk Utility, Open other application..., Run script..., Ignore

      When you insert a music CD: Open iTunes, Open other application..., Run script..., Ignore

      When you insert a picture CD: Open iPhoto, Open other application..., Run script..., Ignore

      When you insert a video DVD: Open DVD Player, Open other application..., Run script..., Ignore


      Note that there's no autorun for data disks. That's found buried in the /Applications/Utilities folder in the Disk Utility application. Opening the preferences for that gives the following mounting options (along with some other stuff):

      [x] Auto-open read-only disk images
      [ ] Auto-open read-write disk images


      This is how .dmg files open automatically when you download one.

      It's nowhere near as offensive as Windows Autorun, though.
  14. At least this means one good thing... by fitchmicah · · Score: 5, Interesting

    This is a sign that Mac OS X has a large enough userbase for Sony to worry about Mac users stealing music.

    1. Re:At least this means one good thing... by tklive · · Score: 1

      Nope, not really .

      Have you not seen the ads where they let you get a lesser valued product (or something that cannot be sold) free when you buy a higher priced one ? This is similar to that, the makers of the Windows drm threw this in for free to cheer Sony up.

    2. Re:At least this means one good thing... by AVee · · Score: 1

      This is a sign that Mac OS X has a large enough userbase for Sony to worry about Mac users stealing music.

      Nope, it shows the Mac userbase is large enough to try to gain control over their systems, spy on their usage of your product (and perhaps some other things) and trick them into spending more money on music they allready bought.

      This Sony stuff seems to put a lot of effort into hiding and staying there once installed, but really sucks as a DRM measure. I mean, depending on autorun being on is not a serious DRM solution.

    3. Re:At least this means one good thing... by AntiDragon · · Score: 1

      Or perhaps a little corporate waring.
      After all, Sony and Apple aren't exactly seeing eye-to-eye right now, are they? No Sony|BMG music for the latest iTune web stores (Japan and Australia).

      Call me paranoid (or any other names...), but I wouldn't be suprised if this animosity was a key point in deciding that it was worth the effort of DRM'ing OS X as well as Windows machines.

      --"Oh noes! My CD is not working with teh iTunes!"
      I love it when big corporations get along so well...

      --
      "...So I hung back and lurked. For 18 months. Can't beat a good old-fashioned lurking."
    4. Re:At least this means one good thing... by BandwidthHog · · Score: 1

      Except that they’re from different companies. The Winders rootkit is from XCP, the Mac thingy (don’t know quite what it is, but apparently not a rootkit at least) is from SunnComm.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  15. List of Sony/BMG sub labels by marvy666 · · Score: 1

    Anyone have a list, so i know which labels to boycott.

    1. Re:List of Sony/BMG sub labels by Anonymous Coward · · Score: 0
      There was a list of CDs affected in a previous slashdot article on this topic.

      I'm doing the opposite, and buying a Celine Dion CD, so that I can be part of the class action lawsuit.

    2. Re:List of Sony/BMG sub labels by the+real+darkskye · · Score: 2, Informative

      Just look for the Compact Disc Digital Audio mark on the case, anything with that mark is a pure audio CD, it has to be otherwise phillips won't let them use that mark.

      Granted, this will also include any mixed mode CDs with bonus video content, but whats to stop that data layer from trying to install DRM?

      --
      Music is everybody's possession.
      It's only publishers who think that people own it.
      Fuck Beta
      ~John Lenno
    3. Re:List of Sony/BMG sub labels by plj · · Score: 2, Informative

      No, no, no, no and no. If I have a CD that has some audio tracks and a data track on it, it is just a perfectly standards conforming multisession CD. I personally own many such discs with CD-DA logo printed on them (no DRM, just some videos etc.). If a data track on a disc happens to have a file called autorun.inf, that tells Windows to execute another file called InstallDRMRootkit.exe, it won't make the disc itself any way non-standard. CD standard does not dictate contents of a data track!

      The myth that no copyprotected CDs are standards conforming comes from the older generation copy protections, which relied on deliberate redbook errors and unclosed data sessions instead of Windows' autorun.

      Besides, many standard discs without DRM no longer have any CD-DA logos printed on them either.

      --
      “Wait for Hurd if you want something real” –Linus
    4. Re:List of Sony/BMG sub labels by ^me^ · · Score: 1, Informative

      From http://www.sonymusic.com/labels/ :

      Columbia Records
      Epic Records
      Legacy Recording
      Sony Classical
      Sony Nashville
      Sony Wonder

      --
      No one ever says, 'I can't read that ASCII E-mail you sent me.'
  16. Re:Why yes, I give my admin password out on reques by MichaelSmith · · Score: 5, Funny
    should throw up *some* sort of red flag

    A client of mine once got an email instructing telling her that a virus had been installed on her system. She was to immediately locate a file (I think it was COMMAND.COM) and delete it, which would remove the hazard.

    She forwarded it on to me (just in case I needed it, you see) and then sent me a second email because the person who sent her the message had trashed their system, and she thought I was about to do same.

    When it comes to stupidity among users, I will believe anything

  17. That's the last Sony CD I ever buy by Deep+Fried+Geekboy · · Score: 2, Interesting

    Fuck 'em. Really. In the ass. With a chili pepper.

    In the past I've made a point of buying stuff I liked, either on CD or from an online retailer (iTunes).

    Well, Sony just lost my business. And fuck them if they think I am going to subsidize this bullshit.

    Goodbye Sony. Hello allofmp3.com.

    If you walk the corridors of Sony Music right now all you can hear is the sound of a toilet flushing.

    --

    I'm not wrong. You haven't thought about it hard enough.

    1. Re:That's the last Sony CD I ever buy by FidelCatsro · · Score: 1

      Well if your going to get music online, I see no difference between getting it for free off of bittorrent or paying for it from allofmp3.com.
      Either way the Music execs get nothing (nor the artists ) and it is fairly unofficial.

      I don't think I will ever buy another Sony CD again .I want to pay for music, I don't however want to spend my time removing kernel extensions , My time costs money .Sure right now I could rip it with Linux or FreeBSD, but it is only a matter of time before they try something there as well.

      At least I am not nailed to the wall with any of the DMCA's viscera.

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
    2. Re:That's the last Sony CD I ever buy by TCQuad · · Score: 2, Insightful

      Goodbye Sony. Hello allofmp3.com.

      Ah, yes... Giving credit card numbers to (essentially) unknown foreign agencies that claim to be completely legal. I'm curious if there's a middle ground in there. Perhaps VISA gift cards? Set spending limit, so if they steal your number, they only get your $25 music money? Would that work?

      Now that this sort of thing is coming to the Mac, I'll start to think about it more seriously... Given the lax attitude some of us Mac fanatics take to antivirus, one rootkit and one trojan could destroy Apple forever.

    3. Re:That's the last Sony CD I ever buy by TCQuad · · Score: 1

      Well if your going to get music online, I see no difference between getting it for free off of bittorrent or paying for it from allofmp3.com.

      BitTorrent is illegal for that purpose and trackable.

      However, from what I've read, allofmp3.com is legal in the sense a monopoly is legal. Basically, allofmp3.com is legal in Russia. Now, you're not allowed to import copyrighted material, but there is an exception for single copies for personal use. So, like monopolies, as long as you're not doing anything harmful to the market (like selling bootlegs or having concerts or doing anything beyond personal use), you should be good legally.

    4. Re:That's the last Sony CD I ever buy by Ender_Wiggin · · Score: 1

      Sony doesn't sell their music via iTunes, they offer their own music store to compete.

    5. Re:That's the last Sony CD I ever buy by blincoln · · Score: 1

      However, from what I've read, allofmp3.com is legal

      It is legal. That doesn't mean it's any more ethical to use it than to just bootleg the tracks off of p2p.

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    6. Re:That's the last Sony CD I ever buy by SnprBoB86 · · Score: 4, Interesting

      Citibank (I think) has a credit card mask generator. You can generate a credit card number for use online and then you tell the credit card company the spending and number of transations limits. You get a safe, one time use credit card number.

      --
      http://brandonbloom.name
    7. Re:That's the last Sony CD I ever buy by hunterx11 · · Score: 2, Informative

      Russia may have loads of shady businesses, but allofmp3 is hardly a fly-by-night operation. There are reasons not to use it, but fraud isn't one; besides, the credit card companies can only hold you liable for $50 of fraud, and many don't bother with that.

      --
      English is easier said than done.
    8. Re:That's the last Sony CD I ever buy by CowboyBob500 · · Score: 1

      Ah, yes... Giving credit card numbers to (essentially) unknown foreign agencies that claim to be completely legal.

      When you say foreign, does that mean anywhere outside of America? Or are you targetting particular countries specifically?

      There are many shady organisations in the US, does this mean that I should only send my CC details to UK companies?

      Bob

    9. Re:That's the last Sony CD I ever buy by wootest · · Score: 1

      Sony doesn't sell their music via iTunes, they offer their own music store to compete.

      Sony does sell their music via iTunes, but not in every iTunes country (like Australia).

    10. Re:That's the last Sony CD I ever buy by Wardie · · Score: 2, Insightful

      I'm amazed at moves like this from Sony, because as this DRM chaos goes on, it's actually EASIER to download music illegally than to buy it on CD. Sony are just alienating their paying customers and pushing them to piracy. Idiots.

    11. Re:That's the last Sony CD I ever buy by xtracto · · Score: 1

      Because I really dont want you to remain ignorant, and I want to do you a favor providing you a way to get LEGAL non-DRM music (legal may not equal FAIR, the same way as Illegal does not equal UNFAIR), there are several ways to make payments on allofmp3:

      "We accept payment made by credit or debit cards of the following payment systems: VISA, Euroard/MasterCard, JCB, Diners Club, Union Card.

      PayPal: Sorry, service temporary unavailable.
      XROST Prepaid iCards.
      You can fund your account using this convenient and secure payment method. Besides Prepaid iCard service is FREE for allofmp3 customers. Pay your balance with Prepaid iCard. Your account will be updated momentarily.
      Promotion: Pay by Prepaid iCard now and get a bonus of 10%.


      See? you do not need to give your money to those obscure maybe illegal companies... instead of giving them to those non questionable 100% trustable companies like hmhmm you know, Sony, Microsoft... etc.

      capish?

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    12. Re:That's the last Sony CD I ever buy by Ian_FBNS · · Score: 1

      It's worth getting a bit of perspective here - I have been an allofmp3 user for many months, without any dodgy credit card transactions.

      Sony have demonstrated without a shadow of a doubt that "reputable" companies are no more trustworthy than the supposedly "dodgy" companies like allofmp3.com.

      Even if allofmp3.com was actually corrupt/criminal, the billing for their site is performed by a dutch bank which participates in the "verified by visa" program, and the billing transaction is verifiably performed off-site: AOMP3 don;t see your credit card details, ever.

      I.

    13. Re:That's the last Sony CD I ever buy by EzInKy · · Score: 1


      Well if your going to get music online, I see no difference between getting it for free off of bittorrent or paying for it from allofmp3.com.


      There's a big difference. It's called a receipt.

      --
      Time is what keeps everything from happening all at once.
    14. Re:That's the last Sony CD I ever buy by bkr1_2k · · Score: 1

      If it is legal and you're paying for the music rightfully, what makes it unethical? Do the artists not receive any of the money or something?

      bkr

      --
      "Growing old is inevitable; growing up is optional."
    15. Re:That's the last Sony CD I ever buy by vorpal22 · · Score: 1

      I have never paid anything but PayPal for allofmp3.com, and have certainly never had any issues with such.

    16. Re:That's the last Sony CD I ever buy by Lehk228 · · Score: 1

      if they make fraudulent charges just contact visa and they will take care of it. Credit cards are the safest way to buy so long as you watch your statements for suspicious activity. the credit card companies want it this way so everyone will feel safe using the cards and will expect merchants to accept them.

      --
      Snowden and Manning are heroes.
    17. Re:That's the last Sony CD I ever buy by Winterblink · · Score: 1

      "If you walk the corridors of Sony Music right now all you can hear is the sound of a toilet flushing."

      Yeah, but only if you agree to the EULA.

      --
      "I'm a leaf on the wind. Watch how I soar."
      -Hoban Washburn
    18. Re:That's the last Sony CD I ever buy by ta+ma+de · · Score: 1

      I use visa gift cards, which I buy at safeway with cash. The "safeway" to buy from the russian mob.

  18. Looking forward by dorkygeek · · Score: 2, Funny
    So, when is Sony finally getting that HURD module running?

    --
    Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
  19. Throwing out the baby with the bath water by Anonymous Coward · · Score: 4, Insightful

    So, in effect, your computer is at less risk if you download Sony published music from peer to peer networks than if you try to play your Sony CD on your computer. Where's the value proposition?

    1. Re:Throwing out the baby with the bath water by TCQuad · · Score: 2, Interesting

      So, in effect, your computer is at less risk if you download Sony published music from peer to peer networks than if you try to play your Sony CD on your computer.

      OK, here are the options you have.

      Sony CD: Contains very poorly written DRM that may forever screw up your machine.
      P2P: Spend days sifting through partial, corrupted and poorly named files to get the CD you want, risking viruses, lawsuits and your entire Saturday afternoon.
      Online music stores (iTMS, allofmp3): Cheaper than a CD, quicker and safer than P2P, DRMed but easily circumvented in under an hour, if that.

      Maybe Sony's subconsciously trying to elminate CDs in favor of complete on-line distribution.

    2. Re:Throwing out the baby with the bath water by mattjb0010 · · Score: 1

      Online music stores (iTMS):

      Doesn't have any Sony/BMG music in Australia and Japan.

  20. autorun by minus_273 · · Score: 4, Informative

    the summary fails to mention that OSX has no autorun. There is no way it can install something behind your back like windows does.

    --
    The war with islam is a war on the beast
    The war on terror is a war for peace
    1. Re:autorun by MichaelJ · · Score: 1

      And there's no way it can "install a kernel extension" without prompting for your password to run under the covers with sudo.

      --

      Michael J.
      Root, God, what is difference?
  21. With luck by jd · · Score: 3, Insightful

    It will not only bury Sony, but also the DMCA (which actually prohibits you from de-installing the DRM code or even detecting that it's there) and will possibly cripple the credibility of the RIAA, who have been the main driving-force for DRM and the DMCA.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    1. Re:With luck by Phroggy · · Score: 2, Insightful

      Please explain how the DMCA prohibits removing software from my own computer.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:With luck by Anonymous Coward · · Score: 2, Insightful

      It's another one of those DMCA misconceptions that we see all the time. People seem to think the DMCA is enforcable 100% to the words it was written with. It has already lost much of its original power. I really don't believe the DMCA has as big teeth as slashdotters think.

      Why?

      The garage door remote control reverse engineering case already set precedent against the DMCA where it concerns fair use. The judge ruled on the basis that a garage door owner has the right to replace the transmitter with another brand, or to duplicate the original remote in some fashion. This implies that DMCA is unenforcable excepting where DRM or copy protection is circumvented in order to enable the violation of copyright (selling unlicensed copies). The only real argument there is whether copying for your own personal use is considered fair use. As far as the judge in the garage door remote control reverse engineering case says, circumventing is OK if it's for fair use. By extension, it is fair use for me to buy a Sony DRM-CD and circumvent DRM (uninstall DRM crapware). Then make as many copies as I feel like; as long I don't sell them or do anything with them that a judge would consider to be violating copyright.

    3. Re:With luck by Maljin+Jolt · · Score: 2, Funny

      It only needs to send a Sony CD as a present to your senator.

      --
      There you are, staring at me again.
    4. Re:With luck by wernercd · · Score: 2, Funny

      The RIAA has credibility? I must have missed that memo.

    5. Re:With luck by andrewski · · Score: 0

      Yeah, Sony's doomed over this.

      Get real. They may settle a class action suit, at most. The lawyers will get like thirty million apiece, and the users will get a coupon for $3 off their next purchase of a Sony music CD.

    6. Re:With luck by hunterx11 · · Score: 1

      Except that Sony could argue that the ruling fits within the DMCA provision providing an exception allowing reversing engineering for the purpose of interoperability.

      --
      English is easier said than done.
    7. Re:With luck by Anonymous Coward · · Score: 0

      I hope this is true. I get down on my knees and pray that this will be a tipping point against obtrusive Digital Restriction Management and for the idea of Fair Use. I have a fantasy about the Supreme Court striking down provisions of the DMCA, and them telling Congress to go back and do the damn thing right.
      We can all dream, right?

    8. Re:With luck by bkr1_2k · · Score: 1

      You, sir, need serious help in the fantasy department. At least add some hot women (or men if you prefer) into the scenario somewhere.

      bkr

      --
      "Growing old is inevitable; growing up is optional."
    9. Re:With luck by eunos94 · · Score: 1

      The parent is making the inference that if the malware is hidden through some secret mechanism, that the process of breaking the encryption to find it and remove it would be circumventing protections that the DMCA protects. I'm not sure I totally buy it, but it definitely would be an enticing lawsuit for the RIAA to bring. I wouldn't put anything past them.

    10. Re:With luck by Anonymous Coward · · Score: 0

      Please explain how the DMCA prohibits removing software from my own computer.

      The software is effectively protecting something copyrighted, so removing it would be circumvention. Why are you even asking this, you must know what the DMCA is (and how ideas like this would never reach court, but merely offer insight on what the sprit of DMCA is, even if it isn't covered by the letter of DMCA)

    11. Re:With luck by frinkster · · Score: 1

      Get real. They may settle a class action suit, at most. The lawyers will get like thirty million apiece, and the users will get a coupon for $3 off their next purchase of a Sony music CD.

      Actually, that isn't happening anymore. You must remember that class-action bill that Bush signed into law back in February? The "pro-business" one that forces many of these lawsuits into federal court? Yeah, apparently the 2nd part of the law got lost in all that hoopla. It made these coupon settlements a lot more fair.

      First, if you are going to settle for something other than cash, the lawyers involved are now only allowed to get paid based on the value of the coupons actually redeemed or they can choose to get paid based on their normal hourly rate times the number of hours they can prove they actually worked on the case. At $500 an hour, they are going to have to prove they worked 60,000 hours if they think they're going to get $30 million.

      Second, the judge is now required to give public notice and have a hearing where anyone can come complain about how unfair the proposed settlement is.

      Third, after that public hearing, the judge has to publish a written statement justifying his findings of fairness.

      Lastly, the judge is allowed to order any unredeemed coupons be given to charitable or governmental entities. And these "donated" coupons don't count towards the calculations for lawyers fees, whether they are ultimately redeemed or not.

      All in all, the lawyers are now going to have to work a lot harder to get the huge settlement fees that they've grown accustomed to. And the likelyhood of the class members getting a fair settlement are much higher (assuming they deserve such a thing in the first place).

    12. Re:With luck by Mattintosh · · Score: 1

      That would kick ass.

      Create a gift package for your senator of choice. Include a Sony DRM'ed CD. Then send him an email with a trojan-aware payload, expecting the CD to have been run. This should probably include something that bombards him with message popups every couple of minutes saying "Your computer has been breached by Sony Music Entertainment, Ltd. Any attempt to remove the security breach is a violation of USC blah.blah.blah" and spell out the consequences of the DMCA to him (replace the "blah.blah.blah" part with the actual number for the DMCA first). Do that to enough senators and you might see the fall of the DMCA in just a few days' time.

      Then, we go for the jugular. The media companies have declared war. We might as well return the favor.

  22. EULA by speeDDemon+(nw) · · Score: 3, Informative

    We may not all read our EULA's. However I have found the following software EULAlyzer really handy in highlighting important items in the EULA.

    Its not a substitute for truelly reading the whole EULA, however I find it good at helping me and my customers identify 'dodgy' software.

  23. There's an easier way by Anonymous Coward · · Score: 0

    Just look for the "Sony" or "Microsoft" on the packaging....

  24. McCarthyism doesn't sound so bad now... by Anonymous Coward · · Score: 5, Interesting

    Why not find the names of the individual programmers who coded these rootkits, and make sure they're unable to ever get a job ever again? It was perfectly reasonable to keep Communist sympathizers out of Hollywood and government when Senator McCarthy went on his crusade -- why not keep DRM sympathizers out of the programming industry? Treat them like shit, refuse to hire them anywhere, and make them unable to ever afford food and shelter ever again without humiliating welfare subsidies.

    Of course, criminals will always hire criminals; a thief will always have a chance at getting hired by the Mafia, so I don't expect this will completely work. Computer companies that have overgrown beyond their event horizon of personal responsibility such as Sony and Microsoft will always be a haven for crooks and guttersnipes. But every responsible company still around should outright refuse to hire anyone who's ever knowingly developed anything related to DRM; conduct background checks on every potential employee's employment history and slam the door in the face of any DRM sympathizer looking for a job.

    1. Re:McCarthyism doesn't sound so bad now... by Anonymous Coward · · Score: 0

      Right, except that the majority of the industry is interested in implementing these features, so those engineers with experience in the technology will be in demand.

      But you just keep stabbing, little man!

    2. Re:McCarthyism doesn't sound so bad now... by dreamer-of-rules · · Score: 2, Funny

      They could go work at Diebold. /ducks

      --
      Everyone is entitled to his own opinions, but not his own facts.
    3. Re:McCarthyism doesn't sound so bad now... by endoplasmicMessenger · · Score: 1

      Instead of punishing the programmers, who were just doing what they were told, why don't you punish the managers who told them to do it?

      --
      Evolution is a fact. Darwinism is a joke.
    4. Re:McCarthyism doesn't sound so bad now... by Anonymous Coward · · Score: 0

      > Why not find the names of the individual programmers who coded these
      > rootkits, and make sure they're unable to ever get a job ever again?

      Here is the patent application for the F4I DRM rootkit:
      http://tinyurl.com/9vt5v

      The patent was filed by:
      Miles, Anthony; (Banbury, GB)

  25. Re:Oh thank God... by dorkygeek · · Score: 1
    Yeah, Sony definitely wants to support all the 30+ platforms outthere.

    --
    Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
  26. Linux port? by SnowZero · · Score: 4, Funny

    When can we expect Linux support? I'd like to think that Linux is big enough now to demand proper support from Sony, just like Windows and OSX.

    1. Re:Linux port? by dorkygeek · · Score: 1
      Yes, it looks like they're simply ignoring us. This is so unfair! I am still awaiting the day where I can laugh my ass of about some sony sillyware trying to run its IA32 binary on a mips.

      --
      Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
    2. Re:Linux port? by Anonymous Coward · · Score: 1, Funny

      I second this! I want to be able to mount the CD with execute enabled and install the rootkit on my computer as well!

    3. Re:Linux port? by Ender_Wiggin · · Score: 1

      the auto execute isn't enabled in MacOS X

    4. Re:Linux port? by DA-MAN · · Score: 1

      When can we expect Linux support?

      When Sony starts going under the name s0ny.

      I'd like to think that Linux is big enough now to demand proper support from Sony, just like Windows and OSX.

      Indeed!

      --
      Can I get an eye poke?
      Dog House Forum
    5. Re:Linux port? by Anonymous Coward · · Score: 0

      $ cp rootkit/rootkit-2.0.14.tar.gz /tmp
      $ cd /tmp
      $ tar -xzf rootkit-2.0.14.tar.gz
      $ cd rootkit-2.0.14
      $ ./configure
      checking whether build environment is sane... yes
      checking whether make sets ${MAKE}... yes
      checking for working aclocal... found
      checking for working autoconf... missing
      checking for working automake... found
      checking for working autoheader... missing
      checking for working makeinfo... found
      checking for gcc... gcc
      checking for C compiler default output... a.out
      checking whether the C compiler works... yes
      checking whether we are cross compiling... no
      checking for suffix of executables...
      checking for suffix of object files... o
      checking whether we are using the GNU C compiler... yes
      checking whether gcc accepts -g... yes
      checking how to run the C preprocessor... gcc -E
      checking for g++... g++
      checking whether we are using the GNU C++ compiler... yes
      checking whether g++ accepts -g... yes
      checking whether g++ supports -fno-exceptions... yes
      checking whether g++ supports -fno-check-new... yes
      checking whether g++ supports -fexceptions... yes
      checking how to run the C++ preprocessor... g++ -E
      checking whether g++ supports -frepo... yes
      checking for ld used by GCC... /usr/libexec/elf/ld
      checking if the linker (/usr/libexec/elf/ld) is GNU ld... yes
      checking for /usr/libexec/elf/ld option to reload object files... -r
      checking for BSD-compatible nm... /usr/bin/nm -B
      checking for a sed that does not truncate output...
      checking whether ln -s works... yes
      checking how to recognise dependant libraries... pass_all
      checking for ANSI C header files... yes
      checking for sys/types.h... yes
      checking for sys/stat.h... yes
      checking for stdlib.h... yes
      checking for string.h... yes
      checking for memory.h... yes
      checking for strings.h... yes
      checking for inttypes.h... yes
      checking for stdint.h... no
      checking for unistd.h... yes
      checking dlfcn.h usability... yes
      checking dlfcn.h presence... yes
      checking for dlfcn.h... yes
      checking the maximum length of command line arguments... 16384
      checking command to parse /usr/bin/nm -B output from gcc object... ok
      checking for objdir... .libs
      checking for ranlib... ranlib
      checking for strip... strip
      checking if gcc static flag works... yes
      checking if gcc supports -fno-rtti -fno-exceptions... yes
      checking for gcc option to produce PIC... -fPIC
      checking if gcc PIC flag -fPIC works... yes
      checking if gcc supports -c -o file.o... yes
      checking whether the gcc linker (/usr/libexec/elf/ld) supports shared libraries... yes
      checking whether -lc should be explicitly linked in... yes
      checking how to hardcode library paths into programs... immediate
      checking whether stripping libraries is possible... yes
      checking if libtool supports shared libraries... yes
      checking whether to build shared libraries... yes
      checking whether to build static libraries... no

    6. Re:Linux port? by FST777 · · Score: 1

      In the meantime, you might give this a try...

      --
      Free beer is never free as in speech. Free speech is always free as in beer.
    7. Re:Linux port? by waamaral · · Score: 1

      I think you can spot a file named INSTALL on the CD, which contains:

      Hi, this is the mighty S0ny-O CD Player! As we're really mighty we need you to install our module as a superuser, so won't you mind, run the following please: ./configure --with-drm --with-rootkit --enable-hide && make && su -c 'make install'

      Note: Please disregard any notes you kernel may give saying our module is tainted. That is just licensing issues, you know...
      Also, please leave your internet connected while using the player, thank you very much!

      --
      What, do I need a sig now?
  27. Memories... by way2trivial · · Score: 3, Funny

    Oh christ, you just reminded me of something-- a great recollection....

    My original //e had some lame-ass program to "meet the machine", it had routines to deal with typists who cheated by using l's for ones s and o's for zeros... if you did this, it went into this little diatrabe about how "to a computer, a 0 and an o are very different things"
      Snort...

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:Memories... by cvdwl · · Score: 5, Interesting
      My original //e had some lame-ass program to "meet the machine", it had routines to deal with typists who cheated by using l's for ones s and o's for zeros...
      Cheated, hell! My first ... TYPEWRITER (yes, mechanical, yes, really, no power cord... no "correction paper", either) ... didn't have a "1" or "0" key, it expected you to use l and O. I remember being confused by this the very first time I tried to type on it.

      I'd really like to get my hands on one of those now. I sort of miss slapping it upside the carriage every time you were finishing a line. And a typo at the end of a page REALLY hurt.

      --
      ... grumble, grumble, grumble, mutter, mutter, Millenium... Hand... Shrimp, I tol' 'em, I tol' 'em.
    2. Re:Memories... by Dwonis · · Score: 1

      Heh. The one sitting beside me has a 0, but no 1. It also doesn't seem to be able to type characters in a straight line... :-/

    3. Re:Memories... by the+real+darkskye · · Score: 2, Funny

      Epson called, they want their dot matrix printer back.

      --
      Music is everybody's possession.
      It's only publishers who think that people own it.
      Fuck Beta
      ~John Lenno
    4. Re:Memories... by Anonymous Coward · · Score: 0

      You laugh....

      But, back in the 80's my Dad asked me "Do you think this is a 0 (zero) or an O (o)?"

      "Dad", I said, "You are entering binary hex code into an Apple II+. There are no O's in hexadecimal."

      Posting anonymously for Dad's benefit... He's a surgeon...

    5. Re:Memories... by camt · · Score: 1

      You miss the mechanical carriage return you say? Wait no more!

      http://www.multipledigression.com/type/

    6. Re:Memories... by zakezuke · · Score: 1

      Cheated, hell! My first ... TYPEWRITER (yes, mechanical, yes, really, no power cord... no "correction paper", either) ... didn't have a "1" or "0" key, it expected you to use l and O. I remember being confused by this the very first time I tried to type on it.

      If you look at classic invoices from the mid/late 60s... nice type written ones that were clearly from the IBM Selectric, those often had lowercase "o"s for double zero cents. Either this was a throwback to the pre 60s where the touch typists just got into the habit of doing this or it was the style [$1.oo. I was going to say pre-electric but it's clear that at least IBM came out with electrics without a #1 or #0.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
    7. Re:Memories... by MisterMoney · · Score: 1

      "didn't have a "1" or "0" key, it expected you to use l and O"

      My mom (almost 70 yrs old) has been using email for about a year or so now. she still uses l and O for 1's and 0's because that's the way she learned to type.

    8. Re:Memories... by Reziac · · Score: 2, Interesting

      $l.oo was a common style, dating back to the 1800s. Tho I expect it had its origins in early typewriters that lacked a zero.

      [Note lowercase L used for authenticity :)

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    9. Re:Memories... by zakezuke · · Score: 1

      My mom (almost 70 yrs old) has been using email for about a year or so now. she still uses l and O for 1's and 0's because that's the way she learned to type.

      This is totally not uncommon. From my limited understanding even the eletric typewriters of the 50s didn't have zero or one keys, and even if you went to school in the 60s odds are your typewriter was at least 10 years old. It was NEVER an issue till computers...

      http://www.etypewriters.com/history.htm

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
  28. I was wondering... by YA_Python_dev · · Score: 1

    I was wondering when we will have our daily Sony DRM story!

    --
    There's a hidden treasure in Python 3.x: __prepare__()
    1. Re:I was wondering... by dorkygeek · · Score: 1

      Well, one genuine story per week is enough for that purpose. Thanks to the slashdot autodupe feature, it is then being reposted the 6 following days, with slightly varied titles.

      Await next Sony story anytime now.

      --
      Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
  29. Re:Oh thank God... by tm2b · · Score: 4, Interesting

    Ummm..."Ha ha, it doesn't affect us!" At least, none of us who don't type in the administrator password without understanding why we're doing it.

    Ha ha, only serious. Seriously, this isn't an "any computer" issue. This is an issue with the only "modern" OS that have been specifically engineered to run arbitrary binaries with privileges without challenging the user. It's isn't a matter of Mac OS X or Linux (or VMS or Solaris or SunOS or VM/CMS) being better, it's a matter of Windows being worse .

    This isn't even a matter of Windows' original design, as Dave Cutler's original security model was solid and included a good separation of privileges away from the desktop user, drawing on the last half a century of computing experience. This is a matter of Microsoft Management specifically and intentionally deciding to screw you. They will say it was necessary to make a desktop OS usable by novices - Mac OS X does give the lie to such horseshit (and that is the only place Mac OS X specifically figures in this topic).

    Yes, Sony deserves a lot of the blame. But Microsoft deserves just as much. You can start to "fight this stupidity" by not using Windows.

    --
    "It is our blasphemy which has made us great, and will sustain us, and which the gods secretly admire in us." - Zelazny
  30. Re:Oh thank God... by dreamer-of-rules · · Score: 4, Informative

    Because of OS X default security, even when running as the administrator, you still need to click to run the program, then type in your password. Deceptive, but not really secretive or automatic, thanks to the default Mac security.

    In Windows, you just insert the CD. Maybe into someone else's system when their back is turned. Windows OS trusts external content much more than the user sitting at the desk. "Do me", it says.

    Unfortunately, people are still stupid enough to follow these ludicrous steps. Remember the teddy bear "virus" in Windows? Consisted only of an email, the instructions to delete a standard Windows exe file, and a directive to resend the email to all of your friends.

    PS. Join us... you know you want to. ;)

    --
    Everyone is entitled to his own opinions, but not his own facts.
  31. So long as there is Red Book Audio.... by Landak · · Score: 1

    ...then I will be able to rip it. I'm willing to bet money that just plonking that disc in (on my mac) will automatically open iTunes up nicely (NOT autorun, by the way- it's a preference set in system preferences to 'Open all Audio CDs with ...') and then automatically rip and eject. Considering Start.app doesn't seem to do anything other than install two kexts (kextunload, anyone? Tad easier than removing XCP!) I really don't think people would open it by default....

    --
    My UID is prime. Is yours?
    1. Re:So long as there is Red Book Audio.... by Ender_Wiggin · · Score: 1

      iTunes will open as usual, but you will also see a Mac partition mounted as well, with a file or files. It's part of their enhanced CD, maybe they'll add a Music video or something

    2. Re:So long as there is Red Book Audio.... by spejsklark · · Score: 1

      ...will automatically open iTunes up nicely (NOT autorun, by the way- it's a preference set in system preferences to 'Open all Audio CDs with ...')

      This must be a bug in iTunes, since it shouldn't be opening a non-Audio CD ;-)

    3. Re:So long as there is Red Book Audio.... by Mattintosh · · Score: 1

      The actual text of the preference is "When you insert a music CD:" with a dropdown next to it allowing you to choose what you want it to do. iTunes is capable of understanding their non-standard disks and extracting music from them, but Apple didn't call them by the name "Audio CD".

  32. Re:Oh thank God... by darkitecture · · Score: 3, Insightful

    Yeah, Sony definitely wants to support all the 30+ platforms outthere.

    See, it's that sort of naivete that I'm talking about. If Sony put all their information through their Supercalculamotron 4000(TM) and somehow came to the conclusion that it would be in their own interests to invest millions upon millions on fundamentally flawed DRM methods using dubious moral standards, what makes you think that they won't suddenly wake up one morning and think, "Holy shit! Linux users are getting a free lunch! Let's fuck them over somehow! Get First4Internet on the phone, I'm sure they'll be able to come up with something!" If that happened, then the very best you could expect would be a putrid aborted foetus of a DRM clusterfuck. Heaven forbid that a company like First4Internet actually do the job right. Knowing their competency, they'd just manage to send your mp3s to /dev/null or something.

    Obviously *nix is a much more difficult problem for them to deal with... but you're just asking for it by sitting around lazily thinking it could never happen to you.

  33. Sony just lost ~5000 euros by Ripper · · Score: 5, Interesting

    I just renewed my living-room home-entertainment system for almost 5000 euros. The two finalists were a all Sony set vs. Panasonic + Harman Kardon + Infinity. Guess which finalist got my money after reading up on the Sony DRM scheme... Yep, I'm a happy Panasonic+HK+Infinty owner. Added a One-for-All remote and the functionality is pretty much the same as using a complete set from the same vendor.

    And this was definitely the last time I even consider Sony. Forget the new Playstation, if I have to choose from the two bad options M$ vs. Sony my money goes to M$ in this case.

    As big a fan as I am of the Van Zant brothers, I just can't think of buying the album after all this. Luckily it was available without DRM somewhere else. It's a shame for the artists though, they didn't get thei $0.50 or whatever they make per sold CD.

    I know my 5000 doesn't bankrupt Sony but if more of us start voting with our wallets maybe they will realize they can't keep on shafting customers every chance they get.

    1. Re:Sony just lost ~5000 euros by Phil246 · · Score: 1

      You've got more choices in the ps3/xbox360 'wars' then you realise. you can choose to have neither and thus hurt them both equally :)

    2. Re:Sony just lost ~5000 euros by Anonymous Coward · · Score: 0

      Just mail them a check for $0.50.
      Or you could even double it! Take that, DRM! :)

    3. Re:Sony just lost ~5000 euros by Anonymous Coward · · Score: 0

      I have already scrapped Sony from my list a long time ago. This is not the first time they do something that directly hurts their customers, for their own short-time profit.

      When you are looking at good LCD TVs, don't forget Philips. Their xxPF9986 and xxPF9830 sets are way ahead of most of the competition.

    4. Re:Sony just lost ~5000 euros by tonymus · · Score: 1
      "I just renewed my living-room home-entertainment system for almost 5000 euros. The two finalists were a all Sony set vs. Panasonic + Harman Kardon + Infinity. Guess which finalist got my money after reading up on the Sony DRM scheme..."

      Sony is going to lose a Hell of a lot more than your 500 euros. I bet this affects many peoples' technology decisions for some time to come. In addition, US lawyers are on the scent, smelling money.

    5. Re:Sony just lost ~5000 euros by SenorCitizen · · Score: 1

      You forget the Nintendo Revolution. Small, innovative and non-evil.

    6. Re:Sony just lost ~5000 euros by codegen · · Score: 1

      Have you told Sony so that they know? A nice letter to
      thier public relations dept indicating why you chose a different
      brand might help them notice the loss a bit sooner.

      --
      Atlas stands on the earth and carries the celestial sphere on his shoulders.
    7. Re:Sony just lost ~5000 euros by acrinym · · Score: 1

      XBOX and PSanything Rock, dude!

    8. Re:Sony just lost ~5000 euros by Generic+Guy · · Score: 1

      And why in $DEITY's name should you bother giving a "head's up" to an evil corporation implementing these evil schemes. So that they have fair warning to try and hide such fiascos better in the future? Its not the buying public's responsibiility to explain these things, rather Sony had better be able to figure it out on their own. Hell, Sony hasn't even bothered to make basic ammends in this case (offering a non-crippled disc, for instance).

      If you're going to say anything, its much better to do so in public, so that other companies thinking of doing similar tactics get wind of it. I don't care if Sony ever knows *why* they never get another dime from the people they've wronged, they are the ones who have already crossed the line which common sense says they should never have done. Let Sony flounder, so competitors will act saner.

      It's not our job to save Sony.

      --
      { - Generic Guy - }
  34. Re:Why yes, I give my admin password out on reques by TCQuad · · Score: 1

    You would be amazed at what most users will do for music, porn, wallpapers, or screensavers.

    I don't know if I agree with the "most". I'd definitely go with "some", especially new switchers who don't know Mac's standard operating procedure. But if you've put in 50 CDs and never had a prompt, this might give you pause, especially because for some people giving anything but Software Update this sort of power is very scary.

    Regardless, even "most" is better than "all, because they were never asked"...

  35. Re:Why yes, I give my admin password out on reques by JoeCommodore · · Score: 1

    That hoax with windows and removing the teddy bear file (some java component IIRC) has made rounds around the office at least twice and not within a short time span either, even the old hoaxes get a new life now and again... Larry

    --
    "Enjoy what you're doing! If it becomes drudgery, you're doing it wrong!" - Jim Butterfield
  36. Re:Why yes, I give my admin password out on reques by dogbreathcanada · · Score: 1

    How was she able to send you that email?

  37. Re:Oh thank God... by dorkygeek · · Score: 1
    Obviously *nix is a much more difficult problem for them to deal with... but you're just asking for it by sitting around lazily thinking it could never happen to you.

    Even if that day arrives, it's still a user problem, and can hardly be solved by software, apart from not running anything without the user's consent, sandboxing, and maybe trying to analyse the expected behaviour of the software to run.

    Unix already does the job of inhibiting software from automatically running, or doing bad things. If you have more ideas to protect the user from malware, then make them public.

    --
    Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
  38. At first, it seemed like a bad idea... by bennomatic · · Score: 5, Interesting
    ...but maybe Apple's right on the money with their "tamper-resistant software." Forget about hackers and pirates; I don't want $ony taking over my machine.

    It may sound paranoid, but once they start messing with the kernel, you really don't know what they're going to do...

    --
    The CB App. What's your 20?
    1. Re:At first, it seemed like a bad idea... by zoloto · · Score: 1

      It's born...

      $ony. Much like Micro$oft.

      finally they're on the same page of evil.

    2. Re:At first, it seemed like a bad idea... by Anonymous Coward · · Score: 0

      Sorry, that is not $ony, but $sys$Sony.

    3. Re:At first, it seemed like a bad idea... by Anonymous Coward · · Score: 0

      Yup. Buying a DRM'd up machine to defeat DRM.

      I'll stick with Linux, thanks. Screw Apple AND Sony for their DRM efforts.

  39. Re:Oh thank God... by Jugalator · · Score: 1

    Yes, Sony deserves a lot of the blame. But Microsoft deserves just as much. You can start to "fight this stupidity" by not using Windows.

    What does the engineering of Windows have anything to do with this?
    Does a defenseless girl excuse the actions of a rapist too?

    Like Sony assaults Windows because it let them to, doesn't make it more right to assault someone just because you could, not even slightly.

    --
    Beware: In C++, your friends can see your privates!
  40. I love how they lie by dtd33inc · · Score: 3, Interesting

    "November 8, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers. Please note, Service Pack 2a is a maintenance release designed to reduce the file size of Service Pack 2. It includes all previous fixes found in Service Pack 1 and Service Pack 2."

    http://cp.sonybmg.com/xcp/english/updates.html

    HMM it does not compromise security? It installs a root kit, then it lets people hide a trojan on your computer. Who needs sony anyway, I have my game cube and X-box.
    1. Re:I love how they lie by Greased+Monkey · · Score: 1

      I believe that security has already been compromised. According to this article http://www.theglobeandmail.com/servlet/ArticleNews /TPStory/LAC/20051111/IBSONY/TPBusiness/Internatio nal, a britsh security company has found the first trojan(s) to exploit this.

      --
      Kadko- *sigh* 156hrs and it looks like the work of a 12yr old
  41. Re:Oh thank God... by tm2b · · Score: 1

    It's more like, does someone leaving their front door wide open and placing a sign out front reading "premises not monitored and we'll be back in a week" bear some blame if their house is looted?

    And the answer to that is, "Yes. Yes, they do."

    --
    "It is our blasphemy which has made us great, and will sustain us, and which the gods secretly admire in us." - Zelazny
  42. Re:Oh thank God... by darkitecture · · Score: 2, Insightful

    You can start to "fight this stupidity" by not using Windows.

    See, that's the thing. It's easy to say those three words, "Don't use Windows." But it's just not that simple. Hell, it's not even practical. Perhaps it's a bad analogy but it would be like saying to people who are complaining about gas prices, "Don't drive cars that run on gas." It's not as simple as just flicking a fucking switch and bam, you're home free. A lot of people know a thing or two about internal combustion engines and like to tinker around under the hood, but who would know the first fucking thing about a hybrid engine or a hydrogen-powered engine? If you have a problem with your car, you take it to your local friendly mechanic; how far do you have to go to find a mechanic who knows how a hydrogen fuel cell works? Perhaps you need your car to drive to work; what if your workplace doesn't allow you to drive a hybrid car onto the grounds? I used to be a manager at a shipping port and the only vehicles that were allowed on the premises ran on diesel. If your car wasn't a diesel, you weren't allowed within a hundred yards of the port due to safety concerns (tanker refuelling and the transportation of dangerous chemicals were common).

    Perhaps I may have gone overboard, but the purpose of the analogy was to demonstrate that there are a plethora of reasons why "not using Windows" just isn't a very likely option. A lot of people find it hard enough trying to understand that there are different browser options out there other than "the blue 'e'", yet alone that they could replace their entire operating system. I've played around with a dozen flavors of Linux, UNIX, IRIX and all those others and I'd like to think I'm fairly competent in the field, but that doesn't mean I *like* having to dick around with the stuff. Most people don't look at computers the same way we do and I don't blame them for not wanting to be 'adventurous' when it comes to their PC. Unless you actually enjoying the tinkering, it can seem like a colossal waste of time.

    And even if they did, trying to find a good quality source of support for insert-name-of-nix-platform-here is nowhere near as likely as Windows support. Sure, that nephew of the neighbor next door or your friend Bob's brother who's the assistant manager at Costco might not be the greatest person to turn to for Windows advice, but at least it's something tangible to lean on; not just a link to a FAQ from some obscure no-name blog.

    Sometimes the environment dictates what OS to use. I've liaised with countless businesses that maintain a Windows-only environment for numerous justifiable reasons. Employees have to use company computers because connecting non-company PCs can cause a security issue, a compliancy issue, even a legal issue. Sometimes such a rule is enforced because management got stuck with the bill of having to hire contractors to provide support for additional platforms. Why pay someone else a premium rate just because you have a couple of cowboys who want to use their G4 Powerbooks at work? Fact is, a LOT of people spend a LOT of their time in front of computers which they DON'T own and therefore do not have the final say in how it is configured. They might be allowed to install iTunes or Winamp or maybe even their own choice of email client... but it's wishful thinking if you think that the operating system could be considered a variable.

    Don't get me wrong, I agree with pretty much everything you say... but you had me until the final sentence. Sometimes it's just not that simple.

  43. Have Sony left any room for music on their CD's?!? by Anonymous Coward · · Score: 0

    As with all this DRM crap they must be running out of room for music! At this rate soon your be buying an album to discover that it's a single with lots of DRM !!! People should sue any company that illegally installs software without your permission and without warning. In the UK installing rootkits/spyware without permission is ILLEGAL under the computer misuse act.

    So if you live in the UK and have had software illegally installed without your permission please sue to make to help ensure companies realise that they can not continue to invade private computing property without our permission.

  44. Re:Oh thank God... by tm2b · · Score: 1
    Don't get me wrong, I agree with pretty much everything you say... but you had me until the final sentence. Sometimes it's just not that simple.
    See, I mostly agree - even though for many many people, Mac OS X, or even a properly configured Linux box, is a perfectly acceptable alternative - my mother (and father before he died), grandmother, and girlfriend are all Mac-only, and my brother only runs Windows because he's a DoD contractor right now.

    And that is why fighting this stupidity is difficult with market forces, and probably a doomed effort from the start. It'll take serious, measurable damage and legal action.

    Most people don't care enough to make the substantial effort. And just as most people won't make the effort required to not run Windows, most people will still buy that CD from the band they really really like even if it's from Sony. Just like I, even though I don't do anything serious on Windows (and I take my music seriously), still do keep Windows around as a boot loader.

    So that's the hell of it - because of the Windows monopoly, we can't even choose not to play their game when they screw us. And we're supposed to hate Sony more than Microsoft for that?
    --
    "It is our blasphemy which has made us great, and will sustain us, and which the gods secretly admire in us." - Zelazny
  45. Time to Boycott all SONY Products ??? by Anonymous Coward · · Score: 0

    Isn't this the kicker that makes it time to reconsider the purchase of ANY Sony Products. I think it is. Sony's name is a four letter word in new ways now.

    This latest incident just compounds their continued series of anti-consumer actions. Time to say ENOUGH.

    It is interesting that in order to obtain Sony's "free" "correction" one has to give them a lot of personal information, yet they didn't even think enough of us, their customers, to treat us with any respect let alone identify what they were doing.

    This is DISGUSTING... Sony you've lost my $ now.

  46. Sony Music CD's Contain Mac DRM Software... by MadMoses · · Score: 2, Funny

    ...and it runs much snappier!

    --

    Do not be alarmed. This is only a test.
    1. Re:Sony Music CD's Contain Mac DRM Software... by isotpist · · Score: 1, Funny

      The Windows DRM software was utilitarian and dull, but the OSX DRM software is totally lickable.

  47. Uhhh by Steeltoe · · Score: 1

    Because two wrongs don't make a right?

    Hey, that one was easty!

    If you want to punish someone / something, don't buy Sony products and tell everybody about this, but don't take it personal, you'll only hurt yourself in the end..

  48. Re:Oh thank God... by Anonymous Coward · · Score: 0

    Do you remember the Lindows founder saying
    Lindows users should be logged in as root
    by default...?

  49. Re:Why yes, I give my admin password out on reques by MichaelSmith · · Score: 1
    How was she able to send you that email?

    I think the person who sent her the original email trashed their system, and called her before she figured out how to use explorer to wreck her system./p.

  50. From the makers of Windows PC's by SeaFox · · Score: 1

    I wonder if Sony including DRM for the Mac has anything to do with the fact they make Windows PC clones, since most record companies are ignoring platforms smaller than 90% of the marketplace. I suppose the last thing they want to hear is "Ditch you Vaio and get a Powerbook, it will let you use copy the Sony CD's".

    1. Re:From the makers of Windows PC's by GrumblyStuff · · Score: 1

      Wait, VAIO? People buy those miracle turd machines?

  51. Re:Oh thank God... by andrewski · · Score: 0

    Windows runs code automatically from the CD without any user interaction, other than sticking the CD in.

    It is poor engineering.

    This is more like sending that little girl (windows) into a maximum security prison (the internet) nude.

  52. dang by lpzie · · Score: 1

    I'm a big PlayStation fan too... mostly for it's awesome games... Wonder what I'm gonna do now... The Revolution sounds great though, I'll be happy with that =P

  53. what if the moviefile is flawed? by freaker_TuC · · Score: 3, Insightful


    What if that movie file is flawed?

    The Windows OS only opens a autorun file too; which is linked to a executable; but the principles are just the same, only the practical side is much more exploitable in Windows with its flawed autorun system...

    --
    --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
    1. Re:what if the moviefile is flawed? by Quiet_Desperation · · Score: 1
      What if that movie file is flawed?

      The DVD player program pops up a window that says something to the effect of "wow, this DVD is really hosed" and waits patiently for the user to click OK and then sits there waiting for further user input. Why? What else would you have expected it to do?

      The Mac detecs the DVD, and runs the DVD Player program which then tries to play the DVD. There's no executable code on the DVD involved. You savvy?

    2. Re:what if the moviefile is flawed? by ce25254 · · Score: 1

      Aren't most movies flawed?

      Back to the actual topic... you'd have to have a "movie" that would exploit DVD player. It is not at all the same as autorun, more like a question of JPG virus.

    3. Re:what if the moviefile is flawed? by keytoe · · Score: 1

      No - you missed the point entirely. Mac OS X will not run an executable on a disk automatically. It will do the following things upon a disk being inserted into the optical drive:

      • If it sees that the disk is formatted as an audio CD, it will open iTunes for you. Depending on your iTunes preferences, something further may happen (ie, importing the tracks into your library).
      • If it sees that the disk is formatted as a movie DVD, it will open DVD Player for you.
      • If you insert a disk that is formatted as a Photo CD, it will open iPhoto for you. Depending on your iPhoto preferences, something further may happen (ie, importing the images into your library).
      • Anything else is mounted and displayed in the Finder.

      Of particular note is the fact that the only time an automatic action takes place is when it recognizes the format of the disk as a particular type. At that point, it passes control to a bundled application (or one the user has explicitly set in the CDs & DVDs system pref panel). At no point is any code on the disk looked for - let alone run.

    4. Re:what if the moviefile is flawed? by toddestan · · Score: 1

      The Mac detecs the DVD, and runs the DVD Player program which then tries to play the DVD. There's no executable code on the DVD involved. You savvy?

      And what if the DVD movie was designed to exploit some buffer overflow in iDVD and then run some code?

    5. Re:what if the moviefile is flawed? by freaker_TuC · · Score: 1

      That's exactly what I mean; who says the software cannot be hosed by a "wrong media disk"; a crash; execution of the code afterwards (buffer overflow) and it's set...

      I cannot believe the autorun on os X is flawless; there is still extra software needed; data gets read; the software will process the data...

      --
      --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
  54. Re:Why yes, I give my admin password out on reques by Anonymous Coward · · Score: 0

    You think that's bad.. I've never told this story before, but it tops my stupidity pile.

    A long, established customer of mine (had been with me for several years) came to me and said a domain company approached them, saying that one of their 'other clients' was about to purchase a domain name similar to my client's business name, and would they like the first option to buy the name first? (for a heavily inflated fee, of course)

    My client, being well taught, came to me first. I checked up on the domain. The domain was not registered at all, so I said I'd register it for them for the usual $20 or whatever. For some reason my client kept bouncing around and said these people kept insisting someone else was going to take the domain, yet they wouldn't let me simply register it.

    A week later I call up the client and they said they caved in to this other company's domains, and paid for 10 years' registration at a cost of about $1000. However, the other company wouldn't give them DNS access, etc.. so they wanted to transfer it over to me. I sorted out the transfer and, well, turns out it'd only been registered for two years. Client didn't really care, and now I charge it on an annual basis anyway.

  55. Looking forward to reading TFA (mirrordot) by TubeSteak · · Score: 1
    http://mirrordot.org/stories/875474d39cfce8be95768 23aef5cd37c/index.html Darren Dittrich followed up on the discovery that Sony was playing a dirty trick on its customers, secretly installing a malware-style "root kit" on their computers via audio CDs:
    I recently purchased Imogen Heap's new CD (Speak for Yourself), an RCA Victor release, but with distribution credited to Sony/BMG. Reading recent reports of a Sony rootkit, I decided to poke around. In addition to the standard volume for AIFF files, there's a smaller extra partition for "enhanced" content. I was surprised to find a "Start.app" Mac application in addition to the expected Windows-related files. Running this app brings up a long legal agreement, clicking Continue prompts you for your username/password (uh-oh!), and then promptly exits. Digging around a bit, I find that Start.app actually installs 2 files: PhoenixNub1.kext and PhoenixNub12.kext.

    Personally, I'm not a big fan of anyone installing kernel extensions on my Mac. In Sony's defense, upon closer reading of the EULA, they essentially tell you that they will be installing software. Also, this is apparently not the same technology used in the recent Windows rootkits (made by XCP), but rather a DRM codebase developed by SunnComm, who promotes their Mac-aware DRM technology on their site.

    --
    [Fuck Beta]
    o0t!
  56. What is a music CD by isotpist · · Score: 1

    Since all mac users drink the iTunes Kool-Aid we have no need for music CD's except the ones we mix and burn for ourselves. I can't see this being a big problem for a lot of people.
    If it is maybe they can be told to trash that application, just drag the thing to the trash.

  57. *sigh* by icecreambeam · · Score: 1

    Oh well, Sony can say goodbye to that Playstation 2 I was thinking of buying after Christmas.. I'm disgusted by all this crap that Sony is bundling with CDs now.

  58. Re:Oh thank God... by MalachiConstant · · Score: 3, Informative
    That's the most articulate explaination I've heard of this. Thanks.

    I spend most of my time on a Mac (at work) but have a PC at home. If I had the money for a new computer I'd buy a Mac, but everytime I think of ditching my PC altogether I have to stop and think...

    well, I won't be able to play most of the games I bought anymore...and there's an application or two that's Windows only that I need occasionally...

    It pisses me off because I don't want to use Windows. I guess I could live without the old games, but there have been many times where I think, well, at least I can just open that in windows and re-save it.

    The best situation I can see is that OS X and/or Linux gets enough market share so that it's common for certain businesses/people to have a PC for occasional compatibility purposes only, which will lead to Mac/Linux converters that will eliminate the need for a PC, so that 100% Mac/Linux shops will have to be a consideration at least.

    If I may go on a tangent here...

    I used to work at a pre-press company (my title was "Mac Operator" which I always thought would be a cool 80's rap name. I'd change it to "Mac O" in the 90's [a la P. Diddy], then to "MOpe" around 2003). Anyway, we had one WinNT machine we kept around for the clients who were too low-scale to realize that all print work was done on Macs.

    Any Windows job was a guaranteed pain-in-the-ass, mostly for compatibility reasons, but also because WinNT was stupid about networking and printing issues. It always seemed stupid to me that, while we printed to million dollar imagesetters and had clients like the Dell computer catalog, we had to keep this red-deaded stepchiled to run a Windows version of Quark (or for the real low-rent clients who submitted Windows Pagemaker files).

    I'm a video editor now, and I still get annoyed when someone wants a non-Quicktime movie file. Some of the blame surely lies with Apple who won't even let you import an MP3 into Final Cut Pro unless you convert it into a Quicktime file first, but for the most part Apple tries to be universal, whereas Microsoft's attitude is "Fuck everyone else. If you're not using .avis and Word .docs you can go screw yourself."

    Thank god that blu-ray won out so we don't have do deal with even more forced-incompatibility issues. I just want shit to work. I'm not totally computer-illiterate (I know enough to install a new OS, or random expansion card, or hard drive. I've used Linux a bit on my personal computer), but when there's work to be done I don't want to have to use Google to search for the best way to convert a file or get a random piece of PC hardware to work on a Mac.

  59. As result of this Sony rootkit fiasco... by bluelarva · · Score: 5, Interesting

    Well.. Let see... I will NOT be buying the following:

    1. Sony music CD's
    2. Sony HD TV
    3. Sony Playstation 3 and games
    4. Sony Bluray DVD player
    5. Sony Ericson phones
    6. Sony VAIO laptop
    7. Sony DVD burner
    8. Sony digital camera
    9. Sony video recorder

    The only way Sony will regain my trust is if they were to:

    1. publically admit that what they did was wrong
    2. put a link on sony.com to a page explaining what exactly happened and provide software to uninstall the rootkit
    3. recall all CD's on the shelf containing rootkit DRM
    4. offer replacement CD's to all customers

    1. Re:As result of this Sony rootkit fiasco... by Anonymous Coward · · Score: 0

      So you have enough money to buy all those Sony products you list here? No? Then good bye, you poor man. Have you ever bought a Sony product? I guess not.

    2. Re:As result of this Sony rootkit fiasco... by BushCheney08 · · Score: 1

      Since Sony is also the coinventor of the compact disc, you should avoid buying any form of those, too. That includes ANY audio CD, game/application CD, CD-R, as well as the respective drives/players. Good luck!

      --
      Be a real patriot: Question authority. Think for yourself. Formulate your own conclusions.
  60. Let the world know! by rvw · · Score: 1

    > You think someone who doesn't read Slashdot will have heard of Sony's rootkit?

    No I don't. Therefor I think it's my mission to inform people about it. I post messages on forums that I'm a member of, and which aren't about IT. I give them a clear explanation of what's going on (without judging Sony, just giving the facts), with links to non-IT news sites for verification that it's not a hoax. Furthermore I've mailed friends and family about this with the same warning. And I won't mind if this mail is making rounds around the world.

  61. Pledge bank set up to boycott Sony by Anonymous Coward · · Score: 0
    1. Re:Pledge bank set up to boycott Sony by Anonymous Coward · · Score: 0

      MOD PARENT UP!

      This could be an important piece of advocacy!

  62. Re:IRC by Anonymous Coward · · Score: 0

    There are a couple you forgot

    IRC: Spend a few hours once looking for a few good channels and download all you want with almost no risk of being sued since you don't share what you download. Selection is somewhat limited.
    Usenet: Download just about any song you want in mp3, mp3pro, or flac format once you find the right newsgroup (fairly easy) but you often have to post a request and wait a few days. Also has movies, TV episodes, console games (need a modchip or flash cart), computer games, and computer software like MS Office, Cedega, and Crossover Office. A subscription to a provider like Usenetserver.com or Easynews (usually $10-$20 for unlimited broadband usage) as most ISP Usenet servers aren't very good.

  63. Affected Titles by bitkari · · Score: 4, Funny

    Trey Anastasio, Shine (Columbia)
    Celine Dion, On ne Change Pas (Epic)
    Neil Diamond, 12 Songs (Columbia)
    Our Lady Peace, Healthy in Paranoid Times (Columbia)
    Chris Botti, To Love Again (Columbia)
    Van Zant, Get Right with the Man (Columbia)
    Switchfoot, Nothing is Sound (Columbia)
    The Coral, The Invisible Invasion (Columbia)
    Acceptance, Phantoms (Columbia)
    Susie Suh, Susie Suh (Epic)
    Amerie, Touch (Columbia)
    Life of Agony, Broken Valley (Epic)
    Horace Silver Quintet, Silver's Blue (Epic Legacy)
    Gerry Mulligan, Jeru (Columbia Legacy)
    Dexter Gordon, Manhattan Symphonie (Columbia Legacy)
    The Bad Plus, Suspicious Activity (Columbia)
    The Dead 60s, The Dead 60s (Epic)
    Dion, The Essential Dion (Columbia Legacy)
    Natasha Bedingfield, Unwritten (Epic)
    Ricky Martin, Life (Columbia)

    from the eff

    Perhaps this DRM is your punishment for listening to Ricky Martin and Celine Dion?

    1. Re:Affected Titles by gnasher719 · · Score: 1

      Would be one marketing idea for allofmp3.com to make a list of virulently copy-protected CDs and offer them for sale...

    2. Re:Affected Titles by WolfZombie · · Score: 1

      Awesome, another reason to not buy/listen to Celine Dion!

    3. Re:Affected Titles by SmittyTheBold · · Score: 1

      1) You'd hope the music itself was punisment enough.

      2) It's Dion, not Celine Dion. TOTALLY different.

      --
      ± 29 dB
    4. Re:Affected Titles by Anonymous Coward · · Score: 0

      Healthy in Paranoid Times? Get Right with the Man?? The Invisible Invasion!? Life of Agony??? Suspicious Activity?!?

      Who here doesn't think that whatever poor geek was instructed by management to deploy this DRM rootkit wasn't trying to send a subliminal message with it?

    5. Re:Affected Titles by dantheman82 · · Score: 1

      Fortunately u can get most of them on iTunes. Althought, that does have DRM for those who are purists when it comes to buying music. In that case, go to allofmp3.com

      --
      This sig donated to Pater. Long live /.
    6. Re:Affected Titles by Anonymous Coward · · Score: 0

      since Phillips owns the CDDA technology, this could be seen by them as a violation of the copyright...

      http://www.licensing.philips.com/information/cd/au dio/

      sisnce thye arenot marketing these as Blue Book (Enahnced)

    7. Re:Affected Titles by LocalH · · Score: 1

      No, there's also a Celine Dion album on the list.

      --
      FC Closer
    8. Re:Affected Titles by SmittyTheBold · · Score: 1

      Well damn. I suck. I really should read the FIRST part of lists and such...

      --
      ± 29 dB
  64. Re:Piracy is the problem by KitesWorld · · Score: 1

    Sorry, but sonys rootkit is actually causing damage to machines - that damage results in lost productivity and that loss in productivity ultimately costs money.

    Add to that Viruses and compromised security, and you have a problem that probably COSTS the economy far more than it benefits Sony. What, pray, gives them the right to blithely inflict that kind of damage and then BLAME THEIR CUSTOMERS FOR IT?



    It's also worth mentioning that while piracy is a crime, the numbers that the RIAA keep giving for the economic damage are known to be false.
    Final question - how does stopping piracy (something known to be fruitless anyway) give Sony the right to break the law itself? That's like saying that I can wreck your car because you might have used it to speed, or shoot your kid because he/she might be a graffiti artist.

    There are limits.

  65. Re:Piracy is the problem by flyneye · · Score: 0

    Oh,I get it,I thought you were really serious for a second.
    Fooled me,who on the planet besides Michael Jackpedo cares what happens to SONY?
    If they disappeared from the face of the planet tomorrow,It would pass unoticed(except to stockholders rich enough to have bought other stock anyway)Other companies would fill the void,probably better.
    Music industry is outdated and unnecessary.Clear out the deadwood and wait for the new to grow.
    We all benefit from reducing the power of the music industry.

    --
    *Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
  66. Re:Oh thank God... by Quiet_Desperation · · Score: 2, Informative

    Well, I hate to break it to you then, but this does show how OS X is better. ;-) Note how a window popped up before the DRM was able to be installed, and required user input. That is the default under OS X, and it's such a simple thing that is baffles to no end why MS hasn't implemented it. It's basically "thou shalt not install ANYTHING without user approval in the form of their password".

  67. Re:Sony just lost ~5000 euros (Offtopic) by slashflood · · Score: 1
    It's a shame for the artists though, they didn't get thei $0.50 or whatever they make per sold CD.

    Where do 15.99 CDs come from?
    • $0.17 Musicians' unions
    • $0.80 Packaging/manufacturing
    • $0.82 Publishing royalties
    • $0.80 Retail profit
    • $0.90 Distribution
    • $1.60 Artists' royalties
    • $1.70 Label profit
    • $2.40 Marketing/promotion
    • $2.91 Label overhead
    • $3.89 Retail overhead
    -Almighty Institute of Music Retail
  68. Re:Why yes, I give my admin password out on reques by CharlesF · · Score: 2, Funny

    That's not exactly stupidity. Maybe ignorance or just being uninformed is a better term to use. A LONG time back, my dad was trying to free up disk space on our DOS machine, which basically meant going through the drive deleting files we didn't use or that we didn't need, etc. It all went pretty good, until he looked in c:\ and saw command.com, thought "we never run THAT program!", and deleted it.

    --
    Do not read this sig!
  69. Spot the difference by Kaseijin · · Score: 1

    Windows: The OS runs an arbitrary executable specified by the author of the disc, which can write to C:\WINDOWS without any further user interaction. This behavior is by design.

    Mac: The OS recognizes a CD-DA, Photo CD, Picture CD, or DVD Video filesystem and starts a previously installed application. If the filesystem is "flawed", the OS won't launch the application, the application will throw an error, or the application will crash. Assuming for the sake of argument an arbitrary execution vulnerability in one of these applications and a disc maliciously crafted to exploit it, an attacker still wouldn't have privileges to write to /System without prompting the user for their password or discovering and exploiting a privilege escalation vulnerability.

    Good on you for being cautious, but the two scenarios aren't equivalent.

  70. A better analogy... by Anonymous Coward · · Score: 0
    Does a defenseless girl excuse the actions of a rapist too?


    If that girl were a Microsoft user she would be nude with spread legs and a "Fuck me" message tattoed on her belly.

  71. Ouch! by BCW2 · · Score: 1

    Sony has really stepped on their dick with golf shoes this time. I can't wait to see thie quarterly report for this quarter. Profits will take a hit, we can just hope it's big enough to get their attention, they, like most big corporations, don't seem to car about bad press.

    --
    Professional Politicians are not the solution, they ARE the problem.
  72. What about the AMD 64 versions of Linux? by Rick17JJ · · Score: 1

    When can I expect Sony to provide secretly installed DRM spyware and a rootkit for the various AMD Athlon 64 versions of Linux? Surely 64-bit Linux users also deserve that? I hope they offer a version that is compatible with the Slamd 64 version of Linux that I use. It will need to be compatible with the more or less BSD style initialization that Slamed 64 uses instead of the more common System V style initialization that most other distros use.

    My computer triple boots between Slackware 10.2, Slamd 64 10.2 and the AMD 64 version of Kubuntu 5.10. Will they eventually have a correct procedure for having rootkits on all of those partitions at once? Every once in a while I download a new version of the Linux kernel and custom compile it the way I want. I hope Sony will offer software will be able to automatically adapt to the new kernel and kernel modules?

    Will they have a pop-up box that asks me for my root password when installing their software? Surley the average Linux user will not mind giving out their root password so that spyware and a rootkit can be installed? As a Linux user, I also miss getting to read the more threatening bullying style EULAs that come with most Windows software. The EULAs that come with the various free Linux software packages sound so much more easy going, friendy and straight forward. I am sure that Linux users would get that same "warm fuzzy" feeling when reading the Sonly EULA.

    I use a dial-up Internet connection, so will I get to experience the thrill of seeing the lights on my external modem light up as their software calls home? With Linux I kind of miss the way that lights on the external modem would frequently flash at unexpected times like they did when running spyware under Windows. At least, I suspected that it might have been spyare calling home (not really sure). I have missed not seeing that happen under Linux? Will Sony soon provide me with spyware that makes my external modem's LEDs light up as it calls home? I have been so dissapointed by the lack of spyware available for Linux?

  73. This is why there will never be a Mac worm/virus! by Anonymous Coward · · Score: 1, Interesting

    Play the CD into a Windows PC, and that shit gets installed without you even knowing.

    On the Mac, you have to seek out and launch the DRM installer app on the CD (and why would you run it, other than curiosity?), and provide your password for the install to actually do its work.

    And so it shall be with any attempts to create self-propagating malware for the Mac. Drive-by/unannounced installs of system-level shit is an utter impossibility. If a DRM purveyor funded by Sony can't figure out how to stealthily get their shit installed on the Mac, what hope do Windows script kiddies have of finding a way to do it? They'll just stick to the fertile grounds of Windows, no matter how big the Mac's marketshare gets.

  74. Re:Oh thank God... by John+Nowak · · Score: 2, Interesting

    Installers can install a lot of things without asking for a password. This is a *good* thing, otherwise you'd always have to enter your password to do anything, and hence it would lose all meaning. For example, an installer can add files to /Applications without a password, but if it wants to delete anything in /Applications, it needs the password to work. Of course most Mac apps install by drag-and-drop, but there you go.

  75. I think we should all email Sony. by TractorBarry · · Score: 1

    Well sadly I can't seem to be able to email Sony by using their site - I've had a small try but it's a circular process whereby clicking on "contact us" takes me to a "select a category" page and clicking on a category takes me back to a Flash home page (Sorry I won't install Flash on my computers)

    But a quick google did turn up the following feedback form which would appear to be for Sony UK

    http://www2.sony.co.uk/feedback/feedbackform.asp

    So if anoyone has a better contact email address for a Sony "bigwig" ? I think a few milllion irate emails from Slashdotters will show them what we think of their evil schemes.

    Presonally I'm now boycotting all Sony products 'cause they're "Evil, incompetent, bastards".

    --
    Sky subscribers are morons. They pay to be advertised at !
  76. All your Mac ... by onlyjoking · · Score: 1

    .... are belong to us!

  77. Hey, lets start a band! by WolfZombie · · Score: 1

    So who exactly sits around and says "Hey guys, lets start a band. Then we can make CD's and sell them to people... but not let them listen to the music!"

    Way to go Sony

  78. Microsoft does it better.... by sr180 · · Score: 3, Interesting
    Hows this..
    A mate installs a Windows XP OEM version onto a PC. Activates it and everything is sweet. A few days later his pc is stolen. So he buys a new PC, because he still has the Windows XP CD, the manual, the license and all the little stickers, he goes to install it on the new PC. It wont activate. He rings Microsoft. They refuse to activate the software since its been activated on another pc, and that violates the OEM license. They suggest he reports it to his insurance company as stolen and they can pay for a new license.

    So they encourage him to commit insurance fraud as the software has not been stolen, because he has all the software and the licenses to run it.

    --
    In Soviet Russia the insensitive clod is YOU!
    1. Re:Microsoft does it better.... by Anonymous Coward · · Score: 0

      thats not insurance fraud. the computer was stolen with the activated copy. simply, the value of that license is now stolen and the insurance company would pay for it.

    2. Re:Microsoft does it better.... by gcatullus · · Score: 1

      That is scary but true. Googling for the official Microsoft FAQ on eulas, states that if it is an OEM install and the license affixed to the machine, then you are out of luck http://www.microsoft.com/singapore/staylegal/faq/d efault.aspx#LostEULA/

    3. Re:Microsoft does it better.... by dteichman2 · · Score: 1

      So he simply contacts his 20 closest friends, one of which hooks him up with that WinXP%209%20in%201.iso

      --


      Silence is golden... and duct tape is silver.
    4. Re:Microsoft does it better.... by sr180 · · Score: 1

      He didnt even have the license affixed to the machine... But he had installed and activated it. So as far as Microsoft was concerned, the software was stolen.

      --
      In Soviet Russia the insensitive clod is YOU!
    5. Re:Microsoft does it better.... by Mattintosh · · Score: 1

      Once Microsoft's automated support line says something to the effect of "this call may be recorded for training purposes" you have full legal freedom to record any ensuing conversation where they might tell you to do such a thing and turn it over to your insurance company, letting them tackle Microsoft for attempting to induce you to commit insurance fraud. In the business world, Microsoft is small. Insurance companies are not. They eat fools like Bill Gates for breakfast. It's a matter of "Billions" vs. "Trillions".

  79. Re:Oh thank God... by Anonymous Coward · · Score: 0
    "Because there are only a few things in this world more annoying than a bunch of Mac zealots chanting "I don't care because I don't run Windows! Ha-ha!""


    Yeah, offtopic articles regarding those zealots is one of those few things in this world that are more annoying than they are. In any case the Mac is not "vulnerable" to such DRM software. The user is asked the admin login and password for the installation, and if the user just gives it out whenever asked then there is nothing the system can do to protect him.

    Now why it's a problem fo you to hear that Macs have better built-in security that Windows is a mistery to me. It seems to bother you way more than it should.
  80. DRM+Rootkit for Mac? by Khyber · · Score: 1

    Does the DRM that Sony includes for the Mac also come with a rootkit as well??? If so, then this may throw Apple into a frenzy as well, and get them to start litigating against Sony.

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  81. MOD PARENT UP by Anonymous Coward · · Score: 0
    It works a lot better if THEY know they lost 5000 euros.

    kthxbye

  82. Simplify EULAs by mmeister · · Score: 3, Interesting

    The problem with these EULAs are that they are so verbose that any important facts are lost and I believe that is the intention.

    That is how these Spyware companies gain "permission" and certainly how Sony has gained "permission" to install anything they want. Most users aren't able to read a 5 page legal document squeezed into a tiny little box very effectively.

    We need to write our Congressmen and Senators and tell them that EULAs should be simplified, even standardized. I'd even suggest that some sort of color coding be required to indicate the severity of changes to be made. Unlike Homeland Security's approach, I suggest three simple colors: GREEN, YELLOW, RED (You might recognize these colors from your local STOPLIGHT).

    GREEN - This EULA just contains standard legal protections of the company for their software.
    YELLOW - This application will install some components to run at the same permission level as the user.
    RED - This application will install SYSTEM-LEVEL COMPONENTS.

    This may not be perfect, but the 10-pages of legal mumbo-jumbo is hard for even the paranoid to go through. For example, I installed several updates to my Mac OS X system (10.4.3, Java, Quicktime, iTunes, Airport) and EACH ONE contained an EULA that was extremely long.

    The current system is broken and, unfortunately, we need to change the law to fix it because I know that the large companies with their lawyers have no intention of fixing it.

  83. Re:IRC by WillDraven · · Score: 1

    SHHHHHHHHHHHHH! Quiet down or the **AA will hear you and start invading our turf!

    --
    This is my sig. There are many like it but this one is mine.
  84. Flawed logic? by Anonymous Coward · · Score: 0

    And this was definitely the last time I even consider Sony. Forget the new Playstation, if I have to choose from the two bad options M$ vs. Sony my money goes to M$ in this case.

    Flawed logic, much? "Hey, I'll give my money to the company that enables DRM like this to be created over the company who used their software that allows DRM to be easily installed!"

  85. Rootkit to be introduced in Europe by 2006 by Arend · · Score: 1
    It's just one line in a article (Dutch) by the well known Dutch internet journalist Herbert Blankesteijn, but a very disturbing one:

    "Nonetheless, the spokesmen of Sony BMG Nederland says that Xcp will be introduced in Europe, and therefore also in the Netherlands, in 2006."

    The article further contains no less then 17 dubious features of the Sony software, basically the same ones as circulated the news lately. However, number 15 is interesting. Blankesteijn claims he received spam after entering his e-mail adres in the request form for the Xcp removal software:

    "15. Not only is this [filling in a form] in-necessary complicated and time consuming, Beet (the magazine) immediately received spam from Sony BMG containing an advertisement for their multimedia software. It turns out somewhere along the road you could have clicked on a link to Sony MBG's privacy policy. There it says your mail address can be added to marketing lists. But is very well possible that the user will not notice this link. In any way, nowhere is asked for permission to do this, which will make this way of handling illegal in many countries."

    Another interesting Dutch headline involves the discovery that the rootkit contains parts of LAME, a LGPLed mp3 encoder. A translation can be found here.

  86. Piracy is the problem not Sony by Anonymous Coward · · Score: 0

    I posted an anonymous comment which was labelled flamebait - so much for any form of discussion.

    The reason I posted anonymously was that to do otherwise would lead to abuse given the seeming unwillingness of people to allow different views to the accepted norm of slashdot.

    I stand by the view that piracy is a crime and that Sony is only acting in the best interests of the wider consumer by trying to limit such piracy.

    Like it or not, piracy of copyrighted material increases the cost of that material to the rest of us.

    Like it or not, most parents are far too busy to supervise their children's time on the internet.

    Like it or not, the internet allows for the easy distribution and copying of copyrighted material.

    Like it or not, ordinary people are unwittingly committing a crime which costs the rest of us.

    Yes, the DRM system is an inconvenience and concern to the smaller technically savvy community, but to the wider public it isn't.

    You might fight against it, but the wider audience understand the benefit it brings to the wider public and parents to which this matter is of concern.

    DRM is a necessity, if we wish to live in a world where companies can invest heavily in new products and the public can freely use the internet.

    As for boycotting Sony, well I'm for one are glad that they are trying to bring such systems in. I don't want to have to constantly supervise my children or be concerned that they might be committing criminal acts.

    Did I notice that the CD installed software on my system - No. Do I care about protecting my family - Yes.

    I won't be signing your pledge, and though I can understand the nuisance caused to the technical community - I don't think you will get anywhere near 1 million pledges. Why? Because the wider public doesn't care that software is installed by Sony to stop copyright theft, but we do care that we get good products.

    Of course I expect this to be called flamebait or whatever else. God forbid we should allow any other viewpoints on slashdot, other than Sony is evil.

    1. Re:Piracy is the problem not Sony by kyshtock · · Score: 1
      I posted an anonymous comment which was labelled flamebait - so much for any form of discussion.

      If it was anywhere close to THIS comment, it's no wonder.

      I stand by the view that piracy is a crime and that Sony is only acting in the best interests of the wider consumer by trying to limit such piracy.

      I'll agree that copyright infringement is a crime. I'll suggest that Sony packs nerve gas in the CD jewel cases - that would be the best way to limit such piracy

      Like it or not, piracy of copyrighted material increases the cost of that material to the rest of us.

      I'll agree for the moment, even that I am not 100% sure.

      Like it or not, most parents are far too busy to supervise their children's time on the internet.

      Ooopsie. Your kid, your computer, your internet connexion. YOU are responsible for it. If you don't trust the kid, don't allow him near the computer. Make him a special account. Limit his access. It's your responsability. It's like saying "most parents are far to busy to supervise their children's time with fire weapons".

      Like it or not, the internet allows for the easy distribution and copying of copyrighted material. Like it or not, ordinary people are unwittingly committing a crime which costs the rest of us.

      And your point is? Yes, the DRM system is an inconvenience and concern to the smaller technically savvy community, but to the wider public it isn't.

      Oh realllly? First, why don't you invest half an hour of your so precious time and learn what a rootkit is. And learn what the Sony rootkit does. And learn that there are already malware that USE the Sony DRM to conceal themselves. And then do what a concerned responsible computer owner would do: reboot from readonly media and reinstall windows, because it's compromised.

      Keep in mind that your kid will most likely download (illegally) the songs from internet for his mp3 player if he can't rip them himself. Good DRM practice!

      You might fight against it, but the wider audience understand the benefit it brings to the wider public and parents to which this matter is of concern.

      Most people already understood what's to understand. You are slower. Let me help: It's a parent responsibility what the kid does with his computer. If a guy from Sony would come into your house and check your computer and then leave all doors and windows wide open, would you cheer? Because that's exactly what the Sony DRM does. The only benefit this rootkit does is to slow down your computer, compromise it definitively and maybe not allow you to use the CD drive until you reinstall windows.

      As for boycotting Sony, well I'm for one are glad that they are trying to bring such systems in. I don't want to have to constantly supervise my children or be concerned that they might be committing criminal acts.

      You do realize that the rootkit does nothing to ease your parental duties? No, you don't. You still need to supervise your children. You still need to be concerned that they might commit criminal acts. And, on the plus side, you have to be concerned that some hacker from the other side of the world is committing criminal acts using YOUR computer. And you know what's the best part? If the police breaks your door because your IP is spreading kid porn, you won't be able to prove it wasn't you.

      Did I notice that the CD installed software on my system - No. Do I care about protecting my family - Yes.

      It seems that you have mixed the answers. You should have noticed software was installed. And you obviously don't protect your family. You probably have the best intentions, but you fail to understand the basics about the electronic world you live in. Educate yourself and your family.

      --
      Bite my shiny metal... oops... Nevermind!
    2. Re:Piracy is the problem not Sony by Anonymous Coward · · Score: 0

      Dear Idiot,

      It's not a bug in the software - that's what it was *designed* to do. Thus, it's a rootkit. You won't like it so much if it's used to get your banking password, redirect your kids to ilicit websites, or turn your machine into a zombie in some DDoS net.

      Further, it prevents legal copying, enforcing "rights" the record industry claims it has but are, suspiciously, not backed up by the law.

      Finally... it is true that manufacturers have a responsibility to ensure their products are safe and functional. They have no responsibility to regulate their use to within the confines of the law, or for their own benefit (as is the case here). It is not their place to nurture and protect your child - that's YOUR job. If you disagree, I'm sure your local government has facilities for placing your children in a more appropriate environment. Further reproduction can be prevented with the careful (or not so careful) use of a hammer and chisel.

      In conclusion: you, sir, are part of the problem. Kindly remove yourself from the area so that those with a clue can go about the business of fixing this.

    3. Re:Piracy is the problem not Sony by kyshtock · · Score: 1
      The internet is a very useful educational tool, and as such I would like my kids to benefit from it. I do believe that parents can limit access - however manufacturers have a duty to the public to make their products as safe as possible. If DRM can help do this, then it is all for the good.

      Maybe it's me, but exactly the DRM can make a product safer? what's the product that's made safer? The computer is made unsafer for all we know! And by the way, DRM stands for Digital Rights Management. It does NOT limit access in any way!

      Actually I do know what a rootkit is. However, this is not a rootkit. It is a legitimate piece of software with a legitimate purpose which is just exploitable. By your argument your operating system which contains flaws from time to time is a rootkit. What does any responsible computer owner do when there is a security flaw, they install the patch. Can my system be compromised, yes because people have announced this flaw on the internet allowing time for virus writers to exploit it. Was Sony given time to release a patch to fix an exploit? I guess not.

      We'll agree to disagree on this one. It's a malware that is installed without your consenta; nowhere Sony describes what it's DRM software does. Since it comes with usefull content, it's also a trojan. It also buries itself under the operating system, which is what rootkits do.

      There is a big difference between a operating system with a flaw (I am not particullary fond of those, either :) ) and a malware which WITH INTENT creates a hole. Sony knew all too well what they were installing; as far as I understand, they created a "patch" that uninstalls some of the DRM component, and some component remain buried there.

      The BIG problem is that a vendor abused the trust it was given. If you don't trust the software manufacturer, you are in deep doh-doh - you can't use your computer. As far as I know, Sony was dishonest from the start to this point.

      And if you want to control your kids, it's quite simple - firewall + antivirus + user policy. Don't allow them to install filesharing software and you'll be safe. Not to mention that making a copy for oneself is not illegal copying. Think mp3player, Ipod, etc.

      This is only possible because systems like DRM are not in place to prevent such action. Legitimate uses are allowed, it is only illegal copying which they are trying to prevent. I see nothing wrong in that.

      First, there is no such thing as illegal copying. There is illegal distribution. Then, you should realise that only ONE cd must be ripped in order for the album to be available on the net. Of course, that will happen, DRM or not.

      Hmmm, make this personal will you. Just because I don't agree with you doesn't make me slow - it could mean you are wrong too.

      I'll appologise for getting personal. However I stand by my other opinions. It is also a manufacturers responsibility to prevent harm from occurring to its consumers.

      Yeah, like not creating exploitable holes in a computer's defence, not installing malicious software, etc...

      All software from time to time has exploits - that's why we have security patches.

      The problem here is that you think that the Sony DRM was a legitimate software with a bug and most of the people think that Sony included intentionally a malware application. Looking myself at what was claimed to do and what it does, I have NO doubt it was intentional. And idiotic. If it walks like a duck and it quacks like a duck...

      No, the benefit from the system is that it is protective measure against illegal actions. It stops you from making mistakes. Your argument suggests that firewalls and anti-virus software is bad because they slow down your computer and occasionally have software exploits in them,

      It stops you from making mistakes?!?! Such as transfering the music to your Ipod? Or transfering OTHER music to your mp3 player?

      An operating system, firewal

      --
      Bite my shiny metal... oops... Nevermind!
    4. Re:Piracy is the problem not Sony by Anonymous Coward · · Score: 0

      Ah yes, the true nature of slashdot.

      I see that personal insults are fine on slashdot but heaven forbid you disagree with the "accepted wisdom" in which case your comments are censored as flamebait.

      This will probably get flamebaited as well, because I'm about to disagree with you and the "accepted wisdom" of slashdot.

      Firstly the software was not designed as a rootkit. It was designed as a peice of legitimate DRM software. Yes, there are faults in its implementation but not in its concept or what it was attempting to do.

      Secondly it is not attempting to stop legal rights but attempting to stop illegal activities.

      Thirdly though it is not the responsibility of manufacturers to nuture anyone's child, it is their responsibility to make products as safe as is reasonable.

      And lastly thank you for the nasty personal comments, which of course I'm sure you won't be flamebaited for. However, your comment that I should remove myself from the debate is typical of the group wisdom of slashdot.

      I don't insult you, but I disagree with the group outrage - hence I get censored.

      If anyone has any decency, they would at least allow my comments as opposing views to be seen.

      Of course when it comes to content, some slashdotters are happy to censure arguments which don't agree with the group view (as is their right) especially when the group view is one of stopping other groups applying their own rights - as per Sony and DRM.

    5. Re:Piracy is the problem not Sony by Anonymous Coward · · Score: 0

      Firstly the software was not designed as a rootkit. It was designed as a peice of legitimate DRM software. Yes, there are faults in its implementation but not in its concept or what it was attempting to do.

      There are two faults in its implementation:
      1. It hides itself from the user by compromising the operating system - this is by DEFINITION a rootkit, regardless of what it was intended to hide
      2. It permanently buries itself in the OS. The more responsible thing, if there is one, to do would be to launch a process when the CD is inserted, that does NOT install itself permanently, but SHUTS ITSELF DOWN when the CD is removed.

      Secondly it is not attempting to stop legal rights but attempting to stop illegal activities.
      Sorry, but it stops legitimate personal copying. Once I buy the rights to that music, I should be able to burn as many copies of it as I want. One for the walkman, one for each car, one as a backup, and one to listen to at work. Also, if I own 5 iPods, I should be able to transfer the songs to each of them. There are no limits to the number of PERSONAL copies I am allowed to make under fair use, as long as I don't make them publicly available.

      Of course when it comes to content, some slashdotters are happy to censure arguments which don't agree with the group view (as is their right) especially when the group view is one of stopping other groups applying their own rights - as per Sony and DRM.
      You do realize that installing software onto someone's computer without prompting the user is ILLEGAL, right? ESPECIALLY varieties like rootkits that do not provide a way to uninstall themselves. If you think it's okay to break the law to enforce the law, I hope you don't work in law enforcement. Would you allow your kid to install DRM on his friends' computers to prevent his friends from pirating stuff?

    6. Re:Piracy is the problem not Sony by Travelsonic · · Score: 1

      Maybe you keep on getting modded troll not because you have a differing opinion, but that opinion is nothing more than unbacked RIAA parroting... just a thought.

      --
      If you believe in privacy, and believe you have "nothing to hide" at the same time, you're a goddammed idiot
  87. userid/password dialog by Danathar · · Score: 1

    Apple should change the pop-up dialog which happens when software tries to install itself with admin privs so it says something like

    "WARNING!!If you are installing software it may be trying to gain administrative access to your system files! If this is NOT what you want (think HARD!) then do NOT put in your userid and password"

    Make the pop-up a RED box and chime a siren through the speakers (brief but annoying).

    This way people don't get used to unconciously putting in their userid/password whenever it pops up.

  88. Re:Oh thank God... by endoplasmicMessenger · · Score: 1
    Sure it is. It's just that simple. Download this file, unzip it, burn it, install it. Just that simple. You won't be running windows any more. It's a five-click install. Just that simple.

    And if you are the bookish type, here's something to keep you company as you take your first simple steps outside of your playpen.

    --
    Evolution is a fact. Darwinism is a joke.
  89. CD/DVD EULAs by programic · · Score: 1

    For several years now, my kee-jerk reaction when presented with a EULA after inserting a CD or DVD into my computr has been to decline. In every case, the CD or DVD still functions when being accessed by my media player.

    It just makese sense--why agree to the EULA (and whatever software stands behind it), when all I want to do is listen to music or watch a movie?

    --
    -- yawn. --
  90. Internet downloads is not piracy by Arend · · Score: 1

    Maybe the word of a well-established artist can show you that there really is no problem with downloading and private copying, because that gives free exposure to an artist. The real problem is that most of the money goes into the pockets of the greedy industry, instead of to the artists that make the music in the first place:

    http://www.janisian.com/article-internet_debacle.h tml

    "in 37 years as a recording artist, I've created 25+ albums for major labels, and I've *never once* received a royalty check that didn't show I owed *them* money."

    More then 25 albums and still owing *them* money...

    "I am not saying copyrights are meaningless. I am objecting to the RIAA spin that they are doing this to protect "the artists", and make us more money. I am annoyed that so many records I once owned are out of print, and the only place I could find them was Napster. Most of all, I'd like to see an end to the hysteria that causes a group like RIAA to spend over 45 million dollars in 2001 lobbying "on our behalf", when every record company out there is complaining that they have no money."

    And, not unimportant

    "Additionally, we've started putting our money where my mouth is. We will be offering one song a week in mp3 format for free downloading..."

    http://www.janisian.com/mp3_downloads.html

    1. Re:Internet downloads is not piracy by Anonymous Coward · · Score: 0

      Thank you for comment.

      I've been looking at your website and I congratulate you on it, and also your article.

      I have always assumed that the recording artists were in favour of DRM because at the end of the day, their revenue is affected by illegal copying, you certainly have raised some doubts.

      Actually having read some of the other comments as well as your article, I do have some general wider doubts. I have to ask why more artists are not making noise about this, as this is first time I've heard of an artist against the introduction of a copyright protection systems such as DRM.

      Food for thought - thank you.

  91. EULA's... by Spy+der+Mann · · Score: 1

    Thankfully we all read our EULAs completely.

    I agree.

    1. Re:EULA's... by brjndr · · Score: 1

      I posted the story. I have a law degree, and even I don't read the EULA's that come with my software.

      Maybe if there were a couple pages, but not at their current length. It's not worth my time.

    2. Re:EULA's... by Spy+der+Mann · · Score: 1

      I guess I wasn't explicit enough. My "I agree" post was meant to be a joke (a reference to the EULA poll on /.)

  92. Re:Why yes, I give my admin password out on reques by rthille · · Score: 1

    Yep. that's why my wife isn't an admin on her own computer...

    --
    Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
  93. Many apps have installers by AnEmbodiedMind · · Score: 1
    Installing applications - like Microsoft Office - involves just dragging the application (or the folder it's in) from the CD into the Applications folder on your hard disk. Even things like Real One Player and Windows Media Player work this way.
    Actually no, Windows Media Player comes as an installer application that must run with admin privileges, and puts its sticky fingers all through your system. It really put me off installing it until I really wanted to see some wmv content. There isn't even an obvious way to just install it for the local user.

    The player is also really sloppy in how it handles dropped frames when streaming, and user feedback on what it is doing. It needs a lot of work.

    This is a good example of how many applications break the OS X, drag and drop application install model.

  94. OT: Eight-number Selectric by Kadin2048 · · Score: 1

    I've seen this but only on the Selectric I, and only on certain models -- the keyboard has the same number of keys as the later versions I believe, but the caps are labeled differently and the top row goes "~ 2 3 4 5 6 7 8 9" and then some special keys which vary. The one I've seen that was set up this way had some special keys on the one to the right of the numeral nine, for typing Library of Congress index card special characters that I've never seen on anything else. (A special type-ball was required also.)

    I've never been able to figure out if the eight-number top row was standard on all of the very first generation of Selectrics, or was something they only did on special models, in order to squeeze special characters onto the keyboard that otherwise would have been left off.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  95. A valid replacement for Sony by LunaticTippy · · Score: 1
    I'll be sticking to Sorny from now on.

    Or Magnetbox.

    --
    Man, you really need that seminar!
  96. KIDS can't mess it up? by Mr+Guy · · Score: 2, Insightful

    This should work in most homes, where the parents are the only one who know the master password. That way the kids can't so easily mess up the whole computer. ALL games even work just fine without the master password, once they are properly set up.

    I realize that since you are in IT, you probably do some kind of drugs, but this statement seems over the top. Maybe you accidentally reversed it, because on the last informal survey I've done, it's often kids who need to keep their parents away from trying to "improve" anything.

    1. Re:KIDS can't mess it up? by Kadin2048 · · Score: 1

      Yeah I was about to say the same thing, you beat me to it. I think it's more likely that the kids will have the admin password and thus keep their clueless parents from messing up the computer. Guess it depends on the age of the kids and parents involved. Maybe younger parents with more computer experience with young kids would actually be in charge, but there are still a lot of families out there where the parents involvement in computer maintenance is limited to handing over their Visa card once in a while.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    2. Re:KIDS can't mess it up? by arminw · · Score: 1

      I suppose that the parents not knowing what their kids are up to, especially in regards to technology is a reflection on the fact that too many parents are only providing a crash pad for their kids because they themselves are too busy with their careers.

      Parents OUGHT to know what their kids are doing in every area of their kid's lives. Unfortunately it is true, as you said, that many, if not most of them don't know what their kids, especially teens are doing. The Internet is just one area of life that parent ought to be paying attention to.

      --
      All theory is gray
  97. Mac OS X's malware resiliency put to the test by Durandal64 · · Score: 3, Interesting

    This kind of thing really illustrates Mac OS X's malware resiliency. There is no CD auto-run, so there is no way for these extensions to even be installed without the user manually double-clicking on this Start.app thing. From there, the user has to enter his administrator password, assuming he's an administrator on the machine. Only then will this DRM software get installed. So I don't expect this to cause too much trouble.

    And even after that, it's not the gigantic pain in the ass to remove that the Windows stuff is. Removal is a simple matter of unloading the kernel extensions and deleting them with administrator privileges. For some reason, Windows seems to facilitate the development of software that installs silently and is utterly impossible to remove.

    This is why it's not just the popularity factor that keeps OS X malware-free. It's a solid design based around the idea of minimal automation and least privileges needed. Even if OS X was twice as popular, any malware would still have the same hurdles to jump through.

  98. Another oddity by sandberglaw · · Score: 1

    In the course of investigating how Sony's misguided DRM works (disclaimer - yes, IAAL) I put the Van Zant disk into my Powerbook both under native OSX (10.4.2) and Vitual PC (7.0.2, XP Pro). In BOTH instances the DRM was ignored. OSX launched iTunes and played without fuss. XP auto-launched WMP, which was willing to both play and rip the album. I then took the disk down the hall to an HP desktop/XP Pro and inserted it - up popped the DRM EULA, and when I clcked "NO" the disk was immediately spat out. Under OSX, I could see two sessions on the disk: Get Right WIth The Man, identified as a "CD Audio File System", and Get Right WIth T", idendified as "ISO 9660 File System (Joliet)). That second session contins the AUTORUN.EXE file, but I don't see any native OSX files. So...I'm not convinced there is an OSX DRM app on this copy of the disk, and I'm rather amused that the DRM is ignored completely under Virtual PC!

    1. Re:Another oddity by Anonymous Coward · · Score: 0

      Virtual PC and VMWare disable AutoRun by default b/c it can make things screwy if the VM and the host OS both try to access the CD at once. It won't cause crashes, but the host system may regain focus (which would switch you out of the VM, if you were using it at the time).

  99. Obligatory by Kadin2048 · · Score: 1

    Anyone want to get a petition going for a Linux version?

    Or is someone going to have to reverse-engineer the binary and produce a OpenRootkit that can automatically compile and execute itself on all POSIX-compliant systems?

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  100. Re:Oh thank God... by vertinox · · Score: 1

    Does a defenseless girl excuse the actions of a rapist too?

    No but she can sue the property that she was on at the time for not providing proper lighting at night. (actually happens on occasion)

    --
    "I am the king of the Romans, and am superior to rules of grammar!"
    -Sigismund, Holy Roman Emperor (1368-1437)
  101. I wouldn't call that McCarthyism.. by dbc · · Score: 2, Insightful

    .. I'd call it professionalism.

    I've never been so hungry that I would write code like that. If the ethical situation of a job makes you uncomfortable, leave it. That actually plays pretty well while interviewing for your next job. At least for any job you actually want.

    Speaking as someone who has actually done quite a bit of engineering hiring, I can say that I do filter people by where they have chosen to work before. I learned that lesson by bitter experience. People joke about "resume stains", but let me tell you as a hiring manager that they are very real.

  102. Re:Oh thank God... by dbc · · Score: 1

    Yes. Nice summary of Microsoft's culpability here. I can't understand why more people are not upset at MSFT over this.

    But, living life Windows-free, well, that is hard. But I'm trying. I'm tired of cleaning up my wife's Windows system. Today, with luck, her Mac mini gets set up. Unfortunatly, there is one ap (the geneolgy ap) that she uses that is only available for windows and probably won't emulate very well. Fortunately, running that ap on a quarantined, off-net windows box is an adequate solution.

  103. NPR by Kadin2048 · · Score: 1

    It was on the afternoon 'news in review' (Afternoon Edition?) a few days ago as well, plus there's been meta-coverage of the rootkit in stories about the amount of negative press Sony's received as a result of the rootkit and about the CA and NY lawsuits. I wouldn't be surprised if the stories about the lawsuits would have gotten coverage in business oriented publications (WSJ and others) although I don't subscribe to them so I can't check for sure.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  104. possession? by sczimme · · Score: 1


    The sony eula says you must destroy any and all fair use copies of the music you possess, if you are no longer in possession of the actual cd.

    I hope they don't mean actual physical "possession": if I contract with an organization to store the CD on my behalf (as described in the parent post) I still control/own the CD even if I cannot lay my hands on it instantly; the storage facility has no ownership rights [to my CD] whatsoever, even if they maintain control over the object itself. Think of a safety deposit box at a bank: you still own your contents, but the bank is storing them for you; the bank can't sell the contents if business is slow.

    --
    I want to drag this out as long as possible. Bring me my protractor.
  105. It's over, Sony just gave up by Anonymous Coward · · Score: 0

    It looks like the brouhaha has intimidated Sony enough to make them back off.

    Sony to pull DRM

  106. My Mistake (Re: Windows Media Player) by @madeus · · Score: 1

    Sorry if I'm wrong about Windows Media Player having an installer, it seems from the microsoft.com site it's not the same drag and drop install model I know Real Player follows.

    I have a few Macs (two at home, one at work, and a PowerBook) so it's very possible I just put the .app in a .sit/.zip file myself. I tend to bundle up a lot of apps like Real, WMV, VLC, GIMP, etc. and keep them on a WebDav share for easy access,and for sharing with new mac owning friends and coworkers to get them started (and I don't usually have the origional .sit/disk image/installer so compress them myself) - that or I'm using a really old crummy initial release or a version from some coverdisk.

    I've seen a lot of switchers/new adopters in the last year, which is why I started doing that (not least because if I make sure they have everything they need to start with, they bother me less).

    I agree the player is horribly broken to the point of being unusable. The framerate is dire and it doesn't support quite a few WMV files that play fine on Windows systems, and IIRC the browser plug-in doesn't work at all.

    IME, installers like this are really in the minority though (although I'm aware that some really commonly used software like Adobe packages behave like that - I think because they install shared frameworks).

  107. How bad is this DRM? by irobert · · Score: 1

    I called SunnComm at 602 267 7500 (the number is on their website - no harassment, please) to inquire about what exactly their software installs on my Mac. They said they would have someone call me back. I hope they do - I'd like to know how bad this particular DRM is, whether it's removable, and I'd like to talk to them, politely and reasonably, about why I think this sort of thing is a bad idea.

    I also think people should talk to Sony about this issue, as well. When the DRM story broke I called Thomas Hesse's office (212 833 8000 is the Sony BMG main line). I wanted to tell him two things: first, that there would be a 100% chance that a virus would exploit Sony's DRM technology, exposing Sony to massive lawsuits and incredibly bad publicity. Second, that it feels like Sony is angry at their customers. Sony's actions regarding DRM are bad for customers, but they're also bad for Sony.

    Sony's DRM attitude is the number one reason the iPod is dominant, instead of a Sony-brand mp3 player. Sony had an edge on any portable music device just because of their history and brand--they squandered that advantage, and they'll continue to squander opportunities as they continue to fight their own customers. I hope this latest DRM scandal will wake Sony up. Damaging customers' computers is not the answer--obviously.

  108. Presenting Security Alert Dialogs to Users by @madeus · · Score: 1

    Yeah, RE: protecting the image/border I think in order for this to be effective they'd need to hack Quartz to perhaps make it impossible for any application to capture the screen - or that part of the screen - while the dialog was up (that is to say - any application that isn't already running as root or as the 'windowserver' user).

    The approach of a dashboard-esq subtle fading out of the desktop, with a custom (animated) dialog approach (though nothing too OTT) could be really effective. Certainly focusing on a custom bordered and high impact dialog and dimming the rest of the screen (perhaps jus when dialog is at the top, an in such a way the user could still select other windows behind it) would really get people to pay attention to the dialog (and could be an easy to impliment and useful feature on it's own).

    If desired, it would be possible to make this a user setting in the Preferences... Security pane, with a default of Muppet Alert Mode (complete with screen diming and big flaming window borders) but also with the option of the more subtle existing style of alert if the previous method is too intrusive for 'Power Users'.

    In fact, I'd be surprised if it wasn't possible to do this as a hack (albeit one that would itself require root privilages to install and would take over your password management to some extent, so not necessarily a hack you'd want to trust :-).

  109. Link to Sony's "Uninstall Request" by MrLogic17 · · Score: 1


    If you desire to grovel at the feet of Sony, and beg for permission to uninstall some software from your own PC, we new have a link:

    http://cp.sonybmg.com/xcp/english/form14.html

    Use this information in any mannor you see fit...

  110. Re:Oh thank God... by snolan · · Score: 1

    In Windows, you just insert the CD. Maybe into someone else's system when their back is turned. Windows OS trusts external content much more than the user sitting at the desk. "Do me", it says. So how come people hate this feature in Windows, but love that feature in hot chicks? Grinning, ducking and running.

  111. So how much of a danger does this mean? by dalek_killer · · Score: 1

    So with what gets installed if you do install it, how much of a potential of a threat does it mean for the Mac?

    1. Re:So how much of a danger does this mean? by BandwidthHog · · Score: 1

      Excellent question. 400 comments so far, and not a single mention of what the hell those .kexts actually are.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  112. EULAscan by d88 · · Score: 1

    "Thankfully we all read our EULAs.."

    EULAScan is a site trying to address this. Free, open to all posters, it's a community project to watch over EULAs. We're trying to build on the wiki principle of distributed editorship.

  113. Sony's stopping already by klez23 · · Score: 1

    after consumer protest, Sony's stopping producing this stuff.

    1. Re:Sony's stopping already by chawly · · Score: 1

      Good ! I don't care personally about Imogen Heap's disk, but I want to buy her brother's latest offering. You know him, don't you ? Uraiah Heap. Thought that I'd probably have no trouble ; given the age of the disk, but I wasn't sure. Thanks.

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  114. some versions of the disc in ? do, some don't. by Anonymous Coward · · Score: 0

    i went out and purchased the disc that is talked about in the link (Imogen Heap's "Speak For Yourself") earlier this week, as someone told me i HAD to get it. with all the rootkit hubbub going on surrounding sony/bmg-distributed audio discs (technically they're NOT compact discs because they don't adhere to the standard -- you'll note that the Compact Disc logo is nowhere to be found on ANY of these sony/bmg-distributed releases), i wanted to see exactly how to get around it. since i use my main pc for music production and dj'ing, exposing my pc to a rootkit would be bad. so, upon further examination of the disc, the copy of the Imogen Heap disc i have is protected by the sunncomm drm protection and not the nasty XCP rootkit-based drm. the section of the back cover of the disc has information on the drm that's mildly interesting: Compatible With: Playback : CD/DVD/PC/Mac. PC: Windows 98SE / ME / 2000SP4 / XP, Pentium II, 128MB Ram, IE 5.5+. Mac: OK Ripping : PC: Windows Media Player 9.0. Mac: OK Portable Devices: Secure Windows Media Limited Copies ? www.sunncomm.com/support/sonybmg; README.HTML the interesting thing about this label is that for the Mac platform, it just has the "Mac: OK" information next to each section! since i didn't dare stick this disc in my pc, well, i have a mac mini, so i figured i'd try and rip it on that machine instead. my version of this disc doesn't seem to have the mac-based drm schtuff at all. when i stuck the disc in my mac mini, the only thing that came up was the 'audio cd' icon on the desktop. iTunes immediately opened and started playing the disc with no problems. since i think iTunes is a crappy app for ripping, i decided to seek out something else to rip the disc to wav files. ended up going out and grabbing a build of X-CD-Roast and ripped it on my mac without trouble. for fun, i decided to see if my consumer-grade philips home audio cd recorder would get around the drm, and sure enough, it did. no problems. i popped the disc into it, let it fly, and was able to get a dupe of the disc with no troubles, perfect sound quality and no drm. so while the sunncomm drm is pesky, it is easily defeatable. on another tip ... the EULA isn't printed anywhere on the packaging for the audio disc. it is mentioned on the back of the disc ("CERTAIN COMPUTERS MAY NOT BE ABLE TO ACCESS THE DIGITAL FILE PORTION OF THIS DISC. USE SUBJECT TO APPLICABLE END USER LICENSE AGREEMENT."), but i don't think it would ever hold up in a court, since: a) the EULA is never seen by those who use a consumer-grade disc recorder to make a fair-use backup b) the EULA isn't seen by some mac users (at least, with some versions of the disc) c) according to the statement on the back, the EULA doesn't apply to the audio playback portion of the disc, just the digital computer-based portion cheers.

    1. Re:some versions of the disc in ? do, some don't. by Anonymous Coward · · Score: 0

      bah.

      forgot to format the reply. i'm a technologically-backward dullard. please slashdot hamma, don't hurt me.

      right.

      let's try that again.

      i went out and purchased the disc that is talked about in the link (Imogen Heap's "Speak For Yourself") earlier this week, as someone told me i HAD to get it.

      with all the rootkit hubbub going on surrounding sony/bmg-distributed audio discs (technically they're NOT compact discs because they don't adhere to the standard -- you'll note that the Compact Disc logo is nowhere to be found on ANY of these sony/bmg-distributed releases), i wanted to see exactly how to get around it.

      since i use my main pc for music production and dj'ing, exposing my pc to a rootkit would be bad. so, upon further examination of the disc, the copy of the Imogen Heap disc i have is protected by the sunncomm drm protection and not the nasty XCP rootkit-based drm.

      the section of the back cover of the disc has information on the drm that's mildly interesting:

      Compatible With:

      Playback : CD/DVD/PC/Mac. PC: Windows 98SE / ME / 2000SP4 / XP, Pentium II, 128MB Ram, IE 5.5+. Mac: OK
      Ripping : PC: Windows Media Player 9.0. Mac: OK

      Portable Devices: Secure Windows Media Limited Copies

      ? www.sunncomm.com/support/sonybmg; README.HTML

      the interesting thing about this label is that for the Mac platform, it just has the "Mac: OK" information next to each section! since i didn't dare stick this disc in my pc, well, i have a mac mini, so i figured i'd try and rip it on that machine instead.

      my version of this disc doesn't seem to have the mac-based drm schtuff at all. when i stuck the disc in my mac mini, the only thing that came up was the 'audio cd' icon on the desktop. iTunes immediately opened and started playing the disc with no problems. since i think iTunes is a crappy app for ripping, i decided to seek out something else to rip the disc to wav files.

      ended up going out and grabbing a build of X-CD-Roast and ripped it on my mac without trouble.

      for fun, i decided to see if my consumer-grade philips home audio cd recorder would get around the drm, and sure enough, it did. no problems. i popped the disc into it, let it fly, and was able to get a dupe of the disc with no troubles, perfect sound quality and no drm. so while the sunncomm drm is pesky, it is easily defeatable.

      on another tip ... the EULA isn't printed anywhere on the packaging for the audio disc. it is mentioned on the back of the disc ("CERTAIN COMPUTERS MAY NOT BE ABLE TO ACCESS THE DIGITAL FILE PORTION OF THIS DISC. USE SUBJECT TO APPLICABLE END USER LICENSE AGREEMENT."), but i don't think it would ever hold up in a court, since:

      a) the EULA is never seen by those who use a consumer-grade disc recorder to make a fair-use backup
      b) the EULA isn't seen by some mac users (at least, with some versions of the disc)
      c) according to the statement on the back, the EULA doesn't apply to the audio playback portion of the disc, just the digital computer-based portion.

      cheers.

  115. Re:Why yes, I give my admin password out on reques by RzUpAnmsCwrds · · Score: 1

    I don't know if I agree with the "most". I'd definitely go with "some", especially new switchers who don't know Mac's standard operating procedure. But if you've put in 50 CDs and never had a prompt, this might give you pause, especially because for some people giving anything but Software Update this sort of power is very scary.

    Mac OS requires elevation for a lot of different changes - the more that users see the screen, the more that they get used to it. And, to them, allowing elevation is the "safe" choice.

  116. Re:Sony just lost ~5000 euros (Offtopic) by BandwidthHog · · Score: 1

    The two scariest points about that list are that $1.60 is most definitely at the high end of negotiated royalties, and that half the items listed are the record label under various guises.

    --

    Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  117. Cut to the chase -- Anybody! by Swift2001 · · Score: 1

    Endless ideological warfare, but listen: does anybody know, for sure, that those "Enhanced" CDs won't play on the Mac, won't install the kexts without your permission, and best yet -- what do the kexts actually do? Do they limit the number of rips? Burns? Do they block the transfer to the iPod? Do they interact with the rest of the OS somehow? I cannot believe that my used-to-be-favorite electronics company is stooping this low. Power to the engineers!

  118. WMV browser plugin by AnEmbodiedMind · · Score: 1
    "IIRC the browser plug-in doesn't work at all"

    That might be due to not using the proper installer ;-D

    Although there are nicer ways they could have made sure the plugin was installed that didn't require admin access!

    1. Re:WMV browser plugin by @madeus · · Score: 1

      That might be due to not using the proper installer ;-D

      Ah, yes. Indeed. *ahem*