Microsoft has updated the Windows Genuine Validation tool to circumvent the hack exposed last week that allowed the system to be bypassed with a snippet of JavaScript code. The Validation is now a two-step process that first generates a code and then has you copy and paste that code to complete the process.
2. Yayyyy!!! One down, 999999999999999999999999999999999999999999
TO GO!
Posted at 4:57AM on Dec 19th 2005 by Harsh
3. Try this:
http://www.extended64.com/blogs/rafael/archive/2005/07/27/1026.aspx
It works
Posted at 4:57AM on Dec 19th 2005 by Juan Pablo
4. This also works (and its n00b friendly)
http://home19.inet.tele.dk/jys05000/
Posted at 4:57AM on Dec 19th 2005 by Timmy Roth
5. Gee. And how long will it take for a valid list of numbers to be posted somewhere, only to be blacklisted, only to be replaced by yet another list of valid numbers, ad infinitum.
Posted at 4:57AM on Dec 19th 2005 by Bryan Price
6. Bryan - you're probably right. But that's not a problem exclusive to Microsoft, is it? We fight that battle everyday with warez pirates trying to steal our software at my company as do many ISVs. Security, in whatever form it takes, is a constant race in which you try to stay one step ahead of the bad guys.
Posted at 4:57AM on Dec 19th 2005 by Marc Orchant
7. So, get this. Microsoft fixed a hack. Nice work. Now work on the rest...
But, more to the point, what did the hack enable? Well, security updates can be picked up ANYWAY, so not that...so er...what? "Other updates" Drivers? I will do those myself, thank you very much. WMP? DX? Various other bits of software easily avaliable from a million other places?
Windows Update is worthless. The security updates are a waste of time and everything else you can get yourself.
Save yourself the effort. Buy a hardware firewall. Use firefox. Use Linux.
Steg
Posted at 4:57AM on Dec 19th 2005 by Steg
8. Methinks Paul got snubbed by MS, and is lashing out. Why else would he protest IMPROVEMENTS?
Posted at 4:57AM on Dec 19th 2005 by bob
9. a) Buy it ($$$$$)
b) Provide legal cd key
c) Activate windows (perhaps needing to do this over the phone...) --- My take --> users should not have to do this
d) Verify I'm using a legit copy ( first generates a code Via WGA- Windows Genuine Validation --- My take --> users should not have to do this
e.) have to enter the generate code
My take on this: I should not have to do C), D) & Now E.) Since I have already PAID for my OS and any other Microsoft Software. So once I PAY it should already be (activated and NO need for the MGA. Everyone take YOUR COPY OF WINDOWS XP Home or Pro OS and any other Microsoft Software Back to MICRO**** and DEMAND A FULL REFUND. And TELL THEN THAT YOU HATE being treated like a potential criminal. and also say if i have to do C), D) & Now E.) Then I should not have to PAY for the OS and any other Microsoft Software till I do C), D) & Now E.).
I swear Microsoft is getting away with Murder. We should all JOIN together and lay a Lawsuit on them just like they do to almost everyone. Give them a taste of there own meds..
HELLO MICROSOFT I PAID FOR MY OS I SHOULD NOT BE SUBJECT TO THIS AT ALL. I WANT MY MONEY BACK NOW.
WHAT MICROSOFT IS DOING IS CALLED SLANDER.
Saying that our copies are not genuine unless we do the WGA so they are calling us a thief. And that is called slander.
Posted at 4:57AM on Dec 19th 2005 by David
10. To be honest, it seems as though M$ are using this as some sort of experiment for later releases of Vista or SP3. I mean why on earth would you want to disable poeple from downloading Security Updates, when it can be done otherwise, or additional software that M$ makes available and improve the functionality and operation of their OS.
Surely the mental thought behind improvement is to improve as much as possible in order to win the customer over and get money out of them for the next release.
Case in example, new installation of Win XP. No possiblity of the improvement = user thinks Win XP is at core rubbish, reverts to another OS, M$ lose possible future sales.
I think they are testing the water for a next release to see how much PR they are going to generate.
Posted at 4:57AM on Dec 19th 2005 by Farhad
11. I have to admit i am running an Illegal copy of windows. But its for what i believe to be a perfectly legitimate reason. I change so many components on my machine i worried i will be actviating the thing every 2 days. (i Do own home for some reason)
Activation obviously doesnt work so why leave it in?? WGA annoys me far more and is a real reason to actually risk a legit copy. BUT i never get that much from microsoft, and auto update still works. Anything i do need i can get from work.
I hope you all agree that the pirate industry is in some way driven by the anti piracy movement. You protect your music then people are just going to download it. I have had more problems with legal version of software than my pirate. Anyway is there really a Genuin Windows Advantage?
Posted at 4:57AM on Dec 19th 2005 by DaveKS
13. Pfft... it still works fine. I am watching the installation of software updates on a illegit version of XP pro as I type this. And I used the script to circumvent the WGA.
Doing a bit of research making claims is a good idea.
Posted at 4:57AM on Dec 19th 2005 by Muppet
14. Muppet - I'll leave the fact that you seem to be OK with pirating software aside for the moment. I'm curious how you bypassed the new validation code requirement. Are you saying the JavaScript code pasted in the browser still bypasses the WGA validation? Even with the new two-step process?
DaveKS - sorry but there is no legitimate excuse for pirating software. If you're making that degree of changes to your system on a daily basis you're certainly outside the box in terms of normal usage and I can appreciate the annoyance of dealing with activation over and over. Your argument that protecting intellectual property is either a bad thing or an incitement to piracy is just plain silly. Are you honestly of the opinion that people who create software do not have a right to be paid for their efforts? It's not as though there is a lack of free and open source software out there if you either can't or won't pay for commercial software.
Farhad: WGA has nothing to do with security updates - they are still available to anyone running a pirated or counterfeited copy of Windows.
David: You make a good point about how onerous this process has become. While I am an advocate of protecting one's intellectual property, the amount of pain the current license key / activation / registration/ WGA validation creates is over the top and may very well anger some people enough to look at the Mac or Linux as an alternative. Especially with the release of Windows-friendly distros like the new Xandros Business Edition, Microsoft is treading on increasingly thin ice.
Posted at 4:57AM on Dec 19th 2005 by Marc Orchant
15. Regarding the comment about using pirated software. There is such a thing as running test machines. ;-)
As for the two-step process I did not even notice its existence.
Posted at 4:57AM on Dec 19th 2005 by Muppet
16. Muppet: You used the word "illegit". I read that as "illegal, pirated, outside of the terms of the license".
As to the updates, how are you getting them? Through Windows Update? Microsoft Update? Automatic Updates? If the last, there is no WGA check - the only patches you're receiving are ones made available to all Windows XP machines.
Try downloading a "value-added" piece of software from Microsoft's download site on your "illegit" machine and you'll see what we've been talking about here.
Posted at 4:57AM on Dec 19th 2005 by Marc Orchant
17. Nope not Automatic Updates, and I am not talking about Security patches but Software and Hardware updates. And as far as I know, the only updates that Microsoft have decided to deliver to pirated versions are security ones.
Does the windows media update qualify as value added, it certainly isn't listed as a security update? To double check that it works I just downloaded/installed that one without hassle.
Do I use a illegal version normally? No. This is just a test box I am using to satisfy my curiousity on this issue. Is doing so a breach of the EULA? Certainly. But I have paid for the product and have simply used a blacklisted product key when installing. So while there possibly are legal implications I don't see any moral ones.
Posted at 4:57AM on Dec 19th 2005 by Muppet
18. Muppet - thanks for the clarification - I see now that you're just another curious person pushing and poking at the envelope. Goodonya.
I don't know if WMP fails under the WGA process - I don't think so. I know that a few of the add-ons and extras I've written about lately do, as does PhotoStory 3 and Acrylic (the old Expressions graphics app). If time permits, try going after one of these downloads from your test system and see what happens.
Posted at 4:57AM on Dec 19th 2005 by Marc Orchant
19. I misstyped the update name, so for the sake of clarity here's the info on it given by Microsoft:
Update for Windows Media Connect
Windows Media Connect is the easiest way to deliver music, photos, and videos from your Windows XP computer to your stereo and television. Installing Windows Media Connect enables you to deliver music, photos, and videos that reside on your Windows XP PC to devices that support the uPnP protocol. This includes digital audio receivers, connected DVD players, set-top boxes, and more.
Posted at 4:57AM on Dec 19th 2005 by Muppet
20. Downloading Photostory 3 was hassle free, but installing failed since it detected the invalid product key during the installation process.
So next I checked what happens if I don't use the javascript before clicking 'Custom' on the update page when running a windows update. Without using the javascript I was met with this message "To get updates, you must first validate your Windows software. Validation assures that you are using an authentic and fully licensed copy of Windows." Upon clicking continue I get "Validation Failure: Invalid Product Key"
Next I once again (it is starting to get tiresome :-P ) ran update using the javascript. And I am able to successfully download and install a whole bunch of non-security updates.
Conclusion: the javascript is working for the most important Non-security updates such as the Cumulative Update for Outlook Express for Windows XP (KB887797) and the latest WMP update. It also makes the process of downloading value added software such as PhotoStory 3 much less of a hassle compared to going through the validation process. And as long as you are running a legitimate system, installation should be problem free as well.
So I would actually recommend those using legitimate copies of XP to use the script since it makes things so much easier.
Posted at 4:57AM on Dec 19th 2005 by Muppet
Other Weblogs Inc. Network blogs you might be interested in:
1. Good news! I'm glad to hear that!
Posted at 4:57AM on Dec 19th 2005 by Fraser Dickson