Skip to main content

Sony BMG Entertainment Spyware Suits

Just when the music recording industry was actually starting to show signs that it had finally learned some "digital media distribution savvy," one of the leading players does something foolish that raises questions again about the sector's collective inability to adapt to shifting business models.

The Electronic Frontier Foundation filed a class-action lawsuit against Sony BMG Entertainment through which it is demanding that the company further address problems related to the controversial "rootkit"-style copy-protection mechanism that it shipped on an estimated 24 million music CDs.

The suit, filed in Los Angeles County Superior court, alleges that two different types of rootkit DRM (digital rights management) software have been installed on the computers of "millions of unsuspecting music customers" when they played affected CDs on devices running Microsoft Corp.'s Windows operating system.

While the EFF lauds Sony for taking initial steps to fix issues related to one form of the rootkit, known as First4Internet XCP, the filing claims that a second variation of the software, labeled as SunnComm MediaMax, has not been addressed and affects 20 million of the involved CDs.

According to the EFF, the MediaMax software installs itself on computers even when users choose not to run the application, and the group contends that the application does not include any feature for deleting the program entirely.

The lawsuit claims that the rootkit software transmits information on individual usage habits back to Sony BMG, including details of what music people listen to, allowing the company to spy on customers and track their habits.

The State of Texas has also filed a civil law suit. Texas is seeking civil penalties of $100,000 per violation of the state's Consumer Protection Against Computer Spyware Act, which was enacted earlier this year.

Popular posts from this blog

Security IP Market: The Platform Era Arrives

For years, security intellectual property (IP) existed in the semiconductor world as something of an afterthought; bolted on at the tail end of chip design cycles and treated as a compliance checkbox. That era is decisively over. According to the latest market study by ABI Research, the Security IP sector is entering a sharply accelerated growth phase, driven by a shift in how OEMs think about trust, compliance, and embedded protection. The message from the market is unambiguous: integrated, certification-ready security is no longer optional infrastructure; it is a competitive imperative. The explosion of connected devices across industrial, automotive, consumer, and data center environments has expanded attack surfaces. Security IP Market Development Meanwhile, regulatory frameworks worldwide are tightening, demanding demonstrable security assurance rather than self-attested claims. And looming on the horizon is the quantum computing threat, which is already forcing forward-thinking c...