Microsoft wants to know if your Windows 7 is pirated
Attempting to stay a step ahead of software counterfeiters,
Microsoft this month plans to release an update for Windows 7 that will
scan computers for evidence of the latest tricks being used by tech
pirates to fool the company's software-activation technologies into
thinking counterfeit operating systems are the real thing.
As in the past, the channels of distribution will include the operating system's Automatic Update mechanism. That practice has gotten Microsoft in hot water in the past -- including a recently dismissed lawsuit that accused the company of using its security-update pipeline to quietly distribute what amounted to spyware.
However, the company is making the update voluntary this time, and it's making a point of announcing it publicly in advance. In addition, if the new check determines a user's Windows 7 copy to be pirated, the repercussions are less severe. Windows no longer removes access to features in those cases, but instead turns the background black and takes other steps that essentially amount to nagging.
"Over time, we have changed our approach, mostly based on customer feedback," said Joe Williams, general manager of Microsoft's Genuine Windows initiative, in an interview. "We’re just a lot more open and transparent about what our business methods are."
Williams announced the plan in a blog post this morning. It's the latest step in the company's long-running effort to cut down on piracy and boost sales of genuine Windows copies. Microsoft also says it's trying to protect customers, citing studies showing that pirated systems can come chock full of traditional spyware and other malicious code.
In the interview, Williams said the company says doesn't collect "personally identifiable information" from computers as part of the anti-piracy scan. However, as noted in this privacy policy, the company does collect, temporarily, the IP address associated with a machine. One of the most interesting aspects of the recent court case was the judge's ruling that IP addresses didn't qualify as personally identifiable information.
"We do collect the IP address. We do not keep it," Williams said. "Where we have a machine-specific item, we convert that to a hash, so we don't keep the particular item. But it helps us to understand when that unique PC visits us or revisits us."
The new update will scan systems for two tactics being used by counterfeiters to trick the company's Windows Activation Technologies into thinking pirated systems are genuine -- manipulation of registry settings, and a modified "bootloader" that intervenes when the operating system is loading.
The company plans to make the update available for download from its website starting Feb. 16. Later in the month, the update will be available through the Windows Update system as an "important" update (as opposed to the higher ranking of "critical"), which means that people who have their Windows 7 machines set to receive those updates will receive them automatically as if they were getting a security patch. The update will also be uninstallable if a user finds out later and wants to remove it.
After installation of the update, the system will check back with Microsoft's server every 90 days for further updates, and if they're available, it will scan the system again to see if it has been pirated.
"For most Windows users in the developed world its impact will be nonexistent; on a system with a properly activated copy of Windows, it will make an initial validation check, update itself every 90 days, and never make a peep," writes Ed Bott, an independent Windows author and blogger, in a post today. "What’s noteworthy to me is the degree to which Microsoft is going out of its way to disclose the details of this update and to allow anyone who is skeptical of it to opt out with no negative consequences."
People whose systems are determined to be pirated will be given an opportunity to buy a genuine Windows copy at a discounted rate. There will be deeper discount if they help Microsoft identify the source of the counterfeit, Williams said.
At the same time, people who continue to run systems identified as pirated won't be able to use free software from Microsoft, such as its Microsoft Security Essentials program.
But why bother distributing an update such as this as voluntary? Won't people who know they're running pirated copies just skip it? The answer is yes, but the company says it believes many people who bought pirated systems from questionable sources have been tricked into thinking they're running a real copy, particularly as counterfeiters get better at making high-quality installation discs.
More coverage: Paul Thurrott, Mary Jo Foley, and Ina Fried
Read more of Todd Bishop's posts at TechFlash.com, and follow him on Twitter @toddbishop


