PDA

View Full Version : We're F*****



Storm
07-07-2003, 03:20 PM
dunno where this came from xactly........ i found it on KaZaA:

i no, its kinda a long story............:

Microsoft is planning what could end up being quite a shock for the Windows XP warez world, and what currently looks to be one of the most amazing moves made by Microsoft since Windows Product Activation was introduced.

Currently, Microsoft is in the works of completely rewriting the algorithm for the way Windows XP Corporate keys are generated, and is rewriting the code for Windows XP to recognize this new algorithm. This new code will be an added ‘feature’ of Service Pack 1 due out later this year.

At the present moment, an upgrade to Windows XP SP1 from Windows XP with no SP installation will not give any problems or errors about an invalid CD-Key on a corporate version of Windows XP. This is because the new algorithm feature has been switched off in SP1 upgrades. To get to see this new feature, you would have to slipstream SP1 into the Windows XP installation media and setup Windows. Once you’ve reached the CD-key, no current Corporate Windows XP key (none of the 75 that we’ve tried) will work, as they are all invalid. Even if a corporate key is managed to be found, the chances of it working when SP1 final comes out are slim to none, as Microsoft is rumored to ‘still be working on the algorithm for SP1 for Corporate customers’.

So why is Microsoft keeping this a secret? To put it mildly, they are a bit perturbed that warezers have been able to exploit the corporate edition of Windows XP to completely bypass WPA. They are planning to keep it a complete surprise until SP1 final has been released and shut down as many warez users from using Windows XP as possible. They know if it’s made widely known what they are planning, nobody will upgrade to SP1 until an appropriate patch has been made.
And as far as patches go, as far as we can guess right now the only patch that is going to work will be the ever popular "Reset" patch. If you slipstream a corporate version of Windows XP as you’re supposed to do, it will upgrade the algorithm. Note that the slipstream patches the DLL files which generate the CD keys, it doesn’t replace them. This is why you cannot slipstream a non corporate version of Windows XP and drop the corporate files in and expect the installation to work properly. Windows also checks for the DLL files version numbers and if they don’t match, errors will be created during install. It could be possible to find these DLL’s, replace the version numbers with those of SP1, and put them back into the installation media, but you’d also have to find a way to replicate the Microsoft signature on the DLL’s as well as the CAB files for setup to actually copy the files to the hard drive.

The first thing that comes to mind when thinking about this is that the current Corporate users of Windows XP are going to have to get a new CD-key reissued for their versions of Windows with SP1. Microsoft has decided that the cost of current corporate customers having to get a new CD-key is less that what they are losing in the market of Windows XP being distributed as a corporate installation amongst warez users. Microsoft is also planning to warn those with corporate editions of Windows XP to not let the CD-keys slip into the mainstream. The EULA is going to be rewritten to fit a new type of ‘Corporate release’ and it’s been rumored that if a customers key is to get into the market, Microsoft may take legal action against those consumers.

Another rumor that is running rounds at Redmond is that Microsoft may actually include a type of “Phone home” feature in the corporate versions of Windows XP only. This feature would connect to a Microsoft server upon connection and deliver the IP address of the connected computer and what the Installation ID is. Before privacy advocates begin screaming, realize that if Microsoft was to want to do this, they could very easily make provisions in the EULA that they (Microsoft) have included a feature that makes sure the Corporate edition of Windows XP is not installed on more computers than it’s contract is made out for, and the computers IP address and the Installation ID may be transmitted to a local Microsoft server thought 128-bit encryption. No more information would be transmitted to the servers, and for more information, see the Microsoft Privacy Statement. It’s a possibility, as corporate versions of Windows aren’t exactly tailored for use by home and everyday users, so the EULA could very well be expanded to include such a feature.

As far as activation goes on a legal copy of Windows XP, we slipstreamed our copy and it installed and activated without any problems. The algorithm for normal customers will stay the same apparently. So far, only the corporate version of XP gets the new revamped algorithm feature. It’s one less feature I can do without personally.

MetroStars
07-07-2003, 03:31 PM
sum body will find a way a round this

4play
07-07-2003, 03:39 PM
This new code will be an added ‘feature’ of Service Pack 1 due out later this year.

little bit on the old side isnt it. ;)

this has either not been implemented or they gave up on it because as long as you dont use the devils own key then your fine.

Xilo
07-07-2003, 03:40 PM
meh

Wolfmight
07-07-2003, 03:47 PM
just dont upgrade no more..
Well i allways got my legal copy of Windows ME lol..
What if people just downloaded Windows XP Home? ;)

Wolfmight
07-07-2003, 03:48 PM
Originally posted by Storm@7 July 2003 - 09:20
dunno where this came from xactly........ ""i found it on KaZaA"":


u found it on kazaa? hell maybe someone made it up

Sp1? they are talkin about when it was released awhile back? This document must be old and someone did find a way around it. Hell i just got WinXP Pro Corp Sp1 Intergrated

4play
07-07-2003, 03:52 PM
u found it on kazaa? hell maybe someone made it up


i think its true since i saw it on plenty of sites a long while ago. still maybe they might use it in sp2. but they will find away around it like they normally do.

Wolfmight
07-07-2003, 03:53 PM
Originally posted by 4play@7 July 2003 - 09:52

u found it on kazaa? hell maybe someone made it up


i think its true since i saw it on plenty of sites a long while ago. still maybe they might use it in sp2. but they will find away around it like they normally do.
yep.. because nothing is perfect... crackers enjoy a nice project on a computer with the internet connection unplugged

Storm
07-07-2003, 04:59 PM
it came from some news site.......... i was lookin 4 more sources 4 winxp corp (ironical aint it :P ) and bumped into it..........

it was just a word document, and was only 26k so i deceide 2 jus read it 4 the fun of it............

sparsely
07-07-2003, 06:22 PM
Yeah. That's old as hell.
It's easily circumvented by simple registry changes and key reset...
and like others, I have a downloaded copy of XP with SP1 integrated...with a big list of good keys.

Wolfmight
07-07-2003, 06:47 PM
Basicly.. since people can program in windows, software is crackable.

Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)

Storm
07-07-2003, 09:40 PM
Originally posted by Wolfmight@7 July 2003 - 19:47
Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)
uhmmmm........... there workin on that 2..........

dunno y a manufaturer would want that though.......... ud have an illgal copy of an intell processor...........

balamm
07-08-2003, 12:09 AM
If MS does decide to try this again with SP-2 , they had better put a bit more thought into it.
It only takes a slight registry edit to neuter the OOBE Timer.

Once that is done, there are no time limits.

Add a previously registered key(hope you saved one) and you're back up and running legit.

The registered key is what all of you using an integrated SP-1 XP corporate won't have when the time comes.

If you haven't installed SP-1 normally and hacked the OOBE timer to get a legitimate product key, then you still have an unregistered product.

When the next SP comes out with even tougher checks, I'll have the product key that was generated and verified by MS during registration (even though I did the registration myself)

One that's been fully recognised for error reports, and other support.

If you're not getting that now, then you aren't registered and your key is not legit for anything other than installing XP.

No future updates if they detect your key!

Future service packs might even delete that key after install if it hasn't been registered.

Wolfmight
07-08-2003, 12:25 AM
I dont think anything on a PC will be 100% unbreakable.. they are too opensource.

Gatta have a Solid Steel Box that you connot open.(take to a manufacturer to open it and stuff lol)

Then Windows would have to also be the same.. (maybe physical locks on the hd that pervent users from accessing certain areas ... example: the read-on lock on a floppy disk ya know..)

Ad
07-08-2003, 02:29 AM
we will work something out ;)

Xilo
07-08-2003, 02:35 AM
Whatever is created by man will be destroyed by man...

chalkmongoose
07-08-2003, 03:46 AM
A couple of comments about the 'improved' security in XP.
I think Microsoft actually has a good chance of getting rid of piracy in the next few years COMPLETELY.

First of all, I'd like to point out a company called GetRight, who makes a program that is EXTREMELY hard to crack. They're a very small company, with little financial resources, and they've made quite a secure program.
All they do is happily accept your pirated key, and then an hour later, it is found to be denied by the server, and you cannot register again for 24 hours.
For some reason, that tiny company forced me to send them 30 bucks (and I did try to avoid that), but Microsoft (to my happy delight) has managed to provide such crappy security that I've avoided sending them thousands of dollars.
I own 98. I "borrowed" 98SE, 98, 3.1, 2.0, 1.0, ME, 2000 Pro, NT, XP Home, XP Pro and Longhorn.
Wow, great track record for MS. For some reason, they've managed to screw up royally, and boy have they dropped the ball.

But, if Gates would get off his piles of money, he could easily do something like GetRight.

His security alithgorims need a bit of updating, he needs a centralized server to check codes, but dammit, I'm getting pissed off.
It INSULTS me that someone like Gates can run a billion dollar enterprise and let so much money slip through their fingers, and yet a company like Getright, who needs to struggle to make ends meet, creates an extremely nice program, secures it very well, and still makes jack shit.

I'm moving to Bolivia.

Cl1mh4224rd
07-08-2003, 08:24 AM
Originally posted by Storm+7 July 2003 - 22:40--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Storm &#064; 7 July 2003 - 22:40)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-Wolfmight@7 July 2003 - 19:47
Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)
uhmmmm........... there workin on that 2..........

dunno y a manufaturer would want that though.......... ud have an illgal copy of an intell processor........... [/b][/quote]
I&#39;d really like to see some real information on that project. I&#39;m no genius, but I can&#39;t see how it would be currently possible, and commercially viable, to alter physical hardware architecture with 1s and 0s.

Unless by "workin on that" you mean "it&#39;ll be ready in 300 years", then yeah, I can swallow that...

sparsely
07-08-2003, 08:39 AM
Originally posted by balamm
The registered key is what all of you using an integrated SP-1 XP corporate won&#39;t have when the time comes.

If you haven&#39;t installed SP-1 normally and hacked the OOBE timer to get a legitimate product key, then you still have an unregistered product.


The corporate versions are designed to be "unregistered", as you put it, or un"Activated" as Microsoft
puts it.
A corporate disc, bought through a licensed Microsoft reseller, is intended for use in large-scale OS
deployment. To make these products require the online activation that a typical retail version does
would be overly burdensome for corporations, schools, etc. with a large number of systems.

Instead, Microsoft sells them an Open License, which allows them to purchase a license for
as many copies of the product as they will need. Then the corporation buys the "Standard Media"
disc, and recives a copy of their license agreement, along with their Volume License Product Keys.
The company can then use that key to install as many copies of the specified OS, Application, etc.
as they are licensed for. They can even install it on more machines than they&#39;re licensed for,
but then they&#39;re breaking the law.

Anyway, the point is, they can&#39;t require these versions of Windows to be Activated. They would
be shutting out corporate customers. All Microsoft did with SP1 was a little research to find
out which 3 keys we&#39;re being used to install most pirated copies. These were never valid
Volume License Product Keys anyway, so no companies got hurt. SP1 would perform a check
of your Keys&#39; hash prior to install, if it matched one of the three (the FCKGW being one),
then the upgrade was denied.

Keikan
07-08-2003, 08:49 AM
Originally posted by Wolfmight@7 July 2003 - 11:47
Basicly.. since people can program in windows, software is crackable.

Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)
Hey i just thought of something can cards be crackable? Then we could get free credits on our playdium cards (Playdium is an arcade that uses rechargable cards if you ask me it&#39;s a waste of plastic)

balamm
07-08-2003, 09:05 AM
No, that&#39;s not correct.
There is no activation in the Corporate XP. There is however a registration process that isn&#39;t required when the SP has been integrated. With an original, untouched XP Corporate install, there is no activation or registration required untill you try to upgrade. At that point, your key will be checked and if it matches a blacklisted key, the upgrade will be rolled back. Which is why MS published an article on changing the XP corporate product key.
You can see something similar to the original MS article here >
http://members.shaw.ca/telfaq/Changing%20t...oduct%20Key.htm (http://members.shaw.ca/telfaq/Changing%20the%20XP%20Professional%20Corporate%20Product%20Key.htm)

You likely will be required to complete this process when SP-2 is released unless they come up with a tighter method of checking the keys used. In future builds, they may use the Plus model where you have to register by internet and your registration is a combination of machine inventory codes and product keys. Server 2003 already uses this model. Once activated on your machine, you may not be able to install and activate it again on the same machine if any of your hardware is substantially changed.
I have many Corporate products and they do all use keys and registration. Volume licencing only means you can use the same key for all installs within the company.
The only volume licenced OS I have that Doesn&#39;t require registration is windows 2000 advanced server. No keys, no registration.

Those keys you speak of were in fact from MS. They were leaked and MS shut them down with SP1a but supplied the article above to the admins of the companies affected so that they would continue to recieve product support and upgrades.

If you don&#39;t recieve tracking reports when you submit an eror report, then you do not have a registered install&#33;

sparsely
07-08-2003, 09:25 AM
/me disables Error Reporting. I may have to turn it back on just to see what happens.
Think I can create a serious error?
:P

balamm
07-08-2003, 09:27 AM
I think in XP it&#39;s not hard to do ;)

chalkmongoose
07-08-2003, 11:50 AM
Originally posted by Sparsely@8 July 2003 - 09:25
/me disables Error Reporting. I may have to turn it back on just to see what happens.
Think I can create a serious error?
:P
Oh of course. Go to your device manager, find any device, and manually set your IRQ settings... That &#39;ll do it.

KUALKIERA
07-08-2003, 05:30 PM
Originally posted by Xilo@8 July 2003 - 03:35
Whatever is created by man will be destroyed by man...
no if the dog gets it first&#33;&#33;&#33; :lol: :lol: :lol:

Storm
07-08-2003, 08:40 PM
Originally posted by Keikan+8 July 2003 - 09:49--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Keikan &#064; 8 July 2003 - 09:49)</td></tr><tr><td id='QUOTE'>
Originally posted by Wolfmight@7 July 2003 - 11:47
Basicly.. since people can program in windows, software is crackable.

Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)
Hey i just thought of something can cards be crackable? Then we could get free credits on our playdium cards (Playdium is an arcade that uses rechargable cards if you ask me it&#39;s a waste of plastic)[/b]
could b............ i can remember old phone cards that where crackable........

sorta depends on the type........... is it with a chip, or magnetstrip, or just some special paint??? seek the internet and u shall find ;)


Originally posted by Cl1mh4224rd@8 July 2003 - 09:24

Originally posted by Storm@7 July 2003 - 22:40
<!--QuoteBegin-Wolfmight@7 July 2003 - 19:47
Hardware is a good example of uncrackable stuff. (cant download a faster graphics card lol)
uhmmmm........... there workin on that 2..........

dunno y a manufaturer would want that though.......... ud have an illgal copy of an intell processor...........
I&#39;d really like to see some real information on that project. I&#39;m no genius, but I can&#39;t see how it would be currently possible, and commercially viable, to alter physical hardware architecture with 1s and 0s.

Unless by "workin on that" you mean "it&#39;ll be ready in 300 years", then yeah, I can swallow that...[/quote]
not yet no........... but they have 3D printers allready (though indead not 4 the consumer markets...........

sparsely
07-08-2003, 09:21 PM
Originally posted by chalkmongoose
Go to your device manager, find any device, and manually set your IRQ settings...

Sheeeit...I don&#39;t want to render my hardware unusable :P
I&#39;ll just press the restart button on the box while windows is still open. It&#39;ll bitch when it comes back up.

chalkmongoose
07-09-2003, 01:10 AM
Originally posted by Sparsely+8 July 2003 - 21:21--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Sparsely @ 8 July 2003 - 21:21)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-chalkmongoose
Go to your device manager, find any device, and manually set your IRQ settings...

Sheeeit...I don&#39;t want to render my hardware unusable :P
I&#39;ll just press the restart button on the box while windows is still open. It&#39;ll bitch when it comes back up. [/b][/quote]
I just wouldn&#39;t consider that destructive enough for my taste :lol:
About the cards. I have a membership to the JCC in New York, only for the summer (I work there). I wonder how tricky it would be to reprogram the cards with a nice chip scanner.