Alex Halderman and Edward Felten have published a retrospective on the SonyBMG rootkit episode [PDF]
. "This paper is a case study of the design, implementation, and deployment of anti-copying technologies.
We present a detailed technical analysis of the security and privacy implications of two systems, XCP and
MediaMax, which were developed by separate companies (First4Internet and SunnComm, respectively) and
shipped on millions of music compact discs by Sony-BMG, the world's second largest record company. We
consider the design choices the companies faced, examine the choices they made, and weigh the consequences of those choices. The lessons that emerge are valuable not only for compact disc copy protection,
but for copy protection systems in general.
to post comments)