Activating Vista Enterprise Using a Spoofed Server
Ruvim writes "It has been mentioned in previous Slashdot discussions as possibility, and now it became a reality: Information Week reports that a spoofed server has been released that can be used to activate Microsoft's Vista Enterprise versions. It is being made available on several pirate Web sites and spoofs a Key Management Service server, used to activate a large number of copies of Windows Vista in enterprise environments." From the article: "Vista is the first version of Windows that Microsoft requires volume license customers to activate. Besides KMS, the Redmond, Wash. developer also offers Multiple Activation Key, which resembles the retail version's activation process. PCs activated using KMS must reactivate at least once every six months. The MelindaGates hack uses a VMware image of a KMS server to activate -- and keep activated -- a pirated edition of Windows Vista Business. 'Looks like Windows Vista Volume Activation 2.0 is a big bust,' wrote a user identified as 'clank' on the PirateBay Web site Friday. "
In Mysterious Future, Vista Activation Spoofs You!
"Flyin' in just a sweet place,
Never been known to fail..."
Information Week reports that a spoofed server has been released that can be used to activate Microsoft's Vista Enterprise versions.
And you don't even need a separate computer. You can spoof the activation from the same machine.
The theory of relativity doesn't work right in Arkansas.
Sounds like someone just stole a vmware image from their work that is set up as a kms (many sites are just plugging their KMS in as a vmware guest to get going).
I'm sure that Microsoft must have thought of that as a possibility. Since a unique product key is required to activate a KMS, why can't Microsoft just deactivate that compromised KMS key?
Vista Business and friends are the most likely to be cracked due to volume licensing. However, features are removed in a way that it is advantageous to businesses but turn away most home users. It'll be interesting to see how that works out.
All I can say is: [nelson voice]ha ha !![/nelson voice]
The magical number is: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
The prize being to 0wn the Microsoft security mechanisms, but more-so to do it before rival warez groups.
The warez groups aren't so much competing against Microsoft, but amongst themselves - for the sheer status of it.
Interesting...our network is completely self contained and does not touch the internet at all. I wonder how this will work for networks like mine (no plans to upgrade anytime in the near future, and since we use the workstations to run Citrix-based apps, it doesn't matter what OS we use.)
This is exactly how cracks for flexlm based products (Maya, ArcGIS) work as well.
Honestly, I'm going to laugh my ass off 6 months down the road when MS pushes out a mandatory WGA update, disguised as another 'critical update,' that nukes pirated installs. All these scam cracked/KMS/pirated Vista copies are going to lock-up, shut down and only be able to do one thing, display the phone number to call MS to purchase a legitimate key. Pirates have gotten by the initial flaws in the authentication system. Microsoft is going to change it, and quietly force everybody to reactivate from a legitimate source. Just wait... it's coming. If you really need a free, modern OS, rather than run something that clings to functionality through hacks, cheats, cracks and work-arounds, why not just bite the bullet and download a good desktop Linux distro? It's free. It's arguably more capable than Vista. How/where/when you play your media isn't decided by the AAs and to top it all off, you don't have to hack/crack/scam to get it to run.
Brought to you by The Pirate Bay as usual. :)
'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
Even better is that the torrent tracker referred to is The Pirate Bay -- who mocked microsoft's legal threats, resulting in Microsoft appearing to pull strings that lead to an unprecedented, although ultimately unsuccessful, raid on their servers.
.torrents for me!
So, when the first hacks for Vista start popping up, it's nice to know that I can rely on The Pirate Bay to host those
Let's hope that Microsoft fixes this problem very quickly. It is important that all Microsoft users pay every last penny for their habit.
Someone please post a link. Preferably a coral cache...
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
This is just another reason why anything dealing with software activation, DRM and it's ilk is a colossal waste of time and money.
My karma is not a Chameleon.
...Why anyone would run their business (or hobby) on a system that is subject to DeActivation.
Defective by Design, indeed.
you had me at #!
It was inevitable that Vista Enterprise would be cracked in some way. Every version of Windows has been. In fact, I can't think of a single large-scale (scale as in cost) software that has not been cracked. No matter what any software vendor does, the dedicated pirates will always be one step ahead. Measures like product activation are only to stop widespread casual piracy, not piracy in its entirety.
I daresay you're sidestepping GP's points:
1) Linux does not run a critical set of games which he wants to play.
2) Linux apps lack the kind of application compatibility that he and his family are looking for.
Let's accept that a console is superior to a PC for gaming, and let's accept that Linux is preferable to Windows for general computing tasks. GP's two points are still unresolved: he wants to play that particular set of games (presumably not available on either a console or on Linux) and he wants compatibility for a specific set of applications (presumably Windows-only applications without equivalent Linux alternatives/ports).
yeah, because women will blow any guy if his wang is large enough. You sure understand females, buddy.
sudo killall humans
http://www.autopatcher.com Problem solved. Oh, and it's much better than Windows Update, too. Imagine that.
As heard by Nelson Muntz from the Simpsons, "Haha!"
They will if you have a big wallet to match!
:(
Alas, the part of the puzzle I am missing...
Inconceivable!
An interesting twist from this is that the most feature-rich Vista Ultimate Edition may not be the most warezed one after all. Because these aren't supporting KMS activation, unlike Enterprise and Business who were both intended for this use. However, for a pirate, that may not matter much, as the benefits of Vista Home Basic/Ultimate (= home/entertainment-oriented software) is probably quite easily outweighed by already available software, often free.
Beware: In C++, your friends can see your privates!
Hackerz: Microsoft will patch up any hole you tell them about. Why don't you sit on this until *after* Vista is released.
Oh right. You want to release it this century.
..muahahahahahahaha. Ha.
OffTopic: :) Your Slashdot penis must be huge :D
Hey you've got the lowest "member id number" I've seen on here so far
Best Soviet comment ever...
My bicyles
HAHAHAHAHAHAHAHA awesome.
Taco is UID 1...
I signed up the same day, 'tho'.
"Flyin' in just a sweet place,
Never been known to fail..."
"You can flip over a screwdriver to pound in nails, but why not just use the hammer?"
because the screwdriver manufacturer hasn't installed a "Feature" that makes the tool cease to function, forcing you to call the hammer manufacturer to ask permission to regain use of that hammer you bought. All the while knowing that at some point, the hammer manufacturer is going to decide they want to sell their new hammers, so they will stop giving permission to the old hammer owners to keep using their purchased hammers.
The real question would be, "Why would you buy a screwdriver, when you can rent a hammer?"
has a lot to be said about it.
Just look at the sheer numbers of downloads for Windows XP and every other Windows OS.
The facts speak for themselve.
Microsoft.Windows.Vista.Local.Activation.Server-Me lindaGates.torrent
.nfo].
...
...
unlike windows xp and volume activation 1.0 windows vista doesnt have any corporate
keys which will permanently activate it. volume activation 2.0 requires a corporate
user to either do a one time activation through microsoft servers (mak) or companies
can host a local activation server which does not talk to microsoft (kms). the only
difference is kms requires re-activation once every 180 days. however as long as
theres a local kms server its simple to keep windows activated. this release is a
vmware image of a permanently activated kms server which allows local activation of
windows vista business/enterprise edition. volume activation 2.0 is only built into
those two editions.
install vista business/enterprise edition with the key [removed, check
using the latest vmware workstation, boot the image. disable vmware firewall.
on the non vm vista right click the command prompt icon and run as admin. type
cscript c:\windows\system32\slmgr.vbs -skms vm_vista_ip
cscript c:\windows\system32\slmgr.vbs -ato
windows should now be activated.
to check activation status type
cscript c:\windows\system32\slmgr.vbs -dlv
tested using echos windows vista enterprise and vmware workstation 5.5.3 but seems to
have issues with the billgates windows vista business.
The "MelindaGates" hack? Is that because people are getting sick of being screwed by Bill?
That is actually very interesting.
However, given the nature of their work, I'd guess they don't use the newest OS...
Funny that MoxFulder should point this out?
Shhhh
The DRM module doesn't block unsigned drivers, allowing injection of attack code.
The license module has been spoofed, which means it's not protecting Microsoft's revenue.
Does Vista protect anything other than media restrictions imposed by producers?
I do not fail; I succeed at finding out what does not work.
You sir, win an internet.
I downloaded parts of 'Call of Juarez' to part seed (Ratio Whoring). Then, after having seen some screen shots, I thought "what the hell", and set it to fetch the rest.
After playing through the game, I decided that I had to own that game.
Also, I'm buying a copy for my friend this Christmas.
This does not reduce the value of KMS to corporate users. The value of KMS over traditional VLA keys is the fact that it protects the specific keys that are registered to a specific corporate customer. Even if you get your hands on a KMS activated system, there is no license information on the system to copy and pass around.
I have no idea if MS has a way to deal with this, folks are not just passing around a VLA keys that would then get blocked and force the orginal owner of the key to reset the keys on all their machines.
Most people (even the ones slimy enough to pirate software) are not going to keep around a multi GB vm to they can re-activate their system every 180 days just to get a version of Vista that does not even have Media Center or Movie Maker HD.
But..but..but..I thought Vista was unhackable!
Trust your feelings. You know this to be true.
Quod scripsi, scripsi.
99% of the games? You're kidding right?
While this may bypass activation, which is the Big Thing, what about WGA?
I'm only aware of cracks for XP so far, but maybe these work for Vista as well?
The thing is that MS has ramped up the effects from WGA authenticity failure a lot in Vista to make it hardly usable, contrary to before when you'd just miss out on a few extras from Microsoft Update.
Beware: In C++, your friends can see your privates!
Actually, these days you're more likely to catch malware off of legitimate purchases (CDs, games containing StarForce, etc) than off a decent pirate site. (Torrent sites in particular tend to kill off torrents containing malware).
Isn't it ironic?
I'm a dreamer, the world is my playpen. But hey, I'm a serious person, I can't dream all the time.
It's actually more than one but either way I bet M$ and everybody coming up with these copy protection schemes have to think to themselves..."We always lose this war against the Pirates and the Hackers. Why do we even bother?"
you would swear it must be open source?
Why would any government agency, or anyone else, pay for this? There seems to be absolutely NO security... why pay, you get as good or better for free with F/OSS... wow
Support NYCountryLawyer RIAA vs People
If you can't even control the hard drive access on your own god damned computer because your OS has been deactivated, who cares about Flickr and all that crap?
Besides, anyone with half a brain would never count on a service like that. SPF.
The part they don't mention is that the activation server only hands out activations on networks with 25+ computers. The machine may be permanently activated, but after 180 days, if you don't have 25 unique machines (and no, virtual machines can be detected and don't count), the activation server will deny your request to reactivate.
That doesn't preclude from downloading another pre-activated KMS Server, but this isn't really a permanent solution.
At least I'm not the only one that gets "gee mister, your uid sure is low!"
That's about the time you guys usually show up out of the woodwork ;)
From TFA: "Volume Activation 2.0, which uses a new set of technologies to activate and validate Vista ..."
More Microsoft market speak. It writes some software that does something proprietary and it's called a "set of technologies." WTF it's just programs built for one reason only - to protect a monopoly market position.
Hey Ballmer! Technology != code
Linux Rules, Macintosh Rocks, what's Wintel?
You still must be class of '98...
"Flyin' in just a sweet place,
Never been known to fail..."
Would you feel the same way if MS found a loophole in the GPL that allowed them to start lifting code wholesale?
MS has a certain motivation for developing software, and they protect it through technical and legal means. The Open Source community may have several motivations for developing software, but they all use their licenses to protect that which motivates them. If you don't agree with what they do, then fine, don't use their software, but how is pirating a copy of Vista any different from helping yourself to GPL code without giving anything back? Either way, you're refusing to abide by the terms of the exchange, and basically telling the creator "I'm taking your work, and I don't care what you say about it."
That's about the time you guys usually show up out of the woodwork ;)
The woodwork isn't the problem. It's the cement vault they put the casket inside that's a bitch to get out of.This
Is this legal? I remember reading about not being allowed to run Vista in a virtual box and/or commenting on Vista performance, not to mention investigate the DRM mechanism...
heh eh heh ehe heh you said woodwork
You can't take the sky from me.
No... no you're not.
Spam will be a thing of the past in two years' time, Microsoft boss Bill Gates has promised.
Say hello to my little sig.
There is probably a fairly big financial incentive also.
Commerical piracy of Vista will be at least as big as piracy of XP - and the sellers / producers of the pirated software will need this sort of stuff.
There is always a frontier where there is an open and willing mind
what you probably don't know is that Microsoft has a reserved set of hostnames/ips in the kernel that do no go through normal name-resolution process. so even if you modify your hosts files, spoof dns servers and key servers, at some point it will try to contact them directly without going through "documented" name resolution process.
While their intentions may sound reasonable - bypass spyware and viruses that may have hijacked the OS to allow clean-up and windows updates sw through, it may also allow them to disable your system or collect enough information on you to prosecute.
Stick with XP or better yet, switch to linux.
I got Bob to run on XP...don't ask me why I bothered to try it.
You're using her as bait, Master!
Fuck all of you guys.
And the sub-14-bit UIDs you rode in on.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
its VMWare, just take snapshots and rollback?
The key server is only half the issue...
During every 'Windows Update' (or perhaps quietly in the back ground) Vista will download a list of revoked key servers. As MS gets copies of the VM'd key servers, identifies them, their sigs go into the revocation list.
Your... erm, son of hacked key-server Vista copy downloads the revocation list, finds it's a bastard and promptly switches itself off.
Now... if you can hack the revocation part of Vista itself, you'll have the other 50% of a full Vista hack.
Or they will run out of keys to revoke.
An enterprising hacker might
a) seek out and duplicate the keys of other customers' installations
and/or
b) put in zillions of keys to be invalidated all at once, until all possible combos have been covered.
a) is nearly infinitely easier and more immediately devastating. Lots of high profile customers become enraged.
b) will make Vista completely unusable.
--- Grow a pair, liberals... stop letting the Republicans bully you!
Many countries, including Norway, has data retention law that makes it mandatory to preserve certain types of information for future archeologists. I wonder how an archeologist 20 years from now can access data on a system that required activation on a server at a company that no longer support the version.
Also, when a bully gets their arse kicked and people have a good laugh it isn't because they'd like an arse kicking themselves.
Capish?
Check the versions.
This is talking about business and enterprise versions... virtual box restrictions were only for home versions, weren't they?
"Women are just like ninjas; They lie even when it is more convenient to tell the truth." ~ Unknown
Now... if you can hack the revocation part of Vista itself, you'll have the other 50% of a full Vista hack.
Not quite -- you still need to find a way of disabling WGA without preventing updates from working.
Moderators, a little more attention please. He requested to tag the *article* Troll, not the *comment*
Okay, so I'm down to 44 now ...unless you're spoofing it ;P
The funny thing is that I forgot my UID for a few years after I apparently created it, and really paid no attention to UID numbers until someone said, "Wow! Your UID is so low!" one day about a year ago.
Yeah. It's not exactly something in the forefront of my mind, as I type out my wisecracks!
"Flyin' in just a sweet place,
Never been known to fail..."
I am not sure how accurate the article is, but FWIW there it is.
if you consider crashing 1-2 times a night (and most likely, dying in the process) acceptable, then yea. I don't.
And I thought ezquake was the only game you would ever need? It's available for Windows, OS X and Linux.
Running games is how winders got its start. Linux can do it too! All it has to do is crack the monopoly that windows goons have blackmailed onto the games industry. The industry has consolidated in recent years. When winders got its start, game publishers did not care what system ran its games, just so they ran for their customers. There were many players. Then the players started swallowing each other in predatory 'free trade'. Windows' goons took advantage of this and made 'arrangements' with game publishers to secretly manipulate the market. Make game/operating compatibility information secret from non windows operating system manufactureres/packagers. Make it 'illegal' to see the code so that legitamate compatibility code could not be developed and legally sold under a variety of crooked 'antipiracy' laws, etc. With a reduction in the number of players, it became much easier to secure the illegal restraint of trade at a higher and more secret and more efficient level. Just try to get a 'EA' game to run in linux. If you did, you would be put in jail if you published it. No, winders will have to be dealt with on a government level now. Nations allied against the US will have to make it a law and punish winders wankers within their borders. Then those nations could put the fixes on their own government servers and protect those servers with military force. If Ugo Chavez is listening...do this South America wide and the Bolivarian Revolution is at hand as millions of gamers all across latin america sing 'A La Colores'.
I was speaking of the DRM being used as a security module to prevent injection of malicious code into the VM manager, kernel, device drivers, or core system libraries and services. i.e. A hardware-enhanced variant on the kind of checksum validation that AppArmour and older implementations do. Good admins have doing that kind of checksumming in secure environments for decades, but using homebrewed scripts and implementations.
Vista had the opportunity to demonstrate a hardware-enhanced variant on that approach, and blew it.
I do not fail; I succeed at finding out what does not work.
.... I don't like this UID comparing business but 44 goddammit! Hmm, on the brighter side, we finally get a post from one of the Old Ones we keep hearing so much about in all those damn RPGs ! Please don't destroy the world till next year. I am saving for a new graphics card !
Politicians and Pedophiles: Two groups of exploitive bastards who are most dangerous when they're thinking of children.
The .vmx file needs to be edited so as to include commands to start the virtual machine with the RTC set to a particular time (or within an appropriate range). That way every time you start the server, it still thinks there are 41 clients connected.