Sony copy problems at a glance
2005-11-16 14:39
Massachusetts - Security experts have found that hidden anti-piracy technology on some Sony BMG music CDs can cause dangerous computer vulnerabilities - as does the company's method for removing the original programme.
Some questions users might have:
Q: How do I know if I have bought one of these CDs?
A: Sony BMG has not released a list of titles with the so-called XCP technology. However, you can check the back of discs for the printed website address, http://cp.sonybmg.com/xcp.
The link indicates the disc is protected by XCP.
The Electronic Frontier Foundation has published a partial list of affected CDs at http://www.eff.org/deeplinks/archives/004144.php.
Sony has stopped making discs with the technology and is recalling ones that have been sold already.
Q: What happens if I have one of the discs?
A: Nothing bad will happen if you play the disc on conventional stereo systems or on Macintosh or Linux computers.
If you've played the disc on a Windows computer, the CD would have installed a programme which will limit your PC's ability to copy songs.
The programme also cloaks the files in installs. Virus writers have released programmes that exploit this cloaking feature.
Sony BMG activated a website which enables PC users to remove the XCP software but, according to researchers, this method has opened up new vulnerabilities that could let outsiders take over a computer.
Q: I filled out that online form to remove the original program, and now I'm worried I'm vulnerable. What should I do?
A: According to Princeton University researchers, Ed Felten and J Alex Halderman, you can try to delete the dangerous component left by the online form.
It's called CodeSupport. Guidance how to do this is on their blog posting - http://www.freedom-to-tinker.com/?p=927.
- AP