MSoft's piracy tool backfires

[bwana]

08/08/2006 10:25

Seattle - When Microsoft said it planned to begin checking for pirated copies of its Windows operating system using the method it set up to send people security fixes, even some of the company's traditional critics could sympathise.
After all, although Microsoft rakes in billions, piracy of its flagship products remains a huge, costly problem, particularly in developing countries such as China and Russia.

The Business Software Alliance estimates that 35% of software installed on PCs worldwide is pirated.

Nevertheless, 18 months after announcing the Windows Genuine Advantage piracy check, Microsoft faces controversy and backlash, including two lawsuits. Some say the company clumsily handled several elements of the program, including a key privacy issue.

"They have a right to say, 'If you want patches from Microsoft, you know, you should let us make sure you're not running a pirated copy of Windows'," said Gartner analyst John Pescatore.

"That's a valid claim, and with the Windows Genuine Advantage tool, I think, they tried to go a little too far."
<continued>

Why do people put up with it?

Once installed, the program checks whether it believes the user's version of Windows is legitimate. It gathers information such as the computer's manufacturer, hard drive serial number and Windows product identification.

Um ok . .

Microsoft spokesperson Jim Desler insists the piracy check is not spyware.

 

[Raithlin]

Yeah, apparently it phones home once a day to tell them you're still legal.

 

[killadoob]

nail them i say for billions if microsoft had any sort of a brain it would sells windows for 20$ and more ppl would buy which would mean just about the same revenue if not more

i would not pirate windows if it cost 200 bucks what would be the point

but 1100 for windows xp pro is crazy
what about office 2400 rand for office pro

come on now

 

[bwana]

Yeah, apparently it phones home once a day to tell them you're still legal.

Is it likely that legal software would become illegal the next day?

 

[spiderz]

Makes me wanna look at linux again

 

[Raithlin]

Exactly. Add to that the fact that it sends details like IP address, etc. and you have yourself a privacy issue.

 

[Raithlin]

Makes me wanna look at linux again

Funny you mention that. I'm now dual-booting WinXP with MEPIS 6.0. Awesome package, that. Even better than Ubuntu (which it is built on).

Anyhow, what makes MS' blunder worse, is they have labeled their GA spyware as a critical update, so anyone with automatic updates will have it downloaded and installed - possibly without their knowledge.

 

[|tera|]

Microsoft conceded that it should have told users it was making the daily connection. It has since discontinued the daily check and revised its disclosures. The system will, however, continue to occasionally check in with Microsoft to make sure it still believes a person's software is legitimate.

Yeah right......I believe you, sure ......

 

[The_Right_Honourable_Brit]

Killadoob: On the issue of Office costs - I got the "Student" Edition one - R899 for 3 licenses which is perfect for our household. Do you really need all the Proffesional stuff like Access etc.?

 

[bdt]

Topical link #1: RemoveWGA

Publisher's Description:

RemoveWGA enables you to remove the Microsoft "Windows Genuine Advantage Notifications" tool, which is calling home and connect to Microsoft servers every time you boot. Once the WGA Notification tool has checked your OS and has confirmed you had a legit copy, there is no decent point or reason to check it again and again every boot.

Also, Windows Genuine Advantage Notifications is different than Windows Genuine Advantage Validation. RemoveWGA only removes the notification part, phoning home, and does not touch the Validation part. As the time I'm writting this, the Validation part is mandatory for some not critical downloads from Microsoft, but the Notification part is not mandatory at all, and you are able to install all of the security updates without installing this one. This may change in the future thought, I don't know what are the Microsoft plans.

Topical link #2: Shavlik Netchk Protect

I get the Brian Livingston (windowssecrets.com) newsletter that highly recommends using this app for your (not just 'doze) update management. One caveat though: as good as it is, it's not for n00bs (which means that most of this audience is safe!)

 

[Moederloos]

I was in Incredible Connection the other day, and one of their demo PCs had a message about not being authentic software.

Is this an M$ issue, or are IC just not using legitimate software?
See how easy it is for an M$ issue to be misconstrued?

 

[killadoob]

i think they use like a image for all their demo pc's, so microsoft view it as illegal

what i dont get is how that would happen?
when does IC hook all their pc's up to the internet?

or more to the point why would demo pc's be hooked into the net?

 

[Moederloos]

i think they use like a image for all their demo pc's, so microsoft view it as illegal

what i dont get is how that would happen?
when does IC hook all their pc's up to the internet?

or more to the point why would demo pc's be hooked into the net?

Why would they need to be "hooked" - does the patch, once installed, not require a connection to REMOVE the message. In other words, the message appears UNLESS you connect and authenticate, and it is not a case of the message appearing because you DID connect and COULD NOT authenticate?

 

[lilDeath]

This subject has been covered. See:
http://www.mybroadband.co.za/vb/showthread.php?t=45627
http://www.mybroadband.co.za/vb/showthread.php?t=42825

I have been using the Remove utility for a while now, works very well, just have to restart in order for the change to reflect.
And having to reapply the Removal, since after doing updates from WU / MU, the WGA is reinstalled before you are able to do new Windows updates.
Other MS prog updates are still available if choosing not to apply the WGA.

 

[lilDeath]

I was in Incredible Connection the other day, and one of their demo PCs had a message about not being authentic software.

Is this an M$ issue, or are IC just not using legitimate software?
See how easy it is for an M$ issue to be misconstrued?

This can quite easily occur. Especially on OEM computers, which is what IC is using, or should be.
These OEM keys are binded to a specific machine, so you cannot use it on another machine if it has already being used / activated on another one.

If MS becomes aware of such OEM keys that have been compromised, they often do batch deactivations of them, meaning the keys are then classified as illegal / invalid / suspect.

I have found that sometimes when doing installs people try the easy way out and use a key on hand from another pc instead of getting the legal one for that pc.
Or of course they simply do not have a licensed copy.