Boycott Sony BMG Music?

And perhaps the rest of Sony and Bertelsmann if you feel particularly strongly about spyware.

An Information Week story discusses Eliot Spitzer's investigation and reaction:

Sony BMG Music's copy-protection woes continued Wednesday as New York Attorney General Eliot Spitzer's office berated the company for not making good on its promise to pull spyware-installing CDs from store shelves.
"It is unacceptable that more than three weeks after this serious vulnerability was revealed, these same CDs are still on shelves, during the busiest shopping days of the year," said Spitzer in a statement.

Spitzer's office sent investigators disguised as shoppers to several large music chains, including Virgin Megastore, FYE, Best Buy, Circuit City, Sam Goody, and Wal-Mart; the investigators were able to purchased copy-protected CDs at all the stores they visited.

See also Business Week and Freedom to Tinker (and its CD Copy Protection archive).