Pirates Spoof Vista's Enterprise Activation (It didn't take them long alert)

Techweb ^ | December 8, 2006 | Gregg Keizer

[Zakeet]

Pirates are circulating a hack that lets them activate counterfeit copies of Windows Vista using a spoofed server that Microsoft relies on to make sure enterprises switch on the new operating system.

The software, loaded with the long name of "Microsoft.Windows.Vista.Local.Activation.Server-MelindaGates" is available on several pirate Web sites. It spoofs a Key Management Service server, one of the two technologies that Microsoft debuted last month that let businesses activate a large number of copies of Windows Vista. KMS requires that at least 25 PCs be connected to a corporation's network.

Vista is the first version of Windows that Microsoft requires volume license customers to activate. Besides KMS, the Redmond, Wash. developer also offers Multiple Activation Key, which resembles the retail version's activation process. PCs activated using KMS must reactivate at least once every six months.

The MelindaGates hack uses a VMware image of a KMS server to activate -- and keep activated -- a pirated edition of Windows Vista Business. "Looks like Windows Vista Volume Activation 2.0 is a big bust," wrote a user identified as "clank" on the PirateBay Web site Friday.

[Zakeet]

And how long do we think it will take somebody named Jason and his friends to also crack Vista's security?

[advance_copy]

Vista could turn out to be even more vulnerable than XP was when it first came out. I'd say give it a few years before you upgrade. Or, just install Linux.

[sittnick]

Or, just install Linux.

I have nothing against Linux, but I am getting tired of hearing "just install Linux" when many of the needed apps for end-users just aren't there. In my company's case, I am thinking of our MAS 200 client server accounting package. As MIS admin I simply stick with Win2K. We also skip MS for our basic apps (Corel Office/Firefox/Thunderbird) Linux excels at web hosting, file serving, and lots of other things. But "just install Linux" is not practical for a lot of us.

[proxy_user]

Yes, Linux is sadly lacking in accounting and tax preparation software. That is its major drawback on the desktop at this point.

[Antonello]

Vista could turn out to be even more vulnerable than XP was when it first came out. I'd say give it a few years before you upgrade. Or, just install Linux.

Or just stay on XP. Few of the changes that come with an upgrade to Vista are all that vital to the typical home user.

Apart from a cute but merely aesthetic 3-D interface, which likely will require the user to shell out for some hardware improvements to fully appreciate, the typical home user currently running XP-MCE doesn't have a lot to gain.

[advance_copy]

I can't argue with you. All the apps are written for Windows because everybody still has Windows. Everybody still has Windows because all the apps are written for Windows. Bill Gates YMB.

[dennisw]

Inneresting

[advance_copy]

Or just stay on XP.

Yep. XP works, behind NAT, spyware remover, anti-virus, and a firewall. Oh, and if you have two processors, you have to have XP Pro or Media Center to use both of them.

[Antonello]

As a side note, this 'hack' isn't nearly as tremendous as the spoof kiddies want to think. It not only requires several more hoops to jump through than previous OS piracy hacks, but also is for an OS that is not nearly as giant a step from XP as, say, XP was from Win98 (the leap most pirates took for their home systems).

So, from a practical standpoint, this 'hack' would be only marginally worth it for anything less than a full scale pirated deployment in a business environment - which would be insanely stupid as all it would take is one disgruntled employee to make a call to the BSA to ruin the company's whole day.

[Antonello]

Yep. XP works, behind NAT, spyware remover, anti-virus, and a firewall. Oh, and if you have two processors, you have to have XP Pro or Media Center to use both of them.

I doubt the typical XP Home user has multiprocessors, so it stands to reason that the second part of your comment is moot.

As for the first part, even with all those addons, the most vulnerable link in the security chain is the user. All the protection in the world (even the stuff built in to Vista) is pointless if the user does stupid stuff like opening links in weird emails and running downloads from questionable sources.

And as more and more home users move to broadband, they likely pick up some of the security features you mentioned even if they don't realize it, thanks to their ISP. True, a determined and skilled hacker can make short work of the basic protection afforded by running in a local network environment behind a broadband router with only very basic NAT and firewall offerings, but why would someone with those talents bother? There are much better targets than a random home user, and easier ways to dupe gullible victims into handing over their credit card info.

[babygene]

My guess is that they would run fine in a VM. Also, I don't know if you've looked at WINE recently, but it's come a long way.

We were surprised to find that our business management application ran fine under WINE. The database (PostgreSQL) didn't, but it was supported directly on Linux.

[AmishDude]

It's very simple. If you're a full-time sysadmin, Linux is great. If you're not a full-time sysadmin, you soon will be.

[TomGuy]

will require the user to shell out for some hardware improvements

I was looking on the Dell website earlier this evening. They are recommending 2 Gb of RAM to run Vista for heavy graphics and gaming.

On my pc, I have 1.5 Gb with XP and nearly half is sitting idle most of the time. (When I bought the system, I bought 1 Gb installed and added 1/2 Gb from the old system.)

[ShadowAce]

[padre35]

Windows new licensing requirements are too much for me, so off to the land of the penguins I go.

Should be fun, and i am used to pain so...:)

[dfwgator]

Or just do as my company and stay on Windows Professional 2000, still the best Microsoft OS ever.

[sittnick]

We were surprised to find that our business management application ran fine under WINE. The database (PostgreSQL) didn't, but it was supported directly on Linux.

The client/server app is dicey enough with the custom add-ons. Troubleshooting would be more problematic, and then there is always the infamous "that is not a supported configuration." issue.

In short, it creates more problems than it solves.

[DaveMSmith]

I doubt the typical XP Home user has multiprocessors, so it stands to reason that the second part of your comment is moot.

Intel Core DUO? AMD X2? Almost all new CPU parts shipped these days are multiprocessor.

[Antonello]

Intel Core DUO? AMD X2? Almost all new CPU parts shipped these days are multiprocessor.

And these new systems typically ship with XP Home Edition?

[postaldave]

not me, i'm already running some linux and a bsd system but my next system is going to be an imac. with the new baby and a DV cam-corder i'm going to need something native to video editing. i tried a few things in linux but they kinda sucked.