Slashdot Mirror


EFF Pushes Consumers to Claim Rootkit Compensation

An anonymous reader writes "'It's time for music fans who bought Sony BMG CDs loaded with harmful XCP or MediaMax copy protection to claim their settlement benefits', says the EFF's Derek Slater in an awareness campaign that is urging those inflicted with one of Sony BMG's rootkit infected CDs to collect what is due to them. The compensation is a DRM-free version of the original CD, $7.50, and album downloads from iTunes, Sony Connect, and others."

20 of 189 comments (clear)

  1. Summary correction: by tpgp · · Score: 5, Interesting

    is a DRM-free version of the original CD, $7.50, and album downloads from iTunes, Sony Connect, and others.

    Should read:

    is a DRM-free version of the original CD, $7.50, and DRM-laden album downloads from iTunes, Sony Connect, and others.

    I'd also like to know if anyone is going to try for a real settlement - like a company having to audit their network after finding one PC rooted.

    --
    My pics.
    1. Re:Summary correction: by tpgp · · Score: 4, Interesting

      To be fair, the DRM on iTunes songs isn't even in the same league as the DRM on the Sony CD in question, let alone the same ballpark - at least it only affects the affected song, and doesn't open the entire PC up to compromise.

      I completely agree with you - but itunes was not the only music service mentioned. From the EFF's site: CONNECT Music, f.y.e., iTunes, or Wal-Mart.

      Whilst you might be prepared to trust Apple's DRM (and to be fair, I don't see much wrong with its terms either), read this thread before trusting Wal-mart's. (I don't think I'd have to work hard to convince most people here that putting faith in Sony's DRM is a bad idea as well.)

      The ultimate trouble with drm - any drm, is that it restricts your right to do what you want to do with your music. It's like giving a company the keys to your CD cabinet & trusting them to unlock it when you ask them.

      --
      My pics.
    2. Re:Summary correction: by Helios1182 · · Score: 4, Insightful

      2 Hours of PC repair at $100/hr. per computer affected. It seems reasonable. The average user doesn't have the tools/knowledge to un-root their system, so lets assume they had to pay someone to do it. Time is money anyway, having to spend an afternoon to fix it is worth something.

      That would be a painful settlement. How many thousands/millions? of PCs were hit?

  2. Apologize by MyLongNickName · · Score: 5, Insightful

    They don't mention it here, but in A civil action, one of the quotes (paraphrasing) is "Corporations say they are sorry by paying money". If a corporation gets away with crap like this without a significant blood letting (law suits), they will try it again soon. It will be a more refined approach, you can be sure. But it will happen again.

    Companies who pull this shit need to be punished. Badly. Not a public tounge wagging followed by a pseudo-aplogy. They hire people to do PR and deal with that. When the company's bottom line is hurt, they will be more cautious in the future. And if it takes months or years of cases hanging over their head, the stock will suffer. And when the stock suffers, so do the folks at the top.

    Anything else is just the cost of doing business.

    --
    See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
    1. Re:Apologize by mrchaotica · · Score: 5, Informative
      Companies who pull this shit need to be punished. Badly.
      Yeah, they need to be barred from doing business for a period of time, and have their board of directors and CxOs jailed.
      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    2. Re:Apologize by MyLongNickName · · Score: 4, Interesting

      I disagree. This only puts people out of business, putting people out of work. Like rats, CEO's find another place to make their millions. It only punishes the bottom -- much like our wonderful international sanctions. Ever notice how the dictators are the only ones who don't seem to suffer?

      --
      See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
  3. Very Little Compensation by kabz · · Score: 4, Insightful

    This is very small compensation for machines that may have been damaged by this rootkit. Sony should allow people to claim actual damages if people can show that damage has been done.

    The best thing that may come out of this is that the rules on what companies can and can't do have been clarified.

    If I install software on my machine, I expect it to behave itself, providing I believe that the company itself is reputable. Sony have damaged themselves through this.

    --
    -- "It's not stalking if you're married!" My Wife.
  4. Friends by quokkapox · · Score: 4, Interesting
    I guess if I foolishly allowed a friend to stick one of their DRM rootkit-infected CD into my drive, I don't get a share of the settlement, because I can't provide the required proof-of-purchase documentation.

    That doesn't seem fair. One CD could have infected multiple machines, but only the original owner gets "compensated" by Sony.

    --
    it's a blue bright blue Saturday hey hey
    1. Re:Friends by eMartin · · Score: 5, Insightful

      If it were up to them, you wouldn't be allowed to listen to your friend's CD in the first place.

  5. Sony get off too lightly by half by Anonymous Coward · · Score: 5, Interesting

    I'm not sure about this. Here it costs at least 40/hour to have a decent engineer come over and reinstall windows, back up your data and restore the machine to working condition. Taking the settlement Sony offer might prejudice getting a proper settlement, which I estimate at between 60-80 per affected user.

    Thats's the civil liability. Here in the UK what Sony have done is a *criminal* offence under the computer misuse act.

    I hope we haven't even started to see the scale of damage this is going to cost Sony. Frankly I hope it bankrupts them.
    If some 14 year old kid wrote this rootkit he would be staring at 10 years in jail.

    1. Re:Sony get off too lightly by half by penix1 · · Score: 4, Interesting
      "Here in the UK what Sony have done is a *criminal* offence under the computer misuse act."

      It is supposed to be criminal here to under the CFAA (Computer Fraud and Abuse Act). Of course, you will never see them charged like they are supposed to be.

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
  6. who is the ass master by dubiousmike · · Score: 4, Interesting

    who decided that a free album was appropriate compensation? How about the cost to archive all important files and reinstall the afflicted OS at the very least. They could forgo the time lost without a shitted on computer

  7. No thanks to ANYTHING from Sony by erroneus · · Score: 4, Interesting

    I never bought one of these. Instead, I suffered at the office as the IT guy who had to clean up the mess that Sony left behind. I would like to sue them for the labor, time and frustration they caused... and continue to cause! Those things are still out there drifting about. Just last week I had to reverse the damage one of those CDs caused. A real pain in the ass it is. So far, that makes over 10 machines trashed because of that stupid crap.

    And the "real" punishment, as far as I'm concerned, is that I had the opportunity to explain to a lay-person what Sony has done, why they did it and why they shouldn't trust Sony with their dollars ever again. I truly think it's a powerful thing since these people found out first-hand that it wasn't "their fault" and that trusting a big company like Sony to always do the right thing is pretty wrong. The opinion these people, and those they that hear their story, hold of a much lower opinion of Sony than they once did.

    May Sony feel the wrath of the consumer!!

    1. Re:No thanks to ANYTHING from Sony by tomhudson · · Score: 4, Funny

      Explaining it to the end users was probably a waste of time, since THEY didn't have to clean up their machines - they foisted it on you. Its the same as explaining to an IE addict why they should switch to Firefox ... over and over and over and ...

      Besides, I see that there's a Celine Dion album on the list. I would argue that the world is a better place if everyone who bought that CD ends up with a non-functional computer.

  8. My reply from the EFF by cove209 · · Score: 5, Interesting

    Greetings,

    I just read on your website where the EFF has agreed to settle with Sony BMG.
    What a pathetic settlement that does nothing to assist consumers with the costs of removing the rootkit software and in addition, fails to act as any sort of a deterrent to Sony BMG.
    Way to knuckle under for the little guy.
    Unhappy in California

    Hi ,

    I'm sorry you feel that way and there may be nothing I can do to
    convince you otherwise, since I understand some people want Sony
    BMG's head on a pike and nothing less will do. I don't necessarily
    disagree, but the law limits what we can get in the context of a
    class action settlement. But I hope you'll at least give me a hearing.

    First, you understand that the settlement *preserves* the claims of
    folks who have hardware damage due to the rootkit, right? They can
    still sue to get more and we're happy to help. The scope of the
    settlement is for a different harm -- the harm of merely having
    bought these bad CDs.

    The main reason that we didn't settle those claims is that we haven't
    had enough people come forward with proof that the CDs harmed their
    computers to constitute a sufficient number for a class action. Class
    actions require "numerousity" and "uniformity" of claims. If you
    know of such people, please send them our way. They can bring small
    claims actions. If we do discover enough folks with a common pattern
    of harm, we will consider another class action.

    Second, as for whether this will serve as a deterrent to Sony in the
    future, I guess we'll see in time. Even if we had taken the case all
    the way through to a trial and been completely successful, a court
    would not be able to order Sony to cease using all DRM under current
    law. So as much as I'd like to see Sony do that, this case alone was
    never going to accomplish that goal.

    Right now they have stopped pressing *any* CDs with DRM on them,
    agreed to independent review of any future DRM (with a report to the
    lawyers involved in the case), and agreed to allow non-DRM/non-EULA
    versions of all of the music that was affected by the bad DRM. The
    cash cost of the settlement is hard to value but Sony says that the
    value of album downloads are $10 per album. If the 5 million people
    affected by MediaMax get a free album download that's a cost of $50
    million to Sony. That's before the $7.50 per album for the 3 million
    XCP users and the extra downloads that they get, or the replacement
    music for the MediaMax 3 users.

    While the settlement terms are the product of negotiation and so
    aren't perfect, I do think we got a good deal in the settlement for
    purchasers of the CDs. Believe me it was hard fought and there is
    much in there now that Sony started out by flatly rejecting. I
    certainly understand if you disagree and want to try for more on your
    own. You absolutely have the right to opt-out of the settlement and
    bring your own action. I'd be very curious to hear how that goes if
    you choose to do it.

    Most important for us was:
    1. stop production of any more CDs with the dangerous DRM on it.
    2. get people non-DRM'd/non-EULA'd versions of their music (this was
    strongly resisted by Sony)
    3. do it quickly
    4. get people some free music (or in the case of XCP, money) for
    their trouble.

    There's much more in the settlement than that, of course, but for the
    purchasers these were the core goals.
    Again, I appreciate your feedback.
    - Show quoted text -
    On wrote:
                                                              ---- .org
                                        ---- www.eff.org
    Electronic Frontier Foundation
    454 Shotwell Street
    San Francisco, CA 94110
    (415) 436-9333 x

  9. If you want more blood by codepunk · · Score: 4, Informative

    If you want more blood out of sony here you go.... Nothing at all stopping you
    from taking them to small claims court and getting what you deserve. Most small claims courts have a very small fee like $10 for filing, 5 minutes in front of a judge and bingo you have got cash!

            * damage to a computer or network resulting from interactions between the XCP Software or the MediaMax Software and your computer (e.g., damage to your hard drive);
            * damage related to your reasonable efforts to remove the XCP Software or the MediaMax Software; or
            * copyright, trademark or other claims arising from the development of the MediaMax Software or the XCP Software, or any uninstallers or updates thereto.

    You may still sue Sony BMG for any such claims, whether or not you choose to take advantage of the settlement benefits. As part of the settlement process, Sony BMG agreed to waive its overreaching New York forum selection clause and $5 limit on damages, so you can take them to your local small claims court for your damages.

    See here for more information about the small claims process.

    --


    Got Code?
  10. Re:Not as bad... up front, maybe. by jb.hl.com · · Score: 4, Insightful

    In a way it's even sneakier though, as it teaches the public that DRM is ok.

    Because people knowing about a fair(er) form of DRM and agreeing with it is SO evil.

    iTunes' DRM is very acceptable to most people, as its limits aren't very strict, and it only applies to music. Trusted Computing or whatever bollocks they call it now isn't in the same ballpark.

    --
    By summer it was all gone...now shesmovedon. --
  11. Fairness Hearing Scheduled for May 22, 2006 by marklyon · · Score: 4, Informative
    SonySuit.com has information about the fairness hearing on May 22, 2006 at 9:15 am at the Daniel Patrick Moynihan United States Courthouse for the Southern District of New York at 500 Pearl Street, Room 2270, New York, NY.

    Don't forget -- claims MUST BE submitted by December 31, 2006. If you want to be excluded from the settlement, you MUST FILE before May 1, 2006. If you do not exclude yourself, you can attend the fairness hearing, at your own expense, and be heard by yourself or through your attorney.

    I run the SonySuit.com website an plan to start collecting messages about the settlement to submit to the court as exhibits to my statement at the fairness hearing. If you have a comment about the settlement, send it to sonysuit@gmail.com.

    --
    -- Mark Lyon http://www.marklyon.org
  12. The Linked article was bad by sgent · · Score: 4, Informative
    this is a claim merely for having bought the CD's in question -- it IS NOT COMPENSATION for damages that may have result from your network or computer. See http://www.eff.org/IP/DRM/Sony-BMG/settlement_faq. php for full information on the settlement.

    exert...

    Why does EFF think the settlement is a good deal for purchasers of the Sony BMG CDs?

    EFF agreed to the settlement because we believe it provides a good compensation package for the group of people who purchased the CDs but did not experience any hardware damage as a result. This means purchasers whose claim is primarily based on their purchase of the CDs and experiencing the hassle of having to patch or uninstall their systems, or in the case of MediaMax 3, having had files installed prior to giving you a chance to agree.

    EFF's goals for purchasers of the CDs were to :

    1. Stop production of any more CDs by Sony BMG with the bad DRM on them.
    2. Get people non-DRM'd/non-EULA'd versions of their music.
    3. Get this relief to people quickly, rather than after years of legal wrangling. This is in part why some of things in the settlement, like uninstallers, were available before the settlement itself was announced.
    4. Get people some free music, or in the case of those who were at risk from the XCP rootkit, a choice of some money for their trouble.
    5. Ensure that people get notice. Sony BMG has agreed to use the banner functionality on some of its CDs to give individual notice to purchasers at the time they put the CD into their computers, as well as put notices on many artists websites and purchasing adwords giving notice more broadly. We're still working with Sony about what these will look like, but EFF believes that taking extra steps to give people notice of the need to patch their systems, and of the settlement, is important.
    6. Ensure independent security testing and pre-launch EULA review of any future DRM, with a report to the lawyers involved in the case of at least the security testing.
    7. Agree to a quick process for response by Sony BMG, involving independent security reviewers and enforced by the court, in the event of any future discovery of a security flaw in their DRM.

    There's much more in the settlement than that, of course, but for the purchasers these were EFF's core goals and the settlement meets them all. That's why we think the settlement is a good deal and we endorse it.

  13. Not true. by babbling · · Score: 4, Insightful

    I'd argue that in some ways, the iTunes DRM is worse. At least with the Sony CDs, the DRM stayed the same. Apple has changed what you can do with the music AFTER you have purchased it.

    Apple has changed the number of CDs you can burn it to, and the number of computers you can have the music on at the same time. Apple also force upgrades by requiring new software for new model iPods, so not updating iTunes isn't a viable way of escaping changes in the DRM permissions.

    If Apple ever decided to build backdoors into iTunes, people would still have no choice but to upgrade and have all the backdoors affect all of their music, if they want iTunes to work with their latest iPod... or if they chose not to buy the latest iPod because of the backdoors, they would lose the ability to play all of their music on-the-go, since the music can't be played on any competing MP3 players.