Sony DRM rootkit part 5: We steal code too

[AniAko]

It's a shame, but it seems the Sony DRM story isn't quite yet played out. Slashdot (http://yro.slashdot.org/article.pl?sid=05/11/15/1250229&from=rss) posted this article which claims Sony ALSO violated an Open source license, LGPL.

...the Sony DRM software (or rootkit, if you may prefer) contains code from the LAME MP3 encoder project, which is licensed under the LGPL. However, the source code has not also been distrbuted, hence breaching the license.

[Varsity]

Also: http://www.boingboing.net/2005/11/15/sony_infects_more_th.html

That's DNS networks, not local networks. I don't know how many LANS/IPs are behind each DNS but it's got to be several thousand at the very least. It's not quite as bad as they make it out but still pretty nasty.

[bapenguin]

WEEEEEEEEEEEEEEEEEEEEEEE. The rootkit ride continues!

[Roc Ingersol]

I wouldn't get too excited about this one.
The rootkit has samples of code from the LAME library (and other encoders as well) as part of a database it uses to locate software that can encode mp3s.

It compares the programs that launch on your system, to its database so it can hide the CD from certain programs. (it's kinda like AV software, or Blizzard's Warden that way - just replace 'virus' or 'cheat' with 'encoder')

It's quite possible this is covered under fair use. It all depends on what they've actually distributed, and the jury's still out on that.

Not that this makes them any better.
But who needs false accusations when we've got a smoking gun?

[Captain Awesome]

This aint yo father's copy protection!

[Citizen Philip]

Reminds me of the problem Blizzard how awhile back, where they *really* snooped around your system and reported info back to HQ. Of course, this ismuch worse considering how widely spread music CDs for a computer are, compared to a game company years back.

I can't wait for the new Windows, this kind of shit will be built right into the system it will be GREAT!





If you own a company that sells software.

[RandomViolence]

Simply stunning. Stealing fucking source code to crack open computers? Not another dime to you, Sony. Not another fucking dime.

Also: http://www.boingboing.net/2005/11/15/sony_infects_more_th.html

That's DNS networks, not local networks. I don't know how many LANS/IPs are behind each DNS but it's got to be several thousand at the very least. It's not quite as bad as they make it out but still pretty nasty.

I would think DNS networks would be a lowball figure, as if a DNS server has it cached that means AT LEAST one machine is infected, possibly a hell of a lot more. I think that's right, anyway. It's been a while since I did real networking, though. I could be completely off.

[Doctor Setebos]

I wouldn't get too excited about this one.
The rootkit has samples of code from the LAME library (and other encoders as well) as part of a database it uses to locate software that can encode mp3s.

It's quite possible this is covered under fair use. It all depends on what they've actually distributed, and the jury's still out on that.
That's the point, though. There really is no "fair use" under GPL. If you use GPL'd software/tools in your own software/tools, you need to release your source code under a GPL OS license in order to be in compliance.

To be honest, GPL has never really been tested heavily in court, so we could potentially be looking at the first major test of the power of GPL in our modern day technological environment. Could be interesting.

Oh, and damn Sony.

[Vandenh]

>I can't wait for the new Windows, this kind of shit will be built right into the system it will be GREAT

Actually it will be... apparently next version of windows will have root-kit protection build in (basically protecting the OS files from modification).

Sony seems to be on a roll... there is also an article on The Register about Sony artificially inflating online retailer prices in Europe. Expect a big fat fine for that one as well.

[KarmaGhost]

Wow, i wonder which station this train'll stop at...

[Roc Ingersol]

That's the point, though. There really is no "fair use" under GPL. If you use GPL'd software/tools in your own software/tools, you need to release your source code under a GPL OS license in order to be in compliance.
The terms of the LGPL apply to redistribution.
Redistribution didn't happen if we're only talking about a few hundred bytes. (which, atm, is all we're talking about)

[jacktion]

Do you think that this will affect PS3 sales? Negatively, I mean. Will the lashback and ill will towards sony make people avoid buying a PS3? I personally wasn't planning on it, but this seems to cement my opinion that Sony as a company is dirty and on the way down. They are doing massive layoffs and posting loss after loss. I will stay away from this stinker.

[Player 1]

It'll affect a few sales. Not the masses.

In the UK* surveys show PSP to be the most wanted Xmas toy and PS3 to be highest in consumers minds about which next gen machine they'd go for - this is just consumer herd mentality. Say 'PlayStation' to enough consumers and you can bet it's the name they'll go for above the relatively unknown (by consumer standards) X360 or Revolution.

Vocal gamers are the minority. People who know about the Sony rootkit farce are the minority.

Sony'll suffer a teensy bit. They GTA will come out and everyone will rush out and buy Sony all over again.

[DoubleUranium]

I think they found more than just a few tables to look for ala antivirus in the Sony rootkit. I would love to see both the LGPL/GPL properly upheld in court, and for Sony to have to pay a shitload of money to the lame guys for copyright infringement.

[Reanimated]

I hope Vista is out before Blu Ray hits. I cringe to think how badly trying to play a Blu Ray disc on my computer would fuck XP.

I'm down with the Sony boycott that many of the tech sites and bloggers have been calling for.

[Ludoc]

So, in order to protect their music from piracy, Sony is pirating code? Or am I just totally confused?

[AniAko]

Technically they're not STEALING software, they're just not abiding to the license under which the software is distributed. However, by not abiding to the license, they are treating the code as their own creation, which can be considered piracy.

My guesses are that nothing will become of the License issue, more like a sweet icing on the cake that is Sony's complete screw up, but who knows?

[Serapth]

It'll affect a few sales. Not the masses.

In the UK* surveys show PSP to be the most wanted Xmas toy and PS3 to be highest in consumers minds about which next gen machine they'd go for - this is just consumer herd mentality.

Not calling bullshit on you, im truly interested. Do you have a link to any of these surveys re the PSP?

I find it hard to believe its among the most wanted XMas toys this year considering how it wasnt that well received at launch, atleast State Side. The PSP did Ok, but not stellar. I have trouble believing there is that much buzz for it at this point.

[ÜberJumper]

Wait, didn't sony contract the rootkit development out to a third party? Shouldn't they be recieving some outrage as well?

[Serapth]

Your right, the development of the rootkit wasnt actually done by sony, they bought it from a third party dev. Actually, that pretty much protects them from any breach of license type lawsuits... well, other then possibily being forced to pull the products from market, which they are already doing.

This is pretty much a non-story... but those LGPL people like getting in a tizzy about this kinda stuff :)