Slashdot Mirror


Sony, Amazon Detail Rootkit CD Buybacks

An anonymous reader writes "Washingtonpost.com is reporting that Sony BMG today detailed a program that should allow customers who bought one of the 52 titles known to be tainted with the company's deeply flawed anti-piracy software to exchange them for CDs of the same title, sans rootkit of course. Oddly enough, Sony is offering those who want to return the CDs the chance to download MP3 versions of the discs, but only after Sony has received the returned discs. Amazon.com also is sending out e-mails to customers who bought the discs, offering to replace or refund them at no cost."

3 of 240 comments (clear)

  1. MP3 poisoning howto by dtfinch · · Score: 4, Informative

    Let customers download the MP3s via a server side script which quietly puts their customer number for tracking and a hash for non-repudiation into the ID3 tags, which'll survive most transcoding. Then if it appears on a P2P network (not likely, unless it's not already there), they'll know who did it.

  2. Re:Sans by Sycraft-fu · · Score: 4, Informative

    It'd be easy to tell probably. If the disc lacks a data sector, you can be sure there isn't one. CDs have different kinds of sectors for audio and data. So if it's all audio, there's no possibility of malicious software since there's no software.

  3. Re:I am INCREDIBLY offended by Sony's actions by arth1 · · Score: 4, Informative
    Could you please point to your source regarding BMG being the ones who brought DRM into the picture?


    Easy enough to google for. One recent entry.

    Regards,
    --
    *Art