The Sony debacle doesn't stop: Don’t Use Sony’s Web-based XCP Uninstaller

[Kellanved]

Alex Halderman and I have confirmed that Sony’s Web-based XCP uninstallation utility exposes users to serious security risk. Under at least some circumstances, running Sony’s Web-based uninstaller opens a huge security hole on your computer. We have a working demonstration exploit.

We are working furiously to nail down the details and will report our results here as soon as we can.

In the meantime, we recommend strongly against downloading or running Sony’s Web-based XCP uninstaller.
...

http://www.freedom-to-tinker.com/?p=926

Meanwhile, the possible LGPL violation seems to be a honest mistake: the tool doesn't actually use LAME code, it just comes with it.

http://www.the-interweb.com/serendipity/index.php?/archives/51-Is-Sony-in-violation-of-the-LGPL.html

And while Sony has announced that the PC version won't be used any more, the Mac version is alive and well.