Sony BMG was caught red-handed trying to plant secret DRM spyware on customers' computers. It wriggled and writhed but was eventually forced to withdraw a number of CDs which had been poisoned by the application.

DRM can never work. Anything which can be seen or heard can be copied by one means or another. But this doesn't mean the companies and entertainment and software cartels will stop trying and Sony BMG's answer to was try to sneak a DRM application made by Britain's First 4 Internet onto peoples' computers via CDs holding not only music, but also hidden rootkit spyware .

Then it came to light that additional, and dangerous, MediaMax "copy protection" software made by America's SunnComm was also present on some discs.

A file folder installed on users’ computers by MediaMax , "could allow malicious third parties who have localized, lower-privilege access to gain control over a consumer’s computer running the Windows operating system," said the EFF.

That was a while back. Nonetheless, "In accordance with standard information security practices, EFF and iSEC delayed public disclosure of the details of the exploit to provide SunnComm the opportunity to develop an update," said the foundation.

Now, "The Electronic Frontier Foundation (EFF) and SONY BMG Music Entertainment (SONY BMG) said today [December 6] that SunnComm is making available a software update to address a security vulnerability with its MediaMax Version 5 content protection software on certain SONY BMG compact discs (CDs)," says the EFF, going on:

"SONY BMG will notify consumers about this vulnerability and the update through the banner functionality included on the player, as well as through an internet-based advertising campaign. The update is also being provided to major software and Internet security companies. EFF and SONY BMG urge all consumers who receive notice to download and install the patch immediately."

It's all so bland, isn't it? - almost as if Sony BMG had teamed up with the EFF in an honest effort to look after customer interests. Adding to this appearance, "We’re pleased that SONY BMG responded quickly and responsibly when we drew their attention to this security problem," EFF staff attorney Kurt Opsahl is quoted as saying in the EFF statement.

Quickly and responsibly?

The press release adds, "The security vulnerability on SunnComm MediaMax Version 5 software differs from that reported in early November on First4Internet XCP software contained on certain SONY BMG CDs."

Go here for the SunnComm patch, and here for Sony BMG's.

How will you know if your CD is one of those carrying the dangerous SunnComm MediaMax Version 5 DRM software? You can find out by "looking at the back of the CD packaging," says SunnComm in a FAQ. "If you see a black and white table (see top right) with 'Compatible With' on the side, your disc contains some form of content protection software. If the URL at the bottom of table says www.sunncomm.com/support/sonybmg, then the disc contains SunnComm MediaMax Version 5 software. One CD, 'Defined' by Amici Forever contains SunnComm MediaMax Version 5 and the URL but does not have the black and white table noted."

Alternatively, below is a list of CDs poisoned by the SunnComm software..

-----------------------------------------------------------------------------------------------------------------------------------

United States

Chris Brown

Canada