Feeds

SunnComm to sue ‘Shift key’ student for $10m

Alleges DMCA violation, damage to its reputation

  • alert
  • submit to reddit

Top three mobile application threats

SunnComm has threatened Princeton PhD student Alex Halderman with the Digital Millennium Copyright Act (DMCA) for exposing a key weakness in the company's latest CD copy protection technology, MediaMax CD3.

The company said today it will take legal action against Halderman for revealing how MediaMax CD3 can be bypassed by holding down a Windows PC's Shift key when a protected disc is inserted.

Doing so temporarily disables Windows' Autorun facility - which many Reg readers have turned off anyway, they tell us - which prevents a small installation app from being launched off the CD. That software installs a device driver which detects the presence of a copy-protected disc and prevents attempts to copy such CDs.

The installer apparently asks for the users permission to install the file, and does not do so unless the user clicks on the equivalent of an OK button. If the UK rejects the 1800-word End User Licence Agreement (EULA), the disc is automatically ejected.

The EULA says: "This audio compact disc utilizes MediaMax technology by SunnComm to deliver enhanced features to your computer. In order to properly utilize this CD on your computer, it is necessary to install a small software program on your computer hard drive."

It's worth noting that the BMG distributed CD Halderman tested lacks the familiar CD logo. Thanks to the inclusion of SunnComm's technology the disc can no longer be described as a CD - an item that has a very specific description as detailed in the standards documentation written by the format's creators, Sony and Philips. A disc that doesn't follow the standard to the letter can't be described by its supplier as a CD.

Odd, then, that the EULA, as quoted above, claims it is a CD - and is arguably in violation of the CD licensing regulations. Just a thought...

Bypassing Autorun allows full access to the CD's songs.

As revealed by The Register yesterday, Halderman detailed his discovery in an online paper published after he analysed a CD - Anthony Hamilton's Comin' From Where I'm From - which incorporates the technology.

SunnComm today said the paper was "erroneous" and contains "false conclusions". On the back of said, "Halderman and Princeton University have significantly damaged SunnComm's reputation and caused the market value of SunnComm to drop by more than $10 million," the company alleges.

And then there's the DMCA angle. SunnComm claims Halderman broke the law by revealing the name of the driver the app installs.

In a statement released today, SunnComm said: "SunnComm intends to refer this possible felony to authorities having jurisdiction over these matters because: 1. The author admits that he disabled the driver in order to make an unprotected copy of the disc's contents, and 2. SunnComm believes that the author's report was 'disseminated in a manner which facilitates infringement' in violation of the DMCA or other applicable law".

SunnComm's statement is, of course, a tacit admission that Halderman's information is correct: "Once the file is found and deleted according to the instructions given in the Princeton grad student's report, the MediaMax copy management system can be bypassed resulting in the copyright protected music being converted or misappropriated for potentially unauthorized and/or illegal use," it says.

If Halderman is incorrect, then the outcome described above can't happen, and the DMCA hasn't been violated. Yet SunnComm claims the law has been broken - ergo Halderman's conclusion is correct.

In which case, SunnComm's technology is indeed flawed, and the company can't argue the student has damaged its reputation. We'd say it did that itself by relying on a technology that any user - and indeed many already do - can circumvent perfectly legally. Bypassing Autorun by holding down the Shift key is a documented feature, after all.

"Critical reviews written in part as an attempt to pressure the record industry into abandoning further development of technically protected audio CDs are ethically suspect when based on inaccurate assumptions," says SunnComm - without stating what those assumptions are or in what way they are inaccurate.

Of course, legal action was a possibility Halderman was well aware of when he published his paper. "I hardly think that telling people to push shift constitutes trafficking in a (copy-protection technology) circumvention device," Halderman yesterday told US newswires. "I'm not very worried." ®

Related Story

Shift key breaks latest CD anti-rip tech - grad student

The Essential Guide to IT Transformation

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
Airbus promises Wi-Fi – yay – and 3D movies (meh) in new A330
If the person in front reclines their seat, this could get interesting
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Samsung threatens to cut ties with supplier over child labour allegations
Vows to uphold 'zero tolerance' policy on underage workers
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.