My major problem with the Sony DRM I wrote about yesterday is the lack of consent on the part of the user. The terms of the Sony EULA are posted here. Nowhere does Sony advise that even if you uninstall the software using normal procedures that there are hidden bits that remain. Further, the fact that the software is sloppily written and leaves the door open for malicious rootkit developers to take advantage of its flaws is negligent at best.
For its part, Sony today advised that a removal tool is now available from its website provided that you tell Sony where you obtained the CD from. However, it denied wrongdoing while admitting that many of the security flaws pointed out by Russinovich will be fixed on future CD releases.
One Trackback
[...] So what else has happened since my last post? [...]