More bad news for Sony -- and you
The depths of deception and dysfunction in the Sony DRM protection scheme grow. The latest is a discovery by researchers at Princeton University that the software Sony is now offering to uninstall the hacking tool it never should have been allowed to use creates a huge security hole that outstrips the damage done originally. [See SearchSecurity's story on this for some details.]
Between 500,000 and 3 million CDs had this technology in circulation before Sony finally pulled the plug and began recalling the titles. The class-action lawsuit based out of Los Angeles, and other legal landmines this company can't stop stepping on, no doubt contribute to how much this ends up costing the company and, ultimately, CD buyers.
In case your morning coffee or tea didn't give you enough of a jolt, here's a snippet from Ed Felten's Freedom to Tinker blog that is credited with bringing the latest security lapse to light:
Between 500,000 and 3 million CDs had this technology in circulation before Sony finally pulled the plug and began recalling the titles. The class-action lawsuit based out of Los Angeles, and other legal landmines this company can't stop stepping on, no doubt contribute to how much this ends up costing the company and, ultimately, CD buyers.
In case your morning coffee or tea didn't give you enough of a jolt, here's a snippet from Ed Felten's Freedom to Tinker blog that is credited with bringing the latest security lapse to light:
The consequences of the flaw are severe. It allows any web page you visit to download, install, and run any code it likes on your computer. Any web page can seize control of your computer; then it can do anything it likes. That’s about as serious as a security flaw can get.