Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Microsoft WGA Phones Home Even When Told No

Posted by CmdrTaco on Wed Mar 07, 2007 11:51 AM
from the huge-shocker-here dept.
Aviran writes "When you start WGA setup and get to the license agreement page but decided NOT to install the highly controversial WGA component and cancel the installation, the setup program will send information stored in your registry and the fact that you choose not to install WGA back to Microsoft's servers."
This discussion has been archived. No new comments can be posted.
Display Options Threshold:
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • Gibberish (Score:2, Insightful)

    by AmateurCruzer (982736) on Wednesday March 07 2007, @11:55AM (#18263386)
    Anyone have any insight what exactly they're sending back?
    • Re:Gibberish by NinjaTariq (Score:3) Wednesday March 07 2007, @11:59AM
      • Re:Gibberish by Anonymous Coward (Score:2) Wednesday March 07 2007, @12:10PM
      • Re:Gibberish by Anonymous Coward (Score:2) Wednesday March 07 2007, @01:20PM
        • Re:Gibberish (Score:5, Informative)

          by Ciggy (692030) on Wednesday March 07 2007, @03:28PM (#18266762)
          In the UK, at least, it would appear to be in breach of Section 1 of the Computer Misuse Act 1990:

          1 -- (1) A person is guilty of an offence if--
          (a)he causes a computer to perform any function with intent to secure access to any program or data held in any computer;
          (b)the access he intends to secure is unauthorised; and
          (c)he knows at the time he causes the computer to perform the function that that is the case.

          The data sent home is noted by (a). As the user has expressly not agreed to the WGA EULA, unauthorised access is noted by (b) and (c) - in particular (c) as there was no agreemnt to the EULA; assuming of course that the data sent home is that that would be sent home IFF the EULA had been agreed and WGA installed.

          As an aside, the Sony rootkit that installed something even when the EULA or whatever was decined was probably in breach of Section 3 of the same Act - doing "...any act which causes an unauthorised modification of the contents of any computer..." - those discs weren't sold in the UK?

          The question is who is the responsible entity for a company: they have programmers that have written the code that does the unauthorised access (are they responsible), or is it their managers (who defined the specs) or the company as a whole (the directors)?
          [ Parent ]
          • Re:Gibberish by davester666 (Score:1) Wednesday March 07 2007, @04:13PM
            • Re:Gibberish by rtb61 (Score:2) Wednesday March 07 2007, @11:44PM
          • Re:Gibberish by h2g2bob (Score:2) Wednesday March 07 2007, @04:33PM
      • 1 reply beneath your current threshold.
    • Re:Gibberish by xzvf (Score:1) Wednesday March 07 2007, @12:02PM
      • Re:Gibberish (Score:5, Funny)

        by Anonymous Coward on Wednesday March 07 2007, @03:17PM (#18266612)

        The only home software on my computers should have is my home

        Sounds like someone set you up the bomb.

        [ Parent ]
        • Re:Gibberish by Samah (Score:1) Wednesday March 07 2007, @09:05PM
        • Re:Gibberish by elmedico27 (Score:1) Wednesday March 07 2007, @09:43PM
      • Re:Gibberish by Anonymous Coward (Score:1) Wednesday March 07 2007, @05:17PM
    • Re:Gibberish (Score:5, Insightful)

      by Rogerborg (306625) on Wednesday March 07 2007, @12:29PM (#18263916)
      (http://slashdot.org/)

      We're not sending anything. Trust us.

      Oh, you checked, did you?

      Then what we meant to say was... it's nothing to worry about.

      Trust us.

      [ Parent ]
      • Re:Gibberish by Opportunist (Score:2) Wednesday March 07 2007, @12:41PM
        • Re:Gibberish by Cro Magnon (Score:3) Wednesday March 07 2007, @04:11PM
        • Re:Gibberish by rvw (Score:2) Wednesday March 07 2007, @04:29PM
      • Re:Gibberish by Headcase88 (Score:1) Wednesday March 07 2007, @01:24PM
      • Re:Gibberish by mgiuca (Score:2) Thursday March 08 2007, @08:01AM
    • Re:Gibberish (Score:5, Informative)

      by gigne (990887) on Wednesday March 07 2007, @12:31PM (#18263946)
      (http://www.headfuzz.co.uk/ | Last Journal: Sunday November 26 2006, @08:49PM)
      I have no idea, but it looks like some sort of unique id.

      an image from the now slashdotted page is here, it shows what gets sent to MS

      http://img266.imageshack.us/my.php?image=wgahp5.pn g [imageshack.us]
      [ Parent ]
    • Re:Gibberish by TubeSteak (Score:3) Wednesday March 07 2007, @12:36PM
      • Re:Gibberish by h2g2bob (Score:2) Wednesday March 07 2007, @04:45PM
    • In the end, it does not matter. (Score:5, Insightful)

      by WindBourne (631190) on Wednesday March 07 2007, @03:44PM (#18266930)
      (Last Journal: Friday December 01 2006, @10:51AM)
      MS owns the software, you do not. It is what you agreed to. MS has always done this and will continue to do more. If they stop in one place it will pop up again. The simple fact is, there is truth in saying that you are owned. Whether it is is by MS or by a cracker (from any number of avenues on the windows platform), you are till owned.
      [ Parent ]
    • Re:Gibberish by Samah (Score:2) Wednesday March 07 2007, @09:08PM
  • by swschrad (312009) on Wednesday March 07 2007, @11:57AM (#18263422)
    (http://slashdot.org/ | Last Journal: Monday April 16 2007, @01:18PM)
    probably all the apps information. naysayer, meet the Business Software Association, also known down around the docks as "the muscle."

    can't RTFA because they're slashdotted already.
    • by DarthChris (960471) on Wednesday March 07 2007, @12:11PM (#18263646)
      Interesting you say it's slashdotted because I can read it fine.

      It's very light on details, however. There is a screenshot from wordpad of the data sent; it's an XML-type document which appears to have pulled a couple of id/hash numbers out of the system registry, e.g. OS version, but no personal info. They can't really get any personal info anyway, since data protection laws here in the UK and other countries would land them in shite, and also I suspect that they have more important things to do than snoop random people's names.

      Personally, I think that they're just trying to get an idea of the number of people who won't install it. These people either have pirate copies and know they'll fail validation, or simply are opposed to the idea of their OS phoning home. From a cynical viewpoint, it's important for MS to gauge the reaction to this early so they know how far they can push these sorts of thing without there being a massive backlash.
      [ Parent ]
      • by lazlo (15906) on Wednesday March 07 2007, @12:25PM (#18263862)
        (http://www.hppc.com/)
        So, how hard might it be to generate random but valid data to fill out this XML? And then have a little daemon that does nothing but post it over and over 24/7? "Wow. Looks like a NAT/proxy server with millions of users behind it who really don't like WGA."

        Petty, I know, but fun.

        [ Parent ]
      • why I said TFA was slashdotted by swschrad (Score:2) Wednesday March 07 2007, @12:53PM
      • by rben (542324) on Wednesday March 07 2007, @01:22PM (#18264834)
        (http://www.raybenjamin.com/)
        I refused to install WGA for a long time for several reasons, not the least was the fact that it was marked in the EULA as BETA software. Why should I be forced to install software that MS admits hasn't been fully tested yet? I have enough problems with MS bugs. Also, I resent the implication that I have to constantly prove that my software was purchased legally. I've always paid for the software I use, even when I was a poor college student.

        Most copies of Windows in the U.S. are paid for, because Windows comes installed, by default, on almost every retail machine sold. That alone makes piracy a non-issue in the U.S. However, WGA does give Microsoft a way to shut down every Windows computer connected to the Internet. What a scam. Once they've got everyone using WGA, they can start dictating terms to governments instead of dealing with irritating lawsuits.

        Lets say that the kind souls at MS never even think of using WGA as leverage on say, Europe. I still think it's possible for a clever hacker to use WGA to do some real damage. The hacker would have to do some DNS spoofing and probably crack some encryption, but then, that's what these guys do. Whose to say someone might not use WGA to pull off the biggest Denial of Service extortion in history? Perhaps I'm a bit paranoid, but my caution has kept me from ever having one of my computers compromised.

        Piracy is a problem, but not nearly as big a problem as MS would have us believe. If people are stealing you blind, you don't make billions of dollars in profits, you lose money. If MS is feeling a pinch lately, it's due to their own foolish policies and assumptions that they would be able to dictate terms to the world forever. Google Apps and Open Source software will, hopefully, eliminate the need to put our computers at risk simply because a company is greedy.

        Microsoft seems to believe that if there were no piracy, everyone in the third world who is now stealing their software would pay for it instead. Yeah right. One of the reasons they steal it is because there is no way they could possibly pay for it. If MS ever finds a way to shut down piracy, it will merely hasten the move to Linux in 3rd world countries. Ironically, that will speed the demise of Windows.
        [ Parent ]
        • Re:the route your kids take to school, of course by walt-sjc (Score:2) Wednesday March 07 2007, @02:14PM
        • Re:the route your kids take to school, of course by glesga_kiss (Score:2) Wednesday March 07 2007, @02:39PM
        • by HermMunster (972336) on Wednesday March 07 2007, @04:29PM (#18267466)
          Foolish is what Ballmer is made of. He claimed to financial analysts that the caution on Vista sales is for at least 2 reasons: 1) corporate pricing was too low, and 2) piracy.

          This was stated by him in the past couple days, if not today.

          Both are flawed. on item 1. Windows Vista is very expensive. Giving forecasts on certain pricing to corporate is what companies do. They forecast on those prices so that is really a moot point unless corporate just isn't purchasing. Then the low cost would make a difference, as they feel they should have made it higher so that the lack of corporate sales didn't affect the bottom line so much.

          On item 2. According to Microsoft pirating is impossible under Vista. Well, even if that is about 3 months outdated it still is an issue that needs to be addressed. What is the average number of pirated installs vs. legit installs of Vista. Are people choosing to pirate instead of purchasing? Is it easy for the average person to pirate Vista and is the future potential of loosing activation worth it to the average user?

          The answer to those is unknown so Microsoft can't be using that as a legitimate reason why their forecasts are so far off. Even if it was EASY to pirate Vista (which Microsoft said 3 months ago was impossible) it would have to be much easier than to pirate XP, which although is semi-easy to pirate if you can get the corporate product key or you can snatch a key from some unsuspecting person it is possible to get locked out by virtue of the WGA/WGN spyware programs.

          So, essentially it isn't possible to claim that corporate pricing and pirating is the cause of Ballmer's and Microsoft's woes. It has to be something else. That something else, at least to me, is pretty obvious. It is the restrictions on use, the violation of privacy (constantly claiming you are a thief -- incessant checking of your workstation using spyware programs (WGA/WGN)), the high cost to the consumer (parts as well as purchase price of Vista).

          When I talk to people, and I do so every day as I own a computer repair shop, I hear that they want nothing to do with Vista. I even have people that bring in the computers they bought with Vista on them to have them wiped and to have XP installed instead. The reasons they give are the same I read about day in and day out on the web. Microsoft accuses them of being a thief, Microsoft is spying on them, the technology in it will interfere, the costs to upgrade are too high, the cost of the OS is excessive, there's no compelling reason to upgrade. Vista is just a pretty interface on top of a massive spyware program.

          I'd have to say that Ballmer is very foolish and to try to pawn off on the financial community two very flawed reasons for Vistas lack of success is just pathetic. Microsoft is on a downhill slide. The fact that Linux and OSX just might be made valid viable attractive has to be affecting every thing they do. On top of that they have known for a couple years that Microsoft would not see growth anywhere near what it has seen in the past. I think one could forecast some very serious financial problems with Microsoft in the next couple years and that they need to get people switched over to Vista so they can better control your computer and purchases so that the major stock holders have time to divest themselves and reinvest in other arenas.

          Bill Gates and Steve Ballmer are killing Microsoft. Every DRM/CRM implementation makes Windows a lot less attractive to everyone. Every attempt to monitor our use is looked upon as a violation of our privacy (which it is) and is an accusation that we are a thief or will be a thief sometime down the road. When they don't care that they are invading our homes we realize they are too far gone to even consider giving a second chance. When they can use their monopoly power to extort business, other countries, and private citizens then that's the time everyone must look up and say "no". They know they have you by the short ones because they know that i
          [ Parent ]
        • Re:the route your kids take to school, of course by FreakWent (Score:1) Wednesday March 07 2007, @04:40PM
      • Re:the route your kids take to school, of course by PhxBlue (Score:2) Wednesday March 07 2007, @01:27PM
      • Re:the route your kids take to school, of course by bl8n8r (Score:2) Wednesday March 07 2007, @01:37PM
      • Re:the route your kids take to school, of course by tambo (Score:2) Wednesday March 07 2007, @02:02PM
      • 3 replies beneath your current threshold.
    • 1 reply beneath your current threshold.
  • time to modify the hosts file (Score:4, Insightful)

    by GuyverDH (232921) on Wednesday March 07 2007, @11:59AM (#18263460)
    notepad %windir%\system32\drivers\etc\hosts

    127.0.0.1 genuine.microsoft.com
  • Spyware? (Score:1)

    by Quaz and Wally (1015357) * on Wednesday March 07 2007, @12:00PM (#18263476)
    Doesn't that make it spyware? I'm sure there's something about it in the license agreement to make it legal. Boy that does suck.
    • Re:Spyware? by Opportunist (Score:2) Wednesday March 07 2007, @12:44PM
      • Re:Spyware? by Quaz and Wally (Score:1) Wednesday March 07 2007, @01:07PM
        • Re:Spyware? by jb_02_98 (Score:1) Wednesday March 07 2007, @03:24PM
    • Re:Spyware? by Quaz and Wally (Score:1) Wednesday March 07 2007, @12:58PM
    • 2 replies beneath your current threshold.
  • What it really does... (Score:1, Funny)

    by Iphtashu Fitz (263795) on Wednesday March 07 2007, @12:01PM (#18263486)
    It actually uploads an entire bit-for-bit copy of your hard drive so that MS investigators can perform a forensic analysis on it and determine exactly what MS software you have installed illegally since not installing WGA is an implicit admission of guilt. You can expect to be arrested by the MS Police within a few days of declining to install WGA if you have any pirated MS software on your machine.
  • by Peter Simpson (112887) on Wednesday March 07 2007, @12:02PM (#18263498)
  • Interesting (Score:4, Insightful)

    by jesusphish (1072854) on Wednesday March 07 2007, @12:03PM (#18263516)
    Yay, I believe RMS's essay on treacherous computing may apply here. Not to start an argument over RMS and his stance with open source and free software. But i believe we should all have the right if you use windows to know what they are sending. I use gnu/linux so i really don't affect me much.
  • Great... (Score:2, Funny)

    by pchoppin (864344) on Wednesday March 07 2007, @12:04PM (#18263546)
    ... Now you're going to tell me that all Microsoft is in business for is to make money. You're ruining a perfectly good fantasy. Thanks a lot!
    • Re:Great... (Score:5, Insightful)

      by Catbeller (118204) on Wednesday March 07 2007, @12:15PM (#18263706)
      (http://slashdot.org/)
      That Free Markets religion again. Businesses cannot do anything they like; they are corporations, fictional entities created by license of the people of the country through their government. They are granted super-powers as non-existent individuals, exempting real operators from liablity for their own actions. In return, they hew the line we set for them. They have more responsibilty to the nation that created them other than pleasing shareholders, no matter what propoganda they pump to the contrary. They are not gods. And Microsoft is a monopoly, ruled so by the courts, and is under even more stringent strictures, because they have constantly abused their power in the past to invade and hold new markets.

      So, no, making money is not all they have to worry about. Deceit and chicanery should have consequences other than making them more money. And if they need to cheat to win, it might be time to think about a new concept: revoking the corporate license, and reinstituting personal responsibility for their underhanded actions, with civil and criminal penalties.
      [ Parent ]
  • wall of fire (Score:2)

    by mastershake_phd (1050150) on Wednesday March 07 2007, @12:05PM (#18263548)
    (http://freedomsforums.com/)
    Use Zone Alarm or other free firewall, problem solved.
  • Easy enough to deal with (Score:3, Informative)

    by KC7GR (473279) on Wednesday March 07 2007, @12:06PM (#18263568)
    (http://www.bluefeathertech.com/ | Last Journal: Friday November 04 2005, @11:51AM)
    From the image in TFA, it looks like they're sending back the Windows version code, and the installation-unique CSID, along with some other stuff that I didn't recognize.

    There didn't appear to be any identification of the specific user in there.

    It seems to me that it would be easy enough to determine what port WGA is using to send this stuff, and lock down said port at one's firewall. That's the method I'd choose to deal with it (if I were even running anything with WGA installed -- which, thankfully, I'm not).

  • Resistance if Futile (Score:1, Insightful)

    by Anonymous Coward on Wednesday March 07 2007, @12:07PM (#18263582)
    It matters because it could give them justification to pursue an investigation along the lines of "Well, if they are innocent, why not prove it? So, they must be hiding something. knock knock knock - Microsoft Police."

  • This is good (Score:5, Interesting)

    by Devir (671031) on Wednesday March 07 2007, @12:09PM (#18263618)
    (http://www.teamgiannelli.com/)
    While many think this is bad and invasion of privacy, think of it as this:

    when we normally click "I DONT Agree" the software does nothing. But if it sends the message back home with statistics of how many dont agree, it tells the software company some people dont agree.

    We can argue EULA's till our fingers are raw and bloody, but it doesnt matter if the company in question doesnt read the conversations.

    In short, by clicking the Dont agree button and having it sent home to MS we're telling them we dont want that crap on our machines. Maybe (deity willing) MS will start to listen. More companies may adopt that approach and we'll get less and less one sided (retarded) EULA's.

    anyone Remember Borland's |"like a book" EULA? Great stuff.

    • Re:This is good by MaggieL (Score:2) Wednesday March 07 2007, @12:45PM
    • Re:This is good by ccvqc (Score:2) Wednesday March 07 2007, @12:57PM
    • Re:This is good (Score:5, Interesting)

      by Lumpy (12016) on Wednesday March 07 2007, @01:04PM (#18264528)
      (http://timgray.blogspot.com/)
      So let's have fun.

      anyone got a way to dissect it completely so we can write a little app to send maybe 20-30 fake entries a day? now spread that across 100-300 people and microsoft thinks that there is a mass rejection of WGA starting to brew.
      [ Parent ]
      • Re:This is good by codepunk (Score:2) Wednesday March 07 2007, @07:49PM
      • 1 reply beneath your current threshold.
    • Re:This is good by db32 (Score:2) Wednesday March 07 2007, @01:06PM
    • This is not good by jifl (Score:2) Wednesday March 07 2007, @01:16PM
    • Re:This is good by stmfreak (Score:1) Wednesday March 07 2007, @03:59PM
    • Re:This is good by psaunders (Score:1) Wednesday March 07 2007, @11:42PM
    • 1 reply beneath your current threshold.
  • on a related note (Score:5, Interesting)

    by jjeffries (17675) on Wednesday March 07 2007, @12:12PM (#18263666)
    This is kinda old, but some years ago my neighbor got a new Win ME (!!!) machine, and I helped him put in a NIC and put it on our little neighborhood network. I was curious if it was going to phone home, so I had a sniffer running on my router...

    The damn thing picked/guessed a valid (NATted) IP address, netmask, and gateway without using DHCP (arp tricks?), and sent a load of mystery packets to an address in a Microsoft IP block. Only then did the computer do the "new device detected" routine, but could not find a driver for the NIC and I had to go fetch one on another machine.

    W T F ?

    Unfortunately I have since lost the pcap dump.

    Moderation: -1, no proof
    • Re:on a related note (Score:4, Insightful)

      by Slashcrap (869349) on Wednesday March 07 2007, @12:40PM (#18264118)
      The damn thing picked/guessed a valid (NATted) IP address, netmask, and gateway without using DHCP (arp tricks?)

      Did that IP resemble 169.254.x.x by any chance?

      But really there's no point trying to find technical explanations when the obvious one is at hand - you can't read a sniffer trace for shit.

      Having the ability to install Ethereal does not magically confer on you the ability to interpret the results correctly.
      [ Parent ]
      • Re:on a related note by electrosoccertux (Score:2) Wednesday March 07 2007, @01:48PM
        • Re:on a related note (Score:5, Informative)

          by AK Marc (707885) on Wednesday March 07 2007, @03:22PM (#18266686)
          So, you're saying Microsoft has some secret way for it's OS to phone home without a driver for the ethernet card?

          Yeah, it's called NE2000. Almost all cards support it. If you don't have the drivers for a card, you can usually force Windows to use generic NE2000 drivers and the card will work. But if it can't identify the card, or identifies it and doesn't have drivers, then it will tell you that it can't install it, even when it knows it can use it just fine with the generic drivers. So yes, I do think it quite plausable that Windows can use a NIC it does not have drivers for. But I wouldn't call NE2000 a secret.
          [ Parent ]
          • 1 reply beneath your current threshold.
        • 1 reply beneath your current threshold.
      • Re:on a related note by jjeffries (Score:3) Wednesday March 07 2007, @07:11PM
        • 1 reply beneath your current threshold.
      • 2 replies beneath your current threshold.
  • by 8127972 (73495) on Wednesday March 07 2007, @12:13PM (#18263682)
    .... is it as simple as going to add and remove programs to uninstall the two components for WGA or does it "break" something when you try to uninstall it? Or worse, does it leave anything behind?
  • by Joe Random (777564) on Wednesday March 07 2007, @12:22PM (#18263814)
    Sounds like a perfect place to use MS speech recgonition:
    Computer: "Where do you want to go today?"
    You: "Nowhere."
    C: "I heard 'Microsoft Validation Site'. Is this correct?"
    Y: "No!"
    C: "I'm sorry. I heard 'Dear aunt, let's set so double the killer delete all'. Is this correct?"
    Y: "NO!!"
    C: "I understand. So 'Microsoft Validation Site' was correct. Redirecting now. Thank you for using My Microsoft Live Enterprise Genuine Advantage Ultimate. Have a nice day."
    • 1 reply beneath your current threshold.
  • by blind biker (1066130) on Wednesday March 07 2007, @12:26PM (#18263878)
    (Last Journal: Sunday September 02, @06:01PM)
    I am no lawyer, but this seems very similar if not the same as wiretapping. The user, quite explicitly, doesn't want to even have the software installed on his/her computer, let alone have his information (the information stored in the registry is private) sent to a company or individual.

    Maybe I am just not used to spyware (never had a piece of spyware installed on any of my computers) so I am still quite allergic to this stuff. But no matter how I look at this issue, I am outraged.
  • And they will get away with it. (Score:2, Insightful)

    by Caspian (99221) on Wednesday March 07 2007, @12:33PM (#18263988)
    Are you getting the picture yet? Powerful organisations (and politicians) really CAN and DO get away with anything they want. Microsoft is a prime example. I'll be very surprised if they ever get in any serious trouble for this (and no, for MS, a multi-million-dollar fine is not "serious trouble", it's a slap on the wrist. A $10,000,000 fine wouldn't hurt them. A $10,000,000,000 fine... maybe, yes.
  • I detect hypocrisy (Score:5, Insightful)

    by suv4x4 (956391) on Wednesday March 07 2007, @12:50PM (#18264300)
    I can understand people not wanting WGA on their PC-s as it can cause issues on legitimate installations as well, in certain situations.

    But sending back a little XML that you denied the EULA? Don't you detect hypocrisy here. You send your "identification" in the form of IP, browser user agent string and what not to virtually any site you visit, without "agreeing" to this every time. Why is nobody whining about this?

    Having privacy and right to deny something is cool. But I think some of the most vocal opposition is simply using pirated Windows and not being honest about it.

    I don't install WGA on existing (legit) computers as it doesn't help me with anything. I don't have any problem with Microsoft getting my "no" back though. In fact, I *want* them to hear my no.
    • Re:I detect hypocrisy by Stumbles (Score:2) Wednesday March 07 2007, @01:05PM
    • Re:I detect hypocrisy by *weasel (Score:2) Wednesday March 07 2007, @01:18PM
    • Re:I detect hypocrisy (Score:5, Insightful)

      by mwillems (266506) on Wednesday March 07 2007, @01:30PM (#18265004)
      (http://www.mvw.net/)
      I disagree. When I send my IP to a web site, it is because I have chosen to browse there.

      In the WGA example, on the other hand, one chooses NOT to do something, and yet data is sent. That is very different to browsing voluntarily to a web site.

      [ Parent ]
      • Re:I detect hypocrisy by deehoc (Score:1) Wednesday March 07 2007, @01:38PM
        • Re:I detect hypocrisy (Score:5, Insightful)

          by Todd Knarr (15451) on Wednesday March 07 2007, @02:03PM (#18265596)
          (http://www.silverglass.org/)

          Not quite. The Windows Update protocol should be:

          1. I connect to Windows Update. They get some identifiable information.
          2. Windows Update sends me a list of what's available.
          3. I select what I want to install.
          4. Windows sends Windows Update a list of what I want to install.
          5. Windows Update sends me what I've asked for.
          Note that nowhere in there should my computer be sending Windows Update anything about what I haven't asked for. It doesn't need to know that to send me what I did ask for, it's got no business sending that information without telling me it is or giving me the opportunity to say "No.". If Microsoft chooses to collect information it doesn't need, that's it's prerogative but that doesn't give it a "get out of jail free" card to avoid the consequences of that choice.
          [ Parent ]
      • But you DID choose to run windows by cybrthng (Score:2) Wednesday March 07 2007, @02:24PM
      • Re:I detect hypocrisy by suv4x4 (Score:2) Wednesday March 07 2007, @03:03PM
      • 1 reply beneath your current threshold.
    • Re:I detect hypocrisy by whitehatlurker (Score:2) Wednesday March 07 2007, @01:39PM
    • Re:I detect hypocrisy by Pantero Blanco (Score:2) Wednesday March 07 2007, @04:13PM
    • Re:I detect hypocrisy by nurb432 (Score:2) Wednesday March 07 2007, @04:58PM
    • Re:I detect hypocrisy by Hucko (Score:1) Wednesday March 07 2007, @06:37PM
    • Re:I detect hypocrisy by Jeremy_Bee (Score:1) Wednesday March 07 2007, @09:52PM
    • 2 replies beneath your current threshold.
  • Report this to "StopBadware.org" (Score:5, Informative)

    by Animats (122034) on Wednesday March 07 2007, @12:58PM (#18264442)
    (http://www.animats.com)

    This should be reported to "StopBadware.org". StopBadware.org's definition of badware [stopbadware.org] requires prior consent to send personally identifiable information to a site. This should be enough to put WGA on the Badware list.

    Google is now flagging sites that have been identified by StopBadware.

    StopBadware is run by law professors from Harvard and Oxford, with assistance from Consumer Reports. StopBadware is effective. They complained about the Jessica Simpson screensaver, which installed spyware in May 2006. The makers of that didn't listen. In October of 2006, a US federal judge shut that outfit down.

    • Re:Report this to "StopBadware.org" by Blakey Rat (Score:2) Wednesday March 07 2007, @01:34PM
      • Re:Report this to "StopBadware.org" (Score:4, Insightful)

        by Todd Knarr (15451) on Wednesday March 07 2007, @01:57PM (#18265502)
        (http://www.silverglass.org/)

        I'd argue you're incorrect. As far as IP address goes, my ISP assigns them long-term enough to consider them permanent (typical is 2-3 years between changes) and ties that address directly to my billing information. It's personal information in the same sense my bank account and credit-card account numbers are: they don't in themselves reveal my identity but they're tied uniquely and directly to it and can be used to get it without my knowledge and consent. The computer information is the same: part of what's sent is the GUID assigned to the computer, which is intended to be unique to that computer and which is tied directly to information like my name embedded in word-processing documents and other information available to the same entity receiving the computer information. This is sufficient to let them tie that WGA data directly to my personal identity. At the very least it allows them to identify everything else they have that belongs to me, even if they don't know my name (yet). That's personal enough in my book.

        [ Parent ]
      • Re:Report this to "StopBadware.org" by taustin (Score:2) Wednesday March 07 2007, @02:15PM
  • not surprised (Score:1)

    by botkiller (181386) on Wednesday March 07 2007, @12:59PM (#18264456)
    (http://www.brianbotkiller.com/ | Last Journal: Saturday August 07 2004, @05:44AM)
    surpised? no. scared? not really. Laughing? A lot.
  • by david.emery (127135) on Wednesday March 07 2007, @01:03PM (#18264508)
    do you not understand (to be an oxymoron)?

          dave
  • firewall MS (Score:1)

    by vparkash (914055) on Wednesday March 07 2007, @01:04PM (#18264522)
    I'm no software guru but if you just firewall www.microsoft.com, wont it be a cure for all your problems?
    • Re:firewall MS by TheZax (Score:1) Wednesday March 07 2007, @01:37PM
      • Re:firewall MS by vparkash (Score:1) Wednesday March 07 2007, @06:51PM
    • 1 reply beneath your current threshold.
  • I deplore it! (Score:1)

    by Anna Merikin (529843) on Wednesday March 07 2007, @01:08PM (#18264586)
    (Last Journal: Thursday August 16, @01:33PM)
    What more can I say?
  • by jamiebecker (160558) on Wednesday March 07 2007, @01:18PM (#18264756)
    Well, they obviously get the sending IP address, so how about a reverse hostname lookup on the IP address to determine that it's a "Global 2000" company? Perhaps this information could be used as "evidence" to incite an invasion^H^H^H^H^H^H^H^H audit?
  • Well (Score:2, Informative)

    by Anonymous Coward on Wednesday March 07 2007, @01:42PM (#18265272)
    At least they send out the cpu ID. So they know how many copies you owned and how many you've installed. For example, I am sure lots of us already experienced when XP trys to reinstall on other machines, hardware configuration changes will lead to re-enter the 20 digits serial. If it fails (WGA), you just have to call in Microsoft to get a new code. I did that several times already. It seens like WGA did keep track on serial and your CPU ID that hardcoded into your cpu. That way they know how many copies of windows you have. which machine you've installed, and which you've tried to reinstalled.
  • by TheGratefulNet (143330) on Wednesday March 07 2007, @01:50PM (#18265392)
    surprised me!

    this is an applet that photo guys care about. it lets you set up color profiling (color managed workflow) on 2 diff monitors on a single video card (assuming dual LUT engines). this is the only way to get 2 color profiles installed, one per display.

    damned thing tried to connect to M$ when I booted and had komodo firewall installed.

    I added 'never allow' to the list - but still - this is going WAY too far.

    (similarly, I'm building a home theater pc and there is a lot of software that seems to 'want' a net connection even if it makes no real sense in that application. sigh.)
  • MS knows when you PC is on? (Score:3, Interesting)

    by brunascle (994197) on Wednesday March 07 2007, @01:57PM (#18265506)
    i've noticed that whenever i try to upgrade to SP2/etc on a new install of XP, it will fail if any other PC using the same CD key is online at that moment. but once i unplug the other PCs, the upgrade works fine.

    assuming this isnt a fluke, that really frightmens me, the fact that MS knows when any of my PCs are online.
  • Tag (Score:1, Insightful)

    by Anonymous Coward on Wednesday March 07 2007, @02:00PM (#18265550)
    This deserves a "duh" I reckon.

    I always pull the ethernet plug and disable wi-fi if I know there's activation built in. Can't trust these buggers.
  • by Arceliar (895609) on Wednesday March 07 2007, @02:14PM (#18265756)
    P.C. Phone Home
  • by Master of Transhuman (597628) on Wednesday March 07 2007, @02:14PM (#18265774)

    This is really the kicker.

    Why the hell would Microsoft want the Hard Drive Serial Number just to indicate that someone didn't want to install WGA?

    What possible use could that information have in connection with why someone refused WGA - except to be able to IDENTIFY that machine in the future for some OTHER nefarious reason? Obviously Microsoft expects ANYONE who refuses WGA to be intending to use a fake Windows key in the future, if not now.

    In other words, Microsoft is TAGGING EVERYONE who refuses WGA as a potential pirate well in advance of their being so - or their being so at all.

    I mean, how much more obvious does it get?

    They may not be identifying YOU personally - but they are definitely identifying your MACHINE individually.

    Which is pretty much the same thing depending on what ELSE they have done or may do in the future.

    People need to realize what utter ASSHOLES the management who runs Microsoft ARE. These guys make the jerks at Enron look like Orphan Annie.

    And STUPID to boot! I mean, no matter WHAT they've done over the years, they STILL have millions of pirate copies running around. So they spend all this effort dreaming up new activation and detection methods - for what? It's all been an utter waste of everybody's time! Windows Vista has had its activation cracked within a few months despite all their efforts.

    Way to go, Bill, you paranoid, greed-sucking moron!

    Why not try concentrating on producing an OS that doesn't FUCKING SUCK rather than worrying about nailing down every goddamn dime from everybody's pockets?

    If the goddamn OS didn't cost $500 - and wasn't an illegal monopoly to boot - there wouldn't BE that many pirates out there. Not that it matters. Bill doesn't care about "pirates" - he just wants control of everybody's money regardless. He's not trying to prevent "pirates" - he's trying to nail down control of each and every individual customer so as to make sure that customer pays him every single dime HE thinks he's OWED by the world.

    "You hobbyists steal your software."

    That's Bill's defining mantra.

    Get this asshole out of business. Now, please.

  • by Keeper (56691) on Wednesday March 07 2007, @02:33PM (#18266056)
    Isn't WGA validation required to download non-security updates off of the Microsoft website? Meaning if you refuse to run WGA you are not allowed to download non-security updates? Shouldn't your refusal to run WGA send a "user refuses to run WGA" notification to the website so that it does not allow you to download those non-security updates (you have 4 states that need to be tracked: "new" machine [send user to download WGA stuff], user refuses WGA [tell user they can't download xyz because WGA was refused], user passed WGA [let user download stuff], user failed WGA [send user to priracy reporting site])?

    Where's the fire here?
  • Original article (Score:2, Informative)

    by juct (549812) <ju@heisec.de> on Wednesday March 07 2007, @02:36PM (#18266094)
    (http://www.heise-security.co.uk/)
    You might want to read the original article WGA notification just doesn't stop [heise-security.co.uk] by heise Security instead of the gibberish google translation of the german version ;-).
  • by thedellos (869011) on Wednesday March 07 2007, @03:51PM (#18267032)
    If you don't agree with M$ WGA, why choose to install the WGA update(s)?
    I understand some may have auto updates configured to install automatically and are choosing 'no' to the EULA as a way to abort the install.
    However, updates can be configured so that an end user can choose which updates are installed during the update process.
  • Looks like (Score:3, Interesting)

    by TwistedSpring (594284) on Wednesday March 07 2007, @04:20PM (#18267332)
    (http://baxpace.com/)
    All this is conjecture, but this is what I'm guessing the elements in the ID block are.

    UGD: Not sure. Looks like a UUID.
    HDSLN: Hard disk serial
    USID: User security identifier (id of logged in user, Microsoft can tell if you're any of the default SIDs like Administrator)
    CSID: Computer security identifier

    So Microsoft can tell whether you're an admin or not, they know the unique ID of the computer (CSID), your account if you aren't "Administrator" and - perhaps - the hard disk. If UGD turns out to be something that is unique to each individual copy of Windows, then all the people who've ripped it off could find life inconvenient in the future. I'm not sure what the tracking implications are, it depends how many Microsoft products report the HD serial or USID to them.

  • Why? (Score:2, Insightful)

    by sleepykit (942636) <sleepykit@gmail.com> on Wednesday March 07 2007, @07:42PM (#18270114)
    (http://www.chibitek.com/)
    Why do you people bother talking about how evil the WGA is? It's been known for a while now that Microsoft is reaching far beyond its moral limits to prevent piracy, so why even bother to whine. Switch to some other systems (pick your own poison) and forget that MS even exists. Don't like their attitude, don't like their spyware, then don't take it. Sitting around and complaining how much they suck does no good because it encourages them. You talk about WGA and they know people are paying attention, they know that their product is impacting you, and since you've already been branded a thief in their eyes, they now see you as whining about a product that locks you our of your PC. Sure, for most geeks, this is a blatant lie but remember that Windows was not made solely for the technically-savvy. Pick up the pieces and move on, choose your own path, your own operating system. Don't just let MS win!
    • Re:Why? by smash (Score:2) Wednesday March 07 2007, @09:07PM
    • Re:Why? by ioshhdflwuegfh (Score:1) Thursday March 08 2007, @12:36PM
  • by Anonymous Coward on Thursday March 08 2007, @12:44AM (#18272776)
    I bought a used laptop at a computer show and was promised that even though the restore disc was a copy the S/N was good. So first thing I did was update to SP2 and no dice due to WGA. Called the store which is in queens NY and was told to deal with it, no refund, the windows is fine and I'll get all updates via automatic updates. WGA even told me the serial used was a coporate serial that is no longer valid. You can't get IE7 or media 10 without passing WGA either.
    Instead of the MS police knocking down the door it gave me a form to fill out and sent it to them with a copy of the recipt - gave the guy one more chance to make good before sending it in and after a colorful exchange mailed it.
    sure enough I got a new serial to activate. Funny but if I wanted an actual disc I have to pay, the copy will work fine I hope.
    Funny thing is I just really wanted a discount for not having windows since I'll probably run Fedora or pref. FreeBSD but haven't heard how it works on a laptop hadwarewise yet? This weekend I'll be playing.
  • by Anonymous Coward on Thursday March 08 2007, @12:48AM (#18272798)
    I wonder if this would fall into the realm of NOT protecting privacy, similar to the prono guy who tried to wipe out his browser cache. You've said NO you don't want it GA installed, and it STILL sends stuff home.

    The other aspect is that having a machine CPUID and even a disk drive ID, and perhaps a NIC card, your account name, etc it would be a PERFECT cache of data for law enforcement to want for the purpose of determine whether or not you WERE on the net grabbing RIAA sensitive data or pron.

    Can you imagine surfing on someone's wireless connection, and it's calling home with info all the time? It would seem to be to be a sure fire way to determine whether someone is really downloading copyrighted stuff or can use the "someone else used my wireless connection" defense.

  • MS License (Score:1)

    by Odiche (513692) on Thursday March 08 2007, @04:06AM (#18273760)
    I have always felt, that since MS includes the terms "Microsoft reserves the right to change the terms at any time without prior warning" it also gave me implicit grounds to change the EULA at any time according to my wishes.

    "***** hereby informs MS that pursuant to changes made to the license that upon termination of said license, all such rights and ownership shall revert to the user ******, any further communication by the former MS products shall be considered an invasive intrusion, and considered to be a criminal computer misuse" /sarcasm off
  • Re:So? (Score:5, Insightful)

    by sqlrob (173498) on Wednesday March 07 2007, @12:00PM (#18263478)
    Ethics. If you choose not to install something, it shouldn't do anything.
    [ Parent ]
    • Re:So? (Score:4, Insightful)

      You chose to install the Windows Update ActiveX control, didn't you? And you clicked "I agree" when it told you it could send this info to Microsoft, didn't you? So why would you be angry when it does exactly that? Perhaps people need to read the licensing agreements they agree to before agreeing to them, instead of just clicking "yes, I agree" like a madman.
      [ Parent ]
      • Re:So? (Score:5, Insightful)

        by Rob the Bold (788862) on Wednesday March 07 2007, @12:14PM (#18263696)

        Perhaps people need to read the licensing agreements they agree to before agreeing to them, instead of just clicking "yes, I agree" like a madman.

        Ya, that would fix it. Maybe, just maybe, some of us don't have an army of lawyers at our disposal to determine if what we're clicking on really means what we think it means. It seems to me that it is unethical to have a consumer product license that is unreadable/unparsable to an average consumer. The "madman" here would be anyone who thought that such nonsense was an enforceable contract.

        [ Parent ]
        • Like the GPL? (Score:5, Insightful)

          by Anonymous Coward on Wednesday March 07 2007, @12:26PM (#18263888)
          it is unethical to have a consumer product license that is unreadable/unparsable to an average consumer.

          Oh my fucking god.

          Have you ever tried to read the GPL?

          [ Parent ]
          • Re:Like the GPL? by jorgevillalobos (Score:2) Wednesday March 07 2007, @12:32PM
            • Re:Like the GPL? by BarryJacobsen (Score:2) Wednesday March 07 2007, @12:37PM
              • Re:Like the GPL? by essh10151 (Score:1) Wednesday March 07 2007, @01:04PM
                • Re:Like the GPL? (Score:4, Informative)

                  by SirTalon42 (751509) on Wednesday March 07 2007, @01:11PM (#18264632)
                  Um... No. The GPL doesn't to take away your rights to distribute a closed source program. You can distribute them all the time. But if you link against a GPL program/lib THEN distribute your program/lib, you would have to follow the GPL. If you don't accept the GPL you have to follow normal copyright law which means you can't distribute it REGARDLESS of your license if you link against it.

                  The GPL is NOT limiting anyones rights beyond copyright law, you might say its more limiting than the LGPL or modified BSD, but you can't say its more restrictive than no license at all.

                  Also an EULA is an agreement the end user is supposed to agree to to be able to use the software, the GPL is a copyright license that a distributor must agree to to be legally able to distribute any program that includes/links against GPL code.
                  [ Parent ]
                • Re:Like the GPL? by Zonk (troll) (Score:3) Wednesday March 07 2007, @01:13PM
                • Re:Like the GPL? by Knuckles (Score:3) Wednesday March 07 2007, @01:17PM
                • Re:Like the GPL? by cbreaker (Score:2) Wednesday March 07 2007, @01:57PM
                • Re:Like the GPL? by Ph33r th3 g(O)at (Score:3) Wednesday March 07 2007, @02:02PM
                • Re:Like the GPL? by Ciggy (Score:1) Wednesday March 07 2007, @02:51PM
                • Re:Like the GPL? by Mprx (Score:2) Wednesday March 07 2007, @07:16PM
                • umm, but... by Phil Urich (Score:2) Thursday March 08 2007, @01:26AM
                • Re:Like the GPL? by mungtor (Score:2) Wednesday March 07 2007, @01:38PM
                • Re:Like the GPL? (Score:5, Insightful)

                  by BarryJacobsen (526926) on Wednesday March 07 2007, @02:01PM (#18265564)
                  (http://writings.barrettj.com/)


                  The GPL isn't about freedom. It's about being selfish in the guise of supporting the community. If you aren't going to profit off the code, you don't want anybody else to be able to either.


                  Yup, I tend to think of the GPL like that bratty kid on the playground with the ball. Every group of kids had one, the kid who would say "If you don't play by my rules I'm taking my ball and going home".

                  God I hated that kid.

                  Odd, as all the other kids are saying "you can play with my ball if you pay me a bunch of money, but it's still my ball, and at any time I can change what you're allowed to do with my ball" and this kid is just saying "if you don't play by my rules of sharing the ball with everyone, I'm taking my ball and going home". I may not like that I have to play by that kids rules, but it's better than playing by his rules and paying him to do so...or going out and making my own ball.
                  [ Parent ]
                • You're just a little bit TOO cynical (Score:5, Informative)

                  by cbreaker (561297) on Wednesday March 07 2007, @02:15PM (#18265800)
                  (Last Journal: Tuesday December 12 2006, @07:54PM)
                  You could look at it that way, but I think that's kinda a warped view of the GPL.

                  BSD license is all well and good, but if it wasn't for the GPL there wouldn't be so many people involved in development of GPL software. Your view does have some merit, but not because of selfishness. Novell doesn't want Microsoft to take their code, put it in Windows, and blast Novell away again. Red Hat doesn't want IBM to secretly switch AIX to all Linux code, and sell it for a mint, and never give anything back. So, that's understood, and everyone can feel free to develop the code base without worrying about it. Your payment for being able to use everyone else's work (and saving a lot of money by doing so) is to also release your improvements to everyone else. So your PROFIT is the improvements you get back on the code you wrote.

                  It should be noted that the big companies pushing Linux actually do turn a bit of a profit, in terms of cash.

                  The GPL *is* about supporting the community. If a piece of software is community developed, that same community (as well as anyone that uses it) really wants the software to improve. If ACME Corporation wants to use the software in their product, because it would be a LOT cheaper then developing in-house, they'll take it, improve it, and package it with their product. In the meantime, they'll also make their improvements available to everyone else. That's their payment for saving millions in licensing or development. How is this selfish?

                  If you don't want to release your code under the GPL, then simply don't. If you don't LIKE the GPL, then don't use GPL code, it's as simple as that. Or, are you pissed that you can't just do whatever you want with someone else's work?

                  The GPL, in fact, does allow a lot more freedom for the code you write then general copyright laws allow for. It's obviously a lot more open then closed-source. Why must you compare it to the BSD license? (Extra Points: If the BSD License worked so well, why did it take the GPL to bring open source software to the forefront? Explain and cite references.)
                  [ Parent ]
                • Re:You're just a little bit TOO cynical by mungtor (Score:2) Wednesday March 07 2007, @02:47PM
                • Re:Like the GPL? by MeNeXT (Score:2) Wednesday March 07 2007, @04:29PM
                • Re:Like the GPL? by GrubInCan (Score:1) Wednesday March 07 2007, @04:33PM
                • Re:Like the GPL? (Score:5, Insightful)

                  by 99BottlesOfBeerInMyF (813746) on Wednesday March 07 2007, @04:37PM (#18267582)

                  The GPL does not grant additional "freedom" no matter how many people repeat the same tired bullshit. It takes away the freedom to use somebody else's code in your proprietary, for profit, application. Unlike the BSD license, for example.

                  BZZZZT! Wrong! Copyright law takes away the freedom. The GPL restores some of the freedom. Think of it this way. I just wrote some code. Can you use my code in your proprietary, for profit application? No. Why? Because copyright law makes it illegal.

                  Enter the GPL. The GPL is simply a license that says I'll let you use my code, if you promise certain things to me. It is a trade. I'll grant you certain freedoms that copyright law took away if you do certain things for me as specified in the license.

                  The GPL isn't about freedom. It's about being selfish in the guise of supporting the community.

                  No, the GPL is about building communities that share work (what it asks in return for said freedom) in such a way that no one can benefit from the work of others in certain ways without returning some work of their own.

                  If you aren't going to profit off the code, you don't want anybody else to be able to either.

                  Most GPL code is written by commercial enterprises for profit. IBM doesn't say they're licensing GPL code for the good of the world, they say they're doing it to maximize shareholder value. It is about making a business deal with any and all comers that they can use your code if you can use theirs and thus all parties benefit. Maybe you've noticed that most of the projects that get a whole lot of code contributed are GPL licensed, not BSD. Do you know why that is? It is because it provides a better return on the investment in the opinion of most companies and for that matter most individual hobbyists. If I spend weeks of my life writing some code, I don't particularly want someone else to sell that code back to me a few years from now. I'd much rather make them a deal that if they add to it they can use my code in exchange for letting me use their additions. There is no such thing as a free lunch buddy.

                  [ Parent ]
                • Re:Like the GPL? by Overly Critical Guy (Score:1) Wednesday March 07 2007, @04:47PM
                • Re:Like the GPL? by syousef (Score:2) Wednesday March 07 2007, @04:50PM
                • Re:Like the GPL? by 99BottlesOfBeerInMyF (Score:2) Wednesday March 07 2007, @04:55PM
                • Re:You're just a little bit TOO cynical by Dun Malg (Score:2) Wednesday March 07 2007, @04:58PM
                • Re:Like the GPL? by Overly Critical Guy (Score:1) Wednesday March 07 2007, @05:03PM
                • Re:Like the GPL? by kocsonya (Score:2) Wednesday March 07 2007, @05:16PM
                • Re:Like the GPL? by Achromatic1978 (Score:2) Wednesday March 07 2007, @05:17PM
                • Re:Like the GPL? (Score:5, Insightful)

                  by 99BottlesOfBeerInMyF (813746) on Wednesday March 07 2007, @05:30PM (#18268276)

                  The GPL isn't a respond to copyright law. It's entirely dependent on it.

                  You've failed to demonstrate how those two things are mutually exclusive.

                  The purpose of the GPL is to make sure source code is redistributed in software releases, so if there were no copyright laws, the GPL would be violated because nobody would have to redistribute that source code.

                  Nope. The GPL would not be violated if there were no copyright law, because no one would need to abide by the GPL in order to freely copy the code.

                  Therefore, the GPL takes away the freedom to do whatever you want with the source code you download.

                  Do you know what "non sequitur" means?

                  Um, what? You walk through physical matter when your shoes are off?

                  Just as much as I can legally copy the code in question if it is not GPL'd.

                  This is one of the most bizarre metaphors I've ever read.

                  It's not a metaphor, it's an analogy. Are you truly this dense or are you being intentionally obtuse?

                  The fact shoes let you walk on broken glass has nothing to do with the GPL restricting what you can do with source code.

                  Shoes grant you the freedom of movement if you happen to be surrounded by broken glass. They, thus, grant you more freedom than you had. The GPL grants you more freedom when you are restricted by copyright law. It grants you more freedom than you have. Shoes don't grant you complete freedom to do anything you want. If you're surrounded by metal bars they don't allow you to walk through them. This does not mean shoes take away freedom. The bars took away the freedom. The GPL does not grant you the freedom to take copyrighted code and close the source. This does not mean it takes away freedom. Copyright law took away the freedom. Do you know understand the analogy and the flaw in you logic it demonstrates now that I've used really small sentences?

                  You're one to talk, fella.

                  Yes, I am. I've pointed out several of your logical fallacies. You've pointed out none of mine. Please do elaborate and explain where exactly my logic fails. You do actually know what logic is, right?

                  You're right, let me just slip my shoes off and walk on out of this jail cell.

                  I am right. You can't slip off your shoes and walk out of a jail cell in the same way you can't get someone to rescind their GPL licensing of code and suddenly be free to use it without permission. In one case you're stopped by bars, in the other by copyright law. This isn't rocket science friend, you need to revisit your very sloppy thinking.

                  [ Parent ]
                • Re:Like the GPL? by init100 (Score:2) Wednesday March 07 2007, @05:47PM
                • Re:Like the GPL? by HuguesT (Score:2) Wednesday March 07 2007, @05:59PM
                • Re:Like the GPL? by init100 (Score:2) Wednesday March 07 2007, @06:02PM
                • Re:Like the GPL? by init100 (Score:2) Wednesday March 07 2007, @06:16PM
                • Re:Like the GPL? by homer_ca (Score:2) Wednesday March 07 2007, @07:14PM
                • Re:Like the GPL? by Rakishi (Score:2) Wednesday March 07 2007, @08:28PM
                • Re:Like the GPL? by poopdeville (Score:1) Wednesday March 07 2007, @10:52PM
                • Re:Like the GPL? by drsmithy (Score:2) Wednesday March 07 2007, @10:56PM
                • Re:Like the GPL? by drsmithy (Score:2) Wednesday March 07 2007, @11:01PM
                • Re:Like the GPL? (Score:4, Insightful)

                  by senatorpjt (709879) on Thursday March 08 2007, @12:27AM (#18272642)
                  Although the GPL "forbids" it, it's probably not a copyright violation to link to a library, it's a copyright violation to distribute a library, so if you were to distribute a closed-source program that uses a library, you wouldn't be able to provide the library. This only applies to dynamically linked libraries, obviously. Statically linked libraries are definitely a copyright violation.

                  This specific case has not been tested in court, but Galoob v. Nintendo seems to set a precedent.

                  As for the irony, to link to the libraries included with Windows, each user has to have purchased a license for the libraries - by purchasing Windows.
                  [ Parent ]
                • Re:Like the GPL? by senatorpjt (Score:2) Thursday March 08 2007, @12:37AM
                • Re:You're just a little bit TOO cynical by senatorpjt (Score:2) Thursday March 08 2007, @12:41AM
                • Re:You're just a little bit TOO cynical by Hooya (Score:2) Thursday March 08 2007, @01:37AM
                • Re:You're just a little bit TOO cynical by mungtor (Score:2) Thursday March 08 2007, @07:13AM
                • Re:You're just a little bit TOO cynical by mungtor (Score:2) Thursday March 08 2007, @07:25AM
                • Re:You're just a little bit TOO cynical by cbreaker (Score:2) Friday March 09 2007, @12:33PM
                • Re:Like the GPL? by cbreaker (Score:2) Friday March 09 2007, @12:46PM
                • Re:You're just a little bit TOO cynical by senatorpjt (Score:2) Friday March 09 2007, @05:59PM
                • Re:You're just a little bit TOO cynical by mungtor (Score:2) Friday March 09 2007, @09:59PM
                • Re:You're just a little bit TOO cynical by cbreaker (Score:2) Saturday March 10 2007, @03:57AM
                • Re:You're just a little bit TOO cynical by cbreaker (Score:2) Saturday March 10 2007, @04:22AM
                • Re:You're just a little bit TOO cynical by mungtor (Score:2) Saturday March 10 2007, @11:40AM
                • 4 replies beneath your current threshold.
              • Re:Like the GPL? by FiloEleven (Score:3) Wednesday March 07 2007, @02:03PM
              • Re:Like the GPL? by dthable (Score:1) Wednesday March 07 2007, @02:42PM
              • Re:Like the GPL? by Columcille (Score:2) Wednesday March 07 2007, @02:44PM
              • 1 reply beneath your current threshold.
          • Re:Like the GPL? (Score:5, Informative)

            by Knuckles (8964) <knuckles@dantia[ ]rg ['n.o' in gap]> on Wednesday March 07 2007, @12:36PM (#18264030)
            AC said: "Have you ever tried to read the GPL?"

            The GPL is not a consumer product license. In order to use the software you don't even have to agree to the GPL. Only if you distribute are you bound by its terms, and software distribution is a complicated topic.
            Even so, when you compare it to proprietary EULAs, the GPL is entirely readable in its main parts. Furthermore, the GPL is not written in caps as most EULAs are (IMHO this obvious attempt at obfuscation alone should make EULAs unenforceable).
            [ Parent ]
          • Re:Like the GPL? (Score:5, Informative)

            by mrchaotica (681592) * <<mrchaotica> <at> <yahoo.com>> on Wednesday March 07 2007, @12:38PM (#18264074)
            1. The GPL is much more understandable than any Microsoft EULA
            2. The GPL is a distribution license. If you're doing anything that causes it to apply to you, you're no longer an "average consumer!"
            [ Parent ]
          • Re:Like the GPL? by LocalH (Score:2) Wednesday March 07 2007, @12:49PM
          • Re:Like the GPL? by Craig Maloney (Score:2) Thursday March 08 2007, @05:50AM
          • 1 reply beneath your current threshold.
        • Re:So? by iminplaya (Score:1) Wednesday March 07 2007, @12:49PM
        • Re:So? by rainman_bc (Score:3) Wednesday March 07 2007, @01:32PM
      • Re:So? by Anonymous Coward (Score:3) Wednesday March 07 2007, @12:29PM
      • Re:So? (Score:5, Insightful)

        by rainman_bc (735332) on Wednesday March 07 2007, @12:39PM (#18264106)
        You chose to install the Windows Update ActiveX control, didn't you? And you clicked "I agree" when it told you it could send this info to Microsoft, didn't you? So why would you be angry when it does exactly that? Perhaps people need to read the licensing agreements they agree to before agreeing to them, instead of just clicking "yes, I agree" like a madman.

        Okay, despite your trollish comments, I'll bite.

        1. WGA != Windows Update. RTFA.
        2. Has the validity of an EULA ever been tested? AFAIK, an EULA cannot violate your privacy rights, even if you sign those away. Argue as you like, statute always trumps contracts.
        3. Microsoft releases an OS that's broken and tells you the only way they'll fix it is if you'll subject yourself to their privacy terms. Not freaking cool. My copy of Windows is paid for, but that doesn't mean I want them invading my privacy.

        Ever installed XP without any service packs? Do you know how many minutes it takes before the machine is pwn3d? IMO that's not a functional OS any more.

        Ever tried getting that refund from your hardware manufacturer for the part of your purchase that went to Microsoft? It's a freaking pain in the arse, and one where you have to usually drag a vendor to small claims court to get your money.
        [ Parent ]
        • Re:So? by LinuxIsRetarded (Score:2) Wednesday March 07 2007, @01:10PM
          • Re:So? by ari_j (Score:3) Wednesday March 07 2007, @01:19PM
            • Re:So? by ari_j (Score:2) Wednesday March 07 2007, @03:47PM
            • 1 reply beneath your current threshold.
          • Re:So? by 644bd346996 (Score:2) Wednesday March 07 2007, @01:23PM
            • Re:So? by rainman_bc (Score:2) Wednesday March 07 2007, @01:35PM
              • 1 reply beneath your current threshold.
        • Re:So? by cfulmer (Score:2) Wednesday March 07 2007, @01:13PM
          • Re:So? by rainman_bc (Score:2) Wednesday March 07 2007, @02:09PM
            • Re:So? by cfulmer (Score:2) Wednesday March 07 2007, @02:35PM
              • 1 reply beneath your current threshold.
        • Re:So? by phorm (Score:2) Wednesday March 07 2007, @01:32PM
        • Re:So? by Zonk (troll) (Score:1) Wednesday March 07 2007, @01:33PM
        • Re:So? by Ciggy (Score:1) Wednesday March 07 2007, @03:01PM
        • 2 replies beneath your current threshold.
      • Re:So? by Junior J. Junior III (Score:2) Wednesday March 07 2007, @12:49PM
      • Re:So? by Dregnus (Score:1) Wednesday March 07 2007, @01:23PM
      • Re:So? by HermMunster (Score:3) Wednesday March 07 2007, @03:47PM
        • Re:So? by DJCacophony (Score:2) Thursday March 08 2007, @10:25AM
      • Re:Do I have a choice on which button I click? by digitig (Score:2) Wednesday March 07 2007, @01:11PM
      • 2 replies beneath your current threshold.
  • Re:So? (Score:1, Funny)

    Why was I marked redundant? That's not redundant at all..
    [ Parent ]
    • Re:So? (Score:4, Funny)

      by spun (1352) <loverevolutionary.yahoo@com> on Wednesday March 07 2007, @12:24PM (#18263838)
      (Last Journal: Tuesday August 07, @01:18PM)
      You posted a short, one word post with no information content and an inane question in order to get first post. Mods love to bitchslap anyone who does this.

      The question "So?" is redundant because it doesn't need to be asked. If you feel this isn't an important issue, explain why you think it isn't important.

      Software that sends personal information about you back to its master when you say you don't want to install it is generally considered spyware.

      I see your "So?" and raise you a "Because!"
      [ Parent ]
      • Re:So? (Score:4, Funny)

        by whargoul (932206) on Wednesday March 07 2007, @12:33PM (#18263984)
        Yeah, and?
        [ Parent ]
        • Re:So? by Flibz (Score:2) Wednesday March 07 2007, @12:46PM
      • Re:So? by value_added (Score:2) Wednesday March 07 2007, @12:59PM
      • Re:So? by grylnsmn (Score:2) Wednesday March 07 2007, @01:16PM
        • Re:So? by thephotoman (Score:2) Wednesday March 07 2007, @02:30PM
  • Re:So? (Score:4, Funny)

    by Runefox (905204) on Wednesday March 07 2007, @04:54PM (#18267794)
    (http://runefox.net/)
    I AM a mod, you insensitive clod!
    [ Parent ]
  • 12 replies beneath your current threshold.