A Techie in Utah

October 7, 2006

Another Vista Piracy Story

Filed under: Asset Management, IT, Resource Management, Software Compliance — techieinutah @ 8:55 pm

Most of this has already been said in the other stories I linked to, but I liked this story because it made a suggestion as to why Microsoft is going to all this effort to protect the software (and cause more work for IT staffs)…

Microsoft’s actions may be an attempt to protect its existing revenue stream even as it shifts to a new operating system and new delivery model, said Carmi Levy, analyst with the Info-tech Research Group last month.

With the future of boxed software being called into question, Microsoft needs to work harder than ever to protect its business, said Mr. Levy (see Microsoft’s Suing Spree).

The latest technologies in Vista could be its attempt to ensure that it does not lose out on significant chunks of revenue from what could become its next money spinner.

So the implication here is that Microsoft is scared, because – a) people are looking at other operating systems meaning Linux and Apple, b) people are looking at using products that don’t require that the software is installed on every machine, meaning things like Google and their on-line offerings.

Software Protection Program

Filed under: Asset Management, Resource Management, Software Compliance — techieinutah @ 8:46 pm

While today is the day for Microsoft anti-piracy stories. Here is a ZDNet story out of the UK that talks about people being shut of out of their machines if the operating system is not activated.

If Vista is not activated with a legitimate product registration key in time, the system will run in “reduced functionality mode” until it is activated, said Thomas Lindeman, a senior product manager at Microsoft. In this mode, people will be able to use a Web browser for up to an hour, after which time the system will log them out, he said.

Plus there is a lot more in the story about the ’software protection program’ Microsoft is announcing…

The new technology is part of Microsoft’s new “Software Protection Platform”, which the company plans to announce on Wednesday. It will be part of future versions of all Microsoft products, but debuts in Windows Vista and Windows Server “Longhorn”

and…

Barring people from using their PC is a significant change from the antipiracy features that Microsoft bolted on to Windows XP with Windows Genuine Advantage. In XP, the piracy-busting features only put a block on downloading additional programs from Microsoft’s Web sites…

…Microsoft will continue to check if Vista was legitimately acquired, even after activation. This happens, for example, when downloading additional Microsoft programs. Should a licence key be deemed illegitimate, the user will be given another 30-day grace period to acquire a legitimate licence key, Microsoft said.

During this grace period warnings will be displayed and Vista will block access to the Windows Defender antispyware tool, ReadyBoost memory expansion feature and Aero advanced graphics option, Microsoft said. Also, a persistent text will display in the lower right hand of the screen: “This copy of Windows is not genuine.

Then we get this nice explanation of the work that will be involved to help a company authorize Microsoft Products in the future.

… Microsoft is also changing the way businesses license its software. New licensing systems will replace the current volume licence keys, which have been widely abused..

Starting with Vista, Microsoft will offer two different types of keys and offer three different ways to distribute them within an organisation. In all cases, some more work will be required on the part of the technology department at a company.

The first type of product key to replace the current system is called “multiple activation key,” or MAK. An IT pro at a company can install a key on a machine that will then need to be validated online. Alternatively a proxy can be set up centrally to activate multiple systems at once, according to Microsoft.

The second licensing option is called “key management service”, or KMS. This requires the organisation to set up a KMS service on the corporate network that will activate client machines. The Vista PCs will silently find the KMS service and activate, according to Microsoft.

I really like the last piece of the story…

It may seem as though businesses will have to count all their licences, but it’s really not as bad as it sounds, said Michael Silver, an analyst with Gartner.

“It has nothing to do with licence counting right now, but companies will need to expend time and effort and some money to administer this, in the name of helping Microsoft recoup revenue lost to piracy,” he said. “There needs to be more of a benefit [for customers]. Linux and Mac communities will try to make hay with this, but this will not be the tipping point.”

While I think that part is total crap, one of the biggest problems with people I talk to is they don’t have a software asset management program in place currently. So they don’t know if the products installed on their machines are legal or not. Companies “want” to be compliant or legal, but they always mention the amount of work and time that would be needed to do it – so they just ignore the problem.

No doubt they “will have” to do this with Microsoft products in the future, because they are forced to. But what happens when other companies start doing the same type of thing? Adobe is already doing a new license scheme, how long until everyone is doing some thing like this. Odd’s are that every vendor is going to want their own special system in place to work with their tools, this sounds like a lot of work in the future.

 

 

 

 

 

 

 

 

Vista Anti-Piracy Tools

Filed under: Asset Management — techieinutah @ 8:28 pm

I knew Microsoft was adding additional anti-piracy tools to Vista, but I honestly hadn’t paid attention to what they were or how they worked. I just read this story and got a sort of wake up call.

Now I wonder how many companies are going to jump on the Vista bandwagon right away? I’ve had a few people saying it is in their plans for the second half of 2007.

I thought this was pretty quick, considering how many people only got XP running in the last year or two. XP was nothing compared to this roll out, especially if you start talking about product activation.

I like that Microsoft is suggesting this will help with asset management, yeah right I don’t think so. All it means is you have a machine out there – unless they are going to be collecting more information than they have told people.

October 4, 2006

USB Security

Filed under: Endpoint Security, Security — techieinutah @ 8:45 pm

Here a nice little summary of the endpoint security issue…

October 3, 2006

Employees the Biggest Threat to Organization

Filed under: Endpoint Security, Security — techieinutah @ 4:25 pm

A Yahoo Finance press release from Palisade Systems. I don’t know the tool, but I do  agree with the idea behind the story. I wish they had put some additional information in the story about the results they found in the survey.

USBDumper

Filed under: Endpoint Security, Security — techieinutah @ 3:47 am

Here is a neat little story on a program that works the opposite of what you would normally expect, instead of copying data off the PC and onto the USB drive – this is a program that copies all the contents off a USB drive and puts them on the PC.

So how many of you out there are consultants that carry data around on a USB drive and use that while you are on-site a customer? Where you ever worried about that data being copied? I know I wasn’t, if anything I pointed out to the company that me being able to use the USB drive on their machines was a security risk.

The shoe is on the other foot now I guess.

Credit Unions Adopting Endpoint Security

Filed under: Endpoint Security, Security — techieinutah @ 3:40 am

According to this press release from Centennial, credit unions are leading the way in adoption of endpoint security solutions.

Healthcare Security

Filed under: Endpoint Security, Security — techieinutah @ 3:37 am

While the story doesn’t mention what the employee downloaded the personal data to, it wouldn’t be to imagine it was some sort of portable storage device.

The risks for the healthcare industry is pretty obvious when you think about how many people have access to sensitive data. How hard would it be for an employee to copy information to a some sort of portable device, be that a flash drive, a hard drive, an iPod or whatever.

Blog at WordPress.com.