Microsoft faces class-action suit over WGA tool
The antipiracy tool gathers data on a user's computer and sends it to Microsoft
IDG News Service - Microsoft Corp. is facing a class-action lawsuit over a tool that gathers data on a user's computer in an effort to detect bootlegged copies of its Windows operating system.
The suit, filed in U.S. District Court in Seattle on Monday, concerns Microsoft's Windows Genuine Advantage (WGA), an antipiracy tool the company introduced in July 2005. The WGA program collects hardware and software data, delivering it to Microsoft servers. The stored information is then used to warn of possible piracy violations.
The lawsuit alleges that the program violates consumer protection laws in California and Washington state and laws against spyware -- invasive programs that surreptitiously collect data.
In introducing WGA, Microsoft has found that computer users are already sensitized to the question of how they are notified about software installation and privacy issues. Late last year, Sony BMG Music Entertainment provoked controversy by shipping 15 million music CDs containing invasive copy protection software that installed itself on buyers' computers.
Sony eventually compensated users who bought the affected CDs, which had software that installed itself without user consent and transmitted data, after a class-action suit.
The suit against Microsoft contends that the company misled users in delivering WGA to computers, masking it under batches of monthly updates that often include critical security patches. It asks Microsoft to delete all data collected by WGA and provide users with the ability to remove the software from their computers, in addition to damages.
"In truth and in fact, Microsoft, in its efforts to maximize revenue through antipiracy measures, misled consumers and the public as to the true nature, functionality and operation of its WGA," the suit said.
Earlier this month, Microsoft admitted that a version of WGA under distribution as a "high-priority" update was in fact a test version of the software. In April, Microsoft stepped up the WGA program, adding a function notifying users if their copy of Windows wasn't valid and causing it to make frequent contact with the company's servers.
In response to user complaints, Microsoft released a new version of WGA this week allowing people to opt out of notifications. The update also changes the frequency with which the program contacts Microsoft to check the validity of Windows.
Users have also complained that the software is buggy, labeling copies of Windows as counterfeits when the license may have been legitimately transferred to a different piece of hardware.
For computers suspected of running bogus software, Microsoft has blocked downloads of free tools such as Windows Defender, its antispyware tool, but allowed security patches.
Microsoft officials contacted early today did not have an immediate comment.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Privacy White Papers
- A Road Map for Best Practice Social Media Acceptable Use Policy
- Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
- Data Protection and Disaster Recovery with iSCSI and VMware
- Get this on demand webcast now
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Privacy Webcasts