Who had 6 days in "When will Vista Activation be Hacked" pool?
Pirates spoof Vista's enterprise activation
Pirates are circulating a hack that lets them activate counterfeit copies of Windows Vista using a spoofed server that Microsoft relies on to make sure enterprises switch on the new operating system.
The software, loaded with the long name of "Microsoft.Windows.Vista.Local.Activation.Server-MelindaGates" is available on several pirate websites. It spoofs a Key Management Service server, one of the two technologies that Microsoft debuted last month that let businesses activate a large number of copies of Windows Vista. KMS requires that at least 25 PCs be connected to a corporation's network.
Vista is the first version of Windows that Microsoft requires volume license customers to activate. Besides KMS, the developer also offers Multiple Activation Key, which resembles the retail version's activation process. PCs activated using KMS must reactivate at least once every six months.
The MelindaGates hack uses a VMware image of a KMS server to activate - and keep activated - a pirated edition of Windows Vista Business. "Looks like Windows Vista Volume Activation 2.0 is a big bust," wrote a user identified as "clank" on the PirateBay website Friday.
It is amazing to me that this can be spoofed by such an obvious method. This isn't some seasoned hacker with mad skillz... This script kiddie stuff.
If I where Microsoft, I'd find this very troubling. Not because people can steal the OS but what does it say about Vista? When asked the primary reason people should upgrade to Vista, the stock answer from Microsoft is that it has better security.
Now IT managers have to ask themselves a question, "If this is how they secure their own software, how can I trust them with my data?"
Adding insult to injury, the KMS server the pirates are spoofing isn't scheduled to be released for another year. It takes MS a year to write flawed software that some script kiddie can write in a week.
Heads should roll at Microsoft.









Comments (1)
This isnt anything to do wi... (Below threshold)1. Posted by Erick | January 8, 2007 4:26 PM | Score: 0 (0 votes cast)
This isnt anything to do with "security" per say. It has everything to do with their own activation process tricked using a legit method they themselves provided.
Too bad for Microsoft their legit method was as simple as pointing your activation location to some 15 yr old pimple faced kids RR connection running a copy of KMS.
I hate the painting of a whole company as large as MS with a broad brush because of a failed method of activation from one department.
1. Posted by Erick | January 8, 2007 4:26 PM |
Score: 0 (0 votes cast)
Posted on January 8, 2007 16:26