Hello Viv, I haven't experienced any problems personally, but Leicester City Council's ICT Security Manager has advised PC users not to use ANY Sony manufactured music CDs in their computers. Apparently the Sony XPC software is designed to restrict users' ability to make copies of Sony's CDs and installs itself automatically from the CD without the user being aware that the installation has taken place. The software is installed using what are essentially hacking tools that open up serious security vulnerabilities on the PC. Additionally, removing the software is very risky because in doing so Windows may become unusable, resulting in the PC having to be rebuilt. Exercise great caution! Michael Michael Maxwell Quality & Development Manager Leicester City Libraries Tel: 0116 252 7334 >>> "Watkins, Viv (C&LL)" <[log in to unmask]> 12/08/05 3:03 pm >>> Hello everyone Has anyone else had any problems with Sony copy-protected CDs? I include emails from my colleague Andrew Baker and our customer which give more info. There is a list of CDs on the Sony site - http://cp.sonybmg.com/xcp/english/titles.html <http://cp.sonybmg.com/xcp/english/titles.html> Not encouraging as it doesn't include the one we have had problems with! Best wishes Viv. -----Original Message----- From: Baker, Andrew J (C&LL) Sent: 07 December 2005 14:26 To: Libraries; Library Staff Subject: CD copy protection problem Importance: High This seems to be problem with a specific CD - "Contraband" by Velvet Revolver. If you try to play it on a PC it makes the PC download security software which then stops the PC copying MP3s - amongst other things. A very detailed note below. I have asked to have a warning placed on the catalogue record but I feel borrowers might blame us for damage so I would rather gather all the copies in. Could you find them, or request them and send them to me please. -----Original Message----- From: Greg Morley [mailto:[log in to unmask]] <mailto:[mailto:[log in to unmask]]> Sent: 07 December 2005 12:17 To: [log in to unmask] Cc <mailto:[log in to unmask]> : [log in to unmask] Subject <mailto:[log in to unmask]> : Note to library staff: Damaging music CD To Whom It May Concern, On Saturday I returned a selection of CD's that I'd borrowed from the Lichfield library. I mentioned to the lady at the Returns desk (upstairs) that I would send an email to the library about damage that one of the CD's had done to my PC, as I feel other borrowers will benefit from the information (forewarned = forearmed). The CD in question was the "Contraband" album by Velvet Revolver. When I borrowed the CD, I was aware that the logo on the back of the case showed that it was a copy-protected CD. I don't have a problem with this, as I don't copy CD's. However, one evening I wished to play the CD over my headphones whilst working on my computer at home, as my family was watching the TV in the same room. On loading the CD, my CD-R drive was crippled - this without warning or any prompts from the software on the CD. I spent considerable time on the Internet researching the problem and discovered that the CD had been copy-protected by Sony-BMG with technology that has recently caused much controversy around the world. In fact, various entities have launched class-action lawsuits against Sony as a direct result of this, including the state of Texas, the EFF (Electronic Frontier Foundation) and various others are considering class-action lawsuits, including the state of New York. Not only does Sony's copy-protection software cripple CD drives, it also installs a hidden "rootkit" (malicious software) on computers, which in turn exposes the infected computers to further security problems. Rather than going into too much detail here, I would ask you to read about the problem at the site below, the author of which (Mark Russinovich) is a Windows security expert who alerted the media to this particular problem: <http://www.sysinternals.com/Blog/ <http://www.sysinternals.com/Blog/> > The above is probably the best source of information on the problem, but there are many other websites writing about it. Some news today about additional problems: <http://news.com.com/New+Sony+CD+security+risk+found/2100-1002_3-5984764.htm l <http://news.com.com/New+Sony+CD+security+risk+found/2100-1002_3-5984764.htm l> > Further below my email is a copy of an email thread I've had with a representative of someone from Sony, Joyce Okuya, who offered to replace the CD in question with one that did not have any copy protection. However, as you can see from my emails to Joyce, firstly I am not in a position to swap a library CD with Sony, and secondly a replacement CD will not fix my CD-R drive. I've not any reply from Sony following the last item in the thread, but if anything constructive comes back to me, I'll be sure to forward it to Lichfield Library. Obviously I am disappointed by the problems caused, but my finger is pointed firmly at Sony, not Lichfield Library. I hope this email will serve as the basis for informing other borrowers about potential problems. Kind regards, Greg Morley. ---------- Forwarded message ---------- From: Greg Morley < [log in to unmask] <mailto:[log in to unmask]> <mailto:[log in to unmask] <mailto:[log in to unmask]> >> Date: Nov 16, 2005 2:45 PM Subject: Re: FW: www.bmgcopycontrol.com <http://www.bmgcopycontrol.com> <http://www.bmgcopycontrol.com <http://www.bmgcopycontrol.com> > To: "[log in to unmask] <mailto:[log in to unmask]> <mailto:[log in to unmask] <mailto:[log in to unmask]>> " <[log in to unmask] <mailto:[log in to unmask] <mailto:[log in to unmask] <mailto:[log in to unmask]> >> Dear Joyce, Thank you for your offer. However, this does not address the issue which I raised, namely that my CD drive has been disabled by the Velvet Revolver "Contraband" CD. To repeat my original request, please can you provide me with a means to fully remove the effects of the copy-protection software. The CD has disabled my computer's CD drive without my permission and I wish to have my CD drive returned to its original state. Kind regards, Greg. On 11/15/05, [log in to unmask] <mailto:[log in to unmask]> <mailto:[log in to unmask] <mailto:[log in to unmask]> > < [log in to unmask] <mailto:[log in to unmask]> <mailto:[log in to unmask] <mailto:[log in to unmask]> >> wrote: Dear Greg, Many thanks for taking the time to write to SonyBMG. I have a version of this disc that will play in your system so could you please send me your full postal address and I will arrange for a prepaid envelope to be sent out to you. If you could then return me the disc, and proof of purchase and we will send you a new version that should meet your requirements. If you have no proof of purchase we will check the disc is a valid BMG UK version before sending you the new disc. Kind regards Joyce Okuya Name: Greg Morley Adresse: Mobil: Email: [log in to unmask] <mailto:[log in to unmask]> <mailto:[log in to unmask] <mailto:[log in to unmask]> > Bemerkung: To Whom It May Concern, Listening to a copy of Velvet Revolver\'s \"Contraband\" CD on my hi-fi works as expected. However, listening to the same CD on my computer not only failed to work, but it has disabled my CD-writer to the extent that my CD-writer can no longer even recognise the presence of any CD, be it music or data. I am running Windows XP. In light of the recent news about Sony\'s \"rootkit\" copy-protection, please can you provide me with a means to fully remove the effects of the copy-protection software that was on the abovementioned CD. Bear in mind that no EULA, media player or application ran at all when the CD was placed in my computer. I look forward to your prompt response. Kind regards, Greg. Disclaimer This e-mail (including any attachments) is only for the person or organisation it is addressed to. If you are not the intended recipient you must let me know immediately and then delete this e-mail. If you use this e-mail without permission, or if you allow anyone else to see, copy or distribute the e-mail, or if you do, or don't do something because you have read this e-mail, you may be breaking the law. Liability cannot be accepted for any loss or damage arising from this e-mail (or any attachments) or from incompatible scripts or any virus transmitted. E-mails and attachments sent to or received from staff and elected Members may be monitored and read and the right is reserved to reject or return or delete any which are considered to be inappropriate or unsuitable.