The state of Texas sued Sony music label BMG under its new anti-spyware law, saying Sony's anti-piracy XCP technology used on music CDs leaves huge security holes on consumers' computers. The music CD automatically installed a copy-protection program when discs were put into a PC, to restrict the user from copying a single cd more than three times. Online webuser discovered that the application, and its subsequent removal tool, left computers wide open for virus attacks. After a storm of criticism, Sony recalled the discs last week.