Feeds

Gaffer tape defeats Sony DRM rootkit

D'oh

Secure remote control for conventional and virtual desktops

Updated Sony's controversial DRM technology - which installs rootkit-style software when users play Sony BMG CDs on Windows PCs - can be defeated easily with nothing more than a piece of masking tape, security researchers have discovered.

Sony BMG has endured a public-relations and legal nightmare after it emerged digital rights management (DRM) software installed on some of its music CDs (First4Internet XCP program) created a handy means for hackers to hide malware from anti-virus scanning programs.

Under pressure, Sony has been forced to recall discs loaded with the technology and create an exchange program for consumers. The music label still faces class action lawsuits by users who allege that their PCs have been damaged by the technology.

Now analyst house Gartner has discovered that the technology can be easily defeated simply by applying a fingernail-sized piece of opaque tape to the outer edge of the disc. This renders session two — which contains the self-loading DRM software — unreadable.

"The PC then treats the CD as an ordinary single-session music CD, and the commonly used CD 'rip' programs continue to work as usual. Moreover, even without the tape, common CD-copying programs readily duplicate the copy-protected disc in its entirety," Gartner (which is at pains to say it doesn't endorse the use of rip technology) explains.

So Sony's DRM technology is not going to prevent tech-savvy home users - much less pirates - from copying CDs to their heart's content even though it loads "stealth" software onto the PCs of the less informed. "After more than five years of trying, the recording industry has not yet demonstrated a workable DRM scheme for music CDs," Gartner concludes. It reckons the music industry will abandon attempts to encumber CDs with DRM software and refocus its efforts on pushing legislation to require that DRM technology be integrated into PCs. ®

Update

Placing gaffer tape on the edge of a CD may make it unbalanced and could cause damage to the disc or (worse) drive as it spins at high speed. A better option, as Reg readers point out, might be to disable Windows autorun.

Remote control for virtualized desktops

Whitepapers

Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Business security measures using SSL
Examines the major types of threats to information security that businesses face today and the techniques for mitigating those threats.