Anti-piracy software vendor SunnComm has given in to pressure from consumers and advocacy groups and has agreed to modify its MediaMax CD copy protection software. 

MediaMax aims to prevent piracy and illegal reproduction of audio CDs through the use of special software that comes bundled with the disks. The application automatically installs itself when a user tries to play the disk on a computer.

The software has the same objective as the controversial XCP software used on some Sony BMG CDs that was exposed for its security vulnerabilities last year.

MediaMax has also been found to have several flaws. Security experts reported that the software illegally installs some components even after the user has declined the end user agreement.

The company has now agreed to refrain from installing software if the user declines this agreement. SunnComm will also submit all future versions of the software to a security testing firm prior to release, and has promised to publish the results.

The Electronic Frontier Foundation (EFF) complained about SunnComm's poor security policies and track record in an open letter in December. The Foundation applauded the promised changes. 

"While we continue to disagree with SunnComm on the wisdom of CD copy protection in general, we are pleased that it has taken important steps to notify consumers of the security vulnerability and help resolve the security and privacy issues raised by the MediaMax software," said EFF staff attorney Kurt Opsahl.

The organisation notified the public about the agreement in a press release, but SunnComm made no mention of it on its website.

A member of staff answering the phone at SunnComm was unable to confirm the accuracy of the EFF claims, but said that the company would publish a notice on its website shortly.

MediaMax is used on CDs from the Sony BMG record label as well as several smaller independent labels. Sony BMG has offered to exchange CDs with the flawed software.

A list of CDs that contain the insecure application is available here and here.