Sony Recall and Fix

[svasutin]

Considering Sony said on Tuesday they will recall the CDs, I figured they would shoot an email to their vendors.

http://news.com.com/Sony+recalls+risky+roo..._3-5954154.html

Nope, today I went to a few music and tech stores and asked if they were familiar with the "Sony Issue". Only 1 person, in a PC repair department, out of 30 people, across 5 stores was familiar with the issue.

I was looking over the Foo Fighters CD, and couldn't tell if it had copy protection; some of the CDs are clearly marked with "xcp" but some are not. The "information on the back" of the Foo Fighters is written in white blurry text, on a light ginger background. Nowhere can you tell it contains a rootkit; much less read the requirements; I do have good eyes. However, there is a hugh mark about "copying being illegal"<-a load of garbage.

Anyway, since the malware is poorly written, and is a driver, it causes issues with devices connected to an ATA channel, but wait, there are also SATA devices....

Here's the thing,

Go to tech and music stores and tell them about the issue. Point out

1) A customer plays the CD in a Windows or Apple system; does not need to copy, just listen

2) a customer clicks cancel at the prompt

3) the driver is installed anyway

1) the driver allows viruses, spy-ware, and spamming tools to be installed undetected by any AV or AS (anti-spy)

2) Since this is a known issue, however, some AV compaines have provided a link to Sony's site to download a patch

3) For users whom downloaded the patch, their browsers now allow anyone to download, install, and run anything . Sony has pulled the malware from their site, but have left users hanging while they (sony) come up with another fix.

4) Only current subscriptions of ZoneAlarms AV, Computer Associates AV (not mcafee), and the free until 31 December Msft Anti-Spy correct the issue. Caution against Msft AS as reInfection is always possible.

1) it is unknown how many CD titles are effected, to date, between 15-47 CDs.

1) Tell the owners/managers to google or yahoo! sony rootkit

2) Let the owners/managers know that Sony has already recalled the CDs, and is working with Amazon

1) customers might think their drives are bad, and so they purchase a replacement

2) the issue still exists so they return the device

3) the store drops the prices and increases its inventory

4) Ensure the techs are aware of this issue, and note the issue on any reciept, so any paid support provided can be re-embursed to their clients, or be charged to Sony directly.

5) this issue has existed since late May.

It is number 2, 3, and 5 that get the attention.

Here's the other weird thing, today I recieved a pre-approved application for a Sony Credit Card. The last time I bought anything from Sony, with a credit card, was 5+ years ago, and I don't think the card had my name. However,

1) I have used my name and address for downloading the 'patch' for clients.

[svasutin]

http://www.upsrow.com/sonybmg/

Is an official list of titles that can be returned.

You will receive an e-mail with a link to your MP3 downloads upon receipt and verification of your XCP CDs.

Once we receive your XCP content protected CD(s), we will process your exchange. Please allow 3-6 weeks for delivery of the replacement(s).

To check the status of your MP3 downloads, please email our Download Help Desk at xcpexchange@sonybmg.com. Please note your link will not be emailed to you until your return has been received and processed.

Guess we have to pay to be protected.