Sony Defends Its DRM
Technology"> Sony BMG executives have defended the companys actions. "Most people dont know what a rootkit is, so why should they care about it," Thomas Hesse, president of Sony BMGs global digital business, said in an interview with National Public Radio on Friday.Hesse also denied that Sony BMG is transmitting any information on its customers behavior. In his blog at Sysinternals.com, Russinovich disputed those claims. According to Russinovich, both the DRM software and an Active X program, which Sony BMG asks customers to download to receive a DRM removal program, create encrypted communication tunnels back to Sony BMG servers. Russinovich said he does not know what information is being transmitted in those communications, but claims that Sony is at least able to connect information on the CD that was purchased and the IP address of the machine playing it. In a response to Russinovich, First 4 Internet said the player simply sends information on which CD is being played in order to display additional content, such as links to the artists Web site in a rotating banner in the media player program. First 4 also dismissed as "conjecture" Russinovichs claims that the software could cause Windows to crash, prompting Russinovich to post an updated analysis with what he claims is proof that the First 4 rootkit features can cause Windows to fail ungracefully, including a "blue screen of death" that names the First 4 driver as the source of the sudden failure. Speaking on Tuesday, Russinovich said Sony and First 4 have been keen to address criticism, but have taken few steps to actually ensure that customers who might have the DRM technology installed on their computers can remove it. The main page of Sony BMGs Web site doesnt have any links or information to customers who installed the DRM technology. Beyond that, individuals, including Russinovich, who submitted personal information through a Web-based form and installed an Active X component from First 4 Internet in order to receive a program to remove the DRM technology, still havent received the program that Sony promised, he said. "The patch and uninstaller were mostly for the press, not the consumer," Russinovich said. A U.K. film group joins with the government to push "widespread" DRM use. Click here to read more. Sony BMG bungled by including the rootkit features with its CD to begin with, then dug itself in deeper through its response to the criticism of the program, said Sam Curry, Computer Associates Inc.s vice president of eTrust Security Management. "Enough is enough. Sony is consistently failing to realize the rights of users and of corporate users," he said. CA is adding detection for the First 4 cloaking technology to an update of its PestPatrol anti-spyware product on Nov. 12, and will label the program a "rootkit," Curry said. Customers should be able to play Sony CDs using their preferred media player, not one dictated by the music company, Curry said. "Customers bought [music] content, not software Theyre not bargaining on their $2,000 PC being turned into a media extension for their $20 CD," he said. Check out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.
"The software is designed to protect CDs from unauthorized copying and ripping," he said.