WGA: Will Microsoft muzzle the software that cries wolf?
Despite the WGA flap, Microsoft looks to Genuine Advantage for Office
Computerworld - Despite the criticism leveled at Microsoft Corp. after the recent rollout -- and rollback -- of Windows Genuine Advantage (WGA), experts say that effort was just the first phase in the company's latest antipiracy effort, dubbed the Genuine Software Initiative.
In fact, the initiative -- which will include a similar campaign in the near term called Office Genuine Advantage (OGA) to fight piracy of Microsoft's dominant productivity software suite -- is tied in the long term with how Microsoft and other vendors will sell and deliver software.
"It's getting to the point where we're getting 'Advantaged' left and right," said Lauren Weinstein, a Woodland Hills, Calif.-based IT consultant and co-founder of the pro-privacy group People for Internet Responsibility. "The issue is, whose advantage is it?"
In early June, Weinstein publicly revealed via his blog that WGA was sending back data about users' computers every time they rebooted their PCs. That worsened WGA's already bad image: Users complained about WGA's tendency to stealthily install itself on some users' PCs, nag others who refused to install it, and falsely cry wolf with legitimately installed copies of Windows.
Despite anecdotal evidence of numerous "false positive" reports by WGA, Microsoft said that those false positives make up a "fraction of a percent" of the 60 million PCs worldwide that failed WGA validation, according to information posted by Alex Kochis, a licensing manager on the Windows Genuine Advantage team, on his blog.
According to outside experts, most victims have been gamers or PC hobbyists who have upgraded their hardware, which Microsoft has acknowledged can confuse WGA. But some have been businesses like S&S Cycle Inc., a maker of motorcycle racing parts in Viola, Wis.
WGA repeatedly identified S&S's 180 PCs as running pirated copies of Windows, according to network administrator Karen Zander. Worse, it sent that data to Microsoft every morning as employees arrived in the office and turned on their PCs.
"Our network came to screeching halt," said Zander, who eventually fixed the bug by working with Microsoft technical support.
Such complaints, along with two class-action lawsuits, forced Microsoft to pull WGA's most intrusive features and make it optional. Having learned its lesson with WGA, Microsoft is likely to proceed more cautiously with its Office counterpart, which it began testing in April.
"Microsoft has almost no competition with Windows," said Joshua Erdman, president of San Luis Obispo, Calif.-based software reseller Digital Foundation Inc. "With Office, it's a lot easier to switch to something like OpenOffice or StarOffice. So Microsoft can't afford to [anger] people as much."
OGA, for now, consists of an ActiveX-based tool that users are invited to download on a voluntary basis the first time they get certain noncritical updates from Office. Like WGA's validation tool, OGA checks to see whether the license key is stolen or counterfeit. If it isn't, the tool stores a special download key on the PC to aid in future verification.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts