Settlement Ends Sony Rootkit Case


Tue, May 23, 2006

CIO

Music fans who bought CDs with Sony BMG Music Entertainment’s controversial XCP copy control software are going to get refunds.

A federal judge on Monday gave final approval to a class-action lawsuit that was brought against the entertainment company after Sony included a pair of invasive and potentially dangerous copy protection programs on an estimated 15 million music CDs.

The agreement ends one chapter in a public relations disaster for the entertainment company, which must still contend with a lawsuit brought against it by the state of Texas for violation of state antispyware laws.

Sony was sued in three separate class-action lawsuits, which were consolidated into Monday’s settlement. The suits were launched in November 2005, soon after computer science researchers disclosed that Sony’s XCP software used dangerous "rootkit" techniques to cloak itself after installation. Sony licensed the XCP software from First 4 Internet, based in Banbury, United Kingdom.

Rootkit software is normally used by hackers to hide their malware from system tools and antivirus products, and Sony was widely criticized for using this potentially dangerous software.

Sony Headquarters
Sony Headquarters

With its approval of the deal on Monday, the court finalized a tentative agreement reached between Sony and the plaintiffs in December.

Under terms of the settlement, people who purchased XCP-protected CDs can apply for either a cash payment of US$7.50 plus a free album download, or three album downloads, whichever they prefer.

"This settlement gets music fans what they thought they were buying in the first place: music that will play on all their electronic devices without installing sneaky software," said Cindy Cohn, legal director of the Electronic Frontier Foundation (EFF), in a statement Monday. The EFF represented plaintiffs in the case.

Sony issued a statement Monday saying it was pleased with the settlement.

Computer science researchers also found problems with another type of software Sony put on some CDs, called MediaMax. That software, written by SunnComm International, installs software without the user’s permission, is difficult to uninstall, and surreptitiously transmits information about users’ activities to SunnComm’s servers.

Customers who bought MediaMax CDs can now get free downloads.

More information on the class-action lawsuit, including lists of CDs that included the software in question, can be found here.

The EFF has information on the case as well, which can be found here.

-Robert McMillan, IDG News Service

Check out our CIO News Alerts and Tech Informer pages for more updated news coverage.

As you know, everything is mobile, connected, interactive, and immediate. This is exactly why organizations need a highly agile IT infrastructure in order to keep pace with extreme fluctuations in business demand. This book will help you understand why infrastructure convergence has been widely accepted as the optimal approach for simplifying and accelerating your IT to deliver services at the speed of business while also shifting significantly more IT resources from operations to innovation.
For this white paper, IDC performed an in-depth analysis of the business value of VMware View, defined as the expected ROI associated with the use of the solution as a platform for the targeted deployment of a virtual desktop infrastructure.
This paper explains virtualization, its benefits for mid-sized business and how IBM's virtualization strategy can help these companies reduce costs, improve services and simplify management.
Forrester Research makes recommendations on best practices to optimize branch virtualization and consolidation initiatives. See how a "thin" branch architecture, with key servers, services and applications in the data center that relies on a high-performing WAN connection, can offer the greatest efficiencies.
When trying to achieve continuous compliance with internal policies and external regulations, organizations need to replace traditional processes with a new best practice approach and new innovative technology, such as that provided by IBM Tivoli Endpoint Manager.
IBM Tivoli Endpoint Manager helps organizations automatically manage patches for multiple operating systems and applications across hundreds of thousands of endpoints regardless of location, connection type or status.  
Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as support considerations
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
Applications are changing - they're increasingly web-oriented, global in nature and run from multiple device types. Additionally, the volume of data is growing exponentially every year. How do you ensure your applications have fast, accurate, up-to-date information in this new world? Modern applications are data-intensive; delivering data the old way using monolithic databases isn't working. What's needed is a modern approach to data. One that scales-out as needed and delivers predictable high performance, but without sacrificing data consistency or integrity.
VMware View™ 5 simplifies IT management while increasing end user freedom by delivering desktop services from your cloud. Building upon VMware's leadership in desktop virtualization, VMware View 5 delivers a high-performance user experience while giving IT greater policy control.

View this webcast and find out how VMware View 5 can help you:
- Deliver the highest fidelity experience of desktop services across any device and any network
- Simplify and automate IT management, security and control of desktop services
- Reduce the costs associated with your desktop environment
IT professionals are being asked to deliver faster "time-to-value" than ever before. An IDG Research survey found that CIOs are eager to invest in technologies that will enable them to get new applications and services up quickly, achieving faster time-to-value.
Learn how to reduce IT management overhead, ease revision control, guarantee data security, scale systems more quickly and reduce server and software costs.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center