Feeds

Windows ID numbers – how they work

The strange tale of the bug Microsoft has been calling a useful feature...

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

Further details of the identification system used in Windows 98 registration have emerged. In the past few days it has been revealed (see earlier story) that data gathered during the registration process gives Microsoft the means to track both individual users and the documents they produce across the Internet. Each copy of Windows has its own registration number, and during online registration the user is asked to fill in personal details, including name, address and class of user. The registration also produces a hardware audit of the local machine, but the user can decline to send this to Microsoft if they want. In addition, however, machines with an Ethernet adaptor present will send a unique hardware identification number, whether or not the user declines to send hardware audit information. Microsoft yesterday described this as a bug in the software, but the company's privacy policy, parts of which were published here in yesterday's story, makes it clear that it's no bug -- it's quite intentional, and Microsoft has been upfront about it (albeit in a document hardly anyone's going to bother reading). The number is used to generate unique identification numbers for Microsoft Office documents created on the machine. These numbers are embedded in the documents themselves, which means they can be 'fingerprinted' -- ever send somebody a file anonymously? Maybe you didn't after all. If the machine doesn't have an Ethernet adapter, a dummy number is used. This is -- allegedly -- common to all non-networked Windows 98 machines, so it shouldn't be possible to use it to trace documents. But if the mechanisms for processing unique identification numbers exist, then clearly Microsoft is going to make the numbers unique -- unless the appalling publicity puts it off the idea. A unique number system, quite possibly incorporating the Pentium III identifier, is an obvious next step for Windows 2000, particularly as Microsoft wants to introduce universal registration, or possibly even the infamous 'software rental' model by that point. But the exposure of the current tracking system seems to have torpedoed that plan for the moment. Microsoft yesterday said the Windows 98 identification system certainly won't be used in Windows 2000. But we'll all have to watch the process that is in there very closely, just in case. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
The 'fun-nification' of computer education – good idea?
Compulsory code schools, luvvies love it, but what about Maths and Physics?
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.