Is That Pirated Software? 758
underpar writes "According to this ZDNet.com article, Microsoft 'has launched a pilot program in which some visitors to the main Windows download page are being asked to let the software maker check to see whether their copy of the operating system is licensed.' The check is not required, but after the desired 20,000 users go through the program they might change their tune."
Re:windows download? (Score:3, Informative)
It checked mine! (Score:5, Informative)
A few weeks ago I was trying a link to the next version of Windows Update, which was not publically released but someone had published it somewhere on the net. It checked my machine and told me my XP key was invalid. (My machine has a VLK 6n1 XP installed on it.) So there are indeed some windowsupdate URLs which do check and do reject!
p.s. I own three legal copies of XP of course, but the slipstreamed SP2 disc is just handy and the only one I keep laying around.
Re:Buyer's remorse (Score:3, Informative)
Re:Likely use... (Score:2, Informative)
Spyware (Score:3, Informative)
Re:Firefox? (Score:3, Informative)
Thank you for your interest in Windows Update
Windows Update is the online extension of Windows that helps you get the most out of your computer.
You need to be running a version of Internet Explorer 5 or higher in order to use Windows Update.
Download the latest version of Internet Explorer
Once Internet Explorer is installed, you can go to the Windows Update site by typing http://windowsupdate.microsoft.com into the address bar of Internet Explorer.
If you prefer to use a different Web browser, updates to Windows may be downloaded from the Microsoft Download Center.
I see no problem with this (Score:1, Informative)
I've purchased 2 Win XP Pro licenses for my 2 PCs and will purchase another when I get my 3rd PC. I have no problem making Bill Gates a few hundred dollars richer - it's called Capitalism. And Win XP is a great OS, far superior for my desktop needs compared to BSD or Linux. Besides, I always purchase the OEM versions which are only $140 if you also buy a qualified hardware item such as CPU, RAM, HD, Video, or MB (and maybe more items as well).
Re:Buyer's remorse (Score:5, Informative)
for info on the slipstreaming, check out: http://www.windows-help.net/WindowsXP/winxp-sp2-b
Also, the utility Nlite http://nuhi.msfn.org/ [msfn.org] will slipstream service packs and updates onto a disk image for you. It will also remove stuff off the windows disk, like drivers you don't need, apps you don't need, even Internet Explorer. Personally, I like that you can take MSN Explorer, Messenger, and other non need programs that are security risks. I haven't used the program yet, but it seems like a very nice one. You can also put the cdkey in the install program so you don't have to enter it when your installing. sweet.
Bluescreen is OFF by default in XP (Score:5, Informative)
(I leave my PC on 24/7 and only discovered this when I would return home and my PC was magically back at a fresh reboot state. For a while I thought I had a hardware problem because if Windows had crashed I would've seen a blue screen halt, right?)
While I get fewer blue screens then I did with 98, I get MORE blue screens than I did with Windows 2k.
Re:Firefox? (Score:2, Informative)
Re:How do they stand to gain? (Score:5, Informative)
Stop Windows Piracy! (Score:5, Informative)
Re:Buyer's remorse (Score:5, Informative)
You don't get BSOD's on XP, because XP is set to reboot instead.
[from http://aumha.org/win5/a/shtdwnxp.php]
Right-click on My Computer, click Properties, click the Advanced tab. Under "Startup & Recovery," click Settings. Under "System Failure," uncheck the box in front of "Automatically restart."
Do that, and you'll see all the typical BSOD's that you've been missing.
Re:How do they stand to gain? (Score:3, Informative)
His unofficial answer was that as long as you held a valid certificate of authenticity and used that number in only that machine, then it was not a problem.
What I have been curious about is the situation where you purchase a used machine that includes an original valid certificate of authenticity.
Comment removed (Score:5, Informative)
Re:Buyer's remorse (Score:2, Informative)
XP is better than 95/98/Millennium, but is less reliable than 2000. It still doesn't touch any free / open source Unix (including OS X) for reliability. Once you start serving files or doing anything even remotely heavy-duty (like encoding video) the system begins to break down.
So, while you can insist that XP never BSODs unless it's due to user error, people will know you are a liar and full of shit!
Its quite simple. (Score:1, Informative)
Re:P2P Updates (Score:3, Informative)
I'm not sure what affect this will have on the people in other countries, (like Russia) but I doubt the effect will be noticable. The pirates will just introduce some russian site to give the updates or something, no big deal.
Why Windows users don't upgrade so quickly (Score:5, Informative)
In my environment, where we have good and competent central IT support, but do not mandate what our clients (researchers) can run on their desktops, we've found that a lot of people simply do not see any compelling reason to upgrade Windows. By and large, people move from one Windows version to the next when they get a new PC. This is in contrast to our Mac OS X population, who upgrade quickly, and our Linux population, who are in between.
Licensing is not an issue, since we have site licenses for Windows, Mac OS X, and other systems. We have a Windows subscription that allows us to upgrade any Windows install to any later version; and the same for Mac OS X. For Linux, it is of course no problem.
Today, about 60% of the computers on our network are running Windows, according to my p0f [coredump.cx] results. About 15% each are running Linux and Mac OS X, and the remainder are running a "classic" Unix or Mac OS Classic. Of the Windows users, about 60% are running Windows 2000, 35% are running XP, and the remainder are running Windows NT, 98, or older versions.
So why don't Windows users upgrade? My suspicion is that there is not sufficient benefit from upgrading to make up for two persistent problems: retraining oneself, on the one hand; and broken or lagging third-party software, on the other.
First off, major releases of Windows make substantial disruptive user interface changes. Windows users, in my experience, tend to memorize a lot of rote behaviors -- I do this to dial up, that to search for files, the other to set up printers. The upgrade from Windows 98 to 2000, and then from 2000 to XP, each make a lot of relatively gratuitous changes. (Contrast the XP Control Panel with the 2000 one. Even if you like the XP one better, you've got to admit it looks unfamiliar to someone used to the other.)
Second, a lot of third-party apps break when you upgrade Windows. The version of Matlab the user has installed on Windows 2000 quits working on XP, and so they have to rev Matlab as well. Oops, the Matlab script they got from NASA doesn't work on the new Matlab; gotta get the new one of those. And so it goes. Scientific software is frequently not particularly robust over operating system changes. So an upgrade is a lot more pain for our users than it might be for a business user who does nothing but Word, Outlook, and IE.
Some contrasts from the other platforms:
Our Linux installed base is probably around 90% Red Hat, and the remainder Debian or SuSE -- with almost all of the Debian systems being central IT servers, since we prefer it for its stability there. The Red Hat users are impelled to upgrade chiefly by the obsolescence of older releases: when Red Hat dropped support for 6.2, we had a big migration to 7.x; when they dropped 7.3, to 9; and now to Fedora and RHEL. The driving force behind Red Hat upgrades, for our users, is chiefly the assurance of support and security fixes. I expect that this will calm down a lot now for our RHEL users, who have been promised a stabler upgrade cycle.
(For our Debian systems, in contrast, the drive to upgrade (when a new release comes out!) is to have access to the vast new supply of native packages.)
As for our Mac OS X users, they are the quickest to jump on new releases. Why? I think it's because Apple promotes their new releases with lots of new user features: utilities, non-disruptive appearance tweaks, and speed improvements. I can't emphasize the latter too much: each release of Mac OS X has made it faster, and this is a big reason for a scientist (or a ordinary end user, for that matter!) to upgrade.
It's been said that Microsoft's chief competition today is itself, five years ago -- that is, rather than contending for market share against Apple, Red Hat, or SuSE, each new re
Re:Buyer's remorse (Score:3, Informative)
Re:Buyer's remorse (Score:3, Informative)
Anyway, the thing is that if the system you need crashes every few months, a Linux, Win2000 or WinXP would stay running for ever. But if Win98 fits you needs, by all means, don't listen to anybody and enjoy it
hmm (Score:2, Informative)
MS office, dreamweaver, photoshop, are my major apps I run in crossover office, and they are very usable. I very rarely use my windows partition on my laptop, and then I only do it to install firmware updates to my iPod (I use the cxitunespreview release to use itunes in linux
Re:Why Windows users don't upgrade so quickly (Score:3, Informative)
As far as my "official" reply, I would install Win2k because I don't want MS messing around asking people questions about where they got the license. *wink, wink*
Comment removed (Score:5, Informative)
Re:Buyer's remorse (Score:3, Informative)
When you buy an OEM copy of windows you are buying stolen property. It can be taken away from you at any time.
Re:Firefox? (Score:3, Informative)
Unless you're using IE5.5 or 6.0 you can't do jack shit on the site. Basically, unless you use their browser you can't update your OS (outside of automatic/downloaded updated from their website.
ReactOS (Score:3, Informative)
http://www.reactos.com/en/content/view/full/6056 [reactos.com]
FYI (Score:5, Informative)
Decode ......", where 'B'=0, 'C'=1, 'D'=2 ... we call the array "6 1 3 22..." base24[]
compute decoded = , the result is: 00 C5 31 77 E8 4D BE 73 2C 55 47 35 BD 8D 01 00 (little-endian)
The decoded result can be divided into 12bit + 31bit + 62bit + 9bit, and we call theses 4 parts 12bit: OS Family, 31bit: Hash, 62bit: Signature, and 9bit: Prefix.
The following computations are based on this product key: JCF8T-2MG8G-Q6BBK-MQKGT-X3GBB The character "-" does not contain any information, so, the MS product key is composed of 25-digit-character. Microsoft only uses "BCDFGHJKMPQRTVWXY2346789" to encode product key, in order to avoid ambiguous characters (e.g. "I" and "1", "0" and "O"). The quantity of information that a product key contain is at most . To convert a 25-digit key to binary data, we need to convert "JCF8T2MG8GQ6BBKMQKGTX3GBB" to "6 1 3 22
Verify
If you want to understand what I am talking about in this section, please refer to some Elliptic Curve Cryptography materials. Before verifying a product key, we need to compute the 4 parts mentioned above: OS Family, Hash, Signature, and Prefix.
Microsoft Product-key Identification program uses a public key stored in PIDGEN.DLL's BINK resource, which is an Elliptic Curve Cryptography public key, which is composed of: p, a, b construct an elliptic curve G(x,y) represents a point on the curve, and this point is so called "generator" K(x,y) represents a point on the curve, and this point is the product of integer k and the generator G.
Without knowing the private key k, we cannot produce a valid key, but we can validate a key using public key:{p, a, b, G, K}
compute H=SHA-1(5D OS Family,Hash, prefix, 00 00) the total length is 11 byte. H is 160-bit long, and we only need the first 2 words. Right lift H's second word by 2 bits. E.g. if SHA-1() returns FE DC BA 98 76 54 32 10, H= FE DC BA 98 1D 95 0C 04. compute R(rx,ry)= Signature * (Signature*G + H*K) (mod p) compute SHA-1(79 OS Family, rx, ry) the total input length = 1+2+64*2=131 bytes. And compare Hash and result, and if identical, the key is valid.
Producing A Valid Key!
We assume the private key k is known (sure, Microsoft won't public this value, so we have to break it by ourselves). The equation in the product key validation system is as below:
Hash=SHA(Signature*(Signature*G+SHA(Hash)*K) (mod p))
What we need is to calculate a Signature which satisfies the above equation. Randomly choose an integer r, and compute R(rx,ry)=r * G Compute Hash= SHA-1(79 OS Family, rx, ry) the total input length = 1+2+64*2=131 bytes, and we get the first 62bit result. compute H=SHA-1(5D OS Family,Hash, prefix, 00 00) the total length is 11 byte, and we need first 2 words, and right lift H's second word by 2 bits. And now, we get an equation as below:
Signature*(Signature*G+H*K) = r * G (mod p)
By replacing K with k * G, we get the next equation:
Signature*(Signature*G+H*k*G) = r * G (mod p) , where n is the order of point G on the curve
Note: not every number has a square root, so maybe we need to go back to step 1 for several times.
Get Private-key From Public Key
I've mentioned that the private key k is not included in the BINK resource, so we need to break it out by ourselves. In the public key:
K(x,y) = k * G, we only know the generator G, and the product K, but it is hard to get k. The effective method of getting k from K(x,y) = k * G is Pollard's Rho (or its variation) method, whose complexity is merely , where n is the order of G. (n is not included in public key resource, so, we need to get n by Schoof's algorithm) Because a user cannot suffer a too long product key, the Signature must be short enough to be convenient. And Microsoft chooses 62 bit as the length of signature, hence, n is merely 62-bit long. Therefore, the complexity
Re:P2P Updates (Score:5, Informative)
What are talking about? XP has exactly the same paths as 2000.
disable the "new" control panel (note that in the new control panel, there are icons that you cannot reach from the groups it displays, most notably 3rd party extensions, but a few microsoft things too), etc.
Again, eh? Open control panel, click "switch to classic view". How could you miss it?
XP is just as easy to use, if not more. And with the stuff provided by SP2 (firewall, virus check, update checks), it's the obvious choice for a non-techy user.
Re:Here's what I think about the whole thing (Score:3, Informative)
How in the hell did you get a computer if you have no money?
Where I live, computers are given away free to people who cannot afford them. No, it's not government; no, it's not commercial. It's a community project: old computers are collected from those who don't need them any more, repaired and refurbished if necessary, and given to those who do.
Is that how you get your internet service too?
We have a community project to provide free wireless internet service too.
You might be surprised to learn how many people cannot afford to use computers or access the Internet. For many people, the only access to computers or the Internet is via a public library, and that's often impractical to use if you have a full time job.
For such people, the cost of a Windows XP license is out of the question. This is only a problem when they are asked to use some Windows-only software, of course, but that does occur. We like them to use Linux and OpenOffice, but there are occasions when a document doesn't display right in MS Word and not being able to say you used Word to create it puts you at an economic disadvantage.
-- Jamie