Nov 11, 2005, 23:27 GMT
San Francisco - Music giant Sony BMG on Friday said it was suspending the use of a copy protection programme secretly installed on millions of CD's after hackers released viruses that piggyback on the controversial software.
'As a precautionary measure, Sony BMG is temporarily suspending the manufacture of CDs containing XCP technology,' the company said in a statement. 'We also intend to re-examine all aspects of our content protection initiative to be sure that it continues to meet our goals of security and ease of consumer use.'
Sony BMG included the programme as a copy protection device on some 20 popular music titles from the likes of Celine Dion and Sarah McLachlan.
When the affected CDs are played on a Windows personal computer, the software secretly installs itself and limits how many times the CDs can be copied. The code was discovered by Windows experts Mark Russinovich on October 31.
Sony is already facing at least six lawsuits over the programme. The discovery of three Trojan horse virusses that use the secret programme to enter computers undetected instantly increased the backlash against the company.
'The development we feared most from Sony's inclusion of technology to conceal its DRM (digital rights management) software was its use to conceal malicious code,' said David Emm of security firm Kaspersky Labs. 'Unfortunately, it seems our fears were well- grounded.'
Security firm Sophos said that it had discovered a version of the Stinx virus that uses the Sony code and that would allow hackers to gain control of infected machines.
Sony has insisted that the software poses no security threat but released a patch last week that uncloaks files hidden by its software.
The Electronic Frontier Foundation, an online civil liberty group, said it is hearing from people who have run into problems with the copy protection software. It is considering filing its own lawsuit, said EFF staff attorney Jason Schultz.
'You can't uninstall it, you can't find it, and it's vastly more invasive in terms of privacy and personal property than any other (digital rights management) program to date,' he said.
Your Talkback on this Story