RSSCat-and-mouse game begins: Microsoft blacklists leaked Windows 7 key
By Tim Conneally | Published July 31, 2009, 12:44 PM
The Lenovo OEM key that leaked earlier this week and allowed Windows 7 Ultimate to be cracked is being blacklisted, according to a blog post last night from Alex Kochis, Director of Genuine Windows at Microsoft.
Kochis says, "Yesterday we were alerted to reports of a leak of a special product key issued to an OEM partner of ours. The key is for use with Windows 7 Ultimate RTM product that is meant to be pre-installed by the OEM on new PCs to be shipped later this year. As such, the use of this key requires having a PC from the manufacturer it was issued to. We've worked with that manufacturer so that customers who purchase genuine copies of Windows 7 from this manufacturer will experience no issues validating their copy of Windows 7. At the same time we will seek to alert customers who are using the leaked key that they are running a non-genuine copy of Windows. It's important to note that no PCs will be sold that will use this key."
Despite Microsoft's apparent delight that users were so eager to crack the new version of Windows, it is only logical that the company would disable the key.
However, there are a multitude of other OEM keys which can be used to crack Windows 7 in the very same way, so this "crack and blacklist" situation will likely repeat itself several more times as those keys find their way out.
Hi to-the-uneducated-who-wish-to-know-the-truth-only-very-few-currently-know...
PC_Tool: "Once it starts shipping, it will be nigh on impossible for MSFT or the OEM to blacklist it (since thousands of legit users will already posses it."
I suggest you look into Microsoft Volume Activation. Since Vista, MS has been very aggresive against pirates... see:
http://www.betanews.com/...ista-Pirates/1166125242
When the OEM pre-activates a machine at the factory, it will most likely need to report that specific activation to a local KMS server which periodically reports the batch licensing to MS. Part of the data reported is a unique Hardware Hash of all specific models activated with that key, as well as specific machine identifiables such as OEM s/n as read directly off the BIOS.
A legit customer who will need to reformat their machine due to a virus strike some time in the future will need to activate with MS and will HAVE to have a hardware hash identical to an approved OEM model, as well as a valid serial # off the BIOS to match that model...
Pirating Windows 7 will be a pain in the arse with NO PERMANENT CRACK EVER MADE. YOU WILL ALWAYS, ALWAYS, ALWAYS HAVE TO RE-CRACK IT EVERY FEW MONTHS...
Score: 0
|Oh yeah, I forgot. Obviously MS have given or will give OEM's a cash incentive to include a completely UNFAKED identifier for EACH AND EVERY MACHINE they make by way of Trusted Platform Module -- an encryption chip. In 5-10yrs, once you got that on all motherboards in the market, you can kiss all-types-of-piracy goodbye FOREVER.
Score: 0
|I will further clarify. OEMs do NOT simply dump a pre-tested "ghost" image on a harddrive and say "byebye". OEM's run a QOS check from DVD/MemKey that tests all hardware on that specific machine to make sure nobody forgot to connect some wire or shook the box too much to cause some component to fail (memory, fans, whatever). That tester DVD can easily include code to pre-activate Windows while at the same time report the Hardware Hash, hardware s/n assigned by OEM, and if available, a unique digital signature produced by the TPM chip...
RESISTANCE IS FUTILE.
Score: 0
|"However, there are a multitude of other OEM keys which can be used to crack Windows 7 in the very same way"
is the above speculation, rumor or fact?
Score: 0
|Each OEM is given keys...Dell, Lenovo, Acer, Toshiba, etc...
the blocked one from Lenovo will be replaced.
Once it starts shipping, it will be nigh on impossible for MSFT or the OEM to blacklist it (since thousands of legit users will already posses it.
So to answer your question...it is fact. Orbit30/hazar will simply wait for the systems to start shipping to distribute the new keys and with that and a 4-byte BIOS hack, you're set for life.
Note: This post does not state any opinion or preference regarding the above activities, products or personalities.
Score: 0
|Well PC_Tool surprised to say the least, and not a little disappointed I might add. Every time an O/S is cracked an angel loses the ability to fly, I hope you realize that !
Score: 1
|Meh...
Angles can appear anywhere at will...who needs to fly? ;)
(I know this for a fact, as it was reported to me first-hand by the voices in my head) :p
Score: -1
|If it's good value for money then buy it,if you're short a few bob try a bit of Linux, and when all your attempts at getting whatever bit of Linux you installed to work have failed miserably, as they will, get a job which enables you to purchase the proper O/S honestly like the majority of folk have to do. Me, I've already taken delivery of my legit copy kindly supplied by the guy who runs a highly respected software business from the garden shed.
Score: 0
|After writing so many words on this subject, the mental exercise has brought me into this little theory:
To maximize the pain on as many pirates as possible, MS probably wants to do the following:
1. Pretend cracked systems are recognized as legitimate at their end.
2. Collect information on all the cracked machines (IPs, hardware hashes, OEM-computer s/n, trusted computing chip ID/signature, etc.)
3. Wait a few weeks while pretending not to know you are running a cracked machine.
4. About a day or two after releasing new updates, they FLAG YOUR SYSTEM AS CRACKED on your local machine.
5. Now, cracking groups will have no way of knowing if a certain Windows Update caused the crack detection or something else. This will delay re-cracking and frustrate the addicted crack users. ;) (Yes, I'm a poetic techie)
6. Of course, MS could do both, release crack-detecting code or just "misleading" detection code in its updates while also having the REAL but more INVISIBLE crack detectors in the system.
7. Invisible crack detectors = rootkits in the kernel itself. Nobody can touch the kernel without causing third degree burns to his paws.
8. Microsoft wins.
Thank you for the mental exercise. ;) Let's see my theory in practice now. Or at least lets see Microsoft make it a reality eventually, when their collective IQ starts to scratch mine. ;)
Score: -2
|the only thing that amaze me from your comments dude is, how did you manage to get score -2 on all your comments (sometimes surprisingly only -1).
by now it should be around minus one billion, well, at least..
btw Mr. high IQ, in OEM activation there's no internet involved...wow
Score: 1
|LOLLING OUT LOUD (for you less-cerebral-than-myself, that would be the employment of a little known poetic device called REPETITION por emphasis)
Anyway.
The bigger the minus score, the more people read my holy words. It's basic human nature (curiosity), my easily-surprised friend hehehehehehehe
BTW, you are a fool like the vast majority of them. You are unable to do simple research. You believe the common myths. OEM activations REQUIRE INTERNET YOU MORON. IF NOT DIRECTLY TO MICROSOFT THEN THROUGH A PROXY CALLED A KEY MANAGEMENT SERVICE..EHHRRRMMM..SERVER WHICH IS FORCED TO COMMUNICATE WITH MICROSOFT OR ELSE ALL THE LICENSES IT "AUTHORIZED" BECOME T.P. FOR STEVE BALLMER'S FAT ARSE AFTER AN EXCESSIVELY OILY FRENCH LUNCH.
In other words, you are clueless as to what is really going on as far as licensing is concerned........which is the only reason why you, like 99% of the people, will STILL try to crack Windows 7 month-after-month, without grasping how the hell they keep catching you as a pirate. You're all a bunch of idiots, really...I have seen exactly ONE PERSON HERE who actually supports my view right now. There will be 50,000,000 supporting my view in a few short months.......when you crown me your tech prophet....hehehehehehehehehe
Now go take a nap and forget about researching any material on your own....I don't want you to hurt those pretty 2.5 remaining braincells of yours... ;)
Score: 0
|I have never paid for software of any kind, including OSes, since I started my delve into computers back in the early 90s. They have always been "gifted" to me. There will always be a crack for highly desirable software. Does it work perfectly? Yep. Some may say that, for instance on XP, that if you go to MS update site, it doesn't work because of the validation shows an illegal copy of XP. That is true, BUT, with automatic updates on, the OS always updates the latest patches every first Tuesday of the month. Will that be true in Windows 7? Who knows, someone will figure it out though. Prices are the only reason I am "gifted" software. If prices for software were of this planet, I probably wouldn't need so many gifts. As a matter of fact, I would buy Windows 7 full retail if it was around 100 bucks. Photoshop CS too!
Yeah, I know. Some will say it's because of ppl like me is the reason prices are so high. Phooey! I, and ppl like me, account for less than 5% of gifted software. I just am lucky enuff to know where to get things when I need them. Actually, if you go to any local computer show, one can find a plethora of discounted software, most being OEM.
So the war against warez will go on and on but will never be won, yeah, just like the war on drugs.
Score: -2
|Oh God, lemme educate your very simple mind. What was once true, will no longer be. You must be a complete RETARD if you think that MS won't FORCE FEED YOU WGA-STYLE CODE. The fact WGA is now an "optional" download which you can conveniently NOT INSTALL on WinXP does not mean that NOW, THAT WGA HAS PROVEN HIGHLY USEFUL, MS WILL NOT START FORCE FEEDING IT TO YOU, WITHOUT TELLING YOU IN CASES THAT IT DOES NOT CONTACT MS SERVERS.
WGA without contacting server??
Yes, you idiot. All MS needs to do is include with future updates/drivers/software code that perform a system self-check and disable itself when it detects you've been messing around. Resistance is futile. YOU SHALL BUY A LEGIT COPY OF WINDOWS 7 (upgrade for $50) SOONER THAN YOU THINK.
I've never bought an MS OS before Windows 7, because I'M SMART ENOUGH TO UNDERSTAND THAT THE PARTY IS OVER. I've pirated probably 500x more programs than you did -- all the goodies the world has to offer. But I understand that SOME THINGS will never be piratable again... latest Windows/Office are the first two things on that list, my boy.
Mark your calendar and look at this post in 5 yrs time. I'll be proven 100% right.
Score: -3
|By allowing updates to install even on non-legit machines Microsoft is being pretty responsible in keeping you safe and your os working.
At least they have some decency where as you clearly don't by openly exclaiming with pride that you've never paid for any software.
Score: 1
|Oh God, some of you ppl are SOOOOOO DUMB. Your IQ is sooooo beneath mine, it's actually comedic.
Now straight to the point. BLACKLISTING AT THIS POINT IS ABOUT THE EASIEST THING FOR MS TO DO. Nobody "alerted" MS of anything. MS doesn't even NEED to spend one penny from their trillions of pennies in placing moles inside bittorrent private sites etc. THEY DON'T NEED TO DO THAT TO CATCH "AN OEM KEY ON THE LOOSE".
Why is that, you say? Well, think about it for a second, YOU FRIGGIN MORONS. MS looks at their logs and say... "gee, this one code is being 'Activated' from so many countries and so many computers with various hardware-hashes [again, google microsoft hardware hash]...even before this computer is ON THE MARKET!!...could it be...that..it..was...LEAKED??????"
Noooooooooooooo, that was soooooooooooo harddddddddddd toooooooooo figureeeeeeeeeeee outttttttttttttttttttt...
hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha
'K nuff now.
Score: -5
|I have two non-Lenovo systems with [OEM Activation 2.1] compliant BIOS that shipped [4/09] *way before* Windows 7 was released. The Vista certicate and the blacklisted Lenovo leaked Windows 7 OEM key were accepted and activated as *genuine* using the following commands:
slmgr -ilc
slmgr -ipk
Even though these machines shipped pre-activated with Vista SR-2, Windows 7 is now fully activated and will *stay activated* as soon as corresponding OEM keys are released with pre-activated systems [After October 22, 2009]
I have currently modified/flashed several OEM Activation 2.0 BIOS's to 2.1 compliance; it's easy if know what you are doing-- the marker changes are only four bytes long and everything else is the same. These systems are now fully activated with Windows 7.
I am currently planning to deploy, via OEM Preinstallation Kits [OPKs], several hundred Windows 7 installation here at the federal penitentiary.
You have proof... from the horse's mouth not ass.
I hope you don't have a real job in IT, if you do, please indicate if it is a public held company, so I can initiate: opened-ended put options with a stop-loss at market and make some more money.
You may think you are smart; but I am rich!
Score: 3
|You're full of it, 'Bernie'. I'll be conservative...if I was making $2,000 an hour (by my calculations you were stealing at least a cool million bucks every hour for 20 years!) then I must be a total sick ph*ck if I were to spend 2 mins on cracking Windows, or installing Windows, or even using computers... I'd have my secretary D*CKtate everything including url's for me hehehehe
So you didn't really crack jack s***. I'm sitting well inside the private torrent sites, which as you know being as old as you are, are the modern replacement for 0day warez BBSs. TODAY AND YESTERDAY AND TOMORROW, EVERYONE IS CRYING THAT THE WINDOWS CRACKS, ARE, WELL, A HALLUCINATION AT BEST.
My IQ is still much higher than yours, and so I will give you further explanation as to why you're such an idiot. Microsoft, like any smart entity, will FOOL YOU TO THINK YOU'VE FOOLED THEM. Try this on your voicemail -- try to hack it by brute-force. You'll get 1st try wrong, then EVEN IF YOU ENTER THE CORRECT PIN THE 2ND TRY, THE SMART SYSTEMS WILL STILL TELL YOU "ERR WRONG". YOU MUST ENTER THE RIGHT CODE TWICE IN A ROW.
Lesson??? Yes, I didn't think you would be able to learn the lesson, so here it is: Microsoft's anti-cracking algorithms MOST LIKELY (if they're remotely as smart as me), will give you a FALSE FEELING OF HOPE. "Hurray! you have cracked Windows once again!" -- the Russian/Chinese crack maker will think, while in fact, MS is simply yanking on his ballz. They know he's f*cking around and as soon as they feel like taking a dump on his face they WILL PUSH THE RED BUTTON THAT IS CONVENIENTLY LABELED: F*CK YOU.
You have been warned.
Once again, when you become a legitimate Windows 7 owner (when you've given up on re-cracking the arse of Windows), don't bother coming here to tell me what a great Prophet I am. ;) It will be sufficient for you to think such divine thoughts in your heart. Amen.
Score: -5
|Rumors around the web are inidicating that this had zero effect, ie. it isn't working. Too funny if that's indeed true!
Score: 1
|It is indeed true.
Using the BIOS hack and OEM key, you are set....for life.
To stop SM from de-activating it with a "update"? One line in your HOSTS file.
Uncrackable, my ass.
Score: 1
|Tis true. Absolutely true. Just ask Bernie Madoff, below.
Score: 0
|Why bother blacklisting a key *before* the OS is even released?
MS did not change the protection scheme, moving from Vista to Windows 7.
BIOS mods from OA 2.0 [OEM Activation 2.0] to 2.1 + Vista certificates + OEM keys [released after 22 October] will allow anyone to steal Windows 7.
I have too much time on my hands... when I am not bending over to pick up the soap in the communal shower.
Score: 4
|Madoff is currently making deals to hire protection on the inside. As you well know he has hundreds of millions hidden here and there.
Score: 0
|I'm gonna say it ONCE again so you idiots who keep insisting "everything is crackable" read this warning carefully so you don't waste your time cracking Win 7 Ultimate, only to have to later on REFORMAT YOUR MACHINE and install legit Windows 7 Home Premium on it.
There's NO WAY you can beat Microsoft in this game any more. Any BIOS hacks are bound to be noticed by MS... Like, c'mon, how the F*CK are you gonna fake a valid computer serial number of some Dell customer? MS's anti-piracy algorithm makers OBVIOUSLY thought of that one, "genius"... So when you're using valid OEM keys on a faked BIOS, you better also be able to fake a real serial number of that OEM's hardware. MS may have a list of all those valid s/n's... So you'd think, "gee, I can probably just go to Best Buy and steal some valid serial # from the BIOS screen or copy it off the bottom of the laptop".. ERRRR, wrong answer...you'd also have to steal all the hardware there...Microsoft has a list of hardware-hashes associated with that serial - they've BEEN USING that hardware-ID FOR YEARS for decision making on Activation of "same PC reformatted? PASS, or totally diff PC? FAIL"...google "microsoft hardware hash"......
"but what if I change the X device on my new PC???" you ask - well, what's the problem there, sweetboy? First you ACTIVATE with the REAL HARDWARE, then you can change it without MS bothering you... And if they're suspicious, I'm sure they can very easily judge in your favor when they see your IP is from the same GEOGRAPHICAL LOCATION, right sweetboy?? And if you scream too much they'll just say "no problem, just give us your real name and contact info, a fax of the license, and there ya go." and they'll give your last Hardware-hash the green light. Now another hardware-hash tries to use same license?? They'd be denied and have to call MS to activate, but this time you'd have run out of stories, sweet boy... So, can you fake the IP of the lawful original owner of the license?? Can you fake the hardware hash of the original lawful owner??
Didn't think so.
Now, whether MS is actually as smart as me or not, remains to be seen. Whether they want to stick it hard to the pirates at the beginning, or let a little piracy on the loose for a little "undetected" while ALSO remains to be seen. [Update 8/1/09: apparently they wanna stick it hard all the way, consistively from pre-market-birth of this new OS.] I've simply given you the theoretical WHY to answer the question on your mind in the near future.."WHY did my cracked Windows 7 detect itself as pirated"....
Now good luck. You're gonna need A LOT OF LUCK to rip out WGA-type-inserted code in ALL future MS files..I've said files..drivers..updates..freebies like Live Messenger, etc etc.. not to mention the (potentially) already sprinkled "sleeper cells" in the OS...ready to terrorize any pirate in the future... IT IS HOPELESS - WINDOWS 7 SHALL BE DEEMED UNCRACKABLE BY ANY PRACTICAL MEANS WITHIN A YEAR OR TWO OF RELEASE...
Score: -5
|"There's NO WAY you can beat Microsoft in this game any more. "
Too late. Already done. :)
So sorry...
Score: 3
|They blacklisted the key as it would be very simple to do given that OEMs (Lenovo in this case) hadn't started using it in anger yet.
Changing a pre-staged\mass duplicated image with a new key to be used for activation wouldn't take long for them (Lenovo) to do and given they leaked the key it is quite frankly their own fault so even if it caused a lot of pain they would have deserved it.
If the key is blocked it will stop so many people hacking their activation who otherwise would become legit purchasers of Windows7.
Score: 0
|Sorry, but your just wrong.
What you are saying is that all manufacturers of pcs would need to provide details to Microsoft? They could only realistically get that info as part of an OEM deal (not part of the current legal stuff) and so all the non OEM machines would be unknown to the system.
When it comes to Microsoft being able to collate that sort of information in the past they haven't been able to.
As an example just look at the vendor id scheme for hardware\software device detection\enumeration that was championed by Microsoft and the PCI organisation. They lost track in less that a year of it's use because of all the small-fry firms who created hardware with generic or plain made-up hardware ids which has lead to thousands of 'unknown devices' and so the majority not getting the Windows seal of approval.
Score: 0
|Seeing that Windows is likely one of the most pirated programs of all time, it doesn't surprise me that the key was blocked. Problem is, you can't blacklist every key. Making software pirate-proof is almost impossible these days.
Also, if they think WGA will protect them, it's easily foiled with a line in the hosts file. (It worked in XP and vista anyway, don't have a system to format to try 7. No luck with it in Virtual PC).
Score: 0
|Blacklisting won't worl.
It never does.
Try selling your product for a more reasonable price, M$ - say, $50.
Score: -3
|They did. Pre-order copies we're $50, and the 3-license pack is $150 (do the math).
I know, that's not enough. Lazy people shouldn't have to pay more, right?
Yes, blacklisting won't work. It will quickly get to the point where it will be impossible for the OEM to *not* ship PC's with the compromised key and thus blacklisting it would harm the OEM and customer perceptions of Win7.
Of course, that doesn't mean there aren't other methods of invalidating those systems...keeping up the cat and mouse game. For folks who claim cracking is less hassle than WGA....it's gotta be getting harder to make that claim and keep a straight face.
Score: 1
|It was available online only and not all of us have credit cards......... I know that I would have bought a copy if it were available at a local store.... I don't expect you to understand any of this since, after all, you are retarded, The Tool.
Cracking Windows is getting easier and easier, pRicky Retardo.
Score: -3
|Are you saying you don't have a bank account? I don't know of any banks that don't provide a visa check card...but keep on reaching.
Score: 0
|The $50 is upgrade, otherwise $199 for the simplest version!
Score: 0
|@sjc:
Yeah...I'm the retard. *yawn*
@omV0:
...who buys full retail? Seriously... The only reason you'd do that is when building a new PC...and then you'd be stupid not to buy OEM.
Score: -1
|Is that for the FULL version or the POS upgrade? If it's the full then that's great. And fair. And if it's the upgrade, screw 'em. They deserve what they get.
I'm all for paying if it's a fair price. The RIAA and MPAA are both learning that lesson the hard way and M$ should be taught it too.
Score: 0
|@roj:
Again: Upgrade. But really... Who buys full retail? The upgrade is capable of a stand-alone, clean install. All you have to do is show it the disc...and AFAIK, it can be a cloneCD image, ffs...
Score: 1
|How is that any different from cracking the software? You're not abiding by the license, so youre infringing copyright/stealing/whatever you think it should be called.
Score: 0
|Uh, the license states you are able to do a stand-alone install if you have a previous version of Windows...
Score: -1
|WinRAR = $30.00
Nod32 = $40.00
Windows 7 = $50.00
See how stupid you sound? Come on.
Score: 1
|@Niro: Some people are too lazy to get a Visa or Mastercard debit card. It's probably hard enough for sjc001 to be away from his computer for the time it would take to buy Windows at a local store.
Score: 0
|@PC_Tool: Sometimes there are situations that require both 32-bit and 64-bit Windows. I need 64-bit Windows on my desktop because it has 8GB RAM. My laptop on the other hand needs 32-bit Windows because Datacolor hasn't released 64-bit drivers for their SpyderTV colorimiter.
Score: 1
|@ terminalx: did you read the EULA? I copy the part related to this here:
UPGRADES.
To use upgrade software, you must first be licensed for the software that is eligible for the upgrade. Upon upgrade, this agreement takes the place of the agreement for the software you upgraded from. After you upgrade, you may no longer use the software you upgraded from.
And that contrasts with PC_Tool saying:
...who buys full retail? Seriously... The only reason you'd do that is when building a new PC...and then you'd be stupid not to buy OEM.
Score: 0
|Sorry, quoted the wrong post.
Again: Upgrade. But really... Who buys full retail? The upgrade is capable of a stand-alone, clean install. All you have to do is show it the disc...and AFAIK, it can be a cloneCD image, ffs...
Score: 0
|@DonGato:
"All you have to do is show it the disc...and AFAIK, it can be a cloneCD image, ffs..."
I don't see anything in that post stating my opinion regarding this use, either for or against, or attempt to pass it off as "legit".
Sometimes people read too much into things...
Score: 0
|That USED to be the case and then it changed, requiring you to have the full version of the OS installed. Has it changed back?
Score: 0
|I must have missed the change. Got a link for me?
Sucks. I don't have any "upgrade only" media to test it with.. :(
Score: 0
|No - personal experience back in the Win2K days. I didn't bother with upgrades after that.
Score: 0
|The right move made by Microsoft
Score: 3
|Really? They should get rid of all this WPA, WGA and other activation schemes. What only does is trouble legal users. I'm still using Windows 2003 because 2008 activation is draconian (granted, also because it wastes space and resources).
Score: 0
|Absolutely draconian. It took several mouseclicks - I am exhausted.
Score: -2
|So you activated Windows 2008 in a secure environment with a KMS server?
And it was just "several mouseclicks". Glad for you!
Score: 0
|