Silicon Valley Sleuth, an insider's view from Silicon Valley
A blog from vnunet.com



Other blogs
PCW Inter@ctive
Your views, your comments, your say

Security Watchdog
Sniffing out IT security
issues

The test bed
The hottest products, news and gossip from PCW's
Labs.

IT Sneak
IT Sneak Blog rummages in the dustbin of IT events.

Backbytes
An irreverent and offbeat look at the lighter side of technology

InterActive Home
Your complete guide to home entertainment technology

Taking Stock
Gags and Gossip from Accountancy Age.

Gizmodo
The gadgets weblog.



« AMD and Intel continue price wars | Main | Living a Web2.0 first life »

Microsoft still out on plugging Vista BIOS crack

Microsoft says it's monitoring a method that allows users to install pirated copies of Windows without tipping of built in anti-piracy protections, but isn't yet committing to closing the loophole.

34140346_7b9b2a2af3_m It all has to do with a feature dubbed OEM Activation: a method that allows system builders to verify the authenticity of a Windows copy, no questions asked. It relies on a special marker in the BIOS. Add the marker to your BIOS, or emulate that it's there, and Microsoft will stop bugging you.

Tinkering with your BIOS isn't something that you want to do. If you do it wrong, there's a good change that your computer will simply refuse to boot up. You can't rely on simple third party tool either, because the BIOS differs between system vendors and even computer models.

The emulation route would be a much safer road. Except that it's much easier to block a software application than it is to detect a BIOS that has been tinkered with.

That creates an opportunity for hackers and malware writers looking to expand their businesses beyond botnets, identity theft and holding data hostage. Surely these nice gentlemen will be able to create a single application that supports most Dell, HP and Acer systems? Plenty of consumers will be happy to shell out say $40 for a tool that lets them get their hands on a $400 application.

Dsc00672

Pirates allowed Chinese consumers to purchase Vista before the official launch

April 12, 2007 at 01:13 AM | Permalink

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/t/trackback/24766/17648012

Listed below are links to weblogs that reference Microsoft still out on plugging Vista BIOS crack:

Comments

So would it be possible for a hacker/malware/cyberterrorist to write software that emulates a bios that does not have this in it even if it did - effectively making the machine refuse to boot? if that could be delivered as a time bomb style payload - wow on a certain date PC's all over the world would refuse to boot

Posted-by: Jay | 12 Apr 2007 20:12:23

RE: Jay... Interesting thought. What you're referring to would amount to the hacker flashing your BIOS. That's exactly what the Chernobyl virus did in 1998 (http://vil.nai.com/vil/content/v_10300.htm), but we haven't seen any of these threats since. They are difficult to craft, and Windows offers plenty of other security holes to attack instead. It's mostly a matter of going after the low hanging fruit.

Posted-by: SV Sleuth | 12 Apr 2007 21:21:10

bios/crack on windows for use Networ LAN.

Posted-by: nguyen van hung | 9 May 2007 10:11:49

Post a comment






 

Useful links: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Ltd. 2008
Incisive Media Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503