WARNING: Audio CDs from Sony
PostPosted: Wed Nov 02, 2005 5:11 am
There is an article today on:
http://blogs.washingtonpost.com/securityfix/
which describe how an anti-pirate software found on Audio CDs from Sony installs itself on your machine without warning to the user.
This is potentially VERY dangerous as it leaves a huge open door thereafter for viruses and spyware.
This is the reply from a well know member of the CDR forum:
THANK YOU SONY!
http://blogs.washingtonpost.com/securityfix/
which describe how an anti-pirate software found on Audio CDs from Sony installs itself on your machine without warning to the user.
This is potentially VERY dangerous as it leaves a huge open door thereafter for viruses and spyware.
This is the reply from a well know member of the CDR forum:
And this is the only solution from another very well known member:"You are not warned or asked about this software installation. The
software can be removed, but there is no standard uninstall for it. If it
is partly removed, it can disable your CD drive.
However, there are several exciting tools for virus and worm writers
distributed with this CD. For example, it will hide files with names
beginning with $sys$ utterly - even "show hidden files" will not disclose
these files exist.
This means that Sony has provided a tool which will make it impossible for
antivirus and antispyware programs to function properly, as soon as
someone takes advantage of this software distributed on Sony music discs.
There is plenty of information about how this works and how it needs to be
installed available on the Internet. We can expect a new crop of spyware,
viruses and worms to begin using this new tool shortly. And we can thank
Sony for making it available to people. (from Paul)"
Just so that you are aware... remember, this is not only for the ones who might want to "backup" the audio CD: It is also in the case where you are just playing it and then go about browing the internet... oh! and just in case you ask: removing the CD from the drive does not de-install the software from Sony... of course not."If the disc does not autorun or at least autoplay, then the software
will not be installed automatically. Therefore, at the least, one can
open the disc and copy its audio tracks. That copy will be superior to
the original: it will have the same audio but no "protection". It is
hard to imagine a more inspiring situation for the professional pirates. (from Mike)"
THANK YOU SONY! 
