Ask Leo!

WGA: Is it spyware?

Home » Podcasts » 2006 Podcasts

Windows Genuine Advantage has all the earmarks of spyware. What should the average user do about it?

Listen to the podcast: WGA: Is it spyware?. It's a podcast!

Transcript

Hi everyone, this is Leo Notenboom with news, commentary and answers to some of the many questions I get at askleo.info.

Windows Genuine Advantage, or WGA, has come under heavy fire lately. Among other things, Microsoft has been accused of:

  • a) Using Windows Update, which claims to only download "critical updates", to download the decidedly non-critical WGA,

  • b) Designing WGA to contact servers back at Microsoft once a day - for reasons that haven't fully been disclosed, and ...

  • c) Not telling you about all this up front.

In short, it has all the characteristics of spyware. Many folks are quite upset, there's even a lawsuit or two under way as a result.

The problem is that the goal of WGA - preventing software piracy - is actually quite laudable. Unfortunately Microsoft dropped the ball on execution. There are those who claim that this technology stands a high probability of eventually harming only legitimate users trying to do the right thing, while pirates continue to circumvent it. Not to mention the fact that Microsoft chose to roll this out in a very secret and underhanded way.

If we're to trust Microsoft, Microsoft has to trust us, the market, and be open with what it's up to, and why.

"In short, it has all the characteristics of spyware."

So what does this all mean for the average user?

Well, there are several folks out there who're calling for a total avoidance of Windows Update. Personally, that seems like an extreme over reaction. The risks you take on by not getting the latest updates to me far outweigh the "risk" of WGA.

My take on it is simple: the average user should do nothing. Or rather, the average user should continue to use Windows Update as part of a comprehensive approach to internet safety. Let the pundits and the courts take this issue to its inevitable conclusion. In my opinion, WGA does not currently represent any kind of threat. Even if it ever would have, which I actually doubt, because of industry publicity (and lawsuits), it's now unlikely that it ever will.

As I said last week discussing Google's new checkout service, it's all about trust. Perhaps more than any other company, Microsoft needs to understand this. You'd think that by now they would. But given the blunder that is WGA, it's so clear that they do not.

I'd love to hear what you think. Visit ask leo dot info, and enter 10485 in the go to article number box. Leave a comment, I read them all.

This is a presentation of askleo.info, a free on-line technical question and answer service. Hundreds of questions and answers are online and ready to help solve your computer problems.

That's askleo.info.

Related:

Article 10485 | Posted July 6, 2006

Recent Comments

Is it just me or does it sometimes seem that Microsoft is really trying to chase people away. I just went through the WGA thing, and after getting past it, I ended up with its equivalent in Office. I have a computer here that I upgraded from Windows 98 to XP when XP came out. It had a licensed copy of Office on it and I purchased a completely legitimate upgrade from Microsoft for that, too. It was a PII/800 and was still used as a secondary box. During a lightning storm, it took a hit (it has a UPS, and I still haven't figured out how the hit got there, but that's a different story). I had to replace the motherboard, putting in an AMD upgrade. Once I got the machine running again, I started Office and was informed that I needed the original disk to reactivate it because my hardware had changed. It was installed when Windows and Office first came out and I really don't know where it is. My wife couldn't wait to get to her documents on that machine, so I installed OpenOffice. Works fine. She's quite pleased with what she's got and I'm not looking very hard for that disk anymore. Now, if I had a pirated copy, I'm sure I could have found a way to reactivate it. So what they're doing is really ticking off the good guys while the bad guys hack away.

Posted by: Bill at July 8, 2006 09:13 PM

I purchased a second hand pc running windows xp pro. With it, a laptop and another pc I started a wireless network. unfortunately the second hand pc's xp pro didn't have the correct update to use WPA encryption so I ran the update program. It informed me that I had to run WGA which I did. This informed me that the copy of XP pro was pirated and that I could fix it for a sum (less than the retail price of a new copy). Cool. Then I tried to use hotmail. Suddenly, I couldn't log in to hotmail on any of the pc's although I could from a friends and could before I ran WGA. May be I have done something else to upset the delicate machine that is windows but with 25 years of computer experience and being a c++ programmer amongst other things I smell a big hairy microsoft rat.

Posted by: James Miller at July 10, 2006 12:08 PM

Not sure if WGA is spyware or not, but it sure wasn't a critical update! Microsoft almost got off the hook for abusing Windows update like this. It would of been different if they would of listed the update as optional. I have more wisdom http://the-natron-blog.blogspot.com/2006/07/you-can-stop-spyware.html . thanks!

Posted by: Nate at July 12, 2006 09:40 PM

I'm not computer smart. But I believe in the old saying, "If it looks like a duck, walks like a duck, quacks like a duck... it's probably a duck." WGA looks, walks and quacks like spyware to me. What possible reason could Microsoft have to monitor my computer usage? If General Motors or Ford put a monitoring device in your car without your knowledge or consent (AFTER you bought that car), would you feel violated in any way?

But let's take this one step further. The 4th Amendment to the Constitution states in part, "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated,..." Now, before all you Constitutional scholars jump up and down saying the 4th amendment applies to GOVERNMENT searches and seizures, I know that. But what makes Microsoft better than the entire government? And how do government computers running Microsoft products keep their data safe from WGA spying? Or does Microsoft make special concessions and receive tacit government approval for spying on average Americans? Does Homeland Security have anything to do with this?

Remember, a person is NOT paranoid if people really are watching him!

Posted by: Angry in Texas at July 13, 2006 04:52 PM

WGA is clearly spyware, it meets the standard definition of spyware. Even if Microsoft had the best of intentions, it has shown that it doesn't trust its customers. Misusing Automatic Updates (which is meant only for "critical" security updates) to install WGA on people's computers is sneaky and undermines the credibility of Automatic Updates. Just because there are criminals doesn't mean the government gets to treat everyone as a criminal (see e.g., 4th Amendment). Just because there are people who pirate Windows doesn't mean Microsoft gets to treat everyone who uses Windows as a pirate.

BTW, I read about whether Automatic Updates should be on or off. This is a false choice, because it leaves people with the impression that they either allow Microsoft complete control over critical updates (the Automatic setting) or that they must search for the updates they need to patch security holes. There are 4 settings for Automatic Updates. These settings are Automatic (AU automatically downloads and installs critical updates without user input unless a reboot or an EULA is involved), Download (automatic download, then user must consent to installation), Notification (user is informed when new critical updates are available, must consent before download can occur and must consent before installation can occur), and Off (Automatic Updates is disabled). Even if you choose the Off setting, simply go to Windows Update or Microsoft Update on the second Tuesday of every month to get the critical updates to which Microsoft would have sent you or of which Microsoft would notify you. For years I have had AU set to Notification mode. Twice AU notified me of WGA and each time I rejected WGA. You can have Automatic Updates on without giving Microsoft complete control over the critical updating process.

Posted by: Stefan at July 19, 2006 04:30 PM

I have the same problem that James Miller has. I got the WGA kit for the $150, installed it, had to download many fixes for it, and still I cannot login to hotmail or yahoo mail, and most windows support pages won't down load. How the hell do I fix this?

Posted by: Jason Kozma at July 22, 2006 08:22 AM

I'm using and learning the latest "Ubuntu" distribution of Linux. Quick and easy!
My Windows is now disconnected from the net, and I keep it only to run a couple of programs I need which only run in Windows (until the day they release a Linux version!)
Who needs Microsoft's WGA peeking over their shoulder?

Posted by: John at August 25, 2006 11:42 PM

after using windows update it teold me that i have not the original version of windows !!!
and i need to purchase a key ???
it s a second hand compact evo310 and i cant get all the updates ! only few of them are installed by winupdate !
do i have to buy a new key ? or just buy a new windows pro ?
any way !
it s a good website ! continu ...
regards .
APACHON from tunisia .

Posted by: apachon at March 12, 2007 05:20 PM

windows is the psyware !

Posted by: apachon at March 12, 2007 05:21 PM

I understand the impetus behind WGA in that it's designed to thwart piracy. BUT, once it is determined by WGA that the operating system is perfectly legitimate, why isn't that enough for Microsoft?

Tell me why that bloated software (WGA) has to connect to the Microsoft servers on every start-up in order to constantly validate the operating system, especially after it has already been validated/passed inspection?

This slows my system down to a crawl as well...making me one very unhappy customer. Grr.

Posted by: Microsoft is really pushing it this time at March 24, 2007 05:40 AM

Post a comment on "WGA: Is it spyware?":






(Email Address will not be published.)

Remember Me?

By popular demand...
my tip jar
Cuppa Joe
Buy Leo a Latte!

(you may use HTML tags for style)

New!

RSS feed Subscribe to the RSS Feed specifically for comments on this article.

Before commenting, please...

Please wait. Your comment is being processed ...


Ask Your Question:


ask-leo.com
Web

Stay Informed

Weekly Newsletter

Archives

By Category
By Date

Advertisers

Advertise on Ask Leo!

««   »»

Question? - Ask Leo!
Who is Leo?
Link to Leo!

Terms, Conditions & Privacy