SunnComm MediaMax may be as bad as XCP without rootkit

24 Nov 05 01:00 by Seán Byrne in category Uncategorized To news archive

While Sony’s XCP Rootkit copy protection may have caused enough problems so far, apparently the MediaMax technology Sony uses to copy protect its other CDs can be just as bad as XCP without the Rootkit part.  Unlike the XCP copy protection, the MediaMax service is automatically installed, whether or not the user agrees to the EULA.  It is also considered Spyware since it ‘calls home’ without the user’s consent and finally, like XCP it also lacks an uninstaller and is rather difficult to remove. 

As the MediaMax technology needs to install itself as a kernel service, users can only play these CDs while logged on as an Administrator, which not only hogs system resources and memory as a constantly running background process, but also prevents users at universities and at work from playing these CDs if they don’t have administrative rights to their system. 

Finally, in
order to play these CDs, consumers need to use the included MediaMax
player.  This player only works with these CDs and vice versa, thus
preventing consumers from using their preferred players, let alone use MediaMax
as a player that plays all CDs.  As a result, some consider this to be a
potential security risk since if any security flaws are found in either the
software or the kernel service, the user cannot simply just uninstall MediaMax
to eliminate the security risk, target=_new>like what happened with XCP, not to mention the risk of using its
uninstaller!
 

src="http://www.cdfreaks.com/contentimages/newsimages/1223633914" align=right border=0
>Yesterday two lawsuits were filed against Sony, by the Texas Attorney General and the EFF. The Texas suit claims that Sony’s XCP technology violates the state’s spyware law. The EFF suit claims that two Sony technologies, XCP and MediaMax, both violate various state laws.

One interesting aspect of the EFF suit is its emphasis on MediaMax. Most of the other lawsuits have focused on Sony’s other copy protection technology, XCP. The EFF suit does talk about XCP, but only after getting through with MediaMax. Emphasizing MediaMax seems like a smart move ‘” while Sony has issued an apology of sorts for XCP and has recalled XCP discs, the company is still stonewalling on MediaMax, even though MediaMax raises issues almost as serious as XCP.

As Alex wrote last week, MediaMax is spyware: it installs software without notice or consent; it phones home and sends back information without notice or consent; and it either doesn’t offer an uninstaller or makes the uninstaller difficult to get and use. MediaMax lacks the rootkit-like feature of XCP, but otherwise MediaMax shares all of the problems of XCP, including serious security problems with the uninstaller (mitigated by the difficulty of getting the uninstaller; see above).

The full article can be read here.

It looks like the href="http://www.cdfreaks.com/news/4068" target=_new>felt-tip pen / href="http://www.cdfreaks.com/news/12718" target=_new>sticky tape method
will start coming in handy when it comes to these CDs, even as a temporary
measure to make a local unprotected copy and then never pop the dreaded CD
in the PC again.  Even if Sony or any other music label is forced to
provide an uninstaller for their copy protection software as a href="http://www.cdfreaks.com/news/12721" target=_new>result of the recent EFF
lawsuit, it will not be of much benefit if the user is forced to install the player each time they wish to play their CD.  On the other hand, it will be interesting to see if anti-spyware tools start updating their database updates to recognise these installed copy protection tools and offer to remove the unwanted services, like what some do for XCP. :p

Source: p2pnet.net

4 Comments

Tru
Posts: 1494
Posted on: 24 Nov 05 03:29
"It looks like the felt-tip pen / sticky tape method will start coming in handy when it comes to these CDs, even as a temporary measure to make a local unprotected copy and then never pop the dreaded CD in the PC again." Well, you could install AnyDVD (which safely disables both MediaMax, XCP and similar stuff) and forget, that this CD was ever protected. Unfortunately this will cost the legal buyer of such a CD another 39 bucks (29 with cdfreaks discount)...
Rich86
Posts: 448
Posted on: 24 Nov 05 08:07
If autorun is disabled on the optical drive, and you do not permit anything to run or install off the Sony virus infected cd - won't it look like any other audio cd to the computer - with standard digital audio music tracks in the first session of the disc - just it like it looks to a standalone cd player?
heystoopid
Posts: 307
Posted on: 24 Nov 05 23:18
Ha! Ha! SONY BMG, is truly treating all who purchase their music cd's, as suckers one and all! In an article in the melbourne age dated november 23rd ,2005 one australian user Greg Vistarini, found that SONY BMG, return for defective infectious XCP rootkit cd's, is limited to US addresses only, they do not have an international worldwide return policy! Now Dan Kaminsky, snapshot audit demonstrated that a mere 24% of the 568,000 infected computers were in America(japan has 35%!!!). Sony BMG USA,is obviously is trying to weasel it's way out from under!, for the absolute minimum material cost. Oh well, SONY BMG , is a true customer last organization!, and it will continue to front token offers, to avoid full restitution!:r
SupremeCheddar
Posts: 139
Posted on: 25 Nov 05 04:51
You know, people used to tell me that people shouldn't download music/movies because they could get infected with something nasty. I always responded by telling them "What's stopping Microsoft or IBM or Sony from doing the same thing with their stuff." And they would always say back "That's stupid a big company would never do something stupid like that." Looks like I win that arguement. Seems like downloading is safer than legally purchasing music, movies or games. That's really sad...

Post a comment

Hello guest,
default
To benefit from all extra features you need to log in or sign up.

Most popular headlines

Grandmother is falsely accused of file-sharing (11)

A woman falsely accused of downloading copyrighted movies might've lost her Internet connection had she not taken her case to the media.

PS3 closing ground on Xbox 360 (1)

  • Sat 6 Feb 14:00 by Randomus
  • Game Consoles

After years of trailing the Nintendo Wii and Microsoft Xbox 360 on the sales charts, the Sony PlayStation 3 continues to close the gap on the Xbox 360.

Blame Blu-ray for lack of PS3 game downloads (13)

Don't expect Sony to offer its full game catalog for download over the Playstation 3 any time soon.

Murdoch: Avatar DVD won't be 3D (17)

  • Thu 4 Feb 00:00 by Randomus
  • Blu-Ray writers & players, LCD TV

News Corp. CEO Robert Murdoch confirmed the DVD release of Avatar won't have 3D support, with no word on a possible 3D Blu-ray version.

See all headlines

Active Commenters