# Sony DRM malware

**URL:** <https://boards.straightdope.com/t/sony-drm-malware/329162>\
**Category:** The BBQ Pit\
**Created:** [November 2, 2005, 8:45pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162 "2005-11-02T20:45:05Z")\
**Posts on this page:** 20\
**Page:** 10

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 20, 2005, 8:44pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/181 "2005-11-20T20:44:15Z")

</div>

> [@Muffin](#):
>
> Thank you **Revtim** and **Fear Itself** , for pointing out what I must do to protect my computer from this.

My pleasure. Be sure to tell everybody you know who might play CDs in their PC how to turn off the autorun. That’s the surest way to pull the teeth from these assholes.

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 20, 2005, 8:53pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/182 "2005-11-20T20:53:32Z")

</div>

> [@gazpacho](#):
>
> **Revtim** Most of the anti virus companies have products for detecting and removing mal ware. Their response has been pretty week.

Well, this is a pretty new thing, and it sounds like a non-trivial task to remove it. This isn’t just deleting some files, that apparently damages the system somehow. To be honest, I’m a bit worried that a mistake in “healing” software from Symantec and others might cause more damage. I’ve heard many a horror story about Symantec products, and in fact I think there’s one in the pit right now.

These goddamn rootkits sound so low-level that maybe the best solution might have to come from Microsoft. It’s supposed to be in their ‘Defender’ software, which is what their malicious software removal tool is going to be called.  
[http://www.eweek.com/article2/0,1895,1886122,00.asp](http://www.eweek.com/article2/0,1895,1886122,00.asp)

---

<div class="post-metadata">

**Author:** ![Rysto](https://avatars.discourse-cdn.com/v4/letter/r/ecccb3/32.png) [@Rysto](https://boards.straightdope.com/u/Rysto)\
**Post date:** [November 20, 2005, 9:27pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/183 "2005-11-20T21:27:47Z")

</div>

Revtim, are you aware that most of the first viruses spread by floppy disk? When people booted from the floppy or opened a file on it, their computer would get infected by the virus. How is the situation any different?

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [November 20, 2005, 9:51pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/184 "2005-11-20T21:51:48Z")

</div>

For anyone who questions my labeling of this as a “virus” – I’m well aware that the Sony situation, since it doesn’t self-replicate, might not fit the classical description of a virus, and any computer professional would understand the difference.

But I think the term “virus” is used by the average computer user to encompass a wide range of baddies, including worms, trojans, malware, spyware and worse. From that point of view, as **Rysto** points out, something that latches on to your system without your knowledge or consent from an infected floppy is identical in function to a Sony-infected CD. The only difference I can see is one is spread by someone who is has no ethics and we have learned not to trust; the other is spread by a manufacturer who, up to now, we had a lot of trust in. Not much of a difference, methinks.

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 20, 2005, 10:33pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/185 "2005-11-20T22:33:38Z")

</div>

> [@Rysto](#):
>
> Revtim, are you aware that most of the first viruses spread by floppy disk? When people booted from the floppy or opened a file on it, their computer would get infected by the virus. How is the situation any different?

From the definition you yourself provided: “The main criterion for classifying a piece of executable code as a virus is that it spreads itself by means of ‘hosts’.”

In the case of the first viruses, the floppies you mention were infected by hosts, infected computers that replicate the virus. In the case of the Sony DRM, an “infected” computer does not replicate the DRM, hence there is not a host and the definition is not met.

In a nutshell: A virus contains code to replicate itself, and an infected machine spreads the virus by executing this code. The Sony DRM does not do this.

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 20, 2005, 10:38pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/186 "2005-11-20T22:38:50Z")

</div>

> [@Musicat](#):
>
> But I think the term “virus” is used by the average computer user to encompass a wide range of baddies, including worms, trojans, malware, spyware and worse.

Yes, people use the term that way, but it’s incorrect and misleading, and takes away the usefulness of the term “virus”. The OP used the term “malware”, which is a good general term for this crap (and adware, to boot).

---

<div class="post-metadata">

**Author:** ![GIGObuster](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gigobuster/32/421_2.png) [@GIGObuster](https://boards.straightdope.com/u/GIGObuster)\
**Post date:** [November 20, 2005, 10:40pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/187 "2005-11-20T22:40:18Z")

</div>

> [@Revtim](#):
>
> These goddamn rootkits sound so low-level that maybe the best solution might have to come from Microsoft. It’s supposed to be in their ‘Defender’ software, which is what their malicious software removal tool is going to be called.  
> [http://www.eweek.com/article2/0,1895,1886122,00.asp](http://www.eweek.com/article2/0,1895,1886122,00.asp)

It’s about time that Microsoft began protecting the humans stranded on other planets from their alien abductors! 😃

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 20, 2005, 10:50pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/188 "2005-11-20T22:50:37Z")

</div>

> [@GIGObuster](#):
>
> It’s about time that Microsoft began protecting the humans stranded on other planets from their alien abductors! 😃

If they follow it up with MS Robotron, that would sweet…

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [November 21, 2005, 4:04pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/189 "2005-11-21T16:04:34Z")

</div>

> [@Revtim](#):
>
> In a nutshell: A virus contains code to replicate itself, and an infected machine spreads the virus by executing this code. The Sony DRM does not do this.

That’s right, but it is interesting that an exact copy of an infected CD will contain the bad code as well as the music, just like an exact copy of an infected floppy.

It’s also interesting that the Sony scheme does nothing to prevent a user making an exact copy of the “protected” CDs just like the unprotected ones. It only affects ripping.

And someone has found that the whole scheme can be defeated in much the same manner as an older scheme where a felt pen marker used over a certain spot on the disk causes that track to be unreadable and the computer ignores the protection software. The suggestion here is to use tape, but it seems likely that a marker would work, too:

[http://www.techtree.com/techtree/jsp/article.jsp?article\_id=69297&cat\_id=582](http://www.techtree.com/techtree/jsp/article.jsp?article_id=69297&cat_id=582)

---

<div class="post-metadata">

**Author:** ![asterion](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@asterion](https://boards.straightdope.com/u/asterion)\
**Post date:** [November 21, 2005, 4:20pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/190 "2005-11-21T16:20:34Z")

</div>

[And now the RIAA is in it.](http://yro.slashdot.org/article.pl?sid=05/11/21/1232207&tid=233&tid=17) Stupid RIAA.

---

<div class="post-metadata">

**Author:** ![mhendo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mhendo/32/3159_2.png) [@mhendo](https://boards.straightdope.com/u/mhendo)\
**Post date:** [November 21, 2005, 4:34pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/191 "2005-11-21T16:34:24Z")

</div>

> [@asterion](#):
>
> [And now the RIAA is in it.](http://yro.slashdot.org/article.pl?sid=05/11/21/1232207&tid=233&tid=17) Stupid RIAA.

Un-fucking-believable.

And those cunts at the RIAA wonder why consumers don’t trust them.

---

<div class="post-metadata">

**Author:** ![Tuckerfan](https://avatars.discourse-cdn.com/v4/letter/t/eada6e/32.png) [@Tuckerfan](https://boards.straightdope.com/u/Tuckerfan)\
**Post date:** [November 21, 2005, 11:32pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/192 "2005-11-21T23:32:58Z")

</div>

[Texas is using it’s anti-spyware laws to go after Sony!](http://www.businessweek.com/ap/financialnews/D8E14D486.htm?campaign_id=apn_tech_down&chan=tc)

> [@](#):
>
> The Texas spyware law allows the state to recover damages of up to $100,000 in damages for each violation. Abbott said there were thousands of violations, and that any money would go to the state.

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 22, 2005, 12:40am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/193 "2005-11-22T00:40:58Z")

</div>

> [@Musicat](#):
>
> That’s right, but it is interesting that an exact copy of an infected CD will contain the bad code as well as the music, just like an exact copy of an infected floppy.

I’d find it interesting if an exact copy DIDN’T have everything the original had, 'cause that’s kind of the definition of an “exact copy”. 😉

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [November 22, 2005, 12:57am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/194 "2005-11-22T00:57:05Z")

</div>

> [@Tuckerfan](#):
>
> [Texas is using it’s anti-spyware laws to go after Sony!](http://www.businessweek.com/ap/financialnews/D8E14D486.htm?campaign_id=apn_tech_down&chan=tc)

So sweet. It kinda makes me glad this shit secretly transmits details about what music the PC is playing, because that makes the anti-spyware law apply.

Now would be a good time for them to make legislation that would make surreptitious installation of any software, spyware or not, against the law. Close that loophole that might have made this Sony shit legal if it didn’t spy. (Assuming these laws do not already exist)

And extra penalties if it cannot be deleted easily and safely by simply removing it with “add/remove programs”.

---

<div class="post-metadata">

**Author:** ![Tuckerfan](https://avatars.discourse-cdn.com/v4/letter/t/eada6e/32.png) [@Tuckerfan](https://boards.straightdope.com/u/Tuckerfan)\
**Post date:** [November 22, 2005, 4:50am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/195 "2005-11-22T04:50:56Z")

</div>

Oh, this is interesting. I’m reading the latest issue of _Maximum PC_ and according to it, Sony’s doing a lot of firmware upgrades to it’s PSPs to prevent people from running things like emulators for non-PSP games on the things. Given that the PSP also has a web browser now, I’m just wondering if the thing doesn’t “phone home” to rat you out as well.

---

<div class="post-metadata">

**Author:** ![asterion](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@asterion](https://boards.straightdope.com/u/asterion)\
**Post date:** [November 22, 2005, 5:00am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/196 "2005-11-22T05:00:56Z")

</div>

> [@Tuckerfan](#):
>
> Oh, this is interesting. I’m reading the latest issue of _Maximum PC_ and according to it, Sony’s doing a lot of firmware upgrades to it’s PSPs to prevent people from running things like emulators for non-PSP games on the things. Given that the PSP also has a web browser now, I’m just wondering if the thing doesn’t “phone home” to rat you out as well.

I figure it’s more that all the games that are available for PSP suck ass and nobody in their right mind would buy a UMD.

---

<div class="post-metadata">

**Author:** ![Linus\_Van\_Pelt](https://avatars.discourse-cdn.com/v4/letter/l/ebca7d/32.png) [@Linus\_Van\_Pelt](https://boards.straightdope.com/u/Linus_Van_Pelt)\
**Post date:** [November 22, 2005, 10:24am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/197 "2005-11-22T10:24:51Z")

</div>

Bill Amend’s take on the topic…

[Foxtrot (10/21/05).](http://www.ucomics.com/foxtrot/2005/11/21/)

---

<div class="post-metadata">

**Author:** ![Ponder\_Stibbons](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ponder_stibbons/32/343_2.png) [@Ponder\_Stibbons](https://boards.straightdope.com/u/Ponder_Stibbons)\
**Post date:** [November 22, 2005, 2:00pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/198 "2005-11-22T14:00:08Z")

</div>

Damn, **Tuck** , you beat me to it. Well, [here](http://www.msnbc.msn.com/id/10141840/) is another article on the subject anyway.

---

<div class="post-metadata">

**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\
**Post date:** [November 22, 2005, 3:26pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/199 "2005-11-22T15:26:39Z")

</div>

This is a good time to [[URL=www.copyright.gov/1201/comment\_forms/index.html](http://URL=www.copyright.gov/1201/comment_forms/index.html)]send your comments on DMCA rulemaking to the Copyright Office[/A]. Technically, cleaning this crap out of your system is probably illegal, and antivirus companies aren’t going to want to touch it unless the rules are corrected on this point.

---

<div class="post-metadata">

**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\
**Post date:** [November 22, 2005, 3:28pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/200 "2005-11-22T15:28:05Z")

</div>

Fixed link:

> [@Steve MB](#):
>
> This is a good time to send your comments on DMCA rulemaking to the Copyright Office. Technically, cleaning this crap out of your system is probably illegal, and antivirus companies aren’t going to want to touch it unless the rules are corrected on this point.

[Previous page](https://boards.straightdope.com/t/sony-drm-malware/329162.md?page=9)

[Next page](https://boards.straightdope.com/t/sony-drm-malware/329162.md?page=11)
