Computer Science Canada

Sony, XCP, LAME, First4Internet

Author:  Martin [ Thu Nov 17, 2005 9:26 pm ]
Post subject:  Sony, XCP, LAME, First4Internet

So, I imagine all of you have heard about Sony's XCP software installing a rootkit on your PC.

The company that creates this software is called First4Internet. While disecting their software, people have found that it (illegally) uses functions from the open source mp3 encoder LAME. Reuters has more.

Go Sony. Just what Sony needs right before they launch the PS3 against two huge competitors.

Author:  wtd [ Thu Nov 17, 2005 9:42 pm ]
Post subject:  Re: Sony, XCP, LAME, First4Internet

Martin wrote:
So, I imagine all of you have heard about Sony's XCP software installing a rootkit on your PC.

The company that creates this software is called First4Internet. While disecting their software, people have found that it (illegally) uses functions from the open source mp3 encoder LAME. Reuters has more.

Go Sony. Just what Sony needs right before they launch the PS3 against two huge competitors.


Right before? Isn't there talk of delaying the PS3 launch until 2007?

Also... LGPL code in a Sony product? LGPL -> GPL -> Linux. Ohemgee! Sony's gonna get sued by SCO.

Author:  Martin [ Thu Nov 17, 2005 10:28 pm ]
Post subject: 

Last I heard, the talk was for a PS3 launch near the middle of next year. I have no idea though.

Author:  Hikaru79 [ Thu Nov 17, 2005 11:16 pm ]
Post subject: 

Ha ha, how beautifully ironic. In a product that was meant to enforce their own intellectual property, they are actively violating someone else's. Kettle, meet pot.

Author:  Martin [ Thu Nov 17, 2005 11:28 pm ]
Post subject: 

Exactly.

The problem with piracy has never been people ripping their own cd's and sending a few songs to their friends over msn.

The problem is people (particularly in China) ripping movies, putting their own case on them and selling them as the real thing on street corners for $3 each.

Author:  md [ Fri Nov 18, 2005 2:37 am ]
Post subject: 

I kinda wish I had managed to buy one of hte cd's with the root kit... if only to get in on one of the law suits. Laughing

Author:  Martin [ Fri Nov 18, 2005 3:07 am ]
Post subject: 

Yeah really.

Goodbye Sony. Nice knowing you.

Author:  Tony [ Fri Nov 18, 2005 12:34 pm ]
Post subject: 

Posted Image, might have been reduced in size. Click Image to view fullscreen.

Author:  Paul [ Fri Nov 18, 2005 6:46 pm ]
Post subject: 

I've heard about this first in people using it to bypass security measures in MMORPG's like WoW. But blizzard patched this fast though. Some people even asked how to install this rootkit on to their computer without the CD. From what I could gleen, the rootkit seems to be a bad idea and is bad for your computer.

Author:  wtd [ Fri Nov 18, 2005 6:57 pm ]
Post subject: 

Windows is bad for your computer. The rootkit is just a symptom. Smile

Author:  Tony [ Fri Nov 18, 2005 7:32 pm ]
Post subject: 

since they forced users to use their software to play to content, would that mean that one would not be able to listen to the CD in an environment other than Windows? If so -- was that advertised on the product?

Author:  md [ Fri Nov 18, 2005 8:55 pm ]
Post subject: 

If you use the cd in anything other then a windows machine it's just like any other CD; so those of us running linux aren't affected in any way Sad

Author:  Dan [ Fri Nov 18, 2005 10:34 pm ]
Post subject: 

I do not blive a root kit initself could be used to by pass anything in an MMORPG. All a rootkit dose is make a process or progame run so it is unditecatbale by the OS or any other software on the comp (in theroy). Ex. you could not see it in the task list in the task manger. So for it to be a hack for a MMORPG u whould have to be using it to hide an app that steals peoleops passwords or somthing along thos lines.

Easy way to buy pass this instalion if you have such a CD and whont to use it on a windows comp. Hit shift, yep thats right. If you hold down the shift key well puting a cd in to a comp runing windows it stop it from autorunig any instalion apps. By the way under U.S. law i could be sued for millions of dolloars for telling you that. Dosen't it make you love canada?

Author:  Hikaru79 [ Sat Nov 19, 2005 11:47 am ]
Post subject: 

Hacker Dan wrote:
I do not blive a root kit initself could be used to by pass anything in an MMORPG. All a rootkit dose is make a process or progame run so it is unditecatbale by the OS or any other software on the comp (in theroy). Ex. you could not see it in the task list in the task manger. So for it to be a hack for a MMORPG u whould have to be using it to hide an app that steals peoleops passwords or somthing along thos lines.


That's almost exactly it. See, Blizzard released a program called "The Warden" that would scan your running processes to make sure you weren't using a trainer or anything like that (Only while you were playing World of Warcraft, of course). However, Sony's rootkit could hide those processes -- all you had to do was rename them with a $sys$ out in front, and the Warden could no longer see them.

Here's the announcement of it: http://www.securityfocus.com/brief/34

Author:  Dan [ Sat Nov 19, 2005 2:00 pm ]
Post subject: 

Most intresting..........

Author:  [Gandalf] [ Sat Nov 19, 2005 5:31 pm ]
Post subject: 

The funny thing is, you can use their own software to do what it tries to prevent by hiding the copy software process.

Author:  Martin [ Sun Nov 20, 2005 7:17 pm ]
Post subject: 

So Sony is providing mp3's for the people with the disks, as well as replacement, XCP free disks for free.

Nice.

Author:  square74 [ Wed Nov 23, 2005 7:38 am ]
Post subject:  Reply

Paul wrote:
Some people even asked how to install this rootkit on to their computer without the CD.


Do people reply to responses here?:I

Author:  md [ Wed Nov 23, 2005 8:46 pm ]
Post subject: 

That's generally how forums work... perhaps if you had something to say...

on topic though, it seems that the RIAA is for what sony did (surprise surprise), and it's looking highly unlikely that they will face anything more then civil suits; although they are in violation of the DMCA as well as several other computer crime laws in the states (and probably some in Canada too).


: