<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx</link><description>I know many of you are aware of reports of hacks that attempt to exploit our OEM BIOS based activation. We're aware of this type of hack and I wanted to take a minute to describe how these work and how we plan to respond. First, what is OEM BIOS based</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>TheXBlog  &amp;raquo; Blog Archiv   &amp;raquo; Windows Vista: Microsoft wird OEM-Hacks bek??mpfen - aber nicht alle</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2075470</link><pubDate>Tue, 10 Apr 2007 20:57:47 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2075470</guid><dc:creator>TheXBlog  » Blog Archiv   » Windows Vista: Microsoft wird OEM-Hacks bek??mpfen - aber nicht alle</dc:creator><description>&lt;p&gt;PingBack from &lt;a rel="nofollow" target="_new" href="http://www.thexboard.de/blog/?p=16"&gt;http://www.thexboard.de/blog/?p=16&lt;/a&gt;&lt;/p&gt;
</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2083610</link><pubDate>Wed, 11 Apr 2007 11:45:40 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2083610</guid><dc:creator>Tlippy</dc:creator><description>&lt;p&gt;I have a legit copy of XP pro, let that be said right now. As a business owner here I need a copy of Vista for practice on how to repair the multitude of problems that are going to occur with my customers machines. I however am NOT going to give you $400 for a piece of software which I would be hard pressed to justify the price of $150 for. You priced yourself's out of the market for the average customer. Did you ever consider that people wouldnt be putting forth the extreme effort to pirate this software if you were not gouging them by the eyeballs? How much money would you make at $50-$100 a pop, hundreds of millions, instead of half a billion? Vista underlies why people pirate your sofware, you over charge and under deliver. I'm going to continue to use a bios emulated Vista as a testing machine, while sticking with my legit XP as primary, mostly because Vista is inferior to XP currently, and possibly in perpetuity, and I refuse to pay 4X more for an inferior OS. &amp;nbsp;Did you ever think that by simply lowering the price of your OS, instead of constantly trying to counter the piracy aspect you just might actually increase sales? If you make it hard to copy, but cheap to buy, people will buy it. If you make it $400, well, then you just make piracy more attractive. It's that simple folks, you can try to come up with all sorts of defenses about why you HAVE to charge this, and piracy is evil plain and simple, but point is you're greedy. You've priced yourselfs out of what the majority of the population is willing to pay, and you've made piracy that much more attractive. I'd have paid for an upgrade to Vista Ultimate, but now why bother. Paradox has given you your just desserts, and I hope the public gets fat on that, as opposed to your bank accounts getting fat with the hard earned money of the average consumer. &lt;/p&gt;</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2085225</link><pubDate>Wed, 11 Apr 2007 14:40:56 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2085225</guid><dc:creator>Cyraq</dc:creator><description>&lt;p&gt;Alex, will you stop your poorly written defensive/offensive stances on the various Vista cracks out there and realize that it's been pirated and that there's nothing you can do about it? I'm using a cracked copy right now (and ever since early February), and I can use Windows update and everything is working perfectly. I have an ISO complete with crack on the internet. All my friends without exception are using a cracked copy.&lt;/p&gt;
&lt;p&gt;What are you going to do about it?&lt;/p&gt;</description></item><item><title>Microsoft blogs about "Reported OEM BIOS Hacks"</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2085858</link><pubDate>Wed, 11 Apr 2007 15:51:38 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2085858</guid><dc:creator>Donna's SecurityFlash</dc:creator><description>&lt;p&gt;Alex Kochis, a Microsoft Senior Product Manager, Windows Genuine Advantage blogs yesterday regarding&lt;/p&gt;
</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2094011</link><pubDate>Thu, 12 Apr 2007 04:38:11 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2094011</guid><dc:creator>rdamiani</dc:creator><description>&lt;p&gt;One of the stated goals of WGA is to reduce or eliminate pre-loading by unscrupulous computer manufacturers. The main advantage WGA supposedly offers to end users who have to deal with it is the knowledge that thier software is 'genuine'.&lt;/p&gt;
&lt;p&gt;With that in mind, lets say that I am an unscrupulous computer vendor. With XP, I could use VLKs and volume media to bypass activation alltogether. If I was both kinda dumb (used the same key over and over again) and kinda successful (sold lots of computers) eventually the on-line validation system might flag the key I was using and I'd get busted. If I'm not mistaken, MS has caught a few folks exactly that way, so we'll call that a win for WGA 1.0.&lt;/p&gt;
&lt;p&gt;Now lets suppose I'm a slightly smarter, but still unscrupulous, box builder. I used many different VLKs that I got through various means, so even though I was kinda successful, I managed to fly under the radar of on-line verification. It's kinda nervous-making though. If my supply of VLKs drys up (or my VLK supplier is also unscrupulous and sells me bad or overused keys) or I get careless, on-line verification is gonna catch on and I'll get busted. We'll call that mostly a win, because once I get successful and nervous enough, I'm gonna convince myself that I better get legit.&lt;/p&gt;
&lt;p&gt;Now let's look at WGA 2.0. VLKs aren't much good to me now, 'cause VLKs also need activation, and they have a limit on the number of activations. If I acquire one and start using it, someone is gonna notice quickly. So what to do? Go legit? Nah. I'll use OA 2.0. It was a bit too much bother with OA 1.0 'cause VLKs were easy. With OA 2.0, though, I can mod ACPI tables in bulk as I build systems. I don't even need to figure out how on my own, 'casue there are on-line toolkits and instructions for it. Since OEMs apparently use the same (small) set of CD Keys over and over again, I don't have to worry about on-line verification catching one of my customers. Now I'm not nervous anymore, because I don't need a source of VLKs. Unless my numbers get big enough to rival a 'name brand' builder, my little subterfuge is undetectable. Result? We'll call that a loss for WGA 2.0. It fails to have an effect on one of the main reasons we, as consumers and VARs, have been told that WGA is for our own good.&lt;/p&gt;
&lt;p&gt;The way I see it, MS needs to either stop with the doublespeak about the 'advantage' that WGA offers and present it as what it is - software licensing - or it needs to figure out how to put this particular genie back into it's bottle. Good luck with that.&lt;/p&gt;</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2094305</link><pubDate>Thu, 12 Apr 2007 05:10:04 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2094305</guid><dc:creator>Will</dc:creator><description>&lt;p&gt;About time Microsoft has responded to the paradox crack for Windows Vista.&lt;/p&gt;
&lt;p&gt;This crack can easily be made wide scale and just as easy to commercialize it. Already seen a few aholes trying to sell pre cracked Vista dvds.&lt;/p&gt;
&lt;p&gt;So yeah you better do something about this one!&lt;/p&gt;</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2096514</link><pubDate>Thu, 12 Apr 2007 10:00:32 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2096514</guid><dc:creator>Customer#985</dc:creator><description>&lt;p&gt;About time you responded&lt;/p&gt;
&lt;p&gt;So, when will the ban go into affect? Vista needs to ban more methods than just the old token.dat one. Timerstop, etc all need to be banned in addition to this one.&lt;/p&gt;</description></item><item><title>OEM BIOS Hacks f&amp;uuml;r Vista-Aktivierung</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2096591</link><pubDate>Thu, 12 Apr 2007 10:09:54 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2096591</guid><dc:creator>Teamzille.de</dc:creator><description>&lt;p&gt;Schon seit l&amp;amp;auml;ngerer Zeit exisieren M&amp;amp;ouml;glichkeiten, um die die Aktivierung von Windows Vista zu umgehen. Da Microsoft an OEM-Partner Lizenzschl&amp;amp;uuml;ssel ausliefert, die nicht aktiviert werden m&amp;amp;uuml;ssen, lassen sich &amp;amp;uuml;ber diesen Weg alle&lt;/p&gt;
</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2098138</link><pubDate>Thu, 12 Apr 2007 13:46:16 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2098138</guid><dc:creator>feuvan</dc:creator><description>&lt;p&gt;So it means that the simulation way to fool OA-2.0 would be broken one day?&lt;/p&gt;
&lt;p&gt;And it's interesting to call them &amp;quot;mad scientist&amp;quot;.&lt;/p&gt;</description></item><item><title>Vista OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2108947</link><pubDate>Fri, 13 Apr 2007 07:29:09 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2108947</guid><dc:creator>Santhosh Sivarajan, Houston,TX</dc:creator><description>&lt;p&gt;Read at &lt;a rel="nofollow" target="_new" href="http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx"&gt;http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx&lt;/a&gt; Technorati : Vista&lt;/p&gt;
</description></item><item><title>The Vista Daily #18</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2110450</link><pubDate>Fri, 13 Apr 2007 10:06:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2110450</guid><dc:creator>Robert McLaws: This Time, It's Personal</dc:creator><description>&lt;p&gt;Thursday is now officially Delay Day. Both Apple and Microsoft took their lumps for delaying products&lt;/p&gt;
</description></item><item><title>The Vista Daily #18</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2110451</link><pubDate>Fri, 13 Apr 2007 10:06:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2110451</guid><dc:creator>Robert McLaws: Windows Vista Edition</dc:creator><description>&lt;p&gt;Thursday is now officially Delay Day. Both Apple and Microsoft took their lumps for delaying products&lt;/p&gt;
</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2111488</link><pubDate>Fri, 13 Apr 2007 11:21:50 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2111488</guid><dc:creator>MadDoggyca</dc:creator><description>&lt;p&gt;Just Give up... I don;t want to sound nagitive but face it. the only reson why windows ownz the desktop market is becuz most user do infact use a hacked verion... I be more focuing on Price Competeing with apple OSX at 104$USD&lt;/p&gt;
&lt;p&gt;the only reson why OSX never gets hacked attack is becuz a avg user will pay out 104$USD ever 2 years. and they have no naging actvation BS... &lt;/p&gt;
&lt;p&gt;now that I sound like a Apple fan boy I infact do not own a mac and I bought the 499$ Ultamite edition as I can not stand being jipped out of feture that a user should not have to pay for.... and I don't have the time to fiddle with hacks and rehacks ever time they come out with patches...&lt;/p&gt;
&lt;p&gt;but honestly give up.. drop Ultamite Eiditon to aroudn 150$ ..drop all over Version alltogher.... and start regain people respect... in the end the most Revenu From windows COmes form Corpation anywazs and OEM Sales...&lt;/p&gt;
&lt;p&gt;homeuser could proable care less of upgrading anywazs. If it isn;t borken don't fix it..and if Steve gets smart and relases OSX under x86 x64 hardware windows will be running for its money,,,&lt;/p&gt;
&lt;p&gt;my 2 cents in&lt;/p&gt;</description></item><item><title>Microsoft confirma la existencia de un crack para Windows Vista.</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2112215</link><pubDate>Fri, 13 Apr 2007 12:32:32 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2112215</guid><dc:creator>.::MegaRed::.</dc:creator><description>&lt;p&gt;Lleva alg&amp;#250;n tiempo circulando a trav&amp;#233;s de Internet un crack que evita el proceso de activaci&amp;#243;n de Windows Vista.La efectividad del crack ha sido reconocida por Alex Kochisen, Senior Product Manager de Microsoft, que ha admitido la existencia de un fallo&lt;/p&gt;
</description></item><item><title>Microsoft confirms Vista OEM hack</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2133443</link><pubDate>Sat, 14 Apr 2007 19:08:24 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2133443</guid><dc:creator>Vista News and Resources</dc:creator><description>&lt;p&gt;In response to widespread chatter on blogs and forums, Microsoft has acknowledged the presence of hacks&lt;/p&gt;
</description></item><item><title>re: Reported OEM BIOS Hacks</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2159288</link><pubDate>Tue, 17 Apr 2007 05:18:52 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2159288</guid><dc:creator>rdamiani</dc:creator><description>&lt;p&gt;One of the stated goals of WGA is to reduce or eliminate pre-loading by unscrupulous computer manufacturers. The main advantage WGA supposedly offers to end users who have to deal with it is the knowledge that thier software is 'genuine'.&lt;/p&gt;
&lt;p&gt;With that in mind, lets say that I am an unscrupulous computer vendor. With XP, I could use VLKs and volume media to bypass activation alltogether. If I was both kinda dumb (used the same key over and over again) and kinda successful (sold lots of computers) eventually the on-line validation system might flag the key I was using and I'd get busted. If I'm not mistaken, MS has caught a few folks exactly that way, so we'll call that a win for WGA 1.0.&lt;/p&gt;
&lt;p&gt;Now lets suppose I'm a slightly smarter, but still unscrupulous, box builder. I used many different VLKs that I got through various means, so even though I was kinda successful, I managed to fly under the radar of on-line verification. It's kinda nervous-making though. If my supply of VLKs drys up (or my VLK supplier is also unscrupulous and sells me bad or overused keys) or I get careless, on-line verification is gonna catch on and I'll get busted. We'll call that mostly a win, because once I get successful and nervous enough, I'm gonna convince myself that I better get legit.&lt;/p&gt;
&lt;p&gt;Now let's look at WGA 2.0. VLKs aren't much good to me now, 'cause VLKs also need activation, and they have a limit on the number of activations. If I acquire one and start using it, someone is gonna notice quickly. So what to do? Go legit? Nah. I'll use OA 2.0. It was a bit too much bother with OA 1.0 'cause VLKs were easy. With OA 2.0, though, I can mod ACPI tables in bulk as I build systems. I don't even need to figure out how on my own, 'casue there are on-line toolkits and instructions for it. Since OEMs apparently use the same (small) set of CD Keys over and over again, I don't have to worry about on-line verification catching one of my customers. Now I'm not nervous anymore, because I don't need a source of VLKs. Unless my numbers get big enough to rival a 'name brand' builder, my little subterfuge is undetectable. Result? We'll call that a loss for WGA 2.0. It fails to have an effect on one of the main reasons we, as consumers and VARs, have been told that WGA is for our own good.&lt;/p&gt;
&lt;p&gt;The way I see it, MS needs to either stop with the doublespeak about the 'advantage' that WGA offers and present it as what it is - software licensing - or it needs to figure out how to put this particular genie back into it's bottle. Good luck with that.&lt;/p&gt;</description></item><item><title>Vista da kırılıyor</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#2206331</link><pubDate>Fri, 20 Apr 2007 15:04:29 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2206331</guid><dc:creator>Haluk Blog Sayfası</dc:creator><description>&lt;p&gt;&amp;#220;r&amp;#252;n m&amp;#252;d&amp;#252;rlerinden Alex Kochis, Windows Genuine Advantage blog sayfalarında , yapılan hack işlemi hakkında&lt;/p&gt;
</description></item><item><title>With SP1, Microsoft plans to ditch the Vista kill switch</title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#6669312</link><pubDate>Wed, 05 Dec 2007 21:52:36 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:6669312</guid><dc:creator>13BIT.com.ar</dc:creator><description>&lt;p&gt;With SP1, Microsoft plans to ditch the Vista kill switch&lt;/p&gt;
</description></item><item><title>bios need help worm </title><link>http://blogs.msdn.com/wga/archive/2007/04/10/reported-oem-bios-hacks.aspx#9855687</link><pubDate>Sun, 02 Aug 2009 18:09:19 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9855687</guid><dc:creator>peace101</dc:creator><description>&lt;P&gt;hi, i been fighting this worm since aug/sep of 2008.&lt;/P&gt;
&lt;P&gt;its the most advanced worm i seen. &amp;nbsp;&lt;/P&gt;
&lt;P&gt;undetectable, breaks through any security i put up so far, erases tracks of itself and the hacker that logs on as remote anonymous user&lt;/P&gt;
&lt;P&gt;someone has intent behind this one.&lt;/P&gt;
&lt;P&gt;no matter what i do, i for the first time have no control over my computers. &amp;nbsp;&lt;/P&gt;
&lt;P&gt;after low level formating my drives and finding linux and windows PE, and 17 other partitions, when i try to install the new restore disk i just purchased, i get same results. &amp;nbsp;it seems everything is still intercepted and replaced. &amp;nbsp;the only thing i havnt done yet cause i dont know how is to check the bios and firmware for the hardware. &amp;nbsp;&lt;/P&gt;
&lt;P&gt;can anyone guide me in the right direction.&lt;/P&gt;
&lt;P&gt;this hacker uses my machines to break into a lot of others. &amp;nbsp;i believe it uses a virtual computer in locked memory loaded from the first master boot record in sector zero. &amp;nbsp;but even when i wipe it clean, i find its very dug in. &amp;nbsp;&lt;/P&gt;
&lt;P&gt;i believe it uses PING methods to spread to others. &amp;nbsp;it mostly infecting phone companys, internet companys and cable companys. &amp;nbsp;&lt;/P&gt;
&lt;P&gt;the hackers finaly made mistakes and i reported them. &amp;nbsp;and one in a lawsuit for cybercrimes. &amp;nbsp;but for now, i cant get to the worm cause it has to be in the firmware or bios. &amp;nbsp;and spreading through dns servers.&lt;/P&gt;
&lt;P&gt;this has to be the apr first worm and they made the mistake on march 31st and i talked to the hackers. &amp;nbsp;the way its written seems to be like its from the FBI, but i learned later, its not, but they are on the case...&lt;/P&gt;
&lt;P&gt;how can i check the bios and the firmware storage area, and if possible, i may need also to get into my hubs and routers and dont know how. &amp;nbsp; the hacker seems to use telnet..&lt;/P&gt;
&lt;P&gt;thanks in advanced&lt;/P&gt;</description></item></channel></rss>