Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Windows copy protection defeated(1 line of JavaScript allows systems to ignore authentication check)
vnunet.com ^ | 01 Aug 2005 | Tom Sanders

Posted on 07/31/2005 11:59:22 PM PDT by nickcarraway

Single line of JavaScript allows systems to simply ignore authentication check

Hackers have found a way to circumvent a check in Windows that aimed to prevent users of pirated copies from accessing software updates.

By pasting a special JavaScript command in the address bar of the browser, users can disable the Windows Genuine Advantage 1.0 check that Microsoft took live last week.

The Microsoft technology uses an ActiveX tool to force the user to go through an authentication check before he is allowed to access certain download sections on the Microsoft.com website. The JavaScript command simply instructs the computer to disable the WGA check and take the user straight to the downloads.

Users of pirated Windows copies still get access to security updates without passing the WGA check.

In addition to blocking users of pirated copies, the WGA check also unlocks access to a set of free software applications that Microsoft values at $450. Another part of the programme gives qualifying users of pirated copies the chance to buy a legal licence and swap in their software CD for a genuine one.

A spokesman for Microsoft acknowledged the hack to vnunet.com.

"Because of the high value that we provide to Windows Genuine Advantage users, we're not surprised that hackers try to circumvent the safeguards," he said.

Microsoft is investigating the hack and will take action to disable it.

The spokesman further pointed out that this isn't a security vulnerability and that users aren't put at risk.

Last May an Indian security consultant published another workaround that allows users to circumvent the WGA check by entering the validation key that the software provides on multiple machines.


TOPICS: Business/Economy; Culture/Society; Extended News; Miscellaneous; News/Current Events; US: Washington
KEYWORDS: activex; balmer; billgates; convictedmonopoly; evilempire; hack; internetexploiter; javascript; microsoft; monopoly; pwn3d; windows
Navigation: use the links below to view more comments.
first 1-5051 next last

1 posted on 07/31/2005 11:59:23 PM PDT by nickcarraway
[ Post Reply | Private Reply | View Replies]

To: nickcarraway

so where's the script?


2 posted on 08/01/2005 12:03:04 AM PDT by Jeff Chandler (Tagline: (optional, printed after your name on post):)
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway

And Microsoft wants us to think they regard security as job 1 They can't stop their own "burglars."


3 posted on 08/01/2005 12:04:05 AM PDT by The Red Zone (Florida, the sun-shame state, and Illinois the chicken injun.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway

And there are still apologists running around who claim that Microsoft malware is more secure. Bah... Nothing but whores for Redmond.


4 posted on 08/01/2005 12:07:41 AM PDT by Prime Choice (Thanks to the Leftists, yesterday's deviants are today's "alternate lifestyles.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: Jeff Chandler
so where's the script?

javascript:void(window.g_sDisableWGACheck='all')

Piece of cake.


5 posted on 08/01/2005 12:10:58 AM PDT by rdb3 (I once had a handle on life, but I broke it.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: rdb3

Thanks.


6 posted on 08/01/2005 12:14:38 AM PDT by Jeff Chandler (Tagline: (optional, printed after your name on post):)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Jeff Chandler
You're welcome.


7 posted on 08/01/2005 12:41:10 AM PDT by rdb3 (I once had a handle on life, but I broke it.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: nickcarraway

That's why Microsoft wants a protected path on your "trusted" machine -- it is not so that *you* the owner somehow gains trust in your computer, it's so Microsoft [and the "content providers"] will trust "your" computer to do what they want.


8 posted on 08/01/2005 12:46:58 AM PDT by snowsislander
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway
If someone ten years ago had told me that I would take part in an initiative to remove all Microsoft products from a company's network and replace them with open-source alternatives, I'd have told them to stop sniffing glue. Yet, here I am - Having done exactly that.

I'm not really evangelical about the subject, but, is a dodgy product that can be circumvented in so many different ways worth spending a small fortune on?
9 posted on 08/01/2005 1:44:01 AM PDT by ExDemSince92
[ Post Reply | Private Reply | To 1 | View Replies]

To: ExDemSince92
but, is a dodgy product that can be circumvented in so many different ways worth spending a small fortune on?

It would be, if it were the only product around. but 99.44% of the users in most offices in the world simply need a document processor, spreadsheet, email, and web.

There are a few applications, typically in medical offices that just don't exist in any other world but Windows, and Joe Small Businessman wants Quicken.
(And many of these work under CrossOver Office)

But other than that there is really nothing holding most businesses on Windows platforms other than Fear of the unknown, Uncertainty of how to migrate, and Doubt that anything else works. FUD.

10 posted on 08/01/2005 1:55:30 AM PDT by konaice
[ Post Reply | Private Reply | To 9 | View Replies]



Sometimes it really sucks to have to eat your own dogfood.


11 posted on 08/01/2005 1:59:59 AM PDT by D-fendr
[ Post Reply | Private Reply | To 9 | View Replies]

To: konaice

The word processing/spreadsheet needs are filled quite admirably by OpenOffice. Scribus, an open-source attempt at PageMaker's functionality is quite impressive as well. It has a way to go, in my opinion, but it's getting there.

Crossover Office works fairly well but I only resort to that if native apps are too primitive. Admitedly, this happens less and less as time goes on.

We moved our flagship application to Linux.

We've found that the big FUD point isn't Office. After we have them play with OpenOffice, that particular fear evaporates. The big sticking point are the apps they download and install. (These are small businesses where people can get away with that sort of thing) Little photo albums and such. They no longer have the ability to amble over to OfficeMax or Staples to buy software. This is anther concern.


12 posted on 08/01/2005 2:17:10 AM PDT by ExDemSince92
[ Post Reply | Private Reply | To 10 | View Replies]

To: nickcarraway
Well, I suppose it's a cleaner, more high-tech approach than using a 59 cent marker...
13 posted on 08/01/2005 2:26:23 AM PDT by Caipirabob (Democrats.. Socialists..Commies..Traitors...Who can tell the difference?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Caipirabob

You know, it's not like i'm using any copeis
od MS's OS on more than one machine, but a do a lot of upgrading and cannablizing to make "piees parts" PCs,,
and i've allready hace had my fill over the last 4
years of having to call MSs Activation Center to
amnually type in new authenticaton code strings....

I *do* find myself sorely tempted to use the Javascript
the next time i have a bad mobo or a HDD goes bad on me...


14 posted on 08/01/2005 2:43:22 AM PDT by NickatNite2003
[ Post Reply | Private Reply | To 13 | View Replies]

To: NickAtNite

bttt


15 posted on 08/01/2005 3:55:43 AM PDT by libs_kma (USA: The land of the Free....Because of the Brave!)
[ Post Reply | Private Reply | To 14 | View Replies]

To: nickcarraway
If you think MS products are expensive in the west, think about the real cost in Asia and Africa. In Thailand Windows XP costs a teacher 4-6 weeks salary. The cost of MS Office is astronomical. BTW, these products actually cost more here than in the USA.

If MS ever is successful in completely shutting down pirated software, a billion or so people will immediately start shifting to open source OS and applications. That would be a catastrophe for MS as they would not make one more nickel than they do now, but would provide a tremendous impetus to improve the open source products. Sometimes I wonder if, knowing this, they deliberately make these protection schemes more an irritant than anything else.

16 posted on 08/01/2005 4:00:08 AM PDT by Northern Alliance
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway

Microsoft is so last century.


17 posted on 08/01/2005 4:04:11 AM PDT by 6SJ7
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway
The Microsoft technology uses an ActiveX tool to force the user to go through an authentication check before he is allowed to access certain download sections on the Microsoft.com website.

My new laptop has Windows XP – but without a necessary ActiveX. Because of this I am unable to access my website server. I am also having a problem trying to use all the material I have on Word 97. Patches don’t work, and Dell blames Microsoft and Microsoft blames Dell.
I was hoping to be able to rid myself of the desktop and once again have a desk I could use. Nope. I continually run into problems with the automatic “protections” built into XP. I have never had a virus – other malware yes, but nothing really destructive.

I never thought I’d bitch about Microsoft – but here I am doing it.

18 posted on 08/01/2005 4:22:52 AM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: konaice
"There are a few applications, typically in medical offices that just don't exist in any other world but Windows, and Joe Small Businessman wants Quicken. (And many of these work under CrossOver Office)"

CAD (as in AutoCAD compatible). I've yet to find a decent Linux CAD package.

19 posted on 08/01/2005 4:25:38 AM PDT by Wonder Warthog (The Hog of Steel)
[ Post Reply | Private Reply | To 10 | View Replies]

To: nickcarraway

Ah, shucks. I LIKE being treated like a criminal every time I add a hard drive or some RAM.


20 posted on 08/01/2005 4:31:11 AM PDT by Skooz (If it isn't a baby, you're not pregnant)
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdb3

I get the feeling this script is just about downloading software. What about the activation itself?


21 posted on 08/01/2005 5:07:34 AM PDT by Jason_b
[ Post Reply | Private Reply | To 5 | View Replies]

To: Wonder Warthog
odd.

Auto CAD was originally written for UNIX.
22 posted on 08/01/2005 5:15:57 AM PDT by fireforeffect (A kind word and a 2x4, gets you more than just a kind word.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: fireforeffect
"Auto CAD was originally written for UNIX.

There are any number of high-end CAD products for "UNIX" workstations, but not for "LINUX". Why that is so, I have no idea.

23 posted on 08/01/2005 6:06:56 AM PDT by Wonder Warthog (The Hog of Steel)
[ Post Reply | Private Reply | To 22 | View Replies]

To: Wonder Warthog
Do you have any experience with LinuxCAD? I don't use CAD software, so it may well suck :-)
24 posted on 08/01/2005 7:25:43 AM PDT by zeugma (Democrats and muslims are varelse...)
[ Post Reply | Private Reply | To 23 | View Replies]

To: ExDemSince92

Can you say what company?


25 posted on 08/01/2005 7:28:49 AM PDT by Lost Highway (I don't know what the world may need but a V8 engines a good start for me)
[ Post Reply | Private Reply | To 9 | View Replies]

To: Wonder Warthog
After digging through that Linuxcad site, I have not much hope for the product. It seems like whoever is running the "company" is somewhat lacking in tact, and it would not appear as though English is his/her primary language.

I've found some really cool stuff from some whacked sites before so that doesn't necessarily mean much. The lack of demoware would tend to argue against them as demoware in some form is pretty much standard these days.

26 posted on 08/01/2005 7:30:40 AM PDT by zeugma (Democrats and muslims are varelse...)
[ Post Reply | Private Reply | To 23 | View Replies]

To: nickcarraway
The spokesman further pointed out that this isn't a security vulnerability and that users aren't put at risk.

So this one they'll fix promptly...

27 posted on 08/01/2005 7:32:24 AM PDT by null and void (Be vewwy vewwy qwiet, we're hunting wahabbits...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: nickcarraway
In addition to blocking users of pirated copies, the WGA check also unlocks access to a set of free software applications that Microsoft values at $450.

Which free apps are these?

28 posted on 08/01/2005 7:37:13 AM PDT by savedbygrace ("No Monday morning quarterback has ever led a team to victory" GW Bush)
[ Post Reply | Private Reply | To 1 | View Replies]

To: savedbygrace
Microsoft "Genuine Advantage" cracked in 24h: window.g_sDisableWGACheck='all'

AV sez, "This week, Microsoft started requiring users to verifiy their serial number before using Windows Update. This effort to force users to either buy XP or tell them where you got the illegal copy is called 'Genuine Advantage.' It was cracked within 24 hours." Before pressing 'Custom' or 'Express' buttons paste this text to the address bar and press enter: javascript:void(window.g_sDisableWGACheck='all')

It turns off the trigger for the key check.

29 posted on 08/01/2005 11:23:13 AM PDT by opticoax
[ Post Reply | Private Reply | To 28 | View Replies]

To: Wonder Warthog
CAD (as in AutoCAD compatible). I've yet to find a decent Linux CAD package.

True, but a friend of mine runs his AutoCad under VmWare on Linux.

30 posted on 08/01/2005 11:38:23 AM PDT by konaice
[ Post Reply | Private Reply | To 19 | View Replies]

To: R. Scott
I was hoping to be able to rid myself of the desktop and once again have a desk I could use. Nope. I continually run into problems with the automatic “protections” built into XP. I have never had a virus – other malware yes, but nothing really destructive.

Well, while you still have the all the Restoration CDs Nuke it all and install SuSE 9.3. (In fact you can install SuSE WITH windows still on the box and it will shirnk the windows partition for you).

SuSE comes with at least 3 office suites, and the will read and write Office Documents just fine.

31 posted on 08/01/2005 11:46:08 AM PDT by konaice
[ Post Reply | Private Reply | To 18 | View Replies]

To: opticoax

No, I wanted to know about the $450 of free software.


32 posted on 08/01/2005 11:51:30 AM PDT by savedbygrace ("No Monday morning quarterback has ever led a team to victory" GW Bush)
[ Post Reply | Private Reply | To 29 | View Replies]

To: konaice

No problem putting Linux with Windows?


33 posted on 08/01/2005 12:03:05 PM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 31 | View Replies]

To: R. Scott
I havre a box that dual boots Linux and Windows--no issues.

I also run Windows inside a windows in Linux. No issues there either.

34 posted on 08/01/2005 12:40:49 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 33 | View Replies]

To: konaice
"True, but a friend of mine runs his AutoCad under VmWare on Linux."

Which may be the route I ultimately take.

35 posted on 08/01/2005 12:56:52 PM PDT by Wonder Warthog (The Hog of Steel)
[ Post Reply | Private Reply | To 30 | View Replies]

To: ShadowAce

I might give it a try. Thanks.


36 posted on 08/01/2005 2:12:33 PM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 34 | View Replies]

To: Lost Highway
Can you say what company?

Nope. Non-disclosure agreement.

37 posted on 08/01/2005 2:37:08 PM PDT by ExDemSince92
[ Post Reply | Private Reply | To 25 | View Replies]

To: R. Scott
No problem putting Linux with Windows?

Not with the right Linux distro... The How-To is here

Usual disclaimers apply.

38 posted on 08/01/2005 2:39:29 PM PDT by konaice
[ Post Reply | Private Reply | To 33 | View Replies]

To: ExDemSince92
The big sticking point are the apps they download and install. (These are small businesses where people can get away with that sort of thing) Little photo albums and such. They no longer have the ability to amble over to OfficeMax or Staples to buy software. This is anther concern.

I would say thats a GOOD THING(tm).

The crap-creap that happens when you allow just anyone to decide what to put on a company machine is one of the major problems.

I actually had someone try to install Norton Antivirus on their Linux box. (They got nowhere of course, but they did get an education). Its so nice to get back all the performance you lost to the anti-virus crapware.

39 posted on 08/01/2005 2:48:51 PM PDT by konaice
[ Post Reply | Private Reply | To 12 | View Replies]

To: konaice

Good! It even has the free evaluation version to check out. I’ll give it a try for free. I hate spending bucks on things that fail to work for me.


40 posted on 08/01/2005 3:39:12 PM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 38 | View Replies]

To: Nightshift

ping


41 posted on 08/01/2005 3:40:44 PM PDT by tutstar ( <{{--->< OurFlorida.true.ws Impeach Judge Greer)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Jeff Chandler

LOL


42 posted on 08/01/2005 3:40:57 PM PDT by tutstar ( <{{--->< OurFlorida.true.ws Impeach Judge Greer)
[ Post Reply | Private Reply | To 2 | View Replies]

To: rdb3

I think MS is full of crud. Hubby bought XP and we were going to install on our other pc's. Can't do it unless you buy additional licenses at $100 each. If you have a large home network a smaller fee would be more reasonable imo. I wish there were a better alternative.


43 posted on 08/01/2005 3:43:00 PM PDT by tutstar ( <{{--->< OurFlorida.true.ws Impeach Judge Greer)
[ Post Reply | Private Reply | To 5 | View Replies]

To: R. Scott

I have a Inspiron 8600 and have no problems for the eight months I have had it.

I use XP and office 97.


44 posted on 08/01/2005 4:00:32 PM PDT by razorback-bert
[ Post Reply | Private Reply | To 18 | View Replies]

To: razorback-bert

Must just be something missing from mine.


45 posted on 08/01/2005 4:29:12 PM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 44 | View Replies]

To: R. Scott
I’ll give it a try for free. I hate spending bucks on things that fail to work for me. Heh, you purchased windows didn't you?

(running and ducking...) ;-)

46 posted on 08/01/2005 5:27:38 PM PDT by konaice
[ Post Reply | Private Reply | To 40 | View Replies]

To: tutstar
I wish there were a better alternative.

There are, depending on your needs.

47 posted on 08/02/2005 5:24:44 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 43 | View Replies]

To: ShadowAce

Granted I haven't fully researched the options but will the other OS work with the popular pc games? Seems I read somewhere that games are an issue.


48 posted on 08/02/2005 5:47:45 AM PDT by tutstar ( <{{--->< OurFlorida.true.ws Impeach Judge Greer)
[ Post Reply | Private Reply | To 47 | View Replies]

To: tutstar
Games can be an issue. There are a couple of solutions, though. One, you can dual boot, and have Windows installed on yourt computer in order to boot up and play the games.

Another solutiuon is VMware, an x86 emulator that you can install Windows on and run inside of Linux. A third solution is Transgaming Technology, a windows emulator that allows you to run some games within Linux itself.

49 posted on 08/02/2005 5:54:10 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 48 | View Replies]

To: Wonder Warthog
There are any number of high-end CAD products for "UNIX" workstations, but not for "LINUX". Why that is so, I have no idea.

That's because the high-end UNIX CAD systems cost dozens of thousands of dollars (actually dwarfing the cost of the machine to run them on in many cases).

It is well known in the workstation world that many people in the Linux community work very hard against actually paying for software (due to a misunderstanding of the true meaning of "free" software as pushed by Stallman, et. al.)

At this point in time, it would be suicide to publish a linux version of your $30,000 application, with the high probability that a free hack of it will be out on a Torrent within the week.

50 posted on 08/02/2005 6:15:07 AM PDT by krb (ad hominem arguments are for stupid people)
[ Post Reply | Private Reply | To 23 | View Replies]


Navigation: use the links below to view more comments.
first 1-5051 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson