Here we'll explore the nexus of legal rulings, Capitol Hill
policy-making, technical standards development, and technological
innovation that creates -- and will recreate -- the networked world as we
know it. Among the topics we'll touch on: intellectual property
conflicts, technical architecture and innovation, the evolution of
copyright, private vs. public interests in Net policy-making, lobbying
and the law, and more.
Disclaimer: the opinions expressed in this weblog are those of the authors and not of their respective institutions.
Pretty much precisely as predicted, there's a new Trojan out that exploits Sony DRM copy protection vulnerability. Details are sketchy at this point - it appears to have been spammed out from a hijacked machine as an email. The best info I've found so far has been Sophos' press release. They have a tool to detect and disable Sony's cloak.
Update: According to Brian Krebs' Security Fix column, a lawsuit has already been filed in California charging Sony with violation of three state-level statutes, and another state-oriented suit will be filed in New York this week.
Update 2: A press release from Electronic Frontiers Italy (which I take to be an Italian EFF-alike) describes a formal request made by that organization to the Italian "Commander in Chief of the Fraud Contrast Group of the Financial Police" in an effort to identify for legal purposes the authors of the malware, whether anyone else is doing similar things, and have them prosecuted under Italian laws that forbid "damaging" personal computer systems. The particular law(s) that apply to this situation aren't spelled out in the ALCEI release, but perhaps that's something the police are expected to determine.
1. Randy Zagar on November 12, 2005 2:27 PM writes...
Groklaw is reporting an allegation that portions of an LGPL program may have been used in the Sony rootkit.
If the terms of the LGPL have been violated, then every cdrom Sony shipped with this rootkit represents a copyright violation.
Permalink to Comment2. Gia on November 12, 2005 11:19 PM writes...
Of course it didn't take long-- with the news on it going pretty well mainstream, it's like yelling out to hackers: "Hey, come exploit this!"
I'm only surprised it didn't happen within 24 hours of the original break of the story...
Permalink to Comment