main
Report a problem

Bypass found for Windows piracy check

Steven Parker   on 24 May 2005 - 09:49 · 37 comments & 6137 views

Advertisement (Why?)
Cnet news is reporting that Researcher Debasis Mohanty (bio) has posted a full explanation on how to bypass Microsofts WGA (Windows Genuine Advantage) Check.

A quick search on Google returned this post, originally submitted to the Full Disclosure mailing list, titled 'Defeating Microsoft WGA Validation Check'. Microsoft replied to Mohanty in an email stating "The generated code is partly made up of a timestamp, which would prevent use after a short period". Further testing by Mohanty returned a different result; "However, I checked this on a pirated copy of Windows XP Pro and installed couple of public beta products and tools for testing purpose. They are still up and running since past 1.5 months."

In a response to Cnet, an unnamed representative from Microsoft maintained that this posed "very little threat to Microsoft". The WGA check tool, which is downloaded to the computer and executed is still in testing and won't be fully implemented until around the middle of this year. After that date all Windows 2000 & XP users will be required to 'validate' their copy, before downloading anything from Microsofts websites.

WGA was added to the Microsoft Download Center late last year, and does not require Windows XP to be activated. Microsoft has not yet responded to Neowin on this issue, but we'll be keeping our eyes & ears on the ground for any more developments to this story.

View: Microsoft Download WGA Check Example | About Validation
View: Defeating Microsoft WGA Validation Check @ Seclist.org

Post a comment · Send to friend Comments · There are 37 additional comments
(1 reply) #1 on 01 Jan 1970 - 00:00
#1.1 Neobond on 24 May 2005 - 10:10
I added a Bio link. Hope this helps.
(1 reply) #2 on 01 Jan 1970 - 00:00
#2.1 Neobond on 24 May 2005 - 10:16
We aren't journalists here at Neowin, but we try to from time to time, to formulate as much news possible ourselves. Microsoft had already outlined that they didn't see this as a threat, I also contacted Microsoft myself, who have yet to respond (I did this 4 hours before submitting this piece).

I don't believe I'm condoning this anymore than when we reported on Bypassing Windows Activation (which most sites on the internet picked up on, in a very similar manner).

Anyway, at least I researched this a little and gave the reader a lot more url references to look through, which is something I can't say for many others.
(1 reply) #3 on 01 Jan 1970 - 00:00
#3.1 Neobond on 24 May 2005 - 11:07
I agree its a detterent, but I also think its a scaled down Activation tool, because there is so many ways to be able to use a pirated version I also agree its more focused at OEMS and suppliers that may think they can get away with one license on many machines (pre-installs, rather than disc's).

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)