A new antipiracy flub for Microsoft

CNet News.com ^ | 7/29/2005 | Dawn Kawamoto

[Mike Bates]

Microsoft's efforts to curtail counterfeiting hit a snag when hackers discovered ways to bypass its Windows Genuine Advantage 1.0 antipiracy software only days after its debut this week.

The software giant announced WGA 1.0 on Monday. WGA requires users to verify they have a legitimate copy of the operating system before they can download add-ons for Windows XP.

But within days of the software's release, a number of Web sites, including the popular Boing Boing blog, were posting details about how to bypass WGA.

According to several Web sites, a bypass is easily accomplished through any of several means, including pasting a string of JavaScript commands into the Internet Explorer browser.

Microsoft was not immediately available for comment.

Johannes Ullrich, chief research officer at Internet Storm Center, said the JavaScript bypass method does not pose a security threat.

"It prevents the Windows WGA tool from being installed," he said, noting he conducted tests on the workaround and found it could be easily applied.

For users who purchase computers with Windows preinstalled, Ullrich noted, some may be surprised to find that they have a pirated copy on their computer.

"Sometimes it's hard for users to determine if they have a pirated version. Some buy computers from less-reputable resellers or buy a CD off the street and may have trouble determining if they have a pirated version," Ullrich said.

Microsoft estimates that roughly a third of Windows software worldwide are pirated copies.

[Mike Bates]

That didn't take long, did it?

Michael M. Bates: My Side of the Swamp

[Uncle Fud]

A minor bump in the road to the warez traders, but a major PITA for the innocent buyer of a counterfiet version. So what else is new.....

[Echo Talon]

:D

[AFreeBird]

I saw this yesterday on slashdot. Took em 24 hours to crack it. It seems M$ relied on client side javascripting and the crack only requires giving the program a new javascript instruction.

Thursday, July 28, 2005
Microsoft "Genuine Advantage" cracked in 24h:
window.g_sDisableWGACheck='all'

AV sez, "This week, Microsoft started requiring users to verifiy their serial number before using Windows Update. This effort to force users to either buy XP or tell them where you got the illegal copy is called 'Genuine Advantage.' It was cracked within 24 hours."

Before pressing 'Custom' or 'Express' buttons paste this text to the address bar and press enter:

javascript:void(window.g_sDisableWGACheck='all')

It turns off the trigger for the key check.

Micro$ofts crack (snicker) programmers strike again.

Some have theorized that M$ did this on purpose. If they keep windows out there (legal or not) they keep interest in their products.

Maybe, maybe not.

[flashbunny]

Took a bit longer than the 3 minutes I predicted.

[expat_panama]

Thanks for the post and the link-- good work!

[longtermmemmory]

.later

[ElkGroveDan]

A minor bump in the road to the warez traders, but a major PITA for the innocent buyer of a counterfiet version. So what else is new.....

Yep, wait until they come up with "smart" guns and "smart" cars that can only be operated by their owners. Just like anti-piracy software, it'll be a hassle for the honest folks and a temporary annoyance for the crooks.

[Grig]

Here is one that claims to work if you already have it installed:

In IE, go to "Tools," "Manage Add-ons..." Click "Windows Genuine Advantage" and click "disable"

LOL!

[Bush2000]

A minor bump in the road to the warez traders, but a major PITA for the innocent buyer of a counterfiet version. So what else is new.....

True, but look on the bright side. Many (if not most) of these innocent buyers of counterfeit versions are going to complain to MS about the "reseller" who sold them the machine, and it will probably result in more prosecutions. Which is a good thing.

[D-fendr]

Are there a lot of vendors who sell pirated OS with the puter? You're not talking major retailers are you?

[Bush2000]

Are there a lot of vendors who sell pirated OS with the puter?

Yes. But there are probably an even greater number that sell counterfeit shrinkwrap -- and it's a global problem.

You're not talking major retailers are you?

No, generally smaller resellers.

Twenty-Seven Arrested on Charges Relating to Trafficking in Counterfeit Software

"Affidavits filed in the case allege that the defendants in Indictments 1 through 8 sold counterfeit software such as Microsoft Windows 98 or Microsoft Office 2000. Posing undercover, a police officer held himself out as a businessman engaged in buying and selling computer software and computer components. While legitimate copies of the software sold for between $200 and $600 in stores, the defendants sold the counterfeit software for between $7 and $70. Most of the transactions were done in cash and completed either at the defendants’ homes or in parking lots adjacent to shopping centers. "

SAN GABRIEL VALLEY WOMAN ARRESTED FOR TRAFFICKING IN COUNTERFEIT MICROSOFT COMPUTER PROGRAMS

"During Monday’s hearing, it was revealed that Tzeng allegedly trafficked in several copyrighted Microsoft products. The investigation revealed that Tzeng obtained the pirated software and shipped it to confederates in Georgia, according to a 29-page affidavit filed last week. "

Steer Clear of Piracy

"More than a quarter of the software in use in the UK is stolen."

http://www.onlinesecurity.com/individual/page79_2.php

"Spanish police have arrested 14 people for intellectual piracy, including the first-known forgeries of authenticity certificates for Microsoft's Windows XP Professional edition, the Interior Ministry said on Thursday. Investigators found 3,000 perfectly copied and packaged CDs with the operating system software, accompanied by the fake guarantee certificates, in the northern city of San Sebastian, the Ministry said in a statement. They would have been sold as genuine, netting the copiers over $1.52 million, the statement added. "

FBI Arrests 4 Alleged Software Smugglers

"Four people were arrested by the FBI last week after making the first serious attempt to illegally replicate Microsoft's new hologram security feature on software CDs, authorities said. The FBI on Thursday arrested the four in Los Angeles and said they had tried to distribute counterfeit Microsoft software with an estimated retail value of $10.5 million. "

Fayetteville business owner arrested after search warrant reveals counterfeit

"ZeBest Deals was selling counterfeit copies of Windows 2000, counterfeit software user licenses and counterfeit certificates of authenticity, police said. Crawshaw said Microsoft officials had notified Williams in February that he was selling counterfeit goods. "

[D-fendr]

Wow. I had no idea. I had heard that Asia was full of counterfeits, but thought in the U.S. it would be mostly person-to-person or small groups, with some internet scammers.

Thanks for the info and links...

[Bush2000]

Actually, surprisingly enough, the average rate of piracy in the U.S. is somewhere around 20%. Asia is 95%. That translates into some huge dollars in lost sales.