Complain about a product or service

Sony Withdraws CDs With Copy-Protection Software

By Martin H. Bosworth
ConsumerAffairs.com

November 14, 2005

Sony • Sony: Dust Voids PlayStation 3 Warranty • Sony BMG Settles FTC "Rootkit" Charges • Sony BMG Settles Root-Kit Suits for $4.25 Million •: Sony BMG Settles California Case • PlayStation 3 Takes the Field • PlayStation 3 Brings Big Bucks on eBay • Court Approves Sony BMG CD Settlement • Sony Reaches Tentative Settlement in Spyware Cases • New Charges Against Sony's Use of Stealth Software • New York Joins Sony CD Investigation • Recalled Sony CDs Still On Sale • Consumer Group Sues Sony BMG • Texas Sues Sony for Violating Spyware Law • Sony Withdraws CDs With Copy-Protection Software • Sony Slammed for Hidden CD Software • Sony Loses Playstation Suit • Digital Camera Buyers Give Kodak, Sony High Marks • Sony Agrees to Stop Payola Payments to Radio Stations • Sony Playstation 2 Defective, Class Action Charges --- Complaints • Playstation 2 • Playstation 1 • Cameras, Camcorders • Computers • Computer Monitors • Computer Rebates • Home Electronics Rebates • TVs • WebTV

Under fire from consumers and other companies, Sony BMG has agreed to temporarily stop shipping CDs containing a controversial copy-protection software "rootkit."

The rootkit can disable Windows-based computers if users attempt to remove it, and can leave machines vulnerable to infiltration from hackers.

The company released a statement saying that "[a]s a precautionary measure, Sony BMG is temporarily suspending the manufacture of CDs containing XCP technology."

The announcement came after the discovery of the first "Trojan horse" viruses that could surreptitiously install themselves on a user's machine and "hide" using the rootkit.

Although the initial viruses did not function very well, new versions continue to appear, and the risk of data loss and damage to one's computer continues to increase.

Microsoft came out swinging against the Sony rootkit for constituting a security threat to Windows-based machines. The "Anti-Malware Engineering Team" posted a notice on their blog stating that the company would update its anti-spyware products to detect and remove the rootkit if found on a user's machine.

Other anti-spyware companies are offering patches and tools to detect and remove the Sony rootkit, including British-based firm Sophos. According to a poll sponsored by the company, 98% of responding business PC users said Sony's copy-protection software was a direct threat to their security.

PandaLabs, an Internet security firm, said it has detected the appearance of Ryknos.A and Ryknos.B, two new Trojans that exploit this system to avoid being detected on the computers they infect. "Whenever a new security risk is uncovered, it doesn't take long for malware writers to start spreading their creations," said Luis Corrons, director of PandaLabs.

"The short time it has taken for this problem to be exploited suggests that it is highly probable that many more specimens that try to use this anti-piracy system through conventional music CDs will appear.

Sony is facing a class action lawsuit in California for violating the state's law against "inducing" the installation of software onto a user's computer without their consent. In addition, the California-based Electronic Frontier Foundation is investigating another potential lawsuit, and has published a list of CD's that contain the copy-protection software.

The company is taking serious fire from angry consumers for overzealousness in protecting its copyright. One online music buyer was distressed at Sony's lack of concern for computer security: "There are enough things out there that are trying to break into our computers without a mega-music-giant helping out the process…I buy [music], I pay for it, and I want to use it as I wish as long as that use conforms with the applicable copyright laws."

Or as another disgruntled buyer bluntly put it, "I will NEVER buy or use a Sony CD again."

Report Your Experience
If you've had a bad experience -- or a good one -- with a consumer product or service, we'd like to hear about it. All complaints are reviewed by class action attorneys and are considered for publication on our site. Knowledge is power! Help spread the word. File your consumer report now.