sonybmg
Latest
Sony's CD rootkit fiasco marks its inglorious 10th anniversary
Here's one product anniversary that Sony probably wants you to forget. It's the 10th anniversary of security researcher (now CTO for Microsoft Azure) Mark Russinovich publishing details of the Sony BMG rootkit, a CD copy protection system that compromised the security of Windows PCs and was near-impossible to safely uninstall. The music label was initially dismissive, but it soon had to change its tune -- it paid millions to settle charges and recalled legions of discs. To top things off, the discovery made Sony a punching bag for anyone unhappy with digital rights management (DRM) and other heavy-handed uses of copyright.
IRL: Kirby Sentria, Sony bloggie-MHS-FS1 and the OLPC XO laptop
Welcome to IRL, an ongoing feature where we talk about the gadgets, apps and toys we're using in real life and take a second look at products that already got the formal review treatment. Let's just cut to the chase: this week's IRL is a little schizophrenic. On the one hand, you've got Andy singing his bloggie's praises, Terrence waxing philosophical about his unused OLPC XO and Darren ranting about his grandmother's vacuum cleaner. Do you like camcorders that are not a smartphone? Do you despise door-to-door Sentria salesmen? Good. Let's hit it, then.
China's Baidu licenses music from major US record labels for streaming and downloads
In a move suggesting they might be ready to accept the realities of the internet era, major US record labels have reached a deal with Chinese search engine company Baidu. The agreement between the search giant and One-Stop China, a joint venture of Universal, Warner and Sony BMG, will result in licensed tracks popping up in searches instead of pirated ones and resolve years of legal wrangling between the two sides. Baidu launched its ting! social music service earlier this year with support from local labels and EMI, while this new deal will see labels paid per-play, per-download and from advertising. Between this and the recent launch of Spotify in the US the cheap and easy fun of music piracy is slipping away rapidly, if record labels continue to act sensibly then illegal downloads will soon be limited to hipsters ironically cracking open vintage editions of Soulseek.
Sony Pictures hacked by Lulz Security, 1,000,000 passwords claimed stolen (update)
Oh, Sony -- not again. We've just received numerous tips that Lulz Security has broken into SonyPictures.com, where it claims to have stolen the personal information of over 1,000,000 users -- all stored (disgracefully) in plain text format. Lulz claims the heist was performed with a simple SQL injection -- just like we saw the last time around. A portion of the group's exploit is posted online in a RAR file, which contains over 50,000 email / password combos of unfortunate users. We've downloaded this file (at our own risk, mind you) and can verify these sensitive bits are now in the wild, though it remains unclear if what's published matches reality. In addition to user information, the group has blurted out over 20,000 Sony music coupons, and the admin database (including email addresses and passwords) for BMG Belgium employees. Fresh off the heels of the PlayStation Network restoration, we're guessing the fine folks in Sony's IT department are now surviving solely on adrenaline shots. Update: Sony Pictures has confirmed to Reuters that some of its websites have been hacked, and says that it's currently working with the FBI to identify the perpetrators. [Thanks to everyone that sent this in]
Sony BMG Greece hacked, company's security woes continue
It's the security nightmare that just won't end, and right now there's got to be plenty of Sony executives beginning to wish someone would pinch them already. After taking quite a PR and financial beating over the PSN breach, now the Greek site of Sony BMG has been hacked and the account info of thousands of users has been posted online. According to the Sophos blog Naked Security, the attack does not appear to have been particularly sophisticated and was carried out using an automated SQL injection tool that demands more patience than skill. While the data dump reveals the usernames, real names, and email addresses of registered SonyMusic.gr customers, other fields (including passwords and telephone numbers) are either empty or contain fake data -- suggesting the hack was not entirely successful. Here's hoping Sony takes this as an opportunity to seriously baton down those security hatches.
iTunes LP broken for indie record labels?
Update: ElectricPig is reporting on 10/13 that an Apple spokesperson said the LP format will be opened up for all, indies and majors alike. There's word from an indie record-label that iTunes LPs are not for the indies. Introduced at Apple's "It's Only Rock and Roll" event in September, the iTunes LP format adds "bigger than a matchbook" album art, song lyrics, video clips, and other extra content to albums sold through the iTunes store. digg_url = 'http://digg.com/apple/iTunes_LP_broken_for_indie_record_labels'; Brian McKinney of Chicago-based label Chocolate Lab Records saw some promise in the new format and started looking into the idea of producing for iTunes LPs himself. But the truly small labels may have a hard time getting in. McKinney spoke to the digital distribution manager at his label's distributor, who reportedly told him that Apple charges a $10,000 production fee for iTunes LPs. $10,000 may be less than the heads of Warner Music Group, Sony BMG, Universal Music Group, and EMI spend on breakfast, but could be cost prohibitive for the little label that could (if it had $10,000 handy for each of its acts). It's not just the cost that prohibits the little labels. According to McKinney, it's also Apple. McKinney says his dude in distribution was told "that LPs aren't being offered to indies and that there are only about 12 LPs being offered right now." "Foul, foul, filth and foul," cries Cult of Mac's Pete Mortensen. Like a financial analyst moving a stock from "buy" to "sell," Mortensen says iTunes LP has gone from "the first digital album good enough to criticize," to "the first major content misstep in the history of the iTunes Store." Assuming that Chocolate Lab's distributor info is on the up-and-up, Mortensen thinks iTunes LP is "less a new format for music than it is a new form of paid advertising on the iTunes store."
Vodafone's music catalog goes DRM-free for mobiles and PCs
We were wondering (seriously, it has been on our conscience at night) which carrier would be the first to go completely DRM-free in respect to its music catalog, and now Vodafone has stepped in to claim said throne. This week, the operator has inked deals with Universal Music Group, Sony Music Entertainment and EMI Music to bring tunes to handsets and PCs sans any nasty DRM, and for those who already downloaded DRM-laced files in the past, they'll be able to upgrade to DRM-free without a charge so long as they do it soon. And to think -- something like this would've been stopped cold at the drawing board by record label execs just a few years back. Desperate times call for desperate measures, right?
SanDisk, major labels announce slotMusic preloaded microSD cards
We're not sure why the music industry thinks consumers want to buy even more physical media, but it can't seem to stop pumping out plastic in a futile attempt to stay relevant -- this time it's an initiative called slotMusic, announced today in partnership with SanDisk and several major retailers. The 1GB slotMusic microSD cards are preloaded with DRM-free 320kbps MP3s, and are aimed primarily at mobile phones -- the idea is that you'll be able to buy music and listen to it without having to sideload it onto your device using your computer at home. Sure, we can see the appeal of that, but when we half-facetiously asked SanDisk's reps if they expected us to carry around a stack of individual microSD albums, they didn't laugh when they said yes, and even told us that slotMusic media binders would be available at launch -- no, they weren't kidding. We're not sure anyone's going to be sold on going back to lugging around physical media with the iTunes and Zune WiFi stores out there, but it sounds like we'll be seeing quite a push for this from retailers and the labels -- and artists are apparently enthusiastic about using the full 1GB of space to include content beyond basic liner notes and cover art. We'll see when these launch around the holidays -- if we had to guess, we'd say this is just Ringles and CDVU+ part III.
BMG joins Universal on Nokia's (delayed) free Comes with Music service
Step aside Universal Music, Sony BMG is now offering its catalog of music on Nokia's Comes With Music service. You know, the freebie, all you can eat music download service expected to launch mid-2008 (oops) "second half" of 2008. Remember, you'll have to buy a Comes with Music device first and the free download period from the Nokia Music Store (to your PC or phone) only lasts for 12 months. Still, consumers keep the downloaded (and DRM'd) tracks at the end of the period and "can transfer their downloaded material by substituting their new [Comes with Music] device or computer for the original devices" later on. While no Comes with Music devices have been announced yet, we certainly wouldn't be surprised if Nokia's touch-screen Tube or some other S60 touch device was first.
PluggedIn launches HD music video portal
We've had plenty of TV shows hitting the web in high definition recently, now PluggedIn is bringing music videos. Its site, just launched in beta, uses the same Move plugin as ABC.com to push over 10,000 HD and broadcast quality videos from EMI, Sony BMG and other labels. We watched a few videos, and while we've usually gotten good results with ABC's web site, we couldn't seem to get the "HD" meter filled up so far. Whether its bandwidth issues or the videos we checked just weren't HD was unclear, but hopefully the site is updated so its easier to find what we're looking for. Still, audio quality was decent and the broadcast-quality video we did get was clear. For now, take a look and see if this lives up to the competition offered by the networks, Hulu, or even Youtube.
Sony BMG busted for software piracy in France
Ouch, that payback, it can be a bitch -- Sony BMG, distributors of rootkit-installing CDs and litigious foe of P2P users worldwide, has just been busted in France for using pirated software on its servers. And it gets even worse: Windows admin tool developer PointDev says a Sony BMG was caught when an IT staffer actually called up for support and gave a pirated license number to the phone tech. That's some pretty shady behavior for a company that's rammed anti-piracy measures down its own customers' throats -- too bad it's probably not going to feel the hit of the €300,000 ($475,000) lawsuit nearly as hard as the college students it routinely sues for $5,000.[Via ZeroPaid, thanks to everyone who sent this in]
Sony BMG launching (DRM-free?) subscription music service this year
Sony BMG boss, Rolf Schmidt-Holtz, was just quoted in an interview saying that Sony BMG is "working on an online music subscription service." The service would cost between €6 to €8 per month (about $9 to $12) when launching later in the year and provide full access to its entire music catalog. He goes on to say that customers could own "some songs" even after the subscription was canceled. Interesting on its own, right? Now the kicker: it will work "for all digital players, including Apple's iPod." That means DRM-free unless Apple agrees to license its FairPlay DRM... which it won't. Hell, Sony BMG is already offering DRM-free MP3s to Amazon. If true, then the move could almost turn public sentiment positive in the wake of Sony BMG's "rootkit" fiasco and its handling of the Jammie Thomas affair. Almost.
Qtrax announces deals with EMI and Sony / ATV, still can't distribute content
Man, Qtrax just can't stop over-hyping and under-delivering, can it? The company's trumpeting new deals today with EMI Publishing, Sony / ATV Music Publishing, and TVT Records, but of the three deals, only TVT will actually have music available for download. The deals with EMI and Sony / ATV are for publishing rights only, and since publishing companies only represent songwriters, and don't actually own the rights to the song recordings, Qtrax still can't offer songs to consumers. It's confusing, but Qtrax needs both types of deals to make things work. Still, considering that the EMI and Sony agreements are extensions of existing agreements, it's a little strange for Qtrax to hype them up -- if you're keeping score at home, this is essentially the same sort of half-truth Qtrax launched under, so it's pretty ballsy of the company to try and pull it again. On the other hand, getting TVT on board is no small feat -- TVT artists include Lil Jon, Ambulance LTD, Dude 'N Em, The Polyphonic Spree, and The Cinematics, so it looks like Qtrax might be getting better at this whole "signing actual deals with labels" thing. Update: We had said in an earlier version of this post that several major labels had denied having deals in place with Qtrax -- while that's still true, the information was a few weeks old. The deals announced today are for real, but until Qtrax sorts out actual content-distribution rights, nothing's really changed.[Via Tech Digest]
XM and Sony BMG kiss and make up over the Inno
Well, that makes three -- Sony and XM announced today that the two companies have reached a settlement in the Pioneer XM + MP3 case. As you'd expect, terms of the deal are super-secret, but we hear XM tells that to all the multinational record conglomerates it gets in bed with. Anyway, with Warner, Universal, and Sony all lined up, all XM has to do is woo EMI and this nightmare of dullness should finally be over -- and we should start seeing some hot new devices.
Sony BMG to add DRM-free MP3s to Amazon
Sony BMG is readying the other half of their reported move away from DRMed music; two days ago, they announced plans to release retail gift cards which can be redeemed for plain 'ol MP3s, but there was no word of a plan that wouldn't require people to actually leave their caves or, heaven forbid, dress themselves. Cue the other shoe: Amazon announced today that they will be hosting DRM-free Sony BMG tracks, completing its collection of DRM-free tracks from each of the four major music labels, which already includes EMI, Vivendi Universal, and Warner. The Sony BMG tracks will be available "later this month" and should be priced commensurate with the service's current offerings.
Sony BMG skips DRM for Platinum MusicPass MP3 gift cards
Sony BMG Music Entertainment just announced Platinum MusicPass, retail gift cards which can be traded in for digital music, delivered to you in "high-quality" – and notably DRM-free – MP3 files. No word on precisely what bitrate constitutes high-quality, but for $12.99 (or $19.99 for a couple special edition albums) you can pick up a card from a local retailer, scratch the back, enter the pin number on MusicPass.com and download the MP3s (and sometimes bonus material). Is it perhaps inadvisable to require consumers to leave the internet, go to a store to purchase a MusicPass card, only to return home to the internet to download the DRM-free track? Hey, we're not business majors here and – judging by the initial album offerings – we're not their target demographic either. Celine Dion and Kenny Chesney, really?
Sony BMG will reportedly offer DRM-free music
In a move that could finally sound the death knoll for the universally-hated digital leech known as DRM, Sony BMG Music will reportedly become the last of the top four major labels to offer unprotected tracks for download. Citing people familiar with the arrangement, BusinessWeek.com reports that full details of the label's plan will be released "in the coming weeks," although at least part of its catalog will supposedly be available without DRM sometime this quarter. If this does indeed pan out, Sony would follow EMI, Vivendi Universal, and Warner in moving towards a much more consumer-friendly music distribution model.[Thanks, Mack S.]
Sony BMG's head lawyer says ripping CDs is "stealing"
There's one of them RIAA lawsuits going down in Duluth this week, and Jammie Thomas, the single mother charged with sharing 26 songs on Kazaa, isn't going down without a fight. Yesterday her attorneys called Jennifer Pariser, Sony BMG's head of litigation, to testify before the jury and got her to say some incredibly incendiary things -- not least of which was her opinion that making copies of purchased music is just "a nice way of saying 'steals just one copy.'" That viewpoint, of course, implicates pretty much every single thing consumers do with music and computers, including transferring songs to iPods and Zunes. We're betting there might be a couple jurors on the panel who aren't too fond of Ms. Pariser right now. Might want to check yo'self before you wreck yo'self, counselor.Disclaimer: Although this post was written by an attorney, it is not meant as legal advice or analysis and should not be taken as such.
Music industry has another death-spasm, coughs up "ringles"
It seems like very couple months one of the major labels announce yet another harebrained scheme to entice consumers to purchase CDs, regardless of what people actually prefer, and right on schedule, Sony BMG and Universal have announced their latest three-martini-and-a-cocktail-napkin plan: the "ringle," a $6 CD single featuring a remix and ringtone. There's really not much more to say -- trying to revive the CD single by adding in something that consumers are used to getting over-the-air seems like it speaks for itself -- but it's certainly interesting to see the labels desperately try and nab as much of the ringtone market as they can, even as their partners try and move forward. We'll see you at the funeral, boys. [Image courtesy of Boy Genuis Report]
di[rec] could tempt labels with post concert live recording drives
If you thought picking up a full-length studio album on a USB stick was hot stuff, di[rec] is out to make such an idea seem second rate. Founded by two ex-Sony BMG colleagues, the company is looking to round up support from their former employer, Warner Music, and various independent labels as it records live performances, mixes and masters on-site, and offers up the show on a USB drive or "download voucher" as folks are filing out of the exits. Sadly, there's no word yet on how much the outfit plans on charging gullible concert goers for the privilege of reliving their deafening experiences over and over, but it has already given the system a go at Nova Rock in Austria last month. So, for those of you at the festival just weeks ago, how about clue the rest of us in on the quality and value of di[rec]'s offerings?[Thanks, Lars G.]