Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

[Microsoft] Vista Activation Cracked by Brute Force
Slashdot ^ | 3/02/2007 | Zonk

Posted on 03/02/2007 7:31:22 AM PST by sionnsar

Bengt writes "The Inquirer has a story about a brute force Vista key activation crack. It's nothing fancy; it's described as a 'glorified guesser'. The danger of this approach is that sooner or later the key cracker will begin activating legitimate keys purchased by other consumers. From the article: 'The code is floating, the method is known, and there is nothing MS can do at this point other than suck it down and prepare for the problems this causes. To make matters worse, Microsoft will have to decide if it is worth it to allow people to take back legit keys that have been hijacked, or tell customers to go away, we have your money already, read your license agreement and get bent, we owe you nothing.'"

 [+]

haha, security, windows, business

(tagging beta)


TOPICS: Computers/Internet
KEYWORDS: vista
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-90 next last
To: rlmorel

it's basically the same rules as XP, and Vista's algorithm is actually a little bit less restrictive than XP is.


61 posted on 03/02/2007 9:50:22 AM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 60 | View Replies]

To: flintsilver7
How exactly is theft considered justice?

When the user gets used. He is not saying that it is ok to steal. What he is saying that if someone gets robbed, I can't think of a nicer bunch of folks for it to happen to than MS.

62 posted on 03/02/2007 9:52:53 AM PST by DreamsofPolycarp (Ron Paul in '08)
[ Post Reply | Private Reply | To 5 | View Replies]

To: DreamsofPolycarp
When the user gets used. He is not saying that it is ok to steal. What he is saying that if someone gets robbed, I can't think of a nicer bunch of folks for it to happen to than MS.

maybe you should move to France they seem to like to sue Microsoft all the time.

63 posted on 03/02/2007 9:56:36 AM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 62 | View Replies]

To: rlmorel

Anyway, I was looking a an installation CD of Windows XP the other day, and it said "Made in China". Given that China has zero respect for intellectual property rights, the irony is, in a somewhat twisted way, amusing.
----
Yes, it is ironic. China has literally stolen and pirated more software than all other nations combined. I have worked with Asian cultures in business for decades. They have no ethics...


64 posted on 03/02/2007 10:56:50 AM PST by EagleUSA
[ Post Reply | Private Reply | To 59 | View Replies]

To: flintsilver7

I changed a hard drive and had to reactivate XP. It wasn't too big a deal, but I did resent the attitude of the MS rep. It was clear that the presumption was that I was ripping it off and that it was my job to prove I wasn't.


65 posted on 03/02/2007 11:18:01 AM PST by KevinB
[ Post Reply | Private Reply | To 17 | View Replies]

To: flintsilver7
That's completely incorrect. Legitimate users of Windows have to deal with activation for a minute or two and in the vast majority of cases they never see it again.

There seem to be a lot of reports to the contrary. Apparently, over a million legitimate Windows users have been wrongly informed that their copy of Windows is not "genuine". And now the hackers are stealing activation keys from the legitimate users, which will result in more hassle and irritation for Microsoft customers.

Fortunately, there are other popular operating systems that don't require activation keys at all.

66 posted on 03/02/2007 12:10:22 PM PST by HAL9000 (Get a Mac - The Ultimate FReeping Machine)
[ Post Reply | Private Reply | To 10 | View Replies]

To: sionnsar

Yet another reason to not rent software from MSFT.


67 posted on 03/02/2007 12:13:22 PM PST by Redcloak (The 2nd Amendment isn't about sporting goods.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: HAL9000
Fortunately, there are other popular operating systems that don't require activation keys at all.

And they are growing at a 1%+ per month rate.
68 posted on 03/02/2007 12:18:55 PM PST by Old_Mil (Duncan Hunter in 2008! A Veteran, A Patriot, A Reagan Republican... http://www.gohunter08.com/)
[ Post Reply | Private Reply | To 66 | View Replies]

To: HAL9000
Fortunately, there are other popular operating systems that don't require activation keys at all.

no for the PC, and Windows is the MOST dominate period. All the others are marginal at best.

69 posted on 03/02/2007 1:24:41 PM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 66 | View Replies]

To: KoRn
Then what is? I was just going by what I've read on a couple of different sites.

As for activation, Brown said users could expect a return to the familiar activation scenario. Windows Vista, like XP, contains an electronic list of the components within the PC, which it turns into a code, or hash. If a user adds or subtracts too many components, the hash will change enough that it will signal the need for another activation, which can be done either online or via telephone.

Vista, however, will apparently be a bit more tolerant of the DIY community: "Windows Vista is more intelligent and a bit more lenient than Windows XP around hardware tolerance," Brown said. She referred questions to Microsoft's Windows Activation Web page, which does not address Windows Vista.

In Windows XP, the software looked at ten hardware attributes to create the hash: the display adapter, the SCSI adapter, the IDE adapter, the network adapter and its MAC address, a "RAM amount range" (0-64 Mbytes, 64-128 Mbytes, etc.), the processor type, the processor serial number, the hard drive device, the hard drive volume serial number and the CD-ROM/CD-RW/DVD-ROM.

"Specifically, product activation determines tolerance through a voting mechanism," the XP Activation FAQ says. "There are 10 hardware characteristics used in creating the hardware hash. Each characteristic is worth one vote, except the network card which is worth three votes. When thinking of tolerance, it's easiest to think about what has not changed instead of what has changed. When the current hardware hash is compared to the original hardware hash, there must be 7 or more matching points for the two hardware hashes to be considered in tolerance."

70 posted on 03/02/2007 1:42:47 PM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 52 | View Replies]

To: KoRn

like i said Vista's algorithm is less restrictive than XP's.


71 posted on 03/02/2007 1:43:49 PM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 70 | View Replies]

To: Barrett 50BMG

Thanks for the explanation.


72 posted on 03/02/2007 4:20:11 PM PST by KoRn
[ Post Reply | Private Reply | To 70 | View Replies]

To: KoRn

actual i got tagged on xp for a harddrive change on an oem box.


73 posted on 03/02/2007 4:39:01 PM PST by postaldave (republicans need spending rehab before trying to control congress again.)
[ Post Reply | Private Reply | To 38 | View Replies]

To: KoRn

no problem-o.


74 posted on 03/02/2007 4:42:49 PM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 72 | View Replies]

To: flintsilver7

Not even in "the vast majority of cases." Just because you haven't had problems doesn't mean

Most of the computers in my house are running with upgraded hardware--and each time required a call to MS to reactivate.

This is one reason why I try to do most of my work on Mac or Linux. If something should happen (which on those systems rarely does), I at least have the ability to reinstall my OS without having to talk to overseas Tech Support for three or four hours.

And SuSE is horrifyingly easy to install (my 13 year old brother can run the install (including partitions) for me without a problem if I'm away at work or school)...

That's the point.


75 posted on 03/02/2007 7:34:37 PM PST by rzeznikj at stout (Boldly Going Nowhere...)
[ Post Reply | Private Reply | To 41 | View Replies]

To: flintsilver7
They are not limitations of Vista. They are limitations of DRM. I now believe with the vast majority of uninformed people blaming Microsoft for the restrictions of DRM that Microsoft simply should've never supported playback of such content. Complying with AACS standards might turn out to be a nightmare.

The thing that puzzles me is why playing a DVD would require decrypting the data from the DVD and then re-encrypting it for the display? Wouldn't it make more sense to design a standard method for the computer to exchange information between the display and DVD player and have the display handle all the decryption? This would eliminate the risk of people reverse-engineering the PC code, since the PC code wouldn't have any ability to decrypt anything anyway.

76 posted on 03/02/2007 7:49:48 PM PST by supercat (Sony delenda est.)
[ Post Reply | Private Reply | To 21 | View Replies]

To: sionnsar
The code is floating, the method is known, and there is nothing MS can do at this point other than suck it down and prepare for the problems this causes.

I don't see the major problem here for Microsoft. For any given hardware activation key sent to Microsoft, there's only going to be one genuine activation code out of a something like a quintillion superficially-valid ones. If Microsoft includes in the initial Vista release a test that will be passed by one in a million superficially-valid codes, then a random basher that could try millions of codes would probably find some that would pass validation today.

On the other hand, Microsoft could very easily, at any time, incorporate another test into its software that would only be passed by one in a thousand codes that passed the first test. And if people crack that one, Microsoft could implement yet another test that would only be passed by one in a thousand codes that passed the first two. And even after doing that, Microsoft could still pull another one-in-a-thousand out of its hat.

77 posted on 03/02/2007 8:07:07 PM PST by supercat (Sony delenda est.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Barrett 50BMG
Windows is the MOST dominate period

The word you were probably trying to use was "dominant", followed by a comma.

78 posted on 03/02/2007 8:35:18 PM PST by HAL9000 (Get a Mac - The Ultimate FReeping Machine)
[ Post Reply | Private Reply | To 69 | View Replies]

To: Barrett 50BMG
..... "fresh install"...

Yeah, that's about what I did. I restored the ghost image and then rebooted and of course, no joy. So I stuck the XP disk in and reinstalled over the top of the original install. Everything looked good, but it has mucho glitches. I will just have a clean install from the get go this weekend.

Ghost has always done fine until I switched to SCSI. The boot.ini and ntldr is just not compatible at that level. There are work arounds for most other changes, but that is too basic to jiggle with. Nuttin to do but start over.

Back to Activation....... I just think the hackers have this stuff figured out before the first copy of Vista hit the stores. Just like Xbox games and DVD movies, it's a waste of time. Pirates steal and others don't. I bet they spend more money trying to defeat them than they make. A billion Chinese probably had a copy before we did and not one paid for one copy.

79 posted on 03/02/2007 9:23:56 PM PST by chuckles
[ Post Reply | Private Reply | To 58 | View Replies]

To: chuckles

are you having problems activating your copy?


80 posted on 03/02/2007 9:31:18 PM PST by Barrett 50BMG
[ Post Reply | Private Reply | To 79 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-90 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson