Neowin.net UPDATED "All IP protection technologies will be cracked at some point; it's just a matter of time," Allen Nieman, Product Manager of Activation at Microsoft, told BetaNews in an interview last May. But this week Nieman's concession became a reality as a key generator capable of creating unique, valid installation and activation codes for Windows XP came to light.
While patches and cracks for Windows Product Activation have existed since the release of Windows XP, would-be pirates were forced to physically modify system files and risk invalidating their operating system with updates. If it desired, Microsoft has the ability to instantly void such cracks or leaked keys with service packs or security patches. While patches and cracks for Windows Product Activation have existed since the release of Windows XP, would-be pirates were forced to physically modify system files and risk invalidating their operating system with updates. If it desired, Microsoft has the ability to instantly void such cracks or leaked keys with service packs or security patches.
The key maker, apparantly released by a group calling themselves "The Blue List," poses a more significant problem to Redmond - discerning legit keys from those generated by ill-intentioned users.
Microsoft has always been quick to point out that pirated copies of Windows are ineligible for technical support and warranty protections. Although if the created keys are indeed genuine, a user running a shared or downloaded copy of Windows will appear no different to Microsoft support personnel than one who purchased a copy in the store.
"The only way Microsoft would know it's a generated serial in this case is if customer service asks for the x0- number on the CD and that is highly unlikely," an informed source told BetaNews.
Most surprising is the relatively little work it takes to compute a valid key. Tests by BetaNews resulted in two keys and twenty-nine failures in just under seven minutes of heavy CPU usage. As the included information states, "not every random cd-key [can] be made valid, so it usually needs more than one try to compute a valid cd-key." Both keys were each able to correctly activate a retail copy of Windows XP in the test lab.
Microsoft said it was currently looking into this particular "potential crack of product keys." A company spokesperson told BetaNews, "As with all of our anti-piracy technologies, Microsoft anticipates that there will be attacks on these technologies and works to ensure a rapid response. Microsoft is committed to taking down any illegal postings of bypass keys or illegal software. It is important to note that Microsoft's Product Activation technology is one of many measures the company is taking to address software piracy. Thwarting software piracy on many levels is not done with a single, silver bullet. Microsoft will continue to improve activation and other intellectual property protection methods over time."
But in the eyes of Microsoft, WPA may have already far exceeded the company's expectations. "The measure of success is not completely stopping software piracy, which is probably an unattainable goal. Success is more likely measured in increased awareness of the terms of the license agreement and increased license compliance," said Nieman last summer. With WPA one of the hottest topics of 2001 and Windows XP out-selling its predecessors, there is no doubt Microsoft has done just that.
While patches and cracks for Windows Product Activation have existed since the release of Windows XP, would-be pirates were forced to physically modify system files and risk invalidating their operating system with updates. If it desired, Microsoft has the ability to instantly void such cracks or leaked keys with service packs or security patches. While patches and cracks for Windows Product Activation have existed since the release of Windows XP, would-be pirates were forced to physically modify system files and risk invalidating their operating system with updates. If it desired, Microsoft has the ability to instantly void such cracks or leaked keys with service packs or security patches.
The key maker, apparantly released by a group calling themselves "The Blue List," poses a more significant problem to Redmond - discerning legit keys from those generated by ill-intentioned users.
Microsoft has always been quick to point out that pirated copies of Windows are ineligible for technical support and warranty protections. Although if the created keys are indeed genuine, a user running a shared or downloaded copy of Windows will appear no different to Microsoft support personnel than one who purchased a copy in the store.
"The only way Microsoft would know it's a generated serial in this case is if customer service asks for the x0- number on the CD and that is highly unlikely," an informed source told BetaNews.
Most surprising is the relatively little work it takes to compute a valid key. Tests by BetaNews resulted in two keys and twenty-nine failures in just under seven minutes of heavy CPU usage. As the included information states, "not every random cd-key [can] be made valid, so it usually needs more than one try to compute a valid cd-key." Both keys were each able to correctly activate a retail copy of Windows XP in the test lab.
Microsoft said it was currently looking into this particular "potential crack of product keys." A company spokesperson told BetaNews, "As with all of our anti-piracy technologies, Microsoft anticipates that there will be attacks on these technologies and works to ensure a rapid response. Microsoft is committed to taking down any illegal postings of bypass keys or illegal software. It is important to note that Microsoft's Product Activation technology is one of many measures the company is taking to address software piracy. Thwarting software piracy on many levels is not done with a single, silver bullet. Microsoft will continue to improve activation and other intellectual property protection methods over time."
But in the eyes of Microsoft, WPA may have already far exceeded the company's expectations. "The measure of success is not completely stopping software piracy, which is probably an unattainable goal. Success is more likely measured in increased awareness of the terms of the license agreement and increased license compliance," said Nieman last summer. With WPA one of the hottest topics of 2001 and Windows XP out-selling its predecessors, there is no doubt Microsoft has done just that.
