Slashdot Mirror


Sony Music CD's Contain Mac DRM Software Too

brjndr writes "A MacInTouch poster has found that certain Sony CD's also contain a smaller extra partition for 'enhanced' content. Running one of the applications found within this partition installs kernel extensions containing DRM software by SunnComm. In Sony's defense you're told what is being installed within a EULA which pops up when the program is loaded. Thankfully we all read our EULAs completely."

5 of 399 comments (clear)

  1. Illustrates why... by rsborg · · Score: 5, Insightful
    the basic OSX security of "Administrator == sudo rights" as opposed to the Windows approach of "Administrator == anything goes" really does make a difference. In the windows portion, Sony just ignores the user and installs all sorts of crap (using autorun)... but on the Mac side, they have to play nice, or the user will not be "convinced" to enter their password to install the software.

    Who knows how evil the DRM is, once the install is made, but jeebus... talk about an issue of trust (just for the installer)!

    --
    Make sure everyone's vote counts: Verified Voting
  2. Re:Admin Privileges by Bananatree3 · · Score: 5, Insightful
    YOU may not even consider such an idea, but not everyone is so tech-savvy. Think of all the Joe users out there...

    Joe user: What's this I see? I have to enter my password to play a music CD? Oh no biggy, its just a music CD. What harm could it do?

    That is my concern. The average user sees it comes from Sony, a "trustable" company, and doesn't give it a second thought. A very lethal combo
  3. Re:daft... by dorkygeek · · Score: 5, Insightful
    Joe Desktop doesn't care and simply installs whatever malware is needed to listen to the cd.

    --
    Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
  4. Re:Think different... by josephdrivein · · Score: 5, Insightful

    "rate yourself on a scale of 1-10 on how good you are with computers, and we'll adjust the system alerts accordingly"...

    Think what a hell would become the customer support: everytime something happens the system may respond to the user in 10 different ways.

    And if a user logs into another mac (at Internet café, library, university etc..), she well have to know if it's configured for dummies or super-geeks or whatever. I may even add that as she gets used to her mac she will want to try to step to the next level, but the user has to learn again how the system behaves.
    And so on.

    It has been proposed more than once, but I doubt it will be ever implemented, as it is a usability nightmare.

  5. Re:Think different... by @madeus · · Score: 5, Insightful

    That's the problem. Clueless mac user is probably expecting to be installing software about then. The CD told them they need a player to see the dancing pigs, for example.

    You don't need to authenticate to install applications on Mac OS X. Installing applications - like Microsoft Office - involves just dragging the application (or the folder it's in) from the CD into the Applications folder on your hard disk. Even things like Real One Player and Windows Media Player work this way.

    When you do actually get a dialog, Mac OS X also tells you what permissions are being requested on the password dialog (e.g. full admin access, or just permission to modify a specific system setting, etc) as well as which application is requesting the permission. In reality, most of the time people see a dialog in Mac OS X which requires authentication, it's because of an interaction with the OS itself (such as changing a system setting) that the user has just performed.

    If a users sees an Application (including plugins) requesting this sort of permission that should really ring alarm bells. Only things like new drivers (e.g. for that new camera you just bought) should be asking for things like that.

    It's fair to say here is room for some improvement in the dialog in that it should better reflect this (perhaps rasing a more severe looking alert when it's anything other than the OS or bundled Application requesting any sort of privileged access, which explains something along the lines of the previous sentence).

    On the subject, it could do with some means of forgery protection (things like an embedded image in the window have been suggested) so that you can better trust it's an authentic authentication dialog. If your paranoid.

    Technically Windows allows for roughly this sort of behaviour too (that is, you should never need admin permissions to install a regular application) but the large number of badly written installers - combined with the lack of a K.I.S.S. approach in the OS - seem to have conspired to make admin level access madatory for even the most mundane tasks.

    I bet if vendors (and I include both Apple and Microsoft in that) implimented privilage dialogs that were scary and intimidating enough to users (perhaps with a default action of 'deny') 3rd party application developers wouldn't ask for them unless they really needed those permissions.