The German computer magazine CT (English translation using google translate) analyzed the new WGA Notification that is installed during Windows Update. They decided to cancel the installation and immediately after doing so the firewall reported that update.exe tried to connect to the internet. This caught their attention of course and they decided to analyze the data that was send after the connection was established.
They used Wireshark to analyze the traffic and found out that update.exe sends data to genuine.microsoft.com. Some of the data seems to be encrypted while some could be identified. It sends registry information, namely the SusClientID as well as information about the version of the WGA tool, the windows version and the language of the operating system. It also sets a cookie which contains a GUID which could possibly be used to identify the computer.
View: Full Article @ gHacks.net
They used Wireshark to analyze the traffic and found out that update.exe sends data to genuine.microsoft.com. Some of the data seems to be encrypted while some could be identified. It sends registry information, namely the SusClientID as well as information about the version of the WGA tool, the windows version and the language of the operating system. It also sets a cookie which contains a GUID which could possibly be used to identify the computer.
















I beleive if you have a genuine OS on your PC MS should not be allowed to keep pestering you with various WGA. I bought it, now beleive me the first time I tell you!!!
But they are changing it all the time because of a minority of users who have a cracked version of XP. The majority of users are legit...as told by the insane amounts of profits MS make each year.
This WGA is a joke. As soon as it is created within 1 hours it is usually cracked...so what's the point in MS even trying?
Why should the majority of users be made to feel like a thief?
But they are changing it all the time because of a minority of users who have a cracked version of XP. The majority of users are legit...as told by the insane amounts of profits MS make each year.
This WGA is a joke. As soon as it is created within 1 hours it is usually cracked...so what's the point in MS even trying?
Why should the majority of users be made to feel like a thief?
They're not made to feel like thiefs ... its no different than a Security Guard looking at you as you leave a store ...
But if you've been going to the same store for 20 years with the same security guard, then they all of a sudden decide that you need to be completely searched one day, and everyday following, I'm sure you'd feel a little uneasy.
But if you've been going to the same store for 20 years with the same security guard, then they all of a sudden decide that you need to be completely searched one day, and everyday following, I'm sure you'd feel a little uneasy.
But you wouldn't feel uneasy, if you don't know you're virtually strip searched everytime. Bet you didn't knew this was happening before this news was posted
Besides this "call back to home" is happening if you decide to cancel a WGA update, the fact you or anybody else for that matter cancelled a setup at a point when the genuinity of their Windows is about to be determined provides a just cause to do it! I have in the past, used non-genuine Windows if you must know where I'm coming from.
I have said many times, it makes me feel like I am a criminal.
I know also it connects to the net as I see it in my lists that allow connections via my firewall.
So many flaws in this pig of an OS. Squandered time and money. But it would seem they go this piece of user-infiltration just right.
No, LTD doesn't do that, he just sputs anti MS BS and FUD. get used to it.
I control my own pc not Microsoft.
ooo Microsoft takes a report of whether your windows is genuine or not, big deal. If you aren't using a pirated copy you have nothing to worry about it.
Get over yourself.
That's hardly the same.
Microsoft doesn't spy on what you do using your comupter, they just check if Windows are genuine.
The same situation would be if the police would invent some sort of a scanner which would detect drugs in people's homes. Since I don't use drugs, I WOULD be OK with that.
I agree, if your Windows installation is legit, you've got nothing to worry about. Heck, I never even noticed the WGA.
That's hardly the same.
Microsoft doesn't spy on what you do using your comupter, they just check if Windows are genuine.
The same situation would be if the police would invent some sort of a scanner which would detect drugs in people's homes. Since I don't use drugs, I WOULD be OK with that.
I agree, if your Windows installation is legit, you've got nothing to worry about. Heck, I never even noticed the WGA.
I'm glad you've accepted the new police-state policy of scanning your house. Now phase 2 is to insert a rectal probe inside of you and have it painfully jiggle a few times each day to extract a blood sample just to make sure you aren't taking drugs outside of your already-scanned home. Thank you for your cooperation, together we will violate everyone for everyone's own benefit!
The "nothing to hide" argument is so old and so damned flawed it's laughable. It completely misses the point of a personal right to privacy and a right to be informed when an action you are about to commit to may invade that right to privacy.
You're missing the point or completely ignoring it.
update.exe contacts genuine.microsoft.com and uses a cookie with a GUID that can be used to identify that system.
Since WGA has been around, Microsoft has said it can't be used to identify your system. This is proof that it indeed can do it and most likely does. If they weren't sending out info to identify your system they wouldn't need that cookie for anything.
Do you get the point now or are you going to come back and twist some words around and start a different argument?
The simple FACT is that Microsoft is spying on all it's customers that use WGA when they've said they don't do it. They're getting caught in a lie.
WGA is a joke and always has been. Genuine users really don't actually need it installed. There's ways around it that you don't even need cracks for.
What's getting really old is all the genuine users out there being reported as non-genuine because WGA doesn't even work right. Microsoft should really just scrap WGA. It's done nothing but cause issues for MANY genuine users that it was meant to stop.
No, I'm not okay with the Police sticking a camera in my house to watch what I'm doing ...
However, I -AM- okay with the Police looking at my license plate while I'm driving and checking if my car is stolen.
I look at WGA the same way. Except for running the plates on the Highway... They're being checked on the Information Super-Highway.
get the picture, here?
get the picture, here?
Yeah I'm so sure that in just a couple of MB's at the most that they manage to squeeze in a full image with all of your passwords and details.
If you are going to post something ridiculous, at least make it somewhat possible.
As it is even my wife is laughing at the extreme to which you're taking this FUD.
get the picture, here?
Yeah I'm sure thats what Microsoft needs, your porn and emails. Bill Gates personally sits there and wades through it
get the picture, here?
Yeah I'm so sure that in just a couple of MB's at the most that they manage to squeeze in a full image with all of your passwords and details.
If you are going to post something ridiculous, at least make it somewhat possible.
As it is even my wife is laughing at the extreme to which you're taking this FUD.
No reason to post an ugly comment like this.... I am simply pointing out that these unknown transmissions, done with out the user's knowledge is just another example of spyware......... (as MarkJensen stated below). I said nothing about Microsoft using this. However, there are plenty of others who could employ this technology for their own desires. There is a bigger picture here.
get the picture, here?
Yeah I'm so sure that in just a couple of MB's at the most that they manage to squeeze in a full image with all of your passwords and details.
If you are going to post something ridiculous, at least make it somewhat possible.
As it is even my wife is laughing at the extreme to which you're taking this FUD.
No reason to post an ugly comment like this.... I am simply pointing out that these unknown transmissions, done with out the user's knowledge is just another example of spyware......... (as MarkJensen stated below). I said nothing about Microsoft using this. However, there are plenty of others who could employ this technology for their own desires. There is a bigger picture here.
Actually, if it weren't for the fact that you'd see a spike in processor usage, the ability to take a catalog of your software and licenses would be possible. This being said, this could be done to see what software a user is running and wether or not it was legit. At least for MS products. The reg keys could be checked against their databases and they could then see if you were running pirated MS products. They could also get your name, if you gave your real name, computer name and, a hardware report from this as well. Saved to a txt file it wouldn't be all that large, but you'd see the network spike for a sec while it sent. Most users wouldn't notice because to send a .txt that's only a few 100kb in size wouldn't make a noticeable spike. The fact is that MS lied to us again. They said, "we collect no identifying information from you." This was one reason why people were ok with updating the MS OS'es from the net. Personally, I check each and every file on Windows Update and select only what I need, not, what MS thinks I need. Does this mean I know better than MS? No. It means I know more about my machine than MS and I'd personally like to keep it that way. I own it, they don't and until a law is passed that states that a corporation is allowed to control property owned by a person, it's gonna stay that way.
geniune.microsoft.com
if you open the site you get this
This Virtual Directory does not allow contents to be listed.
Direct link to download anywhere?
Then you talk about weed and try to explain what weed is and call people stupid kids.
I used to smoke it. I know for a fact it never made me stupid, but looking at your post I'm starting to wonder if I just got lucky because you sound like you have the IQ of a terd.
My stance is that every unauthorized blurb of personally identifiable bits of information gathered without the user's knowledge is spyware. That is certainly a commonly accepted definition for other 3rd-party apps. The question is, how personal and individual is the encrypted data that is sent? Right now, no one knows, but it doesn't stop the speculation.
So, if Microsoft did or plans on submitting personally identifiable information it is basically a breach of contract and they would face a huge lawsuit. I don't think they are that foolish.
As you said though Mark, it's just speculation.
I'm looking at the XP SP2 EULA right from Microsoft's site, and I see written "concern", but section 2 says, Now, they specifically state (for XP, anyhow) the apps that this covers. WGA is not subject to this statement. Also, they say they do "not obtain personal information through any of these features.", but what constitutes as "personal"? Credit card numbers? Unique license key? Hardware hash? Any serial numbers? No explanation, really.
Though they do also link to an online "privacy statement" that I suppose they can change the content of at any time they please. Users can use Archive.org to try to find the applicable statement if they can certify what date they agreed to the EULA.
I trust Microsoft with personal data as much as I do Google. And I don't trust Google very much.
I'm looking at the XP SP2 EULA right from Microsoft's site, and I see written "concern", but section 2 says, Now, they specifically state (for XP, anyhow) the apps that this covers. WGA is not subject to this statement. Also, they say they do "not obtain personal information through any of these features.", but what constitutes as "personal"? Credit card numbers? Unique license key? Hardware hash? Any serial numbers? No explanation, really.
Though they do also link to an online "privacy statement" that I suppose they can change the content of at any time they please. Users can use Archive.org to try to find the applicable statement if they can certify what date they agreed to the EULA.
I trust Microsoft with personal data as much as I do Google. And I don't trust Google very much.
So here's what I'm wondering then, if that covers the SP2 EULA, did anyone ever see a EULA for WGA? I don't remember one. I mean it is post SP2 which means that it would need a new EUAL or does it fall under the general EULA still?
I don't mind the Police looking at my license plate while I'm driving and checking if my car is stolen... Yes, they do it so they can arrest me, fine... But I look at WGA almost the same way(Without the handcuffs and chains). They're not doing it so they can arrest you, they're just doing it so they can protect their products. It's not really invasive, yes, it can possibly identify you, but so can your registering in the first place. You have that CD Key, it's tied to your hip. "Wooptie Do"
Also, for people saying that a "small amount" of users are using a pirated copy... Don't forget, the US isn't the only country out there. In China around 90% of software there is pirated... That's hardly a "small amount".
Barg.
-
http://www.WindowsVistaUserGuide.com
|Start|
|Run|
Open:
notepad %windir%system32driversetchosts
[OK]
Add line:
127.0.0.1 microsoft.com
|File|
|Save|
genuine.microsoft.com would probably be better to add. This also assumes that the app will take the host file into consideration before forwarding the data -- which it may not.
Besides, WGA only allows you to get extra microsoft updates like ie7 , wmp11 and defender.
The WGA kit is $200. do you really want to pay that much for a crappy browser, and a media player and spyware stopper that match the microsoft brand name?
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.