7 November 2005
Since I first learned about this story last week, the world and his dog have blogged their opinion. I don't believe I can add anything to the debate. For those living in a cave this last week Sony have been bad. Very bad. And hidden a rootkit on one of their latest CD's. I'll let you read the original article first. Then return here...
Sony CDs and rootkits
Are you back? Good! So what's happening here, and who's to blame. Well, most of the facts are clear cut; and thanks to Internet all the denials and muddy waters can be cleansed but the archives that have been kept of them. Essential:
- Sony incorporate DRM software on their CDs. This is their right.
- They installed DRM software on your PC to facilitate this. They are permitted to do so.
- The DRM software also additional software to check that specific applications weren't running. This is questionable.
- The software, nor it's EULA, indicates it will do this. This is wrong.
- When installing, no method is given to uninstall the software. This is not wrong, nor unethical, but shows very bad faith on the part of Sony.
- The software connects to the Sony server to download new content, such as advertising banners. This was not mentioned in the EULA, and therefore wrong and unethical.
- The software hides itself to prevent detection. This is unethnical, but not illegal.
- The installation process and EULA does not allow the software to hide itself. This is illegal, under the computer misuse act
- Sony and First 4 Internet (the developers behind this) have denied it 'calls phone'. Since this was later disproved, their statements are deceitful.
- The software that Sony install on your computer is illegal and can cause harmful damage. Sony and First 4 Internet, again, have denied this. This is dishonest.
Amusingly, a search for href ="http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html">>Sony CD earlier today would turn up the page I linked to here. Sony may, or may not, have learnt their lesson. They've certainly learned the value of net-based (and highly technical) web logs. Again, it highlights the need for clueful computer advisors in big companies (or