Sony's attempt at protecting its music CDs from piracy has turned into a tale of security woes that has quickly gone from bad to worse. New software on several of the company's CDs installs a copy protection rootkit on a user's PC once the license agreement on the disc is accepted. Virus writers jumped on the fact that Sony's rootkit hides itself on users' computers, and a few Trojan horses have been released that piggyback on the software, effectively hiding from antivirus software. The rootkit Sony adopted is clearly flawed. But where will it fit into the larger debate about music labels' use of DRM software? Is the security gaffe enough to derail use of similar tools, or will consumers have to tolerate more copy protections on the music they purchase?