Sony CD's using rootkits/malware

[BishopMVP]

http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html

I'll be honest, a lot of this tech stuff is over my head. Basically, not only does every copy-protected Sony CD use rootkits to hide registry keys and programs, but it's also poorly-written, keeps using CPU processing power even when not running and almost impossible to remove without damaging your system. And in violation of numerous laws in various countries. So let the class action suits begin.

[Hurst2112]

the author of that stuff has no girlfriend. that author will never have a girlfriend. that author owns 20 sided die.

[Draft Dodger]

this what I hate about this crap. and, again, worth noting that it is almost useless in its intended purpose (stopping piracy). all it does is piss of consumers.

its one thing to have this kind of shit install itself. its another to have it be written so poorly that it damages your fucking system. like a few years ago when I kept getting crashes and (finally) found it was caused by some crappily written spyware on a Creative Labs product.

wanna guess how many Creative Labs products I've bought since then?

[SnowMan]

Uh....none? (wild guess here)

[sterlingice]

the author of that stuff has no girlfriend. that author will never have a girlfriend. that author owns 20 sided die. Once you get past the hex dump, most of that stuff is pretty simple. And that's coming from someone who has a wife (and a 20-sided die, mind you). :p

SI

[Hurst2112]

Once you get past the hex dump, most of that stuff is pretty simple. And that's coming from someone who has a wife (and a 20-sided die, mind you).

SI

good one...touche

[sterlingice]

Hm... looking back, I realized I missed the requisite smiley for a statement like that. It looks a lot more serious than intended. Edited to fix that

SI

[finketr]

Once you get past the hex dump, most of that stuff is pretty simple. And that's coming from someone who has a wife (and a 20-sided die, mind you). :p

SI

on the other hand, you don't have a girlfriend and you'll never have a girlfriend, and you own a 20sided die...

:)
:p

[Draft Dodger]

on the other hand, you don't have a girlfriend and you'll never have a girlfriend, and you own a 20sided die...

:)
:p

on the other other hand, he never actually said he doesn't have a girlfriend

[Ksyrup]

Update:

The Electronic Frontier Foundation has a list of the known Sony/BMG CDs with copy protection (http://www.eff.org/deeplinks/archives/004144.php) that includes a rootkit (http://www.chron.com/cs/CDA/ssistory.mpl/tech/weekly/3445666).
They are:

Trey Anastasio, Shine (Columbia)
Celine Dion, On ne Change Pas (Epic)
Neil Diamond, 12 Songs (Columbia)
Our Lady Peace, Healthy in Paranoid Times (Columbia)
Chris Botti, To Love Again (Columbia)
Van Zant, Get Right with the Man (Columbia)
Switchfoot, Nothing is Sound (Columbia)
The Coral, The Invisible Invasion (Columbia)
Acceptance, Phantoms (Columbia)
Susie Suh, Susie Suh (Epic)
Amerie, Touch (Columbia)
Life of Agony, Broken Valley (Epic)
Horace Silver Quintet, Silver's Blue (Epic Legacy)
Gerry Mulligan, Jeru (Columbia Legacy)
Dexter Gordon, Manhattan Symphonie (Columbia Legacy)
The Bad Plus, Suspicious Activity (Columbia)
The Dead 60s, The Dead 60s (Epic)
Dion, The Essential Dion (Columbia Legacy)
Natasha Bedingfield, Unwritten (Epic)
Ricky Martin, Life (Columbia) (labeled as XCP, but, oddly, our disc had no protection)

The item also lists a few other Sony/BMG titles that use a different kind of copy protection. It also shows you where to look on a CD to determine whether copy protection is present.

Back to bed . . .

Update: Reader Linda Moore lets us know about a Washington Post story (http://blogs.washingtonpost.com/securityfix/2005/11/calif_ny_lawsui.html) detailing lawsuits filed over the Sony rootkit in New York and California.

And eWeek says (http://www.eweek.com/article2/0,1895,1884677,00.asp) Microsoft is "concerned" about Sony's actions, but hasn't yet added to Microsoft Antispyware/Windows Defender the ability to remove the rootkit, as have other security software companies (http://news.com.com/Antivirus+firms+target+Sony+copy+protection/2100-1029_3-5942265.html) -- with Sony's help.

hxxp://blogs.chron.com/techblog/archives/2005/11/list_of_sonybmg.html

[Ksyrup]

Sony really stepped in it, didn't they?


Experts: Sony Plan Widens Security Hole

By BRIAN BERGSTEIN, AP Technology Writer

Tuesday, November 15, 2005

(11-15) 17:43 PST BOSTON, (AP) --

The fallout from a hidden copy-protection program that Sony BMG Music Entertainment put on some CDs is only getting worse. Sony's suggested method for removing the program actually widens the security hole the original software created, researchers say.

Sony apparently has moved to recall the discs in question, but music fans who have listened to them on their computers or tried to remove the dangerous software they deposited could still be vulnerable.

"This is a surprisingly bad design from a security standpoint," said Ed Felten, a Princeton University computer science professor who explored the removal program with a graduate student, J. Alex Halderman. "It endangers users in several ways."

The "XCP" copy-protection program was included on at least 20 CDs, including releases by Van Zant, The Bad Plus, Neil Diamond and Celine Dion.

When the discs were put into a PC — a necessary step for transferring music to iPods and other portable music players — the CD automatically installed a program that restricted how many times the discs' tracks could be copied, and made it extremely inconvenient to transfer songs into the format used by iPods.

That antipiracy software — which works only on Windows PCs — came with a cloaking feature that allowed it to hide files on users' computers. Security researchers classified the program as "spyware," saying it secretly transmits details about what music the PC is playing. Manual attempts to remove the software can disable the PC's CD drive.

The program also gave virus writers an easy tool for hiding their malicious software. Last week, virus-like "Trojan horse" programs emerged that took advantage of the cloaking feature to enter computers undetected, antivirus companies said. Trojans are typically used to steal personal information, launch attacks on other computers and send spam.

Stung by the controversy, Sony BMG and the company that developed the antipiracy software, First 4 Internet Ltd. of Oxfordshire, United Kingdom, released a program that uninstalls XCP.

But the uninstaller has created a new set of problems.

To get the uninstall program, users have to request it by filling out online forms. Once submitted, the forms themselves download and install a program designed to ready the PC for the fix. Essentially, it makes the PC open to downloading and installing code from the Internet.

According to the Princeton analysis, the program fails to make the computer confirm that such code should come only from Sony or First 4 Internet.

"The consequences of the flaw are severe," Felten and Halderman wrote in a blog posting Tuesday. "It allows any Web page you visit to download, install, and run any code it likes on your computer. Any Web page can seize control of your computer; then it can do anything it likes. That's about as serious as a security flaw can get."

Sony BMG spokesman John McKay did not return calls seeking comment. First 4 Internet was not making any comment, according to Lynette Riley, the office manager who answered the company's phone Tuesday evening in England.

Mark Russinovich, the security researcher who first discovered the hidden Sony software, is advising users who played one of the CDs on their computer to wait for the companies to release a stand-alone uninstall program that doesn't require filling out the online form.

"There's absolutely no excuse for Sony not to make one immediately available," he wrote in an e-mail Tuesday.

Other programs that knock out the original software are also likely to emerge. Microsoft Corp. says the next version of its tool for removing malicious software, which is automatically sent to PCs via Windows Update each month, will yank the cloaking feature in XCP.

Sony BMG said Friday it would halt production of CDs with XCP technology and pledged to "re-examine all aspects of our content protection initiative." On Monday night, USA Today's Web site reported that Sony BMG would recall the CDs in question.

[Ksyrup]

I'm glad I haven't bought any of these CDs yet. I mean, I was going to, but when I read about all the security risks, I just downloaded them for free.

[albionmoonlight]

I feel bad for the techo-unsavy middle aged women who got the Celine Dion CD for their birthday and now have a totally messed up computer.

It's one thing to play these games with people who you know are doing wrong--like when music companies put bogus files up on Napster.

It's a total other thing to mess with innocent people who wouldn't know how to download an illegal song if they wanted to.

What should happen is Sony should be held liable for all of the damage that they caused.

What will happen is a big class action lawsuit where the lawyers end up making millions and the class members get a coupon for 1/3 off their next Sony Music purchase up to $15.*

*I'm not the biggest fan of the class action system as currently practiced in America.

[Ragone]

Funny thing is.. this same malware creates major issues for world of warcraft's anti cheating malware.. thusly making cheaters untrackable .. hah :)

[Ksyrup]

What will happen is a big class action lawsuit where the lawyers end up making millions and the class members get a coupon for 1/3 off their next Sony Music purchase up to $15.*

*I'm not the biggest fan of the class action system as currently practiced in America.Let's you and I get in on this action and then buy the Orioles from Peter Angelos!

The idea of willfully spreading Celine Dion's music...*shudder*

On a serious note, though, you are completely right - not only are the people who buy her music likely to be tech-unfriendly, but they are also more likely to be able to afford her albums anyway. Yes, I could see a bunch of young people trading The Coral. But Celine Dion?!

[Solecismic]

I haven't bought a single CD since the record companies started putting in software that made it impossible to play on a computer. It's just not worth it to me to spend the time to figure out what works and what doesn't.

This story has convinced me that my decision was right.

That said, it's still wrong to pirate music, and I don't do it at all. So the net result is that I no longer listen to new music, except on the radio.

[albionmoonlight]

Let's you and I get in on this action and then buy the Orioles from Peter Angelos!
I'd rather buy an NBA team. The players have hotter groupies.

[Anthony]

I'd rather buy an NBA team. The players have hotter groupies.

no let's buy a baseball team. you two can be the silent, behind the scenes guys like the Boston owners and i'll be the obnoxious, rather public Larry Lucchino type guy. YAY to class action suits! :)

of course i'm not an attorney and couldn't help you guys, but Lucchino isn't an owner either and that doesn't stop him from controlling the team.

[Raiders Army]

This is also disturbing:

If you thought XCP "rootkit" copy-protection on Sony-BMG CDs was bad, perhaps you'd better read the 3,000 word (!) end-user license agreement (aka "EULA") that comes with all these CDs.

First, a baseline. When you buy a regular CD, you own it. You do not "license" it. You own it outright. You're allowed to do anything with it you like, so long as you don't violate one of the exclusive rights reserved to the copyright owner. So you can play the CD at your next dinner party (copyright owners get no rights over private performances), you can loan it to a friend (thanks to the "first sale" doctrine), or make a copy for use on your iPod (thanks to "fair use"). Every use that falls outside the limited exclusive rights of the copyright owner belongs to you, the owner of the CD.

Now compare that baseline with the world according to the Sony-BMG EULA, which applies to any digital copies you make of the music on the CD:

1. If your house gets burgled, you have to delete all your music from your laptop when you get home. That's because the EULA says that your rights to any copies terminate as soon as you no longer possess the original CD.

2. You can't keep your music on any computers at work. The EULA only gives you the right to put copies on a "personal home computer system owned by you."

3. If you move out of the country, you have to delete all your music. The EULA specifically forbids "export" outside the country where you reside.

4. You must install any and all updates, or else lose the music on your computer. The EULA immediately terminates if you fail to install any update. No more holding out on those hobble-ware downgrades masquerading as updates.

5. Sony-BMG can install and use backdoors in the copy protection software or media player to "enforce their rights" against you, at any time, without notice. And Sony-BMG disclaims any liability if this "self help" crashes your computer, exposes you to security risks, or any other harm.

6. The EULA says Sony-BMG will never be liable to you for more than $5.00. That's right, no matter what happens, you can't even get back what you paid for the CD.

7. If you file for bankruptcy, you have to delete all the music on your computer. Seriously.

8. You have no right to transfer the music on your computer, even along with the original CD.

9. Forget about using the music as a soundtrack for your latest family photo slideshow, or mash-ups, or sampling. The EULA forbids changing, altering, or make derivative works from the music on your computer.

EULA is here: hxxp://www.sysinternals.com/blog/sony-eula.htm

[SackAttack]

If any provision of this EULA is subsequently held to be invalid or unenforceable by any court or other authority, such invalidity or unenforceability shall in no way affect the validity or enforceability of any other provision of this EULA.

So if any court at all declares the EULA invalid, none of that sticks. I don't know if there would be any penalty for trying to enforce an invalid contract, but there you are.

[SackAttack]

Dola,

I should say, "the entire EULA."

[Anthony]

This is also disturbing:



EULA is here: hxxp://www.sysinternals.com/blog/sony-eula.htm

- do not taunt Happy Fun Ball

[Ksyrup]

If, after I open the CD (thereby invalidating any chance I have of returning it to the store I bought it from for a full refund) and reade the EULA, and thereafter decide I don't want to abide by the terms of the EULA, will these jackasses give me my money back? I've always thought the idea of forcing someone to read the terms of a purchase upon opening and/or installing the item, when we all know you can't return anything after it's been opened, is ridiculous. And somehow I bet they either wouldn't honor my request for my money back, or would made it so difficult it wouldn't be worth the effort.

Hmmm...I smell a CLASS ACTION!

[SackAttack]

If, after I open the CD (thereby invalidating any chance I have of returning it to the store I bought it from for a full refund) and reade the EULA, and thereafter decide I don't want to abide by the terms of the EULA, will these jackasses give me my money back? I've always thought the idea of forcing someone to read the terms of a purchase upon opening and/or installing the item, when we all know you can't return anything after it's been opened, is ridiculous. And somehow I bet they either wouldn't honor my request for my money back, or would made it so difficult it wouldn't be worth the effort.

Hmmm...I smell a CLASS ACTION!

Could be. Something similar happened with software to the point that Best Buy now is able to print out EULAs on software for people to read prior to purchase.

If music CD's now carry EULA's, they could probably be similarly classed.

[sovereignstar]

Um, yeah. I'll stick to buying my music from the Russian mafia.

[Ksyrup]

<TABLE cellSpacing=0 cellPadding=0 width=629 border=0><TBODY><TR><TD colSpan=3>Sony recalls copy-protected CDs

</TD></TR><TR><TD vAlign=top width=416><!-- S BO --><!-- S IIMA --><TABLE cellSpacing=0 cellPadding=0 width=203 align=right border=0><TBODY><TR><TD>http://newsimg.bbc.co.uk/media/images/41024000/jpg/_41024626_moresony-bbc203.jpg Neil Diamond's latest album sold well despite the XCP row

</TD></TR></TBODY></TABLE><!-- E IIMA --><!-- S SF -->Sony BMG is recalling music CDs that use controversial anti-piracy software.

The software was widely criticised because it used virus-like techniques to stop illegal copies being made.

Widespread pressure has made the music giant remove CDs bearing the software from stores. It will also swap bought CDs for copies free of the XCP anti-piracy software.

Sony is also providing software to make it easy to remove the controversial program from Windows computers. <!-- E SF -->

Swap shop

Sony's music arm could be recalling millions of CDs because at least 20 discs are known to use XCP some by best-selling artists such as Celine Dion, Natasha Bedingfield, and Amerie.

One of the discs, Neil Diamond's 12 Songs, was the top seller on Amazon.com for several days.

<!-- S IBOX --><TABLE cellSpacing=0 cellPadding=0 width=208 align=right border=0><TBODY><TR><TD width=5>http://newsimg.bbc.co.uk/shared/img/o.gif</TD><TD class=sibtbg>XCP PROTECTED CDS
Trey Anastasio - Shine
Celine Dion - On ne Change Pas
Neil Diamond - 12 Songs
Our Lady Peace - Healthy in Paranoid Times
Chris Botti - To Love Again
Van Zant - Get Right with the Man
Switchfoot - Nothing is Sound
The Coral - The Invisible Invasion
Acceptance - Phantoms
Susie Suh - Susie Suh
Amerie - Touch
Life of Agony - Broken Valley
Horace Silver Quintet - Silver's Blue
Gerry Mulligan - Jeru
Dexter Gordon - Manhattan Symphonie
The Bad Plus - Suspicious Activity
The Dead 60s - The Dead 60s
Dion - The Essential Dion
Natasha Bedingfield - Unwritten
Ricky Martin - Life

</TD></TR></TBODY></TABLE><!-- E IBOX -->No detailed figures have been given by Sony for how many CDs are protected with XCP or how many have been sold.

However, work by respected net expert Dan Kaminsky found that more than 500,000 networks have at least one machine on them using XCP.

Although the CDs containing XCP were only released in the US, Mr Kaminsky found that 44,000 copies were installed on machines in the UK.

In its statement announcing the recall Sony BMG said: "We deeply regret any inconvenience this may cause our customers and we are committed to making this situation right."

Security exploit

The alarm about XCP was raised by Windows programming expert Mark Russinovich who discovered that it used a "root kit" to install itself deep inside the operating system.

Subsequent to his discovery virus writers started exploiting XCP's stealthy abilities to hide their own creations.

In the same statement about the recall Sony BMG said it would make it much easier to uninstall the XCP system from Windows PCs on which is has been installed.

Before now any customer wanting to rid their PC of XCP had to go through a several stage process of telling Sony what they wanted to do and then waiting for it to respond. As well as being criticised for its inconvenience security researchers found that the uninstaller left Windows machines vulnerable to several exploits. The XCP copy protection system only installed on machines running Windows.

Writing on the Freedom to Tinker blog, researchers J Alex Halderman and Ed Felten found that cleverly written webpages could exploit the programming code used to remove XCP to install their own potentially malicious programs.

The pair also provided tools that help people work out if their Windows machines have been left vulnerable in this way. The news about the uninstaller came as anti-virus firms and Microsoft announced tools to find and remove the "root kit". The row about XCP has also led to Sony BMG facing several class-action lawsuits over the potential security problems that the software causes.

</TD></TR></TBODY></TABLE>

[Ksyrup]

I read elswhere that Sony was going to release a full list of up to 50 CDs that use this crap, so that list above is apparently not all there is.

[Ksyrup]

Here's the article that mentions up to 49 titles by 20 artists:


Sony BMG recalls cds for glitch<!--/head-->
<!--deck--><!--/deck-->

<STORYTEXT><!--byline-->By Tom Zeller Jr. / New York Times News Service<!--/byline--> (javascript:scriptsearch('By Tom Zeller Jr.','phrase','','','3'))

<!--columnsig---><TABLE class=lightrail cellPadding=6 width=170 align=right border=0><TBODY><TR><TD class=lightrail><MULTIPIX name="right1" multitemplate="standard"></MULTIPIX><!--startsidebar--><!--endsidebar--><SECTIONLINKS></SECTIONLINKS><RELATEDLINKS></RELATEDLINKS><MULTIPIX name="right2" multitemplate="standard"></MULTIPIX><MULTIPIX name="right3" multitemplate="standard"></MULTIPIX><MULTIPIX name="right4" multitemplate="standard"></MULTIPIX><MULTIPIX name="right5" multitemplate="standard"></MULTIPIX><!-- INSERT NAME OF AP INCLUDE IN THE LINE BELOW AND REMOVE COMMENT TAG <table><script language=\"JavaScript\" type=\"text/javascript\" src="http://customwire.ap.org/lineups/###PUT NAME OF AP INCLUDE HERE###-rich.js?SITE=MIDTN&SECTION=HOME"></script></table> INSERT NAME OF AP INCLUDE IN THE LINE ABOVE AND REMOVE COMMENT TAG -->http://www.detnews.com/pix/folios/general/redarrow.gifComment on this story (javascript:comments(letteradress))
http://www.detnews.com/pix/folios/general/redarrow.gifSend this story to a friend (javascript:shareit())
http://www.detnews.com/pix/folios/general/redarrow.gifGet Home Delivery (https://secure.detroitnewspapers.com/circ/cgi-bin/delivery.plx?selectedpaper=detnews)

http://www.detnews.com/pix/folios/dot.gif</TD></TR></TBODY></TABLE><!--START COPY-->



The global music giant Sony BMG announced Tuesday that it planned to recall millions of CDs by at least 20 artists -- from crooners Celine Dion and Neil Diamond to the country-rock act Van Zant -- because they contain copy restriction software that poses risks to the computers of consumers.

The move -- more commonly associated with collapsing baby strollers, exploding batteries, or cars with faulty brakes -- is expected to cost the company tens of millions of dollars. The company said it would remove all unsold CDs containing the software from retail outlets and offer exchanges to consumers who had bought any of the CDs involved.

A toll-free number and e-mail message inquiry system will also be set up on the Sony BMG Web site (sonybmg.com).

"We deeply regret any inconvenience this may cause our customers and are committed to making this situation right," the company said in a letter that it said it would post on its Web site.

Neither representatives of Sony BMG nor the British company First 4 Internet, which developed the copy protection software, would comment further.

Sony BMG estimated last week that about 5 million discs -- some 49 different titles -- had been shipped with the problematic software, and about 2 million had been sold.

[Anthony]

i wonder how many people will lose their job over this? do you guys think this was just spyware with faulty programming/bugs, or was this spyware intentionally supposed to screw up your PC?

[Ksyrup]

What is interesting is that looking at the artist list, it certainly hits a number of genres, doesn't it? As mentioned above with the Celine Doin example, there seems to be a number of artists on this list that you wouldn't think downloaders would be particularly interested in - Celine Dion, the other Dion, Dexter Gordon, Neil Diamond, Horace Silver Quintet, Chris Botti (are jazz listeners thiefs?). But then there's country, jam band/deadhead, indie rock, Latin, hard rock/metal...pretty good cross-section there, ain't it? Almost makes you think they were interested in the various types of people buying these CDs, huh?

[Raiders Army]

This is why I'm going with the Xbox 360 all the way over the PS3.

[Raiders Army]

Dola, and you know Sony is taking some serious hits not only in their music business, but in the past few years from iPods.

[Easy Mac]

Sony is now offering an exchange program where you can exchange your CD for an MP3 CD. Probably 64 kbps Mp3's but there you go.

Linky (http://cp.sonybmg.com/xcp/)

And a list of the CD's:
<table border="1" cellpadding="0" cellspacing="1" width="900"> <tbody><tr><td>A Static Lullaby</td><td>Faso Latido</td></tr><tr><td>Acceptance</td><td>Phantoms</td></tr><tr><td>Amerie</td><td>Touch</td></tr><tr><td>Art Blakey</td><td>Drum Suit</td></tr><tr><td>The Bad Plus</td><td>Suspicious Activity?</td></tr><tr><td>Bette Midler</td><td>Sings the Peggy Lee Songbook</td></tr><tr><td>Billy Holiday</td><td>The Great American Songbook</td></tr><tr><td>Bob Brookmeyer</td><td>Bob Brookmeyer & Friends</td></tr><tr><td>Buddy Jewell</td><td>Times Like These</td></tr><tr><td>Burt Bacharach</td><td>At This Time</td></tr><tr><td>Celine Dion</td><td>On Ne Change Pas</td></tr><tr><td>Chayanne</td><td>Cautivo</td></tr><tr><td>Chris Botti</td><td>To Love Again</td></tr><tr><td>The Coral</td><td>The Invisible Invasion</td></tr><tr><td>Cyndi Lauper</td><td>The Body Acoustic</td></tr><tr><td>The Dead 60's</td><td>The Dead 60's</td></tr><tr><td>Deniece Williams</td><td>This Is Niecy</td></tr><tr><td>Dextor Gordon</td><td>Manhattan Symphonie</td></tr><tr><td>Dion</td><td>The Essential Dion</td></tr><tr><td>Earl Scruggs</td><td>I Saw The Light With Some Help From My Friends</td></tr><tr><td>Elkland</td><td>Golden</td></tr><tr><td>Emma Roberts</td><td>Unfabulous And More: Emma Roberts</td></tr><tr><td>Flatt & Scruggs</td><td>Foggy Mountain Jamboree</td></tr><tr><td>Frank Sinatra</td><td>The Great American Songbook</td></tr><tr><td>G3</td><td>Live In Tokyo</td></tr><tr><td>George Jones</td><td>My Very Special Guests</td></tr><tr><td>Gerry Mulligan</td><td>Jeru</td></tr><tr><td>Horace Silver</td><td>Silver's Blue</td></tr><tr><td>Jane Monheit</td><td>The Season</td></tr><tr><td>Jon Randall</td><td>Walking Among The Living</td></tr><tr><td>Life Of Agony</td><td>Broken Valley</td></tr><tr><td>Louis Armstrong</td><td>The Great American Songbook</td></tr><tr><td>Mary Mary</td><td>Mary Mary</td></tr><tr><td>Montgomery Gentry</td><td>Something To Be Proud Of: The Best of 1999-2005</td></tr><tr><td>Natasha Bedingfield</td><td>Unwritten</td></tr><tr><td>Neil Diamond</td><td>12 Songs</td></tr><tr><td>Nivea</td><td>Complicated</td></tr><tr><td>Our Lady Peace</td><td>Healthy In Paranoid Times</td></tr><tr><td>Patty Loveless</td><td>Dreamin' My Dreams</td></tr><tr><td>Pete Seeger</td><td>The Essential Pete Seeger</td></tr><tr><td>Ray Charles</td><td>Friendship</td></tr><tr><td>Rosanne Cash</td><td>Interiors</td></tr><tr><td>Rosanne Cash</td><td>King's Record Shop</td></tr><tr><td>Rosanne Cash</td><td>Seven Year Ache</td></tr><tr><td>Shel Silverstein</td><td>The Best Of Shel Silverstein</td></tr><tr><td>Shelly Fairchild</td><td>Ride</td></tr><tr><td>Susie Suh</td><td>Susie Suh</td></tr><tr><td>Switchfoot</td><td>Nothing Is Sound</td></tr><tr><td>Teena Marie</td><td>Robbery</td></tr><tr><td>Trey Anastasio</td><td>Shine</td></tr><tr><td>Van Zant</td><td>Get Right With The Man</td></tr><tr><td>Vivian Green</td><td>Vivian</td></tr></tbody> </table>
Also, Peter Gallagher's (Sandy Cohen) CD was listed as having copy protection, but it actually does not. Thank God, I was so ready to buy it.