Man, this does not sound like much of an ‘advantage’ to me! Well, unless you are into exploits, anyway. I guess it goes to show that no matter how hard someone tries to protect something, if someone else wants to find a way around it badly enough, they will.
There’s a major chink in Microsoft’s Windows XP anti-piracy armor, although Windows users are not at risk of security attacks.
A security researcher in India has discovered an uncomplicated and easy-to-exploit weakness in Microsoft Corp.’s WGA (Windows Genuine Advantage), an anti-piracy initiative that checks whether consumer and small-business customers are running legitimately licensed copies of Windows XP.
Debasis Mohanty, a private vulnerability researcher and analyst of malicious programs, published a detailed proof-of-concept demonstration to show how the WGA validation check can be defeated to generate key codes for use on illegal copies of Windows XP.
Mohanty’s findings come as the world’s largest software maker prepares a mandatory rollout of the program.
Microsoft has been testing the Genuine Advantage program through its Download Center, where users are urged to validate their copies of XP before obtaining certain software updates, patches and fixes.
If users decide against validating, they are still allowed to obtain the requested downloads, but later this summer updates will only be pushed out to valid copies. Security updates will not require validation, even after WGA goes mandatory. [Read the rest]