Scott's Weblog The weblog of an IT pro specializing in cloud computing, virtualization, and networking, all with an open source view

Rootkit Technology in Sony DRM

A very in-depth article by Mark Russinovich unveiled that DRM technology shipping with recent Sony BMG CDs actually installs rootkit components onto your system. Now, I don’t know about you, but I don’t like the idea of a vendor unknowingly installing software on my computer(s) that contain rootkit components—especially when those rootkit components could be used by malicious software packages to hide themselves.

I’m glad to see that eWeek picked up the story as well. (Note that O’Reilly’s is also mentioning it.) Mark’s research is fantastic (as always), but not many people will get exposed to this news through him alone. Computer geeks like myself would, of course, but the people that really need to know this are the non-geeks. Any reasonably computer-savvy user is likely to want to pick up your average CD (from any number of distribution channels, including and copy the music off the CD. There are a number of very valid reasons for this—ease of access, personal backup copy (ever scratch a CD?), etc. Copy-protected CDs limit your ability to do this without also installing stealthy rootkit components onto your system.

More links to other discussions on this topic can be found in section 8 of this Wikipedia rootkit article (also linked above).

In my opinion, this is just plain wrong. It’s wrong to install this kind of software onto someone’s system. I can understand their desire to want to protect their “intellectual property,” but there’s got to be a better way than installing rootkits on your customers’ computers.

Metadata and Navigation

Be social and share this post!