The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  Vista Brute Force Crack Steals From Consumers, NOT Microsoft
Time: 00:41 EST/05:41 GMT | News Source: WindowsNow | Posted By: Kenneth van Surksum

It seems that people are really desperate NOT to pay for Windows. It seems that someone who was "just testing his VBScripting skills" has posted a routine that attempts to activate a pirated copy of Windows Vista by brute force. That means that the script increments through methodically generated keys, and attempts to pass it on to Microsoft's activation servers for validation. If it fails, the generator moves on to the next one, until it finds a valid key. The author says this process can take anywhere from 2 hours to two days. Adrian explains how it works here.

Here's the problem with this, folks. Previous Windows cracks have used leaked corporate activations keys to unlock Windows, which only really hurts Microsoft. This method actively steals a valid Product Key from Microsoft customers, because most keys can only be activated once. Think about that for a second. What if your mom just got home from laying down $150 for Windows Vista Home Premium, only to get it home and install it, and find out that their key has already been activated. Now, Microsoft doesn't get hurt, because the key has been paid for.

Read Only Comments
Return to News
  Displaying Comments 1 through 10 of 10
  This is an archived static copy of ActiveWin.com.
#1 By 2960 (24.254.95.224) at Monday, March 05, 2007 01:31:55 AM
Can't read the whole story because the link results in a server error, but from what I read here, MS is saying if my Mom buys Vista, takes it home, and it won't activate, it's HER problem.

Don't EVEN try that Bullshit, Microsoft.

TL

#2 By 10782 (195.169.95.1) at Monday, March 05, 2007 03:29:12 AM
The bruteforce attack seems to be a hoax: http://keznews.com/forum/viewtopic.php?t=2782

#3 By 12071 (124.168.205.173) at Monday, March 05, 2007 06:07:51 AM
#2 It's not a hoax, the brute force attack is exactly that, a brute force attack. The problem is that a brute force attack on a 25 digit key where each character can have 20+ possibilities is close to unrealistic. You don't need to try all the combinations to get a valid key, but unless your lucky you could very well be searching longer than your lifetime for a valid key for an OS that's going to be outdated in 5-10 years time. i.e the bottom line is that it's just not worth it.

Those wanting to crack Vista have been doing it for months using the timestopper or KMS method. Those wanting to now activate Vista can either update their BIOS and use the OEM keys (via APIC_SLIC) or download a software driver that will emulate their BIOS having the APIC_SLIC tables! It actually takes less effort to install the software driver than it does to active a real copy. So much for stopping piracy! Anyone who tells you that Microsoft is trying to protect it's legal customers has an agenda to push as it quite clearly doesn't stop any kind of piracy, not even the "here's a copy off my friend" kind.

Finally, TechLarry is right, if someone does manage to generate a valid key (good luck to them!) and a legitimate customer's key is taken then this is going to end up being Microsoft's problem not the customers. After all, they are trying to protect their legal customers... right? :)

#4 By 1896 (68.153.171.248) at Monday, March 05, 2007 07:21:13 AM
Well, just in case put in a safe place your Vista receipt.

#5 By 45754 (164.140.159.143) at Monday, March 05, 2007 08:15:33 AM
Concerning the comment of #3. See: http://www.haklabs.com/2007/bypass-vista-activation-with-paradox/ for more info on this way of activating Vista

#6 By 2332 (66.92.78.241) at Monday, March 05, 2007 10:29:24 AM
This was confirmed to be a hoax.

Randomly generating activations keys is virtually impossible. These are not sequential numbers/letters.

Trying to generate these keys is akin to trying to generate valid combinations of credit card numbers / expiration dates / security codes all at once.

It's simply not feasible, and it certainly wouldn't yield any successes in 2 hours.

Come on people.

#7 By 2332 (66.92.78.241) at Monday, March 05, 2007 10:32:23 AM
#3- "So much for stopping piracy! Anyone who tells you that Microsoft is trying to protect it's legal customers has an agenda to push as it quite clearly doesn't stop any kind of piracy, not even the "here's a copy off my friend" kind. "

Microsoft has long stated that stopping all piracy is probably impossible. That has never been their goal.

Their goal is to use WGA / Activation to stop casual piracy. It is to stop your buddy from just giving you his copy of Windows. It is to identify pirated copies of Windows sold to unsuspecting consumers.

It has never been intended to stop the "hardcore" pirate crowd.

By all accounts, Microsoft's anti-piracy strategy has worked extremely well.

This post was edited by RMD on Monday, March 05, 2007 at 10:33.

#8 By 7754 (63.163.14.170) at Monday, March 05, 2007 12:21:52 PM
TL--it hurts them both, and it's a problem for them both. Why do you automatically it's Microsoft trying to screw people over? This isn't an article BY Microsoft... sheesh.

There's sort of an implied notion in the article, though, that if it hurts Microsoft, well, no big deal. Chris_Kabuki--"good luck to you"--how about I say, "Good luck to the guy making copies of keys to break into your house with their 'random house key generator.'" If such a device existed, what kind of reaction do you think people would have? "Good luck to them!"? Of course, the fault is upon the maker of the door lock. Or wait, people shouldn't be securing their house in the first place, right?

#9 By 3746 (72.12.166.62) at Monday, March 05, 2007 02:51:16 PM
I always thought their main goal with WGA was to catch mom and pop computer stores that were selling computers with ripped off copies on it. People think they are getting a legit copy and then they get the message so they contact MS who then goes after these pirates. Nothing is going to stop someone who wants to rip something off but going after businesses who are making money selling illegal licenses is good.

#10 By 12071 (124.168.205.173) at Tuesday, March 06, 2007 04:23:28 AM
#7 "That has never been their goal."
Thank you for clearing up Microsoft's stance on this - I take it this means that you have the authority to speak on their behalf or at least are privileged to inside information to know what their goals are and are not.

"Their goal is to use WGA / Activation to stop casual piracy."
It hasn't and won't stop casual piracy (or any other piracy that you wish to name).

"It is to stop your buddy from just giving you his copy of Windows"
Their "buddy", or their "buddy's son" has already given them a simple executable to execute once they're done installing Windows since November 2006. These days the executable has changed but the function is much the same, although better as their copy is now activated.

"It is to identify pirated copies of Windows sold to unsuspecting consumers."
This keeps being brought up and I honestly have to ask who are these unsuspecting consumers and where do they live? Honestly? If they're paying a much cheaper price than everywhere else then deep down inside they know what they're buying! If they're paying the same price... well then they aren't going to a dodgy place to begin with!

"By all accounts, Microsoft's anti-piracy strategy has worked extremely well."
Thanks once again for all the scientifically based information! I never would have know that if it weren't for you!

#8 You obviously didn't understand my first paragraph very well as otherwise you would have seen the invisible <sarcasm> tags around "good luck to them!". Seriously, if you think you can generate a key with that many combinations, good luck to you!

As for the rest of your post, get your knickers out of a knot, such a device does exist, it's called a lock picking set! Here you go, start complaining to whomever will listen:
http://www.lockpickshop.com/c-LS.html

Of course there are three differences...
- the guy with the lock pit set has a MUCH better chance of breaking into your house than the guy trying to generate a valid key for Vista.
- you don't need to activate your lock and you can put it into any door you like without having to go seek the approval of the manufacturer each time.
- if there's a fault with the lock, the manufacturer will replace it without making you jump through hoops to prove that you're the legitimate owner!



 

  *  
  *   *
 
replica watches