Our friends at theElectronic Frontier Foundation have confirmed that the nefarious Sony rootkit resides on at least 19 music CDs.

According to experts, the rootkit, created by First 4 Internet and known as XCP2, "protects" the music from illegal copying. But in fact, it blocks a number of legal uses -- like listening to songs on your iPod. The software also reportedly slows down your computer and makes it more susceptible to crashes and third-party attacks. And since the program is designed to hide itself, users may have trouble diagnosing the problem.

There are also reports that at least one virus exploits the rootkit. I'm betting that Sony's actions violate Florida laws that protect computers.

Both Sony and BMG are permanently on bytewritr.com's vendor blacklist.

If you have listened to a CD with the XCP software on your Windows PC, your computer is likely already infected. An EFF investigation confirmed XCP software on these titles:

1. Trey Anastasio, Shine (Columbia)
2. Celine Dion, On ne Change Pas (Epic)
3. Neil Diamond, 12 Songs (Columbia)
4. Our Lady Peace, Healthy in Paranoid Times (Columbia)
5. Chris Botti, To Love Again (Columbia)
6. Van Zant, Get Right with the Man (Columbia)
7. Switchfoot, Nothing is Sound (Columbia)
8. The Coral, The Invisible Invasion (Columbia)
9. Acceptance, Phantoms (Columbia)
10. Susie Suh, Susie Suh (Epic)
11. Amerie, Touch (Columbia)
12. Life of Agony, Broken Valley (Epic)
13. Horace Silver Quintet, Silver's Blue (Epic Legacy)
14. Gerry Mulligan, Jeru (Columbia Legacy)
15. Dexter Gordon, Manhattan Symphonie (Columbia Legacy)
16. The Bad Plus, Suspicious Activity (Columbia)
17. The Dead 60s, The Dead 60s (Epic)
18. Dion, The Essential Dion (Columbia Legacy)
19. Natasha Bedingfield, Unwritten (Epic)

---