US government officials took Sony BMG to task over its controversial use of rootkit-style copy protection at a security conference. If the technology proves harmful to consumers, tougher laws and regulations might be proposed, a senior Department of Homeland Security exec warned. Sony BMG’s flawed approach to Digital Rights Management technology was exposed after security researchers discovered XCP anti-piracy software, that shipped with some of Sony BMG’s music CDs, masked its presence and introduced a vulnerability that hackers and virus writers began to target. Under pressure, Sony was forced to recall discs loaded with the technology and create an exchange program for consumers.