WARNING: "This IS NOT an exercise" !!! (sony)

[boxopen]

AVISO: Caso tenham comprado (ou feito download) de um destes CD's (entre outros!) então GARANTIDAMENTE têm o PC infectado.
E com uma coisita chamada "rootkit"... e perguntam vocês... "o que é um roootkit"?...NEM QUEIRAM SABER !!!
Ah... esqueci-me de dizer... parece que o "bicho" só sai mesmo do Windows FORMATANDO o disco!
Parece que a SONYmusic meteu decididamente a "pata na poça"! A Warner e as outras estão muito caladas!

Eis a lista compilada pela BBC (entre parêntesis estão uns comentários que achei interessantes ficarem):
* Trey Anastasio - Shine a light on Sony's DRM process
* Celine Dion - On ne Change Pas ("One does not change"...Big media and it's desire to control your music)
* Neil Diamond - 12 Songs (and some DRM rootkitty goodness)
* Our Lady Peace - Healthy in Paranoid Times (paranoid because of Sony's DRM)
* Chris Botti - To Love the music Again
* Van Zant - Get Right with the Man (need I say more?)
* Switchfoot - Nothing is Sound (certainly not Sony's DRM policy)
* The Coral - The Invisible Invasion of rootkits
* Acceptance - Phantoms (aka "rootkits")
* Susie Suh - Susie Suh (Susie → Sue → your ca$h or 12-year-olds or grandmothers)
* Amerie - Touch (just a light "touch" of our rootkit on your machine)
* Life of Agony - Broken Valley (removing a rootkit? that's the "life of agony")
* The Bad Plus - Suspicious Activity ("the bad plus" is a rootkit...which is certainly "suspicious activity" by Sony on your machine)
* The Dead 60s - The Dead 60s (60s → freedom → now dead)
* Dion - The Essential Dion ("essential" to get our rootkit on your machine")
* Natasha Bedingfield - Unwritten ("unwritten" at least by Sony...they had someone else write their rootkit for them)
* Ricky Martin - Life (what Sony needs to get; and what you give up in the process of accepting their EULA or trying to remove a rootkit)
* Horace Silver Quintet - Silver's Blue
* Gerry Mulligan - Jeru
* Dexter Gordon - Manhattan Symphonie

Links para a "confusão"... encontram em qualquer lado, mas para os mais preguiçosos é só clicar:
http://www.google.pt/search?hl=pt-PT&q=%2Brootkit+%2Bsony+%2B%22van+zant%22&btnG=Pesquisa+Google&meta=
(Claro que, por aqui, com tudo em Linux... a vida continua uma tranquilidade!)
_________________
"In a world without walls and fences, who needs windows or gates?" [Linux+Apache+MySQL+PHP]*[OpenOffice+Opera+Gmail]*Clix

[AdSense]

[bernardolx]

hehehehe será desta que o Windows vem abaixo ??
FORMAT C:

[Red_Beret]

é triste
_________________

[Kill Me]

pa ver s eles aprendem

[boxopen]

Aparentemente eles tentaram meter rapidamente a marcha-atrás:
"Sony BMG said on Friday it would stop making CDs that use a controversial technology to protect its music against illegal copying."
http://today.reuters.com/business/newsarticle.aspx?type=media&storyID=nL11762691&imageid=&cap=

Parece que o fizeram porque a coisa alastrou mesmo à séria... processos incluidos:
"At last count six class-action lawsuits have been started against the company."
http://news.bbc.co.uk/1/hi/technology/4427606.stm

Aquela porra é mesmo spyware, ou pior... segundo o Kaspersky:
"The software can also mess up your system when you try and remove it from your computer."
http://www.viruslist.com/en/weblog?weblogid=173255368

MAS HÁ MAIS para se descobrir... ora leiam lá a penúltima linha no Kaspersky:
"It may be that some games have similar rootkit 'protection'."

Finalmente... como um mal nunca vem só:
"A new trojan - Backdoor.IRC.Synd.a and its variant Backdoor.IRC.Synd.B, which use the cover provided by the Sony DRM component to hide, have been detected by BitDefender Labs and is in the wild." (no total já vai em 3 trojan)
http://www.techtree.com/techtree/jsp/article.jsp?article_id=69110&cat_id=582

Sem dúvida que, quanto aos trojans, devem ser "do melhor" porque... It's a SONY trojan !!!

Entretanto, os CD's não estão à venda - que se saiba - na Europa (excepto em compras da Amazon e afins, e nos downloads da Mula)
Mas vêm a caminho... e a grande velocidade... a menos que "choquem" contra uma parede como aconteceu agora nos EUA:
"Sony BMG Copy Protection System Comes to Europe"
http://www.dw-world.de/dw/article/0,,1772717,00.html?maca=en-gbf_BE_teaser-102-rdf
_________________
"In a world without walls and fences, who needs windows or gates?" [Linux+Apache+MySQL+PHP]*[OpenOffice+Opera+Gmail]*Clix

[Patagoncio]

Posso estar a mandar uma grande bácora, mas... não terá algo a ver com esta notícia? :

in http://exameinformatica.clix.pt/noticias/software/212513.html

[boxopen]

[Patagoncio]

[Patagoncio]

in http://exameinformatica.clix.pt/noticias/mercados/212520.html

Microsoft classifica de spyware o sistema anti-pirataria da Sony

[flateric]

Por isso é que eu n compro CDs... saca-los da mula é mais fácil!!!

[bernardolx]

pois tirar os CD's do eMule ou outro serviço P2P é mais fácil, mas para os tirar de lá.. alguém teve de os por a circular, e se calhar comprou.os.. logo vêm INFECTADOS , pelo que sei essa "tecnologia anti-cópia" vai deixar de ser utilizada... pode ser que venha uma melhor... tipo ROOTKIT 2+

[boxopen]

E, quando tudo apontava para não haver PIORES notícias... eis que a SONY se "suplanta" novamente... em menos de 15 dias!!!

"... Just when you thought it couldn't possibly get any worse, here comes another report of Sony DRM anti-customer treachery. J. Alex Haldeman on Freedom to Tinker describes in detail yet another DRM scheme from Sony, SunnComm's MediaMax. It's not a rootkit this time, like XCP. He calls it spyware. While Sony has said it has temporarily halted shipments of the XCP rootkit, it hasn't promised to stop shipping CDs with this junk on it, from all I can determine. Haldeman describes how it works at length, but here's the executive summary:

They install software without meaningful consent or notification, they include either no means of uninstalling the software or an uninstaller that claims to remove the entire program but doesn’t, and they transmit information about user activities to SunnComm despite statements to the contrary in the end user license agreement and on SunnComm’s web site.
...
But before the agreement appears, MediaMax installs around a dozen files that consume more than 12 MB on the hard disk. ...These files remain installed even if you decline the agreement. One of them, a kernel-level driver with the cryptic name “sbcphid”, is both installed and launched. This component is the heart of the copy protection system. When it is running, it attempts to block CD ripping and copying applications from reading the audio tracks on SunnComm-protected discs. MediaMax refrains from making one final change until after you accept the license—it doesn’t set the driver to automatically run again every time Windows starts. Nevertheless, the code keeps running until the computer is restarted and remains on the hard disk indefinitely, even if the agreement is declined.
...
So, another loathsome Sony DRM scheme, which installs a driver even if you say no to the EULA, calls home with info about you, and can't be uninstalled with normal techniques. Both Macs and Windows are vulnerable, although at least on Macs there is no autoplay..."
A história completa aqui: http://www.groklaw.net/article.php?story=20051115001431715
_________________
"In a world without walls and fences, who needs windows or gates?" [Linux+Apache+MySQL+PHP]*[OpenOffice+Opera+Gmail]*Clix

[boxopen]

O FEITIÇO virou-se contra o FEITICEIRO... a história começa a ser HILARIANTE !!!

Lembram-se daquele fulano que crackou as protecções dos DVD's e de quem os tipos das editoras (SONY incluída) andaram à caça?
Pois bem... o DVD Jon descobriu que... a SONY anda a fazer PIRATARIA de software !!!
Divirtam-se a ler... http://hack.fi/~muzzy/sony-drm/

"... I've just extracted the XCP.DAT that comes on the CD, and inside I've found the most wondrous stuff. I don't know if this is old news to anyone, but it appears there's stuff like mpglib.dll, some version of bladeenc dll, etc. Both of these are LGPL, and my understanding is that these can't be used (or even distributed?) without mentioning about it in the documentation. This might be why F4I never answered about the LGPL claims, there's LGPL in the XCP alright, and even though LAME was accidently linked into GO.EXE it's used in other binaries

There's also Adaptec's ASPI stuff on the CD, but apparently there's permission to distribute this stuff. I have no idea, though, I'd have to research about this a bit more. These end up very visible in the installed system, though (TMPX dir in windows\system32) so maybe even F4I isn't stupid enough to infringe with these files

Ohyeah, Id3Lib is here as well, in very visible form. There's nothing mentioned about this on the CD, however sony ships Id3lib sources on their site along their OpenMG stuff. It's still copyright infringement since it's not mentioned on the CD and no license is provided, and thus doesn't comply with the license. LGPL requires source or ability to link against the library dynamically, and it always requires notification that the code is being used as well as a copy of LGPL license. Further, LGPL requires that libraries that use LGPL must provide a license that allows debugging and linking...

... The party just keeps on going. In addition to above mentioned LAME code found here, it appears there's GPL code as well. I'm not a lawyer, but this could be a DMCA/EUCD violation too? The code in question is VLC's demux/mp4/drms.c -- the de-DRMS code which circumvents Apple's DRM. The control flow is the same, the constants are equal, the two magic arrays are equivalent as well. This includes the p_secret2 string which is rot13'd Apply copyright string (used as data)..."
_________________
"In a world without walls and fences, who needs windows or gates?" [Linux+Apache+MySQL+PHP]*[OpenOffice+Opera+Gmail]*Clix

[boxopen]

Depois de apanhada também a PIRATEAR software (ver mensagem anterior)...

SONY divulga a lista completa dos CD's INFECTADOS... e afinal são 52 álbuns:
http://cp.sonybmg.com/xcp/english/titles.html
_________________
"In a world without walls and fences, who needs windows or gates?" [Linux+Apache+MySQL+PHP]*[OpenOffice+Opera+Gmail]*Clix