Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Sony, Amazon Detail Rootkit CD Buybacks

Posted by Zonk on Fri Nov 18, 2005 06:23 PM
from the finally-some-customer-service dept.
An anonymous reader writes "Washingtonpost.com is reporting that Sony BMG today detailed a program that should allow customers who bought one of the 52 titles known to be tainted with the company's deeply flawed anti-piracy software to exchange them for CDs of the same title, sans rootkit of course. Oddly enough, Sony is offering those who want to return the CDs the chance to download MP3 versions of the discs, but only after Sony has received the returned discs. Amazon.com also is sending out e-mails to customers who bought the discs, offering to replace or refund them at no cost."
+ -
story

Related Stories

[+] Sony Rootkit Settlement Gets Judge's Approval 187 comments
Lewis Clarke wrote to mention a ZDNet story about Monday's final approval of the rootkit settlement in the case brought against Sony BMG Music. From the article: "The agreement covers anyone who bought, received or used CDs containing what was revealed to be flawed digital rights management (DRM) software after Aug. 1, 2003. Those customers can file a claim and receive certain benefits, such as a nonprotected replacement CD, free downloads of music from that CD and additional cash payments ... At least 15 different lawsuits were filed by class action lawyers against the record label, and the New York cases were eventually consolidated into one proceeding. The parties reached a preliminary settlement with Sony BMG in December, leaving it up to a judge in a U.S. District Court in New York to make it official. "
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by sehlat (180760) on Friday November 18 2005, @06:25PM (#14067486)
    And how will we know Sony isn't trying something *ELSE* with their dissatisfied customers as guinea pigs?
    • Sony and Satan (Score:5, Insightful)

      by MightyMartian (840721) on Friday November 18 2005, @07:15PM (#14067784) Journal
      Well the Devil had a brand new plan,
      "I don't want any ordinary DRM!"
      So he called his boys at Sony Corp,
      "I'll make this fast and I'll make it short."

      "There's a Limey company, as evil as hell,
      They've got a rootkit they're waiting to sell.
      So grab some cash, make it quick,
      There's a half million networks we just gotta fix."

      Now Sony knew the Devil well,
      Why these guys were already half way to Hell.
      So off they went to England fair,
      And bought themselves a rootkit there.

      To protect themselves and their evil scheme,
      They wrote a EULA that would make you scream.
      "No problem," they said, "we can do as we please,
      We're all scummy bastards, so what's some more sleaze?"

      But not all were asleep when they played Van Zant,
      And the racket grew so loud Sony just had to recant.
      "We'll take back all those discs, we really were wrong,
      Oh, and you Mac users, your turn's coming before long."
  • MP3 files (Score:5, Interesting)

    by arth1 (260657) on Friday November 18 2005, @06:27PM (#14067497) Homepage Journal
    I bet that the MP3's will be watermarked with the individual downloader's unique ID, so Sony/RIAA can later sue their customers...

    That said, what bitrate, frequency and codec is used for the MP3s?

    Regards,
    --
    *Art
    • Re:MP3 files (Score:3, Insightful)

      by Anonymous Coward
      Not watermarking to sue... watermarking to "prove their point" that they need the rootkit stuff because if they distribute mp3s, they will be spread throughout the internet and ruin their revenues.
    • That said, what bitrate, frequency and codec is used for the MP3s?
      It doesn't matter, the sole fact that they're trying to swap CDs with mp3 is a joke already, no matter what the quality is.
    • by minuszero (922125) on Friday November 18 2005, @07:05PM (#14067734)
      Judging by their alleged previous use, probably LAME encoded...

      although you can bet they'll be DRMed too.
  • Lawsuits? (Score:4, Insightful)

    by r_glen (679664) on Friday November 18 2005, @06:28PM (#14067499)
    A refund isn't enough - I hope to see some lawsuits go forward against Sony, as the very least to scare other companies from trying something like this.
  • by Work Account (900793) on Friday November 18 2005, @06:28PM (#14067500) Journal
    I have owned Sony Walkmen, Playstation, Playstation 2, etc.

    I have owned dozens of Sony CDs.

    I have 6 Sony audio components.

    I will NEVER buy another Sony product ever again, and I urge ALL of you to do the same.
    • by arth1 (260657) on Friday November 18 2005, @06:31PM (#14067534) Homepage Journal
      I have owned Sony Walkmen, Playstation, Playstation 2, etc.

      I have owned dozens of Sony CDs.

      I have 6 Sony audio components.

      I will NEVER buy another Sony product ever again, and I urge ALL of you to do the same.


      Keep in mind that this is Sony/BMG, where Sony only owns 50%, and where BMG were the ones who brought DRM into the picture. Sony on the other hand is selling MP3 players and Vaio PCs with bundled ripping-hadware/software.

      Anyhow, heads *should* roll over this in Sony. Instead I fear they will just sue First4Internet and pretend that ignorance is acceptable.

      Regards,
      --
      *Art
      • by BushCheney08 (917605) on Friday November 18 2005, @06:38PM (#14067573)
        Could you please point to your source regarding BMG being the ones who brought DRM into the picture? You make it sound like Sony is new to the music game. They've been at it for a very long time, via the Sony Group, Columbia Records, Epic Records, and many imprints that fall under those labels.
      • Keep in mind that this is Sony/BMG, where Sony only owns 50%, and where BMG were the ones who brought DRM into the picture.

        Isn't this the same Sony who tried to foist their ATRAC proprietary codec on us which locks us into their hardware and requires their Sonicstage crap? I don't think that is the BMG side.

      • Keep in mind that this is Sony/BMG, where Sony only owns 50%, and where BMG were the ones who brought DRM into the picture. Sony on the other hand is selling MP3 players and Vaio PCs with bundled ripping-hadware/software.

        Wanna bet? Sony doesn't give heck about their customers, not only their products are often no more than average, but they want full control over their customers (backers of blu-ray, DRM schemes, ... )

        Had you ever played a SoE MMORPG (be it either EverQuest or EverQuest 2), you'd know how

        • I never said that Sony excels at customer support. My point was that Sony BMG is not the same as Sony, and that (perhaps especially) with Sony, one hand doesn't know what the other is doing. Thus you had ATRAC3 being pushed at the same time as they sold CD burners, and now you have Vaio ripping stations and MP3 playing Walkman cell phones being sold at the same time as CDs that won't work with either.

          Perhaps Sony has become so big that it's time for a split. Sony BMG is obviously not part of Sony itself
      • I'm not going to boycott Sony over this. Not Sony hardware at least. BUT, Sony's not the cheapest on the market. I bought my Sony receiver, and my daughter's Sony camcoder, for example, because I had some degree of TRUST in their products. If they shatter that, and they have, why exactly would I pay a premium for Sony products? I'm far less likely to buy Sony than I was, and it's not because I'm boycotting -- they've simply destroyed part of the value I found in them. Now they're no different from "unnamed
      • by trudyscousin (258684) * on Friday November 18 2005, @08:04PM (#14068044)
        ...and where BMG were the ones who brought DRM into the picture."

        Is that so?

        Sony pulled the same crap [newscientist.com] with Celine Dion's album A New Day Has Come in 2002 using their key2audio DRM--the scheme that could be defeated with a felt-tip marker.

        As far as I'm concerned, there should have been the same degree of outrage then as there is now.
  • by Anonymous Coward on Friday November 18 2005, @06:28PM (#14067503)
  • Turn of the tide? (Score:5, Interesting)

    by Anonymous Coward on Friday November 18 2005, @06:28PM (#14067504)
    Nice of Amazon to do this, since it wasn't really their rootkit (or maybe they're thinking about potential liability, doesn't really matter).

    It'd be great if Amazon and other big vendors refused to carry discs with this sort of horrible DRM. That'd probably get the music company's attention a little better than a few geeks organizing a boycott.

  • Updates (Score:5, Insightful)

    by dorkygeek (898295) on Friday November 18 2005, @06:29PM (#14067506) Journal

    Why does Sony not simply provide an update for their rootkit? Improved security, expanded DRM, and distinguished keylogging, get it all now with Sony's rootkit 2.0. New and improved.

    Always at your service

    sincerely yours, Sony.

  • by R.Mo_Robert (737913) on Friday November 18 2005, @06:29PM (#14067512)

    offering to replace or refund them at no cost

  • by Anonymous Coward on Friday November 18 2005, @06:29PM (#14067513)
    Sony seems to be in PR-damage control mode but they could care less about the customers. Sony *still* has failed to release any sort of uninstaller that truly cleans up the affected systems. Great move, there.
  • what about.. (Score:5, Insightful)

    by ltwally (313043) on Friday November 18 2005, @06:30PM (#14067521) Homepage Journal
    "Sony BMG today detailed a program that should allow customers who bought one of the 52 titles known to be tained with the company's deeply flawed anti-piracy software to exchange them for CDs of the same title, sans rootkit of course."
    What about damages incurred to those who unknowingly installed the rootkit? What about the cost of removal? IMHO, it would be in Sony's best interest to offer something beyond just replacing the defective rootkit'd product... As an added incentive to Sony, such an action might look good in their up-coming trials from the lawsuits resulting from their rootkit.
  • Hmm (Score:3, Funny)

    by Trip Ericson (864747) on Friday November 18 2005, @06:32PM (#14067541) Homepage
    Step 1: Buy DRMed CD off a friend cheap.
    Step 2: Return to Sony.
    Step 3: Download free MP3s.
    Step 4: ???
    Step 5: PROFIT!
  • MP3 poisoning howto (Score:5, Informative)

    by dtfinch (661405) * on Friday November 18 2005, @06:32PM (#14067544) Journal
    Let customers download the MP3s via a server side script which quietly puts their customer number for tracking and a hash for non-repudiation into the ID3 tags, which'll survive most transcoding. Then if it appears on a P2P network (not likely, unless it's not already there), they'll know who did it.
  • by Coopjust (872796) on Friday November 18 2005, @06:35PM (#14067551)
    Recalling the CD's is merely a slap on the wrist. It doesn't cost Sony as nearly as much money as a lawsuit, costs Amazon money, and it does not repair the damage to numerous artists names by this rootkit.

    If Sony actually would own up to their stupid mistake, the artists wouldn't be impacted so much. Look at Van Dant's CD on Amazon. 1.5 stars, 300 reviews, most mentioning the rootkit. Do you think that he'll fare so well in the future.

    I have lost faith in Sony. Propietary formats and other things were a little odd, but I accepted them. But rootkits, a patent for games that only play on the console they were originally put in...seems like a ridiculous infringement on user rights.

    Rather than losing money to pirates, people will turn to better solutions and Sony will be the loser.
  • Whew... (Score:3, Funny)

    by GmAz (916505) on Friday November 18 2005, @06:43PM (#14067598) Journal
    Dodged a bullet there. I thought they would be popular titles people would auctually buy. I sure feel sorry for those couple hundred people that have the rootkit on their system from buying the CD.
  • Who would buy these? (Score:3, Interesting)

    by affliction (242524) on Friday November 18 2005, @06:46PM (#14067620) Homepage
    6. Bette Midler - Sings the Peggy Lee Songbook

    Who in their right mind would subject themselves to such torture. And, what's more, someone paid for the privlege.

  • by holden caufield (111364) on Friday November 18 2005, @06:47PM (#14067628)
    This is on her own damn label and they can't get Lady Day's name right?

    Unbelieveable. They could have at least looked at the CD cover.
  • by rice_burners_suck (243660) on Friday November 18 2005, @06:50PM (#14067643)
    Sony BMG today detailed a program that should allow customers who bought one of the 52 titles known to be tained with the company's deeply flawed anti-piracy software to exchange them for CDs of the same title, sans rootkit of course.

    No no no! They got it all wrong. They should do what my friend's landlord did when he kept complaining that the dishwasher didn't work: They came, turned it on, and when it made noise, they said, "It works fine." And of course, it didn't: First, it smelled disgusting in there, like there was rotten food inside the machine. Second, just because it sprayed (dirty smelling) water doesn't mean it "works fine." Third, if you put a dish in there that was clean to begin with, it came out dirty. And I believe that such a dishwasher makes a perfect analogy for compact discs that contain defective software.

    So what Sony should do is this: They should publicly offer customers who bought one of the flawed CDs to exchange them for identical ones! As if we're talking about workmanship in the production of the compact disc proper and not the contents. Hey, just act like you don't know a darn thing about technology when it comes to this type of thing! And when the customer complains that the replacement still contains the rootkit, just say, "It works fine."

    Sony. Where do you want to go today? (Hell, they almost make Microsoft look good in comparison. Almost.)

  • by digitaldc (879047) * on Friday November 18 2005, @06:52PM (#14067658)
    ... 2 weeks waiting for my replacement disc, and when I opened my "Suspicious Activity" CD again, I just didn't really feel like listening to it any more.
  • Ahoy! (Score:3, Funny)

    by jim_v2000 (818799) on Friday November 18 2005, @06:53PM (#14067660)
    Sony is offering those who want to return the CDs the chance to download MP3 versions of the discs

    Too late ya bastards, I already ripped me music off ye DRM'd cd. Yarrr!
    • And on a serious note, does anyone find it comical that now they are offering MP3 downloads? Seems like Sony realized that it's a CHEAPER and more EFFICIENT way of distributing music. Too bad the music companies aren't realizing this sooner.
  • by gweihir (88907) on Friday November 18 2005, @06:53PM (#14067665)
    And well they should be! In many countries what they did is criminal and should land the decision makers in prison. Both the computer sabotage and the code theft are an issue. Even if Sony can claim they trusted the vendor of the rootkit, then people there should go to prison and Sony would not look that much better.

  • by SpammersAreScum (697628) on Friday November 18 2005, @06:55PM (#14067679)
    The article seems to indicate the offers cover CDs with First4Internet's XCP crap, but that's it. There's apparently similar ugliness with CDs using Sunncomm's MediaMaz copy protection (see http://www.freedom-to-tinker.com/?p=925 [freedom-to-tinker.com]) which is not covered. I guess that one hasn't gotten enough mainstream media coverage yet...
  • by bosewicht (805330) on Friday November 18 2005, @07:17PM (#14067796)
    lmao Before
    Most people, I think, don't even know what a rootkit is, so why should they care about it?
    After
    We share the concerns of consumers regarding these discs, and we are instituting a program that will allow consumers to exchange any CD with XCP software for the same CD without copy protection. We also have asked our retail partners to remove all unsold CDs with XCP software from their store shelves and inventory. Please click here for exchange program details. We deeply regret any inconvenience this may cause our customers and we are committed to making this situation right. It is important to note that the issues regarding these discs exist only when they are played on computers, not on conventional, non-computer-based CD and/or DVD players.
  • Sony Sucks (Score:3, Insightful)

    by sabre307 (451605) on Friday November 18 2005, @07:28PM (#14067859) Homepage
    Even without the root kit, Sony is being obnoxious with the DRM shit. I got a copy of Chevelle's new album and couldn't even rip it into MP3 without installing some damn proprietary Sony software, and then it would only rip into locked down WMA format. The CD was so screwed up that an older car CD player of mine wouldn't play it, Linux wouldn't recognize it, Windows kept trying to autorun it, but wouldn't recognize the audio side of it. Mac was the only one that would, for some reason, play it just fine. I finally got pissed off and downloaded the whole album via P2P. It was more file sharing than I've done in the last year. Congratulations Sony, now you're going to insent the legitimate people into sharing the files! To me, a CD I can't get into MP3 is useless and defective. I only listen to music on my car stereo in MP3 format, or on my computer in MP3 format, or on my Zen in MP3 format. The original CDs get stored away for safe keeping. I only have two words for Sony... BITE ME!!!
  • MP3 replacements? (Score:3, Insightful)

    by imidan (559239) on Friday November 18 2005, @07:40PM (#14067929)
    I'm curious about one aspect of having .mp3 replacements of the defective CDs that you've purchased. TFA says you have to physically return the CD to Sony in order to get access to a set of .mp3 files for that disc. So what becomes of your license? I mean, we've been making a big deal for days now about how your .mp3 files are only legal if you've got the original disc, as well. So, what, are they going to send you some kind of certificate that says you have a right to own these .mp3s? Or how could you possibly prove that your files were legal?

    There's muttering here about digital watermarks or somesuch to uniquely identify each set of .mp3s with a particular customer. But then who has the proof that your files are yours? Sony? I'd feel a lot more comfortable with a new, DRM-less CD that I could rip to my computer, so I'd have proof that I own the CD.

    On another note, the digital watermark doesn't seem like it would be effective. It wouldn't take a rocket scientist to send in a real copy of the CD and download the .mp3s using bogus contact information. You UPS a disc to Sony with completely unverifiable and incorrect return information, they email your brand-new Hotmail account with the .mp3 download URL, you get the files on a public terminal, walk away, and never look back. You can share these .mp3s with anyone you want to, and Sony will never be able to identify you as the originator. Though all of that seems like more trouble than it's worth, since you could accomplish the same thing by getting a DRM-less copy of the CD, ripping it, and distributing it.
  • Demographics (Score:5, Insightful)

    by Durzel (137902) on Friday November 18 2005, @07:47PM (#14067960) Homepage
    Oddly enough, Sony is offering those who want to return the CDs the chance to download MP3 versions of the discs, but only after Sony has received the returned discs.

    They probably want to determine what percentage of the people who were sufficiently outraged by XCP to go to the trouble of sending back the CD are interested in a MP3 version instead (and therefore the sort of people who would've probably tried circumventing said copy-protection in the first place) vs those who actually had genuine technical issues with it.

    Good market research for them really.
    • Re:Sans (Score:5, Informative)

      by Sycraft-fu (314770) on Friday November 18 2005, @06:35PM (#14067552)
      It'd be easy to tell probably. If the disc lacks a data sector, you can be sure there isn't one. CDs have different kinds of sectors for audio and data. So if it's all audio, there's no possibility of malicious software since there's no software.
    • Re:Sans (Score:5, Insightful)

      by LiquidCoooled (634315) on Friday November 18 2005, @06:56PM (#14067686) Homepage Journal
      On the Sony site, they are talking about a secure updater which removes the rootkit:

      If you obtain regular security updates from a major anti-virus service, you should receive an update through that process. You may also download the update yourself from http://cp.sonybmg.com/xcp/english/updates.html [sonybmg.com].

      The update its talking about simply removes the rootkit, but does not remove the copy protection portion.

      Therefore, I believe these disks will still be executable in format (besides, any with images/videos on will need the media player software as well...)

      Just read the home page on the sony site, they still don't get it:

      Going forward, we will continue to identify new ways to meet demands for flexibility in how you and other consumers listen to music.

      We just want true cds without any bullshit, plain and simple.
      • Going forward, we will continue to identify new ways to meet demands for flexibility in how you and other consumers listen to music.

        "meet" means "deny", the problem as Sony see it is that CD's are already too flexible!

        Just as the minister for public safety gets to define where public safety ends, so will Sony meeting demands for flexibility define where that flexibility ends.

        Sam
    • Re:Sans (Score:4, Informative)

      by Stormwatch (703920) <rodrigogirao@h o t m a i l . com> on Friday November 18 2005, @07:22PM (#14067822) Homepage
      Easy, just check that it has the logo "Compact Disc Digital Audio" [wikipedia.org]. If they put that on anything that is not compliant to the Red Book standard - that is, not a pure audio CD - Philips can sue them for trademark infringement.