Ramblings from another nerd on the grid
Have you had a chance to look at the most recent announcements we've made about the Microsoft Genuine Software Initiative (GSI)? How about the Microsoft Software Protection Platform (SPP)? Well, here's a heads up on some rather significant changes that are steaming your way and will be featured in Windows Vista.
First, check out the press release at http://www.microsoft.com/presspass/features/2006/oct06/10-04SoftwareProtection.mspx. Make sure to download and read the Software Protection whitepaper. It discusses some of the history and mechanics behind GSI and SPP.
Here's a couple of snippets from the presspass announcement:
"Today we are announcing the Software Protection Platform –a new set of technologies that will help Microsoft make software piracy harder, help protect consumers from the risks of counterfeit software, and better enable small to large businesses to manage their software assets. The Software Protection Platform has been under development for several years. It brings together new anti-piracy innovations, counterfeit detection and tamper-resistant features into a complete platform that provides better software protection to programs that leverage it. Initially, the upcoming releases of Windows Vista and Windows Server “Longhorn” will be the first two products to ship with this technology included, and eventually more Microsoft products will adopt this technology. In addition, the Software Protection Platform enables the next generation of genuine validation programs such as Windows Genuine Advantage (product differentiation). In short, it introduces new ways for Windows Vista and Windows Server “Longhorn” to activate, validate as genuine, and behave when tampered with or hacked." "One of the things the Software Protection Platform enables is enhancements to the genuine experience in Windows Vista, thereby differentiating it from the non-genuine experience. Customers that use genuine Windows Vista product should expect, and will get, an enhanced set of features that will not work on non-genuine or unlicensed versions of Windows Vista. Customers using genuine and licensed copies of Windows Vista will have access to Windows Aero and Windows ReadyBoost features, as well as full functionality of Windows Defender and extra optional updates from Windows Update. Computer systems that do not pass validation will not have access to these features, although they will still have access to critical security updates. Aero offers Microsoft’s best-designed, highest-performing desktop experience and is available in Windows Vista Home Premium, Windows Vista Business and Windows Vista Ultimate. ReadyBoost lets users use a removable flash memory device to improve system performance without opening the computer to install additional memory. Both are key features that a user of non-genuine software will quickly realize are not running. Windows Defender helps protect a user’s PC against pop-ups, and security threats caused by spyware and other malware. In addition, users of non-genuine Windows Vista software will be notified if their copy of Windows Vista is determined to be non-genuine with the appearance of a persistent statement in the lower right hand corner of their desktop space that reads, “This copy of Windows is not genuine.” "
"Today we are announcing the Software Protection Platform –a new set of technologies that will help Microsoft make software piracy harder, help protect consumers from the risks of counterfeit software, and better enable small to large businesses to manage their software assets. The Software Protection Platform has been under development for several years. It brings together new anti-piracy innovations, counterfeit detection and tamper-resistant features into a complete platform that provides better software protection to programs that leverage it. Initially, the upcoming releases of Windows Vista and Windows Server “Longhorn” will be the first two products to ship with this technology included, and eventually more Microsoft products will adopt this technology.
In addition, the Software Protection Platform enables the next generation of genuine validation programs such as Windows Genuine Advantage (product differentiation). In short, it introduces new ways for Windows Vista and Windows Server “Longhorn” to activate, validate as genuine, and behave when tampered with or hacked."
"One of the things the Software Protection Platform enables is enhancements to the genuine experience in Windows Vista, thereby differentiating it from the non-genuine experience. Customers that use genuine Windows Vista product should expect, and will get, an enhanced set of features that will not work on non-genuine or unlicensed versions of Windows Vista. Customers using genuine and licensed copies of Windows Vista will have access to Windows Aero and Windows ReadyBoost features, as well as full functionality of Windows Defender and extra optional updates from Windows Update. Computer systems that do not pass validation will not have access to these features, although they will still have access to critical security updates. Aero offers Microsoft’s best-designed, highest-performing desktop experience and is available in Windows Vista Home Premium, Windows Vista Business and Windows Vista Ultimate. ReadyBoost lets users use a removable flash memory device to improve system performance without opening the computer to install additional memory. Both are key features that a user of non-genuine software will quickly realize are not running. Windows Defender helps protect a user’s PC against pop-ups, and security threats caused by spyware and other malware.
In addition, users of non-genuine Windows Vista software will be notified if their copy of Windows Vista is determined to be non-genuine with the appearance of a persistent statement in the lower right hand corner of their desktop space that reads, “This copy of Windows is not genuine.” "
What does this mean?
Microsoft is developing and now releasing the first new technologies that form part of the Software Protection Platform (SP Platform). The platform will help fight piracy, protect consumers from the risks of counterfeit software, and better enable volume license customers to manage their software assets. The Software Protection Platform brings together new anti-piracy innovations, counterfeit detection practices and tamper resistance into a complete platform that provides better software protection to programs that use it.
So what do you think?
I'm guessing Cyrus at http://www.engadget.com/2006/10/04/microsoft-will-cripple-pcs-running-pirated-copies-of-vista/ doesn't like it too much. The folks at http://blogs.zdnet.com/Ou/?p=339 seem to think it’s going to help promote open source adoption. Hmmmm….
What’s going to happen is MS is going to screw up and millions of computers are going to boot into a mode that doesn’t allow them to do anything useful... IT folks don't like this prospect; we like to have control of what’s going on in our companies. MS has already messed up with the VLK version of XP requiring IT departments to manually fix their mistake, this took many hours of our time with no benefit to us other then fixing an MS problems with activation. With XP it was only a warning but with Vista it will be much worse. We’re therefore looking into alternatives, I agree that nothing now really meets our needs, but there is no real need to upgrade to Vista, and hopefully in the next 3 or so years others will step up to the plate without all of this nonsense.
Millions and millions? I hope not.
Ck, when you say you are looking into alternatives, what does that mean? Are you saying you are evaluating Windows Vista, SuSE, Red Hat, etc. desktop operating systems? Is it safe to assume if that is the case, it isn't JUST because of our attempts to thwart piracy?
I would hope you are evaluating OS X, Windows Vista, Linux, etc. based on the needs you have, the total cost of operation, etc. I think you are going to find that Windows Vista will compete nicely with the other top operating systems.
I am checking on the EFS question. You are correct, the simplified backup and restore process doesn't backup EFS encrypted files or folders and this is documented in the help for the feature.
However, I'm pretty sure CompletePC does. In fact, I'll be testing that will RC2 in a little while but have forwarded the questions into the internal Windows Vista alias.
"At this point our plan is to stick with XP for a few more years, no need to rush :) Cheers"
By then, hopefully we'll have a whole new operating system for you to test. Which reminds me, how often should we ship a new desktop OS?
I have confirmed from the program managers that there is no planned support for EFS backup at Windows Vista RTM. They are planning something for a future release but the release vehicle and timeframe has not been determined.
Hopefully the other backup vendors will come up with something that meets your needs.
Sorry for the bad news.
Corporate mouthpiece? That's a bit harsh. I didn't express an opinion on the subject. Almost the entire text of my orginal post was from the whitepaper and press release.
I am an evangelist. One of my main roles is information delivery. The message or information isn't always well received. Should I chicken out and not deliver the message? That's far too easy. I would rather get the information out and let you know whats coming.
I have not tested the full ramifications of the changes coming so it's premature for me to predict if pushback is warranted or not.
If on the other hand in your testing you find issues with this, feel free to contact me. I'll be happy to convey any horror story you have directly to the VP of the Windows division. I've done it before, I'll do it again.
Oops. Dan posted another interesting response and I published it. However in responding to it, I decided to remove it and go back an make an edit. I thought it would put it back in the unpublished queue, but it nuked it. Sorry, it was unintentional. Still learning the new mechanics of CS2.1.
Regarding Dan's post, he indicated he called me a mouthpiece because of the line he quoted. However, that wasn't something I said. Cori Hartje, Director, Microsoft Genuine Software Initiative made the statement in the answer to the third question of the press release.
Regarding the rest of Dan's assertions, that was the part I was going to edit and essentially delete. The thread had taken a decidedly different course and I decided to use my rare moderator skillz.
Just so anyone reading this understands, I have asked one of the content leads on my team to provide slides and demos on this feature so we can all get a level set. After that, I'll be happy to answer technical questions. Legal questions will hence forth go unanswered and unpublished.
To be continued for sure...
Most backup solutions will handle EFS in Vista. With RC2, OpenEncryptedFileRaw and ReadEncryptedFileRaw (as well as WriteEncryptedFileRaw and CloseEncryptedFileRaw) still work the same as in Longhorn, 2k3, XP, and 2k.
Using those API's is naturally preferable to solutions that decrypt the file, then back it up, or backup the key material with the file. So that takes care of the data backup.
Of course you already have a comprehensive key escrow and key backup policy in force, right? In the absence of that, EFS backup aupport in Vista is the least of your data loss worries.
Yes I have a good backup key policy. And I realize that I can go out and buy a 3ed party app to do what both XP and a 7 year old OS (win2k) have done all along. How is this step back a good thing? I don't get it. And how MS overlooked this? Maybe they just figure that no one uses EFS?
I have to say that EFS if XP with the normal backups are very useful and I haven’t see another solution like it. Take disk level encryption the only way to back it up is to back-up the whole disk, if you backup the files to a network location they won’t be encrypted. But EFS allows you to keep your files transparently encrypted on your computer while letting you back them up to a network location in a safe way. And because it’s file bases you can do incremental backups etc.. Very cool stuff… if Vista hadn’t ruined it all with the worst backup implementation I have ever seen bar none.
Check this article out, it mostly about networking but they bring up the horrible backup system in vista and don’t even mention the EFS thing… I should write them :)
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9003835&source=NLT_ES&nlid=42