Language Selection

English French German Italian Portuguese Spanish

Exploit Allows Windows XP Piracy

Filed under
Microsoft

There's a major chink in Microsoft's Windows XP anti-piracy armor, although Windows users are not at risk of security attacks.

A security researcher in India has discovered an uncomplicated and easy-to-exploit weakness in Microsoft Corp.'s WGA (Windows Genuine Advantage), an anti-piracy initiative that checks whether consumer and small-business customers are running legitimately licensed copies of Windows XP.

Debasis Mohanty, a private vulnerability researcher and analyst of malicious programs, published a detailed proof-of-concept demonstration to show how the WGA validation check can be defeated to generate key codes for use on illegal copies of Windows XP.

Mohanty's findings come as the world's largest software maker prepares a mandatory rollout of the program.

Microsoft has been testing the Genuine Advantage program through its Download Center, where users are urged to validate their copies of XP before obtaining certain software updates, patches and fixes.

If users decide against validating, they are still allowed to obtain the requested downloads, but later this summer updates will only be pushed out to valid copies. Security updates will not require validation, even after WGA goes mandatory.

A Microsoft spokesperson on Monday confirmed Mohanty's findings but insisted that the weakness presented no real threat to the company's attempts to strangle software pirates.

The spokesperson said there were no plans to modify the way WGA works, even after Mohanty's public demonstration, which was posted on a high-profile security mailing list.

Full Story.

More in Tux Machines

Open source now part of Romania’s Digital Agenda

All of Romania’s public administrations are to use open source and open standards software. The government is making this a (minute) part of the 2014-2020 Digital Agenda, made public in November. The approach will increase interoperability of ICT systems. Read more

GNU Binutils 2.25 Released With Port To Andes NDS32

The Binutils 2.25 changes include support for the Andes NDS32 architecture and new --data, --include-all-whitespace, and --dump-section options. Among the changes for GNU ld in Binutils 2.25 is support for the Andes NDS32 architecture, support for the OpenRISC and OR32 has been replaced with the OR1K port. Gas for Binutils 2.25 has support for AVR Tiny micro-controllers, support for the NDS32, and enhanced ARM support. The NDS32 enablement within the GNU stack has been going on for a while with last year GCC seeing a port to this architecture, etc. The NDS32 from Andes Technology is a 32-bit CPU architecture designed for embedded environments using the AndeStar ISA and the SoC processors are marketed under the AndesCore brand. Read more

2014 Year-End NVIDIA Linux Benchmark Comparison

For this article today, the major driver releases of the year for their mainline driver were benchmarked while ignoring some of the later drivers in each series that just shipped bug-fixes or new kernel / xorg-server support after a new driver series was already in beta or stable. The tested NVIDIA drivers for this article include the 331.38, 334.16, 337.12, 337.19, 340.17, 343.13, 343.22, 346.16, and 346.22 Linux x86_64 drivers. The 331 series was the last driver series from late 2013 for reference. The graphics card used for today's testing was a GeForce GTX 780 Ti (Kepler) graphics card as being a high performance GPU that's compatible with all of the driver releases tested throughout the year. Read more

Quadcopter drone packs first all-Linux APM autopilot

Erle Robotics launched a ROS-enabled, open source “Erle-brain” autopilot that runs APM directly on Linux. The device also powers an “Erle-copter” drone. Over the last year, Spanish firm Erle Robotics S.L. has been working with 3DRobotics to develop an open source BeaglePilot autopilot for drones that can run Linux on 3DR’s popular, Arduino-based APM (ArduPilot Mega) platform. The APM Linux port was developed by both companies, as well as several academic institutions. The BeagleBone-based “Erle-brain” autopilot is built into the $490-and-up Erle-copter quadcopter. Read more