And is investigating the issue

Mar 3, 2007 08:48 GMT  ·  By

Windows Vista KeyGen is a tool based on SLMGR, the vbs script used as the Licensing Manager in the operating system. Microsoft has confirmed the existence of the Vista hack and the method used. Vista KeyGen is designed to crack out legitimate and valid Windows Vista activation keys. However, a representative from the Windows Genuine Advantage team downplayed the brute force Vista hack.

"The attack randomly searches for legit keys. This is called a brute force attack because there really isn't much intelligence involved and the goal is to just randomly cycle through key after key after key until a legit one is found. One report indicates that the script written to perform this attack goes through about a thousand keys every half an hour; frankly, that's a pretty slow brute force attack," said Alex Kochis, senior product manager of WGA (Windows Genuine Advantage).

A pretty slow brute force attack translates to the Windows Vista KeyGen crack searching some 20,000 product keys per hour. And at the end of several hours of continuous activity the hack can still return nothing. Additionally, in the eventuality that the Vista KeyGen crack does produce a legitimate product key for the operating system, it could still be invalidated by the Microsoft servers.

"Our product activation servers perform a more rigorous analysis of the keys that are sent up for activation than the local key logic does. For this reason producing keys that will ultimately activate is less likely than just hitting upon one that will pass the local logic. But if anyone does hear of a report of a legit customer being refused a product activation on a genuine key please let us know," Kochis revealed.

Legitimate customers that encounter issues with the validity of their Windows Vista product keys will be dealt with at the level of Microsoft's customer service. The Redmond Company revealed that it is currently investigating the issue. "We're looking more deeply into this issue now and I'll post more info soon," Kochis added.