Uli's Web Site
[ Zathras.de - Uli's Web Site ]
Other Sites: Stories
Abi 2000
Stargate: Resurgence
Lost? Site Map!
     home | blog | moose | programming | articles >> blog

 Blog Topics

15 Most Recent [RSS]

 Less work through Xcode and shell scripts
2011-12-16 @600
 iTunesCantComplain released
2011-10-28 @954
 Dennis Ritchie deceased
2011-10-13 @359
 Thank you, Steve.
2011-10-06 @374
 Cocoa Text System everywhere...
2011-03-27 @788
 Blog migration
2011-01-29 @520
 All you need to know about the Mac keyboard
2010-08-09 @488
 Review: Sherlock
2010-07-31 @978
 Playing with Objective C on Debian
2010-05-08 @456
 Fruit vs. Obst
2010-05-08 @439
 Mixed-language ambiguity
2010-04-15 @994
 Uli's 12:07 AM Law
2010-04-12 @881
 Uli's 1:24 AM Law
2010-04-12 @874
 Uli's 6:28 AM Law
2010-04-12 @869
 Uli's 3:57 PM Law
2010-04-12 @867


German court against root-kits

German tech news site Heise just reported that a reseller has to reimburse a customer for losses suffered installing a Sony rootkit-encumbered CD.

You may remember that Sony added a root kit ("XCP", essentially an invasive, self-installing piece of software that works the same way as many trojans do). For those who aren't able to read German, here's a translation:

The plaintiff (...) had purchased an Anastacia-CD by Sony from the defendant through eBay. When he attempted to play it on his computer, a warning message from his anti-virus software appeared, according to which a trojan called "rootkit.b" had been detected. The plaintiff then did a scan for malware on his three computers and "set a restore point". In the process, loss of data had occurred.

In the course of the claim, he requested 200 Euros for 20 work hours "during the run of the anti-virus software", as well as 100 Euros for ten hours needed to re-enter the lost data. In addition, he demanded compensation for loss of profit, since he had been unable to pursue his freelance business. He also demanded 800 Euros, that he had to pay an expert for restoring his network and about 185 Euros in lawyer's fees. In total his demands thus came to about 1500 Euros.

The court eventually ordered the seller to pay damages of about 1200 Euros. In the judge's opinion, the sold Music CD was defective in quality. The purchaser of a CD could expect it to be playable on a computer without invasive effects on his system. But after consulting an expert's report, it became clear that an application on the Sony CD had at least attempted to access the internet.

The seller of the CD was to answer for this defect. Although a music salesman could usually not be expected to check every copy of a music CD in advance, in this case the "not merely remote possibility" existed that the seller was aware of the issues surrounding the Sony products. On the other hand, the plaintiff did not have any responsibility. He had not acted differently "than to be expected from an average user in this situation". In particular, the defect "provoked" his reaction. Therefore, the court ordered the defendant to pay the demanded damages except for the lost profit. According to the plaintiff, the judgement has become final in the meantime.

The judgement was performed by the municipal court in Hamburg-Wandsbek, so this is not the final say in the matter, especially not for all of Germany, but there is hope that this will come back to bite Sony, and that resellers will increase pressure on Sony to protect them from future issues like this, forcing a general recall of any leftover CDs, and that no company will try something as invasive, and as stupid again.

Too bad about the seller, though. While he apparently was found to not really have performed due diligence after the Sony Root-kit fiasco, I think the wrong person was sentenced here. Someone responsible from Sony should really have been sitting on the bench here.

PS - I am not a lawyer, and everything on this page (and this site, actually) is just my personal opinion. I might have mis-translated a few legal terms, so when in doubt, go to the German translation for clarification.

Reader Comments: (RSS Feed)
No comments yet
Or E-Mail Uli privately.

Created: 2009-09-12 @824 Last change: 2009-09-12 @850 | Home | Admin | Edit
© Copyright 2003-2023 by M. Uli Kusterer, all rights reserved.