Management and the Technology Professional – B302
Case study answer 1
As the lead developer of the rootkit piece of software that was developed for Sony BMG Music Entertainment the most compelling reason why it should not have been released is the commercial damage which it caused to all parties involved. Otherwise legitimate customers may now think twice about buying from the Sony brand, Sony will no doubt never use First4Internet again as a contractor and my position as the lead developer may well be in jeopardy for allowing the software to be developed in such a way.
Knowing that the software was being developed for Sony, a high profile company in any context, more research should have been put in to finding alternative methods in the development of the software to ensure that the customer base that it was aimed at would not have suffered such consequences. Having now damaged the reputation of my own technical ability and my company's, the Sony brand has also been effected which as a worldwide empire may well suffer much more serious consequences. As the lead developer it is important to take the considerations of the client into account to ensure that the end product is to a fitting standard, and on a project such as this for such a major client this was very important. The software reflects badly upon Sony, First4Internet and will always come back to myself as a main source of wrong doing.
The software was primarily developed to try and stop people from taking advantage of online file sharing programs and illegally sharing the company’s products between one another as the industry reportedly loses around $4.2 billion worldwide each year to piracy. Due to this software, our attempt on behalf of Sony has seriously back fired leaving the company name tarnished and damaging its relationship with its genuine customers.
Not only has this damaged the company’s reputation with its customers it has also gone against several professional codes of practice and areas of legislation that will also affect the company’s persona. The ‘British Computer Society Code of Conduct’ states under Duty to Relevant Authority section 9, that:
“You shall not misrepresent or withhold information on the performance of products, systems or services, or take advantage of the lack of relevant knowledge or inexperience of others.”
This was not strictly adhered to as customers were not informed of the full capabilities of the software that they were installing onto their machines and they would not be told that they were unable to remove it cleanly once installed. By using the rootkit technique the program could also be viewed as exploiting the lack of relevant knowledge or inexperience of the users as it is an advanced technique that is very difficult to detect.
Along with the British Standard code of conduct ethical codes may have also been compromised. Sony has an ethical right to their users that states it must avoid causing harm to them. This includes causing loss of property, property damage or unwanted environmental impacts. When a user would try to remove the rootkit software it would leave traces of it behind that could cause issue with the operating system and in some cases leave the CD-ROM completely inoperable. Along with going against ethical codes of conduct this now also goes against government legislation under the Computer Misuse Act 1990 section 3, unauthorized modification of computer material.
Through releasing this software to the public knowing that the program would hide parts of its operation from the user and it causing damage to the system once removed shows a serious lack of quality management, testing and ignorance on First4Internet LTD’s part. Along with damaging Sony’s worldwide reputation the software has also opened them up to a number of possible law suits due to contravening a number of different codes of conduct and legislation. All of these things may cause Sony to pay millions in fines etc however the knock on effect to the companies credibility in my opinion is the most compelling reason not to have developed the software as in the long run this will cause the most commercial damage.