Perhaps Sony feel they didn't get enough bad PR the first time around with the Rootkit debacle. Consumer groups are outraged that spyware infected CD's were (and are) still on sale.

Apparently music shops are still allowed to sell CD's with the XPC Rootkit, despite Sony claiming to be working with retailers to withdraw the 'infected' items.

From Sony's web site:

"SONY BMG is working with its retail partners to withdraw compact discs with XCP software from distribution and retail chains. It has asked retailers to cease sale of those discs and to return them to SONY BMG. This withdrawal program has been and is being widely communicated."

In this author's humble opinion, that these CD's are still on sale is unforgivable given the distribution will no doubt have increased significantly over the Christmas rush.

But most curiously, is the question of just how serious is Sony about copy protection? To commit PR suicide and then turn around to say "Yeah we were wrong. Here is a replacement CD and the MP3 files to go with it" is nothing short of insane.

Yes you read that correctly. Sony will not only replace your infected CD, but also give you the MP3 files to go with it. After making the initial defence the Rootkit was intended to protect the artists (translated as "increase Sony revenue"), then how does providing MP3 files to the P2P generation help artists? Perhaps MP3 trading doesn't affect the sales pipeline as bad as the recording companies would like us believe.

Again from Sony's web site:

"In addition to providing replacement CDs by mail, SONY BMG is making available MP3 files to consumers who are exchanging their XCP content protected CDs. Consumers who choose to receive MP3 files will receive an e-mail with a link to the MP3 downloads upon SONY BMG's receipt and verification of their XCP CDs."

So what was the point of the Rootkit in the first place? This would be freaking hilarious if it were not so serious.