ie8 fix
madison

Microsoft removes another one of WGA's fangs

By | February 21, 2008, 3:03pm PST

Summary: With the release of Service Pack 1, the Vista “kill switch” is now officially dead. An announcement earlier today by Microsoft reveals details of a new update that will detect two widespread activation cracks. What happens when your copy of Vista gets flagged as non-genuine? The answer isn’t what you might expect.

Microsoft removes another one of WGA’s fangsThis morning Microsoft announced another noteworthy change to its flagship Windows Genuine Advantage (WGA) program - an update to be rolled out later this month to all Vista users that will display a WGA warning dialog box when it detects either of two common Vista activation cracks. In the same announcement, they also for the first time showed screen shots of how WGA changes debuting in SP1 will take some of the bite out of a longstanding Windows product activation rule as well.

Now-departed Microsoft marketing chief Michael Sievert announced last December that Service Pack 1 would drop Vista’s “reduced functionality mode” (the notorious “kill switch”) in favor of a series of notifications and nag screens. WGA senior product manager Alex Kochis posted the details of today’s changes, with screen shots, on Microsoft’s Windows Genuine Advantage blog today.

The new WGA code in SP1 is designed to detect two of the most common activation cracks: one tries to fool Vista into thinking that it’s an OEM; the other fools the activation timer into waiting until some far-off date in the future. Later this month, before SP1 begins rolling out, Microsoft plans to deliver a Vista update that checks for the presence of those two specific cracks. Unlike XP’s WGA add-in, which was designed to confirm that the system’s activation was valid and wound up failing too often, this one looks only for the details of those two hacks. If it finds the “signature,” it displays the message shown here:

Activation crack detection update for Vista

It’s worth noting that this first release of the crack-detecting update won’t try to remove the crack or shut down the computer; Kochis says the detection and removal functions will be combined in the next release, with no date announced for that. In the upcoming version of this update, links on the informational dialog box will lead to webpages with repair details, but you can dismiss the dialog box immediately - and permanently, if you choose. Anyone who sought out and used one of these two hacks to avoid paying for a legitimate copy of Windows will probably not be surprised. (They can also use a different activation hack that Microsoft hasn’t yet written detection code for.) In addition to those unrepentant pirates, however, Microsoft believes there are a significant number of technically unsophisticated customers who had their system upgraded by a friend or a shady repair shop and have no idea that it’s been hacked. For them, the new update is designed to serve as an early warning that they’ll have to deal with product activation sooner or later. 

The change in product activation kicks in whenever Windows decides that your system’s activation status is no longer “genuine” – a state of affairs that can come about if you fail to activate within the original 30–day grace period, or if the WGA validation code detects that your system has been tampered with, or if it appears based on hardware changes that the activated copy has been moved to another computer. In either of the latter two cases, activation is revoked and a three-day grace timer begins.

Previously, with both Windows XP and Windows Vista, the end of the grace period meant you had to activate, period. If you let the clock run out without activating over the Internet or by phone, Windows refused to run. With Vista SP1, you’ll see the dialog box shown here, which goes away after 15 seconds. If you’re not ready, willing, or able to deal with Microsoft’s phone activation line, you get to log in and use every Windows feature after the 15–second period has passed. In theory, a Windows user who doesn’t mind the nag screens can run an unactivated copy of Vista indefinitely.

Change to the activation dialog box for Vista SP1

The big question at this point is whether these changes have been properly tested and whether they’ll have any unintended side effects. (The current problems with one of the prerequisite updates for SP1 don’t inspire a lot of confidence in the Windows Update process.) Although this update looks small in scope, it’s still possible that it will result in false positives like last summer’s server-side glitch that flagged a bunch of genuine customers as pirates. A lot of people will be watching over the next couple months to see if Microsoft follows through on its promise to “build more trust in WGA”. With the recent round of changes, WGA certainly hasn’t been rendered toothless. But its bite is now far less painful.

Note: an early draft of this story appeared briefly (for 10-15 minutes) on this site before the final version was posted.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ed Bott is an award-winning technology writer with more than two decades' experience writing for mainstream media outlets and online publications.

Disclosure

Ed Bott

Ed Bott is a freelance technical journalist and book author. All work that Ed does is on a contractual basis.

Since 1994, Ed has written more than 25 books about Microsoft Windows and Office. Along with various co-authors, Ed is completely responsible for the content of the books he writes. As a key part of his contractual relationship with publishers, he gives them permission to print and distribute the content he writes and to pay him a royalty based on the actual sales of those books. Ed's books written prior to fall 2011 have been distributed by Que Publishing (a division of Pearson Education) and by Microsoft Press. As of November 2011, Ed is a partner in the independent publishing company Fair Trade Digital Exchange, which exclusively publishes his books.

On occasion, Ed accepts consulting assignments. In recent years, he has worked as an expert witness in cases where his experience and knowledge of Microsoft and Microsoft Windows have been useful. In each such case, his compensation is on an hourly basis, and he is hired as a witness, not an advocate.

Ed does not own stock or have any other financial interest in Microsoft or any other software company. He owns 500 shares of stock in EMC Corporation, which was purchased before the company's acquisition of VMware. In addition, he owns 350 shares of stock in Intel Corporation, purchased more than two years ago. All stocks are held in retirement accounts for long-term growth.

Ed does not accept gifts from companies he covers. All hardware products he writes about are purchased with his own funds or are review units covered under formal loan agreements and are returned after the review is complete.

Biography

Ed Bott

Ed Bott is an award-winning technology writer with more than two decades' experience writing for mainstream media outlets and online publications. He's served as editor of the U.S. edition of PC Computing and managing editor of PC World; both publications had monthly paid circulation in excess of 1 million during his tenure. He is the author of more than 25 books on Microsoft Windows and Office, including the recently released Windows 7 Inside Out.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
26
Comments

Join the conversation!

Just In

RE: Microsoft+removes+another+one+of+WGA%27s+fangs
beijing2008 Updated - 14th Sep
I very much enjoyed this article. chanel bags
0 Votes
+ -
So what's new???
Ole Man 21st Feb 2008
Samo samo........... crap!
0 Votes
+ -
In order to understand what is new....
ShadeTree 22nd Feb 2008
.... one must be capable of reading and comprehension. The new features are discussed in the article.
0 Votes
+ -
Right, exactly what I said
Ole Man 22nd Feb 2008
More crap!
0 Votes
+ -
Right ...
Cardhu 31st Aug 2008
so Ole Man has explained things for you in terms even you can understand.
0 Votes
+ -
I very much enjoyed this article. chanel bags
0 Votes
+ -
They might as well just be rid of WGA and activation keys altogether if this is all that will happen if it is a pirated copy.
0 Votes
+ -
They might as well just be rid of WGA and activation keys altogether if this is all that will happen if it is a pirated copy.

Mind you, even having a pirated copy running on someone's computer is probably preferable to Microsoft than that person running a copy of Linux, or going out and getting hooked on 'Cupertino Crack'.

I suppose if they can get you hooked on Microsoft Meth first...
0 Votes
+ -
Contributr
I'd expected this ...
Adrian Kingsley-Hughes 22nd Feb 2008
... since SP1 disabled the two hacks quietly, there were going to be a lot of people out there finding their systems not working and no reason given. However, while I'm happy with the beta tested changes in SP1, applying an un-beta tested patch on top of that doesn't fill me with joy.

BTW Ed, SL07-006 - You seen any mention of that on the Microsoft site anywhere? I've asked Kochis for clarification on this because I sure do hope it shows users more than that.
0 Votes
+ -
Contributr
Yes, I did ask about that
Ed Bott 22nd Feb 2008
The error code is a hot link to a web page that is designed to show full details of the exploit and how it works. The devil is in the details, which I have yet to see.
0 Votes
+ -
Contributr
Yeah ...
Adrian Kingsley-Hughes 22nd Feb 2008
... I just got the same cut'n'paste reply too ... my guess is that they're playing this close to their chest. However, rumor is that this WGA update will detect more than the Paradox and grace timer hacks.
0 Votes
+ -
Contributr
Nope
Ed Bott 22nd Feb 2008
The update will specifically detect only these two cracks. SP1 includes infrastructure that will allow them to detect others, but I am confident this update will be focused on only these two specific cracks.
0 Votes
+ -
Yeah right. Two days ago on XP I switched video drivers and had to re-activate. That wasn't part of the deal. No hardware was touched. Another reason to avoid Vista at all costs
0 Votes
+ -
RE: Microsoft removes another one of WGA's fangs
mr_eastbay20004@... 22nd Feb 2008
Anybody seen steve jobs lol"
0 Votes
+ -
Time for Version 2.0 of the Cracks
nucrash 22nd Feb 2008
Throw some junk code in the patch and watch what happens.

Then again, perhaps the update is looking for the effects of the patches rather than a file. If that is the case, this may be a bit more difficult to crack. Unless you can dupe the software in another fashion. Either way, crackers have a new challenge and will probably be quick to come up with a new solution.
0 Votes
+ -
Microsoft should spend more time in making there operating system more stable rather than, Adding WGA and pirate detection crap.

Not a mac fan, but i don't hear much about wga or service packs as much as windows has in the past.

Yes i know more of you out there use windows rather than mac, but far less problems with the mac.

I do run a genuine copy of windows, but after vista's sp1 @#$@ up!

http://www.pcworld.com/article/id,142617-c,windowsbugs/article.html

This makes me lean towards linux or mac more @ more evey day, like chris pirillo has.

http://chris.pirillo.com/

Chris use's a mac with vista in virtual machine.

Chris is not the only one that made the move to mac, but i hear more & people talking about mac because windows vista problems since it was released!

Remember a good os is less time spend patching and updating!
0 Votes
+ -
I think Scott Finney switched too
Ole Man 23rd Feb 2008
As well as Marty Wrin:

Hello Linux! Or more accurately, hello
Ubuntu since that's the distribution of
GNU/Linux that I'm using. It's built upon
the Debian distribution and is one of the
most opensource and non-commercial of the
Linux distributions.

http://onlifesterms.blogspot.com/2006/05/buh-bye-microsoft.html

February 07, 2007 (Computerworld) --
Editor's Note: This is the third installment
of a series in which longtime Windows expert
Scot Finnie gives the Mac a three-month
trial as his primary machine for work and
home use.
Mac vs. PC cost analysis: How does it all
add up?
Everybody knows PCs are cheaper than Macs,
right? Wrong! (At least sometimes.)

http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=macintosh_os&articleId=9023959&taxonomyId=123

I wouldn't be surprised if a bunch more
people switched. Vista does NOT = Herbert
Tareton (as in "I'd Rather Fight Than
Switch"). Just the opposite, I'd say. Most
people would rather switch than fight with
Vista.
0 Votes
+ -
Excellent Post, Ole Man!
Cardhu 31st Aug 2008
Thsnks for the great links!
0 Votes
+ -
...it's just that the Mac equivalent of WGA is, well, owning the hardware in the first place.

And as for service packs...well OSX just got one - it went from 10.4 to 10.5 (plus a couple of incrementals afterwards...). It got a hell of a lot of publicity, but they called it a new version of the OS and charged $129 for it.
0 Votes
+ -
Microsoft did the same thing
alaniane@... 10th Apr 2008
with XP. Win 2000 is NT version 5.0 and XP is version 5.1. Most software companies charge for either major upgrades like going from 2.0 to 3.0 or minor upgrades like going from 2.1 to 2.2. Service packs and patches generally are reflected like 2.1a or 2.1.0.01 or 2.11 etc.
0 Votes
+ -
This is just one more reason that microsoft is destined to fail. Instead of being happy that their marketshare is being propped up by eager misguided windows hackers, they are stifling their own userbase by annoying, intimidating, nagging and befuddling their customers.

Windows is truly an operating system that sucks the life out of its users. I decided early on that microsoft should be paying me for emotional and intellectual distress whenever I used its piece of crap operating system, rather than the other way around.

You don't have to switch to OSX, but at this point there is little argument against switching to linux, into a much more welcoming, friendly and expedious operating system environment.
0 Votes
+ -
If the end result is a that counterfeit user just has to wait 15 seconds and Vista will continue operating, it seems that MS has thrown in the towel. I mean, if you add 15 seconds to the rest of the boot cycle how much of an inconvenience is THAT? Not much.

I haven't even tried out Vista yet, so I'm not at all aware of how long it normally takes to boot, but through previous iterations of Windows, 15 seconds is a small price to pay.

I doubt if I will go to Vista in the future. Next computer will run either Mac OSX or some version of Linux.

Krusty Baguette typing from Podunk, MA
0 Votes
+ -
Locks
alaniane@... 10th Apr 2008
only keep honest men honest. It's almost next to impossible to prevent someone from countefeiting or hacking your product if they really want to do it.
0 Votes
+ -
Like a blind marksman trying to hit a target, Microsoft lacks the skills needed to catch real pirates.

The genuine thieves deftly dodge Microsoft's simplistic and ham-handed attempts at validation.

Microsoft only manages to threaten their honest customers with illegitimate denial-of-use and squeeze us for more revenues.
0 Votes
+ -
WGA = big laugh! BIG failure!
Gradius2 Updated - 5th Sep 2008
Everytime I read about WGA, I lol a lot here (really).

Instead M$ stop burning money ($500 millions!) on stupids ADs, they should release just three Vista versions (Home, Business and "Ultimate"), and lower the price, for Ultimate it should be $99 at max! I'm pretty sure they would sell a lot LOT more, dropping pirated copies at the same time.
0 Votes
+ -
RE: Microsoft removes another one of WGA's fangs
damacman Updated - 7th Sep 2008
WITHOUT WGA WE WOULD BE LOOKING LIKE A BUNCH OF THIEVES OR PIRATES. LEGAL SOFTWARE PLEASE !!!
0 Votes
+ -
With WGA All Customers Are Assumed to be Thieves
Cardhu Updated - 11th Sep 2008
and are constantly subject to search and harassment.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix