October 31, 2005
Sony BMG rootkit DRM exposed
On October 31, 2005, Sysinternals researcher Mark Russinovich revealed that Sony BMG music CDs installed a hidden rootkit — XCP — that opened security holes on Windows PCs.
What it was for
Sony's copy protection phoned home, hid files from the OSOperating system — software that manages hardware and provides services to applications., and was trivially exploited by other malwareMalicious software — viruses, worms, trojans, and ransomware designed to harm systems or steal data.. The scandal united security researchers and civil-liberties advocates against DRMDigital rights management — technology restricting how users copy or play media and software. that compromised user machines — leading to recalls, lawsuits, and lasting skepticism of anti-piracy software shipping with entertainment products.
Why it's here
The Sony rootkit proved anti-piracy DRMDigital rights management — technology restricting how users copy or play media and software. could be worse than the piracy it fought.
Why it mattered
It made kernelThe core of an operating system that manages hardware, memory, and processes — everything else depends on it.-level copy protection politically toxic for a decade.
What it solved
Nothing for users — it showed entertainment DRMDigital rights management — technology restricting how users copy or play media and software. could install undeletable rootkits on PCs.
Media
- ImageExtended Copy Protection
Sony BMG Music Entertainment, Public domain, via Wikimedia Commons
Related
- DeCSS DVD decryption code publishedOctober 1999
- Digital Millennium Copyright Act signed into U.S. lawOctober 28, 1998
- Napster peer-to-peer music sharing launchesJune 1, 1999