1x1



NOVEMBER 22, 2005
News Analysis

By Lorraine Woellert


Sony's Escalating "Spyware" Fiasco

Along with lawyers, prosecutors, and furious fans, artists are joining the backlash against the label for slipping a hidden, anti-theft program into users' computers


  STORY TOOLS
Printer-Friendly Version
E-Mail This Story
POLL INSTANT SURVEY >>
With which of the following statements on outsourcing do you most agree?

The benefits of outsourcing to corporate America far outweigh the costs
There's an even split between the drawbacks and rewards
Any benefits are overshadowed by the loss of U.S. jobs
Unsure

VIEW POLL RESULTS >>
  PEOPLE SEARCH

Search for business contacts:

First Name :
Last Name :
Company Name :

PREMIUM SEARCH
Search by job title, geography and build a list of executive contacts

Search by Zoominfo
  Tech White Papers

Van Zant's Get Right with the Man CD was released in May, but six months later it still was doing better-than-respectable business on Amazon.com (AMZN). The album ranked No. 887 on the online retailer's list of music sales on Nov. 2. Then news of the CD's aggressive content safeguards -- a sub-rosa software program incorporated courtesy of Sony BMG -- exploded on the Internet.


To prevent audiophiles from making multiple copies of the CDs, Sony (SNE) had programmed the Van Zant disk, and dozens of others, with a hidden code called a "rootkit" that secretly installs itself on hard drives when the CDs are loaded onto listeners' PCs. Soon enough, hackers began designing viruses to take malicious advantage of the hidden program, and a Sony boycott had begun (see BW Online, 11/17/05, "Sony's Copyright Overreach").

GROWING OUTRAGE.  Overnight, Get Right with the Man dropped to No. 1,392 on Amazon's music rankings. By Nov. 22 -- after the news made headlines and Sony was deep into damage control, pulling some 4.7 million copy-protected disks from the market -- Get Right with the Man was even further from Amazon's Top 40, plummeting to No. 25,802.

The wrath of fans killed Sony's CD copy controls, with the company pulling 52 titles off retail shelves, beginning the week of Nov. 14. But the wrath of bands could be far worse for the company -- and for efforts to protect content in general.

Singers and songwriters are increasingly expressing frustration at devices used by record companies to protect digital content from widespread theft that results when CDs are copied repeatedly or popular tracks are given away on peer-to-peer (P2P) networks, such as LimeWire and BitTorrent. Sony's misstep has been bad for the company -- and its effects could spread much further, should the consumer outcry gain traction with the recording artists who need to keep their fans happy if they want to sell records.

DROP IN SALES.  In the beginning, it was cyber libertarians and outspoken consumer groups leading the charge against digital rights management (DRM). But the Sony rootkit debacle has brought the issue home even to digilliterates -- including many of the artists themselves.

"We're really upset about this," says Patrick Jordan, director of marketing for Red Light Management, which represents Trey Anastasio, former front man to jam band Phish. Anastasio's latest solo album, Shine, was released Nov. 1, just as news of Sony's rootkit was worming its way onto Internet blogs and listservs. "I'm expecting a decrease in sales," Jordan adds.

Indeed, Shine debuted with 15,000 sales its first week. But by week two, when the rootkit fiasco was in full swing, sales had plummeted to 7,000. Weekly numbers will be released Nov. 23, and Jordan is bracing for the worst. "It's been damaging, and certainly we're going to discuss that with the label," he says.

MADDENING METHOD.  Recording artists as a group have been among the most vocal backers of so-called DRM schemes as a way to control online theft of music. And many such protection devices are widely accepted, because they're loose enough that they don't impede the average audiophile's listening.

A Sony BMG spokesman declined to comment for this story, but the goal of the Sony rootkit has been lost in the digital fog. The software was meant to set up speed bumps for would-be thieves, yet give consumers some of that much-demanded flexibility. In Sony's case, that meant the freedom to make up to three copies of a purchased disk and play it on multiple platforms, such as a PC or a car stereo, yet prevent posting to P2P sites or massive copying.

What tripped up the company was less its goal than the method used to achieve it. Sony BMG's content-protection scheme, designed by an outside software-security firm, was basically a form of spyware. Rootkit installed itself surreptitiously, relayed back to the company what users were doing with their Sony music, and exposed users' PCs to viruses.

THE CULTURAL CHALLENGE.  Sony now is facing at least three consumer class-action lawsuits, as well as at least one law-enforcement action. On Nov. 21, Texas Attorney General Greg Abbott accused the company of violating the Lone Star state's laws against computer spyware.

"Sony has engaged in a technological version of cloak-and-dagger deceit against consumers by hiding secret files on their computers," Abbott said in a written statement. "Consumers who purchased a Sony CD thought they were buying music. Instead, they received spyware that can damage a computer, subject it to viruses, and expose the consumer to possible identity crime."

But the most serious fallout from the rootkit brouhaha could be the cultural challenge to DRM. Some artists, including the Dave Matthews Band, subscribe to a "trust your fan" mentality, and have begun negotiating with their record labels to omit content-protection provisions from their CDs.

BROKENHEARTED ARTISTS.  Many others are frustrated with content protections, such as Sony's, which prevent their music from being dragged onto Apple Computer's (AAPL) iPod. Apple refuses to license the proprietary iPod software to the record labels for use with any music that isn't purchased from its iTunes music-download site.

As Sony BMG and other labels release more CDs with tracks that can't be dragged to iPods, artists are hearing from outraged fans. In response, some artists -- including Tim Foreman, guitarist for Switchfoot, whose Nothing Is Sound release was part of the Sony recall -- used a fan site to post instructions for disabling Sony content protections that prevent consumers from dragging tunes to their iPods.

"We were horrified when we first heard about the new copy-protection policy," Foreman wrote in a Sept. 14 post first reported by Billboard magazine. "It is heartbreaking to see our blood, sweat, and tears over the past two years blurred by the confusion and frustration surrounding new technology."

ABANDONED LABELS?  "This is serious business," says Red Light Management's Jordan. "As managers, we've always supported trusting our fans. Copy protection has nothing to do with trust."

If reaction to the Sony rootkit is any measure, Jordan is right. As news of the secret code grew, music fans began using Amazon's review function to post messages to their favorite tunesters. "Sorry Trey," wrote Freddie, an Anastasio fan from Maryland, "but you should find a new label."

Artists have yet to take such measures -- but if the fallout worsens, Freddie's advice may not sound so drastic.
 READER COMMENTS




Woellert is a correspondent in BusinessWeek's Washington bureau


 BW MALL   SPONSORED LINKS
Buy a link now!


Get BusinessWeek directly on your desktop with our RSS feeds.XML

Add BusinessWeek news to your Web site with our headline feed.

Click to buy an e-print or reprint of a BusinessWeek or BusinessWeek Online story or video.

To subscribe online to BusinessWeek magazine, please click here.

Learn more, go to the BusinessWeekOnline home page

Back to Top
Advertising | Special Sections | MarketPlace | Knowledge Centers

Terms of Use | Privacy Notice | Ethics Code | Contact Us

Copyright 2000- 2012 by Bloomberg L.P.
All rights reserved.

Bloomberg L.P.

  MARKET INFO
DJIA 0 0.00
S&P 500 0 0.00
Nasdaq 0 0.00

Portfolio Service Update

Stock Lookup

Enter name or ticker