Slashdot Mirror


EFF Pushes Consumers to Claim Rootkit Compensation

An anonymous reader writes "'It's time for music fans who bought Sony BMG CDs loaded with harmful XCP or MediaMax copy protection to claim their settlement benefits', says the EFF's Derek Slater in an awareness campaign that is urging those inflicted with one of Sony BMG's rootkit infected CDs to collect what is due to them. The compensation is a DRM-free version of the original CD, $7.50, and album downloads from iTunes, Sony Connect, and others."

30 of 189 comments (clear)

  1. Apologize by MyLongNickName · · Score: 5, Insightful

    They don't mention it here, but in A civil action, one of the quotes (paraphrasing) is "Corporations say they are sorry by paying money". If a corporation gets away with crap like this without a significant blood letting (law suits), they will try it again soon. It will be a more refined approach, you can be sure. But it will happen again.

    Companies who pull this shit need to be punished. Badly. Not a public tounge wagging followed by a pseudo-aplogy. They hire people to do PR and deal with that. When the company's bottom line is hurt, they will be more cautious in the future. And if it takes months or years of cases hanging over their head, the stock will suffer. And when the stock suffers, so do the folks at the top.

    Anything else is just the cost of doing business.

    --
    See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
    1. Re:Apologize by Anonymous Coward · · Score: 2, Insightful
      What about the guy who put the worm into GCC? Should he be jailed? What about the guy who got the rootkit code into the linux kernel, should he be jailed? What about all the members of the cDc? Should they be jailed?

      Pot. Kettle.

    2. Re:Apologize by joeljkp · · Score: 2, Insightful

      This wasn't a criminal case, it was a civil settlement.

      --
      WeRelate.org - wiki-based genealogy
  2. Compensation...? by Omaze · · Score: 3, Insightful

    Typically the EFF seems to be on the right course but, in this case, the EFF is promoting the idea that a major corporation can force its will on the consumers preemptively and then, when the consumers revolt, all they have to do is say,"Oh. Sorry 'bout that. Here's a lollipop. No go away."

    There needs to be a clear signal. What we're seeing here is just a buyout.

    --
    The government itself is not stealing your liberties. Their new programs are enabling criminals who will.
    1. Re:Compensation...? by Omaze · · Score: 2, Insightful

      The point is that advice like this encourages two patterns of behavior:

      1) Like mail-in rebates a good portion of the tactic relies on the fact that many people will simply not find it worth their time/trouble to bother pursuing the claim. A good portion of people will take the first couple of steps and then find that other things in life demand more attention. Eventually the claim period expires or the person simply doesn't feel like devoting effort to it. This is unacceptable. It allows corporate criminals to get away by doing little more than using their superior economic position to make the retribution process tedious. Creating tedium is the best defense against someone seeking compensation for wrongdoing. Time passes, people move on. With this type of system the criminal is allowed to endlessly continue on with their pursuits.

      2) It sets a precedent for future infractions. Today it's system monitoring software on a CD, tomorrow it's the black box monitor in the car, the next day it's mandatory spy cams in subsidized housing, the next day it's a legal right for property owners to install spy cams in their rental properties. Every step of the way there will be consumer backlash, and every step of the way the courts are supporting a system which allows the violators to say,"Oh. Sorry about that. Just give us a minute to assess your arguments and figure out how we can pass legislation to get around them."

      The criminals are being allowed to pass laws by which their particular crimes can be argued to be legal while at the same time passing laws which legally criminalize people who are doing nothing wrong.

      --
      The government itself is not stealing your liberties. Their new programs are enabling criminals who will.
    2. Re:Compensation...? by babbling · · Score: 2, Insightful

      The EFF explain their decision in this lecture at Google.

      Basically, they sent a letter to Sony before suing them outlining the steps that they should take to correct their mistake. Sony ignored the letter, and the EFF sued them. They came to a settlement that achieved most of the suggestions outlined in the original EFF letter.

      The settlement wasn't too bad. Sure, they didn't hit Sony as hard as they could have, but everyone is getting replacement CDs and a small amount of compensation money. Anyone whose computer was severely damaged should probably sue Sony separately.

  3. Very Little Compensation by kabz · · Score: 4, Insightful

    This is very small compensation for machines that may have been damaged by this rootkit. Sony should allow people to claim actual damages if people can show that damage has been done.

    The best thing that may come out of this is that the rules on what companies can and can't do have been clarified.

    If I install software on my machine, I expect it to behave itself, providing I believe that the company itself is reputable. Sony have damaged themselves through this.

    --
    -- "It's not stalking if you're married!" My Wife.
    1. Re:Very Little Compensation by Scarletdown · · Score: 2, Insightful
      If I install software on my machine, I expect it to behave itself, providing I believe that the company itself is reputable.


      And even more importantly, if you put what you were led to believe is an audio CD in your computer's CD-ROM drive, you should expect it to behave itself by simply playing the music encoded on it and nothing more.

      --
      This space unintentionally left blank.
  4. Re:Summary correction: by Tim+C · · Score: 3, Insightful

    To be fair, the DRM on iTunes songs isn't even in the same league as the DRM on the Sony CD in question, let alone the same ballpark - at least it only affects the affected song, and doesn't open the entire PC up to compromise.

  5. Days of War, Nights of Love. by qualico · · Score: 2, Insightful

    The problem is that the typical consumer really has no interest in wasting their time with lawyers, paperwork, and beuracracy.

    Knowing this, is how politics take advantage of the mass consumer thinking.

    Days of War, Nights of Love is a collection of political essays which may touch on these ideas:
    http://en.wikipedia.org/wiki/Days_of_War%2C_Nights _of_Love

  6. Re:Summary correction: by Grant29 · · Score: 3, Insightful

    True, and at least most everyone knows the iTunes DRM before buying. It's not as bad as someone sneaking some software onto your PC without you knowing.
    --
    Find the lowest price at PriceAge. Comparison Shopping with online coupons.

  7. Re:Friends by ZachPruckowski · · Score: 2, Insightful

    How many owners keep proof-of-purchase beyond maybe the CD and the little plastic thing it came in? I mean, most of these people could have paid cash, and not kept the receipet.

  8. Not as bad... up front, maybe. by Kristoffer+Lunden · · Score: 2, Insightful

    In a way it's even sneakier though, as it teaches the public that DRM is ok. Just watch how many who otherwise claim to love freedom who readily defends it whenever the issue comes up. As soon as the mindset it firmly in place, there will be no problem rolling out worse and worse protections, until we have "Trusted Computing" telling you exactly where you want to go today.

    No thank you.

    1. Re:Not as bad... up front, maybe. by jb.hl.com · · Score: 4, Insightful

      In a way it's even sneakier though, as it teaches the public that DRM is ok.

      Because people knowing about a fair(er) form of DRM and agreeing with it is SO evil.

      iTunes' DRM is very acceptable to most people, as its limits aren't very strict, and it only applies to music. Trusted Computing or whatever bollocks they call it now isn't in the same ballpark.

      --
      By summer it was all gone...now shesmovedon. --
    2. Re:Not as bad... up front, maybe. by scuba0 · · Score: 2, Insightful

      If you give in to one DRM-type, it means you are more welcome to accept the next one. Some people might say that it isn't like that but it does not matter, the media industri and the lawmakers sees it as acceptable.

    3. Re:Not as bad... up front, maybe. by honkycat · · Score: 2, Insightful

      Your logic is amazing! The way you refute his argument without even addressing its merits is a sight to behold. Aristotle would be proud.

    4. Re:Not as bad... up front, maybe. by mrchaotica · · Score: 2, Insightful
      Because people knowing about a [less intolerably unfair] form of DRM and agreeing with it is SO evil.
      There, fixed that for ya. As we all know, DRM is unfair by definition because it is incapable of accounting for Fair Use.
      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    5. Re:Not as bad... up front, maybe. by mrchaotica · · Score: 2, Insightful

      You can't resell it.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  9. Re:Friends by eMartin · · Score: 5, Insightful

    If it were up to them, you wouldn't be allowed to listen to your friend's CD in the first place.

  10. Re:Friends by Buran · · Score: 3, Insightful

    Sue 'em yourself. If you can prove their crap is on your computer, you have proof of damage. Go after them in small claims court. If enough people did the same thing, they'd be hit with too many tiny lawsuits to fight them all.

    They didn't tell you or the original owner of the malware on the disk, so they are liable because they were aware of its existence.

  11. Re:No thanks to ANYTHING from Sony by Turn-X+Alphonse · · Score: 3, Insightful

    "Sony put a virus on one of their music CDs. When you play it, it installs the virus and trashs your PC".

    That's how I explained it to Joe sickpack, and it worked perfectly. They hated Sony as much as we do and it's the truth.

    Remember "Virus" is a scary word for the uninformed, they think it means "everything gone" or "credit card details stolen". It also does it quick enough for them not to get bored, hence perfect solution and the truth in 1.

    --
    I like muppets.
  12. Re:Summary correction: by Helios1182 · · Score: 4, Insightful

    2 Hours of PC repair at $100/hr. per computer affected. It seems reasonable. The average user doesn't have the tools/knowledge to un-root their system, so lets assume they had to pay someone to do it. Time is money anyway, having to spend an afternoon to fix it is worth something.

    That would be a painful settlement. How many thousands/millions? of PCs were hit?

  13. Re:Summary correction: by Anonymous Coward · · Score: 1, Insightful

    a) Find a blank CD (why would I have one around for when I buy my music online anyway?)

    To back up your purchase, of course, as anyone with half a brain will do. (What do you think Apple is going to say when your hard drive crashes and you come crawling to them for permission to re-download all your iTunes purchases?)

    b) Encode using a highly compressed source

    Which I guarantee you don't notice when you listen to the music. If you could hear artifacts from 128K AAC-compressed tracks, you wouldn't want to use iTunes in the first place, DRM or none.

  14. Title should be... by danwesnor · · Score: 2, Insightful

    ... EFF Finally Sells Out.

    I would think they would be encouraging victims to withdraw from the class action. Maybe the victims who did so would get nothing (as opposed to next-to-nothing), but every victim who withdrew from the class would cost the lawyers who agreed to this worthless settlement a little bit of their fee.

    Not only does the agreement not compensate the victims for real damages ($7.50 is what, 10 minutes of tech support?), but contains no punitive damages. Let's not forget that Sony didn't just use DRM, they infected their victims computers with a virus, stole personal information, opened up their computers to further attacks, and then took deliberate actions to cover up their wrongdoing. If you or I did that, we'd be facing jail time.

  15. Re:My reply from the EFF by rifftide · · Score: 2, Insightful
    At first I thought the EFF had sold us down the river, but now I think the settlement is reasonable. Sony agrees to cease and desist the practice, and they must provide a convenient mechanism for exchange of XCP disks. What it doesn't do is (1) provide reasonable compensation to people who suffered extensive system damage, or (2) blast Sony back to the Stone Age for having a corps of bozo executives running their music division. But as the EFF pointed out, those in the first category can opt out of the settlement and sue on their own dime (or perhaps join a separate class action), while the second criticism is just unproductive knee-jerk stuff.

    The EFF gets their legal fees compensated, and I'm sure their hourly rates are of generous size by the standards of most IT workers. Sony did get off fairly cheaply. But in many class action suits involving low-ticket products, the law firm(s) representing the plaintiffs walk away with 40 percent of the pot while the consumers get peanuts, and the company does no worse than Sony did. The whole thing is basically a big reward for the law firm that filed the claim first. Here, we still get peanuts, and I personally don't intend to file a claim, but it probably wasn't a financial windfall for the EFF - just a nice little project for them.

  16. Very Lame Compensation by Nom+du+Keyboard · · Score: 2, Insightful
    This is very lame compensation. Sony got off just short of scot-free so far. The CD's cost well under a buck to press. The damage to your computer, time and efforts to clean it up, cost far more than this.

    I don't see a single thing in this settlement that punishes Sony sufficiently to absolutely convince them to never even think of attempting this again.

    Worse yet, I don't see anything here to scare off any other big music or movie company from trying the same thing.

    Sony should have gone down big time over this one.

    And the lawyers should have only gotten a replacement CD and 3 free downloads as well.

    Are there still any other suits in any other state/countries pending that will hurt them more?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  17. Re:Summary correction: by Tim+C · · Score: 3, Insightful

    As you say, I have merely bought the right to listen to the music, not the music itself. That raises two points:

    1) Unless otherwise clearly informed of the fact at the time of purchase, I have bought the licence in perpetutiy, not for a limited time - I do not expect to lose access simply because the company goes belly-up and the DRM prevents me from accessing it.

    2) If I have bought the right to listen to the music, then I should be allowed to replace it if lost, stolen, destroyed or otherwise unusable to me for a nominal replacement fee. I should not be forced to buy a new CD at full retail simply because my daughter broke the old one.

  18. Re:My reply from the EFF by gizmonic · · Score: 2, Insightful

    But as the EFF pointed out, those in the first category can opt out of the settlement and sue on their own dime

    But, what the EFF said was:

    First, you understand that the settlement *preserves* the claims of folks who have hardware damage due to the rootkit, right? They can still sue to get more and we're happy to help. The scope of the settlement is for a different harm -- the harm of merely having bought these bad CDs.

    That means that the lawsuit applies only to buying the DRM'd CD. It has nothing to do installing it, nor the damage done by it. You can collect on the current class action for having bought one of the CDs, and still be able to sue or join a second class action for damages caused by the CDs. Which is pretty darn cool, IMHO. It means this lawsuit actually has a VERY reasonable settlement value. You bought a DRM'd CD, you get a free non-DRM'd CD, plus $7.50, plus some free downloads. Not bad, if you ask me. Oh, the damage it did to your machine by installing it? Well, as they say, that's a whole different lawsuit. And inclusion in this class does NOT exclude you from the other. You don't have to opt out if it to get damages for the DRM hosing your system.

    (All that assumes what the EFF said was true, of course...)

    --
    WWJD?
    JWRTFM!
  19. Not true. by babbling · · Score: 4, Insightful

    I'd argue that in some ways, the iTunes DRM is worse. At least with the Sony CDs, the DRM stayed the same. Apple has changed what you can do with the music AFTER you have purchased it.

    Apple has changed the number of CDs you can burn it to, and the number of computers you can have the music on at the same time. Apple also force upgrades by requiring new software for new model iPods, so not updating iTunes isn't a viable way of escaping changes in the DRM permissions.

    If Apple ever decided to build backdoors into iTunes, people would still have no choice but to upgrade and have all the backdoors affect all of their music, if they want iTunes to work with their latest iPod... or if they chose not to buy the latest iPod because of the backdoors, they would lose the ability to play all of their music on-the-go, since the music can't be played on any competing MP3 players.

  20. Re:Summary correction: by plumby · · Score: 2, Insightful
    If we stick to music in general, yes it is yours, those specific copies of the music are.

    Not as far as I can tell it isn't. Most CDs say somewhere on the case something along the lines of "no unauthorised copying, hiring, lending, reproduction, public performance or broadcasting of the work". If I was the actual owner of the music that I'd just purchased, why is anyone else able to put those restrictions on what I do with it?

    If I buy a bottle of Coke, I'm not told that I wouldn't be allowed to serve it at a public gathering, or let my friends have some of it, would I? In that instance I own the Coke in that bottle to do with pretty much as I see fit.