• Sony Patches Second DRM Flaw

    Sony Patches Second DRM Flaw

    Techtree News Staff, Dec 08, 2005 1230 hrs IST

    Sony has announced that a patch is available for a 2nd flaw discovered in the controversial DRM system used on its CDs.

    mail share

Sony's cupful of woes is threatening to spill over...

Amid the raging furore over its rootkit DRM music CDs, the company has announced that a patch is now available for a 2nd flaw discovered in the controversial DRM system it uses on several of its CDs.

Following blogger Mark Russinovich's discovery last month, that the XCP DRM (digital rights management) copy protection software used in a number of Sony music CDs can actually hide itself using rootkit mechanism and expose users' PCs to hacker attacks, Sony was forced to withdraw millions of CDs from retail.

Sony has, ever since been in the eye of a storm... Now digest this!

The technology in question this time around is SunComm's MediaMax Version 5 content protection software, and the flaw was discovered as a result of a security audit requested by digital rights body - the Electronic Frontier Foundation (EFF) and carried out by iSEC Partners.

SunComm's MediaMax Version 5 is designed as a copy protection software, but it installs a file folder on users' systems which can be exploited by attackers to gain control over the infected system.

Seems like Sony BMG has gotten wiser... the company has given an assurance that the review of this system, and the subsequent patch have been carried out with all due diligence, especially in the light of the continuing debacle over the XCP copy protection software.

The company says it has not only granted the EFF's request for the audit, but also conceded to having an independent third-party software security firm - NGS Software inspect the patch and the subsequent state of MediaMax technology.

Thomas Hesse, president - Global Digital Busines, Sony BMG, said, that the company believed the availability of the patch coupled with its online advertising campaign to warn customers of the dangers posed by the CDs, would appropriately address the issue of CDs with MediaMax Version 5 on the market.

The patch for the latest security flaw is available from the SunnComm and the Sony Web site.

According to company sources, around 80 Sony titles for artists ranging from Britney Spears to Billie Holiday contain the MediaMax Version 5 copy protection software. The company is currently in the process of recalling millions of its CDs from shops, all in the midst of pre-Christmas shopping.

And If that's any concession... Sony claims this problem applies only to CDs marketed in USA and Canada; not to CDs manufactured for the UK market.

Related News:
Sony: Most Wanted
Piece of Tape Defeats Sony DRM
Sony Announces CD Swap Program
Sony Recalls Rootkit DRM CDs
Sony Suspends Rootkit CDs
Sony Rootkit Trojans Emerge
Sony Sued Over Copy-Protection
Sony Facing the Music over Rootkits

Follow Techtree on Twitter



Discussion Board
Thomas
,Seattle, on Dec 09, 2005 03:55 AM
I have been downloading music free for years, and the first time I buy a CD it messes up my computer. I had to pay 70 dollars to get it fixed.
Thomas
,Seattle, on Dec 09, 2005 03:51 AM
I have downloaded music safely off of the the internet using P2P for years. The first CD I buy messes up my computer so bad, I had to pay somebody to fix it.
Bob Walling
,Vancouver, WA, on Dec 08, 2005 08:28 PM
Anyone whom buys any Phony Sony products is really down right STUPID. I will never buy anything Sony again. They will have to change their name and hide.
Sabier
,Hyderabad, on Dec 08, 2005 02:09 PM
Sony seems to be on "Emergency Retreat" mode. One flaw's leading to another. At least they had the sensibility of declaring about MediaMax loophole before someone found out. But I think this little revelation will do the same harm than good. For one, now we'll question every known security component that Sony has incorporated in a range of products. The XCP debacle isn't going to die soon and Sony better come up with an agreement allowing thrid party firms to evaluate and assess any future products that Sony releasesc for security.

Opinion Poll