Microsoft WGA Phones Home Even When Told No 403
Aviran writes "When you start WGA setup and get to the license agreement page but decided NOT to install the highly controversial WGA component and cancel the installation, the setup program will send information stored in your registry and the fact that you choose not to install WGA back to Microsoft's servers."
Gibberish (Score:2, Insightful)
Re:Gibberish (Score:3, Insightful)
time to modify the hosts file (Score:4, Insightful)
127.0.0.1 genuine.microsoft.com
Re:So? (Score:5, Insightful)
Re:Gibberish (Score:1, Insightful)
Interesting (Score:4, Insightful)
Re:So? (Score:4, Insightful)
Resistance if Futile (Score:1, Insightful)
Re:So? (Score:5, Insightful)
Ya, that would fix it. Maybe, just maybe, some of us don't have an army of lawyers at our disposal to determine if what we're clicking on really means what we think it means. It seems to me that it is unethical to have a consumer product license that is unreadable/unparsable to an average consumer. The "madman" here would be anyone who thought that such nonsense was an enforceable contract.
Re:Great... (Score:5, Insightful)
So, no, making money is not all they have to worry about. Deceit and chicanery should have consequences other than making them more money. And if they need to cheat to win, it might be time to think about a new concept: revoking the corporate license, and reinstituting personal responsibility for their underhanded actions, with civil and criminal penalties.
Re:Doesn't work (Score:5, Insightful)
The last time i had to set apt-get's update I used the IP address as well.
Re:wall of fire (Score:4, Insightful)
Like the GPL? (Score:5, Insightful)
Oh my fucking god.
Have you ever tried to read the GPL?
Re:Gibberish (Score:5, Insightful)
We're not sending anything. Trust us.
Oh, you checked, did you?
Then what we meant to say was... it's nothing to worry about.
Trust us.
Re:wall of fire (Score:4, Insightful)
Re:Like the GPL? (Score:2, Insightful)
Unreadable as well. Your point being...
Re:Easy enough to deal with (Score:2, Insightful)
Great idea. Except that obviously you can't filter by the source port because that will be almost random. And then you find that they're using Port 80 as the destination port anyway because it's about the only port guaranteed to pass through most firewalls/proxies.
So you filter it by IP address instead, but then find that they're using a huge range of probably Akamized IPs. Eventually you give up and just put an entry in your Hosts file. Which is bypassed for MS sites.
You could just filter it based on the name of the executable. I'm sure they wouldn't dream of changing or randomising that just to piss you off.
Comment removed (Score:2, Insightful)
Re:Like the GPL? (Score:2, Insightful)
Unreadable as well. Your point being...
Re:So? (Score:5, Insightful)
Okay, despite your trollish comments, I'll bite.
1. WGA != Windows Update. RTFA.
2. Has the validity of an EULA ever been tested? AFAIK, an EULA cannot violate your privacy rights, even if you sign those away. Argue as you like, statute always trumps contracts.
3. Microsoft releases an OS that's broken and tells you the only way they'll fix it is if you'll subject yourself to their privacy terms. Not freaking cool. My copy of Windows is paid for, but that doesn't mean I want them invading my privacy.
Ever installed XP without any service packs? Do you know how many minutes it takes before the machine is pwn3d? IMO that's not a functional OS any more.
Ever tried getting that refund from your hardware manufacturer for the part of your purchase that went to Microsoft? It's a freaking pain in the arse, and one where you have to usually drag a vendor to small claims court to get your money.
Re:on a related note (Score:4, Insightful)
Did that IP resemble 169.254.x.x by any chance?
But really there's no point trying to find technical explanations when the obvious one is at hand - you can't read a sniffer trace for shit.
Having the ability to install Ethereal does not magically confer on you the ability to interpret the results correctly.
Re:time to modify the hosts file (Score:3, Insightful)
Is anybody actually surprised that Microsoft is spying on them in ways that they're not disclosing?
Re:Interesting (Score:2, Insightful)
Re:So? (Score:2, Insightful)
Plus, on this occasion I thought "So?" was a reasonable response too.
It's not sending personal information, so I'm assuming it's tracking pirated keys stats or something, for which you can't really blame Them (ooh no, not Them!).
But it's good to bash MS anyway...
I detect hypocrisy (Score:5, Insightful)
But sending back a little XML that you denied the EULA? Don't you detect hypocrisy here. You send your "identification" in the form of IP, browser user agent string and what not to virtually any site you visit, without "agreeing" to this every time. Why is nobody whining about this?
Having privacy and right to deny something is cool. But I think some of the most vocal opposition is simply using pirated Windows and not being honest about it.
I don't install WGA on existing (legit) computers as it doesn't help me with anything. I don't have any problem with Microsoft getting my "no" back though. In fact, I *want* them to hear my no.
Re:This is good (Score:2, Insightful)
Re:So? (Score:2, Insightful)
This is not good (Score:2, Insightful)
"That's ok, it's not personally identifiable" you say? Well, indeed it does not contain your name, address, phone number, bank account details and gender preferences directly in the message, no. But all it takes is for the user at some point to provide their personal details to Microsoft or any affiliates of Microsoft, or vendors with suitably worded contracts with Microsoft, using some program that also sends the machine's unique ID, and now you can match someone to the computer. Not just in future, but with all anonymous (or so you thought) dealings with Microsoft in the past.
Sign up for MS Passport? Register for an IE beta? Your personal details could easily have been sent along with your machine's unique ID, and now any other information stored by MS for that unique ID can be matched up with your personal information.
Answer: (Score:3, Insightful)
If you really want to punish them, revoke their corporate status.
Re:the route your kids take to school, of course (Score:5, Insightful)
Most copies of Windows in the U.S. are paid for, because Windows comes installed, by default, on almost every retail machine sold. That alone makes piracy a non-issue in the U.S. However, WGA does give Microsoft a way to shut down every Windows computer connected to the Internet. What a scam. Once they've got everyone using WGA, they can start dictating terms to governments instead of dealing with irritating lawsuits.
Lets say that the kind souls at MS never even think of using WGA as leverage on say, Europe. I still think it's possible for a clever hacker to use WGA to do some real damage. The hacker would have to do some DNS spoofing and probably crack some encryption, but then, that's what these guys do. Whose to say someone might not use WGA to pull off the biggest Denial of Service extortion in history? Perhaps I'm a bit paranoid, but my caution has kept me from ever having one of my computers compromised.
Piracy is a problem, but not nearly as big a problem as MS would have us believe. If people are stealing you blind, you don't make billions of dollars in profits, you lose money. If MS is feeling a pinch lately, it's due to their own foolish policies and assumptions that they would be able to dictate terms to the world forever. Google Apps and Open Source software will, hopefully, eliminate the need to put our computers at risk simply because a company is greedy.
Microsoft seems to believe that if there were no piracy, everyone in the third world who is now stealing their software would pay for it instead. Yeah right. One of the reasons they steal it is because there is no way they could possibly pay for it. If MS ever finds a way to shut down piracy, it will merely hasten the move to Linux in 3rd world countries. Ironically, that will speed the demise of Windows.
Re:I detect hypocrisy (Score:5, Insightful)
In the WGA example, on the other hand, one chooses NOT to do something, and yet data is sent. That is very different to browsing voluntarily to a web site.
Re:Like the GPL? (Score:2, Insightful)
The GPL does not grant additional "freedom" no matter how many people repeat the same tired bullshit. It takes away the freedom to use somebody else's code in your proprietary, for profit, application. Unlike the BSD license, for example.
Also, simply because the BSD license allows people to incorporate code and close the source, the original source doesn't simply disappear. Nobody is at a disadvantage because the code became part of a closed source product.
The GPL isn't about freedom. It's about being selfish in the guise of supporting the community. If you aren't going to profit off the code, you don't want anybody else to be able to either.
Re:Report this to "StopBadware.org" (Score:4, Insightful)
I'd argue you're incorrect. As far as IP address goes, my ISP assigns them long-term enough to consider them permanent (typical is 2-3 years between changes) and ties that address directly to my billing information. It's personal information in the same sense my bank account and credit-card account numbers are: they don't in themselves reveal my identity but they're tied uniquely and directly to it and can be used to get it without my knowledge and consent. The computer information is the same: part of what's sent is the GUID assigned to the computer, which is intended to be unique to that computer and which is tied directly to information like my name embedded in word-processing documents and other information available to the same entity receiving the computer information. This is sufficient to let them tie that WGA data directly to my personal identity. At the very least it allows them to identify everything else they have that belongs to me, even if they don't know my name (yet). That's personal enough in my book.
Tag (Score:1, Insightful)
I always pull the ethernet plug and disable wi-fi if I know there's activation built in. Can't trust these buggers.
Re:Like the GPL? (Score:5, Insightful)
The GPL isn't about freedom. It's about being selfish in the guise of supporting the community. If you aren't going to profit off the code, you don't want anybody else to be able to either.
Yup, I tend to think of the GPL like that bratty kid on the playground with the ball. Every group of kids had one, the kid who would say "If you don't play by my rules I'm taking my ball and going home".
God I hated that kid.
Re:I detect hypocrisy (Score:5, Insightful)
Not quite. The Windows Update protocol should be:
Hard Drive Serial Number Gives Up the Game (Score:2, Insightful)
This is really the kicker.
Why the hell would Microsoft want the Hard Drive Serial Number just to indicate that someone didn't want to install WGA?
What possible use could that information have in connection with why someone refused WGA - except to be able to IDENTIFY that machine in the future for some OTHER nefarious reason? Obviously Microsoft expects ANYONE who refuses WGA to be intending to use a fake Windows key in the future, if not now.
In other words, Microsoft is TAGGING EVERYONE who refuses WGA as a potential pirate well in advance of their being so - or their being so at all.
I mean, how much more obvious does it get?
They may not be identifying YOU personally - but they are definitely identifying your MACHINE individually.
Which is pretty much the same thing depending on what ELSE they have done or may do in the future.
People need to realize what utter ASSHOLES the management who runs Microsoft ARE. These guys make the jerks at Enron look like Orphan Annie.
And STUPID to boot! I mean, no matter WHAT they've done over the years, they STILL have millions of pirate copies running around. So they spend all this effort dreaming up new activation and detection methods - for what? It's all been an utter waste of everybody's time! Windows Vista has had its activation cracked within a few months despite all their efforts.
Way to go, Bill, you paranoid, greed-sucking moron!
Why not try concentrating on producing an OS that doesn't FUCKING SUCK rather than worrying about nailing down every goddamn dime from everybody's pockets?
If the goddamn OS didn't cost $500 - and wasn't an illegal monopoly to boot - there wouldn't BE that many pirates out there. Not that it matters. Bill doesn't care about "pirates" - he just wants control of everybody's money regardless. He's not trying to prevent "pirates" - he's trying to nail down control of each and every individual customer so as to make sure that customer pays him every single dime HE thinks he's OWED by the world.
"You hobbyists steal your software."
That's Bill's defining mantra.
Get this asshole out of business. Now, please.
Re:time to modify the hosts file (Score:5, Insightful)
This is 100% false. Those package manager's search internet based repositories by DEFAULT, but it is hardly required. In fact, all my servers point to a local repository so I don't have all 500 servers downloading the same packages over and over.
In the end, it does not matter. (Score:5, Insightful)
Re:So? (Score:3, Insightful)
The use of WGA/WGN is a violation of your privacy and it is similar to a police action. Your computer is an extension of your home and to allow Microsoft to put WGN on your computer is akin to allowing them to put a camera into your home to monitor you. Just because they don't get any physical pictures doesn't mean the process isn't the same.
This is a non-governmental private entity taking a police action against you, even tho you are a legal owner of the product, by monitoring your computer (hence your home). The purpose of the WGA/WGN is to collect information in order for Microsoft to update their database. Everyone knows this deep down. The more of these records they have the easier it is for them to identify pirates. It is unethical to collect that when tell them that you do not want them to make you a participant.
If they collect information without you giving them permission in advance then they are in violation of several state's laws. Microsoft has been sued in both WA and CA over this being spyware. When they collect information even if you so no, it is doing the same thing as a spyware program is doing--sending information about you without your knowledge.
You people need to get it through your heads that your computer is an extension of your HOME. Period. No ifs, ands, or buts. That's what your computer is. Microsoft is not entitled to do anything that is not explicitly permissible under law just because they are the OS. Keep in mind that Microsoft is the type of organization that will continue to do this sort of thing until they are told to stop. You tell them to stop by asking your Congressman and Senators to put and end to this sort of behavior. Write letters to them and let them know you are unhappy. They'll get the message.
Microsoft is the kind of company that knows they have all kinds of cash to throw at lawsuits, etc., and they even have money for fines. But when there are laws enacted that send these people to jail then it will stop.
They are invading your home. Do you really want to allow them to do this? Even the police can't enter your home and monitor your activities without a warrant from a court of law signed by a judge.
Re:Like the GPL? (Score:3, Insightful)
"Have a copy of my ball. I lose nothing by giving it to you, so have a blast and do whatever you want."
I don't even have a vested interest in the licensing one way or another, but I'm really tired of the GPL zealots touting how "free" their code is.
Re:the route your kids take to school, of course (Score:5, Insightful)
This was stated by him in the past couple days, if not today.
Both are flawed. on item 1. Windows Vista is very expensive. Giving forecasts on certain pricing to corporate is what companies do. They forecast on those prices so that is really a moot point unless corporate just isn't purchasing. Then the low cost would make a difference, as they feel they should have made it higher so that the lack of corporate sales didn't affect the bottom line so much.
On item 2. According to Microsoft pirating is impossible under Vista. Well, even if that is about 3 months outdated it still is an issue that needs to be addressed. What is the average number of pirated installs vs. legit installs of Vista. Are people choosing to pirate instead of purchasing? Is it easy for the average person to pirate Vista and is the future potential of loosing activation worth it to the average user?
The answer to those is unknown so Microsoft can't be using that as a legitimate reason why their forecasts are so far off. Even if it was EASY to pirate Vista (which Microsoft said 3 months ago was impossible) it would have to be much easier than to pirate XP, which although is semi-easy to pirate if you can get the corporate product key or you can snatch a key from some unsuspecting person it is possible to get locked out by virtue of the WGA/WGN spyware programs.
So, essentially it isn't possible to claim that corporate pricing and pirating is the cause of Ballmer's and Microsoft's woes. It has to be something else. That something else, at least to me, is pretty obvious. It is the restrictions on use, the violation of privacy (constantly claiming you are a thief -- incessant checking of your workstation using spyware programs (WGA/WGN)), the high cost to the consumer (parts as well as purchase price of Vista).
When I talk to people, and I do so every day as I own a computer repair shop, I hear that they want nothing to do with Vista. I even have people that bring in the computers they bought with Vista on them to have them wiped and to have XP installed instead. The reasons they give are the same I read about day in and day out on the web. Microsoft accuses them of being a thief, Microsoft is spying on them, the technology in it will interfere, the costs to upgrade are too high, the cost of the OS is excessive, there's no compelling reason to upgrade. Vista is just a pretty interface on top of a massive spyware program.
I'd have to say that Ballmer is very foolish and to try to pawn off on the financial community two very flawed reasons for Vistas lack of success is just pathetic. Microsoft is on a downhill slide. The fact that Linux and OSX just might be made valid viable attractive has to be affecting every thing they do. On top of that they have known for a couple years that Microsoft would not see growth anywhere near what it has seen in the past. I think one could forecast some very serious financial problems with Microsoft in the next couple years and that they need to get people switched over to Vista so they can better control your computer and purchases so that the major stock holders have time to divest themselves and reinvest in other arenas.
Bill Gates and Steve Ballmer are killing Microsoft. Every DRM/CRM implementation makes Windows a lot less attractive to everyone. Every attempt to monitor our use is looked upon as a violation of our privacy (which it is) and is an accusation that we are a thief or will be a thief sometime down the road. When they don't care that they are invading our homes we realize they are too far gone to even consider giving a second chance. When they can use their monopoly power to extort business, other countries, and private citizens then that's the time everyone must look up and say "no". They know they have you by the short ones because they know that i
Re:Like the GPL? (Score:5, Insightful)
BZZZZT! Wrong! Copyright law takes away the freedom. The GPL restores some of the freedom. Think of it this way. I just wrote some code. Can you use my code in your proprietary, for profit application? No. Why? Because copyright law makes it illegal.
Enter the GPL. The GPL is simply a license that says I'll let you use my code, if you promise certain things to me. It is a trade. I'll grant you certain freedoms that copyright law took away if you do certain things for me as specified in the license.
No, the GPL is about building communities that share work (what it asks in return for said freedom) in such a way that no one can benefit from the work of others in certain ways without returning some work of their own.
Most GPL code is written by commercial enterprises for profit. IBM doesn't say they're licensing GPL code for the good of the world, they say they're doing it to maximize shareholder value. It is about making a business deal with any and all comers that they can use your code if you can use theirs and thus all parties benefit. Maybe you've noticed that most of the projects that get a whole lot of code contributed are GPL licensed, not BSD. Do you know why that is? It is because it provides a better return on the investment in the opinion of most companies and for that matter most individual hobbyists. If I spend weeks of my life writing some code, I don't particularly want someone else to sell that code back to me a few years from now. I'd much rather make them a deal that if they add to it they can use my code in exchange for letting me use their additions. There is no such thing as a free lunch buddy.
Re:Like the GPL? (Score:2, Insightful)
GPL says: I wrote this code, you can use it for anything but if you add to it, you must let others use your additions as well.
You say: I want to use your code and make money out of it without giving you a dime and if you don't let me you're a selfish pig!
Did I get it right?
Re:Gibberish (Score:1, Insightful)
Re:Like the GPL? (Score:5, Insightful)
You've failed to demonstrate how those two things are mutually exclusive.
Nope. The GPL would not be violated if there were no copyright law, because no one would need to abide by the GPL in order to freely copy the code.
Do you know what "non sequitur" means?
Just as much as I can legally copy the code in question if it is not GPL'd.
It's not a metaphor, it's an analogy. Are you truly this dense or are you being intentionally obtuse?
Shoes grant you the freedom of movement if you happen to be surrounded by broken glass. They, thus, grant you more freedom than you had. The GPL grants you more freedom when you are restricted by copyright law. It grants you more freedom than you have. Shoes don't grant you complete freedom to do anything you want. If you're surrounded by metal bars they don't allow you to walk through them. This does not mean shoes take away freedom. The bars took away the freedom. The GPL does not grant you the freedom to take copyrighted code and close the source. This does not mean it takes away freedom. Copyright law took away the freedom. Do you know understand the analogy and the flaw in you logic it demonstrates now that I've used really small sentences?
Yes, I am. I've pointed out several of your logical fallacies. You've pointed out none of mine. Please do elaborate and explain where exactly my logic fails. You do actually know what logic is, right?
I am right. You can't slip off your shoes and walk out of a jail cell in the same way you can't get someone to rescind their GPL licensing of code and suddenly be free to use it without permission. In one case you're stopped by bars, in the other by copyright law. This isn't rocket science friend, you need to revisit your very sloppy thinking.
Why? (Score:2, Insightful)
Re:Like the GPL? (Score:2, Insightful)
The GPL is NOT limiting anyones rights beyond copyright law, you might say its more limiting than the LGPL or modified BSD, but you can't say its more restrictive than no license at all.
Can we have a show of hands to see who thinks linking to a library violates the copyright of the creator of that library ?
Ironic that you don't need to follow any special agreements to write software that links to the libraries included with, say, Windows...
Re:Like the GPL? (Score:4, Insightful)
This specific case has not been tested in court, but Galoob v. Nintendo seems to set a precedent.
As for the irony, to link to the libraries included with Windows, each user has to have purchased a license for the libraries - by purchasing Windows.