[FWD] SoftNews
ZXNet echo conference «zxnet.pc»
From Eudgine Palenock → To All 29 July 1999
==============================================================================
* Forwarded by Eudgine Palenock (500:95/468)
* Region : MAGGOTS.COLONY.INFO (MAGGOTS.COLONY.INFO)
* From: Dmitry Perevertkin, 2:5020/1652 (27 Jul 99 12:27)
* Who: All
* Topic: SoftNews
==============================================================================
I ────────────────────────────────────∙
│┘∙°Promoted by person Dmitry Perevertkin°, from station: 2:5020/1652
│∙°Echo : 1072.COMPNEWS° ("News of the computer world")
│°From : Andrew Worobyew°, 2:5020/1072 (Mon Jul 26 1999 20:04)
│∙°В : All°
│┐∙°Topic : SoftNews°
ї└─────────────────────────────────── ────────────────────────────────────∙
·────────·══■∙ ∙■══·────────·
│ My respect to you, dear All!
│
Remember the storm of angry responses about processor identification numbers
PIII? It looks like something similar is brewing now, only regarding Windows 95.
The company published very interesting information on its server
Electron-Service.
There were rumors about Windows 95 that this operating system collects and sends
information about the user and the configuration of his computer to Microsoft.
The issue about the 95s is still being resolved, but about Windows 98 we can say with confidence:
Yes, he collects and sends.
This inconspicuous but interesting feature of the system was discovered by the president of the companyPhar Lap Software Richard Smith. Browsing content
Word and Excel documents, Richard accidentally saw the number of his network card in them
and wondered: what, exactly, is he doing there? It turned out that
The number is part of a 32-bit identifier called Globally Unique
Identifier (GUID). If your computer does not have an Ethernet adapter, Word and
Excel substitutes a fictitious card number in the GUID, the same for all machines.
Windows online registration utility called Registration Wizard
(regwiz.exe), generates two more identification numbers. First, Hardware
Identification Number (HWID) also depends on the computer configuration and may
in most cases, it is unique to characterize it. Second, Microsoft ID
(MSID), is determined by the information entered by the user himself. All
the described numbers, including GUID, are sent to the website when registering the OS
Microsoft.
Smith called all these facts unprecedented in the computer business, and added,
that he is not aware of any other company doing this. He also
announced that he was quite confident that Windows NT does not collect information about
user, but he doubts about Windows 95.
Microsoft responded very quickly to these messages, admitting that
Windows collects and sends computer identifiers to the company serverusers. However, these identifiers, according to company representatives,
disappear into oblivion, are not entered into any databases, and in general all this is just
bug, oversight of programmers. The fix, the company promises, will be released and
posted on the site within a few weeks.
However, the story does not end there - new intriguing
details. It was observed that the HWID and MSID generated by RegWiz when
Windows 98 registrations are placed in the cookies of the Internet Explorer browser and can
be read from there on any Web site. Moreover, the server can not only
count, but also change this data. If the change is meaningful, sites
they will begin to mistake you for someone else. All specified manipulations in detail
described and demonstrated on the website security.pharlap.com/regwiz/index.htm.
To the message that user IDs are not only collected, but also
are demonstrated to everyone, Microsoft again responded promptly.
Firstly, the company announced that it will stop reading HWID and entering it into
their databases (which somewhat contradicts the message that this number
is not taken into account in any way). Secondly, within two weeks Microsoft promised
release a utility that erases HWID from the Windows registry.
However, this operation can be done “manually”, and quite simply:you need to disable RegWiz by removing the link to its library regsvr32.exe from the registry
-u c:windowssystem
egwizc.dll (to turn it back on you need the -u key
replace with -c).
And if you run Regedit, you can look at your HWID and MSID:
HKEY_LOCAL_MACHINESoftware MicrosoftWindows CurrentVersionHWID,
HKEY_CURRENT_USERSoftware MicrosoftWindows CurrentVersionMSID.
After looking, you can change or completely erase them.
-+- Now from Jav you can wash your keyboard.
+ Origin: I boarded the plane and tried to save... (2:5020/1072)
∙·········································· ∙
Hello, (All)
That's it, blah. Everyone knew about it, but didn't know where to look.
================================================================================
Hello, All!
Best regards, Evgeniy aka EVP.