Sony Implements CD Exchange in Response to Criticism of its XCP Program

Sony BMG Music Entertainment (Sony) has recalled all music CDs with Extended Copy Protection (XCP), a program that was designed to prevent illegal copying of the CD, in the face of widespread reaction in the media and from consumers to the unintended consequences of using the program. At least three lawsuits have been filed regarding the XCP program and its problems. The XCP software installs itself automatically on a user's computer when the CD is placed in the CD drive. It was designed using "rootkit" technology, which hides the XCP's presence on the computer, and makes it more difficult to remove. In addition, XCP introduces a security vulnerability to the user's computer, which can be exploited by malicious software. Apparently, there are already two reported "trojans" in circulation that exploit this vulnerability. Sony has posted a patch for the security vulnerability on its web site, and is working on a secure way to remove the XCP from users' computers. This will be posted on the web site when available. In addition, Sony is exchanging all the CDs with XCP software for CDs without the software. Finally, Sony has issued an apology letter to its customers. Studies suggest that the unauthorized duplication of music from CDs poses almost as great a threat to revenue as illegal downloading, so music companies have been seeking a way to combat this threat. XCP appears to be an unsuccessful example of a larger trend among music companies – using digital rights management tools in the form of software. For media commentary, see: Google Search on Sony BMG For the Sony BMG XCP web site, which contain a list of the affected titles and other information, visit: http://cp.sonybmg.com/xcp/english/home.html Summary by: James Kosa