More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home http://www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html A quick look through the trace log confirmed the users comment: the Player does send an ID to a Sony web site.This screenshot shows the command that the Player sends, which is a request to an address registered to Sony for information related to ID 668, which is presumably the CD's ID: In response the Sony web site reports the last time a particular file was updated: I dug a little deeper and it appears the Player is automatically checking to see if there are updates for the album art and lyrics for the album it's displaying. This behavior would be welcome under most circumstances, but is not mentioned in the EULA, is refuted by Sony, and is not configurable in any way. I doubt Sony is doing anything with the data, but with this type of connection their servers could record each time a copy-protected CD is played and the IP address of the computer playing it.
ベンダーがマルウェアをインストールするなんて…… http://www.itmedia.co.jp/enterprise/articles/0511/07/news053.html ソニー BMG は rootkit 削除パッチの取得に際し、個人情報を収集 またその個人情報はソニー BMG のマーケティング活動に利用する ことを前提に収集している SONY BMG PRIVACY POLICY http://www.sonybmg.com/privacypolicy.html > We use the information we collect from you to allow you to > participate in the site activities for which the information is collected. > For example, when you give us your e-mail address in order to receive > updates on a particular artist or type of music, that address is added to > the e-mail list for that artist or type of music. > Except on sites devoted to particular recording artists, we may share > the information we collect from you with our affiliates or send you e-mail > promotions and special offers from reputable third parties in whose > products and services we think you may have an interest.We may also > share your information with reputable third-parties who may contact you directly.
SONY 製 rootkit、スパイウェアとして正式登録 XCP.Sony.Rootkit http://www3.ca.com/securityadvisor/pest/collateral.aspx?cid=76345 The following are the Spyware Encyclopedia pages for the pests which relate to Sony BMG's rootkit-based Digital Rights Management software, which is being distributed on audio CDs.
ピーター・マッチポンプ・ノートン先生、ソニー製トロイの木馬の検出のみ対応 ■SecurityRisk.Aries 最終更新日 2005年11月08日 (米国時間) http://www.symantec.com/region/jp/avcenter/venc/data/jp-securityrisk.aries.html > 名称: XCP > ベンダー: First 4 Internet Ltd. > 影響を受けるシステム: Windows 2000, Windows NT, Windows Server 2003, Windows XP > リスクインパクト: 低 >動作 > SecurityRisk.Aries は、次の文字列で始まるすべてのプロセス、ファイル、フォルダや > レジストリサブキーを隠す、ルートキットです。 > 警告: このセキュリティリスクを手動で削除することは、標的のコンピューターの > オペレーティングシステムにダメージを与える可能性があり、また製造業者の > エンドユーザーライセンス契約に違反する可能性もあります。 トロイの木馬である SONY rootkit のみを検知するが、駆除はしない。 また、スパイウェア(CA社の定義による)である Media Player の DRM に ついては検知すらしない
Mark Russinovich 氏 Blog 更新!! Sony: No More Rootkit - For Now http://www.sysinternals.com/blog/2005/11/sony-no-more-rootkit-for-now.html アンチウイルスベンダーの rootkit 削除方法は SONY BMG のと同じで、不完全だ。 システムクラッシュの可能性もあるし。 それよか、もっと良い方法があるから公開するね。 1.スタートメニューから「ファイル名を指定して実行(R)...」を選択して、ダイアログボックスを開く 2.次ののコマンドを実行する "cmd /k sc delete $sys$aries" 3.再起動させる
ソニーウイルス強制感染タイトルは約50タイトル タイトル一覧は近日中に公開予定 Top Questions and Answers about XCP Content Protection Technology http://cp.sonybmg.com/xcp/english/faq.html しかし、クラッシュやクラッキング等の被害を被った顧客への補償については 言及なし。
【公式】悪性ウイルス入り、CD風円盤一覧 CD’s Containing XCP Content Protection Technology http://cp.sonybmg.com/xcp/english/titles.html ARTIST ALBUM ITEM NUMBER(S) UPC(S) 1. A Static Lullaby Faso Latido CK92772 827969277225 2. Acceptance Phantoms CK89016 696998901629 3. Amerie Touch CK90763 827969076323 4. Art Blakey Drum Suit CK93637 827969363720 5. The Bad Plus Suspicious Activity? CK94740 827969474020 6. Bette Midler Sings the Peggy Lee Songbook CK95107 CK74815 827969510728 828767481524 7. Billy Holiday The Great American Songbook CK94294 827969429426 8. Bob Brookmeyer Bob Brookmeyer & Friends CK94292 827969429228 9. Buddy Jewell Times Like These CK92873 827969287323 10. Burt Bacharach At This Time CK97734 827969773420 11. Celine Dion On Ne Change Pas E2K97736 827969773628 12. Chayanne Cautivo LAK96819 LAK96818 LAK95886 037629681921 037629681822 037629588626 13. Chris Botti To Love Again CK94823 827969482322 14. The Coral The Invisible Invasion CK94747 827969474723 15. Cyndi Lauper The Body Acoustic EK94569 827969456927 16. The Dead 60's The Dead 60's EK94453 827969445327 17. Deniece Williams This Is Niecy CK93814 827969381427 18. Dextor Gordon Manhattan Symphonie CK93581 827969358122 19. Dion The Essential Dion CK92670 827969267028 20. Earl Scruggs I Saw The Light With Some Help From My Friends CK92793 827969279328 21. Elkland Golden CK92036 827969203620 22. Emma Roberts Unfabulous And More: Emma Roberts CK93950 CK97684 827969395028 827969768426 23. Flatt & Scruggs Foggy Mountain Jamboree CK92801 827969280126 24. Frank Sinatra The Great American Songbook CK94291 827969429129 25. G3 Live In Tokyo E2K97685 827969768525 26. George Jones My Very Special Guests E2K92562 827969256220
95 :
27. Gerry Mulligan Jeru CK65498 074646549827 28. Horace Silver Silver's Blue CK93856 827969385623 29. Jane Monheit The Season EK97721 827969772126 30. Jon Randall Walking Among The Living EK92083 827969208328 31. Life Of Agony Broken Valley EK93515 827969351529 32. Louis Armstrong The Great American Songbook CK94295 827969429525 33. Mary Mary Mary Mary CK94812 CK92948 000768353721 827969294826 34. Montgomery Gentry Something To Be Proud Of: The Best of 1999-2005 CK75324 CK94982 828767532424 827969498224 35. Natasha Bedingfield Unwritten EK93988 827969398821 36. Neil Diamond 12 Songs CK94776 CK97811 827969477625 827969781128 37. Nivea Complicated 82876671562 828766715620 38. Our Lady Peace Healthy In Paranoid Times CK94777 827969477724 39. Patty Loveless Dreamin' My Dreams EK94481 827969448120 40. Pete Seeger The Essential Pete Seeger CK92835 827969283523 41. Ray Charles Friendship CK94564 827969456422 42. Rosanne Cash Interiors CK93655 827969365526 43. Rosanne Cash King's Record Shop CK86994 696998699427 44. Rosanne Cash Seven Year Ache CK86997 696998699724 45. Shel Silverstein The Best Of Shel Silverstein CK94722 827969472224 46. Shelly Fairchild Ride CK90355 827969035528 47. Susie Suh Susie Suh EK92443 827969244326 48. Switchfoot Nothing Is Sound CK96534 CK96437 CK94581 827969653425 827969643723 827969458129 49. Teena Marie Robbery EK93817 827969381724 50. Trey Anastacio Shine CK96428 827969642825 51. Van Zant Get Right With The Man CK93500 827969350027 52. Vivian Green Vivian CK90761 827969076125