Rootkits All Around: Universal Music Has It Too

from the no-surprise-there dept

I doubt this is surprising to anyone. But, following all the talk about Sony's rootkit-style copy protection found on some music CDs, people are looking to see who else the copy protection company works with. Riley turned up a press release, showing that the company is also outfitting certain Universal Music Group CDs with their special brand of malware copy protection -- even highlighting in the announcement that it's the same as found on SonyBMG CDs. Of course, given Universal Music's CEO Edgar Bronfman's history of believing he must control everything, it's no surprise at all that they'd be using this too. Given the lawsuits against adware firms for sneaky installs (and, recognizing that this rootkit stuff is actually much more dangerous by opening up additional holes in your computer), doesn't it seem like these record companies have just opened themselves up to a serious legal liability? They installed something on computers without asking or alerting you. They make it very, very, very difficult to remove. They break certain features of your computer and they open up a major security vulnerability that others can exploit. And then they call all their customers criminals. Can't imagine why they're having trouble with their existing business model.
Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • identicon
    jan, 2 Nov 2005 @ 11:34am

    Rootkits All Around

    First the news about Sony, now this. What/who next? Who can we trust? Call me paranoid, but I won't be buying any music CDs from anyone until the dust settles. I don't NEED to buy any music right now; I DO need a functional and non-compromised operating system.

    link to this | view in chronology ]

    • identicon
      lar3ry, 2 Nov 2005 @ 11:40am

      Re: Rootkits All Around

      There's some good ways to avoid root kits that the companies are installing...

      Welcome to Linux...

      Welcome to OS X...

      Farewell, Windows...

      [smile]

      link to this | view in chronology ]

      • identicon
        SV, 2 Nov 2005 @ 12:40pm

        Re: Rootkits All Around

        I'm getting slightly tired of comments that switching to Linux, OSx or whatever is a solution. It's a temporary solution simply since the DRM doesn't target those OS (since the majority is on Windows). <br><br>If we all switch to Linux, next thing we know is we'll have F4I working on a Linux version of their crapware.

        link to this | view in chronology ]

        • identicon
          Y Pennog Coch, 2 Nov 2005 @ 3:05pm

          Re: Rootkits All Around

          It's not a temporary solution, because on Linux and OSX you normally run as a limited user. The malware can't install itself unless the current user has admin rights.
          But you're right to be tired. The simplest answer is to (upgrade to WinXP if you're still using 9x/ME and) learn how to work with limited user accounts.
          OTOH, if Big Music's next step is to add privilege escalation exploits to the malware, then yes, it was a temporary solution :-O

          link to this | view in chronology ]

      • identicon
        Da_ALC, 18 Nov 2007 @ 5:16pm

        Re: Re: Rootkits All Around

        Lol you poor loser.. If everybody used those then the rootkit would be made for those instead... along with alot more obvious statements.

        link to this | view in chronology ]

    • identicon
      Weebit, 2 Nov 2005 @ 12:47pm

      Re: Rootkits All Around

      You can't trust anyone. It's getting worse each year that passes. It's like no one thinks the computer user has any rights. They forgot that users paid money for these machines and they are not going to tolerate software companies turning their computers into drones. I really suggest a boycott of the whole music industry. Force them into setting up some rules that will benefit the public and they can live with. I am not purchasing another CD till something is done. This includes a very large fine placed on Sony and BMG for the harm they have caused. Don't forget the misuse of their DRM. Or for the fact that Rootkits doesn't belong in a legit software. Maybe that was our first clue that Sony BMG was up to no good?

      link to this | view in chronology ]

      • identicon
        somebody, 2 Nov 2005 @ 1:18pm

        Re: Rootkits All Around

        Sony SUcks, we should all bycott their all products.

        link to this | view in chronology ]

        • identicon
          Da_ALC, 18 Nov 2007 @ 5:18pm

          Re: Re: Rootkits All Around

          I agree and have been for years and tell people this on a regular basis. HOPE YOUR READING THIS SONY.

          link to this | view in chronology ]

  • identicon
    james, 2 Nov 2005 @ 1:22pm

    No Subject Given

    I bought a Mac, thinking my problems would all go away, and now I'm bored, cause I can't figure out what to do with it.

    What does one do with a Mac?

    link to this | view in chronology ]

    • identicon
      Ron, 2 Nov 2005 @ 1:51pm

      Re: No Subject Given

      "I bought a Mac, thinking my problems would all go away, and now I'm bored, cause I can't figure out what to do with it."

      You become a Quark snob.. :)

      link to this | view in chronology ]

    • identicon
      Roger, 2 Nov 2005 @ 2:25pm

      Re: No Subject Given

      You can post on blogs and whine about how bored you are. Oh wait, you've already figured out how to do that.

      Well, that's about it. Computers aren't good for anything else but whining.

      link to this | view in chronology ]

    • identicon
      Miffe, 15 Nov 2005 @ 8:38pm

      what to do with a mac?

      You have Garageband bundled with it, right? Use it to create your own music and become a billionaire!

      link to this | view in chronology ]

    • identicon
      Da_ALC, 18 Nov 2007 @ 5:21pm

      Re: No Subject Given

      Lol, quark is such a lame piece of software to.
      And garageband is as pro as dance ejay or fruityloops.

      Most people who do things with Macs, are emulating windows to do it.
      Sorry James, youve learned the hard way.

      Dont get me wrong, Mac and OSX is sweet for the little you can do with it. The very very little.

      link to this | view in chronology ]

  • identicon
    Don Phillips, 3 Nov 2005 @ 2:33am

    Illegal

    This goes way beyond simply setting a cookie in someone's internet files. Rootkit's are a violation of a user's OS. The system techs at Sony are trying to sell us on an illegal hijack program. Say I pay good money for my Operating System. I can tweak it, modify it or change it any way I please. This person comes along and corrupts it. Their software runs without my permission and removing it might destroy the product I purchased. I would consider this illegal, yes?
    Found a reply website to Sony:

    http://cp.sonybmg.com/xcp/english/form2.html

    link to this | view in chronology ]

  • identicon
    Riley, 14 Nov 2005 @ 12:53pm

    RE: Universal Music using XCP

    It appears that they've removed that original article about Universal Music using XCP.

    http://www.xcp-aurora.com/press_article.aspx?art=aug_05_art3

    No longer exists.

    link to this | view in chronology ]

  • identicon
    Mike, 14 Nov 2005 @ 5:41pm

    Any other offenders?

    Does anyone know if KODAK EasyShare Picture CD software uses the same type technology?
    I had a great deal of difficulty deleting their software after it installed and changed some of my settings without permission, particularly, loading itself into my startmenu without permission.
    While the EasyShare software is sitting in the faststart tray, the system runs at sub-286 speeds. When EasyShare is closed, the system returns to it's previous zippy self. My skillz are lacking, but it appears to use a lot of resources.
    KODAK EasyShare Picture CD software came with both a Kodak Picture CD received as a result of Kodak film processing, and a Kodak camera that we purchased recently, so there is the potential for it to be installed on a lot of systems.
    Nikon also distributes software with their digital cameras, but I haven't tried to remove it yet.
    Mike

    link to this | view in chronology ]

    • identicon
      C C, 15 Nov 2005 @ 1:21am

      Re: Any other offenders?

      Get a photo printer that doesn't connect to the PC.
      It uses flash cards.
      That way, you'll never see your picture by accidentally clicking on a perv site.

      Every now and then some spyware has hit the firewall when I was looking at digital camera pictures.

      link to this | view in chronology ]

  • identicon
    C C, 15 Nov 2005 @ 1:10am

    How many rootkits are there?

    1.XCP
    2.SunnComm
    3.??? "Specific Harm/Aware"
    4.??? ??? ???
    I got #3. It's rootkit installed AOL to get internet access. AOL or it's logo was not anywhere on the CD label. I have verified that the CD installs AOL and hides files but does not make $SYS$ files like XCP. It also wrecked the PC.

    Viruses make great copy protection.
    If you don't have one, you don't want a copy.
    But they don't sell very well.

    BIOHAZARD WARNING:
    DON'T PLAY CD'S ON INDUSTRIAL MACHINES!

    link to this | view in chronology ]

    • identicon
      Da_ALC, 18 Nov 2007 @ 5:29pm

      Re: How many rootkits are there?

      Haha fair comment! If you have a PC and are online why would you be wanting to buy Sony published music anyway?.. They lock their artists into terrible contracts, exploit every step along the way, from factory to consumer... Sony deserves no money.

      On the AOL note.. I have seen a few things that come with "free AOL" bundled but not labelled.. Usually its just an install exe and a shortcut to, but I wasent digging about so might have been more.
      In thit case its prob legal as its not actually installing, but placing an installer. Besides after the whole IE vs Netscape ordeal, isnt anybody allowed to stick what they want anywhere?

      link to this | view in chronology ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.