Uproot Sony-BMG's Invasion of Your Privacy and Your
Computer

For years now, copy-restriction software has been a looming
threat to those who purchase music and want to make fair
uses, such as space-shifting it from one device or computer
to another. Fortunately, early versions of the software were
so cumbersome and easy to work around that consumers whole-
heartedly rejected or bypassed them. Recently, however, at
least one record label has stepped up the war for control of
digital content by drawing from the playbook of spyware
companies and virus-writers.

Using a program called a rootkit, inserting a Sony BMG music
CD will now infect your computer with a nefarious program,
burying it deeply and obscurely within your operating system.
The program will monitor your computer activity in the name
of preventing the so-called "epidemic of piracy" that results
from people making extra copies of their music CDs or
favorite songs. Worse yet, there is no "uninstall" feature on
this program. It's like the roach motel -- once Sony BMG's
surveillance program checks in, you can't make it check out
without completely wiping your entire system clean. Such
practices have been widely condemned in the computer world,
even by Microsoft's own research division.

Outrage from computer users and music fans has sparked Sony
BMG into offering a program on its website that will show you
if you have been infected with the rootkit. However, while
you can see the program running, you still can't uninstall
it, and some security experts believe installing the "update"
may even infect your computer with more unwanted files.

While it is debatable whether copy-restriction software can
even prevent serious illegal copying to begin with, there
should be no question that invading our computers and
infecting our systems should be off-limits. Unfortunately,
the law is unclear on the exact rights users have to keep
programs like Sony's rootkit off your computer when you
purchase their CDs or click on a random "I Agree" button that
might appear during an installation process. Until the law
clarifies that We the Consumer actually hold the rights and
keys to our computers, spyware companies, virus-makers, and
now even entertainment conglomerates will be the ones
dictating what we can and cannot do in the privacy of our own
homes with the equipment and content we have lawfully
purchased. Left unchecked, they will continue using our own
computers against us to enforce their will and whims over our
personal freedoms and behavior.

Entertainment companies often complain that computer users
refuse to respect their intellectual property rights. Yet
tools like Sony's rootkit refuse to respect our own personal
property and privacy rights. Such hypocrisy should not stand.

Note: According to Princeton University CS Prof. Ed Felten,
if you're using a recent version of Windows, you can protect
yourself against this type of software, and some other
security risks, by disabling autorun.

More on the Sony rootkit

More on the Sony response

More on Ed Felten's suggestions

============
In the 354th Issue of EFFector:

* Action Alert: Horror Triple Bill for Digital Technology
* File-Sharing Lawsuits Fail to Deter P2P Downloaders
* Justice Department Not Appealing Cell Phone Surveillance
Cases
* Uproot Sony-BMG's Invasion of Your Privacy and Your
Computer
* Report from Hearing on National Security Letters
* miniLinks (6): What Would Justice Do? Clues on Alito
* Staff Calendar: 11.11.05 - Fred von Lohmann speaks at
National Lawyers Convention in Washington, DC
* Administrivia

Folks, I have been keeping an eye out on the major media news (CNN, Fox, MSNBC, CBS, etc.) for anything on this story and have seen hardly a whisper. Have any of YOU seen/heard anything?
Sony Corp. owns a substantial amount of the media. I wonder if there's a connection? hmm...

Nope. Nothing. The closest to mainstream ive seen was the BBC website - one of the few news organisations unrelated to the corrupt conglamorates, and so relatively unbiased. But the story didn't feature prominently, being mostly of niche interest and applying more to US-sold discs.

All the techie news sites carried it though. Anyone know if music-news sites have?

I missed the first half of "Call for Help" (Friday's, I think it was...) Leo had Steve Gibson on the set. I am willing to place bets the part I missed was them talking about it.

...but other than that, virtually NADA!

I saw something about it on CNN.com

I got all excited for a second NiceGuy2003. I saw you mention seeing "something about it" and "CNN" (but then, I saw it was only CNN "dot" com, and not the Tv/cable...)

The INTERNET is of course abuzz, but the 'traditional' media seems to me to be deliberately ignoring this whole thing.

I disabled the Autorun feature on my PC after reading this horror story!

Instructions on how to do this is on Microsoft's web site for those who haven't done it yet:
http://support.microsoft.com/kb/q155217/

A restart is required for it to take effect.

A more user-friendly less techie version can be found here:
http://features.engadget.com/entry/3239236478279892/

Thanks MrDude!

Welcome to our party!

(We hope your good advice is not way too late!)

I've seen it in the streaming headlines at the bottom of the screen more than once. CNN and/or Fox.

But no one actually said anything.

Well, at least there was that much.

(I'd been closely watching those scrolling headlines too these past couple of days, but never saw a thing... must have been takin' a wiz at the time.)