About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Window Manager
Brian Livingston

Shiver me timbers

ONE OF THE few truly new features in Microsoft's forthcoming Windows XP operating system is called Windows Product Activation, or WPA. As I've written for the past two weeks, WPA is an irritating control scheme that can, under certain circumstances, require that you contact Microsoft via the Internet or telephone to obtain a new numeric key that "activates" (unhinders) XP's operation.

   ADVERTISEMENT
  

Free IT resource

Open Source Business Conference (OSBC) May 22-23, 2007

Sponsored by OSBC

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  Canonical chases deals to ship Ubuntu Server preinstalled
»  Sun delivers first UltraSparc T2-based servers
»  IT trainer offers master's degree for hackers
»  Platforms RSS feed 

IDG ENTERPRISE NETWORK
More Operating Systems News...  (ComputerWorld)
CrossOver Office aims to ease a switch to Linux  (ComputerWorld)

TOP NEWS 


IT SOLUTION SEARCH
Microsoft has promoted this new behavior as a means to reduce mass software piracy, a goal we all share. But I've found that WPA won't slow down software pirates at all. Instead, it has a different purpose, which I'll explain momentarily.

As described by independent sources -- and recently confirmed in a Microsoft white paper (see www.microsoft.com/technet/prodtechnol/winxppro/evaluate/xpactiv.asp) -- WPA examines the value of 10 hardware components when XP is first activated on a PC. These components are: (1) CPU type; (2) CPU serial number; (3) boot drive; (4) boot drive serial number; (5) network adapter; (6) RAM amount range, such as 0-64MB, 65-128MB, etc.; (7) display adapter; (8) IDE adapter; (9) SCSI adapter; and (10) CD or DVD drive. XP identifies some of these devices by reading their actual serial numbers and identifies others by their embedded text strings, such as "scsi-ibm."

WPA is dependent on Wpa.dbl, a file stored in XP's System32 folder. This file is so easy for software counterfeiters to reproduce that it poses no barrier to them at all, as first revealed by tecChannel, an IDG publication in Germany.

In an installation of XP made from a retail CD, changing four out of 10 components triggers a need for "reactivation." But if a PC is configured as "dockable," then its display, IDE, and SCSI adapters are ignored and don't count if they change.

Software pirates, therefore, need only configure a PC as "dockable" (a simple matter), switch off the serial number of the CPU, and alter the serial number of the boot drive. Pirates can then create thousands of working PCs using a single Wpa.dbl file. The counterfeiters can build PCs that vary as many as three of the following components: CPU, RAM amount, network adapter, boot drive, and CD/DVD drive. As far as WPA is concerned, no reactivation is needed (see www.tecchannel.de/betriebssysteme/746/0.html).

tecChannel's testing was originally based on XP's Release Candidate 1. Senior Editor Mike Hartmann confirmed to me, however, that the shipping version of XP still acts the same way.

WPA is not weak due to poor programming. It was deliberately made weak to permit the kinds of hardware changes people make in the real world.

WPA, in truth, wasn't designed to impede true pirates but to stop novice users from installing a second copy on a laptop or a child's PC. The fallout will be huge, as we'll see next week.


Brian Livingston's latest book is Windows Me Secrets. Send tips to tips@brianlivingston.com. Go to www.iwsubscribe.com/newsletters to get Window Manager and E-Business Secrets free each week via e-mail.




RELATED SUBJECTS

Operating Systems
Business News

MORE >


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.
» Find Consulting Jobs
Access Pre-Qualified Projects from Top Businesses. Register Now!
» Virtualization Planning & Analysis White paper
How to analyze workload, business and technical constraints & plan for successful deployments
» SOA Whitepaper Series: Automating Process Exceptions
Register here for this valuable Webinar centering on the automation of process exceptions.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no