icat
27-07-05, 11:15
An Indian Researcher, Debasis Mohanty has beaten what Microsoft called its "impenetrable" Windows Genuine Advantage. Windows Genuine Advantage is designed to keep tabs on consumers determining whether they are running a legit copy of Windows or a pirated copy. If running a pirated copy, a consumer may be restricted from downloading software from Microsoft's main download site.
Microsoft is aware of the breach and has even confirmed it but has stated that it "represents very little threat." A spokesperson stated that the company had long expected counterfeiters would try every method they could think of to circumvent the safeguards. Mohanty posted a proof of concept program and showed how the WGA program can be used to generate key codes for use on illegal copies of the software.
Using a secondary Microsoft validation tool, genuinecheck.exe, he says he has made it possible for people running pirated copies of Windows to trick the safeguard mechanism and get access (http://www.afterdawn.com/news/archive/6563.cfm#) to content that is set aside for genuine installations only. Currently a validation check on the website is voluntary but the company has said it will probably become mandatory eventually.
Source:
rediff (http://inhome.rediff.com/money/2005/jun/21ms.htm)
Microsoft is aware of the breach and has even confirmed it but has stated that it "represents very little threat." A spokesperson stated that the company had long expected counterfeiters would try every method they could think of to circumvent the safeguards. Mohanty posted a proof of concept program and showed how the WGA program can be used to generate key codes for use on illegal copies of the software.
Using a secondary Microsoft validation tool, genuinecheck.exe, he says he has made it possible for people running pirated copies of Windows to trick the safeguard mechanism and get access (http://www.afterdawn.com/news/archive/6563.cfm#) to content that is set aside for genuine installations only. Currently a validation check on the website is voluntary but the company has said it will probably become mandatory eventually.
Source:
rediff (http://inhome.rediff.com/money/2005/jun/21ms.htm)