SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Extended Copy Protection</title>

</head>

Extended Copy Protection

</h1>

</header>

Extended Copy Protection (XCP) is a <a href="Computer_software" class="mw-redirect" title="Computer software">software</a> package developed by the British company First 4 Internet (which on 20 November 2006, changed its name to Fortium Technologies Ltd) and sold as a <a href="Copy_protection" title="Copy protection">copy protection</a> or <a href="Digital_rights_management" title="Digital rights management">digital rights management</a> (DRM) scheme for <a href="Compact_Disc" class="mw-redirect" title="Compact Disc">Compact Discs</a>. It was used on some CDs distributed by <a href="Sony_BMG" title="Sony BMG">Sony BMG</a> and sparked the <a href="Sony_BMG_copy_protection_rootkit_scandal" title="Sony BMG copy protection rootkit scandal">2005 Sony BMG CD copy protection scandal</a>; in that context it is also known as the Sony rootkit.

Security researchers, beginning with <a href="Mark_Russinovich" title="Mark Russinovich">Mark Russinovich</a> in October 2005, have described the program as functionally identical to a <a href="Rootkit" title="Rootkit">rootkit</a>: a computer program used by computer intruders to conceal unauthorised activities on a computer system. Russinovich broke the story on his Sysinternals blog, where it gained attention from the media and other researchers.<a href="#cite_note-1">[1]</a> This ultimately led to a civil lawsuit and criminal investigations, which forced Sony to discontinue use of the system.

While Sony eventually recalled the CDs that contained the XCP system, the web-based uninstaller was investigated by noted security researchers <a href="Ed_Felten" class="mw-redirect" title="Ed Felten">Ed Felten</a> and <a href="Alex_Halderman" class="mw-redirect" title="Alex Halderman">Alex Halderman</a>, who stated that the <a href="ActiveX" title="ActiveX">ActiveX</a> component used for removing the software exposed users to far more significant security risks, including <a href="Arbitrary_code_execution" title="Arbitrary code execution">arbitrary code execution</a> from websites on the internet.<a href="#cite_note-2">[2]</a>

<div class="mw-heading mw-heading2"><h2 id="Description">Description</h2></div>

The version of this software used in Sony CDs is the one marketed as XCP-Aurora. The first time a user attempts to play such a CD on a <a href="Microsoft_Windows" title="Microsoft Windows">Windows</a> system, the user is presented with an <a href="End-user_license_agreement" title="End-user license agreement">end-user license agreement</a> (EULA). If they accept it, the software is installed, otherwise the disc is ejected.<a href="#cite_note-3">[3]</a> The EULA did not mention that it installed hidden software. The software will then remain resident in the user's system, intercepting all accesses of the CD drive to prevent any media player or ripper software other than the one included with XCP-Aurora from accessing the music tracks of the Sony CD. No obvious way to uninstall the program is provided. Attempting to remove the software by deleting the associated files manually will render the CD drive inoperable due to <a href="Windows_Registry" title="Windows Registry">registry</a> settings that the program has altered.However, it was soon discovered that the software could be easily defeated by merely using a permanent marker to draw a dark border along the edge of the disk.<a href="#cite_note-The_50_Worst_Inventions-4">[4]</a>

<div class="mw-heading mw-heading2"><h2 id="Security_research">Security research</h2></div>

Following Mark Russinovich's publication of his findings, other security researchers were quick to publish their own analyses. Many of these findings were highly critical of Sony and First 4 Internet. Specifically, the software was found to conceal its activity in the manner of a <a href="Rootkit" title="Rootkit">rootkit</a> and expose users to follow-on harm from <a href="Computer_virus" title="Computer virus">viruses</a> and <a href="Trojan_horse_(computing)" title="Trojan horse (computing)">trojans</a>.

XCP's cloaking technique, which makes all processes with names starting with <code>$sys$</code> invisible, can be used by other <a href="Malware" title="Malware">malware</a> <a href="Piggybacking_(security)" title="Piggybacking (security)">piggybacking</a> on it to ensure that it, too, is hidden from the user's view. The first malicious trojan to hide via XCP was discovered on 10 November 2005 according to a report by the <a href="BitDefender" class="mw-redirect" title="BitDefender">BitDefender</a> antivirus company.<a href="#cite_note-5">[5]</a>

Follow-up research by Felten and Halderman showed that the Web-based <a href="Uninstaller" title="Uninstaller">uninstaller</a> Sony later offered for the software contained its own critical security problems.<a href="#cite_note-6">[6]</a> The software installs an <a href="ActiveX" title="ActiveX">ActiveX</a> component which allows any Web site to run software on the user's computer without restriction. This component is used by First 4 Internet's Web site to download and run the uninstaller, but it remains active afterward allowing any Web site the user visits to take over the computer.

Since it is specific to Microsoft Windows, XCP has no effect on all other operating systems such as <a href="Linux" title="Linux">Linux</a>, <a href="Berkeley_Software_Distribution" title="Berkeley Software Distribution">BSD</a>, <a href="OS/2" title="OS/2">OS/2</a>, <a href="Solaris_(operating_system)" class="mw-redirect" title="Solaris (operating system)">Solaris</a>, or <a href="Mac_OS_X" class="mw-redirect" title="Mac OS X">Mac OS X</a>, meaning that users of those systems do not suffer the potential harm of this software, and they also are not impeded from <a href="Ripping" title="Ripping">ripping</a> the normal music tracks on the CD. (Some discs involved in the Sony scandal contained a competing technology, <a href="MediaMax" title="MediaMax">MediaMax</a> from <a href="SunnComm" class="mw-redirect" title="SunnComm">SunnComm</a>, which attempts to install a <a href="Kernel_(operating_system)" title="Kernel (operating system)">kernel</a> extension on Mac OS X. However, because of the <a href="File-system_permissions" title="File-system permissions">permissions</a> of Mac OS X, there were no widespread infections among Mac users.)

Although Russinovich was the first to publish about the rootkit, other researchers had discovered it around the same time, but were either still analyzing it or chose not to disclose anything sooner due to the <a href="Chilling_effect" title="Chilling effect">chilling effect</a> of the <a href="Anti-circumvention" title="Anti-circumvention">anti-circumvention</a> clause of the <a href="Digital_Millennium_Copyright_Act" title="Digital Millennium Copyright Act">Digital Millennium Copyright Act</a>.<a href="#cite_note-7">[7]</a>

<div class="mw-heading mw-heading3"><h3 id="Antivirus_industry_response">Antivirus industry response</h3></div>

Shortly after independent researchers broke the story, security software vendors followed up, releasing detailed descriptions of the components of XCP, as well as software to remove the <code>$sys$*</code> cloaking component of it. On the other hand, no software has yet been released to remove the CD-ROM filter driver component. <a href="Computer_Associates" class="mw-redirect" title="Computer Associates">Computer Associates</a>, makers of the <a href="PestPatrol" class="mw-redirect" title="PestPatrol">PestPatrol</a> anti-spyware software, characterize the XCP software as both a <a href="Trojan_horse_(computing)" title="Trojan horse (computing)">trojan horse</a> and a <a href="Rootkit" title="Rootkit">rootkit</a>:<a href="#cite_note-ca.com-8">[8]</a>

XCP.Sony.Rootkit installs a DRM <a href="Executable" title="Executable">executable</a> as a <a href="Windows_service" title="Windows service">Windows service</a>, but misleadingly names this service "<a href="Plug_and_Play" class="mw-redirect" title="Plug and Play">Plug and Play</a> Device Manager", employing a technique commonly used by malware authors to fool everyday users into believing this is a part of Windows. Approximately every 1.5 seconds, this service queries the primary executables associated with all processes running on the machine, resulting in nearly continuous read attempts on the hard drive. This has been shown to shorten the drive's lifespan.

Furthermore, XCP.Sony.Rootkit installs a <a href="Device_driver" title="Device driver">device driver</a>, specifically a CD-ROM filter driver, which intercepts calls to the CD-ROM drive. If any process other than the included Music Player (player.exe) attempts to read the audio section of the CD, the filter driver inserts seemingly random noise into the returned data, thus making the music unlistenable.

XCP.Sony.Rootkit loads a system filter driver which intercepts all calls for process, directory or registry listings, even those unrelated to the Sony BMG application. This rootkit driver modifies what information is visible to the operating system in order to cloak the Sony BMG software. This is commonly referred to as rootkit technology. Furthermore, the rootkit does not only affect XCP.Sony.Rootkit's files. This rootkit hides every file, process, or registry key beginning with <code>$sys$</code>. This represents a vulnerability, which has already been exploited to hide <a href="World_of_Warcraft" title="World of Warcraft">World of Warcraft</a> RING0 hacks as of the time of this writing, and could potentially hide an attacker's files and processes once access to an infected system had been gained.

</blockquote>

<a href="Computer_Associates" class="mw-redirect" title="Computer Associates">Computer Associates</a> announced, in November 2005, that its anti-spyware product, <a href="PestPatrol" class="mw-redirect" title="PestPatrol">PestPatrol</a>, would be able to remove Sony's software.<a href="#cite_note-ca.com-8">[8]</a><a href="#cite_note-9">[9]</a> One month later, <a href="Microsoft" title="Microsoft">Microsoft</a> released an update for its <a href="Malicious_Software_Removal_Tool" title="Malicious Software Removal Tool">Malicious Software Removal Tool</a> which could clean the F4IRootkit malware.<a href="#cite_note-10">[10]</a><a href="#cite_note-11">[11]</a>

The somewhat slow and incomplete response of some antivirus companies has, however, been questioned by <a href="Bruce_Schneier" title="Bruce Schneier">Bruce Schneier</a>, <a href="Information_security" title="Information security">information security</a> expert and author of security articles and texts, including <a href="Secrets_and_Lies_(Schneier)" class="mw-redirect" title="Secrets and Lies (Schneier)">Secrets and Lies</a>. In an article for <a href="Wired_News" class="mw-redirect" title="Wired News">Wired News</a>, Mr. Schneier asks, "What happens when the creators of malware collude with the very companies we hire to protect us from that malware?" His answer is that "users lose... A dangerous and damaging rootkit gets introduced into the wild, and half a million computers get infected before anyone does anything."<a href="#cite_note-12">[12]</a>

<div class="mw-heading mw-heading2"><h2 id="Impact_of_XCP">Impact of XCP</h2></div>

Beginning as early as August 2005, Windows users reported crashes related to a program called aries.sys, while inexplicably being unable to find the file on their computers.<a href="#cite_note-13">[13]</a> This file is now known to be part of XCP. Call for Help host <a href="Leo_Laporte" title="Leo Laporte">Leo Laporte</a> said that he had experienced a rise in reports of "missing" CD-ROM drives, a symptom of unsuccessful attempts to remove XCP.<a href="#cite_note-14">[14]</a>

Security researcher <a href="Dan_Kaminsky" title="Dan Kaminsky">Dan Kaminsky</a> used <a href="Domain_Name_System" title="Domain Name System">DNS</a> cache analysis to determine that 568,000 networks worldwide may contain at least one XCP-infected computer. Kaminsky's technique uses the fact that DNS nameservers cache recently fetched results, and that XCP <a href="Phoning_home" title="Phoning home">phones home</a> to a specific <a href="Hostname" title="Hostname">hostname</a>. By finding DNS servers that carry that hostname in cache, Kaminsky was able to approximate the number of networks affected.<a href="#cite_note-15">[15]</a> After the release of the data, Kaminsky learned that an as-yet undetermined number of "Enhanced CDs" without the rootkit also phone home to the same address that rootkit-affected discs use, so infection rates are still under active investigation.

According to analyst firm <a href="Gartner" title="Gartner">Gartner</a>, XCP suffers from the same flaw in implementing DRM as any DRM technology (current or future) that tries to apply DRM to audio CDs designed to be played on stand-alone CD players. According to Gartner, because the installation of XCP or any DRM software relies on the CD being multi-session, the application of ink (via an ordinary felt-tip marker) to the outer edge of the disk renders the data track of the CD unreadable, thereby causing the PC to treat the disc as an ordinary single-session music CD.<a href="#cite_note-The_50_Worst_Inventions-4">[4]</a>

<div class="mw-heading mw-heading2"><h2 id="Legal_concerns">Legal concerns</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .ambox{border:1px solid #a2a9b1;border-left:10px solid #36c;background-color:#fbfbfb;box-sizing:border-box}.mw-parser-output .ambox+link+.ambox,.mw-parser-output .ambox+link+style+.ambox,.mw-parser-output .ambox+link+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+style+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+link+.ambox{margin-top:-1px}html body.mediawiki .mw-parser-output .ambox.mbox-small-left{margin:4px 1em 4px 0;overflow:hidden;width:238px;border-collapse:collapse;font-size:88%;line-height:1.25em}.mw-parser-output .ambox-speedy{border-left:10px solid #b32424;background-color:#fee7e6}.mw-parser-output .ambox-delete{border-left:10px solid #b32424}.mw-parser-output .ambox-content{border-left:10px solid #f28500}.mw-parser-output .ambox-style{border-left:10px solid #fc3}.mw-parser-output .ambox-move{border-left:10px solid #9932cc}.mw-parser-output .ambox-protection{border-left:10px solid #a2a9b1}.mw-parser-output .ambox .mbox-text{border:none;padding:0.25em 0.5em;width:100%}.mw-parser-output .ambox .mbox-image{border:none;padding:2px 0 2px 0.5em;text-align:center}.mw-parser-output .ambox .mbox-imageright{border:none;padding:2px 0.5em 2px 0;text-align:center}.mw-parser-output .ambox .mbox-empty-cell{border:none;padding:0;width:1px}.mw-parser-output .ambox .mbox-image-div{width:52px}@media(min-width:720px){.mw-parser-output .ambox{margin:0 10%}}@media print{body.ns-0 .mw-parser-output .ambox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style>

There is much speculation to what extent the actions taken by this software are a violation of various laws against unauthorized tampering with computers, or laws regarding invasion of privacy by "<a href="Spyware" title="Spyware">spyware</a>", and how they subject Sony and First 4 Internet to legal liability. The States of California, New York, and Texas, as well as Italy, have already taken legal action against both companies and more class action lawsuits are likely. However, the mere act of attempting to view or remove this software in order to determine or prevent its alteration of Windows would theoretically constitute a civil or criminal offense under certain anti-circumvention legislation such as the controversial <a href="Digital_Millennium_Copyright_Act" title="Digital Millennium Copyright Act">Digital Millennium Copyright Act</a> in the United States.

/* start https://en.wikipedia.org/ */

.mw-parser-output .side-box{margin:4px 0;box-sizing:border-box;border:1px solid #aaa;font-size:88%;line-height:1.25em;background-color:var(--background-color-interactive-subtle,#f8f9fa);display:flow-root}.mw-parser-output .infobox .side-box{font-size:100%}.mw-parser-output .side-box-abovebelow,.mw-parser-output .side-box-text{padding:0.25em 0.9em}.mw-parser-output .side-box-image{padding:2px 0 2px 0.9em;text-align:center}.mw-parser-output .side-box-imageright{padding:2px 0.9em 2px 0;text-align:center}@media(min-width:500px){.mw-parser-output .side-box-flex{display:flex;align-items:center}.mw-parser-output .side-box-text{flex:1;min-width:0}}@media(min-width:720px){.mw-parser-output .side-box{width:238px}.mw-parser-output .side-box-right{clear:right;float:right;margin-left:1em}.mw-parser-output .side-box-left{margin-right:1em}}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1237033735">

/* start https://en.wikipedia.org/ */

@media print{body.ns-0 .mw-parser-output .sistersitebox{display:none!important}}@media screen{html.skin-theme-clientpref-night .mw-parser-output .sistersitebox img[src*="Wiktionary-logo-en-v2.svg"]{background-color:white}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .sistersitebox img[src*="Wiktionary-logo-en-v2.svg"]{background-color:white}}

/* end https://en.wikipedia.org/ */

</style><div class="side-box side-box-right sistersitebox"><style data-mw-deduplicate="TemplateStyles:r1126788409">

/* start https://en.wikipedia.org/ */

.mw-parser-output .plainlist ol,.mw-parser-output .plainlist ul{line-height:inherit;list-style:none;margin:0;padding:0}.mw-parser-output .plainlist ol li,.mw-parser-output .plainlist ul li{margin-bottom:0}

/* end https://en.wikipedia.org/ */

</style>

<div class="side-box-text plainlist">Wikinews has related news:

<div><ul><li><a href="https://en.wikinews.org/wiki/Sony_faces_class_action_lawsuits_for_DRM" class="extiw external" title="wikinews:Sony faces class action lawsuits for DRM"> Sony faces class action lawsuits for DRM</a></li></ul></div></div></div>

</div>

The <a href="Electronic_Frontier_Foundation" title="Electronic Frontier Foundation">Electronic Frontier Foundation</a>'s Fred von Lohmann also heavily criticised the XCP <a href="EULA" class="mw-redirect" title="EULA">EULA</a>, calling it the "legalese rootkit."<a href="#cite_note-16">[16]</a>

One of the primary reasons for the XCP experiment lies in the issue of adding on DRM to a legacy standard. These problems are explored by Professor Randal Picker, Professor of Law for the <a href="University_of_Chicago_Law_School" title="University of Chicago Law School">University of Chicago Law School</a>, in his article, "Mistrust-Based Digital Rights Management", published in Volume 5 of the Journal on Telecommunications and High Technology Law. CDs by themselves are incapable of updating legacy hardware such as stand-alone CD players, and lack the ability to change or upgrade the firmware in order to read DRM. Thus the DRM must be added on so as not to interfere with the function of the legacy players yet still work when the same CD is placed in a computer. Picker analyzes the four main issues with add-on DRM.

The first problem, as demonstrated in the XCP example, is that capable consumers can simply bypass the DRM. Turning off <a href="Autorun" class="mw-redirect" title="Autorun">autorun</a> prevented the rootkit installation and thus invalidated the DRM scheme.

The second problem is consumer reaction. Adding DRM to a legacy product like music CDs, which traditionally had no rights management scheme, will infuriate consumers. Picker points out that in the wake of the negative publicity surrounding the Sony add-on DRM, <a href="Amazon.com" class="mw-redirect" title="Amazon.com">Amazon.com</a> began alerting customers as to which Sony CDs contained XCP. Customers could avoid the DRM entirely, negating the effectiveness.

The third problem lies in the legal response. The EFF, as well as state attorneys general, investigated and brought suit against Sony for the XCP program. Picker does not analyze the legal merits of such suits, but the cost of litigation potentially outweighs the benefit of attempting to add-on DRM.

The fourth and final problem lies in the End User License Agreement attempted to be enforced by the add-on DRM. The ability to actually enforce these agreements on add-on DRM is limited by the mere fact that without active registration and tracking of the CDs, the company will have no one to enforce against. Therefore, the expected benefit of enforcing the EULA against violators is actually non-existent; the costs, however, of implementing the add-on DRM scheme, in the form of state and federal investigations, private lawsuits, negative publicity, consumer backlash and the technical limitations, far outweighs the benefits.

<div class="mw-heading mw-heading3"><h3 id="Copyright_violations">Copyright violations</h3></div>

Researcher Sebastian Porst<a href="#cite_note-17">[17]</a> and a number of software experts have published evidence that the XCP software infringes on the copyright of the <a href="LAME" title="LAME">LAME</a> <a href="Mp3" class="mw-redirect" title="Mp3">mp3</a> encoder,<a href="#cite_note-18">[18]</a> <a href="Mpglib" class="mw-redirect" title="Mpglib">mpglib</a>,<a href="#cite_note-19">[19]</a>

id3lib<a href="#cite_note-21">[21]</a> (<a href="ID3" title="ID3">ID3</a> tag reading and writing), <a href="Mpg123" title="Mpg123">mpg123</a> and the <a href="VLC_media_player" title="VLC media player">VLC media player</a>.<a href="#cite_note-22">[22]</a>

Princeton researcher Alex Halderman discovered that on nearly every XCP CD, code which uses a modified version from <a href="Jon_Johansen" class="mw-redirect" title="Jon Johansen">Jon Johansen</a>'s <a href="Digital_rights_management" title="Digital rights management">DRMS</a> software which allows to open <a href="Apple_Computer" class="mw-redirect" title="Apple Computer">Apple Computer</a>'s <a href="FairPlay" title="FairPlay">FairPlay</a> DRM is included.<a href="#cite_note-23">[23]</a> He found the code to be inactive, but fully functional as he could use it to insert songs into Fairplay. DRMS, mpg123 and VLC are licensed under the <a href="GNU_General_Public_License" title="GNU General Public License">GNU General Public License</a> (GPL). The other software found, like LAME, is licensed under the terms of the <a href="GNU_Lesser_General_Public_License" title="GNU Lesser General Public License">GNU Lesser General Public License</a> (LGPL), also as <a href="Free_software" title="Free software">free software</a>. If the claims are correct, then Sony BMG was distributing copyrighted material illegally.

Jon Johansen wrote in his blog<a href="#cite_note-24">[24]</a> that after talking with a lawyer, he thinks that he cannot sue; however, there are opinions that the advice he was given is wrong.<a href="#cite_note-25">[25]</a>

The LAME developers have put an open letter<a href="#cite_note-26">[26]</a> to Sony BMG online.

Copyright violations which Sony could be accused of include:

<ul><li>No "prominent notices" for including of GPL and LGPL software.</li>

<li>Statically linking GPL code into the program but not providing the <a href="Source_code" title="Source code">source code</a> of the whole program under GPL.</li>

<li>Statically linking LGPL code but not providing the source of the LGPL parts and the binary code of the non-LGPL parts to allow relinking with updated LGPL code.</li>

<li>Placing restrictions on the use of the code outside of what GPL/LGPL allow, e.g. not "licensing at no charge to all third parties" under the LGPL and GPL.</li></ul>

Sony provided a version of id3lib's source code on its web site,<a href="#cite_note-27">[27]</a> but unrelated to XCP.

<div class="mw-heading mw-heading2"><h2 id="Sony's_response">Sony's response</h2></div>

On a <a href="National_Public_Radio" class="mw-redirect" title="National Public Radio">National Public Radio</a> program, <a href="Thomas_Hesse" title="Thomas Hesse">Thomas Hesse</a>, President of Sony BMG's global digital business division asked, "Most people, I think, don't even know what a rootkit is, so why should they care about it?"<a href="#cite_note-28">[28]</a> He explained that "The software is designed to protect our CDs from unauthorized copying and <a href="Ripping" title="Ripping">ripping</a>."

An analysis of this uninstaller has been published by Mark Russinovich—who initially uncovered XCP—titled "More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home".<a href="#cite_note-29">[29]</a> Obtaining the original uninstaller requires one to use a specific browser (Microsoft <a href="Internet_Explorer" title="Internet Explorer">Internet Explorer</a>) and to fill out an online form with their email address, receive an email, install the patch, fill out a second online form, and then they will receive a link to the uninstaller. The link is personalized, and will not work for multiple uninstalls. Furthermore, Sony's Privacy Policy<a href="#cite_note-30">[30]</a> states that this address can be used for promotions, or given to affiliates or "reputable third parties who may contact you directly".

It has also been reported that the uninstaller might have security problems which would allow remote code execution. Sony's uninstall page would attempt to install an ActiveX control when it is displayed in Internet Explorer. This ActiveX control was marked "Safe for scripting," which means that any web page can utilize the control and its methods. Some of the methods provided by this control were dangerous, as they may have allowed an attacker to upload and execute arbitrary code.

On 11 November 2005, Sony announced<a href="#cite_note-31">[31]</a> they would suspend manufacturing CDs using the XCP system:

<blockquote>"As a precautionary measure, Sony BMG is temporarily suspending the manufacture of CDs containing XCP technology," it said in a statement.

"We also intend to re-examine all aspects of our content protection initiative to be sure that it continues to meet our goals of security and ease of consumer use," Sony BMG added.</blockquote>

This followed comments by <a href="Stewart_Baker" title="Stewart Baker">Stewart Baker</a>, the <a href="Department_of_Homeland_Security" class="mw-redirect" title="Department of Homeland Security">Department of Homeland Security</a>'s assistant secretary for policy, in which he took DRM manufacturers to task, as reported in The Washington Post:

<blockquote>In a remark clearly aimed directly at Sony and other labels, Stewart continued: "It's very important to remember that it's your intellectual property - it's not your computer. And in the pursuit of protection of intellectual property, it's important not to defeat or undermine the security measures that people need to adopt in these days."</blockquote>

According to <a href="The_New_York_Times" title="The New York Times">The New York Times</a>,<a href="#cite_note-32">[32]</a> Sony BMG said "about 4.7 million CDs containing the software had been shipped, and about 2.1 million had been sold." 52 albums were distributed by Sony-BMG that contained XCP.<a href="#cite_note-cp.sonybmg.com-33">[33]</a>

On 14 November 2005, Sony announced it was recalling the affected CDs and plans to offer exchanges to consumers who purchased the discs.<a href="#cite_note-34">[34]</a>

<div class="mw-heading mw-heading2"><h2 id="Albums_with_XCP">Albums with XCP</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hatnote{font-style:italic}.mw-parser-output div.hatnote{padding-left:1.6em;margin-bottom:0.5em}.mw-parser-output .hatnote i{font-style:normal}.mw-parser-output .hatnote+link+.hatnote{margin-top:-0.5em}@media print{body.ns-0 .mw-parser-output .hatnote{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div role="note" class="hatnote navigation-not-searchable">Main article: <a href="List_of_compact_discs_sold_with_Extended_Copy_Protection" title="List of compact discs sold with Extended Copy Protection">List of compact discs sold with Extended Copy Protection</a></div>

The <a href="Electronic_Frontier_Foundation" title="Electronic Frontier Foundation">Electronic Frontier Foundation</a> published its original list of 19 titles on 9 November 2005.<a href="#cite_note-35">[35]</a>

On 15 November 2005 <a href="The_Register" title="The Register">The Register</a> published an article<a href="#cite_note-36">[36]</a> saying there may be as many as 47 titles.

Sony BMG says there are 52 XCP CDs.<a href="#cite_note-cp.sonybmg.com-33">[33]</a>

Amazon says it's treating the XCP CDs as defective merchandise and will offer a refund with shipping, as long as the customer specifies the request.<a href="#cite_note-37">[37]</a>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFRussinovich2005" class="citation web cs1">Russinovich, Mark (31 October 2005). <a rel="nofollow" class="external text" href="http://blogs.technet.com/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx">"Sony, Rootkits and Digital Rights Management Gone Too Far"</a>.</cite>

</li>

<li id="cite_note-2"><a href="#cite_ref-2">^</a> <cite id="CITEREFFelton2005" class="citation web cs1">Felton, Ed (15 November 2005). <a rel="nofollow" class="external text" href="http://www.freedom-to-tinker.com/?p=927">"Sony's Web-Based Uninstaller Opens a Big Security Hole; Sony to Recall..."</a></cite>

</li>

<li id="cite_note-3"><a href="#cite_ref-3">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://blogs.technet.com/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx">"Sony, Rootkits and Digital Rights Management Gone Too Far"</a>. Blogs.Technet.com. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-The_50_Worst_Inventions-4">^ <a href="#cite_ref-The_50_Worst_Inventions_4-0">a</a> <a href="#cite_ref-The_50_Worst_Inventions_4-1">b</a> <cite class="citation magazine cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20100530052106/http://www.time.com/time/specials/packages/article/0,28804,1991915_1991909_1991762,00.html">"The 50 Worst Inventions"</a>. Time. 27 May 2010. Archived from <a rel="nofollow" class="external text" href="http://www.time.com/time/specials/packages/article/0,28804,1991915_1991909_1991762,00.html">the original</a> on 30 May 2010.</cite>

</li>

<li id="cite_note-5"><a href="#cite_ref-5">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://archive.today/20120717091816/http://news.bitdefender.com/NW193-en--First-Trojan-Using-Sony-DRM-Detected">"First Trojan Using Sony DRM Detected"</a>. 10 November 2005. Archived from <a rel="nofollow" class="external text" href="http://news.bitdefender.com/NW193-en--First-Trojan-Using-Sony-DRM-Detected">the original</a> on 17 July 2012.</cite>

</li>

<li id="cite_note-6"><a href="#cite_ref-6">^</a> <cite id="CITEREFHalderman2005" class="citation web cs1">Halderman, J. Alex (15 November 2005). <a rel="nofollow" class="external text" href="http://freedom-to-tinker.com/blog/jhalderm/update-sony-uninstaller-hole-stays-open">"Update: Sony Uninstaller Hole Stays Open"</a>.</cite>

</li>

<li id="cite_note-7"><a href="#cite_ref-7">^</a> <cite id="CITEREFFelten2013" class="citation web cs1">Felten, Edward (29 March 2013). <a rel="nofollow" class="external text" href="http://www.slate.com/articles/technology/future_tense/2013/03/dmca_chilling_effects_how_copyright_law_hurts_security_research.single.html">"The Chilling Effects of the DMCA"</a>. <a href="Slate_(magazine)" title="Slate (magazine)">Slate</a>. Retrieved 15 April 2013.</cite>

</li>

<li id="cite_note-ca.com-8">^ <a href="#cite_ref-ca.com_8-0">a</a> <a href="#cite_ref-ca.com_8-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20060418233549/http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453096362">"Spyware Information: XCP.Sony.Rootkit"</a>. 5 October 2005. Archived from <a rel="nofollow" class="external text" href="http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453096362">the original</a> on 18 April 2006.</cite>

</li>

<li id="cite_note-9"><a href="#cite_ref-9">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20090904071819/http://blogs.zdnet.com/Spyware/index.php?p=698">"CA targets Sony DRM as spyware"</a>. <a href="ZDNet" class="mw-redirect" title="ZDNet">ZDNet</a>. Archived from <a rel="nofollow" class="external text" href="http://blogs.zdnet.com/Spyware/index.php?p=698">the original</a> on 4 September 2009.</cite>

</li>

<li id="cite_note-10"><a href="#cite_ref-10">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20070304001739/http://www.microsoft.com/security/encyclopedia/details.aspx?name=WinNT%2FF4IRootkit">"Malicious Software Encyclopedia: WinNT/F4IRootkit"</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. Archived from <a rel="nofollow" class="external text" href="http://www.microsoft.com/security/encyclopedia/details.aspx?name%3DWinNT%2FF4IRootkit">the original</a> on 4 March 2007.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20070928164524/http://msmvps.com/blogs/jubo/archive/2005/12/15/79171.aspx">"December Update for Windows Malicious Software Removal Tool Released"</a>. 15 December 2005. Archived from <a rel="nofollow" class="external text" href="http://msmvps.com/blogs/jubo/archive/2005/12/15/79171.aspx">the original</a> on 28 September 2007.</cite>

</li>

<li id="cite_note-12"><a href="#cite_ref-12">^</a> <cite id="CITEREFSchneier2005" class="citation magazine cs1">Schneier, Bruce (17 November 2005). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20070127095248/http://wired-vig.wired.com/news/privacy/0%2C1848%2C69601%2C00.html">"Security Matters: Real Story of the Rogue Rootkit"</a>. Wired. Archived from <a rel="nofollow" class="external text" href="http://wired-vig.wired.com/news/privacy/0,1848,69601,00.html">the original</a> on 27 January 2007.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20160113133720/http://www.saintsreport.com/forums/printthread.php?s=6d58ebd7f894333e767120b73ed32782&threadid=169497">"SaintsReport Community Forums"</a>. Saintsreport.com. Archived from <a rel="nofollow" class="external text" href="http://www.saintsreport.com/forums/printthread.php?s=6d58ebd7f894333e767120b73ed32782&threadid=169497">the original</a> on 13 January 2016.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.grc.com/sn/SN-012.htm">"GRC - Security Now! Transcript of Episode #12"</a>. Grc.com. 2 November 2005. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.doxpara.com/?q=sony">"Dan Kaminsky's Blog"</a>. Doxpara.com.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite id="CITEREFvon_Lohmann2005" class="citation web cs1">von Lohmann, Fred (9 November 2005). <a rel="nofollow" class="external text" href="https://www.eff.org/deeplinks/2005/11/now-legalese-rootkit-sony-bmgs-eula">"Now the Legalese Rootkit: Sony-BMG's EULA"</a>.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20131017225417/http://www.the-interweb.com/serendipity/index.php?/archives/55-Proof-that-F4I-violates-the-GPL.html">"Proof That F4I Violates the GPL"</a>. The-Interweb.com. Archived from <a rel="nofollow" class="external text" href="http://www.the-interweb.com/serendipity/index.php?/archives/55-Proof-that-F4I-violates-the-GPL.html">the original</a> on 17 October 2013.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20090124220936/http://www.the-interweb.com/serendipity/index.php?/archives/52-Is-Sony-in-violation-of-the-LGPL-Part-II.html">"Is Sony in violation of the LGPL? - Part II"</a>. The-Interweb.com. Archived from <a rel="nofollow" class="external text" href="http://www.the-interweb.com/serendipity/index.php?/archives/52-Is-Sony-in-violation-of-the-LGPL-Part-II.html">the original</a> on 24 January 2009.</cite>

</li>

<li id="cite_note-19"><a href="#cite_ref-19">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.the-interweb.com/serendipity/index.php?/archives/54-Breakthrough-after-breakthrough-in-the-F4I-case.html">"Breakthrough after breakthrough in the F4I case"</a>. The-Interweb.com.</cite>

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20131017225419/http://www.the-interweb.com/serendipity/index.php?/archives/56-Two-new-F4I-license-infringements-found.html">"Two new F4I license infringements found"</a>. The-Interweb.com. Archived from <a rel="nofollow" class="external text" href="http://www.the-interweb.com/serendipity/index.php?/archives/56-Two-new-F4I-license-infringements-found.html">the original</a> on 17 October 2013.</cite>

</li>

<li id="cite_note-21"><a href="#cite_ref-21">^</a> <a rel="nofollow" class="external free" href="http://the-interweb.com/bdump/misc/id3lib.png">http://the-interweb.com/bdump/misc/id3lib.png</a>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20130615032120/http://sam.zoy.org/blog/2005-11-21-suspicious-activity-indeed">"Sam Hocevar's .plan"</a>. Sam.Zoy.org. Archived from <a rel="nofollow" class="external text" href="http://sam.zoy.org/blog/2005-11-21-suspicious-activity-indeed">the original</a> on 15 June 2013.</cite>

</li>

<li id="cite_note-23"><a href="#cite_ref-23">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.freedom-to-tinker.com/?p=940">"Hidden Feature in Sony DRM Uses Open Source Code to Add Apple DRM"</a>. Freedom-To-Tinker.com. 4 December 2005. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-24"><a href="#cite_ref-24">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://nanocrew.net/2006/01/31/sony-bmg-infringement/">"Jon Lech Johansen's blog"</a>. Nanocrew.net. 31 January 2006. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-25"><a href="#cite_ref-25">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.techdirt.com/articles/20060201/0313222_F.shtml">"The Difficulty Of Suing Sony BMG For Violating GPL With Their Rootkit"</a>. Techdirt. 1 February 2006. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-26"><a href="#cite_ref-26">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://lame.sourceforge.net/open_letter_sony_bmg.html">"LAME Ain't an MP3 Encoder"</a>. Lame.sourceforge.net. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-27"><a href="#cite_ref-27">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20080823044823/http://www.sony.net/Products/OpenMG/overview/tech.html">"Technical Overview and Benefits"</a>. Sony. Archived from <a rel="nofollow" class="external text" href="http://www.sony.net/Products/OpenMG/overview/tech.html">the original</a> on 23 August 2008.</cite>

</li>

<li id="cite_note-28"><a href="#cite_ref-28">^</a> <cite class="citation news cs1"><a rel="nofollow" class="external text" href="https://www.npr.org/templates/story/story.php?storyId=4989260">"Sony Music CDs Under Fire from Privacy Advocates"</a>. NPR. 4 November 2005. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-29"><a href="#cite_ref-29">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20051107020437/http://www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html">"More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home"</a>. SysInternals.com. 4 November 2005. Archived from <a rel="nofollow" class="external text" href="http://www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html">the original</a> on 7 November 2005.</cite>

</li>

<li id="cite_note-30"><a href="#cite_ref-30">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20051126074206/http://www.sonybmg.com/privacypolicy.html">"Sony BMG Privacy Policy"</a>. Archived from <a rel="nofollow" class="external text" href="http://www.sonybmg.com/privacypolicy.html">the original</a> on 26 November 2005.</cite>

</li>

<li id="cite_note-31"><a href="#cite_ref-31">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://arquivo.pt/wayback/20091223085958/http://uk.reuters.com/">"Breaking News, Business News, Financial and Investing News & More"</a>. Reuters.co.uk. Archived from <a rel="nofollow" class="external text" href="http://uk.reuters.com/">the original</a> on 23 December 2009. Retrieved 4 February 2019.</cite>

</li>

<li id="cite_note-32"><a href="#cite_ref-32">^</a> <cite id="CITEREFZeller2005" class="citation news cs1">Zeller, Tom Jr. (14 November 2005). <a rel="nofollow" class="external text" href="https://www.nytimes.com/2005/11/14/business/14rights.html">"The Ghost in the CD"</a>. <a href="The_New_York_Times" title="The New York Times">The New York Times</a>. Retrieved 2 May 2010.</cite>

</li>

<li id="cite_note-cp.sonybmg.com-33">^ <a href="#cite_ref-cp.sonybmg.com_33-0">a</a> <a href="#cite_ref-cp.sonybmg.com_33-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20071012024250/http://cp.sonybmg.com/xcp/english/titles.html">"Sony BMG:CDs Containing XCP Content Protection Technology"</a>. 12 October 2007. Archived from <a rel="nofollow" class="external text" href="http://cp.sonybmg.com/xcp/english/titles.html">the original</a> on 12 October 2007. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-34"><a href="#cite_ref-34">^</a> <cite id="CITEREFGraham2005" class="citation news cs1">Graham, Jefferson (14 November 2005). <a rel="nofollow" class="external text" href="https://www.usatoday.com/tech/news/computersecurity/2005-11-14-sony-cds_x.htm?csp=34">"Sony to Pull Controversial CDs, Offer Swap"</a>. USA Today. Retrieved 2 May 2010.</cite>

</li>

<li id="cite_note-35"><a href="#cite_ref-35">^</a> <cite id="CITEREFvon_Lohmann2005" class="citation web cs1">von Lohmann, Fred (8 November 2005). <a rel="nofollow" class="external text" href="https://www.eff.org/deeplinks/archives/004144.php">"Are You Infected by Sony-BMG's Rootkit?"</a>. EFF.org. Electronic Frontier Foundation. Retrieved 5 June 2012.</cite>

</li>

<li id="cite_note-36"><a href="#cite_ref-36">^</a> <cite id="CITEREFCullen2005" class="citation web cs1">Cullen, Drew (15 November 2005). <a rel="nofollow" class="external text" href="https://www.theregister.co.uk/2005/11/15/sony_bmg_bodycount/">"Sony rootkit DRM: how many infected titles?"</a>. <a href="The_Register" title="The Register">The Register</a>.</cite>

</li>

<li id="cite_note-37"><a href="#cite_ref-37">^</a> <cite class="citation news cs1"><a rel="nofollow" class="external text" href="https://www.usatoday.com/tech/news/computersecurity/2005-11-15-sony-qa_x.htm">"Copy-Protected-CD Flap Raises Questions"</a>. USA Today. 16 November 2005. Retrieved 2 May 2010.</cite>

</li>

</ol></div></div>

<div class="mw-heading mw-heading2"><h2 id="Further_reading">Further reading</h2></div>

<ul><li><cite id="CITEREFKrebs2005" class="citation news cs1">Krebs, Brian (8 November 2005). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20060427065357/http://blogs.washingtonpost.com/securityfix/2005/11/calif_ny_lawsui.html">"Calif. Lawsuit Targets Sony"</a>. <a href="The_Washington_Post" title="The Washington Post">The Washington Post</a>. Archived from <a rel="nofollow" class="external text" href="http://blogs.washingtonpost.com/securityfix/2005/11/calif_ny_lawsui.html">the original</a> on 27 April 2006.</cite></li></ul>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li> <a href="https://en.wikinews.org/wiki/Sony%27s_DRM_protected_CDs_install_Windows_rootkits" class="extiw external" title="wikinews:Sony's DRM protected CDs install Windows rootkits">Sony's DRM protected CDs install Windows rootkits</a> at <a href="Wikinews" title="Wikinews">Wikinews</a></li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Digital_rights_management_software53" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Digital_rights_management_software53" style="font-size:114%;margin:0 4em"><a href="Digital_rights_management" title="Digital rights management">Digital rights management</a> software</div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Software</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li>

<li><a href="Denuvo" title="Denuvo">Denuvo</a></li>

<li><a href="LaserLock" title="LaserLock">LaserLock</a></li>

<li><a href="MediaMax" title="MediaMax">MediaMax</a>

<li><a href="OpenMG" title="OpenMG">OpenMG</a></li>

<li><a href="PlayReady" title="PlayReady">PlayReady</a></li>

<li><a href="SafeDisc" title="SafeDisc">SafeDisc</a></li>

<li><a href="SecuROM" title="SecuROM">SecuROM</a></li>

<li><a href="StarForce" title="StarForce">StarForce</a></li>

<li><a href="Tag%C3%A8s" title="Tagès">Tagès</a></li>

<li><a href="Windows_Media_DRM" title="Windows Media DRM">Windows Media DRM</a>

<ul><li><a href="Janus_(DRM)" title="Janus (DRM)">Janus</a></li></ul></li>

<li><a href="Widevine" title="Widevine">Widevine</a></li>

<li><a href="FairPlay" title="FairPlay">FairPlay</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Related</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Defective_by_Design" title="Defective by Design">Defective by Design</a></li>

<li><a href="Software_cracking" title="Software cracking">Software cracking</a></li>

<li><a href="Sony_BMG_copy_protection_rootkit_scandal" title="Sony BMG copy protection rootkit scandal">Sony BMG copy protection rootkit scandal</a></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-08-06" href="https://en.wikipedia.org/wiki/?title=Extended_Copy_Protection&oldid=1304580675">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>