Feeds

Microsoft admits WGA update phones home

Click cancel to continue

Remote control for virtualized desktops

Microsoft has admitted that the latest update to its Windows Genuine Advantage program will phone back to Redmond even if the user clicks cancel.

WGA is meant to help Redmond fight piracy, but has been criticised on privacy grounds and because previous versions have incorrectly labelled people with genuine software as pirates.

But if you cancel the installation of WGA, maybe because you dislike the privacy implications, the software will still phone home. Microsoft stresses that WGA does not take any information which could identify you as an individual, but is only used to collate statistics on WGA use.

Microsoft UK anti-piracy manager Michala Alexander said in a statement:

The data collection and transfer in question are part of some of our update download services, such as the Windows Update service. As with other programs downloaded via these services, the success or failure of WGA Notifications' installation is sent to Microsoft.

If the user interrupts installation of WGA Notifications, we send the number of the screen on which installation stopped (first, second, etc.). In order to establish an accurate count, we also generate several globally unique identifiers (GUIDs) that do not contain any personal information. We use the GUIDs to tally the number of individual machines without identifying the user. Other data sent includes user and machine language settings and whether or not the machine was joined to a domain.

We use the information collected to generate aggregate statistics that help us improve the WGA user experience and quality of service.

Protecting the privacy of our customer's information is very important to Microsoft. That is why we have detailed what information is collected in the Windows Update privacy statement. In addition, the Microsoft Genuine Advantage privacy statement and the Windows Genuine Advantage Notifications End User License Agreement describe this data collection. As documented in these disclosures, the information collected is not used to identify or contact the user.

For more on this, have a look at Ars Technica, which got the story from HeiseOnline. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
PEAK APPLE: iOS 8 is least popular Cupertino mobile OS in all of HUMAN HISTORY
'Nerd release' finally staggers past 50 per cent adoption
Microsoft to bake Skype into IE, without plugins
Redmond thinks the Object Real-Time Communications API for WebRTC is ready to roll
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
Mozilla: Spidermonkey ATE Apple's JavaScriptCore, THRASHED Google V8
Moz man claims the win on rivals' own benchmarks
FTDI yanks chip-bricking driver from Windows Update, vows to fight on
Next driver to battle fake chips with 'non-invasive' methods
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Ubuntu 14.10 tries pulling a Steve Ballmer on cloudy offerings
Oi, Windows, centOS and openSUSE – behave, we're all friends here
Was ist das? Eine neue Suse Linux Enterprise? Ausgezeichnet!
Version 12 first major-number Suse release since 2009
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.