Cary Sherman is a complete moron:

“The problem with the SonyBMG situation is that the technology they used contained a security vulnerability of which they were unaware. They have apologized for their mistake, ceased manufacture of CDs with that technology,and pulled CDs with that technology from store shelves. Seems very responsible to me. How many times that software applications created the same problem? Lots. I wonder whether they’ve taken as aggressive steps as SonyBMG has when those vulnerabilities were discovered, or did they just post a patch on the Internet?”

I can think of a lot of words to describe the way Sony acted in this case. Sadly, "responsible" isn't one of them. This statement from them kind of says it all:

Sony BMG’s Global Digital Business President Thomas Hesse: “Most people, I think, don’t even know what a rootkit is, so why should they care about it?”

Yes, they stepped away from that. After getting slapped repeatedly.