Google Toolbar for Firefox

Google is still my new best company. I just realized that they now have the Google Toolbar for Firefox. By the way -- If you are still using MyCrowSoft's Internet Exploder for browing -- you are so not with it.... ;-) Even though Firefox can be setup to Block Popups, the Toolbar has some nifty features for searching and accessing GMail. (if you don't have Gmail -- you are so not with it also.)

See my link page if you are interested in Firefox, Thunderbird or GMail...

Dear Diary

Well, I just made it to 54 years old. That's only 36 in Hexadecimal (0x0036).

Birthdays are coming faster now - blurring by at ever increasing speed.

Big wall coming up.

No brakes.

What fun! ;-)

Sony Doesn't Do DRM Anymore

After many days of discovery and ranting by the Security Community -- Sony has decided that bundling their music with a pervasive software player, that then provides an access route for computer viruses and Trojan horses onto people's PCs, is a losing battle. Sony calls this little problem their XCP Technology. Sony has issued a statement regarding this problem. According to an article posted by Security Focus, Sony will suspend the production of copy-protected CDs, and "re-examine its digital-rights management strategy." Apparently, Sony is not recalling or offering to replace any of the CDs at the consumer end. This stance comes after a very ugly week where lawsuits were filed against the company in Los Angeles, New York and Italy. A Trojan has emerged taking advantage of Sony's DRM. The copy protection technique was provided by First4Internet Ltd - a company in the UK.

The RootKit tool that Sony has used will not be on any newer music releases, for now. That does not help the folks that have purchased Sony's CDs with the RootKit already on them, however. Symantec is offering a First4 Removal Tool on their site. If you suffer from Sony -- I would suggest you run the tool to delete this horribly written attempt at copy protection...
(I have been told that this is a "decloaker" only and does not really remove the RootKit from your system. Read all the directions, I guess.)

The Electronic Frontier Foundation (EFF) has an article with a list of the infected CDs. The Columbia and Epic labels are also suspect to using this copy protection scheme. They also have pictures to show what the packaging looks like when the XCP Trojan is present on the CD.

============

Update: If you find that your PC has Sony's XCP Trojan installed -- please be careful. By decloaking the hidden files and removing the RootKit implant - you can cause damage to your otherwise stable WIndows OS as explain in this article.

Sony Does DRM .... Badly

DRM stands for Data Rights Management, a weapon or tool that content providers are now wielding in their uphill battle against the folks that think that all data should be free. 'Data' can be almost anything including application software, games, music and video. Sony has now stepped into a large and messy situation. Some of Sony's latest music released on CD has caused problems for end users, listeners of the music. It seems that the CD also contains some very subtle software, disguised as a music player, that installs itself onto PCs (not Macs yet) and embeds itself, like an unwelcome, diseased Tick, under the skin of the Windows Operating System; this includes XP, 2K and NT at this point.

The underlying problem is that this occurs without the knowledge of the user. This software, known as a RootKit, hooks itself into some of the Windows primitive layers. This process then takes complete control of the CD and DVD players/burners on the system. Thereby controlling what data can be copied or ripped from the CD. Sounds like a fool-proof plan, no?

Unfortunately, for the user and ultimately for Sony, the RootKit stays embedded forever. There is no clean way to remove it. The overriding problem is that with the RootKit installed, the system is vulnerable to bad guys that can find out that the PC has this installed. The RootKit becomes a free, in-place tool to help system crackers grab control of the PC and install even more nefarious applications on the PC. All of this information came to light in an excellent piece written by Mark Russinovich in his blog entry on 10-31-2005.

There are further entries by Mark in his attempt to get Sony to take some responsibility and come up with an easy way to remove the embedded software. At this point the Sony imposed RootKit is to be considered a Trojan Horse on someone's computer system. The bottom line is -- beware. You have to realize that the Sonys of this world are now pushing junk onto your system, without your knowledge.

This story is changing and developing. More information will come out - eventually it will be in the newspapers for the common folk to read about. I think that if Sony doesn't perform some clever damage control now, they will leave themselves out to be a very large target for the populace to hurl monkey poop upon.

============

Update: There are now articles posted on USA Today and the BBC that quote Russinovich's investigation and Sony's damage control attempts... Sony's bundled music player apparently "phones home" every time a user plays the copy protected CD. What could they possibly be using that information for?