Slashdot Mirror


Sony RootKit Still A Problem?

XMilkProject writes "Current research indicates that some "350,000 networks--many belonging to the military and government--contain computers affected by [Sony's rootkit]." This is down from over half a million last month. "The security researcher worked from a list of 9 million domain-name servers.. asking each to look up whether an address used by the XCP software--in this case, xcpimages.sonybmg.com--was in the systems' caches." Will Sony face future repercussions for this potentially long-term damage?"

268 comments

  1. Nothing for you to see here. Please move along. by JediTrainer · · Score: 2, Funny

    The first rule of the Sony Rootkit is that we do not talk about the Sony Rootkit.

    The second rule of the Sony Rootkit is that we DO NOT TALK about the Sony Rootkit.

    --

    You can accomplish anything you set your mind to. The impossible just takes a little longer.
    1. Re:Nothing for you to see here. Please move along. by Anonymous Coward · · Score: 0

      $sys The first rule of the Sony Rootkit is that we do not talk about the Sony Rootkit.

      $sys The second rule of the Sony Rootkit is that we DO NOT TALK about the Sony Rootkit.

      There I fixed it for you

    2. Re:Nothing for you to see here. Please move along. by Nom+du+Keyboard · · Score: 1
      The second rule of the Sony Rootkit is that we DO NOT TALK about the Sony Rootkit.

      Third rule: There is no Third Rule.

      --
      "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    3. Re:Nothing for you to see here. Please move along. by Teresh · · Score: 0

      The Third Rule is when in doubt, refer to rules one and two.

      --
      Do you Gentoo?
    4. Re:Nothing for you to see here. Please move along. by scottschor · · Score: 2, Funny

      rootkit ... I've got you, babe ... sony and share ...

    5. Re:Nothing for you to see here. Please move along. by Anonymous Coward · · Score: 3, Funny

      Er no you didn't. $sys$ is what you want.

    6. Re:Nothing for you to see here. Please move along. by rolandog · · Score: 1

      I disagree... those rules apply only if what we're not supposed to talk about is a GOOD thing. In this case, its about a program that is crippling consumer's computers without their approval.

    7. Re:Nothing for you to see here. Please move along. by xero314 · · Score: 1

      Apple execs are probably sitting around right now really pissed off that their plan to show the insecurities of windows has failed, and in turn backfired on one of their allies (all be it unseen).

      How is it that everytime the root kit comes up, Microsoft comes out squeaky clean even though they were the ones who created a system so easily exploited?

    8. Re:Nothing for you to see here. Please move along. by heson · · Score: 1

      Fourth rule: Do not try too lookup the ip for xcpimages.sonybmg.com, that would screw their statistics.

    9. Re:Nothing for you to see here. Please move along. by Kuros_overkill · · Score: 1

      Fifth rule: If this is your first time buing a DRM Sony disk, You MUST install the sony rootkit.

    10. Re:Nothing for you to see here. Please move along. by rtb61 · · Score: 1

      A program that cripples consumers computers, this is a story about the sony bmg rootkit not about m$ windows operating system (take you pick which version).

      --
      Chaos - everything, everywhere, everywhen
  2. Safe.. by seann · · Score: 5, Funny

    Because new music sucks.

    --
    I'm a big retard who forgot to log out of Slashdot on Mike's computer! LOOK AT ME.
    1. Re:Safe.. by Lemmy+Caution · · Score: 1

      But aren't they re-releasing older music on discs using the same scheme? Picking up your classic oldie may not protect you.

    2. Re:Safe.. by Rufus88 · · Score: 1
      new music sucks.

      ...almost as much as having friends like Mike. (Check your sig.)

    3. Re:Safe.. by garyozzy · · Score: 1

      nice signature

  3. They might as well change their name to by Anonymous Coward · · Score: 5, Funny

    NOSY

    1. Re:They might as well change their name to by ScrewMaster · · Score: 1

      Well, given crap passing for music nowadays I'd spell it "NOYS".

      --
      The higher the technology, the sharper that two-edged sword.
  4. How-to? by Anonymous Coward · · Score: 0, Offtopic

    How do you restrict a DNS query to cache? Don't most DNS servers do recursive queries, looking up the address and replying if it is not in the cache?

    1. Re:How-to? by sholden · · Score: 1

      You use an iterative query.

    2. Re:How-to? by antbeats · · Score: 1

      i know microsoft released sony rootkit remover with their antispyware...ive been using it at work like a mad man...

    3. Re:How-to? by earthloop · · Score: 3, Informative

      You do a non-recursive lookup.


      [root@kryten pete]# nslookup
      > set norecurse
      > www.xmob.co.uk
      Server: 192.168.0.1
      Address: 192.168.0.1#53

      Name: www.xmob.co.uk
      Address: 217.77.184.55

      > www.microsoft.com
      Server: 192.168.0.1
      Address: 192.168.0.1#53

      Non-authoritative answer:
      *** Can't find www.microsoft.com: No answer
      >

    4. Re:How-to? by Anonymous Coward · · Score: 0

      How in hell is the parent off topic, you god damn retards?!?

    5. Re:How-to? by self+assembled+struc · · Score: 1

      But when I run nslookup it tells me it's obsolete so how can I trust the data it gives me?

      Which begs the question -- why is NSLOOKUP OBSLETE? dig gives you WAY too much info sometimes.

  5. Get Back On Our Own - Boycott Sony by Py+to+the+Wiz · · Score: 5, Interesting

    I personally don't buy CDs so I wasn't affected but from what I've heard there are some serious problems with the "patch" Sony provided. I'm just a bit curious... Does the patch keep the rootkit permanently disabled and removed? It seems to me that if we put a deviant Sony CD back into our computer that the rootkit would just be reinstalled. Then do we have to run the patch again? This is rediculous. I've do not intend on purchasing any music that has the SONY lable on it. This to me is just plain stupid. What gives Sony the right to install deviant software on "MY" pc and then make it stealth so that I don't know it's there. As far as I'm concerned I think that's the lowest a company can go. That's stooping to the level of those bastard red headed step children Spammers/Spyware installer/Virus/worm pushing assholes.

    I'm to the point now watching this rediculous attempt from Sony to attach it's controls on something that I purchase the rights to use/listen/backup and trying to enforce through deviant means. What is this rootkit supposed to do!? They just wanted to install it for the Hell Of It? Nope, it's supposed to reinforce their stupid DRM bullshit and keep me from listening to the music that I paid for. I'm to the end of my rope. I think that there needs to be a group or mutiple groups put together that should purposefully break what Sony is trying to do. I've been years out of the programming/Computer industry and thus lack the skills to do it, but I think that we should form Anti-DRM, anti-Sony groups to demolish the protection that they put on their stupid CD's. I will not from this day forward purchase anymore music from Sony until they drop their Bullshit practices. I call for a Boycot of Sony's Music. I'm not sure what one man can start, but I'll be damned if I'm going to stand around any longer and watch Sony impose itself on me! They want me to buy their shit, then they want to enforce by deviance their policy, and after all that they hijack my PC for WHo knows what! Ahhh! Time for a Revolution. I love my PS2, but am refusing to play it again until SONY stops all this Bullshit! No more video games purchased either. Damn you Sony! Leave me the Hell alone! Stay off of my Computer and my CD's! Damn you!

    With that said, I feel somewhat better, but am still disturbed deep inside that they would have to stoop to that level to try and enforce their protection. Maybe they don't realize that as the sound comes out of the speakers it can be recorded with a MIC and pirated that way, or through LINE OUT. Damn them. Rant Over.

    --
    Fight the fall of slashdot by supporting PlayfullyClever in your sig.
    1. Re:Get Back On Our Own - Boycott Sony by Luke+PiWalker · · Score: 5, Funny

      Better yet, you could take in an old box and drop it on the front desk and go "Excuse me, you've installed a virus on my PC via a Sony CD. Will you be removing it or should I charge by the hour at £X00(add as many 0s as you likee, but 2 sounds about right) for having to remove it via a repair guy (don't say you, it seems supicious).

      Demand compensation (for petrol to get there), the money to fix it and if they refuse tell them you'll take them to court for the damages (claim the box was used for something important like hosting websites and the rootkit has not passed some safety tests that all servers must pass at your company).

      Aww the fun of being a sick little geek :D

      --
      Fed up with slashdot? I am too.
    2. Re:Get Back On Our Own - Boycott Sony by ralphart · · Score: 1

      We were a Sony-less household this Christmas -- no slim Sony digital camera for my college student and no PSP for my high schooler. They were not all that pleased until I explained what a rootkit was and why it was so bad. They were still pissed, but at least understood I wasn't just being a cheapskate.

    3. Re:Get Back On Our Own - Boycott Sony by laura203 · · Score: 1

      Sony doesn't care if you don't play your PS2 - you've already paid them for it. Don't buy music or games and cancel your EQII accounts, but you're only hurting yourself if you 'boycott' by not using something already purchased.

    4. Re:Get Back On Our Own - Boycott Sony by utexaspunk · · Score: 2, Insightful

      So... you're going to boycott Sony by not playing the PS2 that you already paid for? How is that hurting Sony? Why not sell your PS2? Then you've at least possibly deprived Sony of purchase.

      But then, the division that makes the PS2 is fairly disparate within the company from the one you're attempting to hurt. But then you've already admitted that you don't buy CD's, the record company couldn't really care less about you. Still- why attempt to harm the folks within the company who make a cool product for the actions of another part of the company which they have no say in?

    5. Re:Get Back On Our Own - Boycott Sony by ilyanep · · Score: 1

      Personally, we're not getting that Sony Plasma TV ($3000) nor the PSP ($100 I think?) nor the PS3 ($500) nor any other product that they make.

      Enough people might do this for them to see what they've done. If not, then I'm all the better for it; no rootkits and no sucky support.

      --
      ~Ilyanep
      To get message, take amount of carrier pigeons at each stage mod 2. Then decode binary.
    6. Re:Get Back On Our Own - Boycott Sony by Anonymous Coward · · Score: 0

      It's been tried: http://www.pledgebank.com/boycottsony but looks like no one signed up :(

    7. Re:Get Back On Our Own - Boycott Sony by BVis · · Score: 1

      "Security!"

      And that would be that. And threatening to sue would only get you laughed at; their lawyers can beat up your lawyers. Besides, the EULA makes them immune from that kind of liability. (Yes, I know XCP gets installed even if you decline the EULA, but try explaining that to 12 morons off the street.)

      --
      Never underestimate the power of stupid people in large groups.
    8. Re:Get Back On Our Own - Boycott Sony by PastAustin · · Score: 1
      I think that we should form Anti-DRM, anti-Sony groups to demolish the protection that they put on their stupid CD's



      You must also be years out on what is legal. If you write a piece of software that destroys protection of copyrighted material then you are in direct violation of the DMCA. Too bad it's not that easy. =(


      You might look to some underground hacker groups if you're looking for this sort of fix for DRM. Personally I intend to ignore it and keep downloading my music. I have no use for plastic frisbees that have cute pictures of the band dancing around on them.


      PS: What are the CDs possessing in that sentence by the way?
      --
      Firefox 2.0 - Spell Rightly.
    9. Re:Get Back On Our Own - Boycott Sony by Zerathdune · · Score: 1
      "Security!"

      And that would be that. And threatening to sue would only get you laughed at; their lawyers can beat up your lawyers. Besides, the EULA makes them immune from that kind of liability. (Yes, I know XCP gets installed even if you decline the EULA, but try explaining that to 12 morons off the street.)

      yeah, ok, going in there personally won't work so well. I wouldn't even bother threatening, they won't take you remoteley serioulsy until you actually do sue. yes, they have better lawyers than an individual can afford, which is why you would not sue them by yourself, you would instead hop on to one of the several big class action lawsuits against them, which have a much better chance of getting you some money. and give the average person some credit, the hard part in convincing them the EULA is bullshit is just getting them to give you the time of day. when they are legally mandated to do so, they are perfectly capable of understanding that you have to actually AGREE to a contract for it to hold water.

      --
      No single raindrop believes that it is responsible for the storm.
    10. Re:Get Back On Our Own - Boycott Sony by CaptainZapp · · Score: 1
      I've do not intend on purchasing any music that has the SONY lable on it.

      I chose to carry that a bit further and do not intend to buy anything with a SONY label on it.

      I don't buy from computer criminals.

      --
      ich bin der musikant

      mit taschenrechner in der hand

      kraftwerk

    11. Re:Get Back On Our Own - Boycott Sony by CommiePuddin · · Score: 1

      you would instead hop on to one of the several big class action lawsuits against them, which have a much better chance of getting you some money.

      No they don't. If recent history has taught us anything, it's that class action lawsuits don't get the consumers money, but rather they get you vouchers to purchase more goods from the company that just infringed on your rights to the point you thought legal action was the only recourse.

      How is that punishing the corporation in any way?

      --
      x = x + ++x; //It's golden.
    12. Re:Get Back On Our Own - Boycott Sony by lumbercartel.ca · · Score: 1

      What EULA? When I buy a music CD there is no contract that I'm aware of that I had to sign before opening the package and inserting it in any CD player -- I simply had to walk down to the local music store and pay for it, and that's the condition that most people who buy music CDs are aware of.

    13. Re:Get Back On Our Own - Boycott Sony by BVis · · Score: 1

      The EULA that comes up via autorun when you put said CD in your computer. Agreeing to the EULA is a condition of being able to listen to said CD on your computer.

      --
      Never underestimate the power of stupid people in large groups.
    14. Re:Get Back On Our Own - Boycott Sony by Anonymous Coward · · Score: 0

      I agree entirely with boycotting Sony; it is not only the best, but ONLY way that large corporations can be delt with to enact serious change.

      But we can do more. All those musicians we won't be listening to now because they signed with Sony will be hit by this as well. Write to them and tell them what is going on! Explain that you love their music, but will not purchase products from their distributor (you can even explain why not). Inundate them with this information, and then if/when any of the drop Sony, go and purchase their music then. Get the musicians on the bandwagon as well and support them when they are making choices in keeping with ours.

      And for those of you who can't live without their music, consider: you are putting more value on a 3 minute song than you are on your own personal rights.

      Vive la revolucion!

    15. Re:Get Back On Our Own - Boycott Sony by lumbercartel.ca · · Score: 1

      That never happens to me on my Windows 3.11 computer for some strange reason. Hmm, maybe I'm doing something wrong?

    16. Re:Get Back On Our Own - Boycott Sony by BVis · · Score: 1
      That never happens to me on my Windows 3.11 computer for some strange reason. Hmm, maybe I'm doing something wrong?
      Yeah, you're using Windows 3.11.
      --
      Never underestimate the power of stupid people in large groups.
    17. Re:Get Back On Our Own - Boycott Sony by lumbercartel.ca · · Score: 1

      Only for playing Sony's CDs.

    18. Re:Get Back On Our Own - Boycott Sony by Anonymous Coward · · Score: 0

      to attach it's controls

      "its".

  6. The quote that sums it up by Anonymous Coward · · Score: 5, Interesting


    "While the security issues related to the copy-protection software have apparently affected U.S. government and military computers, the Department of Justice will not likely get involved, said Jennifer Granick, executive director of the Center for Internet and Society at Stanford Law School.

    "I don't see the federal government suing a big company like Sony," she said. "The fact that military networks have likely been affected by this won't change that."

    1. Re:The quote that sums it up by Silver+Sloth · · Score: 1

      It may be harsh but employees working on military networks should be aware that no unauthorised software should be loaded in any form because you just don't know what payload it may carry. This is a good illustration to employees who think that 'security doesn't realy matter, anyway all I was doing was playing my latest CD'

      I don't trust SONY, I don't trust anybody

      --
      init 11 - for when you need that edge.
    2. Re:The quote that sums it up by Anonymous Coward · · Score: 0

      What a crock. If some 15 year old dork in Austria did this, they would insist that the kid be extradited and spent most of his life in prison. Major company does this, and nothing.

      No, Sony needs a major bitch-slapping. If anything, I'm cutting them off at my wallet. If everyone did this, it would be similar to the death of a thousand cuts. No individual wallet will kill them, but enough will.

    3. Re:The quote that sums it up by metternich · · Score: 1

      How I long for Government of the people, by the people and for the people. Unfortunatly this hasn't been true for quite a while.

      --
      Facts do not cease to exist because they are ignored.
    4. Re:The quote that sums it up by BigDork1001 · · Score: 1
      It may be harsh but employees working on military networks should be aware that no unauthorised software should be loaded in any form because you just don't know what payload it may carry.

      Yes, we do know that we shouldn't be putting unauthorized software on the network. We go through training about it and are reminded from time to time. But it happens all the time anyway.

      But then again, with this rootkit even if you clicked on disagree it would install on your computer. So Mr. Airman goes to listen to his new CD on his computer at work (which is okay) and before you know it rootkit on the computer.

      --
      "Armed forces abroad are of little value unless there is prudent counsel at home" - Cicero
    5. Re:The quote that sums it up by gwait · · Score: 1

      You'd think this would qualify as a threat to national security..

      Hello CTU, we have solid evidence of a foreign entity purposely infecting thousands of military and intelligence computers, blowing the doors off the airtight security systems in place (cough) and leaving us vunerable to cyberterrorists..

      Send Jack Bauer over to kick some butt!

      If that's next years plot, I want royalties!

      --
      Bavarian Purity Law of Rice Krispie Squares: Rice Krispies, Marshmallows, Butter, Vanilla.
    6. Re:The quote that sums it up by lumbercartel.ca · · Score: 1

      > ... with this rootkit even if you clicked on
      > disagree it would install on your computer ...

      Isn't that what SpyWare is infamous for?

  7. Apology? by omeg · · Score: 5, Interesting

    By the way, regardless of the magnitude of this problem currently, has Sony ever formally apologized for their damaging rootkit? They've said that most people "shouldn't care", or that it was their "right" to cripple people's computers, but I've not once heard them say sorry. Can anyone clarify?

    1. Re:Apology? by ai3 · · Score: 4, Interesting
    2. Re:Apology? by AviLazar · · Score: 1

      I would love for a class action suit to hit Sony regarding this. When I buy a program (i.e. world of warcraft) i know and expect to install stuff on my computer. When I buy music or movies I do not expect for anything to install. Hell when I put a movie in and the Activision (i think that is it) pops up to install itself so it can "play" the movie I just hit the cancel button. It is annoying to see it each time i stick the movie in (actually not really, it doesn't happen that often) but at least they ask me. SONYs rootkit, in all honesty, is starting to sway me to the side of piraters. By installing a program on my computer without my knowledge or permission they have violated my personal property.

      I really would like a class action suit which would be for the cost of the CD + damages to computer (say $250-$500 is a fair number).

      --

      I mod down so you can mod up. Your welcome.
    3. Re:Apology? by Anonymous Coward · · Score: 0
      I really would like a class action suit which would be for the cost of the CD + damages to computer (say $250-$500 is a fair number).

      The way class action suits work in this country, lawyers would get the bulk of the money, while consumers would get $1 and a coupon for a free Sony (with root-kit) CD of Sony's choosing.


      Welcome Consumer Rights 101.

    4. Re:Apology? by hackstraw · · Score: 1

      By the way, regardless of the magnitude of this problem currently, has Sony ever formally apologized for their damaging rootkit?

      I'm not big into apologies. They are worthless. Especially when the person keeps doing the same thing that they apologized for.

      I require 2 things. 1) restitution or compensation for whatever you fucked me over with, and 2) assurance that the person will not do the thing again.

      Sony owes people cash for screwing up people's computers and their time. They screwed up. An apology is OK. I guess some people might feel better for a while because of it, and possibly earn a little respect back. But compensation and change speaks much more loudly and means so much more than a simple "Oh, OK, I'm sorry".

    5. Re:Apology? by BVis · · Score: 1

      IMHO a class action suit isn't so much about reimbursing the consumer for his/her losses, it's about hitting the offending company where it actually matters: the bottom line. Let's face it, nobody goes to jail over these things. They won't even apologize, because they know it won't matter if they don't. People will still buy their stuff, because people are stupid. However, a multi-billion dollar award as a result of a class action pisses off the stockholders something fierce, and they're actually in a position to tell the a-holes what to do.

      --
      Never underestimate the power of stupid people in large groups.
    6. Re:Apology? by TheRaven64 · · Score: 1
      Take them to the small claims court. They probably won't show up, in which case it's easy to get a judgement in your favour (and if they do, it's probably cost them more to send a person for the day than it's cost you). Get all of your friends who have had the same problems to do the same thing. Hit them with a million individual lawsuits for $500. They can't afford to defend them all, and they can't afford to pay if they all win.

      If they refuse to pay, you can get the court bailiffs to seize Sony property and auction it to raise the funds.

      --
      I am TheRaven on Soylent News
    7. Re:Apology? by kilgortrout · · Score: 1

      The Sony corporation has engaged John Cleese to issue an apology on Sony's behalf: "All right, all right, I apologize. I'm really, really sorry. I apologize unreservedly. I offer a complete and utter retraction. The rootkit was totally without basis in fact and was in no way fair comment and was motivated purely by malice, and I deeply regret any distress that my rootkit may have caused you or your family, and I hereby undertake not to repeat any such rootkit at any time in the future."

  8. Repercussions? Nah. by Alizarin+Erythrosin · · Score: 2, Insightful

    Will Sony face future repercussions for this potentially long-term damage?

    Probably not. They're already getting off somewhat easy for the original hubub.

    --
    There are only 10 kinds of people in this world... those who understand binary and those who don't
    1. Re:Repercussions? Nah. by Bohnanza · · Score: 1
      They're already getting off somewhat easy for the original hubub.

      The penalty is less than a slap on the wrist, but is typical of the inconsequential "fines" levied against large companies these days. They can simply afford better lawyers than their opposition.

      --

      -----

      Sorry, I'm only a 1336 h4x0r.

    2. Re:Repercussions? Nah. by gmuslera · · Score: 0, Flamebait
      Wonder what kind of repercussions had Microsoft because the multiples rootkits it bundled in his history (probably the latest WMF vulnerability could be called that way) and how much we can reach in the number of affected networks, but is far, far bigger than 350k, and is there since Windows 3.1, remotely explotable and without patches for most windows versions afaik.

      If no problem yet for Microsoft, why should fear SONY?

  9. Settled too soon. by gasmonso · · Score: 4, Insightful

    If you look at the settlement in the New York District court it is nothing more than a slap on the wrist. Sony knowingly infected computers with what amounts to a trojan horse. In return they have to pay a little money and promise not to do it again. That's insane when you consider the witch hunts that have taken place for 16 year-old kids releasing a virus. Sony needs to pay and pay dearly for their deliberate criminal actions. The government always wants to send hackers a strong message...well then the same applies to corporations!

    http://religiousfreaks.com/
    1. Re:Settled too soon. by wfberg · · Score: 1

      Well, a settlement in a civil suit, even if it is a class action, doesn't mean you won't be criminally prosecuted.

      Also, I doubt the US government is included in the action's class.

      Write (not e-mail) your congressman today. Make sure to sign the letter with a real pen, too (politician's like that sort of thing, reminds them of crayons).

      --
      SCO employee? Check out the bounty
    2. Re:Settled too soon. by Techguy666 · · Score: 1

      I would be most curious if a spyware/virus/worm starts using the Sony rootkit as a foundation. Sony actions are not be seen as a "crime" so what happens if the Sony rootkit is then automated and made self-propagating or somebody makes a harmless worm that propagates and hides in the hidden directories.

      The malware coder may be tossed before the courts but I wonder if the (lack of) legal reaction to Sony's rootkit can be used as precedence? And if not, can the malware coder then drag Sony into the picture and get himself a reprieve of several decades as Sony's lawyers obfuscates things and bog down the legal process?

      Sony may have gotten off lightly now, but it can still come back to haunt them as malicious coders use the company as a legal obstacle to prosecution.

    3. Re:Settled too soon. by Anonymous+Brave+Guy · · Score: 1
      I would be most curious if a spyware/virus/worm starts using the Sony rootkit as a foundation.

      I'm afraid that already happened.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  10. Repurcussions? No. by mindaktiviti · · Score: 3, Insightful

    "Will Sony face future repercussions for this potentially long-term damage?"

    No they won't because they're a huge multinational corporation who will probably layoff some employees and reward their top execs from the whole ordeal. I'm not trying to be some hippie about this, it's just the way the world works.

  11. Of Course, that is Sony's Security Policy by slashbob22 · · Score: 3, Insightful

    Security through Obscurity.

    --
    Proof by very large bribes. QED.
    1. Re:Of Course, that is Sony's Security Policy by BrynM · · Score: 4, Funny
      Security through Obscurity.
      You missspelled "obsurdity". Why do people keep doing that? ;)
      --
      US Democracy:The best person for the job (among These pre-selected choices...)
    2. Re:Of Course, that is Sony's Security Policy by vishbar · · Score: 1
      You missspelled "obsurdity".
      So did you ;).
      --
      Ride the skies
    3. Re:Of Course, that is Sony's Security Policy by sconeu · · Score: 1, Troll

      Maybe because it's spelled "absurdity".

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    4. Re:Of Course, that is Sony's Security Policy by BrynM · · Score: 1
      Maybe because it's spelled "absurdity".
      Um, that is part of the joke. "why do people..." oh, never mind :D
      --
      US Democracy:The best person for the job (among These pre-selected choices...)
    5. Re:Of Course, that is Sony's Security Policy by sconeu · · Score: 1

      Yeah, I just reread the post and realize that it was a joke.

      Sorry.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    6. Re:Of Course, that is Sony's Security Policy by BrynM · · Score: 1

      No apology needed. "We learn from humor when we can laugh at ourselves" - unknown

      --
      US Democracy:The best person for the job (among These pre-selected choices...)
    7. Re:Of Course, that is Sony's Security Policy by msauve · · Score: 1

      He also misspelled "misspelled."

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
  12. Sony's unintended consequences hurts them by digitaldc · · Score: 5, Interesting

    Robert K. Merton listed five causes of unanticipated consequences:
    (I have applied them to Sony's decision to use rootkits)

    1. Ignorance (It is impossible for Sony to anticipate everything.)

    2. Error (Incomplete analysis of the rootkit problem, or following habits that worked in the past but may not apply to the current situation.)

    3. Immediate interest in stopping a computer from copying something, may override long-term interests of sustaining their reputation as honest and trustworthy.

    4. Basic values of trusting your customers may require or prohibit certain actions like installing a rootkit, even if the long-term result might be unfavorable. (These long-term consequences may eventually cause changes in those same basic values.)

    5. Installing malware on people's computers is always a self-defeating prophesy (Fear of some consequence drives people to find solutions before the problem occurs, thus the non-occurrence of the problem is unanticipated.)

    --
    He who knows best knows how little he knows. - Thomas Jefferson
    1. Re:Sony's unintended consequences hurts them by systmoadownfreak · · Score: 1

      I think that you really hit the nail on the head with numbers 3-5. The fact that they are so focussed on stopping people from copying their music leads one to believe that they are not spending as many resources as they could on developing a quality product. When so-called "security" takes precedent over functionality and customer service, there may be a problem.

      Another good point you make is that Sony really has seperated themselves from their customers. Once you show the consumer that you don't trust them or you feel that they aren't capable of performing the necessary actions required to use a product, you have alienated your source of income, which is always a poor business practice.

      Again, #5 is another example of taking the security of the product too seriously. Apparently Sony is unable to comprehend the idea that the customers are buying their music and regardless of whether or not they are copying the CD, they still have sold at least one copy. Every customer that you turn away due to poor business practices, is another customer that is likely to download music illegaly. They again have alienated the customer and basically said that since they are absolutely going to illegally share the CD, Sony has decided to infect your computer.

    2. Re:Sony's unintended consequences hurts them by hackstraw · · Score: 2, Interesting

      1. Ignorance (It is impossible for Sony to anticipate everything.)

      2. Error (Incomplete analysis of the rootkit problem, or following habits that worked in the past but may not apply to the current situation.)

      3. Immediate interest in stopping a computer from copying something, may override long-term interests of sustaining their reputation as honest and trustworthy.

      4. Basic values of trusting your customers may require or prohibit certain actions like installing a rootkit, even if the long-term result might be unfavorable. (These long-term consequences may eventually cause changes in those same basic values.)

      5. Installing malware on people's computers is always a self-defeating prophesy (Fear of some consequence drives people to find solutions before the problem occurs, thus the non-occurrence of the problem is unanticipated.)


      This is a pretty good list. The order is significant. I go under the assumption that all wrongdoings is from ignorance. In fact, aside from a simple mistake like forgetting something, slipping on something that you did not see, or whatever, most "errors" are due to ignorance. The other three are too specific to the sony rootkit to talk about them in general terms.

      The most intolerable wrongdoings are due to greed, which is what Sony did this time. Sure there was ignorance and an error in execution of the crappy software. Like Time-Warner-AOL, Sony has missed the boat. Sony makes electronic equipment. They are one of the best in the world. They also "own" roughly 1/3 of the music available. Why doesn't Sony do like they do with movies? Just sell equipment, new good equipment with new features, and give away the music in new and better formats (SACD, surround sound, 24bit, or something new) so that people are motivated to buy better equipment.

      People diss Sony because of their proprietary formats. Their problem is that they continuously screw up the formats because they are basically the same as open and standard formats. If they gave away media, and the formats were good, they could sell more equipment.

      IMAX is a proprietary format. Its also the best sound and video that anyone can get in the world. Also, IMAX movies are cheaper and better than the crap at the regular movie theater.

    3. Re:Sony's unintended consequences hurts them by gd23ka · · Score: 1

      I'm just as impressed with you here, as I am with Robert K. Merton, as I am with his middle initial 'K'. If there was some way to moderate Merton down on his own site then I would do it because what you and he are saying is crap. Here's some real world analogy (unfortunately) you can maybe relate to a little better of what you and Bob are saying:

      1. Ignorance (We were just shooting at people, honestly sir, we didn't think anybody would get hurt)

      2. Error (I didn't know it was live ammo, hell if I had known...)

      3. Immediate interest (well we were bored and there was nothing on TV and we did have the key to the gun locker)

      4. Basic Values (Hey c'mon, we fired 200 rounds and just killed twenty people, give us a break here!)

      5. Shooting at people nearly always gets them hurt.

      I think by now you realize how patently dumb that is and that there can be no excuse whatsoever for Sony. For that matter there can't be any excuse for our government not to crack down hard and viciously on Sony for their sabotage.

      Regards

    4. Re:Sony's unintended consequences hurts them by rtb61 · · Score: 1
      Actually there is a real excuse for the government not cracking down too hard on Sony, it's called being an accessory. This software was out there for many months, many people knew about. If it is on military and government computers, either their security people are seriously incompetent or they did not think it was a risk (they were still legally bound to report it of course and that failure should be challenged).

      Then you have the contractors who made the software and their employees, they knew how the software was to be deployed and they knew it's functions, they created it's functions. This software was also run past companies that produce software to protect peoples computers so they and any of their employees that vetted the code should be charged and that would include microsoft. Odd how the story broke after all these months just prior to the release of the Xbox.

      So yes I agree, everything possible should be done to ensure that everyone responsible should spend some time in an appropriate place of detention and rehabilitation, years preferably.

      Primary targets would be the software security companies as they committed an act of fraud upon their customers for a period of months, selling them software with out warning them that there were specific holes left in it (what other software do they ignore when paid a sufficient amount). Next would be the coders themselves, no excuse, they knew all about it, including the fraudulent activity of the software security companies. After them would be various government security agencies, who obviously knew about the program (ignorance for any intelligence agency, whilst generally true, does not work as an excuse) as it was on their network and they obviously approved it's illegal presence (ignorance of the law by law enforcement agencies, again whilst often true, also does not work as an excuse).

      After that lot, a few minor executives a Sony BMG are chicken feed (and they most likely have already been sent off into corporate exile, not of course for the program and it's affect upon consumers but for the more heinous crime of setting up the sony marketing team as a target for the microsoft marketing team).

      --
      Chaos - everything, everywhere, everywhen
  13. Makes you wonder.... by antek9 · · Score: 3, Interesting

    ... what kind of person takes their Sony CDs to work in order to play them on PCs on a military network. Kinda bizarre that that's even possible.

    Makes me sleep better, on the other hand, to see that there are music lovers even there.
    You know how the saying goes: Where one sings you may sit down and sing along, bad people have no song. ;)

    --
    A World in a Grain of Sand / Heaven in a Wild Flower,
    Infinity in the Palm of your Hand / And Eternity in an Hour.
    1. Re:Makes you wonder.... by Prophet+of+Nixon · · Score: 5, Insightful

      Well, the scenario of taking CDs to work to play them on networked military PCs is not implausible at all; there are thousands of GS/staff employees who do that. What is implausible, at least in my experience, is those users having admin access to their machines. Was this rootkit able to install on XP under a user or power user account?

    2. Re:Makes you wonder.... by StevoJ · · Score: 1

      Doesn't seem likely. It replaced the CD-ROM drivers, which SHOULD require admin access.

      --
      That didn't really make sense. But I'm going to post it anyway.
    3. Re:Makes you wonder.... by Gonarat · · Score: 5, Insightful

      .. what kind of person takes their Sony CDs to work in order to play them on PCs on a military network. Kinda bizarre that that's even possible.

      Once upon a time, bringing in the CD would have been the safest way to listen to music. Nothing can be copied to a CD, and nothing could be brought in on a pressed CD other than music. Nothing for Military Security to be worried about. Ipods and other MP3 players could potentially be used to sneak data out.

      Of course now with the DRM crap on the "CD", this is no longer true. The once friendly store bought CD is now a potential risk. Way to go Music Industry! And you wonder why sales are down in 2005 from 2004...besides crappy offerings.

      --
      Beware of Sleestak
    4. Re:Makes you wonder.... by antiMStroll · · Score: 5, Interesting

      What's implausible is the Sony executives responsible for distributing a hidden exploit aren't basking in the Guantanamo sun. Had this been Swedish or Thai teens you can bet your ass their faces would adorn newpapers worldwide and software giants decrying the vandalism.

    5. Re:Makes you wonder.... by Firehed · · Score: 1
      From an effectiveness standpoint, I'd hope it would. What good does DRM do if it only works under admin accounts.

      That said, most people use their computer under an admin account (at home anyways), and I certainly am NOT supporting the rootkit. But you can't expect it to be theoretically useful (theoretically being the keyword here, it's not as if it stopped anyone who wanted to pirate the music) if it only works with admin rights.

      But I'm not going to go eBay a CD I don't want just to see if I can ruin my computer while logged into a standard or power user account.

      --
      How are sites slashdotted when nobody reads TFAs?
    6. Re:Makes you wonder.... by Anonymous Coward · · Score: 0

      In my shop, (Programming shop for DOD finance apps) everyone has admin access to their machines. This may not be true of the mainframers across the way, or the beancounters in the dungeon. I'd wager 75% of the people in my shop haven't heard a peep about the Sony rootkit. This is a job to them, fantasy football/baseball/basketweaving and online poker occupy most of their thought, not the latest enemy of all things geek.

      I'd not be the least bit suprised to find someone has a rootkit on their machine.

    7. Re:Makes you wonder.... by gwait · · Score: 0, Flamebait

      Why on earth do you believe Microsoft's admin privileges scheme actually works? By the massive number of viruses/trojans/rootkits that came before, there is no evidence that Windows is secure.
      This latest Sony DRM rootkit is more proof.

      --
      Bavarian Purity Law of Rice Krispie Squares: Rice Krispies, Marshmallows, Butter, Vanilla.
    8. Re:Makes you wonder.... by drinkypoo · · Score: 2, Insightful

      IMO the problem is that the labeling restrictions for CDs are not strong enough. You can still put the "CD digital audio" logo on your audio CD if it is a CD-Extra and not just a good old Red Book CD. Without this, there might have been more consumer awareness. The properly paranoid will now note that the CD system was invented by Sony and Philips and Philips is the body behind the logos.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    9. Re:Makes you wonder.... by Tim+Browse · · Score: 2, Insightful
      So the fact that you think that the Sony rootkit manages to bypass Windows admin/driver privileges is what you use as proof that the admin privileges scheme doesn't work?

      There's a flaw in that logic somewhere, but I can't put my finger on it...

    10. Re:Makes you wonder.... by Analogy+Man · · Score: 1

      Now that our national security is compromised by the Sony (a foreign entity) we can arrest Sony executives as unlawful combatants, toss them on a jet and fly them to some 3rd world hinterland and work them over? Sounds appealing!

      --
      When the people fear their government, there is tyranny; when the government fears the people, there is liberty.
    11. Re:Makes you wonder.... by Tmack · · Score: 1
      Had this been Swedish or Thai teens you can bet your ass their faces would adorn newpapers worldwide and software giants decrying the vandalism.

      And fined $400000 per track they infected, as opposed to the $7.50 per Album Sony is getting away with...

      Tm

      --
      Support TBI Research: http://www.raisinhope.org
    12. Re:Makes you wonder.... by CodeBuster · · Score: 1

      Admin access to the machines in question is not always a requirement for rootkit installer programs because they frequently exploit weaknesses in the host operating system to either escalate their privileges or bypass the OS security system completely. It would be a poor rootkit indeed if it required root to install it...

    13. Re:Makes you wonder.... by Anonymous Coward · · Score: 0

      Well you can't have a war without listening to Celine Dion...

    14. Re:Makes you wonder.... by Anonymous Coward · · Score: 0

      ... what kind of person takes their Sony CDs to work in order to play them on PCs on a military network. Kinda bizarre that that's even possible.

      What kind of people runs such a joke of an OS that allows this kind of exploit on a military network?

    15. Re:Makes you wonder.... by gwait · · Score: 1

      Ok, you've got a point, I am making a leap here, but it seems like a logical assumption to me:

      1. Historically, Microsoft's security features are anything but. (Proven over and over again)

      2. Consider Windows admin priveledges scheme, secure or not? I set the family computer up (one of several reformat and reinstall sessions ago) and only gave the kids user accounts in an attempt to keep trouble out. It didn't work, machine got infected while kids were using it (I don't personally use the machine, just Reformat and Reinstall. Was it a rootkit? Don't know.

      A quick google check does seem to indicate that this Rootkit can only get installed via an admin account. Consider me shot down. I think I'll fall off my chair in shock.

      --
      Bavarian Purity Law of Rice Krispie Squares: Rice Krispies, Marshmallows, Butter, Vanilla.
    16. Re:Makes you wonder.... by CSfreakazoid · · Score: 2, Informative

      Having spent time Working for the government/military. It is entirely plausible that these ramdom people have admin access to their machines. I a user wants to intall a program they call the admin and he oversees it. after the third of fourth time, the admin gets tired of it, and gives the user local admin access. I had it after working there for only a week.

    17. Re:Makes you wonder.... by halltk1983 · · Score: 1
      --
      Watch for Penguins, they eat Apples and throw rocks at Windows.
    18. Re:Makes you wonder.... by Anonymous Coward · · Score: 0

      Someone should take the sony rootkit and release it in the wild as a trojan. That should force law enforement to take stern stance with sony

    19. Re:Makes you wonder.... by danpsmith · · Score: 1

      Makes me sleep better too, definitely. I just love the fact that people are able to bring in and use potentially harmful software on military computers. What a comforting idea! Now all we need is the Taliban to distribute a Britney Spears CD and we are all screwed.

      --
      Judges and senates have been bought for gold; Esteem and love were never to be sold.
    20. Re:Makes you wonder.... by Tim+Browse · · Score: 2, Funny
      I think I'll fall off my chair in shock.

      While you're down there, pass me up Sony's reputation, will you? :-)

    21. Re:Makes you wonder.... by sorak · · Score: 1

      ... what kind of person takes their Sony CDs to work in order to play them on PCs on a military network. Kinda bizarre that that's even possible.

      I am not a military personnel, but when the story broke about how that the military needs arabic translators, but keeps firing the ones it has for being gay, there were a few public interest stories about the working conditions. I've gotten the impression that there are plenty of military buildings that are just odd-looking offices. People go in, do their paperwork, and clock out (figuratively, if not literally) at 5pm.

      I think I remember hearing that the majority of the military is support. Of course that can include the people who are in god-knows-where running water purification systems and maintaining missile defense systems, but it may also include translators, recruiters, and who knows, maybe military hospital personnel.

    22. Re:Makes you wonder.... by Fujisawa+Sensei · · Score: 1

      And thanks to Microsoft we have email viruses.

      --
      If someone is passing you on the right, you are an asshole for driving in the wrong lane.
    23. Re:Makes you wonder.... by RobertLTux · · Score: 1

      actually there are in fact about a dozen different "cd logo"s the first two from http://www.gnscd.com/cdlogo.htm are pure RedBook and nothing but audio

      --
      Any person using FTFY or editing my postings agrees to a US$50.00 charge
    24. Re:Makes you wonder.... by drinkypoo · · Score: 1

      The second logo explicitly says it's the one for yellow book.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    25. Re:Makes you wonder.... by Anonymous Coward · · Score: 0

      I don't bash MSFT often. Got XP Pro at home & Win ME at work (which chose today to turn into a total bitch - 6 years later than most).

      That said, they deserve an equal share of the blame from a security POV. Autorun has been made increasingly difficult to turn off since the bad idea commenced in W95. It currently takes registry settings to do it even semi-effectively and even the registry page says it is not disabled for audio CDs (WTF - will it run programs or just song playing - don't know / can't tell = bad security).

    26. Re:Makes you wonder.... by clydemaxwell · · Score: 1

      I don't know about my colleagues but I don't grant that kind of access to anyone.

      --
      Browsing with classic discussion, noscript, at -1 and nested
      no hidden comments and I only mod UP
    27. Re:Makes you wonder.... by Ignominious · · Score: 1

      Makes me sleep better, on the other hand, to see that there are music lovers even there.
      You know how the saying goes: Where one sings you may sit down and sing along, bad people have no song. ;)


      What? Like Aegis Defence Services security guards in Baghdad randomly shooting Iraqi civilians whilst listening to Elvis Presley?
      http://www.google.co.uk/search?hl=en&q=iraq+trophy +video+%22elvis+presley%22&btnG=Search&meta=

    28. Re:Makes you wonder.... by CSfreakazoid · · Score: 1

      Thats probably a good thing, as I install so many programs, I dont mind having the admin access, I just wish I could turn it off when I dont need it, so im not responsible for anything.

  14. Simple answer.. by ThePatrioticFuck · · Score: 3, Insightful

    Will Sony face future repercussions for this potentially long-term damage?

    Of course not. They may pay a (relatively) small fine or two, but a quick a donation to a politician here and there, and that'll be all she wrote.

    1. Re:Simple answer.. by mattwarden · · Score: 1

      Uhhhh, not really. Even the CEO of Sony admits that they spent way too much time working on protecting their music recording services, enough that products like the iPod and Panasonic's flat screens and Microsoft's XBox have seriously harmed them. It's called opportunity cost -- more resources spent on one thing mean less resources spent on others.

      Last year they lost money. Yes, negative profit. For a company as established as Sony, that tells you something.

      Sounds to me like the market is handling this rootkit business quite well.

    2. Re:Simple answer.. by HiThere · · Score: 1

      No. Even if I accept that this will mean that in a couple of decades Sony goes bankrupt I wouldn't accept that as meaning the market handled the problem well. To handle the problem well the responsible management would need to be out of a job and forbidden from working at a management job ever again. Minimum.

      I know that no law provides for that kind of penalty, though that hasn't stopped judges from using it on people with less power, but that's the minimum needed to handle the problem well. Ideally there should ALSO be expenses paid for all the labor needed to recover systems and recover data from systems that got infected. After that we start to get into the grey area of punishment rather than restitution and social hygiene. Punishment may also be desireable, but I'm of a mixed mind about that. Protection of society and of the individuals that live in it is my main concern.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    3. Re:Simple answer.. by mattwarden · · Score: 1

      If you read my comment, nowhere do I say anything about forgoing legal remedies to damages. All I said was that they got plenty punished for being an idiot, and that, in the end, will be a much greater deterrent than any lawsuits.

  15. Government and Military by mendaliv · · Score: 4, Interesting

    The whole concentration on the fact that military and government computers were infected is a tad sensationalist. You hear military or government and see DARPA or CIA.

    In all odds the machines they're talking about are your typical office machines, used mostly for clerical work. Your network admin might not really worry or care about someone screwing it up; in all odds the people using them don't know enough to mess stuff up that badly.

    I think all this is going to entail is the IT divisions of the important branches of the US government running rebuilds a little ahead of schedule...

    1. Re:Government and Military by avdp · · Score: 1

      Right. And not to minimize Sony's fault here, but government users (or most corporate users for that matter) should not be able to install (intentionally or not) software on their own PCs. It's a pretty good bet the NSA and DARPA PCs don't.

    2. Re:Government and Military by n0spamus · · Score: 1
      While these machines may not have super secret military plans, they may contain such vitals as your social security number, mothers maiden name, address and phone number.

      That's just the kind of information you want lying around unencrypted on a rootkitted machine, what with the current prevalence of "identity theft".

      (not to minimize all of the corporate PCs, with the same types of information, that similarly get compromised)

  16. Will support HD-DVD by TheDoctorWho · · Score: 0

    That's my reprecussion, cowboys.

  17. Easy (non) solution... by andreMA · · Score: 2, Interesting

    Take away the sonybmg.com domain name. Seems a reasonable punishment for domains used in such a way... Yes, I know the problem of infested machines that remain vulnerable thanks to Sony would still exist.

  18. Sony won't be harmed, users will by Perl-Pusher · · Score: 4, Interesting
    "Will Sony face future repercussions for this potentially long-term damage?"

    Sony won't be harmed at all. But since this incident an Air Force unit I used to belong to can no play music cd's on computers. Doing so can result in corporal punishment.

    1. Re:Sony won't be harmed, users will by scottennis · · Score: 1

      Doing so can result in corporal punishment.

      They give spankings in the Air Force?

    2. Re:Sony won't be harmed, users will by Lord+Bilbo · · Score: 0

      Surely this can't be just!!!!!!

      Why punish the Corporal?

      And don't call me Shirley!!! :P

      --

      I have a bumber sticker in my cubicle that says

    3. Re:Sony won't be harmed, users will by Anonymous Coward · · Score: 1, Informative

      You mean they cane you? Or beat you in some other way?

      Or did you mean court martial instead of corporal punishment.

      Anonymous Pedant

    4. Re:Sony won't be harmed, users will by akunkel · · Score: 0

      Don't worry Corporal Punishment is not on the Sony label.

    5. Re:Sony won't be harmed, users will by AviLazar · · Score: 1

      corporal punishment???

      They will beat you for playing music on a computer? Hm, I can understand wanting to beat you for playing the Back Street Boys, but just playing music?

      In all seriousness - I am pretty sure the military is not allowed to employ coproral punishment on it's soldiers (at least not officially).

      --

      I mod down so you can mod up. Your welcome.
    6. Re:Sony won't be harmed, users will by Anonymous Coward · · Score: 0

      Whats interesting is that in classified environments, I've found they prefer us to bring in mp3's and knowingly support piracy rather than have us bring media in.

    7. Re: Sony won't be harmed, users will by Black+Parrot · · Score: 2, Funny

      > They give spankings in the Air Force?

      Yeah, and they have a "don't ask, don't tell" policy regarding whether you like it, too.

      --
      Sheesh, evil *and* a jerk. -- Jade
    8. Re:Sony won't be harmed, users will by milimetric · · Score: 1

      That's truly disturbing. First we send these poor kids out to die for some ridiculous power stomp operation in Iraq. Now we don't let people play CDs because our affiliations are not with our own kids but with foreign mega coorporations.

      Fuckin thought America was different than the rest of the world when I moved here. Fuckin everyone's the same, just bullshit people in a bullshit endless shit cycle. Wake up people, you're better than this. Do something about it. Tell your ex-commander or whatever that it's not the CDs that are causing it but SONY. If that doesn't work, sue the military, do something.

    9. Re:Sony won't be harmed, users will by operagost · · Score: 1

      Corporal punishment... heh heh, that's a good one. But E-3 in the Air Force is actually Airman First Class.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    10. Re:Sony won't be harmed, users will by Insightfill · · Score: 1
      Whats interesting is that in classified environments, I've found they prefer us to bring in mp3's and knowingly support piracy rather than have us bring media in.

      IIRC, there was an attack vector in Windows XP (no service pack) where an MP3 with a well-crafted ID3 tag could cause a buffer overflow exploit. This was just the tooltip on the mouse-over of the file in Explorer - you didn't even have to play it.

      link here

    11. Re: Sony won't be harmed, users will by Sarisar · · Score: 1

      ... and may I take this opportunity of emphasizing that there are no spankings in the Air Force. Absolutely none, and when I say none, I mean there is a certain amount, more than we are prepared to admit, but all new recruits are warned that if they wake up in the morning and find marks at all anywhere on their bodies, they're to tell me immediately so that I can immediately take every measure to hush the whole thing up.

      (yes I'm misquoting Monty Python!)

    12. Re:Sony won't be harmed, users will by Perl-Pusher · · Score: 2, Informative

      It's also a slang term for non-judicial punishment,letter of reprimand, article 15 etc. Yes, it also means spanking. The term corporal punishment, is a variation from the term "slap on the wrist".

    13. Re:Sony won't be harmed, users will by Anonymous Coward · · Score: 0

      Uhm...methinks you missed the point. Rarely is it "the military" that makes a decision like that. I honestly doubt someone at the top made that decision without an IT worker screaming bloody murder first. This isn't about not letting people play CDs. This is about protecting our equipment from malicious programs. I'm sorry but I have taken crap from coworkers for being in the camp of protect our equipment over our right to being entertained. So, you want to play pirate games, or Sony CDs or whatever..great..you are all peachy keen happy, until the damage you managed to do to the software prevents you from using that computer to get your job done, mission fails, your ass is in a sling, and potentially other people who were relying on you are left ass out. Of coarse then there is also the IT guy that has to go clean up your mess after you taking them away from other more productive things they could be doing.

    14. Re:Sony won't be harmed, users will by FirstTimeCaller · · Score: 2, Funny

      Doing so can result in corporal punishment.

      Typical military! Meanwhile, the sergeants, lieutenants, captains, colonels and generals can do whatever they please.

      --
      Wanted: witty unique signature. Must be willing to relocate.
    15. Re:Sony won't be harmed, users will by elhondo · · Score: 1

      and an E3 in the other services ain't a corporal either. Corporal is E4.

    16. Re:Sony won't be harmed, users will by lumbercartel.ca · · Score: 1

      Perhaps the underlying message here is that the Sony Rootkit is some subtle form of a hazing ritual?

    17. Re:Sony won't be harmed, users will by lumbercartel.ca · · Score: 1

      > ... thought America was different than the rest of the world when I moved here ...

      It is. Music and software piracy run rampant in many other countries, and those governments seem to do very little, if anything at all, to prevent it.

    18. Re: Sony won't be harmed, users will by ettlz · · Score: 1
      > They give spankings in the Air Force?

      Yeah, and they have a "don't ask, don't tell" policy regarding whether you like it, too.

      Any chance of getting a Brit a summer placement, then? :))

    19. Re:Sony won't be harmed, users will by milimetric · · Score: 1

      many artists feel what I'm about to show you, but here's a quote from Beethoven just in case you need a higher authority:

      There ought to be but one large art warehouse in the world, to which the artist could carry his art-works, and from which he could carry away whatever he needed. As it is, one must be half a tradesman. - Beethoven

      Here's an idea: piracy is bad for the leechers and the middlemen. It's bad for business and that's what America's all about, right? Business. So don't talk about other countries and piracy as if they're some unwashed masses stealing precious music and food off the table of artists. If everyone was more chill about this whole shit, artists could make a lot of money if people like their music, just like all the indie bands are doing now anyway. The system as it is only stands to serve the shittastic music of the simpson sisters or play "wake me up when september's gone" 8 times a day. It's getting old and people will not put up with shit for too long. Radio dies first, then the industry. I can't wait, Beethoven's dream will be true, God and the internet willing.

    20. Re:Sony won't be harmed, users will by Guppy06 · · Score: 1

      "But since this incident an Air Force unit I used to belong to can no play music cd's on computers. Doing so can result in corporal punishment."

      If you play Jessica Simpson anywhere in my earshot I'd beat your ass, too! I'm all for this program!

  19. Problem not eliminated by gbobeck · · Score: 4, Insightful

    Part of the problem with the Sony Rootkit is the fact that many stores **STILL** are selling the rootkit enhanced CDs.

    I personally have seen this at several Borders stores in my area, and each time I mention this to the management I recieve blank "deer in the headlights" looks.

    --
    Navicula hydraulica plena anguilarum est. Omnes castelli tuus nostri sunt. Ed elli avea del cul fatto trombetta.
    1. Re:Problem not eliminated by quokkapox · · Score: 4, Insightful
      You would receive a similar blank stare if you remarked about mercury levels in the cans of tuna you are buying at the grocery store.

      The retail checkout line is not the place to wage these types of battles.

      --
      it's a blue bright blue Saturday hey hey
    2. Re:Problem not eliminated by Mistlefoot · · Score: 1

      These have been 'recalled' by SONY. The retail level is definitely the place to wage this portion of the battle. If this were Tuna and a recall were out you can be assured the 'tainted' cans would be off the shelf in minutes.

      I wonder how culpable a store becomes when they sell a recalled product AND have been advised of that fact?

    3. Re:Problem not eliminated by TubeSteak · · Score: 1

      If you asked for the Manager, and he doesn't know squat, try getting the phone number for the regional/district office.

      They tend to get the memos from Corp. Headquarters.

      --
      [Fuck Beta]
      o0t!
    4. Re:Problem not eliminated by meringuoid · · Score: 3, Insightful
      rootkit enhanced CDs

      This battle is one of propaganda as much as anything else. If you use the enemy's terminology, you've already lost.

      These are rootkit infected CDs. Use that phrase in conversation with your non-techie friends. 'Damn, I got an infected CD from Sony.' They'll not grasp all the geek details, but they'll get the picture.

      Similarly, call what it is trying to do 'Digital Restrictions Management' whenever you have to explain what 'DRM' is. It's a far truer portrayal of what's going on.

      --
      Real Daleks don't climb stairs - they level the building.
    5. Re:Problem not eliminated by Jerf · · Score: 0, Redundant

      Yes, you two can win arguments by simply dropping words out of your opponent's points.

      He said "retail checkout line", and there's a difference between that and the "retail level".

      An episode of "Unwrapped" just went by on TV about Supermarkets, where they point out the modern supermarket can have on the order of tens of thousands of items. Your average supermarket checkout clerk can not be expected to remember the names of all of these items, let alone obscure information about what might happen if you stick a CD by one of the many sub-labels some company owns if you stick it in a computer. (Yes, the average supermarket doesn't sell CDs but the point applies across a lot of types of stores nowadays.)

      GP is correct. Fighting at the retail checkout level is a waste of time.

      Yes, Border's definately should know, but you're not going to correct the institutional ignorance by harassing the checkout clerk, who barely has the authority to process returns (if that), let alone pull product from the shelves or make decisions for the rest of the store/company.

      (Read all the words.)

    6. Re:Problem not eliminated by jonfelder · · Score: 2, Informative

      The original post said management.

      While the person replying said "checkout line", the original post still makes sense.

    7. Re:Problem not eliminated by Mistlefoot · · Score: 1

      And if you would read you would see that my arguement is backing up the grandparent - "I personally have seen this at several Borders stores in my area, and each time I mention this to the management I recieve blank "deer in the headlights" looks." - pointing out that the parent is wrong.

      That the parent changed "management" to "checkout line" may be something you wish to be anal about, but the grandfather is clearly correct here.

    8. Re:Problem not eliminated by xtracto · · Score: 1

      'Digital Restrictions Management' whenever you have to explain what 'DRM' is. It's a far truer portrayal of what's going on.

      No, it Digital Rights Managements is ok, why the heck would I want an ENTERTAINMENT COMPANY to manage my rights?, you see, that is why it is flawed by default, corporations think they can "manage" our rights and they are (by now) doing it without anyone complaining.

      Anyway, for a better meaning of the acronym read my sign.

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    9. Re:Problem not eliminated by gbobeck · · Score: 2, Insightful

      In polite non-geek company I call XCP "protected" disks DEFECTIVE (or some variation of that word mixed in with some 4 letter explicatives). Makes it much easier to explain the problem without resorting to any jargon.

      --
      Navicula hydraulica plena anguilarum est. Omnes castelli tuus nostri sunt. Ed elli avea del cul fatto trombetta.
    10. Re:Problem not eliminated by fishbowl · · Score: 1

      "No, it Digital Rights Managements is ok, why the heck would I want an ENTERTAINMENT COMPANY to manage my rights?"

      They are managing *their* rights. I accept that all the way up to the point where protecting their rights abridges mine. Then they lose me completely. Sony lost me a long time ago, by putting DRM on *my own* works, to which I reserve all rights, without my permission, and without any means for me to reverse the process.

      Regardless of what other considerations there may be, abridging my own rights was completely unacceptable.

      --
      -fb Everything not expressly forbidden is now mandatory.
  20. Sony, the new ELO? by Anonymous Coward · · Score: 5, Funny

    ...I heard somewhere that if you play these new Sony CD(s) backwards, the rootkit data will say, "yur sole iss miiine. yur sole iss miine. Haaaaale Goooooogle! Whaaaaaat issss thigh bidding miii massster? RaaaaaaaaaaAaAaaAaaa!" ...and a plume of blood will shoot out of your CD tray and melt your face like that dude from Raiders of the Lost Ark.

    \\//_

    1. Re:Sony, the new ELO? by Anonymous Coward · · Score: 0

      Actually, if you play a Sony rootkited CD backwards, you will clearly listen "All your base are belong to us"

    2. Re:Sony, the new ELO? by NickFortune · · Score: 1
      I heard that if you play one forward you hear britney spears singing.

      *shudder*

      --
      Don't let THEM immanentize the Eschaton!
    3. Re:Sony, the new ELO? by sgcarter · · Score: 1

      Hmm, the age old question..."What is thigh bidding?"...Sounds deviously fun, although the bids probably end up around the cost of Candy or Bambi down on John R and 8 Mile anyway.

  21. End result by quokkapox · · Score: 4, Insightful
    These CDs will be out there forever, in users' libraries and bought and sold by used CD shops and flea markets. The end result of this fiasco is that Sony discs are something you watch out for and don't risk sticking in your computer, unless you're running the latest antivirus/antispyware software.

    Sony == Dangerous to my PC

    What a great way to promote a brand.

    --
    it's a blue bright blue Saturday hey hey
    1. Re:End result by j2fraser · · Score: 1

      My understanding is that there are no anti-virus or anti-spyware programs which treat the Sony CD-installed "anti-piracy" software as viruses or spyware. My McAfee software certainly didn't notice it at all. Somebody please correct me if I'm wrong.

    2. Re:End result by quokkapox · · Score: 1

      I think it's only a matter of time until they recognize and remove it, but as for future DRM malware, who knows?

      --
      it's a blue bright blue Saturday hey hey
    3. Re:End result by Nom+du+Keyboard · · Score: 1
      The end result of this fiasco is that Sony discs are something you watch out for and don't risk sticking in your computer, unless you're running the latest antivirus/antispyware software.

      Maybe future OS's will automatically block this. Even firmware in the CD/DVD/HD/??? player can be inoculated against it.

      Vista anyone?

      --
      "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    4. Re:End result by Neillparatzo · · Score: 2, Insightful

      The end result of this fiasco should just be that people disable Autoplay.

    5. Re:End result by Anonymous+Brave+Guy · · Score: 1

      OK, you're wrong. Have a nice day. :-)

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    6. Re:End result by cheaphomemadeacid · · Score: 0

      don't worry, when windows vista comes all problems will go away, we'll all be using opensource software in a decade anyway (perhaps BECAUSE opensource software doesn't have these problems, not in the long run atleast)

    7. Re:End result by Anonymous Coward · · Score: 0

      "The end result of this fiasco is that Sony discs are something you watch out for and don't risk sticking in your computer, unless you're running the latest antivirus/antispyware software."

      Or unless you're running an Operating System saner than Windows...

    8. Re:End result by znx · · Score: 1

      I wish it was that easy, I have disabled it on many a users system only to have them complain about the CDs not "starting" (actually had one complain that the CD drive was defective). Disabling AutoPlay whilst protecting the system doesn't provide the usuability some users expect and leaves us stuck without any obvious answer.

      --
      BOO
  22. Friction burns ... by the+bluebrain · · Score: 1

    ... is what the individual would have gotten from being hauled into the slammer so fast - had it been an individual who performed what Sony did.

    /sure it's been said, bears saying again

    --
    yes, we have no bananas
  23. Re:cybercriminals by Anonymous Coward · · Score: 2, Interesting

    I agree. And consider this: If Sony is NOT prosecuted, then we have "lowered the bar" to the point where nobody can be convicted of hacking anything. They might still prosecute hackers for theft, fraud, phising, etc. but the malicious virus writers will be off the hook. And if the civil class action suits are settled for chump change, then the bad guys could ride on that bandwagon as well. "Your honor, the precendent has been set. Sony deliberately infected millions of PCs. Our research indicates the class action settlement had a net cash value of about $1.00 per class member. Why should my client have to pay any more than Sony did?"

  24. Sadly, no. by sethadam1 · · Score: 4, Insightful

    Sadly, not only will Sony face no long term damage, but this will be a blockbuster year for them as they release PS3 and millions of quick-to-forget Slashdotters rush out to buy a PS3.

    If consumers were smart, they'd go buy a Nintendo Revolution - or even an Xbox - and intentionally skip the next Playstation. Unfortunately, they won't, because their souls are fueled by acquisition and shiny-new-toy syndrome.

    1. Re:Sadly, no. by Anonymous Coward · · Score: 0

      Nintendo is a convicted monopolist due to its actions with the original NES in North America.

      Microsoft is a convicted monopolist due to its actions with Windows.

      As a result you must only buy a GP2X and load open-source emulators onto it.

    2. Re:Sadly, no. by sethadam1 · · Score: 1

      Nintendo is a convicted monopolist due to its actions with the original NES in North America.

      Microsoft is a convicted monopolist due to its actions with Windows.


      Fair. Both have hurt the market. Sony has hurt ME (the figurative me - as I write from an iBook).

      As an American consumer, of couse, my first priority is ME.

    3. Re:Sadly, no. by quokkapox · · Score: 1
      Sadly, not only will Sony face no long term damage, but this will be a blockbuster year for them as they release PS3 and millions of quick-to-forget Slashdotters rush out to buy a PS3.

      Not this slashdotter, nor his family nor friends. You neglect the power of the word of mouth. There are a lot of pissed-off consumers out there.

      --
      it's a blue bright blue Saturday hey hey
    4. Re:Sadly, no. by Anonymous Coward · · Score: 0

      After seeing what Sony's update to their PSP did to my friend's unit, this DRM, and especially after hearing about how blu-ray players could get disabled, there isn't a chance in hell Sony would get my business ever again. I am planning on purchasing a Nintendo Revolution and considering an XBox. There would have to be a game only for the PS3 that would just make me wet myself constantly for me to consider getting one. Even then, I'd offer some store it's cost on the unit and ask them to report it as stolen, so Sony wouldn't get my money. However, with me preferring 2d games to 3d and being an old school gamer, it's highly unlikely.

    5. Re:Sadly, no. by springbox · · Score: 1

      I won't buy from Sony. That's for sure. I've happened to mention the problem with Sony once when it came up in a conversation, and it's pretty clear that some people just don't know what's going on with them.

  25. No. by Bob9113 · · Score: 1, Insightful

    Will Sony face future repercussions for this potentially long-term damage?

    No. Who do you think pays our politicians' wages? Are they going to bite the hand that feeds?

  26. Worst marketing move ever... by vprasad · · Score: 2, Interesting

    Well, second only to Intel's dropping their Pentium brand from their Pentium chips. To quote Weird Al, "It's all about the pentiums, baby"

  27. One point, one question by AviLazar · · Score: 1, Insightful

    First thing to note - just because a computer belongs to the military or any other branch of the gov't does not mean it is 1) a secured computer 2) a computer with access to sensitive materials. This computer could be the janitors computer.

    What the hell...300,000 people are placing music CDs at work? No wonder our government gets nowhere - they are all busy listening to music and playing games. Get a regular CD player people - they aren't that expensive.

    --

    I mod down so you can mod up. Your welcome.
    1. Re:One point, one question by Anonymous Coward · · Score: 0

      Get a regular CD player people - they aren't that expensive.

      For example, you could buy a Sony portable Walkman CD player for cheap! Maybe that was the point all along!

  28. A sticky question by linuxwrangler · · Score: 1

    I don't know the current government policy on use of computers for non-work use but it used to be very strict. Same thing at many large corporations.

    So does the presence of such a policy weaken any case against Sony?

    Government: You infected our computers.

    Sony: Surely this is not true as your policy clearly forbids personal use of computers. Are you operating in violation of your own policy?

    --

    ~~~~~~~
    "You are not remembered for doing what is expected of you." - Atul Chitnis
    1. Re:A sticky question by Anonymous Coward · · Score: 0

      I work for a US Government Agency (that shall be unnamed in this posting), and it has a written policy that allows employees to use their assigned PC for personal use as long as:

      they do not load unapproved software
      they do it on their own time
      they do not use resources such as paper or ink
      they do not hinder normal government operations
      they do NOT view porn, nor use the PC for a personal business (these last two will getcha fired!)

      We do not have any PCs that have access to classified systems. We do not have any of those systems, anyway.

      Our Group Policies enforced in Active Directory lock down our users' PCs so they do not have admin rights. This saves us IT types a LOT of work!

      It is common for our employees to load CDs on their PC at work for listening as they work; many of our people work at their PCs for much of the day - it relieves a lot of tedium to have that music available. I haven't heard of any issues from this to speak of in our helpdesk reports.

  29. Here's a thinker by GmAz · · Score: 1, Troll

    You would think that Military or Government agencies wouldn't allow their employees to put CDs into their computers for security reasons alone. Its rather sad that anyone can bring in a random CD and pop it in. No wonder secure data is able to walk off of those "secure" computers so easily. [Guard] - Please empty your purse please miss. [Woman] - Nothing in there except for my personals and some music CDs. [Guard] - Ok miss, you may pass. [Woman] - {murmering under her breath} Sucker...now wheres those classified documents.

    --
    Click Click Bloody Click PANCAKES!
    1. Re:Here's a thinker by babyrat · · Score: 1

      yup - and that kindergarten teacher (gov't employee you know) then sneaks Green Eggs in Ham into a back room with a scanner, scans it all and sneaks out all that top secret information out on an allegedly 'music' CD. Now everyone knows that Sam would not eat green eggs and ham in a box or with a fox or on a train or on a plain...

    2. Re:Here's a thinker by GmAz · · Score: 1
      I happen to work for a school district and do not think teachers should be able to bring Music CDs or anything of the like to school to use on district property. In fact, teachers are only allowed to use the computers as their union has negotiated. In our district, workstations are to be provided to teachers to take attendence, product curriculum materials and record grades. Playing music while students are reading silently isn't allowed. Playing solitare isn't either. I also think that if a teacher/government official/military employee was to put a virus/malware/sony rootkit or anything like that, that they should be held personally responsible and pay for the time it took to remove such harmful software. So yes, I stand by my first comment and would bet that if you were to check into the computer policies that employees just sign because it was put in front of them with a pen a lot more people would know there is a lot of stuff they are doing that is against the policy they signed.

      On a side note, my district also has a part in the policy that if any person wins anything (online raffel, sweepstakes, even down to the soda cap codes) on district property, and the district finds out about it, the winnings belongs to the district, not the individual. This auctually happened too. A secretary won a new car online while using a district computer. She started bragging about it and telling everyone. Word got to the super intendent and guess what, the car was taken, sold and the money was put into the budget.

      --
      Click Click Bloody Click PANCAKES!
  30. Nah they will get off scott free by falcon5768 · · Score: 2, Insightful
    They are a company, and a VERY large one to boot. They honestly can do no wrong unless it involves actually stealing money and getting caught doing it, and even then they would get away with it after they make a big scene to asure the public.

    See Sony does things like this and its called a mistake. A hacker does something much less, and its call terrorism. Go USA!

    --

    "Slashdot, where telling the truth is overrated but lying is insightful."

    1. Re:Nah they will get off scott free by ScrewMaster · · Score: 1

      On the other hand ... this could make a good defense for the next guy that does it. Sony has managed to set a nice precedent that infecting thousands upon thousands of computers with a rootkit (of all things) is perfectly okay. "I didn't know it was illegal your Honor. I got the idea after I bought a Sony music CD with one already on it!"

      --
      The higher the technology, the sharper that two-edged sword.
  31. You obviously didn't read the settlement by TubeSteak · · Score: 3, Informative
    As part of the settlement, Sony is agreeing not to enforce two key portions of the EULA
    1. A $5 limit on damages
    2. The requirement that you must sue Sony in New York
    Once the settlement is official, Sony will have opened themselves up, such that they can be sued in court anywhere in the United States.

    Small claims court is the most likely venue, because you don't really need a lawyer to represent yourself and if Sony doesn't send a representative, you get a default judgement.

    Collecting might be a bitch, but in this case, it definitely won't be the lawyers making all the money.
    --
    [Fuck Beta]
    o0t!
  32. I for one, welcome our new corporate overlords. by Dr.+Evil · · Score: 3, Funny

    The answer is clear. The U.S. must invade Japan to overthrow the government responsible for this cyber terrorism.

    1. Re:I for one, welcome our new corporate overlords. by Guppy06 · · Score: 1

      "The answer is clear. The U.S. must invade Japan to overthrow the government responsible for this cyber terrorism."

      Dude, this is Japan we're talking about. Forget the UK, Australia or Canada, Japan is easily the 51st state (and the largest aircraft carrier in the US Navy). How could having the US military move the 2 or 3 blocks from their bases to the Japanese Diet possibly make them kiss our ass more than they already do? Heck, looking at how things go with the DoD, making Japan a state would actually reduce the presence of the US military in Japan, since they'd be subject to domestic base closures.

      All you'd have is a bunch of pimply-faced youths on both sides of the Pacific rejoicing as they are then able to import pop culture from each other without having to pay international shipping.

  33. Governement PCs by ArchAbaddon · · Score: 3, Interesting
    "350,000 networks--many belonging to the military and government..."

    I used to do assistant net admn in the armed forces, and it's amazing how little security there is on most military computer networks. They don't allow DHCP, but as the admin I found that there were no lockdowns on installing software like AIM and such. Only problem was, network security was dictated by higher commands, so I could do nothing but watchdog the system.

    So it's really no suprise to me to so this rootkit affecting so many military and government compys, given their lack of conecern about system security.

    1. Re:Governement PCs by SydBarrett · · Score: 2, Funny

      A few years ago a friend of mine gave me some old hard drives he got from the Army which was going to be tossed out. I tossed one of them in an old 486 I had lying around and after windows 95 bitched about missing hardware etc., up came a notice that THIS IS ARMY DATA BLAH BLAH BLAH. It didn't have any super secret documents but it did have MS Word, some shareware card games, and about 3 different viruses. Any AV software installed? Nah.

    2. Re:Governement PCs by Anonymous Coward · · Score: 0

      I can't speak for the other branches, but by and large this is no longer the case for my service.

  34. What I don't and never have understood is.. by Crilen007 · · Score: 1, Insightful

    Who are they affecting?

    People who download music won't be affected, because they are downloading (IE Not buying the infected CD's)

    So, just who are they trying to spy on? The customers who are giving them money and doing what they want?

    It's so... 180 degrees out...

  35. Record Yet by Nom+du+Keyboard · · Score: 1, Troll

    Have we broken the record yet for Slashdot articles about a single company over a single issue across a limited period of time?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    1. Re:Record Yet by Anonymous Coward · · Score: 0

      Microsoft fanboys (and employees) are hard at work to help out the Xbox and Bill Gates.

    2. Re:Record Yet by Demerol · · Score: 1

      I'd wager that the SCO debacle had more slashdots to its credit, but it would be interesting to see a chart of the top issues posted about on here in the last 5 years or so.

  36. New security rule -- can't play music CDs by Anonymous Coward · · Score: 0

    I have seen a new security rule: You can't play ANY music CD on ANY work computer. If you want to play music at work, you have to use an external CD player. This is a VERY good rule as exemplified by Sony! I wonder if this is the rule at those DoD networks????

    1. Re:New security rule -- can't play music CDs by wolfman1 · · Score: 2, Interesting

      As an administrator of a 80 node (both PC and Mac) campus, I just instituted this security rule with all of my users mainly because of the Sony rootkit exploit. Albeit, the Corporate policy is that Company computer resources should only be used for business purposes, and playing music CDs on your computer isn't a business purpose.

      The less problems I can proactively prevent BEFORE I have a problem is less work that I have to do to fix the problem AFTER something sneaks up.

  37. Pwned by Nom+du+Keyboard · · Score: 3, Funny
    Sony only agreed not to ship more CD's with the existing rootkits. Nothing against improved versions. In fact...

    Your new Sony-BMG non-standards compliant music disc contains the Pwned.exe wonderful pretty music player. Click here to hear the music you've already paid for. Remember, you cannot return opened CD's for any refund. Have a nice day!

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  38. exactly correct by Anonymous Coward · · Score: 5, Interesting

    The sony rootkit fiasco is an example of criminal conduct, not a civil tort matter. Why some high level Sony USA execs aren't in the slammer now is beyond me. Like you said, if some teenage scripter had done this, they would be facing 30 years or something, but because it's a large important company they are facing a few fines.

    1. Re:exactly correct by BVis · · Score: 3, Insightful
      Why some high level Sony USA execs aren't in the slammer now is beyond me.
      Rich people don't go to jail; also, the law hasn't caught up to this kind of crime, especially on this scale. (Martha Stewart went to prison because she was charged and convicted under well-understood and established laws.) Ask the average attorney what the crime is here and you'll get blank stares, not because it isn't blatantly illegal, but because the average person doesn't know or care about this kind of thing.
      Like you said, if some teenage scripter had done this, they would be facing 30 years or something,
      Unless Daddy is loaded. Then he'd get 20 hours community service and six month's probation. OTOH, if the teen in question was middle- or lower- class, its PMITA prison time.
      --
      Never underestimate the power of stupid people in large groups.
    2. Re:exactly correct by lumbercartel.ca · · Score: 1

      What fines? I want to know more! (I missed that one because I've been busy spanking spammers lately...)

    3. Re:exactly correct by Fishstick · · Score: 1

      >Unless Daddy is loaded.

      Or brown skin -- that seems to be a significant factor.

      Was that one of George Carlin's rants?

      --

      There is much cruelty in the universe, John.
      Yeah, we seem to have the tour map.

  39. The goverment is running Windows?!? by Anonymous Coward · · Score: 0

    I don't mind if the IRS' computers get borked, but I'd like to hope NORAD is running a more secure operating system...say, some sort of Unix.

  40. Sony won't be harmed, IT Admins will by geobeck · · Score: 2, Interesting

    This damned rootkit certainly continues to be a problem, because 95% of the population has no clue that this fiasco ever occurred, or even cares what label produces their music CDs.

    I had someone call me last week, complaining that Nero wouldn't copy her music CD. "It says I have the wrong CD," she said. I went to her office, looked at the CD box, and saw Sony/BMG. Considering the fact that I e-mailed all of my users two months ago about this problem, this called for an immediate and severe penalty: replacement of her computer with The Spare while I cleaned it up.

    I have since advised all of my users that if they have any Sony music CDs purchased within the last year, they should take them back where they bought them and demand a refund because of the illegal malware they contain. I don't really expect any action on that request though; rather I expect another few calls like the one last week.

    The worst part is that this is my day job, so I can't even bill extra time for it.

    --
    Find environmentally and socially responsible products on http://buy-right.net
  41. Many viruses don't achieve this level of penetrati by SkunkPussy · · Score: 2, Insightful

    From the article: "I don't see the federal government suing a big company like Sony," she said. "The fact that military networks have likely been affected by this won't change that."

    I think this is a larger problem - that Sony can do what is clearly an unauthorised incursion into the core of someone's computer without being sued.
    2.1 million cds have been sold. So something of the order of magnitude of 2.1 million computers have been infected by this rogue code. Many viruses don't achieve this level of penetration!!!! I doubt the combined force of slashdot readers has achieved this level of penetration either! hehe

    If an individual had perpetrated this, whether or not he had the best intentions he would be arrested immediately. But Sony because it has such a strong brand, has only been sued in a few US states by a few Attourney Generals. Despite this being without any doubt prosecutable at the highest level.

    I hate to whinge on about this but why on earth are coporations less obliged to follow the law of the land than individuals!! Its a joke.

    --
    SURELY NOT!!!!!
  42. borders investor relations by Anonymous Coward · · Score: 0

    here is contact link to page for borders investor relations, email and some phone numbers at the link

    http://phx.corporate-ir.net/phoenix.zhtml?c=65380& p=irol-index

  43. Government workers are busy listening to music!? by psgalbraith · · Score: 2, Funny
    What the hell...300,000 people are placing music CDs at work? No wonder our government gets nowhere - they are all busy listening to music and playing games.

    As opposed to reading /. ?

  44. Re:Government workers are busy listening to music! by AviLazar · · Score: 1

    As opposed to reading /. ?

    At least then they are learning something...maybe not much, but something! I wouldn't mind some of our gov't employees reading our comments - maybe it will give them a clue about policy & legislation.

    --

    I mod down so you can mod up. Your welcome.
  45. Never made sense by SiliconEntity · · Score: 3, Interesting
    Those figures reported for the rootkit infections never made sense. Half a million computers? As respected security expert Bruce Schneier noted:

    "Even more interesting is that there may be at least half a million infected computers... I say 'may be at least' because the data doesn't smell right to me. Look at the list of infected titles, and estimate what percentage of CD buyers will play them on their computers; does that seem like half a million sales to you? It doesn't to me, although I readily admit that I don't know the music business."

    As Schneir notes, these are not big selling CDs. Here is the list from the EFF link above:
    Trey Anastasio, Shine (Columbia)
    Celine Dion, On ne Change Pas (Epic)
    Neil Diamond, 12 Songs (Columbia)
    Our Lady Peace, Healthy in Paranoid Times (Columbia)
    Chris Botti, To Love Again (Columbia)
    Van Zant, Get Right with the Man (Columbia)
    Switchfoot, Nothing is Sound (Columbia)
    The Coral, The Invisible Invasion (Columbia)
    Acceptance, Phantoms (Columbia)
    Susie Suh, Susie Suh (Epic)
    Amerie, Touch (Columbia)
    Life of Agony, Broken Valley (Epic)
    Horace Silver Quintet, Silver's Blue (Epic Legacy)
    Gerry Mulligan, Jeru (Columbia Legacy)
    Dexter Gordon, Manhattan Symphonie (Columbia Legacy)
    The Bad Plus, Suspicious Activity (Columbia)
    The Dead 60s, The Dead 60s (Epic)
    Dion, The Essential Dion (Columbia Legacy)
    Natasha Bedingfield, Unwritten (Epic)
    Ricky Martin, Life (Columbia) (labeled as XCP, but, oddly, our disc had no protection)
    While Dan Kaminsky's methodology seems basically sound, if the results don't add up it suggests that there is something else going on. Maybe somehow each computer queried more than one DNS server, or some similar effect occured to artifically inflate the number of computers he is counting.
    1. Re:Never made sense by Slightly+Askew · · Score: 1

      Never, ever, underestimate the power of Celine Dion and Neil Diamond fans.

      --
      Public use of any portable music system is a virtually guaranteed indicator of sociopathic tendencies. -- Zoso
    2. Re:Never made sense by bint · · Score: 2, Funny
      Our Lady Peace, Healthy in Paranoid Times (Columbia)

      Well, apparently not paranoid enough :P

    3. Re:Never made sense by fishbowl · · Score: 1



      "these are not big selling CDs. Here is the list from the EFF link above:"

      Some of those titles are relatively popular. Any sales data for, say, Neil Diamond, Celine Dion, or Ricky Martin? Probably not big sellers among the slashdot crowd, but like it or not, very very popular.

      --
      -fb Everything not expressly forbidden is now mandatory.
    4. Re:Never made sense by rwhamann · · Score: 1

      These listeners would be especially likely to be ummmm, less technically proficient individuals.

      --
      seg fault
    5. Re:Never made sense by Anonymous Coward · · Score: 0

      Chris Botti? He's pretty good and well know in Jazz.

      Don't rag on "The man." j/k

      I'm just glad Dave Koz didn't make the list.

    6. Re:Never made sense by Effugas · · Score: 2, Informative

      What can I say? I got the data, saw what it said, rubbed my eyes and said...

      No, that's just...not...possible.

      And yet, the data just keeps coming back loud and clear.

      It doesn't do this for all names. Certainly, Sunncomm Mediamaxx is reported on far fewer networks -- 50K, maybe? And as mentioned, I threw out hundreds of thousands of servers for returning values they shouldn't already have cached.

      You know, if I was wrong -- and I'd love to be, it's a rare day in security where things are *better* than you thought -- you'd think Sony would have corrected me by now. But look at their very own figures:

      2.1M CD's sold.
      38% Penetration of the PC code.

      That's ~700K systems, which is vaguely in line. No, the count is not what's interesting...it's the international nature of the data. That just has no explanation to speak of.

  46. Question by Moonwick · · Score: 1

    How does this person know that his data wasn't corrupted by other efforts that might have also been doing this same scan simultaneously to his?

    --
    Only on slashdot can a posting be rated "Score -1, Insightful".
  47. "Recalled" "CDs" still on store shelves by Spectre · · Score: 1

    I find it ludicrous that these supposedly recalled CDs are still on store shelves available for purchase. I bought my daughter a CD of teeny-bopper music the other day and she put it in her computer ... ACK!

    On the plus side, on the front of the application it silently installed was a notice of how to download the uninstaller ... but I thought these CDs were supposed to be recalled and no longer sold?

    --
    "Flame away, I wear asbestos underwear"
  48. mod this +5 stupid by Anonymous Coward · · Score: 0

    How about:
    General (O-10) Punishment: being beaten all over.
    Major (O-4) Punishment: being beaten severely.
    Major General (O-8) Punishment: being beaten all over, severely.

    And eating Taco Bell inflicts (O-6): El Punishmento Colon

    I'll stop now.

  49. Lawyers are good by phorm · · Score: 1

    So long as Sony is the one paying for them. I'll happily represent myself, in a local court (in my case, Canada), and if Sony wants to pay the costs of sending lawyers back and forth from here and a couple-thousand other users who care to sue them... well all the better. Heck, I'll even settle for $25 after we've run it through court a bit.

    At this point, I don't care so much that lawyers are making money, so long as they're costing Sony lots of money for this idiocy.

  50. Boycott *ALL* Sony products ... by Micah · · Score: 2

    ... for at least a year. That's what I'm doing, even though I didn't buy any affected CDs. Yes, they did make token attempts to make things better for some victims, but they NEED to suffer a while for such a stupid decision. Any company that thinks it's OK to install malware on their paying customers' computers does not deserve my business, and it does not deserve yours.

    Yes, I know that SONY is a huge company with lots of independent decisions. But it's all one corporation, and it needs to feel pain for this stupidity. Its size just gives us more opportunities to boycott it. No Sony tapes, no Sony TVs, no Sony cameras, no SONY nothing until this year is over.

    The boycott needs to be for a limited time; that's why I said a year. If we never start buying from them again, then they lost us no matter what. If the boycott is for a finite time, then they know they can sell to us again ---- as long as they don't repeat this silliness. If they do, they should expect more pain.

    1. Re:Boycott *ALL* Sony products ... by Jurph · · Score: 2

      Boycotts are basically ineffective unless tied to a publicity effort. A good way to get this to work is to volunteer to write consumer electronics articles for a local paper. Anytime a SONY product comes out, volunteer to review it, and call SONY and ask them if they think "accusations that they have violated customers' privacy" and "threats of boycotts" will impact their sales of this product. Include it in a basically favorable review, but close with a line like "Can this product's performance sway the opinion of the thousands of boycotters? Only time will tell!"

      To quote Lyndon Johnson, when faced with an opponent who has the resources to out-shout you in the media, your best bet is to "call him a pig fucker, and make him deny it."

  51. Not affected.... by Frank+Dreben · · Score: 2

    I got the new Leo Kottke / Mike Gordon CD (it's really good, btw) and it has this alleged "copy protection" on it. I never knew about it was on this CD until I read about later. I have autoplay turned off, and I use CDEX to make mp3s (for my iRiver H120). Everything worked just peachy. Rootkit, schmootkit, I can't believe I'm that unusual, especially in the /. crowd. This only affected people who aren't afraid to agree to license agreements.

    Now I understand how Joe computer user could get infected, and hey, it's Sony, I can trust them right?

    Even though I was able to avoid the copy protection without even knowing about it, I'm still gonna trade it in for a non DRM version, if they are offered.

    1. Re:Not affected.... by jonfelder · · Score: 1

      This only affected people who aren't afraid to agree to license agreements.

      If you're referring to the EULA presented when putting in the CD, even if you clicked "No" it still installed the software anyway.

    2. Re:Not affected.... by fishbowl · · Score: 1

      It strikes me as very odd that Mike Gordon would allow this. (He's an artist in the category that has enough clout and enough money to tell the producers how things will be.)

      --
      -fb Everything not expressly forbidden is now mandatory.
  52. Re:cybercriminals by PastAustin · · Score: 1

    No one using all caps will be taken seriously.

    --
    Firefox 2.0 - Spell Rightly.
  53. The right thing: by jafac · · Score: 2, Insightful

    I think that what is needed, is an Explorer plugin, to be made freely and widely available, which circumvents this "cloaking" technology (using Mark Russinovich's term).

    If all of this "cloaking" crap were to be made irrelevant, then these kinds of things would no longer be a security issue - it would return administrative control over machines to the machine's owner. Whether that's Symantec's cloaking for their recycle bin, or whether it's Sony's rootkit, or anything else.

    Computer owners don't need a corporate nanny protecting them from shooting themselves in the foot. Good software design does that. Not sneak tactics.

    --

    These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    1. Re:The right thing: by jonfelder · · Score: 1

      A rootkit by definition could easily disable/uninstall this plugin.

    2. Re:The right thing: by jafac · · Score: 1

      I don't want to conflate "rootkit" with "cloaking" (by Mark Russinovich's terms) - even though that's somewhat playing into the hands of the corporate vendors who are starting to play this game now.

      (also - I realize that such a plug-in would necessarily have to be linked with a filter-driver of some kind as well, one that loads before the other "cloaking" software).

      This could be a place to draw a line in the sand:
      Cloakers use +H (hidden bit).
      Administrators respond by using -H, or setting Explorer to show hidden files.
      Cloakers respond by using a filter driver to hide file system objects. (skanky, but somewhat justifiable, as in the Symantec NPROTECT case).
      Administrators respond by using this anti-cloaking plugin.
      Cloakers respond by disabling the plugin. . .

      This is a measure that would be much more clearly framed as malicious. It sucks that we have gotten to this point of he-said/she-said, but here's where we are. Companies like Symantec are saying that it's justifiable to install "cloaking" to protect a user from their own actions. Sure, that washes for a non-technical user. It still smells funny, but I can buy that argument. Sony's argument that there's a license agreement, etc. - seems more closely related to the weasel family.

      But when the cloaking advocates take the added step of actually disabling de-cloaking tools, (especially covertly) then that's something that in my mind, is a much more clearly malicious action. I suppose my view is easier to understand if I explain: I think it's a good thing to protect non-technical users from their own actions (as in the Symantec NPROTECT case; uneducated fumbling could cause data loss!) - and you could argue that Sony's spyware protects users from "accidentally" violating copyright law - protecting them from the consequences of potential lawsuits, etc. (although that argument is a peice of shit). But you can't argue that a system administrator, developer, engineer, or technician, should be operating in a protective cage. That's utter bullshit, and to me, as a systems engineer, in order to be able to guarantee that my products are secure for my customer, I better damn well have complete control over the configuration of my machine. You can weld the hood shut against mechanics - but you better damn well let a mechanic have a way to work on the engine.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
  54. Enforceable terms? by Anonymous+Brave+Guy · · Score: 1

    I never understood this. Does US law really permit a blanket restriction on where someone may sue you, and on what damages a court may award if you win?

    What does a judge do if you bring a legitimate grievance against someone to court elsewhere? Will a court really allow the condition to be enforced and invalidate a case with legal merit? Will a judge really say "Ah, well, I know they've lost the case, but I can't award damages of more than two cents because the losing party said so?

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    1. Re:Enforceable terms? by TubeSteak · · Score: 1

      Since EULA's are supposed to be a contract between you and [Sony], then as far as the law is concerned, you've agreed to those contract terms.

      You can still go to court and say "The terms of that contract are unconscionable," but if the Judge doesn't agree with you, you're probably going to pay the other guy's court costs.

      In situations where the potential loss is significant, you can get private insurance to cover any losses/damages beyond those in the contract.

      Example: You buy a big industrial machine and the contract says "we [company x] are not responsible for any damanges beyond $10,000." You can go buy insurance to cover any damages beyond $10,000 up to whatever rsik level your insurance company is willing to sustain.

      Some businesses can only be sued in certain venues, because that's where they do business. If you buy a product from a company in Maine, that only sells that product in Maine, then you probably aren't going to be able to sue them anywhere but Maine.

      Most companies put those types of clauses into contracts to make it harder for you to sue them. Would it really be worth suing Sony if you had to sue them in New York and could only get $5 for your trouble? Especially if you lived anywhere but NY.

      --
      [Fuck Beta]
      o0t!
    2. Re:Enforceable terms? by Fujisawa+Sensei · · Score: 1

      As has been restated many times, the rootkit installs even if you do NOT agree to the EULA so the limit on damages and location are not applicable.

      --
      If someone is passing you on the right, you are an asshole for driving in the wrong lane.
  55. Not entirely true by phorm · · Score: 1

    So something of the order of magnitude of 2.1 million computers have been infected by this rogue code.

    I hate to play devil's advocate, but 2.1 million CD's doesn't equate to 2.1 million CD's used in (and thus infecting) computers. Many CD's may just be used in personal CD players etc.

    Doesn't make it any more right, but no sense in pulling a Sony and skewing the stats as well :-)

    1. Re:Not entirely true by SkunkPussy · · Score: 1

      *yawns*

      Disclaimer: I said "order of magnitude".

      Rebuttal: Ok so not all cd's have seen the inside of a PC, but equally some cd's have seen the inside of more than one PC. Plus there is a good chance some of these infected CDs may have been pirated at least on a small scale. So its absolutely impossible to reliably determine the true number of infections, and whether the true number is greater than or less than the number of CDs that Sony mentioned. Hence original get out clause.

      "Allowing users to run as root is like sticking drivers with a class 5 license in the pilot seat of a 747 - phorm"
      Counter-attack: Why are you quoting one of your own comments in your sig!!! That's L.A.M.E.!!!!!

      --
      SURELY NOT!!!!!
  56. Problem? No Problem by MarkGriz · · Score: 1

    I steal all my music from the internet

    --
    Beauty is in the eye of the beerholder.
  57. Offtopic pedantic grammar explanation by cagle_.25 · · Score: 1
    Acronyms are allowed to form plurals with apostrophes, according to some. It was standard practice as late as the 80's, which is when I learned grammar (hence "80's" rather than "80s"). However, the practice is controversial and probably on its way out.

    pro
    more pro
    con.

    I'm "con" myself.

    --
    Human being (n.): A genetically human, genetically distinct, functioning organism.
  58. I'm not sure how the EULA is relevant... by blorg · · Score: 2, Insightful

    ...if you clicked 'Don't Agree' to it and the rootkit installs itself anyway.

  59. 1982 : 2006 ::MCP : DRM by Thud457 · · Score: 2, Funny

    That's Tron, he fights for the users.

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  60. Re:cybercriminals by Anonymous Coward · · Score: 0

    sony sucks!

  61. Don't do it, it isn't worth the risk.... by TiggertheMad · · Score: 1

    The answer is clear. The U.S. must invade Japan to overthrow the government responsible for this cyber terrorism.

    Nope, won't work. We tried it once before and they savaged our consumer electronics and auto industry in retaliation. We try that again, and they might go after something critical: our porn industry. Ask yourself this, is a DMR rootkit worth the risk of having used women's underwear vending machines on every street corner? Let's let this one slide....

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
  62. Jail time? by jgoemat · · Score: 1
    What about the /. article just a few days ago. All the guy did was delete an account of his supervisor and he got
    three months of imprisonment, three months of home detention and three years of supervised release, plus a $5,000 fine and $20,350 in restitution.
    The monetary point where the Computer Fraud and Abuse Act kicked in was $5,000. Since it took IBM contractors $20,350 in time to find the problem and get the guy his account back, the judge used that number as damages. If we count our time to find and remove this rootkit as damages, Sony is WAY over the limit. I say we send some execs to jail and see if they want to break the law like that again.
  63. The real geek rapper by alohatiger · · Score: 1

    People shouldn't quote Weird Al when they need Geek Music (in this case, gangsta rap), they should cite MC Plus+: "Computer Science for Life"

    --
    Bigtime Consulting - "We're the best because we cost the most"
  64. The other side of this situation... by DorkusMasterus · · Score: 1

    I'm not an attorney, so I can't say for sure, but what this tells me as an everyman, is that I now have legal precendent to get away with something like this.

    Everyone is talking about "How 16 year olds get hunted down" (and that's the truth) but now, those 16 year olds have an actual legal defense. Pay a fine, and you're done. SONY did it. Why not me? Because I'm a person, and they're a company? You'll have a hard time defeating that argument with a jury of rational people, now that SONY is getting away with it.

    They've established a large-scale distribution model of a rootkit. The next person to do the EXACT same thing, on their own, now has legal backup they didn't have before.

    I honestly don't know how I feel about that, but I think it's intriguing enough to merit discussion.

    Any attorneys out there to comment?

  65. until ALL old copies of the CDs are recalled by swschrad · · Score: 1

    the problem will continue. it seems the only government agency that piped up about the threat, DHS, should be the lead agency to recover all copies under Sony's dollar.

    wait, this fits too many doomsday scenarios.

    is this all A Plot?

    --
    if this is supposed to be a new economy, how come they still want my old fashioned money?
    1. Re:until ALL old copies of the CDs are recalled by Anonymous Coward · · Score: 0

      This will be a long term probelm, until Microsoft writes code directly into Windows that recognizes, and refuses to allow this software to be installed and run.

      Then, everyone must have this patch, which won't happen anytime soon. Microsoft would only release such a patch patch for Windows XP (with at least SP1 installed) and Vista at this point. Consider, many people and businesses are still using Windows 98.

  66. Just like Microsoft is held accountable? by fdisk3hs · · Score: 1

    Why should Sony be held accountable? As long their EULA says they are not, they are not. Just like when Melissa hit seven years ago, and Microsoft got in no trouble at all for letting businesses the world over get torpedoed. Bull!@#t.

    1. Re:Just like Microsoft is held accountable? by Chemical · · Score: 1

      Big difference here though. Even though it was Windows flawed security which allowed for the propogation of Melissa and other worms/viruses, it was not Microsoft that created/implemented and distributed Melissa.

  67. don't forget to skip the sony blank media too by Anonymous Coward · · Score: 0

    they sell you infected cds, sell you blank media, and want your a$$ sued for putting mp3s on that blank media. talk about taking it at both ends.

  68. Irony by h4ck7h3p14n37 · · Score: 1
    Does anyone else find it ironic that many of the computers were infected by pirated copies of Sony's DRM'ed discs?

    The data might also show how widespread piracy has become. The 52 music titles released with the XCP software were only released in North America, he said. However, the network apparently affected by the Sony BMG issue covered 135 countries. About 4.7 million discs were manufactured and about 2.1 million had sold, according to Sony statements.
    "The global scope is the big mystery here," he said. "It is fairly likely that a lot of the discs were pirated."
    1. Re:Irony by /dev/trash · · Score: 1

      So none of those legit copies was in someone's laptop when they had to fly to Japan for something or other?

    2. Re:Irony by TeddyR · · Score: 1

      who says it has to be pirated?

      I know serveral ppl who either
      1- buy from US amazon and ship to overseas
      2- Buy from ebay and ship to overseas
      3- Have buddies in the US that buy them things and ship them
      4- Have a mailbox forwarding service that allows them to buy things with a US address to be forwarded to overseas

      --

      --
      Time is on my side
  69. Since corporations are "persons" by cpu_fusion · · Score: 1

    Given that corporations get to enjoy many "rights" as if they are a person, perhaps they need to be punished in the same way as well. If you or I "rooted" that many computers, let alone military computers, we'd be headed to federal prison.

    If some Sony executives were sent off to prison, I don't think we'd see many instances of this sort of copy protection again. ;)

  70. It's still a problem for me! by Anonymous Coward · · Score: 0

    My PC got zapped last month when my daughter (who semi-ironically works for Sam Goody Records, who is going into bankrupcy, where she got the damned thing) dropped by when I wasn't home and played a CD in the closest thing to a stereo in my living room - the PC.

    Luckily I had just bought a new hard drive and put all the data on it, so it would be a snap to FDISK and reformat C: (the old hard drive).

    Unluckily I had sworn long ago not to give any more money to Microsoft. Just as unluckily, Linux hates my video card (or vice versa) so I was running 98.

    Even more unluckily, I couldn't find the CDs with the drivers for my video card or sound card. Still more unluckily nobody supports 98 any more, and the only available drivers were for XP. Damn it, my 1988 Chevy works fine and I can get it serviced anywhere, why is my 1998 OS fuggered up and nobody will support it? You people all suck, you know that? GOD DAMN IT you should support DOS 1.1 until they won't fix a 1983 car any more!

    Anyway, I wound up buying XP Home and an Audigy. A hundred seventy dollars and a lot of hours installing XP and all my other apps. XP hated the drivers (?) for my CD burning software and every time I boot I get an annoying message that it's disabled them, even though I uninstalled the damned software.

    God damn it, Sony owes me a hundred seventy dollars and a bunch of hours of my time.

    And their (damn their evil souls to hell) board of directors and President need to be put behind bars. If I'd done to them what they did to me and a million other poor saps, I'd be arrested!

    I'm STILL getting my PC back to some semblance of "normal."

    -mcgrew
    mcgrew.info/blog for a more detailed rant
    (knapsack? WTF kind of mind reading is that?)

  71. Just turn the logo upside down by Anonymous Coward · · Score: 0

    ANOS (they can't spell)

  72. Why isn't there any criminal investigations?? by Stoutlimb · · Score: 1

    This is starting to get weird. I havn't heard of any criminal investigation at all. But this is a completely obvious, open and shut case, with millions of dollars in damage. I think we have to start looking at which government and law enforcement agencies are complicit in this, and what their motives are for complicity.

    Bork!

  73. named, host, dig.... by martinflack · · Score: 1

    So just for the record, the command line in *nix that would check for xcpimages.sonybmg.com in named running on localhost could be this, correct?

    host -r xcpimages.sonybmg.com localhost

    If it can answer with the IP then it's cached and if it cannot then it is not cached; is that right?

    Cheers.

  74. Problem solved! by n0spamus · · Score: 1

    1. Buy CD with Sony rootkit on it for $16.99
    2. accidentally infect your PC with it
    3. ?!??!?!?
    4. Take Sony to Small Claims Court
    5. Profit!

    1. Re:Problem solved! by gbobeck · · Score: 1

      4. Take Sony to Small Claims Court
      5. Profit!


      Ummmm, nope. The EULA that comes with those defective CDs says somethong to the effect that Sony-BMG will never be liable to you for more than $5.00.
      --
      Navicula hydraulica plena anguilarum est. Omnes castelli tuus nostri sunt. Ed elli avea del cul fatto trombetta.
  75. Another reason for the goverment to use more *nix by volfro · · Score: 1

    I ripped and encoded (into Ogg Vorbis, of course) a Sony-distributed CD that had the rootkit on it (My Morning Jacket's Z) on my Ubuntu box without a hitch. It's currently living on both my HD and my MP3 player. Zero problems--just popped the CD in, told it to rip and where, and it's done. Easy. No rootkit issues, no security issues, just music I enjoy however the hell I want to enjoy it, thank you very much. Twelve bucks well-spent.

  76. "Gazillions dollars in damages" headline? by ArcticCelt · · Score: 1
    Normally when a stupid kid end up releasing in the wild some virus, the media and authorities pull out of their collective ass some estimate figure in dollars for the damages done. This figure is always in millions of dollars lost. Why don't they do the same for the Sony fiasco? Maybe I just missed it?

    Where is the "Sony caused 396 056 4564.1416 gazillions dollars in damages" headline?

    --

    Yahh, hiii haaaaa! -Major Kong, from Dr. Strangelove
  77. MOD Parent UP by shadow0_0 · · Score: 1

    Exactly the point I want to make.

  78. That's rediculous... by MacDork · · Score: 1

    Why would a Japanese company be interested in launching a stealth attack on US infrastructure... a "digital Pearl Harbor" so to speak? ;-)

  79. All Your Predator Drones Belong To ...? by Anonymous Coward · · Score: 0

    > corporal punishment

    Like, having your house blow up?

    My God, I hope the Air Force has better control over its technologies. Some of them are dangerous.

  80. Any chance of filing charges as a private citizen? by Anonymous Coward · · Score: 0

    At least Pennsylvania has laws allowing private criminal complaints. Other states may have the same. I couldn't file, since I have never installed this crap on any of my computers, and the PA State Supreme Court decreed that you have to be a victim or relative of a victim to do so. The attempt might draw the right sort of publicity, though I wonder if the DA would let it get very far: "Under PA Rules of Criminal Procedure, your complaint may require approval by the district attorney before it can be accepted by the magisterial district court. If the district attorney disapproves your complaint, you may petition the court of common pleas for review of the district attorney's decision."

  81. No song at all? by Sigg3.net · · Score: 0

    ...bad people have no song. ;)

    Bad people have no song? No song at all?
    Ahem.. The Emperor's Theme, The Imperial March etc?

    Yes, I'm rebel scum.

  82. Re:Any chance of filing charges as a private citiz by Stoutlimb · · Score: 1

    So what you're saying is, that district attourneys refuse to prosecute Sony?