Microsoft aumenta medidas contra pirataria do Windows

[Pedro Miranda]

Microsoft makes anti-piracy move
Microsoft Windows software

Microsoft says people will have prove the validity of their software
Microsoft says it is clamping down on people running pirated versions of its Windows operating system by restricting their access to security features.

The Windows Genuine Advantage scheme means people will have to prove their software is genuine from mid-2005.

It will still allow those with unauthorised copies to get some crucial security fixes via automatic updates, but their options would be "limited".

Microsoft releases regular security updates to its software to protect PCs.

Either PCs detect updates automatically or users manually download fixes through Microsoft's site.

Those running pirated Windows programs would not have access to other downloads and "add-ons" that the software giant offers.

Increased risk?

People who try to manually download security patches will have to let Microsoft run an automated checking procedure on their computer or give an identification number.

   
It sounds like their decision to allow critical security patches to remain available to both legitimate and illegitimate users of Windows is good news for everyone who uses the net
Graham Cluley, Sophos
Microsoft's regular patches which it releases for newly-found security flaws are important because they stop worms, viruses and other threats penetrating PCs.

Some security experts are concerned that restricting access to such patches could mean a rise in such attacks and threats, with more PCs left unprotected.

But Graham Cluley, senior consultant at security firm Sophos, told the BBC News website that it was a positive decision.

"It sounds like their decision to allow critical security patches to remain available to both legitimate and illegitimate users of Windows is good news for everyone who uses the net," he said.

Windows Genuine Advantage was first introduced as a pilot scheme in September 2004 for English-language versions of Windows.

Two-front battle

Microsoft's Windows operating system is heavily exploited by virus writers because it is so widespread and they are constantly seeking out new security loopholes to take advantage of.

The company is trying to tackle security threats whilst cracking down on pirated software at the same time. Software piracy has cost the company billions, it says.

The company announced earlier in January that it was releasing security tools to clean up PCs harbouring viruses and spyware, which 90% of PCs are infected with.

The virus-fighting program, updated monthly, is a precursor to Microsoft's dedicated anti-virus software.

Last year it introduced the Windows XP Counterfeit Project, a UK-based pilot scheme, which ran from November to December.

The scheme meant that anyone with pre-installed copies of the operating system in PCs bought before November could replace counterfeit versions of Windows XP with legal ones for free.

It is also increasing efforts to squash software piracy in China, Norway and the Czech Republic, where pirated software is a huge problem, by offering discounts on legitimate software to users of pirated copies Windows.

"China in particular is a problem, with piracy estimated at 92%," said Mr Cluley.

fonte:
BBC-News

[Dealer]

Acho que fazem bem ... é mau para muito milhões de pessoas mas o lado deles percebo perfeitamente... o dinheiro que eles vao investir no "anti-pirataria" vai compensar muitos anos depois, claro, o dinheiro que têm perdido !

[Dicastek]

existe uma excelente alternatica, começem a usar Linux, a microsoft está a cair lentamente, acreditem...

[CABO_Y]

Eu só pergunto qtas horas demorarão para criar um "patch" para contornar esse controlo da microsoft. 

SW

[Pedro Miranda]

Eu só pergunto qtas horas demorarão para criar um "patch" para contornar esse controlo da microsoft.

SW

LOL.... possivelmente no dia em que a MSFT lançar isso, será o dia em que sai a «patch»...

Quanto ao Linux, penso que tem muitas vantagens, mas infelizmente para certo tipo de utilizadores, como por exemplo a malta dos mercados, o Linux não é (ainda) uma alternativa.

um abraço,

[pOint]

he, he

logo no 1º dia saiu o patch...
a noticia é de 1 de Agosto...
(tem 2 meses).

Sistema anti-pirataria da MS - WGA - hackeado ao primeiro dia.

O novo sistema anti-pirataria da MicroSoft, denominado de WGA, ou Windows Genuine Advantage foi hackeado apenas um dia depois de estar em funcionamento.

O sistema foi implementado apenas para updates não relacionados com a segurança e obriga o download de um applet de ActiveX que faz a verificação do sistema instalado e depois deixa uma chave de confirmação para posteriores actualizações.

O WGA entrou em funcionamento na segunda feira passada e na terça já circulava pela internet um simples snippet de JavaScript que fazia o bypass do download do applet de ActiveX.

É nesta engenharia que confiamos todos os nossos dados pessoais e professionais...

Fonte: Techworld

http://www.madtech.com.pt/noticias.php?idn=68

01 August 2005
Hackers bust Microsoft's anti-piracy system

By Matthew Broersma, Techworld

Hackers found a way around Microsoft's Windows Genuine Advantage (WGA) anti-piracy system last week, only a day after the system went into effect.

WGA requires Windows users to verify they are using a genuine copy of Windows before they are allowed to download certain software updates. Security patches aren't covered by the system, and remain available to any Windows user, legitimate or not.

The system asks users to download an ActiveX control, which scans Windows to determine whether it is legitimate. If the software checks out, the control installs a key allowing future downloads. The system went into place on Monday.

But by Tuesday, a simple JavaScript hack was already circulating, it emerged late last week. All users had to do was paste a JavaScript URL into the Internet Explorer browser window at the beginning of the process; this turned off the key check, according to users.


To carry out the hack, users simply needed to insert the following line into Explorer's address bar before the WGA authentication check was carried out:

javascript:void(window.g_sDisableWGACheck='all')


Microsoft said it was investigating the hack but didn't consider it a security flaw. The company said that it may not take immediate action to fix the problem. "As the validation system is updated from time to time, we will address this and other issues that may arise," a Microsoft spokeswoman said.


There are other ways of getting around WGA as well, none of them particularly complicated, say users, which raises the question of how seriously Microsoft is intending to enforce its updating policy.

Another workaround involves disabling the Explorer add-on that enforces WGA. A third method involves changing an Explorer cookie. None of the hacks involves anything particularly technical.


Microsoft put WGA into place to cut down on Windows piracy, and to persuade users who are running pirated copies of Windows to buy legitimate licences. Some users may be using pirated copies without knowing it, according to the company. Microsoft originally ran the programme on a voluntary basis for several weeks before making it mandatory last week.

http://www.techworld.com/security/news/index.cfm?NewsID=4134



c'um caneco!