Slashdot Mirror


Sony Rootkit Settlement Gets Judge's Approval

Lewis Clarke wrote to mention a ZDNet story about Monday's final approval of the rootkit settlement in the case brought against Sony BMG Music. From the article: "The agreement covers anyone who bought, received or used CDs containing what was revealed to be flawed digital rights management (DRM) software after Aug. 1, 2003. Those customers can file a claim and receive certain benefits, such as a nonprotected replacement CD, free downloads of music from that CD and additional cash payments ... At least 15 different lawsuits were filed by class action lawyers against the record label, and the New York cases were eventually consolidated into one proceeding. The parties reached a preliminary settlement with Sony BMG in December, leaving it up to a judge in a U.S. District Court in New York to make it official. "

47 of 187 comments (clear)

  1. Wow! A replacement CD! by Whiney+Mac+Fanboy · · Score: 4, Interesting

    Imagine if after reading about the original rootkit & associated vulnerabilities, you check your DNS records & see that indeed, one or more PCs you're responsible for are infected. You spend hundreds of hours following it up, removing the PCs from the network, checking to see there were no secondary malware infections, etc, etc, etc.

    At the end of all your time, you still can't claim the replacement CD + download + patch, (let alone compensation for your lost time) because you didn't buy the offending CD (it was a temp receptionist).

    I really want to see someone go after Sony for a real settlement. For that matter, I'd like to see a government go after Sony. Corporations have the same rights as individuals, how about we give them the same responsibilities as well. I think a four or five years of community service for the entire company (say 20 hours a week), would be about what's deserved for a widespread crack attempt like this.

    --
    There are shills on slashdot. Apparently, I'm one of them.
    1. Re:Wow! A replacement CD! by TheSpoom · · Score: 4, Insightful

      Yeah.

      Cause clearly a filing clerk working at a completely unrelated division of Sony should be punished for this.

      </sarcasm>

      --
      It's better to vote for what you want and not get it than to vote for what you don't want and get it.
      - E. Debs
    2. Re:Wow! A replacement CD! by Lave · · Score: 3, Insightful
      I totally agree with you - but at least this set a precedent that this kind of behaviour is unacceptable. Imagine if the root kit had not *fucked* up you computer so royally. If it had only infringed your rights then they may have got away with it, what with stupid license agreements within the case.

      At least this will put record companies off this kind of behaviour.

      --
      http://skeptobot.blogspot.com/ - A site for the Renaissance man and woman
    3. Re:Wow! A replacement CD! by gfxguy · · Score: 2, Insightful

      Why don't you blame the temp receptionist for using her company computer for personal use?

      --
      Stupid sexy Flanders.
    4. Re:Wow! A replacement CD! by Whiney+Mac+Fanboy · · Score: 2, Interesting

      Cause clearly a filing clerk working at a completely unrelated division of Sony should be punished for this.

      You know, if I worked as a filing clerk, and got to do 20 hours / week cleaning the local church or helping old people or something whilst getting paid for and not doing my normal work I wouldn't consider it punishment.

      But, what I meant was Sony as a company, doing the equivilant of 20 hours community service per week per employee for four-five years. They could pay others to do it, pay their employees to do it or whatever.

      --
      There are shills on slashdot. Apparently, I'm one of them.
    5. Re:Wow! A replacement CD! by Mateo_LeFou · · Score: 2, Interesting
      "...a government go after Sony"

      TFA: "Sony BMG still faces a separate lawsuit "over materially the same subject matter" from the Texas attorney general."

      I've been trying to get Greg Abbott (TX's AG) to go after the antivirus companies, refuse to settle, and various other things that might keep this from getting swept under the rug. This was a devious and dangerous product that was released, not a minor technical flaw in a few CDs.

      That's why I take Major issue (below) with the phrase "flawed digital rights management (DRM) software". It is as though someone sold microwave ovens that secretly (by design) emitted chloroform and put you to sleep when someone at a remote location pushed a button, so they could come rob you. And it is as though someone figure this out, and the nice rich guys came to a settlement with the other nice rich guys over "flawed microwave oven buttons"

      --
      My turnips listen for the soft cry of your love
    6. Re:Wow! A replacement CD! by hotspotbloc · · Score: 4, Funny

      Yeah, it's kinda like meeting a girl, having at best poor sex, catching VD and all she can do to say sorry is to offer you another round at bat. No thanks but how about paying my medical bill?

      --
      "I hate to advocate drugs, alcohol, violence or insanity but they've always worked for me" - HST
    7. Re:Wow! A replacement CD! by Whiney+Mac+Fanboy · · Score: 5, Insightful

      Why don't you blame the temp receptionist for using her company computer for personal use?

      Let me rephrase your question.

      Why don't you blame the temp recpetionist for playing a music CD, instead of the amoral, multinational corporation that placed a piece of malignant software, designed to cripple the way a computer works on said music CD.

      --
      There are shills on slashdot. Apparently, I'm one of them.
    8. Re:Wow! A replacement CD! by TheJediGeek · · Score: 5, Insightful
      I totally agree with you - but at least this set a precedent that this kind of behaviour is unacceptable. Imagine if the root kit had not *fucked* up you computer so royally. If it had only infringed your rights then they may have got away with it, what with stupid license agreements within the case. At least this will put record companies off this kind of behaviour.

      I agree it sets a precedent. However, it's not the kind of precedent it should have set. It sets the precedent that a large corporation can do things that are completely illegal and cause widespread damage to the public and they'll just get a slap on the wrist.

      A replacement CD, and a few DRM's music files doesn't exactly make up for the huge amounts of time it has taken and will take to fix their damage.
      I know of a few computers just in my family that had this rootkit on it. My youngest brother is in college and the school provides a laptop to every student that the school maintains through an IT dept. They had to reimage his system when things got screwed up. My dad has a couple computers at work that got this thing. He had to reload everything on one and IT had to reload the other one. That was just from one CD that had been played on those computers.

      There are countless people that have had to spend many many hours fixing what Sony did. What they did was illegal and very damaging. All they have to do is replace some CDs.

    9. Re:Wow! A replacement CD! by tomhudson · · Score: 4, Informative

      Nothing is preventing you from filing a claim against them. From the court settlement notice:
      http://www.sonybmgcdtechsettlement.com/Notice.htm

      EXCLUDE YOURSELF: Get no XCP exchange program, cash or free music download settlement benefits. This is the only option that allows you to ever be part of any other lawsuit against the Defendants about the legal claims being resolved in this case. See Question 13 below.

      OBJECT: Write to the Court about why you don't like the settlement.

      GO TO A HEARING: Ask to speak in Court about the fairness of the settlement.

      DO NOTHING: Get no XCP exchange program, cash or free music download settlement benefits. Give up certain rights. You will retain the right to sue the Defendants for any consequential damage to your computer or network that may have resulted from interactions between XCP software or MediaMax software and other software or hardware installed on your computer or network.

      NOTE: the "Do Nothing" option is also for anyone who didn't buy the CD, whose computer was damaged because someone else loaded the CD onto their machine, etc. (for example, a temp office worker decided to listen to the CD and infected a PC). Write Sony, state your claim (number of pcs affected, time lost) and that you are not part of the class settlement and would like to know what they're offering you to avoid court action.

      Heck, up here small claims handles stuff like this up to $7,000.00 If I were affected, I'd send them a demand/notice, wait 10 working days, then pay the filing fee. If enough people did this, they'd make a SERIOUS offer, one in line with the actual damages.

    10. Re:Wow! A replacement CD! by lgw · · Score: 3, Insightful

      It sets the precedent that a large corporation can do things that are completely illegal and cause widespread damage to the public and they'll just get a slap on the wrist.

      If this were the only action taken, sure. Fortunately, however, the *really* scary thing for Sony happened very early on: the DHS said they're choosing not to enforce the law on this basically because it was the first time any company had made this mistake, so they'll give the company the benefit of the doubt that it wasn't a deliberate attack. This one time.

      Sony broke federal law (section 1030) many thousands of times, and the Feds noticed. Installing a rootkit on a computer owned by the government (one not for public use) is a crime even if you never use that rootikit for anything, and Sony was using it for profit. The DHS spokeman hinted that the only reason that Sony was still allowed to sell any product in the US was that the DHS was being nice, this one time.

      This court settlement was nothing; the threat that Sony would no longer have a US division was everyhting.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    11. Re:Wow! A replacement CD! by Steve001 · · Score: 3, Insightful

      jacksonj04 wrote:

      Technically it wasn't a real Digital Music CD.

      For me, this has become the saddest thing about the whole situation. I used to have confidence that a music CD was safe to use on all devices that could play standard CDs, whether it was a stand-alone player, a portable, or a computer. Due to this, I could walk into any CD store and, on impulse, by a CD without concern.

      Since finding out about the problem with copy protection, I have stopped purchasing new music CDs. Now, when I pickup a music CD my first thought after seeing if it is an artist that I like is: "Is this disc safe?" My reaction to the question has been to put the CD back on the rack and leave it there because I'm not confident that I can answer 'Yes' to the question. I have already passed on buying at least five recent discs because of this.

      It is sad, but I may just have to settle for the music I already have since I don't want to purchase music in a compressed format. Due to this, I guess I will have to do research on any disc I wish to purchase to ensure that it is safe before I can buy it.

      On impulse purchases of CDs, to quote Eric Carmen from "All By Myself:" Those days are gone.

    12. Re:Wow! A replacement CD! by tomhudson · · Score: 3
      Go the small claims route.

      Print out all the stuff where its obvious that Sony is in the wrong, and then a summary of your time that was wasted fixing this (a reformat, reinstall, and then reinstall of all software, and restore data from backups) + filing fee, if any, for the small claims action, + postage for the demand letter.

    13. Re:Wow! A replacement CD! by Red+Alastor · · Score: 2, Informative
      Now, when I pickup a music CD my first thought after seeing if it is an artist that I like is: "Is this disc safe?"
      There's an easy way to find out. Can you find the Compact Disc logo ? If so, it's not crippled. If I'm not mistaken, it's due to Phillips, the co-owner of the Compact Disc trademark refusing that their trademark appear on non-red book compliant discs.
      --
      Slashdot anagrams to "Sad Sloth"
    14. Re:Wow! A replacement CD! by chrae · · Score: 4, Insightful
      Heck, up here small claims handles stuff like this up to $7,000.00 If I were affected, I'd send them a demand/notice, wait 10 working days, then pay the filing fee. If enough people did this, they'd make a SERIOUS offer, one in line with the actual damages.

      I like that idea but for most of us small claims and legal stuff is unknown territory. Most of us don't know what to do from start to finish because we haven't done anything like that before. I would like to see (as in, someone else do it :)) someone like Groklaw post templates and procedures for filing small claims specific to a case. e.g.: how to stick it to Sony in small claims.

      All the research of what to do is too difficult and I'm lazy and a bit intimidated. If it were made easier, I would do it and I'm willing to bet a lot of others would too.

      A thousand people each filing small claims at $500 a pop would be more potent then one lawyer representing a thousand people in a class action. Think "Slashdot Effect" in the legal sphere. It might even set a legal/business precedent: don't screw your customers so bad that they'll mobilize against you.

      I'm willing to overcome my laziness and contribute, but I need help and direction. Others need it too.

    15. Re:Wow! A replacement CD! by Epyn · · Score: 3, Informative

      This isn't much of a howto but more of a success story on how much of a pushover small claims can be:
      http://www.kuro5hin.org/story/2006/5/15/114512/034

      I thought it was fairly informative even though there was a settlement.

    16. Re:Wow! A replacement CD! by bhtooefr · · Score: 2

      It tends to be easier to actually GET the judgement if you file in the offender's home area.

      According to this page, they're in New York, NY.

      Read here. http://www.courts.state.ny.us/courts/nyc/smallclai ms/index.shtml

    17. Re:Wow! A replacement CD! by HiThere · · Score: 3, Insightful

      Do you *really* think that there's a significant chance the DHS would enforce the law next time? Really? Against a wealthy company?

      Companies have directly plotted to murder a percentage of the population in some towns and gotten away with paying less in fines than it would have cost them to avoid killing the people in the first place. Even after it was revealed that this had been the prediction of estimates given to management before it made the decision. (The case was in Georgia, and I believe [with imperfect certainty] that the company was Dow Corning]. It involved the intentional poisoning of a town's water supply by illegally disposing of chemicals. It was a federal court.)

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    18. Re:Wow! A replacement CD! by tomhudson · · Score: 2, Informative
      Most small claims courts have brochures and web sites outlining the process.

      Up here, its very simple. You send them a letter by registered mail, explaining the problem and giving them 10 business days to get back to you. If you haven't heard from them in 3 weeks (the courts like it if you cut the defendant some slack), then you go down to where you file, and fill in a form (bring a copy of your demand letter).

      The important words to put at the top of your demand letter:

      DEMAND LETTER
      WITHOUT PREJUDICE

      The whole "without prejudice" means that you're not limiting yourself to te claims you state in your demend letter - you aren't "prejudicing your rights" to take other action as well.

      Have fun.

    19. Re:Wow! A replacement CD! by greg_barton · · Score: 2

      Companies have directly plotted to murder a percentage of the population in some towns and gotten away with paying less in fines than it would have cost them to avoid killing the people in the first place.

      There's a difference between killing a few unimportant villagers and messing with the government's stuff.

      Sadly.

    20. Re:Wow! A replacement CD! by MyOtherUIDis3digits · · Score: 2, Insightful

      Corporations have the same rights as individuals

      You must not be in the US. Here, corporations have way more rights than individuals do!

      --
      Ignore anything I said above, I actually agree with everything you believe - mod accordingly.
    21. Re:Wow! A replacement CD! by Asphalt · · Score: 3, Insightful
      I agree it sets a precedent. However, it's not the kind of precedent it should have set. It sets the precedent that a large corporation can do things that are completely illegal and cause widespread damage to the public and they'll just get a slap on the wrist.

      Not if you opted out. Which EVERYBODY should do to class action suits.

      The more people that opt of of class action suits, the less likely the punishment is to be a "slap on the wrist". The last thing Sony wants is a bunch of individuals out there with money hungry lawyers free from the confines of the class action settlement. It makes the class action settlement worthless.

      We enable the slaps on the wrists because 99.9% of us don't take the time/effort to opt out of class-action scams.

      As usual, the enablers of this nonsense is us.

  2. Opt-in website by TheSpoom · · Score: 4, Informative

    Here's the claim filing website for the Sony BMG settlement, since I didn't see a link to it in the article.

    The solutions given almost don't seem worth it, but I'll probably opt-in anyway just so that little bit of money gets drained from Sony so they don't do this again.

    --
    It's better to vote for what you want and not get it than to vote for what you don't want and get it.
    - E. Debs
    1. Re:Opt-in website by eln · · Score: 4, Insightful

      What makes you think that giving you a replacement CD or allowing you to download music is going to cost them anything? Giving you a CD will only cost them the actual cost of stamping the CD, which is probably less than 10 cents. Allowing you to download a music file from them will cost them nothing.

      Sony is getting away with basically paying nothing here. Sure, they'll put it on their books as having cost so many millions in lost revenue or whatever for tax purposes, but the actual cost is pretty much zero.

    2. Re:Opt-in website by LunaticTippy · · Score: 2, Funny

      I'm staying far away from this one. I do not want Sony taking a particular interest in my activities.

      --
      Man, you really need that seminar!
  3. Flawed? by Mateo_LeFou · · Score: 4, Insightful

    I believe the software did exactly what it was supposed to do. Shouldn't there be mention of a flawed *DRM *strategy being foisted upon consumers?

    --
    My turnips listen for the soft cry of your love
  4. If... by Lord+Kano · · Score: 5, Insightful

    If a 15 year old script kiddie had done the kind of damage that Sony did with its rootkit, he'd be spending a couple of years in a "Federal PMITA prison" why does Sony get off this lightly?

    Someone should be incarcerated over this.

    LK

    --
    "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    1. Re:If... by pete6677 · · Score: 3, Funny

      Because the script kiddie was too stupid to form a corporation first. It worked for many other virus writers, like Kazaa and Gator.

    2. Re:If... by cdogbert · · Score: 2, Funny

      clout Pronunciation Key (klout)
      n.

      1. Influence; pull: "Women in dual-earner households are gaining in job status and earnings... giving them more clout at work and at home" (Sue Shellenbarger).
      2. Power; muscle.

    3. Re:If... by Rogue+Eve · · Score: 3, Insightful

      A friend down here in Austin got indicted for "hacking" UT's network and getting access to a bunch of SS#s and got 6 years probation. He was 18 but still did not receive jail time so I am not surprised that Sony got off so easily. White-collar crime just doesn't receive harsh punishment.

    4. Re:If... by Overzeetop · · Score: 4, Insightful

      Sony installs a rootkit on (potentially) hundreds of thousand computers, and not a single person is on probation. I think community service for Sony USA executives would be a very worthwhile punishment for the humans who should be watching what their company is doing, and a stiff financial fine - say 10% of gross '05 earnings (just like a $3000 fine for a regular guy who makes $30k/yr) - for the corporation, with 6 years probation. Should Sony be found in violation of the terms of the settlement (to be negotiated by the plaintiffs attorney and the judge), Sony loses it's corporate status in the US.

      Sound harsh? I'm a professional engineer. I own a corporation. If somehting bad happens due to my negligence in a design, I am still personally responisible, and can (1) lose my license to practice (2) lose my corporate authorization to do business (3) face financial penalties (4) be found guilty of various criminal offenses personally for acts done as a managing officer of the corporation. I only ask that Sony be held to the same standard.

      Oh, and while I'm at it, I'd like world peace, too.

      --
      Is it just my observation, or are there way too many stupid people in the world?
    5. Re:If... by Foobar+of+Borg · · Score: 2, Funny
      I only ask that Sony be held to the same standard.

      That will only happen when Sony can no longer purchase the US government.

      Oh, and while I'm at it, I'd like world peace, too.

      "We're the United States Government. We don't do that sort of thing!" - from Sneakers

      :-p

    6. Re:If... by thePowerOfGrayskull · · Score: 2, Insightful

      This was a settlement to a civil suit, which won't ever include criminal penalties. As far as I knowthere has not been a criminal suit filed.

    7. Re:If... by brufleth · · Score: 2, Insightful

      1. The root kit makes your computer vulnerable to attack/infection/whatever you want to call it.

      2. All someone has to do is write something that changes the position of decimal places on infected systems.

      3. Deaths

      This world is run by managers sitting on the shoulders of engineers and scientists. When it hits the fan the managers come out smiling but engineers and scientists are often not so lucky.

  5. I'm sorry, but that's not enough by Gizzmonic · · Score: 5, Insightful

    If some young "cranker" released this type of virus out in the wild, he or she would be looking at serious jail time. But as is normally the case with corporations, no one is expected to be personally responsible. Just a few dollars that amounts to jack shit for a huge corporation.

    Just like when Ford and Bridgestone decided to go ahead and release the exploding tires. Sure a few people got killed, but we can't press criminal charges! These are our captains of the industry! Reason #122,234 that this country is seriously messed up.

    --
    (-1, Raw and Uncut is the only way to read)
    1. Re:I'm sorry, but that's not enough by sgant · · Score: 2, Insightful

      Easy, the "cracker" should have formed a corporation first with the intent of being a "security consultation firm".

      "Hey, the worm we were developing to track down...um...terrorists...got away from us and got released to the net. Sorry about that. Hey, we'll bankrupt the company ok? We'll dissolve it and go on our merry way....oh, can we get some venture capital cash from you government types so we can continue our...um...research? Yeah yeah, national security and all that."

      See, bullshit your way out of it and act just like a real company like Sony.

      --

      "Leo Fender was in a 'state of grace' when he designed the Stratocaster." -- Paul Reed Smith
  6. How much $$ did the lawyers get? by rabun_bike · · Score: 2, Interesting

    Usually in a class action lawsuit those harmed get a coupon or replacement product that's pretty much worthless. The lawyers get millions of dollars in fees in the name of "protecting consumers." So, how much did the attorneys get in this case?

    1. Re:How much $$ did the lawyers get? by Kohath · · Score: 2, Informative

      The amount hasn't been decided on yet. (I read the agreement.)

      This story should probably have waited until the attorney's fees were decided, since that's what these lawsuits are about.

    2. Re:How much $$ did the lawyers get? by marklyon · · Score: 3, Informative

      All totaled, they are asking for $4M. Sony and the "class counsel", however, want to limit the EFF's portion of the fees (which was requested at around $2M) to no more than $100,000.

      You can read more about it here: http://sonysuit.com/

      --
      -- Mark Lyon http://www.marklyon.org
  7. Worthless! by Luscious868 · · Score: 4, Insightful

    As others have noted, this is a joke. Those users who were affected are entitled to a replacement CD, free downloads of the music on the CD in question (in who knows what format) or a cash settlement. So someone spends hours cleaning up the mess that Sony made and they get what amounts to $15 to $20 bucks. Most people who are affected probaby won't even bother to claim anything so Sony isn't really hurt by this. It seems to me that the lawyers who brought the class action suit are the only ones who really benefit here.

  8. You are Living in a Empire, get over it. by hackus · · Score: 4, Insightful

    Welcome to the Empire of the United States of America.

    While you serve the sufferance of the 5% of the families in this empire that own 95% of everything here, please be advised that you do not and cannot own:

    Any sort of source code, any sort of music, any sort of transportation, any energy source.

    You can however, license it from said 5% of the population here that own 95% of everything else.

    You may buy a "rights" upgrade to your license to do as you please here, if you get caught violating the law. But bear in mind, sometimes we have to not accept your cash so we can calm the masses and throw them a "justice bone". In that instance should it happen, your "rights" license is null and void.

    Above all else, while you are here please be advised that any government official can be purchased for a limited time depending on how much cash you have, and how much influence you want.

    Just do not make it obvious and please use foreign banks to make sure transactions are not traceable.

    Thank You and enjoy your stay!

    -The Empire USA

    --
    Got Geometrodynamics? Awe, too hard to figure out? Too bad.
  9. That was fast! by brouski · · Score: 2, Insightful

    As scandals go, it seems like it took no time at all to go from exposure to out of court settlement. What do people make of that?

    --
    Proud member of the American Non Sequitur Society. We might not make much sense, but boy do we love pizza!
  10. Re:Where can I find a complete list of CD's that.. by Singer4096 · · Score: 2, Informative

    There is a complete list of the cds covered by the Settlement here.

  11. OH the irony... by minuszero · · Score: 2, Funny

    I wonder if the judge realised the irony
    in allowing Sony to give out free downloads of DRM-laden music files
    to people who's computer(s) they made vunerable with their DRM software...

  12. Flawed, my ass by poena.dare · · Score: 2, Funny

    "flawed digital rights management"

    Flawed, my ass

    If I get caught burning Sony Music's HQ to the ground than that's a "flawed" bonfire.

  13. These CD's are still out there by snoig · · Score: 2, Interesting

    The worst part is that the so called recall was only for the large retailers. I work in a friends shop that sells CD's. He still has these CD's sitting on the shelf. When I told my friend about this fiasco he talked to his CD distributor about the recall and they knew nothing.

  14. Not enough time by danelav · · Score: 2, Interesting

    We accept unjust settlements and rights infringments not because we don't care, but because we don't have time to do anything about it. People work 40, 50, 60+ hours a week just to make ends meet. Add in 5 to 10 hours of commuting, and the result is very little spare time. I have very little inclination to spend my precious off-hours studying a convolted legal system, promoting a political justice in the community, and organizing a defense against perpetators of injustice. But I also recognize that no one will defend my rights for me, and if I don't defend them myself they will be taken from me. So what can I do? Decrease my living costs rather than increase my income--increasing income always requires an increased expenditure in time, and time is the real resource, the resource that is needed to pursue legal defense and community organization. I believe the largest single expenditure for most Americans is 30-year mortgage or an infinite-year monthy rent payment. If I can use alternative building techniques and piecewise home construction (reducing or eliminating interest, which doubles or triples the cost of a thirty-year mortgage), then expenditures go down, requisite work time goes down, and active time devoted to useful pursuits goes up. We'll see how it goes.