Slashdot Mirror


TurboTax DRM Writes to Your Boot Sector?!

ltwally writes "As reported on Slashdot (amongst other sites) recently, the latest version of TurboTax is laden with DRM software. Even worse, however, is that it apparently writes to your hard drive's boot-sector , as reported at Extreme Tech here. As I'm sure most Slashdotters already know, the boot-sector is often times used for silly things like boot-loaders and such. "

135 of 733 comments (clear)

  1. Well, if they're writing... by spazoid12 · · Score: 5, Funny

    to my boot sector...I hope it's a really lovely story. Maybe a romance novel would be nice.

  2. Heh, silly me. by numbski · · Score: 5, Insightful

    I came *this* close to installing TurboTax on my Mac via VirtualPC or Bochs (cheaper) and then I read the box closely.

    "Will not work on the Macintosh Platform using Windows emulation software."

    I took it back and used TaxAct instead. I nearly installed it on my fiancee's PC instead. Ick.

    You have to be on some sort of crack to write to a person's boot sector. Period. That's just off limits.

    --

    Karma: Chameleon (mostly due to the fact that you come and go).

    1. Re:Heh, silly me. by 0xdeadbeef · · Score: 3, Funny

      You have to be on some sort of crack to write to a person's boot sector. Period. That's just off limits.

      I write to your fiancee's boot sector. Zing!

    2. Re:Heh, silly me. by The+Tyro · · Score: 2, Interesting

      I didn't like TurboTax anyway... this just gives me another good reason not to use it. Writing to the HD boot sector? What the hell?

      Personally, I have my taxes done by a very good tax attorney, and the guy is an absolute wizard. For my money, there is no substitute for that level of expertise, particularly if you have a very complicated return. Tax software is great and all, but if that audit notice ever comes, I'd much rather have my personal tax attorney sitting next to me when I'm facing the IRS guy across the table.

      Yes, he's expensive, but serious expertise costs money, and it's something where I'd be leery about going cheap. It's like buying the bargain-basement parachute, or the bulletproof vest that's 70% off...

      I'm sure TurboTax is fine software, but it's not for me, particularly with this DRM stuff. I'm a thief until proven otherwise, but I'm supposed to trust them will all my financial info?

      Bah.

      --
      Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.
    3. Re:Heh, silly me. by Bert64 · · Score: 4, Informative

      Infact, only an os installer should write to the boot sector, anything else should be considered a virus. Infact many bioses have the option to detect and block attempts to write to the bootsector under the name of bootsector virus protection.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    4. Re:Heh, silly me. by Anonymous Coward · · Score: 3, Insightful

      Just stay broke and without assets.

      It took me 45 whole minutes to complete and
      check my taxes.

      Last year(the first year I had to file) it took 1h 30m.

      Being a college student roxxors.

    5. Re:Heh, silly me. by numbski · · Score: 3, Informative

      Because the mac version was $10 more AND none of the rebates in store would apply.

      --

      Karma: Chameleon (mostly due to the fact that you come and go).

    6. Re:Heh, silly me. by mosch · · Score: 2, Interesting

      That's odd. I bought the mac version for the exact same price as the comparable PC version, and I got a rebate for one state product, for electronic federal filing with my mac version.

    7. Re:Heh, silly me. by Junior+J.+Junior+III · · Score: 4, Insightful

      And, most virus protection programs condition users to disable them before attempting to install software. So probably most people will allow TurboTax to do whatever it wants, because they think it's trustworthy.

      --
      You see? You see? Your stupid minds! Stupid! Stupid!
    8. Re:Heh, silly me. by King_TJ · · Score: 3, Interesting

      Sure, if your return is complex enough - you really have no business trying to use tax software for "beginners" to get it done.

      In my experience, as your tax situation gets more complex, TurboTax starts asking questions and prompting for information that you don't really know the correct answers to. (Perhaps they need figures from a particular statement or form you're not even aware you have, for example?)

      On the other hand, I still think these packages are great for the average person. Quite a few friends of mine pay someone to do their taxes each year, and it's primarily out of irrational fear of taxes. Basically, they're afraid they'll make a mistake and it will cost them dearly later on. That, or they're convinced the
      H & R Block guy" will really get them more money back than TurboTax or Tax Edge.

      Since my own return is usually pretty straightforward, I always use tax software to file. It's cheaper than paying an accountant, and I'm pretty confident the computer will do the math correctly. Not to mention, I *know* how it ended up with the results it got. I feel a little more informed about the whole process if I can see my refund or amount owed changing as I enter my figures.

  3. How Appropriate by yukster · · Score: 5, Funny

    Virii write to boot sector

    DRM writes to boot sector

    hmmmm...

    1. Re:How Appropriate by Pike65 · · Score: 2, Insightful

      Yeah. Isn't this going to cause my virus checker to go apeshit?

      I would rather hope that Norton would spot something writing to my boot sector . . .

      --
      "If being a geek means being passionate about something, then I pity those who aren't geeks." - Pike65
    2. Re:How Appropriate by crawling_chaos · · Score: 5, Interesting

      The install instructions for TurboTax state that it will not install correctly with a virus checker enabled. Now we know why.

      --
      You can only drink 30 or 40 glasses of beer a day, no matter how rich you are.
      -- Colonel Adolphus Busch
    3. Re:How Appropriate by Anonvmous+Coward · · Score: 5, Funny

      "The OED disagrees with you. Viruses is the plural. "

      SHUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUT UUUUUUUUUUUUUUUUUUUUUUUUUUP!

      Wow. I've been building that one up for a while now! Man you guys get into the dorkiest arguments here. No wonder the Valentine's advice didn't go over so well here, heh.

      Seriously, put this argument to bed. It is not +1, Insightful. It is not +1, Interestinging. It is -1, Redundant. Viruses and Virii both are acceptable answers. Why? Not because anybody's declared it, but because we know what you're talking about. Those of us that had to take mandatory latin classes need a place to vent this stuff.

    4. Re:How Appropriate by YU+Nicks+NE+Way · · Score: 2, Interesting

      Actually, the plural of octopus is octopodes because it's Latin. The word literally means "eight-foot", and "foot" is third declension: pes/pedes. Thus, more than one object with eight feet each would be octo-podes, octopodes.

      -- Skoolkid Latin R Us

    5. Re:How Appropriate by dasunt · · Score: 5, Funny

      Anonvmous Coward writes:

      Viruses and Virii both both are acceptable answers. Not because anybody's declared it, but because we know what you're talking about. Those of us that had to take mandatory latin classes need a place to vent this stuff.

      thnx. dat's y i rite like dis. odder peeps complane, but i say dat u can reed it so dont wine. inglish magers complane to much.

      Actually, I'll go with the anal twits here. Virus has no plural in latin, thus you go with the english plural rules which says add an -es. Its a quibble, but if you want to seem educated, then understand what you are talking about, and what terms you are using.

      OTOH, it wouldn't suprise me if the 'virii' term passes into the dictionaries in a dozen or so years. Other false latin plurals, such as octopii, haven't, but virii seems to be in common usage, and dictionaries don't only strive to show correct usage and spelling, but they also incorporate new usages and spellings, however inaccurate, if the usage or spelling is accepted as being correct.

  4. Turbotax naughtiness by Neophytus · · Score: 4, Interesting

    What smartarse decided to put registration data in such a volatile place such as the MBR. Heck, any program that performs low-level operations on your hard disk should be banned, because of the risks involved with writing blindly onto one area. Turbotax are treading shallow water, especially after their licencing 'policy'

  5. that settles it by dubiousmike · · Score: 5, Funny

    Now I am defintely NOT doing my taxes...again.

    1. Re:that settles it by dubiousmike · · Score: 2, Insightful

      Actually, it is fairly easy to do one's own taxes. But generally, taxes in the US is about "over tax you" and let you try to pay less. There are many things that you can deduct from your gross income to give the appearance of an overall lower income so that you pay less taxes. Retirement funds (especially one out side of your workplace - they take it out of your pay pretax), certain medical expenses, ect. all need to have special attention payed to them at tax time. If you are self employed, doing your taxes is VERY involved, but of course, some folks can then fudge many personal expenses by attributing them to their business and thus not paying income taxes on money spent on particular expenses.

      when its all said and done, I have a particularly low tax rate from a combination of being the sole income on the family, having a child, being married and being considered "head of household" (contribute more than 50% of household expenses, and part of my income from being self employed. Though its a pain to do taxes, if I keep receipts organized throughout the year, preparing my tax forms is not as painful as it could be.

  6. CDilla by Epsillon · · Score: 3, Informative

    CDilla's LMS does this too, although I'm not completely convinced it's the bootsector. Still, nothing short of a low level format clears it, so it probably is.

    --
    Resistance is futile. Reactance buggers it up.
    1. Re:CDilla by Erik+Hollensbe · · Score: 5, Informative

      If you had read the article, this is C-Dilla's LMS that they're using.

      They also proved using a sector editor that the location is correct.

    2. Re:CDilla by Ldir · · Score: 5, Informative
      They are the same thing. TurboTax uses the Macrovision C-Dilla (Safecast) license manager. It is covertly installed when you install TurboTax. It is not removed when you remove TurboTax, however. Intuit now offers a C-Dilla uninstaller on their web site.

      I'm one of the legions of long-time TurboTax users who switched to TaxCut this year. Glad I did, TaxCut works just as well, costs half as much, and has no DRM or other installation games. As a bonus, it imports TurboTax data flawlessly.

      We went through this before, in the early days of the PC (early 80's). Companies kept using more and more obnoxious forms of copy protection, making software more brittle, and more and more difficult to install and use. Finally enough consumers revolted and the software companies wised up. Looks like Intuit needs a history lesson.

    3. Re:CDilla by Nogami_Saeko · · Score: 4, Interesting

      Erm, ya.

      It's farking TAX software, it's not CAD, it's not 3D animation or video editing. It's for doing TAXES.

      It's like installing a sophisticated electronic ignition interlock system in a Yugo or something. Why bother?

      It's this sort of thing that permanently alienates me on a product. I will NEVER buy a product that uses low-level writes on my system for copy protection purposes, especially if they try and keep it secret.

      N.

      --
      "Nothing strengthens authority so much as silence." - Charles de Gaulle
    4. Re:CDilla by EvlG · · Score: 4, Insightful

      I also switched this year, and in the registration comments for TaxCut, I wrote something to the effect of:

      I switched from TurboTax because of their lame DRM schemes. As long as you don't do this, I'll keep buying your software.

      Here's hoping they listen.

    5. Re:CDilla by innocent_white_lamb · · Score: 2, Informative

      Perhaps, but neither of those will work. MBR is the Master Boot Record, which occupies the first sector on the boot track, only. The boot track has 64 sectors in total, 63 of them are generally "ignored" by the os ad everything else. This turbotax thing writes to sector 33 on the boot track, not to the MBR which is also on the boot track but not right there.

      --
      If you're a zombie and you know it, bite your friend!
    6. Re:CDilla by Epsillon · · Score: 2
      It's not the boot sector that it writes to

      Correct and verified. Replacing any data with 6cH all the way through that sector with a low level editor restores the disk to a pre-cdilla installation state in theory

      Needless to say I "theorised" this on a "disposable" machine first ;o)

      --
      Resistance is futile. Reactance buggers it up.
  7. TurboTax XP by Openadvocate · · Score: 4, Funny

    Hmm seems to me like this product rather should be called Turbotax XP.

    --
    my sig
  8. only in danger if you dual-boot by ltwally · · Score: 5, Interesting

    TurboTax's DRM software only modifies sector 33 of your boot-sector. Basically what this means is that for Windows only users, you're safe.

    If, however, you use other boot-loaders or "alternative" OS's, you might be in for an unpleasant surprise as things suddenly stop booting. YIKES!.

    Anyhoo.. just thought that I'd point out that any of you that just have to run TurboTax should be "safe" unless you run something non-M$.

    --



    /dev/random
    1. Re:only in danger if you dual-boot by Pius+II. · · Score: 5, Interesting

      This is software targeted at average users, meaning that it is easily possible that some of them still use hard drives which store additional enablers in the MBR to overcome all those silly BIOS limits (512 mb ought to be enough for everyone. No wait. Shit. Well, then let's extend this to 2 GB. Oh, damn. 8 GB. Oh, there goes another. 32 GB. Oh no, wrong again. 128 GB. To be continued...).
      I don't think I have to mention what overwriting those drivers means to the users data; plus, you aren't even likely to be able to restore those drivers.

    2. Re:only in danger if you dual-boot by jdkincad · · Score: 4, Insightful

      Not true. My parent's machine got fscked up after installation of TurboTax, they had a system restore utility that refused to work aand let the computer boot afterwards. At least this would go a long way to explain the problem.

      --
      The great advantage of having a reputation for being stupid: People are less suspicious of you.
    3. Re:only in danger if you dual-boot by ejdmoo · · Score: 2, Informative

      Check out this on the turbo tax support site.

    4. Re:only in danger if you dual-boot by SecretAsianMan · · Score: 2, Informative
      only modifies sector 33 of your boot-sector

      Huh? A sector on a disk does not contain other sectors. Therefore, there cannot be a sector 33 of the boot sector.

      Perhaps you mean that that sector 33 in the boot-information track or cylinder is overwritten. That would seem to make more sense.

      --

      Washington, DC: It's like Hollywood for ugly people.

  9. Ah, the power of friends by tuba_dude · · Score: 3, Funny

    It's times like these when I feel lucky that I've got a good buddy that's a tax guy...and I've got dirt on him.

    --
    "The government of the United States is not, in any sense, founded on the Christian religion."
  10. VMWare? by Malc · · Score: 3, Interesting

    Anybody know if this can be used with VMWare? DO virutalised IDE disks conform all the way down to these unused sectors?

    1. Re:VMWare? by phillymjs · · Score: 3, Informative

      I vaguely remember reading on a Mac site that the TurboTax packaging rather explicitly states that the product will not run in any kind of Windows emulator (the article of course was talking about Connectix Virtual PC).

      If that's the case, this boot-sector thing might be a major part of the reason why.

      ~Philly

    2. Re:VMWare? by reynolds_john · · Score: 3, Informative

      I would bet the farm on the fact you could do it with VMWare. I have found that OSes installed on VMware have no knowledge of their host operating systems, nor does any disk activity from the VMware OS have any affect on the host's partitions/drives, because the 'disk' is actually just a file.

    3. Re:VMWare? by unix_hacker · · Score: 2, Informative

      Win4Lin recently added support for TurboTax. It virtualizes writes to cylinder 0 into a special file in your home directory. So you can safely run TurboTax without it actually doing anything dangerous to your hard drive.

    4. Re:VMWare? by youngsd · · Score: 4, Informative

      Yep, it works with VMware. That's how I installed it, after reading the earlier /. story. One thing, though, you need to turn off the "hardware acceleration" in the VM configuration while starting the program (after that, you can turn acceleration back on).

      After reading the earlier stories about locking to a particular machine, and possibly installing spyware, I figured I'd either return the thing or install it under VMware. The geek in me won out, so I decided to see how it'd work under VMware. I'm sure glad I didn't install it on a PC directly.

      -Steve

      --
      Democracy is a poor substitute for liberty.
    5. Re:VMWare? by athakur999 · · Score: 2, Interesting

      It is possible for an OS to know it's on VMWare. For example, the Linux guest OS toolkit includes a program for use when you use the same Linux installation as both a real OS and a guest OS. The program detected whether you were running as a real OS or a guest OS and used different config files as appropriate for networking, X, etc.

      Not to mention that VMWare disks are given drive ID strings like "VMWare Virtual Disk" (or something like that). A program could just look for that string in the drive ID.

      That being said, from other posts it doesn't look like the DRM software checks.

      --
      "People that quote themselves in their signatures bother me" - athakur999
  11. umm... by ArchieBunker · · Score: 3, Interesting

    Correct me if I'm wrong but most apps in NT4/2k/XP aren't allowed direct write access to disks or even hardware. Does this only affect win98 boxes?

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  12. Analog tax returns by PizzaFace · · Score: 4, Insightful

    Folks, the forms are no more complicated than the software. To the extent the forms are more complicated, the software is oversimplifying the law. Save yourself a few bucks and just fill in the forms by hand.

    1. Re:Analog tax returns by koreth · · Score: 4, Insightful
      Translation: Folks, your time is less valuable than the cost of tax preparation software. Spend a few hours to save yourself a couple bucks.

      Err, no thanks. It's worth $30 to me to save several hours of sifting through stacks of paper, re-checking my calculations and making sure I've copied the correct numbers from form A to form B.

    2. Re:Analog tax returns by swb · · Score: 4, Insightful

      The forms themselves aren't hard, but the rules governing stuff certainly can be, and the IRS docs aren't always helpful. On more than one occasion I've found myself tossing a coin over something, since the IRS documentation isn't always clear.

      Presumably the electronic forms and the "choices" they make have been analyzed by someone who really understands the tax code, but for all we know the coin tossed was a Rupee in India by someone who has never filled out American tax forms! No offense to Indian programmers, but I'm sure my guesses of Indian tax law would be just as bad.

      I also kind of like the neo-luddite feel of mailing in my taxes on paper. It feels subversive for some odd reason.

    3. Re:Analog tax returns by Blackhalo · · Score: 3, Insightful

      I'm sure that if all that you are filling out is a 1040EZ, then yes it is eaiser to fill out by hand. But those of us with "real" jobs, 401k's, employee stock purchace plans, online brokereages, IRA's and other finantial complexites, this software makes tax time much less painful. I disturbs me that a company that had such a good brand recognition with me, i.e. it's not microsoft, would stoop to such a draconian DRM strategy. I wonder how they are going to handle all the support calls generated by the anti-virus software flagging this as a virus?

      --
      "There is nothing to do it. But to do it." -Floyd Pepper
    4. Re:Analog tax returns by Anonymous Coward · · Score: 5, Funny

      Let me clarify: if you're on slashdot, your time means nothing to you.

    5. Re:Analog tax returns by khuber · · Score: 4, Funny
      I'm so sick of this "it's only less if your time is worth nothing" garbage. For some, it might work, but when you spend hours on slashdot, I can't give you any credit to that statement.

      I imagine you'll be doing your taxes by hand then. I suppose you beat your clothing against rocks in the river and hand knit your clothing using wool sheared from sheep you raise in your backyard.

      -Kevin

  13. Linux interop? by robbo · · Score: 4, Insightful

    The comments so far are pretty inane and clearly come from windows users.. any word on how it impacts a dual-boot box? does it render your lilo or grub setup useless? I would personally be very upset if it screwed up my boot setup, and reasonably so, I think. imho, hese kinds of things should raise the hackles of the tech community, and linux users in general enough to give the vendor some serious shit.

    what does it do to wine?

    --
    So long, and thanks for all the Phish
    1. Re:Linux interop? by Red+Warrior · · Score: 3, Informative

      .. any word on how it impacts a dual-boot box? So far, so good. I've got TT installed in WIN98. I run a triple-boot WIN98/RH8.0/Mandrake9.0, using RedHat's Grub. Works fine, boots fine.
      Intuit's still a bunch of SOBs for doing such a dangerous thing, though.

      --
      "If, therefore, any be unhappy, let him remember that he is unhappy by reason of himself alone."
      ~Epictetus
    2. Re:Linux interop? by cookiepus · · Score: 3, Funny

      LILO and GRUB shouldn't have the monopoly on fucking up my boot sector, damnit!

  14. No. by cperciva · · Score: 3, Informative

    This software does NOT write to your boot sector. It writes to sector 33 on the track which contiains the boot sector.

    This is certainly a Bad Thing, but not nearly as bad as writing to the boot sector would be.

  15. What we need is... by rickthewizkid · · Score: 2, Interesting

    a piece of software to remove the DRM in TurboTax - kinda like "insert your CD, run this program, turbotax is up and running"

    The only thing is that someone would have to do it anonymously - or from outside the US to avoid violating the DMCA

    (Actually, this sounds like a good ad for H&R Block...)

    Just my 1040EZ's worth
    RickTheWizKid

  16. Nothing to be afraid of by xFallenAngel · · Score: 4, Insightful

    It looks like Turbotax programmers just had a sneaky idea on how to make it hard to crack their program. They just thought it was a cool idea, not thinking about the consequences.

    Sure its not really a good idea and if lots of companies do that, it would lead to conflicts. Especially since 33 is a nice number, being in the middle. But is it really something we should be "afraid of" ?

    The article had its worries about Tax software forgetting its licence just before you are done and have to send them off to the gov't. But that isn't too new with computers. Murphy's Law would apply regardless of what kind of copy protection that software has.

  17. 3D Studio Max does a similar thing. by dnaumov · · Score: 5, Interesting

    3DS Max like to keep it's registration information in the boot-sector and of course it's ONLY compatible with the Windows bootloaders.. This means that if you have a dual-boot system with Linux using GRUB to boot Windows, the moment you register 3DS Max from within your Windows install, your bootloader will be practically wiped out. If you reinstall the bootloader again, 3DS MAX will complain that you have to re-register and obviously, if you do so, your bootloader will be wiped yet again.

    1. Re:3D Studio Max does a similar thing. by Inda · · Score: 4, Insightful

      Makes me wonder why people copy then crack and patch software.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    2. Re:3D Studio Max does a similar thing. by Bert64 · · Score: 2, Interesting

      And what if you wish to have 3ds max AND turbotax on the same machine?

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    3. Re:3D Studio Max does a similar thing. by Semi-Psychic+Nathan · · Score: 5, Funny

      No problem, as long as you don't need to boot your computer.

      --
      I have nothing to allude to, and I am alluding to it.
  18. This is a wonderful way to do things . . . by D1rtbag · · Score: 5, Funny

    I can just imagine every piece of software writing its particular attempt to defeat piracy in our boot sectors; finally, we'd have a regular mosh-pit of games and apps regularly crashing our systems and giving virus-checkers fits of apoplexy. Bravo to Intuit for being a trendsetter .

  19. win4lin and vmware by hogger · · Score: 2, Interesting

    Any idea whether turbo tax under win4lin or vmware, on a linux-only system, would get to the MBR? Would the bios setting that prevents boot sector access without a warning protect from this?

    1. Re:win4lin and vmware by nsayer · · Score: 2, Insightful

      I have my copy of TurboTax running on a VMware guest system. The only sector 33 it's going to be able to scribble on is the one in the guest. It works just fine, and I am told it also works fine with the very latest version of VirtualPC for the mac (it didn't at first - Connectix actualy had to make changes so it would).

      If Connectix pulls this nonsense next year, I am definately switching. I only bought it this year because I was unaware at the time. This is definately just too much to bear.

    2. Re:win4lin and vmware by nsayer · · Score: 2

      Woah!

      I meant to say if *Intuit* pulls this stuff next year.....

    3. Re:win4lin and vmware by karlm · · Score: 2, Informative

      If you're not running vmware from a privledged account and haven't given an unprivledged account write access to the raw device, vmware will have insufficient permissions to do such a write. This is why you don't run things as root. Maybe someday MS will have the default account not have Admin privledges. Oh well.

      --
      Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
  20. Just file your taxes electronically for free by macemoneta · · Score: 5, Informative
    Here is the intro page at the IRS, where you can select a tax preparer that will let you file and submit electronically for free. Check the criteria for qualification; most people qualify.


    If you insist on using TurboTax, use their web-based vesion; it's alway current and no software gets installed on your PC.


    Personally, even though I've been using TurboTax for over 10 years, I will be using a different tax preparerer this year. I find their association with this kind of DRM crap distastful.

    --

    Can You Say Linux? I Knew That You Could.

  21. UK online returns by larien · · Score: 4, Interesting
    Here in the UK, we're being encouraged to do returns online. As I had to fill one in for 2001/2002 (things like having a private pension etc & being in the higher tax bracket meant I was due a refund), I figured I might as well. From the web site, I was able to enter details for all my incomings & outgoings in forms. At the end of it all, it calculated my tax due & tax paid (via PAYE and tax deducted at source) and offered to give me a refund either by cheque in the mail, a higher tax code for next year (to recover it) or even by direct bank transfer (which I chose).

    All in all, pretty painless as well as free...:)

  22. Re:Um... by Anonymous Coward · · Score: 5, Informative

    ...and the Mac version has no "DRM" at all.

    ~jeff

  23. Administrator by yerricde · · Score: 5, Informative

    As I understand it, a program running as Administrator on NT can elevate its privileges to LocalSystem and do just about anything, such as write sectors to physical drives.

    --
    Will I retire or break 10K?
    1. Re:Administrator by TheRaven64 · · Score: 2, Interesting

      I'm not sure about this. NT uses a Hardware Abstraction Layer which should prevent any direct access to any hardware. In order to write a defragmenter for NT, Diskeeper had to write a kernel extension which would give them low level access to the disk.

      --
      I am TheRaven on Soylent News
    2. Re:Administrator by quantum+bit · · Score: 4, Informative

      I'm not sure about this. NT uses a Hardware Abstraction Layer which should prevent any direct access to any hardware. In order to write a defragmenter for NT, Diskeeper had to write a kernel extension which would give them low level access to the disk.

      No, the HAL does not prevent direct writes to the disk. An administrator can open the raw disk device ("\\.\PhysicalDrive0" -- the NT equivalent of BSD's /dev/ad0c or Linux's /dev/hda0) and read / write anything.

      I suspect the reason that a defragmenter would need special kernel support is that the file system driver keeps internal state data and would react, um, badly to the data on the disk changing out from under it. Think blue screen and possibly corrupt filesystem.

      However, for areas that aren't directly touched by the FS driver, such as the MBR, unallocated partitions, or partitions for which there is no filesystem driver loaded, like UFS or ext2, this method of access works just fine. A while back I wrote a quick utility to let me tell the FreeBSD bootloader (which lives in the MBR) which partition I want it to default to loading on the next boot. Real handy for accessing dual-boot systems remotely.

  24. How many other programs do this? by wiggys · · Score: 4, Interesting
    I installed Autocad 2000i on a computer a couple of years ago. Anyway, the user managed to completely screw up his computer in such a way that we had to reformat and reinstall Windows 2000 (even FDISK was used). When the OS was reinstalled we tried installing Autocad but the software informed us that our 30-day trial period had ended and we must contact Autodesk to register. So... where was the info written to?

    But that's not all. Recently The Register ran a story which talked about how a stolen tablet PC had been traced over the net. The security software installed on this notebook (Computrace) supposedly "involves a tamper resistant agent that resides on the hard disk of PCs. Even formatting a drive will not erase this agent."

    Now, I for one doubt those claims (Partition Magic would surely be able to zap the software, and the software wouldn't run if Linux was installed etc) but if it is true then who knows what else could be written to inaccessible (by the user at least) parts of the hard-disk?

    It gets worse. The Computrace software creates a backdoor in your system which allows Computrace (and anyone else who figures out how to use it) to silently delete files from your drive). It also uses cloaking software which "is silent and invisible and will not be detected by looking at the disk directory or running a utility that examines RAM."

    Claims are also made that it can worm its way through firewalls. Big claims indeed (perhaps too big without some clarification... the devil's in the details) but if this software is sold to the public by a private firm, what the heck could Government departments install on our computers to track what we do?

    --

    Sorry, but my karma just ran over your dogma.

  25. If you have to use Turbo Tax.... by sven7 · · Score: 2, Informative

    Use their Web service instead of installing their software...

  26. I wonder... by seldolivaw · · Score: 2, Funny

    If you use a pirated copy of tax submission software, can you still declare it as an expense?

  27. The ultimate tax software! by InfinityWpi · · Score: 5, Funny

    Yes, our new tax software does to your hard drive what the IRS is going to do to you!

  28. Evil by sepluv · · Score: 2, Insightful

    This is just crazy...it will just piss off their customers and is not even effective (in fact it is extremely easy to circumvent). If they do not prominently warn about this then it is criminal. People who have programs (e.g.: AV software) to stop this or replace their boot sector after TurboTax FUBAR it will not be able to use the software and othe people will have their machines ruined by it. Many mundane M$ W*nd*ze users have dual-boot or utilities in the boot sector. Basically it looks like a virus and quacks like a virus. We should treat it as such.

    --
    Joe Llywelyn Griffith Blakesley
    [This post is in the public domain (copyright-free) unless otherwise stated]
  29. Tax preparation for Macintosh by Rick+Genter · · Score: 2, Interesting

    Three questions:

    1) Does TurboTax for the Mac include any of this DRM nonsense?
    2) What other tax preparation software is available for the Mac (OS X, please)?
    3) Doesn't anyone else feel that "just use the web version" is NOT an option due to privacy concerns? (I don't know about you, but I sure don't want my private financial information stored on someone else's web server...)

    --
    Don't underestimate the power of The Source
    1. Re:Tax preparation for Macintosh by titzandkunt · · Score: 5, Funny


      How, in the name of God, does a post which consists of three questions get modded "5 Informative"?

      "5 Interrogative", would be more appropriate, no?

      T&K.

      --
      Political language ... is designed to make lies sound truthful and murder respectable...
  30. Hey, watch it buddy. by kfg · · Score: 2, Funny

    That's revisionism you're talking there, and the guy who once modded me down as Flamebait for saying a pocket sized spiral bound notebook was the best "PDA" I've ever had is going to be gunning for your ass.

    When we play Solitare around here we use a $3000 machine, and don't you forget it.

    KFG

  31. Don't know about you, but it's TOO complicated by MickLinux · · Score: 2, Informative

    My wife does our taxes. We have an LLC, really a microbusiness that does less than $30k/yr [this year it'll be $25k]. From that you knock off expenses, ebay fraud [paypal, please take a bow], and the like.

    Anyhow, just doing minimum compliance with the law, no massively complicated deductions, you have to do things like calculate "minimum alternative taxes", and such... it's taken my wife since December, 2 hours or so each day, about 3 days a week... so I guess that would be 36 hours so far. She's still not done.

    Yeah, she's doing it analog. I don't think turbo tax *would* help a whole lot, especially since a major part of her job is reading and rereading all the IRS documents to find out their new rules this year, and how she has to expense this, deduct that, cannot expense and *must* deduct t'other, *must* expense the third, or fill in a form explaining why she isn't expensing it, and so on and so forth.

    I dunno. If you count the cost of her time as $20/hour, then without us owing anything, the cost of taxes would be $720 and counting.

    Anyhow, lemme finish up with a link and a comment:

    http://www.givemeliberty.org : absolutely right, legally correct based on written law, but it'd be incredibly stupid to join. Lots of our rules have nothing to do with law, if you get my drift. Better just to leave.

    --
    Correct Horse Battery Staple: 72 bits of entropy. Enter "Correct H" into google. When it generates the phrase, that's
  32. Turbo-fuxxored by curtisk · · Score: 2, Interesting
    Wow, these guys just keep getting better and better press, talk about running a sucessful software franchise down! From their new licensing schemes which now link with their use of the boot sector of your HD...what the hell are they thinking?

    So to use your software, I need to disable any virus scanners? That right there is a red flag if I ever saw one. Holy hell!

    I'm all for , and understand, the need for them to try to protect themselves against piracy, but they are treading on dangerous ground with this.

    Someone read the EULA, does it cover them if your bootloader dies?

    --

    Sehr geehrter Toilettenbenutzer!

  33. I filed a bug report :-) by dbc · · Score: 4, Insightful
    here
    that said something like "TurboTax writes to boot sector"


    In a past life, I managed a software product validation team. Nothing would have shipped past me with this in it. It's a bug. File a report. You do not need to be a registered user to file a bug report, it turns out.

  34. Not the boot sector! by steveha · · Score: 5, Interesting

    This annoying DRM junk does not involve the boot sector. According to the actual article (which I actually read), they found it writing to track 0, sector 33.

    Track 0, sector 0 is the boot sector. The partition table is stored in this sector. The rest of track 0 (sectors 1 through 63) is not officially used, so some DRM systems like to stash data there.

    What makes this annoying is when you try to install another DRM-enabled product that also wants to write in the same place; after you install the second program, the first one will accuse you of being a pirate, and it will refuse to run anymore. Since there is no standard for using this space, its easy for two DRM systems to conflict with each other.

    If there were a standard for using that space, presumably the DRM authors wouldn't want to use it! After all, someone would write a utility that showed you what programs were using that space, and for what... and then it wouldn't be obscure, and so it wouldn't be "secure" anymore. Feh.

    I won't ever buy programs that pull stunts like this.

    steveha

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
  35. Re:I just bought that yesterday! by TheRaven64 · · Score: 4, Funny

    1) Install a bootloader.
    2) Remove floppy drive from computer.
    3) Install TurboTax.
    4) Shut down computer.
    5) Remove CD drive.
    6) Power up.
    7) Ooops. Unable to boot, MBR corrupt.
    8) Return to shop, and demand compensation for 'destruction' of computer.
    9) Be refused compensation.
    10) Hire ludicrously overpriced consultant to fix MBR (say $300).
    11) Send bill to TurboTax.
    12) Have bill returned with letter expaining politely that it's not their problem.
    13) Forward bill and letter to national news services who love to publish this kind of crap.
    14) Watch the bottom drop out of TurboTax's share price, and smile.

    Note: Paying the consultant is optional.

    --
    I am TheRaven on Soylent News
  36. Never disable your anti-virus software... by Kjella · · Score: 4, Insightful

    ...maybe it's just my opinion, but if at anytime I *don't* disable my anti-virus software, it's when a program tells me to. Particularly one that should have no business doing virus-like behavior.

    This goes rigth up there with those trojans that cliam that it won't work "right" with firewalls/anti-virus/whatever active. If it does show up on your anti-virus scanner, take it back to the store and return it as being infected. Remember to note what anti-virus program you're running and version, in case they ask. And don't take "no" as in "no, there's no virus on it, disable your antivirus" or "no, must be your machine that's already infected" for an answer.

    Kjella

    --
    Live today, because you never know what tomorrow brings
  37. Well ok, it doesn't write to the boot sector, but by kfg · · Score: 4, Informative

    it writes to the boot *track,* so it's not going to munge your partition table, but may well munge other important boot records.

    Nothing belongs in that *track* other than boot information. Period.

    KFG

  38. Re:Wincrash by Jugalator · · Score: 2, Insightful

    Hmm... If you replace "Windows" with "Linux", would you still be modded as +1 Interesting?

    --
    Beware: In C++, your friends can see your privates!
  39. As has been pointed out. . . by kfg · · Score: 5, Informative

    like, by the article and stuff, it doesn't write to the MBR. It writes to sector 33 of the boot *track.*

    The problem is that since the entire track is reserved for boot information, not just the sector holding your MBR, things like LILO and GRUB may be residing there as well.

    Boot loaders are legitimate boot records. Software registration codes are not. They don't belong in the boot track, whether they write to the MBR or not.

    KFG

    1. Re:As has been pointed out. . . by Moonshadow · · Score: 4, Interesting

      Well, I know my girlfriend's parents bought TurboTax this year, and definitely used it. They also tend to be pretty concerned about digital privacy and such like this - I'm sure they'd be interested in getting it off their machine For one untrained in the ways of the boot track, how might I go about removing it? I've played with the MBR and such, and even had a virus infect my boot record before, but what's the proper method for removing this thing? Assembly? ;)

      Do the virus scanners catch this? If so, can they restore an untouched copy of the boot track?

    2. Re:As has been pointed out. . . by Flakeloaf · · Score: 4, Informative

      For one untrained in the ways of the boot track, how might I go about removing it? I've played with the MBR and such, and even had a virus infect my boot record before, but what's the proper method for removing this thing? Assembly? ;)

      Sector editor. I prefer BreakPoint's Hex Workshop. Be sure you know exactly wtf you're doing though, or you could be in for a mighty long evening.

      By the same token, anyone with access to a sector editor can mimic TurboTax's copy protection and install it on pretty much any PC at will.

      --

      Am I the only one who heard Roxette to sing "I'm gonna get blitzed for some sex"?

    3. Re:As has been pointed out. . . by Koyaanisqatsi · · Score: 3, Informative

      Back in the day, a "format /mbr" from a DOS disk would restore the MBR (not sure about the rest of the boot track). It doesn't do anything besides this, and it's safe with Win9x and probably Win2000 too.

      However, if you're using lilo, this will wipe it out, so you'll need to boot from floppy and run lilo as root again to re-create the MBR.

    4. Re:As has been pointed out. . . by Sheetrock · · Score: 4, Informative
      I wouldn't touch it. From the article, it sounds like it's dropping a key that is only of importance to Intuit and the TurboTax software. If it's on their system, the damage is already done to whatever previously inhabited sector 33 (probably nothing important). It won't execute by itself, and it's probably data and not executable code anyway -- you've got more to worry about whatever Intuit is dumping into the Windows install.

      At best, you can wipe something that will be indecipherable to anybody but Intuit (and break the TurboTax installation in the process) -- at worst, you could inadvertently clean out your partition table. I'd recommend ignoring it, but if you don't mind flirting with disaster you might be able to use the same Norton tool they mentioned in the article.

      --

      Try not. Do or do not, there is no try.
      -- Dr. Spock, stardate 2822-3.




    5. Re:As has been pointed out. . . by Jardine · · Score: 2, Informative

      Not sure if format /mbr works, but fdisk /mbr definately works.

  40. And just as anything else that won't install. . . by kfg · · Score: 2, Insightful

    with a virus checker enabled, you probably shouldn't install it.

    Preventing this sort of nonsense is what it's *intended* to prevent.

    N'est pas?

    KFG

  41. Is that info even private? by Knos · · Score: 2, Interesting

    I seriously ask the question, in the us, is your tax declaration private? (at least here, anyone can go to the tax office and check one another's declaration... seems rather sound in the case of a democracy..)

    --
    . . . . . . . .. . . . . . . .
    may u!sh 2 sm!le at dz!z bad nn.!m!tat!ion
  42. Here's the response I received from them by Safety+Cap · · Score: 2, Informative
    Thank you for sharing your concerns about TurboTax. Feedback from customers like you is the best way for us to know exactly what you're experiencing so we can work together to get you correct information and the best solution.

    I am sorry that it took us so long to respond to your e-mail. You expressed concern about how product activation will impede your ability to access your tax files in future years.

    • If you reinstall TurboTax after October 15, 2003, you will not need to purchase a new product license. TurboTax 2002 products that currently require product activation will be activated free of charge, thus allowing anyone to install TurboTax on any computer without needing to purchase a product license. (Example: You activate TurboTax on your home computer and complete your taxes in March of 2003. The following December, you install TurboTax on a new computer. Because you installed TurboTax after October 15, you will not need to purchase a product license.)
    • If you purchase a new computer or a new hard disk for your current computer, Intuit technical support agents can assist you in reinstalling and reactivating TurboTax at no additional cost.
    • If you reformat your hard disk or replace your current operating system, in most cases reactivation will take place without you needing to contact Intuit.
    • If you reinstall the same version of TurboTax on the same computer that it was previously activated on, you do not need to purchase a new product license.
    • If you install TurboTax on another computer before October 16, 2003, you need to purchase a new product license only if you want to print from within TurboTax, electronically file, or save your tax return as a .pdf file from that computer.
    I hope this information answers your questions. If you would like to get more information about product activation, please see the Product Activation page at http://www.turbotaxsupport.com/default.asp?platfor m=1&docid=815.

    You are a valued customer and your opinion matters. If I can answer any additional concerns that you may have, please let me know.

    Sincerely,

    AnnabelG
    Tax Development, TurboTax

    --
    Yeah, right.
  43. ROI on an Accountant by Eric_Cartman_South_P · · Score: 2, Insightful
    Unless you are a student (any maybe even IF you are?) the return on investment in a good accountant is worth every penny. A good accountant here in New York City will cost you $200. And there is NO WAY even a W2 earner (sitting in a cubicle working for someone, you're W2) can not save $200 by having a good accountant do their taxes. It also makes you as audit proof as possible, and you don't do any of the work! I highly recomend you do it.

    And if you have an S or a C corp for you consultants out there, you have NO EXCUSE. No amount of coffe-sippin-while-reading-tax-books will replace the mountain of cash a good accountant will save you! The $200 investment is CHEAP! Get a good accountant, and let him do all the hard work and educate you on deductions, etc.

  44. Re:Does the HAL prohibit going around the FS? by arkanes · · Score: 3, Informative

    The defragger runs as a native NT application, not a win32 application - it needs this because it needs to be able to run before the win32 layer is loaded up. You don't need to do that kind of thing to write to the boot track, you just need Admin privledges. Details on the difference between the NT API and the win32 wrapper API for it can be found at Sysinternals.com. You can do some nifty stuff with an NT-native application, like writing Registry entries that can only be removed or modified by other NT applications, and not by anything running in the win32 layer.

  45. I loooove TaxAct by ChrisCampbell47 · · Score: 5, Insightful

    TaxAct is accurate and full of features. I've been using it for years (the paid version, which is still cheap). The UI is super slick and anybody's grandma could figure it out. Vote against DRM bullsiht like this with your wallet.

  46. Re:I just bought that yesterday! by GreyPoopon · · Score: 4, Insightful
    12) Have bill returned with letter expaining politely that it's not their problem.

    The sad thing is that I think the EULA allows them to make this statement, as I believe it explicitly states that they are not responsible for damage done to your machine or software as a result of using their product. Warranty only guarantees you what you paid for their product.... I'd love to see how well it would stand up in court in a case like this, where their product did something known to be destructive in some cases without bothering to inform you of it ahead of time.

    --

    GreyPoopon
    --
    Why is it I can write insightful comments but can't come up with a clever signature?

  47. Re:OK, this explains a lot by cookiepus · · Score: 3, Interesting

    I was disapointed with TurboTax2002's installation as well. There are two viable options, it seems.

    1) www.turbotax.com you can do all your taxes on the web, with seemingly full functionality of the turbotax CD package. There are different levels that you can access, from very basic (and therefore cheapest) to full-featured. Also, if your income is under 27k (i believe) you can use turbotax on the web for FREE. You'll have to look for the link on their site for that. turbotax on the web does both federal and state and files electronically with option to print.

    2) Taxcut from H.R.Block. Their software seems to be aimed as a full replacement for Intuit's, and it does appear to work. I still haven't had time to sit down and run through the different filing scenarios and see if TaxCut was as effective as TurboTax, but it looks solid.

    By the way, I totally understand why Intuit is instituting this draconian measure, even if it pisses me off as a user. Tax software, unlike just about any other software, has a useful life of 4 and a half months (you wouldn't use it earlier than Jan 1st, and probably not later than April 15th) and infact, it's something you use exactly once. So unlike most other software, there's absolutely no chance that you'll "use it, love it, buy it eventually". Nor can Intuit compensate for piracy by jacking up the price, because there's only so much that people would pay for this software, since:

    (1) It's something you use once, so you won't pay for it as much as you'd pay for an office suite you can use, potentially, for half a decade.

    (2) You won't pay more than you perceive it will save you in tax returns.

    Meanwhile, each year means tons of development for Intuit, with the ever-changing tax code. So it's absolutely imperative for them to make sure people pay for their software rather than have 10 people use the same CD to do their taxes or jus sharing the shit on Kazaa.

    And yeah, to be honest it may be worth putting up with. If TaxCut proves to not be flexible enough for what I need to do ( a lot of contractual work, etc. Not a simple W-2 scenario ) then I'll bite the bullet and buy TurboTax, boot sector be damned.

  48. Just filed mine... by Lethyos · · Score: 2, Insightful

    I explained that my system running Linux and Win2K would not boot and after re-running my bootloader, the system would start but TurboTax would not run.

    Even if you don't actually own TurboTax (I infact used it for the first time this year) I would file a bug report. We all know what the symptoms and causes are and they're valid no matter who reports them.

    We must all make a stand to demonstrate consumers dislike and resist silly measures like this. Especially when these measures damage our computers!

    --
    Why bother.
  49. Contact their PR dept. by pyros · · Score: 3, Informative

    I just sent this to public_relations@intuit.com, if other people do the same, InTuit will get the message that the upsets customers. No garauntee they will stop, but at least they'll no it upsets us.

    "I'm a potential customer for TurboTax software. A recent discussion held at the Slashdot forum indicates that TurboTax is laden with DRM (Digital Rights Management) components, and even goes so far as to write to the boot sector of the hard drive. I wanted to know how InTuit responds to this. I can't support a company who would include such measures in their software. I understand the need to prevent piracy, but writing to the boot sector is something that only disk partitioning software and operating system installers should do. I'm eager to hear InTuits response on this matter, as it will be the deciding factor in whether I buy InTuit software.

    Here are some links to the sites I am obtaining information from.

    Original article claiming the action:
    http://www.extremetech.com/article2/0,397 3,881243, 00.asp

    Pursuant discussion on Slashdot:
    http://slashdot.org/articles/03/02/16/1 549232.shtm l?tid=185

    PS - I'm posting a copy of this to the Slashdot forum, and intend to forward the reply to Slashdot as well."

  50. Right of first sale? by VersedM · · Score: 2, Informative

    The technical reasons (such as making physical writes to the hard drive, etc) for not using this product are compelling, but I believe the legal and social reasons for avoiding it are even more compelling.

    "Digital rights management" in this form essentially strips me of the right of first sale (the doctrine that makes it legal for video stores to rent out videos that they have purchased or for you to resell a book once you are done reading it). Once I purchase this software I should be free to do whatever I darn well please with it, *and* once I'm done with it, I should be free to sell it, give it away, or whatever I wish as long as I don't keep a copy for myself. By preventing any of these actions, "DRM" tramples on consumers' rights and should be resisted any without technical flaws that could render your computer unbootable.

    I sure am glad I have procrastinated in doing my taxes... Looks like I'll be checking out Intuit's competition this year.

  51. Rebii? Apparatii? Cactii? Octopii? Walrii? by Wee · · Score: 4, Funny
    I'm not afraid of virii. It's the trojii and worii that really scare me.

    -B

    --

    Ash and Hickory, straight-grained and true, make excellent bludgeons, dandy for the cudgeling of vegetarians.

  52. Re:I just bought that yesterday! by Richardsonke1 · · Score: 2, Informative
    I took a look at the EULA for Turbotax:
    Intuit does not warrant that the Software or Services are secure, free from bugs, viruses, interruption, errors, or other program limitations. Some states do not allow the exclusion of implied warranties, so the above exclusions may not apply to you. In that event, any implied warranties are limited in duration to 60 days from the date of purchase of the Software. However, some states do not allow limitations on how long an implied warranty lasts, so the above limitation may not apply to you. This warranty gives you specific legal rights, and you may have other rights that vary from state to state.
    In other words, by installing this software, they could legally plant a virus (not including DRM viruses) and you would have to repercussions. Even worse, they could put a trojan on your computer and watch how you spend your money, etc and sell it to advertising companies.

    Even worse:
    TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, INTUIT AND ITS REPRESENTATIVES ARE NOT LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING DAMAGES FOR LOSS OF BUSINESS, LOSS, CORRUPTION OR THEFT OF DATA, LOSS OF PROFITS OR INVESTMENT, OR THE LIKE), WHETHER BASED ON BREACH OF CONTRACT, BREACH OF WARRANTY, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY OR OTHERWISE, EVEN IF INTUIT OR ITS REPRESENTATIVES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF A REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE. IN NO EVENT DOES INTUIT ASSUME ANY LIABILITY TO ANY PARTY OTHER THAN YOU ARISING OUT OF YOUR USE OR INABILITY TO USE THE SOFTWARE OR SERVICES.
    In otherwords, no, you can't sue them. They can do whatever the heck they want to your computer and it is not their responsibility to fix it. That's the *cough* beaty of EULAs...
    --
    "Men lie."
    "Yeah, about sleeping with other women, but never about bioluminescent plankton."
    -Dan Brown
  53. No thanks by iamacat · · Score: 4, Interesting
    I expect some integrity from the authors of my financial software. If it does dangerous operations without my permission, how do I know it doesn't send my e-mail address, with my income level and home ownership status, to Intuit for inclusion in a spammer's dream list? Or worse, charges back a few bucks from my electronic refund.

    Anyone knows if TaxCut makers are known for some dishonest practices. They bought CompuServe and tried to push it to people who came to H&R block. Hmmm...

  54. LEGALLY Circumventing (sortof) all this crap by nurd68 · · Score: 5, Interesting

    1.) I just happen to have an inspiron 7500 with no screen (hinges broke off). Works fine when hooked to a CRT, though.

    2.) It came with a Win98 license that I retained, but never used (it was a GNU/Linux box).

    3.) Install legal copy of Win98

    4.) Install copy of TurboTax

    5.) Do taxes

    6.) Pass laptop around to family and friends, who hook it up to their monitors and printers, but (as per the license) it is only installed on ONE machine. (The machine just happens to move around a lot...)

  55. those guys! by jqh1 · · Score: 3, Interesting

    When I first heard about DRM on turbo tax, I got depressed and sent "whine-mail" on their website. One Joyce, from the Intuit "Executive Response Team" replied, and I responded again. I still haven't heard back:

    Joyce,
    Thanks for the response -- let me tell you a little bit about my April 15,
    2002:

    The time - about 11:00 PM. I've completed my 1040 and related forms using
    TurboTax on my main Windows 2000 computer (I have a home network, with
    several computers connecting to the internet through a common router to a
    cable modem). I go through the steps to file electronically, but
    experience repeated failures, with a couple of different error
    messages. I get on the live chat support and finally get through to an
    attendant. I get some advice, then try again to no avail. Returning to
    support I describe my setup a bit more. When the attendant learns that I
    have a home network, he/she says that I'm more or less on my own. I try
    making many different changes to the configuration of the Win2k computer,
    including dialing up to the internet straight through a modem. No dice,
    and no time to wait for another chat session with support.

    The time is about 11:45 (and my blood pressure is rising
    fast...). I uninstall TurboTax from the Win2k computer and install it on
    my daughter's Win98 computer, transferring the
    tax data file across the network. About 11:55, I try electronic filing
    again, and it works! Without remembering or wishing to burden you with
    the details, let me assure you that it appeared to be a Win2k related
    problem, or at least a problem with the network set-up on the Win2k
    machine. Blood pressure goes down, and I put the whole thing behind me.

    Running that scenario again with product activation lands me in the
    emergency room. I do appreciate the note, and I'm going to start my 2002
    taxes soon. I'll revisit the product activation issue then.

    Josh

    On Mon, 3 Feb 2003, JoyceC Support - [snip] wrote:

    > Dear Mr. Hamilton,
    >
    > Thank you for your E-mail to Intuit. My name is Joyce with Intuit's
    > Executive Response Team. I would like to respond to your concerns about
    > using our product. By working with our customers, it is our intent to
    > establish clear, identifiable solutions to your questions and concerns.
    > First and foremost, I am sorry for the delay in responding to your comments.
    > Second, I gather you are giving up on TurboTax because of concerns with the
    > product activation this year.
    >
    > Let me share some facts about our product activation:
    >
    > * TurboTax 2002 includes a product activation process that ensures
    > TurboTax is used in accordance with the TurboTax software license and
    > services agreement.
    >
    > * Product activation ties printing and filing from the TurboTax
    > federal product to a single computer, preventing unlicensed use of the
    > product.
    >
    > * Privacy was a key consideration when implementing the Product
    > Activation technology in TurboTax. Product activation is completely
    > anonymous -- no personal information is transmitted to Intuit.
    >
    > * Product activation transfers nothing but a Product Key and Request
    > Code. The Key and Code key are matched together and a confirmation is sent
    > from Intuit that activates TurboTax on your computer.
    >
    > * Product activation does not monitor any activities on your computer
    > nor will it prevent you from using your CD-R or CD-RW drives.
    >
    > * The functionality that manages the TurboTax product activation
    > (Macrovision SafeCast(r)) can be deleted from your computer when you are
    > done using TurboTax. The uninstall utility is available on our support site
    > at
    > http://www.turbotaxsupport.com/default.asp?platfor m=1&DocID=836
    >
    > I hope this information answers your questions. If you would like to get
    > more information about product activation, please see the Product Activation
    > page at http://www.turbotaxsupport.com/default.asp?platfor m=1
    >
    > &docid=815. You are a valued customer and your opinion matters. If I can
    > answer any additional concerns that you may have, please let me know.
    >
    > Joyce
    > Executive Response Team
    > Intuit. Inc.
    > [snip]
    >
    >
    > In response to the following E-mail received:
    >
    > I'm sad to hear about your product activation scheme. I will not buy
    > TurboTax this year (as I have for many years so far) because of it. What's
    > depressing for me is that I think the product is so good, otherwise - that
    > is, without the product activation, I would be 100% certain to buy and use
    > TurboTax, but with it, I'm 100% certain *not* to.

    --
    who's moderating the meta-moderators?
  56. Re:I just bought that yesterday! by Marc2k · · Score: 3, Funny

    Hmm..ok, I'm about to start the process, but I'm a little confused. Step 2 is remove my floppy drive, and step 4 is shut down...ok let's se here...*BZZZT*

    --
    --- What
  57. I filed a "product suggestion" and got a reply by Anonymous Coward · · Score: 3, Informative
    I filed a "product suggestion" at http://altserv.intuit.com/orien/turbotax_enhance.c gi (saying that I'd used TurboTax for several years but would not use it this year because of the DRM issues). I got the following reply:
    Thank you for contacting Intuit Inc.

    We received your e-mail concerning TurboTax(R) Product Activation. Product Activation is designed to help reduce unlicensed use of TurboTax software. It ties a single copy (a license is tied to a pc, not a copy of the software) of TurboTax to a single PC. Product Activation is completely anonymous; no personal data is collected or transmitted to Intuit. Product activation does not prevent TurboTax customers from preparing tax returns for themselves and their family members or from giving the CD to someone else who can then purchase their own product license. TurboTax customers can prepare their return from more than one computer but will only be able to activate, print or e-file their tax return from a single PC.

    However, you may install the trial version on other computer and work on your returns but you can Efile and print from the computer where you have first installed the program.

    Product activation helps to ensure TurboTax customers use the product in accordance with the license agreement. The key terms of the License Agreement have been the same for the past several years. It restricts the licensed use of TurboTax software to a single computer. With product activation your privacy is safe. We do not transmit any personally identifiable information about you or your computer.

    Product activation transfers nothing but a Product Key and Request Code. The code and key are matched together and a confirmation is sent to Intuit which enables TurboTax to be activated on your computer. Product activation does not monitor any activities on your computer such as what Web sites you visit, etc. It will not prevent you from using your CD-R or CD-RW drives.

    You can still prepare multiple returns from your computer and prepare your return using multiple computers at no additional cost. You can remove/delete Macrovision SafeCast (C-Dilla) folders and components associated with TurboTax.

    We sincerely apologize for the inconvenience this may have caused you. We hope new arrangements will not affect our business relationship in any way but will continue to grow. We have forwarded your comments to the TurboTax Management and Development Teams for consideration. Although we cannot guarantee that your feedback will result in a change to our guidelines, we assure you that we take all advice seriously because it contributes to the improvement of our products and services, and we appreciate your honesty.

    To obtain additional information about product activation, please visit us at http://www.turbotaxsupport.com/default.asp?platfor m=1&docid=815.

    Further, Intuit respects and protects customer information. We integrate privacy in to everything we do. That is why privacy and security were key considerations when implementing the product activation technology in federal TurboTax for Windows desktop products for Tax Year 2002.

    The Macrovision SAFECAST(R) product activation technology used by Intuit installs files on your computer when you install TurboTax. These files serve as your product license; in addition, they also manage and protect that license. These files interact only with TurboTax and with each other. Macrovision SAFECAST does not gather any personally identifiable information. It does not examine, modify, or gather information about your computer, your computer's contents, or your activities or behavior, nor does it transmit any such information to Intuit, Macrovision, or any other party.

    C-Dilla is a company that was acquired by Macrovision in 1999. Some of the Macrovision SAFECAST technology used in TurboTax is derived from earlier C-Dilla products. "Spyware" is jargon for hidden programs that transmit user information to others (usually advertisers) without the user's knowledge. C-Dilla is not spyware.

    If you have additional questions, please visit us at www.turbotaxsupport.com. We appreciate your interest and look forward to serving you in the future.

    There is a new uninstaller for Macrovision Safecast/c-dilla. This requires that you first complete your taxes, uninstall TurboTax normally, and follow the process located here. http://www.turbotaxsupport.com/default.asp?platfor m=1&docid=836

    If you need further assistance, or if there is any other way we may be of service, please contact us at http://www.intuit.com/service.

    Respectfully,

    Nidhi

    Intuit Customer Service
  58. Is this discussion a DMCA violation? by statusbar · · Score: 3, Interesting

    Can they legally shut down this discussion on slashdot just because we are talking about the intimate details of 'track 0, sector 33'? Now that we know this, the protection scheme is broken, anyone can write a crack for this program that simply writes the appropriate data on sector 33.

    --jeff++

    --
    ipv6 is my vpn
  59. taxes? by trybywrench · · Score: 3, Funny

    fffttt i did my taxes over a year ago.

    --
    I came to the datacenter drunk with a fake ID, don't you want to be just like me?
  60. Corporate hax0rs? by DoraLives · · Score: 5, Insightful
    How, precisely, are these people any different from some pimply-faced cracker bent over a keyboard, scanning ports, and swilling Mountain Dew? They're doing things on the sly that potentially can wreck your system, negate your privacy, or god only knows what else, and they're definitely not on the up and up with it.

    How can ANY of us expect the hax0rs to behave themselves when Pillars of the System are behaving just as badly or worse?

    --
    Is it fascism yet?
  61. Macrovision by Eraser_ · · Score: 5, Informative

    Get This.

    TurboTax also broke my DX8.1 install. Turns out, those fancy movies that come with it are Macrovision encoded. NT user? check your Services for a magical new service (I can't remember the name, I've long since ripped it a new one) which even if you disable it, running turbotax fires it right back up to automatic. Lord this gives me a new reason to get a full refund from them. How can one tell if their bootsector has some extra bits in it?

  62. Re:I just bought that yesterday! by Restil · · Score: 4, Interesting

    But he never implied that he wanted to sue them. Only that he puts them in a position where they refuse to pay for damage caused by a function of their software that they were well aware of, but haven't bothered to inform the public of.

    The point is, you make a media case out of the company and in light of a well informed marketplace, hope that people will see this software as dangerous and refuse to use it on that basis, especially when they clearly refuse to pay for damage that they clearly caused.

    And EULA's aren't the impenetrable blanket they might appear to be. Yes, we can use them to avoid getting sued because some overlooked bug did something undesireable. But as far as I know, a contract that involves illegal activity is not a legal contract. And as long as initiating the spread of a dangerous virus is considered illegal (and judging by the arrests and convictions to that effect, I'm going to assume it is), the only thing a virus writer would have to do to exempt themselves from prosecution would be to include a EULA along with the virus that somehow the victim would agree to. Nobody reads them anyway, so the virus would still spread just as rapidly.

    Writing to the boot sector is dangerous, and application software has NO reason to do so. As far as I'm concerned, make a public spectacle out of them. Let the public realize that in the name of DRM some software companies are doing inherently dangerous things, and let other software companies know that this type of activity will not be tolerated.

    -Restil

    --
    Play with my webcams and lights here
  63. Re:Wincrash by Anonymous Coward · · Score: 2, Funny

    My Linux partition crashed two years ago. And, to my surprise as it was frustrating at the time, I don't miss it very much.

    My .sxw-files now are .doc-files.


    Will I get +1 Informative for being of the opposite opinion and supporting Microsoft? I doubt it.

  64. TurboTax Virus by N8F8 · · Score: 2, Interesting

    Simple solution: Announce that a hidden virus has been found in TurboTax that writes to an unprotected of your harddrive producung unknown but potentially dangerous effects. The general publick goes bleary-eyed at "boot sector" but the word virus gets their attention.

    --
    "God fights on the side with the best artillery." - Napoleon, Marshal of France - speaking truth to power
  65. I use VMWare ESX Server.. by nurb432 · · Score: 2, Insightful

    I want a refund since it wont install on a virtual machine.

    I own MS-Windows legally, and i own ESX server legally..

    I consider their product defective, so i want a refund, a class action law-suit, and out of this EULA that i never even had a chance to agree too.

    --
    ---- Booth was a patriot ----
  66. My Logitech mouse drivers installed spyware by OneInEveryCrowd · · Score: 4, Informative

    A year ago I bought the then new Logitech dual pickup optical mouse and installed the drivers from the included CD. The install looked kind of suspicious so I ran ad-aware. It reported some kind of spyware components so I removed them. The system was clean before I installed the drivers.

    This really blew my mind at the time. I can see someone who provides free software doing that using the excuse that they need to make money and pay the employees, etc. But spyware with a $49.99 USA mouse ! Jeez...............

  67. IRS should provide XML-based forms, rules by g4dget · · Score: 4, Interesting

    The IRS (and state tax boards) should really provide tax forms in XML format. Furthermore, tax laws are a good place to start translating fuzzy legal language into clear mathematical and programmatic rules, and those rules should not be coded up by a bunch of private companies, they should be supplied by the IRS. Then, the function of tax software would be to be a user interface to the IRS-supplied XML forms and rules.

  68. Why not more OUTRAGE at SafeDisk? by Nom+du+Keyboard · · Score: 3, Informative
    If you read the Extreme Tech article completely, it reminds us that the companion product (not used in TurboTax yet) SafeDisk is even more insidious. That it replaces your CD-RW drivers with its own and monitors (prevents?) how you use your CD-RW drive after that. Now there is something that ought to be the target of lawsuits left & right.

    A few lawsuits for system damage by SafeCast right now wouldn't hurt either.

    So what is a good utility to inspect and clean all this crap off of boot sectors 1-63, even if it does make limited-time demos forget their earlier installs?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  69. answer by Ender+Ryan · · Score: 2, Informative
    Transgaming has purchased a number of copy prevention mechanisms for use in WineX to enable it to play windows games that use them. There's no way around it for them, it's either circumvent the copy prevention, or include code in winex to enforce it/allow the game to play. If they did the former, they would be in violation of the DMCA and would undoutably be sued into oblivion immediately.

    So no, nothing more nefarious than making games work.

    --
    Sticking feathers up your butt does not make you a chicken - Tyler Durden
  70. Right on! But ... by Anonymous Coward · · Score: 3, Funny

    I think that should be "nitpicking smart-asses".

  71. Possible alternatives by Anonymous Coward · · Score: 3, Informative

    Don't thank me, thank Google Sets. :)

    TaxACT
    TurboTax
    TaxCut
    Taxslayer
    Taxcut Deluxe
    TurboTax Deluxe
    HD Vest
    E1040 com
    TaxBrain
    CompleteTax
    e1065
    TaxesByCPA
    104 0Form
    TaxLogic
    FileSafe
    eTax YourPace
    EZTaxMachine
    Tax Engine
    AccuTax
    TaxConnection
    TaxGaga
    FileYourT axes com
    1040 net
    Taxes1 com

  72. Tried leaving Feedback at Intuit.com by Ath · · Score: 2, Informative

    Of course, it doesn't work! So maybe someone at Inuit browses Slashdot. Ahahaha! Right! ---- Hi, I have just finished doing quite a bit of reading, both at Intuit.com and through other resources, about the copy protection method Intuit used on the recent version of TurboTax. While Intuit may be concerned about lost sales of TurboTax due to copying, I can cite at least one example of a lost sale due to this copy protection. Me. I had been purchasing and using TurboTax for 6 years but will do so no longer. As the copy protection Intuit used on TurboTax definitely DOES affect the use of my system by writing information in the boot sector area, I luckily have avoid the problem by not using the product. So whoever decided the use of the copy protection was a good idea should be held accountable, because I am sure sales will be detrimentally affected. And those numbers will be clear. As I am sure you are aware, most people do not bother writing to vendors to express displeasure about certain business practices. Hopefully, my note is merely one expression of a lot more silent ex-Intuit customers. Thank you. ----

  73. OK, but by dr_labrat · · Score: 2, Insightful
    It's this sort of thing that permanently alienates me on a product. I will NEVER buy a product that uses low-level writes on my system for copy protection purposes, especially if they try and keep it secret.

    whilst I sympathise with your sentiment there, if a company is successful in keeping low level writes secret, how will we know?

    How many software packages have we bought in the past that have tried dumb things like that...?

    --
    The secret of success is honesty and fair dealing. If you can fake those, you've got it made. (Marx)
  74. Two problems with Intuit by taustin · · Score: 3, Insightful

    First, federal law requires me to keep tax records for a minimum period of time, and to produce them on demand. If I keep my tax records in Inuit's software, I cannot be reasonably certain that I will be able to produce them on demand. It seems to me that it might actually be a federal crime for me to use Intuit's software to keep any financial records of any kind. (IANAL)

    Second, in my experience, people tend to see in others what they see in themselves. Intuit sees dishonesty in others. I think it would be very, very foolish to give sensitive financial data to a company that sees dishonesty in itself. I could be wrong, of course, but the risk is simply too great. Never make a bet you can't afford to lose.

  75. Note to H&R Block marketing people! by restive · · Score: 3, Interesting


    If you haven't figured it out already, you have just been handed the chance to clobber TurboTax. This is like Coke adding broccoli flavoring to their cola. Offer TaxCut at 50% off to everyone that used TurboTax last year.

    Also make sure you don't do the same as Intuit, and you just might be able to corner the tax software market.

  76. Make it clear by evilpenguin · · Score: 4, Insightful

    This is a pattern, folks. Since C-dilla is a key based system, writing software to save, restore, or move cylinder 0 of your hard drive might be illegal under the DMCA. This has to be fought. Here's what I've done:

    1. I wrote to Intuit telling them why I will not buy TurboTax ever again. They violated my trust. I will not trust them with my taxes again. I already stopped upgrading Quicken with Deluxe 2000 because it became noticably slower and because it is not available in a Linux version. Tell them you will buy TaxCut (if you plan to buy tax software again) next year and that this is why.

    2. Join the EFF. I give them a small contribution every year.

    3. Write your congressional delegation about your opposition to the DMCA. The existing laws are enough. The DMCA could be construed as making disk image backup software illegal!

    Vote with your dollars. Intuit is never, EVER getting another dime from me.

    If you feel the same way, great. But be sure to LET THEM KNOW.

  77. And Windows allows this? by jpt.d · · Score: 2, Insightful

    Any decent os (Win2k, WinXP in this case) should prevent any access to the boot sectors without authorization. I bet you would need to really bitch at linux or freebsd to let it do that crap. In MacOS X you definately would need authorization from the user.

    --
    What we see depends on mainly what we look for. -- John Lubbock Now search for that bug slave!
  78. I installed it. by Anonymous Coward · · Score: 3, Informative

    It fucked up my f-prot installation.

    On top of that, the one-click update just sat there, so I had to download the update program and run it manually. That farked up the turbotax installation entirely. It wouldn't even run anymore. It was in the task list, but nothing worked.

    Uninstalled it and reinstalled it a few times, but it didn't help. Followed the instructions on the website completely, but no luck. I spent the entire day yesterday trying to get turbotax to work.

    I *had* planned on getting my taxes done this weekend. That plan was shot to hell.

    I uninstalled it, and took it back to Walmart today. They didn't give me a hassle over the fact that it had been opened. I was surprised but pleased about that, since the in2it web site refund page seems to require an order number.

    I hope they ship it back rather than selling it to someone else, since the drm activation took place. That serial number won't work for anyone else now.

    I will never purchase turbotax again. All this hassle for a stinking $20 one-use product. They might eliminate the 5-20% piracy that might have existed, but only at the cost of losing 60% of their sales.

  79. Re:How many other programs...? Here's a list by wiggys · · Score: 2, Insightful
    That reminds me. Had an email from a friend who couldn't play Red Alert 2 on his PC. It worked in his friends, but he kept getting a strange error message about a temp file.

    In the end he had to get his mate to clone the CD so he could play the game - turns out his CD drive couldnt' read the copy protection properly and it was refusing to load.

    Why is it that sometimes buying software causes you more hassle than getting a warez version? Doesn't seem right to me...

    --

    Sorry, but my karma just ran over your dogma.

  80. wahhht by pr0ntab · · Score: 2, Funny

    I think the point is that no would do that because no one outside America would attempt to break TurboTax's DRM because they would never need to use it! (insert US-centric slashdot rant here) If you're still confused, people in Eastern Europe don't pay our Uncle Sam income tax.

    I mean, if you're going to break the law in umpteen countries by circumventing the copy protection, you might as well have a good reason! No amount of charity would make me touch that POS software with a 10 foot pole. (really, turbotax is the pits, its not even fun!)

    --
    Fuck Beta. Fuck Dice
  81. Intuit, never again for me either by Reziac · · Score: 4, Insightful

    Last year I made the mistake of buying and installing TurboTax. It *forcibly* installed IE5.5 (no option, no way to interrupt it short of the reset button). This did all sorts of damage to my Win98 system, which so far I've been unable to entirely fix (despite drastic measures like IEradicator), plus IE5.5 proved ET-ware.

    If you can't tell, I'm STILL pissed about it, and will probably continue to be pissed for the life of this machine (too complex to reinstall everything and too large for practical OS/app backups). Ya see, I used to reboot this machine only once or twice a month. Now it needs it every 3-4 days tops (and before every CD burn) due to resource leakage it did NOT have before.

    That they've now pulled the oldfashioned trick of hiding shit in a reserved sector -- well, that doesn't surprise me, but it does give me yet another reason to rant against Intuit at every opportunity. So much for my many years of being a good customer, and recommending their software to all my clients. Never again.

    I've had the fun of dealing with the residue of an old app that used the "fake a bad sector" trick as copy protection. It rendered the hard disk impossible to back up by normal means, and when the program hiccupped and died, it proved impossible to uninstall OR reinstall (bad sector trick on the floppy to tell it that it was still installed, so it refused to install. Well, maybe with a sector editor... but that strikes me as a trifle extreme for everyday use.)

    The very pissed legit owner called the publisher, and found they'd gone tits-up and been sold to someone else, who would be happy to sell him an upgrade, but would NOT give him a new set of disks to replace those that were now screwed. Owner said fuck you very much and bought a competitor's product.

    Here's a hint, Intuit: Copy protection of the "fuck with the user's hard disk" variety didn't work in the DOS era, and it won't work now -- it pisses off the very people you most want to make happy: repeat customers.

    --
    ~REZ~ #43301. Who'd fake being me anyway?
  82. Another VMWare detection mechanism by gnuber · · Score: 2, Informative


    The undocumented VMWare I/O port communication mechanism can also be (and is) used to determine whether an application is running under VMWare. The relatively simple code to implement this was posted to the Honeypots security list.

  83. Re:The IRS can't forgive you of not paying your ta by fishbowl · · Score: 2, Informative

    Pretty much everybody who has ever pressed the line of tax protest that you describe, has done time for it. I think it was irresponsible of you not to mention that detail.

    --
    -fb Everything not expressly forbidden is now mandatory.
  84. If you already bought it ... by gnuber · · Score: 2, Informative
    I buy Turbo Tax "Premier Home & Business" every year, so I picked it up in early January when it hit the shelves. Fortunately, I have not yet risked my system by installing it -- I plan to try Tax Cut instead. But I certainly don't want Intuit keeping my $68 after this outrage! So I read the box, and noted this text on the lower-left back corner:

    "60-Day Money-Back Guarantee: Try TurboTax software. If you're not satisfied, return it within 60 days of purchase with your dated receipt for a full refund."

    So even those of you who already opened the box are covered! I recommend returning this nonsense at the first opportunity. If the salesman gives you any flack, just point them at this text on the box.

  85. Amazon reviews by gnuber · · Score: 3, Interesting
    Anyone who believes the Intuit PR downplaying the problem need only read the 391 overwhelmingly negative reviews at Amazon to determine that this is a serious problem that severely affects people. I am certainly changing to TaxCut this year! I feel that this review by Kent Stanton sums these issues up well:

    here's a lot of hype going around about the copy protection scheme in Turbotax. Much of it is overblown. But even ignoring the hype, Intuit has blown it big time.

    1. The copy protection scheme used by Intuit is invasive. It works by installing and running an unwanted program on your computer. This program runs 100% of the time. You can't turn it off, and you can't uninstall it even when you remove turbotax. (Intuit has recently release a separate uninstaller for the copy protection scheme, but first you have to download it, and many people are saying that it doesn't work).
    2. Intuit is punishing/annoying/infuriating it's paying customers to stop a few thieves. The vast majority of Turbotax customers are honest, and they want one just thing from TT. A safe reliable way to do their taxes. It doesn't make sense to use pirated tax software to save 30 bucks.
    3. The Intuit customer support deptartment is so overwhelmed by all the problems this has caused that you should expect a 30-60 minutes wait to talk to anyone at Intuit about anything. This includes activating your product if you can't do it on-line. But don't take my word for it, try to call them.
    4. But here's the killer: If every software vendor decides to try something like this, we'll end up needing a separate computer for every program. The c-dilla software used by intuit has a well-earned reputation for being unstable. How well will your computer work in the future when there are 20 different competing copy protection services running on it.