Lawsuit Claims WGA Is Spyware
twitter writes "Windows Genuine Advantage (WGA), Microsoft's euphemistically named digital restrictions scheme, is the target of another spyware and false advertising lawsuit. 'Microsoft this week was sued in a Washington district court for allegedly violating privacy laws through Windows XP's Windows Genuine Advantage (WGA) copy protection scheme. Similar to cases filed in 2006, the new class action case accuses Microsoft of falsely representing what information WGA would send to verify the authenticity of Windows and that it would send back information [daily IP address and other details that could be used to trace information back to a home or user]. The complaint further argued that Microsoft portrayed WGA as a necessary security update rather than acknowledge its copy protection nature in the update. WGA's implementation also prevented users from purging the protection from their PCs without completely reformatting a computer's system drive.' There were at least two other lawsuits launched in 2006 over WGA. According to the Wikipedia article, none of them have been resolved. The system is built into Vista and Windows 7."
Except that MS has to hand out vouchers for more MS products, giving them an even bigger market share.
[see Sony Rootkit settlement for details]
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
The naming scheme of this add-on somehow reminds me of how certain countries like to add attributes such as "people's" and "democratic" to their official state designations...
It's not Spyware. You agreed to install it. "This agreement may be modified at any time without notice to you and you agree to be bound by its terms. Suck it. Sincerely, Your EULA." As to it phoning home every day, well duh. But what did you expect?
This is Microsoft's official position, afterall -- You're all a bunch of filthy criminals. You can't be trusted. That's why we hide everything in hidden dialog boxes and pop up a dozen warnings in order to delete Internet Explorer from the desktop. You're too stupid to even understand what "delete" means, so we're going to go out on a limb and guess you're pretty trusting of anything that says WARNING! CAUTION! ARE YOU SURE? REALLY? HONESTLY? We're not convinced. Action cancelled. Don't you want to buy an upgrade every year? We want to move to a licensing model that sends us cash yearly. Don't you want to support American business? I mean, what if the Iranians develop an operating system! When you don't install WGA, you're supporting terrorism.
To sign away your rights, click next.
#fuckbeta #iamslashdot #dicemustdie
I'll admit that I don't use Windows anymore. These days I use an iMac and a MacBook Pro for most of my desktop computing, and I almost exclusively deploy Debian on servers. That said, I've been along for the ride with respect to Microsoft products for a very long time, both as a user and an I.T. professional deploying systems on customer networks and writing I.T. policies.
Honestly, most consumers get that "deer in the headlights" look when you try to explain what WGA and similar systems actually do. In many cases, people simply don't care what's being sent to Microsoft, as there's a sense of implicit trust in large corporations. I have no idea where this trust comes from, but it's definitely real. I assume it's largely because the majority of users are largely ignorant of how their systems function, choosing to focus only on what's immediately presented by the OS (applications). There's no psychology degree on my wall, so I'm not qualified to guess further on the topic.
This continuous erosion of privacy gets noticed in the I.T. world, but the general public remains almost completely in the dark. Major media outlets don't carry headline stories about these issues, possibly because their "tech journalists" are barely more educated than their readership on these topics. I have no idea how this can be fixed, but I'd love to hear some suggestions.
512 MB RAM, 20 GB disk, 200 GB transfer, five datacenters. $19.95/month.
I was successfully able to remove WinXP's WGA from my system.... I installed Linux.
No more sales for Microsoft, and no more nagging from software thinking I've got a pirate copy of something just because I upgraded some hardware.
Take Nobody's Word For It.
Kill everyone and start again?
The Windows 7 drinking game so far includes:
* One shot for every "ethnic" face in an install graphic.
* An extra shot if it's pasted over the head of a white person.
* One shot for every white face pasted over the head of a non-white person.
* One shot for every program with the Office 2007 "ribbon" toolbar stuck on it completely inappropriately.
* One shot for every exciting "new" feature that's been in Mac OS and Linux for the past five years.
* An extra shot if the exciting "new" feature's been in Mac OS and Linux for the past ten years.
* One shot every time you reboot during the install.
* One shot every time the system asks to reboot just because it feels like it.
* Two shots every time it reboots even though you said "no."
* Drain the bottle if there's an actual feature that makes Windows 7 so much better than sticking with XP that you'll spend actual money to get it.
* Spitting your mouthful and cursing when Windows Genuine Advantage decides your full-price copy is actually a bootleg.
* A bitter mouthful every time the system blue-screens.
http://rocknerd.co.uk
Tell them that terrorists and pedophiles are using the information gathered, or that your browsing habits will affect this season's X Factor outcome..
Those topics usually get some attention.
So? That doesn't stop it from being all over TPB. Just because WGA isn't cracked yet doesn't mean that you can't still pirate Windows.
Taxation is legalized theft, no more, no less.
Unfortunately Microsoft will probably win this because there's a difference between spyware and an abusive contract. To the best of my knowledge, abusive contracts are perfectly legal, which is why MS got over on IBM so bad. These license agreements which you click before using software have been legally upheld in court, so Microsoft may be doing something immoral, but it's still legal. The only thing that makes spyware illegal is that they bypass a contract and install without the user's permission.
I love to blame Microsoft as much as anyone here but I think this is a case where the lack of legislation is, in a legal sense, to blame. Companies have no legal obligation to behave ethically. I would love to see a law which prohibits these ridiculous lawyer-speak click-contracts. There has to be a better way to protect both the company and consumer.
It does sound as if their main case is that the WGA contract is misleading and dishonest, and if that's true, they may have a case. I wouldn't know because I've never read it and don't intend to. I don't use Windows.
"From the depths of my skeptical and rationalist soul, I ask the Lord to protect me from California touchie-feeliedom."
Namely, even if you never used Windows on your machine, it likely still shipped with Windows, meaning you still paid the Microsoft tax, and you're still feeding into their massively abusive power complex. Just installing Linux is not an answer. Hell, they've used "Linux" as a justification to do this, as they have expertly turned "Linux Users" into "Pirates" in the minds of lawyers and judges with endless spin and false advertisement.
They need to be stopped from pulling this shit, permanently. With a legal solution. With a significant cash penalty. With actual consequences, and not aww-shucks US Justice Department antics.
... but when I bought my computer, I asked for vista to be removed and the price refunded. Hoped from shop to shop until I found one that agreed (in fact I was ready for a trek, but the 3rd shop in the street was the good one). He got the deal, and I bought the refund worth of RAM to top of the computer capacity. I was pleased, and so was the seller.
My laptop is an Asus eeepc 900A linux 'edition'. Again, I carefully reviewed the options before buying.
Speak with your wallet.
WGA is like a body cavity search, but without the rubber glove
I don't mind that my car has a license plate. I don't even mind having to register with the authorities or prove that the car is indeed my own. What really pisses me off is the cameras and systems that track where I'm going by using the information on that license plate, and tying it to my behaviour patterns.
I'm not a law breaker and I'm not paranoid*, I just don't want my behaviour modified by stealthy incursions into my privacy that could result in profiling and ultimately curtailing my choices in where I go, what I see and what I do. WGA is, I believe, just part of a trend that increasingly encourages powerful public institutions to think of people as objects, as statistics, and the effect of treating people as objects is the source of pretty much all I consider crime in the world.
(*I walked by a construction site the other day and the roofer told me that I wasn't paranoid - in morse code. Clever, aren't they?)
Do not mock my vision of impractical footwear
Following that logic, every issue that's not the most important issue is a non-issue. This way of thinking lets corporations chip away at our privacy "because those other guys are doing something worse", until there's nothing left to chip away.
I'd rather you rationally disagree than irrationally agree.
The issue may be privacy. According to the WGA FAQ and an analysis by Groklaw (2006), the following information is sent to Microsoft every time WGA "phones home":
It may be a tad bit disturbing to have all that information being broadcast, but some of it makes sense. Windows Activation is tied to a computer and its hardware, and what WGA is supposed to do is verify that the activation is legit, they'd (presumably) need to broadcast the same information to the WGA servers to verify that activation (since we all know activation can be faked/bypassed).
Microsoft also needs to create a disincentive for people who pirate their software. WGA, besides nagging the user that they have an illegal copy, also prevents optional and recommended updates from being installed, prevents Office users from downloading templates, and prevents the download of certain products/services that would be free to paying customers.
So why is "phoning home" okay? Why not do it once and be done with it? Every day crackers find ways to get around Windows' copy protection. As a developer, Microsoft needs to stay ahead of that and tailor their systems to counter-act innovation on the crackers' part. The opposite is also true: falsely-flagged copies need to be unflagged, or customers will suffer due to them being marked as a false positive. Either way, Microsoft has not kept this a secret, and even promised to reduce checking to once every two weeks (and that was way back in 2006).
I know a lot (probably most) of you guys on here will disagree with me, but I see this as a necessary evil that Microsoft has to perform, and if I were in their shoes, I'd go about it similarly (perhaps be a bit less intrusive). The fact of the matter is, WGA only negatively affects people who either pirated software, or were the victims of software piracy. The privacy argument, in my opinion, is a strawman. If you buy a PC from Dell, it's most likely they already have all that information (save for BIOS MD5 checksum, probably) linked to your customer account. If you buy a PC from Best Buy with a credit card, that purchase information is already linked with the product serial number, which is probably linked with all the serial numbers of the hardware that went into the thing. I don't see how this can be any different than that, other than the fact that Microsoft has it instead of Dell or Best Buy.
Look in your pocket... I'm betting you have a cell phone.
Nope, I just checked all my pockets, no phone there. You lose.
Your phone connects to a tower to "talk" - they know which numbers are connected to what towers at any time of the day.
A connection to a cell tower is required for a cell-phone to work. Sending random data back to Microsoft is not required for Windows to work. See the difference?
of the purpose of WGA is fraudulent - not doubt; German XP versions, not sure if all (?) are forced to install WGA or no further system patches can be installed: Coercion: install WGA or run the risk of a compromised system.
But - let's be clear: There are plenty of other installed programs calling home and why is the Windows firewall so lousy to fail identifying, showing and logging any program trying to get out from the machine? Self-protection, Corporate cover up or plain stupidity of developers?
On other ends: Patents should only be valid as long as the original inventor (no corp legal entities!) is alive and then become public property.
So if my accountant holds up a liquor store, can I keep him out of jail because I can't do my taxes without him?
If Microsoft is too big to fail, the answer is to cut it up until the pieces are small enough.
I suspect you mean http://dictionary.reference.com/browse/moot and not http://dictionary.reference.com/browse/mute.
But I could be wrong, I am on a regular basis.
I can't stand WGA. I have a single WinXP system that I have set up for family to use when they come over because I use Linux and they aren't familiar with the OS. It seems like that every single time that I turn the system on WGA is downloading once again either on its own or with other Windows Updates. It is WGA because any time that I let it install it pops up with the window to let it install, and the rest of the updates won't continue until you hit that finish button.
Can't tell you how many times I accidentally left the "Tell me how WGA enhances my system" button checked, and I love the answer. To paraphrase, "WGA reports back to MS to make sure that your copy isn't pirated." How many times does WGA need to report back, seriously? Like I said, it seriously runs about once a month on this system, not that it is run that often anyway. Shouldn't there be something resident that once WGA checks and confirms authenticity it will remember it.
This is one of the main reasons that I switched to Linux, I haven't had to put of with this garbage in years. No viruses, no spyware, no WGA, no DRM, no hardware lock-in, none of that stuff that is a pain with Windows and Macs.
ReactOS is still being developed. Some day (maybe in five years) it will reach the golden 1.0 standard. It should replace Windows XP and then we can forget about those WGA updates.
WGA has too many false positives and can ruin wallpaper settings (turning the screen to black) and do other annoying things. Plus I keep seeing it installed even if updates are turned off. Currently my system is genuine but if a Firewall software blocks Internet access it thinks it is not genuine. Until I allow the firewall and then hit validate, then everything is OK.
I doubt a majority of Windows users will migrate towards Vista or Windows 7 because of legacy software issues and legacy hardware that cannot run Vista or 7. ReactOS will fill that hole quite nicely when it is done with Windows XP compatibility and no WGA gotchas.
Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
I know of great place to get the latest version of Oracle Enterprise addition for any platform, no license keys, no activation required, no trial periods, no protection at all. Just download it for your favorite platform and install it.
technet.oracle.com
Last time I checked, Oracle is pretty profitable, even though they have no copy protection of any kind. Apparently, the ACTUALLY trust their customers somewhat which puts them in a pretty rare class these days.
Microsoft is only shooting themselves in the foot:
"Be grateful for what you have. You may never know when you may lose it."
Palm hacked USB vendor code which is against the rules you agree to when you use USB. Apple patched it. It is insane that Apple is painted as the bad guy on this one. They deserve plenty of hate for their BS AppStore rules, and overpriced HW, but fixing an exploit that hacks the USB protocol is not one of them.
even if you have a legit copy of Vista then if the WGA auth server goes wheels up and it trys to check in (which it does i think weekly) then you will get flagged plus what happens if somebody decides to hack the auth server and invoke the kill switch??
(or a virus trips the flag while its doing whatever it is doing)
Any person using FTFY or editing my postings agrees to a US$50.00 charge
That final line about how MacOS doesn't have copy protection.....ummm, you can ONLY put it on an Apple branded computer, and there is a price premium built into Apple branded computers already, so the copy protection is there, just not in the normal form.
The OSX EULA is quite clear.
Its got nothing to do with "Apple branded computer"
It very specifically refers to "Apple labeled computer". My emphasis.
The OSX install media comes with Apple labels for you to attach to the computer onto which you are installing OSX.
In the free world the media isn't government run; the government is media run.
From the summary: WGA's implementation also prevented users from purging the protection from their PCs without completely reformatting a computer's system drive.
.bat extension. Make it something like, oh, I don't know, "wganuke.bat."
/d everyone /d everyone /d everyone
This line is so stupid that it hurts, because it makes the assumption that WGA is somehow going to vanish in a puff of smoke if you'll just nuke from orbit and start over. These people should just do the following, if WGA offends them so badly:
1. Make a text file, but give it a
2. Paste the following into your new text file:
echo Y > cacls wgatray.exe
echo Y > cacls wgalogon.dll
echo Y > cacls legitcheckcontrol.dll
3. Save.
4. Double-click on the icon for your new text file.
5. No more WGA (Sorry, no PROFIT! jokes here). Updating also works like a charm. The above was tested on XP SP3, but I have no reason to believe that it wouldn't work on Vista or Win7.
being connected to the internet is not required for windows to work, and then you wouldn't have to worry about WGA. I think I started a tangent that made sense to me on the subject at the moment, but now I see that it was... wrong bat place, wrong bat time.
Copy protection doesn't work. It didn't work in the 1980's and it won't work now.
Let's just stop it here. Let the truth sink in.
That's the problem with the +5 Insightful FAQ poster up there. This would all be okay to bear if it was stopping piracy in the slightest. It isn't. You're foolish to think it would. And the whole "it stops casual piracy" nonsense has been overblown for years; most casuals will just ask a techie to do it for them, or if not, google around and crack the thing themselves. It's not that hard of a process, and you'd be surprised what some people can do when their Windows stops functioning.
WGA is by design SPYWARE. It wouldnt work otherwise.
Method of infection: running WindowsAutomaticUpdate.
I'm looking for some way to block WindowsUpdate from installing WGA...
I have a few ideas but no computer to sarifice yet... Perhaps we can
create locked dummy-files with WGA filenames?
Also, would be nice to be able to block various "Updates" that we dont want...
For now i just manually download updates.exe and run them from a batch file,
WindowsXP-KB938464-v2-x86-SVE.exe /n /norestart /passive
WindowsXP-KB951376-v2-x86-SVE.exe /n /norestart /passive
WindowsXP-KB950974-x86-SVE.exe /n /norestart /passive
WindowsXP-KB951748-x86-SVE.exe /n /norestart /passive
WindowsXP-KB954459-x86-SVE.exe /n /norestart /passive
WindowsXP-KB954600-x86-SVE.exe /n /norestart /passive
WindowsXP-KB956802-x86-SVE.exe /n /norestart /passive
WindowsXP-KB956803-x86-SVE.exe /n /norestart /passive
WindowsXP-KB957097-x86-SVE.exe /n /norestart /passive
WindowsXP-KB958644-x86-SVE.exe /n /norestart /passive
WindowsXP-KB958687-x86-SVE.exe /n /norestart /passive
WindowsXP-KB960803-x86-SVE.exe /n /norestart /passive
WindowsXP-KB961373-x86-SVE.exe /n /norestart /passive
WindowsXP-KB961501-x86-SVE.exe /n /norestart /passive
WindowsXP-KB968537-x86-SVE.exe /n /norestart /passive
WindowsXP-KB969897-x86-SVE.exe /n /norestart /passive
WindowsXP-KB970238-x86-SVE.exe /n /norestart /passive
Brings XP3 properly and safely to July 2009.
I don't get this, don't u just go download FixWGA from the nearest torrent site, and then be done with it? Honestly - frivolous lawsuit!
I think therefore I can't be ~TTNH
OS X 10.5 had the 'Apple-labeled' term, but 10.6 has the 'Apple-branded' term. It is also dubious that slapping a sticker, even one supplied by Apple, makes that computer Apple-labeled or Apple-branded.