I work for a state government agency, and just received word from our IT dept that some our servers and workstations have been infected with Sony's rootkit DRM by employees listening to their legally purchased cd's while working. This was discovered because the DRM was trying to send information to Sony's site about systems and usage statistics. Essentially Sony's DRM has hacked a state government agency's IT infrastructure.

I may be mistaken, but I seem to think that there are some laws on the books that might make that a *criminal* rather than a civil offense?

If this has happened at other government (state or federal) agencies, could this also be considered IT espionage since Sony BMG as well as the company that wrote the software are foreign (i.e. not U.S.) companies?

Wouldn't that be interesting....?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11357/32747#32747