Welcome | Sign In
ECommerceTimes.com
Security

Sony Digs Another Hole With 'Overeager' DRM Placement

Print Version
E-Mail Article
Reprints
Sony Digs Another Hole With 'Overeager' DRM Placement

"The part that people have the objection to is that Sony has done this without telling consumers," Michael Gartenberg, vice president and research director, Jupiter Media, said. While he said that consumers might not all be techno-geeks, they certainly understand when they try to play a CD on their computer and it doesn't work or it causes other problems.


Think you have to compromise on security to save on costs? Think Again. Trend Micro™ Enterprise Security, powered by the Trend Micro Smart Protection Network™, can lower your content security management costs by up to 40%. Find out just how much you’ll save with our TCO Impact Calculator.

Sony (NYSE: SNE) BMG's overzealous moves to insert digital rights management into its music CDs is causing the company more trouble.

The Electronic Frontier Foundation, the non-profit Internet rights group, said that software Sony embedded into 27 CD titles on sale in the United States and Canada opens a hole through which hackers can take control of a PC running Windows. The word came yesterday in the form of an announcement that SunnComm, the makers of the DRM software, were publishing a software update to plug the hole.

No Way to Know

MediaMax Version 5 installs itself without notice on PCs when consumers try to play the Sony CDs.

"The problem with digital rights management is when you try to be very, very overeager in your implementation," Michael Gartenberg, vice president and research director, Jupiter Media, told TechNewsWorld. "Apparently Sony has gone way overboard and annoyed their user base."

Gartenberg said Sony could ill afford the bad publicity the misstep had garnered.

"It's turned into a P.R. nightmare and a fiasco. In the short term, they've been tarnished at a time when they're way behind in perception of who's leading in the digital music industry," he said.

Double Trouble

The news is especially damaging because this is the second time in two months that the company has had to face consumers with news of security flaws in its DRM software. Last month, developer and author Mark Russinovich wrote in his blog that DRM protected CDs from Sony, when played on a PC, install DRM software from First 4 Internet that hides itself on the PC's hard drive. Sony then released a patch that unveils the software, but uninstalling it completely required the consumer to contact Sony customer service. Security analysts had said that virus writers could use the software, masked by rootkit technology, to sneak in malware that would also be hidden.

"The part that people have the objection to is that Sony has done this without telling consumers," Gartenberg said. While he said that consumers might not all be techno-geeks, they certainly understand when they try to play a CD on their computer and it doesn't work or it causes other problems.

Sony has said it will begin a campaign to alert consumers to the potential danger of the CDs and tell them how to find and download the security plug.


Print Version E-Mail Article Reprints More by Susan B. Shor


Related News Alerts

Sony Corp. Activate Alert | Search Archives

More by Susan B. Shor

Salesnet President Jonathan Tang Ready to Take On Salesforce.com
February 07, 2006
"We think it's Salesnet's time now. We've been around since the beginning, we've been lying low, but you're going to start to see more of us. We've done it through organic growth and happy customers. We continue to focus on customers."
Comcast Follows Time Warner in Offering 'Family' Programming Tier
December 23, 2005
"The demand for this type of tier is coming from the FCC and Christian conservatives. It has nothing to do with legitimate consumer demand," Todd Chanko, senior analyst at Jupiter Media, told the E-Commerce Times.
High-Risk Flaw Found in Symantec's Software
December 22, 2005
"Part of the significance of this vulnerability announcement is that your machine can be exploited without you needing to do anything at all. You don't even have to open an e-mail or attachment, and this happens with the default configuration of the product," said Forrester Research senior analyst Michael Gavin.
Don't miss a story -- sign up for our FREE e-mail newsletters and view the latest headlines at a glance.
Tech News Flash [ View Sample ]
E-Commerce Minute [ View Sample ]
ECT News Network Weekly Newsletter [ View Sample ]
Shortcuts
ECT News Network Information
Reader Services
Corporate
ECT News Network