Slashdot Mirror
Sony's SunnComm DRM Patch a Security Risk
Spad writes "The BBC is reporting that mere days after the EFF and Sony announced a patch to fix the vulnerability in its SunnComm DRM system, security researchers Ed Felten and Alex Halderman have discovered that the patch itself introduces yet more vulnerabilities. They have now asked users not to apply the patch and are urging Sony to recall all of the affected CDs from sale. Sony has said that approximately six million CDs using [SunnComm] MediaMax have been shipped to stores. Affected artists include Alicia Keys, Britney Spears, Black Rebel Motorcycle Club and Faithless."
Phew, after seeing the list of artists all I can say is if these are the artists who'll be affected I'll be secure for years to come!
Given the titles affected, consumers had it coming.
So you could be hit once by the original flaw. Then you could be hit one more time by the flaw in the patch?
Someone should write a song about that.
Jesus saved me from my past. He can save you as well.
congratulations, oh bearded one, for your infiltration of computers in the western world. and congratulations for keeping your sizeable stock holdings in Sony and Bertlesmann secret for so long.
there is no other plausible explaination for the number of times Sony/BMG has shot itself in the nuts over copy protection that cannot do what they want it to do. it MUST be a plot against humanity by the AntiChrist. no other logic works out.
if this is supposed to be a new economy, how come they still want my old fashioned money?
PS3 is rumored to be a security risk. While Xbox 360 burns your house down. PS3 sends e-mails out to burglars as to which time you are not at home and how to get in and where you hide your key!
The damage is most likely done to those who are susceptible.
Anyway, the patch is a non-issue for Americans who are prohibitted by law from downloading or applying it. The patch issue only effects people in countries where it is not illegal to modify/remove/circumvent DRM software. In the States the solution is much simpler: just format the disk and reinstall the OS.
Sony will release a statement saying the security holes were put there intentionally to discourage ripping of the cds. This would prevent them from being shared as easily.
Hit by the flaw, Bitten by the patch.
Lyrics by me.
I got hit by the flaw, and bitten by the patch
A computer rebuild, a 'driver with a ratchet
It's hit me, it'll be hitting you
How much did you pay for that Sony Doo-Doo?
I Put a music CD in my CD-Drive
Hit "I Accept" to some DRM jive
Now I'm here, waiting for the other shoe
and to make it worse, the music sucked too
Hit by the flaw, bitten by the patch
That company just said bend-over biatch
Bitten by the patch, hit by the flaw
hold on to your hat, 'cause that ain't all
Picked it up this morning from the TV news
Sony got another system that you don't want to use
As if the first one was'nt bad enough, with your computer flubed up
They got a second system that's also bad enough
Hit by the flaw, bitten by the patch
some big CEO needs to take it up the ass
"That's enough now, I'm Tired" - Oppourtunites never knock - The Clash - version where the kid sings it.
If you don't know where you are going, you will wind up somewhere else.
. . . and to make it worse, the music sucked too
Something about that line struck me terribly funny. Bravo.
I hope you're not mad that I reprinted it without permission.
Sweet informative mod.
and when sony sues me (thu RIAA), i just load one of those handy cds with digital-rootkit-management and claim that someone else (probably at sony) was hijacking my computer and putting all those mp3, that i've never heard about before, there.
As a Sony executive, I am very concerned about your decision to write about this matter on your blog. As you may or may not already know, the self-important ramblings of an individual's personal web log are the strongest force for change yet seen by man. This is even despite the fact that writing about something on the Internet barely breaks the barrier of showing concern about the subject, as it takes very little effort. Nevertheless, we are "shaking in our boots" about your blog and sincerely hope you will reconsider your decision to write about us.
Lets fix it with a rootkit!
http://www.TheGamerNation.com/Forums
Friend of mine bought the switchfoot cd and put it in her computer. I've tried using all the so called patches and microsoft's anti spyware all of which failed to remove it. I've gotten to the point where now I can see the files but they're write protected. If I bypass the write protection and delete them will it screw up the laptop?
CURSE YOU SONY!!! and your sudden but inevitable betrayal.
"nothing will really happen except they may claim to have lost $xxx,xxx to piracy."
Fixed it for you.
Ryosen
One man's "Troll, +1" is another man's "Insightful, +1".