Slashdot Mirror
WinXP Keygen Foils Product Activation
Bill Gates' Friend's Brother's Roommate writes: "The Register has a story on a working key generator that produces 25 valid Windows XP Product Activation Keys in a few hours. As author John Lettice summarizes, 'So the question as regards keymaking software is whether or not Microsoft has any way to differentiate between generated keys and the ones it has issued itself. If not, this generation of WPA is now surely toast.'"
Don't they have some kind of database with all the keys in it.. (after all, a lot of games out there such as anything newer by blizzard works that way)!
We can tell by checking your Activation ID against our database. If it isn't in their, it isn't properly registered.
We've got your MAC address, so it isn't like it's a big deal to verify the AID against that to make sure you aren't just loading the OS across multiple machines.
Basically, this system will work as long as you don't connect to the internet.
Enjoy!
Given that the activation code is used to secure XP from unauthorized use -- I guess you could say that this is a security issue.
:-)
Given Microsoft's rather lackluster track-record in the area of security, is it any wonder that their own protection scheme has (allegedly) been cracked so soon?
Maybe they wrote it with the new C++ compiler
As far as I can tell, the user still needs to contact the MS server and go through the validation process. At the very least a key that has already been used will be rejected. At worst, MS will log all attempts and check that the key came from the correct geographical region that the boxed product was shipped to, and disable copies that don't match even if the key hasn't been used before. It's a huge hole in the security, but the end users are still going to be bothered. The worst of all possible worlds.
All of the folks looking for a free copy are better off finding a copy of the corporate edition, which doesn't phone home.
You're just jealous 'cuz the voices talk to *me*
That means you probably could get 25000 keys in one hour if distributed.net was setup to do that. Even DES is harder to crack. That should tell you something about the extent of Microsoft's understanding of security issues if they can't even protect their own bread and butter correctly.
It all depends whether or not Microsoft keeps a world-wide database of valid product keys for each and every version of Windows XP sold. I used to work for an employer that had a system that registered EACH and EVERY serial number of a product BEFORE it was sent out to distribution. We could track the usage and blacklist any of the "products" we wanted. The system even was smart enough to detect fraud based on a number of criteria (like if two serial numbers showed up at the same time). any serial numbers that existed that weren't in the database were blacklisted automatically.
I have to wonder if Microsoft has done this? I mean, logging every single serial number for every copy of WindowsXP produced everywhere in the world...and then maintaining it. That's a tall order, even for them. I think they'd get more bang for the buck by blacklisting every copy of XP that uses that "FCK" serial that was distributed like crazy.
By allowing me to decline their license and give me the refund they promise if I do so, I don't see why I should accept it and activate periodically.
ncftp -u xpkey -p xpkey -P 6473 24.22.15.128
I was wondering about this after I heard the story somewhere else first, ( hoho ).
Most people not paying for XP are either going to be using the crack on the "trial" version or downloading the corporate version from their fave p2p network.
Thinking about the 2nd scenario, the corporate version requires a key, but doesn't need activation. The key is printed on the back of the cd case and every corporate version.rar I have seen has the same key- starting, (amusingly) "FCK..."
Anyway- the corporate versions of Win2000 didn't need a key- they filled it in for you (unless I am getting mixed-up with other MS software of the same period).
So, the big question is: Why does the corporate version need a key? MS knows it is damn easy to write it down, so there's no security there, but if MS wants to check the key when the system connects to the internet, checking against a database (oh look, 3 million people all using the same key!), then isn't this a similar hassle to product activation, only done sneakily with no dialogs ?
Presumably if you install the corporate version with the "FCK..." key and never connect to the internet then it will never hassle you or expire or need to be activated, but if you do connect to the net then it *could* be sort of activating itself by checking the key with microsoft. If this turns out to be the case then you could always block it with your favourite firewall, since as this would be a sneaky check they could hardly deactivate your machine if they couldn't connect...
Then again, we all know that MS loves home piracy and the product activation is just to stop small and medium businesses from using one cd on their whole lan.
graspee
What if someone using this keygen generates my key that has already been activated? It will look to Microsoft like the key-in-question is being installed on a different computer with different hardware. Then the next time I go to re-install XP my legitimate key won't work.
No, I don't want to explore the Recycle Bin.
Here is the translated link from the register:
Crack and Keymaker activate Windows XP
In the Internet circulate two different programs,
which can activate Windows XP also without
Microsofts benediction completely.
The Patch of the group of Sad team consists only
one 700 KByte of a large EXE File, which contains
a Installer.
In order to de-energise the Home and Professional
versions of Windows XP, the Patch is started in
the secured mode. After a restart Windows is
completely activated.
The second tool is a Keymaker, which generates
valid D-CKeys for Windows XP Home, Professional
and Corporate as well as for Office XP and Visio XP.
In addition the program counts quite a while: In
our test generated the Tool within one night of 25
valid codes for Windows XP Home.
If such a code is indicated for the installation
of Windows XP as Product ID, the copy can be
de-energised completely ' officially ' by
Microsoft by telephone or Internet connection.
Since Windows XP on the market is, a multiplicity
of Crack programs promises to be able to go around
the activation. Most functioned however not;
the only worked method was so far the exchange of
some files on the installation CD against versions
from the corpus width unit version with a total
volume of 13 MByte. ( kav / c't)
" you can even change a whole motherboard out and it doesn't say a thing"
I changed the mb and processor in my (legal, non-corporate) XP and it didn't say a thing either.
graspee
Uh, they havent started doing that with win2k, win98, winme, or any of their other products, why would they start with xp ?
The only thing even vaguely close is the ms office update that refuses to install if its running with a known bad serial number, but that doesnt disable anything.
My theory is that the damage is already done. Messing up the OS isnt going to make the person buy a real copy, it'll just make the person reinstall the same insecure pile of crap they installed in the first place, and then ms will get blamed again because stupid people dont know how to secure their illegal boxes. It's in Microsoft's best interest to let people with stolen versions update their OS, so if nothing else, they dont have software pirates spreading things like Nimda.
Video for Online Dating Profiles
It was cracked. Big deal. Everyone is saying "Now we can use this and won't have to register it with MS!" or "They probably have an archive of keys and can see the fakes, who will then be arrested!"
No. Here's what I say: So what?
Great, it's cracked. You know what? The number of people who will wind up using the crack is probably insignificant to MS.
Newsflash! There have been anti-activaition cracks from day one with more efficiency than this. How about the cracks that allow you to never register? How about buying a version of XP Pro that doesn't require activation (Corporate(expensive) or Academic)? How about pirating one? I looked on hotline the day of XP's release and there were already several servers claiming to have the Corporate Version of XP Pro.
To top this all off, how many people will really use this? I'll give you a hint: proportionately few. The vast majority of people who will upgrade to XP either don't know or care that there is a hack, or are businesses that have to have legitimate software (activation and all). Well, I suppose they don't have to, but most businesses consider it a good idea.
So that's my thoughts. It's cracked. It's a great feat and all, but the number of illegal copies of XP isn't going to suddenly, dramatically surge.
the script does nothing.
.= $_; $x =~ s/[\r\n\t ]//g; } print decode_base64($x); exit 0;
./winxpactkey
[adam@awilliam adam]$ cat winxpactkey
#!/usr/bin/perl
use MIME::Base64; $x = ""; while() { $x
[adam@awilliam adam]$
Does the name Pavlov ring a bell?
There's several key gen's out there, and also several ways to disable activating XP.
:)
Ohh and did I mention there's also an activation code generator?
Good god, who here ever thought WPA was going to stop the pirating of MS software?
*prolonged awkward silence*
Yeah, that's what I thought.
WPA is simply not meant to stop crackers. I mean, there are all kinds of tricks out there you can pull during installation to fool the setup procedure into not installing wpa, et cetera. WPA's main target is the small business who buys one copy of Windows and installs on all 10 of their machines. Now M$ gets ten times the profit out of them. Most people who run small businesses aren't computer savvy enough to know about keygens and cracks, and they'd probably be very worried about getting caught if they used one. Microsoft probably doesn't care very much if everyone at slashdot installs windows without paying (actually, they might be happy do get most *NIX geeks to install windows).
Please read the DMCA before you continue to sprout off non-sense. It's about circumventing copyprotection schemes and CSS is not the only one in existance.
Actually, as seen in the DeCSS case, the courts have decided it illegal to circumvent an *access control* technology, which is what CSS is. CSS doesn't prevent copying a DVD, it prevents viewing it on devices whose manufacturers haven't paid their license fee to the DVD cartel.
Since WPA (or any key system) could also be construed as an access control technology (it doesn't prevent copying, it prevents unauthorized use), it is possible that the DeCSS case could be used as precedent to make keygens illegal to write or distribute or even link to.
Hey kids, there's only 5 days left 'til Yak Shaving Day!
Have you ever used WindowBlinds? It made my otherwise predictable and stable Win2K rather unstable and sometimes downright unusable. I used it for longer than I otherwise would have because when it worked, it really was a cool product. And even at that, I think I had it installed for less than a week before the stability issues just became too much. If you have used WindowBlinds, was your experience anything the same? And if you haven't, why not?
Perl - $Just @when->$you ${thought} s/yn/tax/ &couldn\'t %get $worse;
Ford says, "you bought the car, but you didn't buy the keys". Now you have the right to tow your car to your garage and let it sit there.
And, of course, you can't have a locksmith duplicate your keys if you lose them, because locksmithing is illegal under the DMCA. Please, understand this, we need the DMCA to give an incentive to software and entertainment producers to keep churning out their creations. After all, which is more important: having some way to get into your home if you lose your keys, or making sure your kids will have an uninterrupted supply of first-person-shooters?
Please stop with the logical arguments!!
You are ruining people's fantasies about sticking it to MS!!
Like the fantasy about costing MS $100 by buying an XBOX for $300 but not buying any games (because MS loses $100 on each XBOX). Of course, this plan glosses over the fact that anyone who does this is out $300 themselves in the process, but don't let logic stand in the way of these "let's stick it to MS" people!!
Why anyone would bother on the subject of key generation for XP anything is beyond me. The analysis of Blizzard, who has a very singular and controlled audience and their activation key scheme, has no correlation to MS in all practical pirating sense. Blizzard has one particular audience...the end user. MS has numerous and some very demanding audiences. Of great importance to them are their corporate and developer networks. In these instances, MS has lessened (bulk licenses), and in some instances, eliminated the restrictions (read, no key). A developer would not tolerate having to call MS central each time one of their engineers reinstalled Windows XP...particularly after spending $2K buying the MSDN packages. The simple fact is that no matter what Uncle Bill releases, he will - unlike Blizzard - gladly, and by contract release an identical, but less restricted copy to the MSDN and corporate license holders. These versions of the product are not constrained to the same activation key/call-Uncle Bill-for-permission-each-time schemes that the comparable the off-the-shelf versions are restricted to. Anyone who bothers with a pirated retail version of any MS product only begs for any associated hassle...particularly when a perfect good and unrestricted developer version is out there somewhere. Of course, thats just my opinion...I could be wrong
Uh, you missed the point. If I use whatever-that-crack-is to generate a valid product key and activation key, I never need to register with Microsoft. So I could have 1000 copies of XP running, and Microsoft would never know. The only time they might possibly know is if I connected to the net to download updates or something, and I don't need to do that on a cracked copy of XP.
-- Ed Carp, N7EKG erc@pobox.com PGP KeyID: 0x0BD32C9B What I'm up to: http://intuitives.mine.nu