Sony rootkit copy-protection violates GPL

minstrel Illustrious Member

Messages:: 15,082

Likes Received:: 1,243

Best Answers:: 0

Trophy Points:: 480

#1

Did Sony 'rootkit' pluck from open source?
November 18, 2005
Reuters

Controversial copy-protection code used by music publisher Sony BMG on CDs appears to have tapped an open-source project, raising questions about copyright, software experts said Friday.

The "rootkit" piece of XCP software, developed by British applications maker First4Internet and used by Sony BMG to restrict copying and sharing of music CDs, is already highly controversial because it acts like virus software and hides deep inside a computer where it leaves the backdoor open for malicious hackers.

Sony BMG earlier this week said it would recall some 4.7 million CDs with the software, after the discovery of the first computer viruses last week that took advantage of the weakness.

The XCP program will installs itself on Windows-operated personal computers when consumers want to play 49 title CDs from Sony BMG. The program forces consumers to use a music player that comes with the program.

This music player contains components from an open-source project, an MP3 player called LAME, it has emerged. (Note: This is inaccurate. LAME is an mp3 encoder/codec, not a player ~ minstrel)

"Multiple software components on the CD have references to the LAME open-source MP3 code," Finnish software developer Matti Nikki said in an e-mail.

After unraveling the code, others found similar evidence.

"We can confirm that at least five functions in the XCP software are identical to functions in LAME," said Thomas Dullien at security software firm Saber Security in Bochum, Germany, which specializes in the analysis of complex software.

Open-source software, if used, needs to be identified as such, so that it can be freely shared with others. Developers on Slashdot.org and other Internet bulletin boards could not find an open-source reference in the copy-protection software.

If open-source software is tightly integrated into a single executable program, the whole application has to become open source software, even open source software such as LAME whose MP3 encoder is licensed under the more relaxed Lesser General Public License (LGPL), a lawyer said.

"That's the flipside of open source: If you don't respect the open-source rules, the old regime of copy protection comes back in full force," said attorney and Internet specialist Christiaan Alberdingk Thijm at law firm SOLV in the Netherlands.

There was LAME and other LGPL code in the program, and significant amounts were tightly integrated into the executable program, Saber Security said.

"We can confirm the existence of significant amounts of code from FAAC (which is LGPL) in the executable...These functions are part of ECDPlayerControl.ocx, thus directly integrated into the executable," Dullien said in an e-mail.

...

Microsoft's antivirus team said Tuesday it would add a detection and removal mechanism to rid a PC of the Sony DRM copy-protection software, because it jeopardized the security of Windows computers.
Click to expand...

minstrel, Nov 18, 2005 IP

mopacfan Peon

Messages:: 3,273

Likes Received:: 164

Best Answers:: 0

Trophy Points:: 0

#2

I really hope Sony crashes and burns on this one. Something has to happen to get these arrogant bastards to quit treating their customers as the 'enemy'. I certainly won't ever buy a BMG product. They are digging a pretty big hole...

mopacfan, Nov 18, 2005 IP

Hodgedup likes this.

Hodgedup Notable Member

Messages:: 3,962

Likes Received:: 287

Best Answers:: 0

Trophy Points:: 203

#3

Yeah I agree. I hope Sony gets bent over and then the stuff that happens to people when they get bent over happens to Sony.

Hodgedup, Nov 18, 2005 IP

minstrel Illustrious Member

Messages:: 15,082

Likes Received:: 1,243

Best Answers:: 0

Trophy Points:: 480

#4

You mean they throw up?

minstrel, Nov 18, 2005 IP

Hodgedup Notable Member

Messages:: 3,962

Likes Received:: 287

Best Answers:: 0

Trophy Points:: 203

#5

minstrel said:

You mean they throw up?
Click to expand...

Is that what happens immediately after someone bends someone over or what happens after someone bends someone over and then does what you do when you bend someone over and then you throw up?

Hodgedup, Nov 18, 2005 IP

minstrel Illustrious Member

Messages:: 15,082

Likes Received:: 1,243

Best Answers:: 0

Trophy Points:: 480

#6

Don't ask me - I thought you were in charge of all bending over questions.

minstrel, Nov 18, 2005 IP

Hodgedup Notable Member

Messages:: 3,962

Likes Received:: 287

Best Answers:: 0

Trophy Points:: 203

#7

minstrel said:

Don't ask me - I thought you were in charge of all bending over questions.
Click to expand...

This is the wrong thread to ask bending over questions. Please go to the other department in the back of the building.

All bending over questions are answered in the rear.

Hodgedup, Nov 18, 2005 IP

minstrel Illustrious Member

Messages:: 15,082

Likes Received:: 1,243

Best Answers:: 0

Trophy Points:: 480

#8

Apparently I have to spread some reputation around again -- what I was going to say was it's really hard to dislike a man who appreciates puns

minstrel, Nov 18, 2005 IP

Log in or Sign up

Sony rootkit copy-protection violates GPL

minstrel Illustrious Member

mopacfan Peon

Hodgedup Notable Member

minstrel Illustrious Member

Hodgedup Notable Member

minstrel Illustrious Member

Hodgedup Notable Member

minstrel Illustrious Member

Useful Searches