DRM this, Sony!
By Molly Wood, section editor, CNET.com
Thursday, November 3, 2005
I hope this is the week that everyone in the world finds out what a root kit is. And I hope it's a week we look back on in amazement, as we consider just how far Sony was willing to go to criminalize consumers in its efforts to preserve control over its product. Because I believe this is the week that Sony effectively declared war on the consumer, announcing what most of us had already suspected: fair use is a joke in the movie and record industry, and the companies who control mass-market content will truly stop at nothing to protect their profits.
We're not gonna take it
But let me start at the beginning. On Monday, October 31, alert users discovered that Sony BMG is using copy-protected CDs to surreptitiously install its digital rights management technology onto PCs. You don't have to be ripping the CD, either--just playing it from your CD-ROM drive triggers the installation. The software installs itself as a root kit, which is a set of tools commonly used to make certain files and processes undetectable, and they're the favored tool of crackers who are, as Wikipedia puts it, attempting to "maintain access to a system for malicious purposes." In fact, root kits are often classified alongside Trojan horses. And Mark Russinovich, who created a root-kit detection utility and was one of the first to blog about the Sony intrusion, discovered another little gem when he tried to remove the DRM drivers. It broke his computer--disabling his CD drive.
So, let's make this a bit more explicit. You buy a CD. You put the CD into your PC in order to enjoy your music. Sony grabs this opportunity to sneak into your house like a virus and set up camp, and it leaves the backdoor open so that Sony or any other enterprising intruder can follow and have the run of the place. If you try to kick Sony out, it trashes the place. And what does this software do once it's on your PC? Well, here is (via David Berlind's excellent breakdown of the issue) what Amazon's CD listing page has to say on the subject:
"This product limits your ability to make multiple digital copies of its content, and you will not be able to play this disc or make copies onto devices not listed as compatible. Content/copy protected CDs should allow limited burning, as well as ripping into secure Windows Media Audio formats for playback with most compatible media players and portable devices. In rare cases, these CDs may not be compatible with computer CD-ROM players, DVD players, game consoles, or car CD stereos, and often are not transferable to other formats like MP3."
So it's not just the black hat tactics. The DRM itself is almost unbelievably restrictive, and some have suggested that the reasoning behind it is part of Sony's ongoing war over digital music supremacy with the decidedly more supreme Apple. Here's how Engadget summarizes a recent article from Variety: "The new copy protection scheme--which makes it difficult to rip CDs and listen to them with an iPod--is designed to put pressure on Apple to open the iPod to other music services, rather than making it dependent on the iTunes Music Store for downloads." I wish I could say that was a joke, but apparently, it's not. In fact, some of the artists involved didn't give permission to Sony to use the backdoor DRM technology, and want no part of it. Amazing.
Happily, and despite the use of scary words like root kit, this story hit the Web in a big way. The PR for Sony is, shall we say, not good. By Wednesday, November 2, Sony had announced that it would, in conjunction with the company that developed this bad black hat idea in the first place (First4Internet) release a patch to antivirus companies so that hackers wouldn't, hopefully, be able to take advantage of the backdoor they just opened on your property. So, that solved the most immediate concern, but the only thing the patch does is reveal the antipiracy software. Presumably, you'd suffer the same PC-crippling effects if you tried to remove it, and Sony continues to insist, despite plenty of evidence to the contrary, that its components weren't harmful in the first place. As for the insanely draconian copy protection--it's still cheerily intact.
Here's the full story with plenty of informative links about the technology, etc.