All the flap over Sony BMGs DRM over the last couple of weeks saw apologies from Sony, a promise they would stop using the DRM that contained the rootkit, and a fix to "unclock" the offending program.
What they didn't tell you is that they are also using another DRM from SunnComm called MediaMax DRM. Hard to believe isn't it. But wait, this one is even worse. Kind of a 1 2 punch rootkit/phones home. Not funny. The only thing funny is the program uses the LAME mp3 encoder. And since no credit is given to LAME, the program violates the GPL of the open source encoder, leaving Sony open to copyright infringment suits. I'm just blown away. But wait theres even more. Read the whole story and get a handle on how bad stuff really is. This new DRM includes an EULA to sign. If you sign it, the DRM becomes a start up item. If you don't, the program installs anyway. Read on:
Sony's DRM: It Just Keeps Getting Worse
By Larry Loeb
November 14, 2005
Updated: Just when you thought Sony's DRM mess was bad enough, along comes SunnComm's MediaMax DRM.
When I wrote last week about Sony DRM mess, I opined that it would serve MBAs of the future as a textbook example of how not to do things.
It turns out that there's even more things that Sony is doing, without permission, to their customers' computers with another DRM system.
People more savvy than me about Windows (like J. Alex Halderman) have discovered that SunnComm's MediaMax DRM installs itself on Windows systems as well as Mac systems.
While most attention has been focused on the XCP rootkit that the Sony/BMG installs on PCs, this additional DRM has been flying under the radar in the Windows world.
The DRM acts like a virus in many ways. When a Sony DRM-protected CD is inserted, the autorun feature of Windows immediately invokes a program called PlayDisc.exe.
Though it displays a EULA, all the files the DRM needs are inserted on the hard drive at C:\Program Files\Common Files\SunnComm Shared\ before the EULA appears.
The only difference detected thus far between accepting and rejecting the EULA is that acceptance causes the DRM to launch every time the OS starts up.
The DRM files remain installed on the hard disk even if the EULA is declined.
Like a virus, there is no meaningful uninstaller available. Now, some of the DRM protected CDs will indeed add an entry for SunnComm to the Add/Remove control panel.
continued here:
http://www.security.ithub.com/article/Sonys+DRM+It+Just+Keeps+...x1k0000599
Running a Mac and laughing at all the windows geeks? Sorry dude. It auto installs on yours too, if you're running OSX Details at Sony's DRM Rootkit Comes in Mac Flavor, Too
http://www.security.ithub.com/article/Sonys+DRM+Rootkit+Comes+...172_1.aspx
RSS Updates