excerpts from ...
--==>> OFFICE WATCH <<==--

16 January 2007 - Vol. 12 No. 3
See this article online at http://news.office-watch.com?191
and
--==>> OFFICE WATCH <<==--
10 January 2007 - Vol. 12 No. 2
See this article online at http://news.office-watch.com?202


4. What happens if your product key is stolen - part 1
5. Software activation - Then and now
6. If your Product Key is stolen?
7. What could happen to you
8. Safeguard your Product Key - how?
9. What does Microsoft say?

and

1. What happens if your product key is stolen - part 2
2. Eye-Catching Signs with Word [snipped]
3. What's happened to my product key?
4. Why has my software been killed?
5. The time lag between theft and detection
6. What Appeal Process?
7. How you can protect yourself
8. No de-activation option




4. WHAT HAPPENS IF YOUR PRODUCT KEY IS STOLEN - PART 1
See this article online at http://news.office-watch.com?191

This issue has the first part of a series on some concerns about
Microsoft's anti-piracy measures as they apply to Microsoft Office 2007
and Windows Vista.

Both these products can be disabled by Microsoft after they have been
initially activated - Windows Vista has that now and Office 2007 could
have the 'kill switch' implemented at any time Microsoft wishes.

We're going to deal with these issues in-depth as Office Watch has done
from time to time over the last decade. It's important to keep in mind
that the problems we highlight probably won't happen to you, but even rare
occurrences (in percentage terms) with MS Office will happen to many
people. The level of concern is raised, not reduced, by the responses
we've received from Microsoft.


5. SOFTWARE ACTIVATION - THEN AND NOW
For Office 2000, XP and 2003 you need to 'activate' your software after
installation. The technology works fine. In short, it links a particular
computer to a software product key. Activation checks with Microsoft to
see if the product key has been ued before on other hardware. Depending
on the license attached to that key (ie number of computers that software
license was sold for) the software will be activated on that computer for
ongoing use.

We're not concerned about the activation technology which, aside from some
glitches and misunderstandings, works tolerably.

The important point is that once activated the software (Windows or
Office) will continue to run even if Microsoft discovers later that the
product key used was illegal. An invalid product key can stop you from
getting later major updates and add-ins but the software itself will
always work and there's nothing Microsoft can do about that.

Now - with Windows Vista and potentially Office 2007 that changes - the
activation system will occasionally check if the product key is still
'legal'. If Microsoft decides that the product key for your software has
been stolen and misused then your copy of Vista or possibly Office 2007
can be disabled remotely (after a warning period).
_______
[snipped]

6. IF YOUR PRODUCT KEY IS STOLEN?
Disabling software is reasonable if you're using a stolen product key but
what if you're the victim of theft?

In other words, what if your Vista or Office 2007 product key was stolen
and used on other computers?

If that happens, eventually your legally purchased software could be
disabled by Microsoft remotely. As we'll see this can happen at any time,
with no reason given and no proper recourse or avenue of appeal.
You could lose up to US$400 for Vista or US$680 for Office 2007 at the
judgment of Microsoft - as a customer you'd have little idea of why your
money has been lost.

All it takes is someone to merely take and use the product key for your
Vista or Office 2007, and as we'll see that's absurdly easy.
Getting the software itself is a trivial matter - copies of the Office
2007 CD are already available for download from many unofficial sources.
All that's needed is a stolen product key to activate the software.
Firstly let us give you some examples of what could happen:


7. WHAT COULD HAPPEN TO YOU
You buy a copy of Windows Vista, install it and it's been running happily.
Someone who has access to your computer, your desk or bookshelves,
makes a copy of the 25 character product key, then uses it on their own
computer or worse, makes it available to many other people.
That's not so farfetched - perhaps a friend of your children is using your
computer and 'needs' a product key? Anyone who uses your computer could
do it, and that's not forgetting the sticker that has the product key in
the first place - if that's left lying around your home or office it could
be copied.

Corporate users are even more at risk, with copies of their licensed
software on laptops and perhaps computers at home there has always been
trouble with product keys 'escaping'. Microsoft acknowledges that this
happens and says they 'work with customers' - which could mean anything
and probably does.

Because enterprise product keys can apply to hundreds or thousands of
installations the risk of misuse is greater. However we are concerned
that the ability to disable software remotely can affect all customers -
big and small. It's the small, retail and OEM customers who are more
likely to be left with disabled software and with no recourse.
If the product key is used to activate on one unauthorized installation
it may work (depending on the number of computer the key is valid for) but
it means that you won't be able to use the additional activations you paid
for (for example on a desktop and laptop computer or three installations
with the 'Home and Student' license).

If the product key is published more widely (via email or on a web site),
Microsoft can detect additional attempts to use that product key and could
deem the product key as 'stolen'. Once that happens the 'kill switch'
could severely reduce the features available on your copy of Vista or
possibly Office 2007.

There seems no way for Microsoft to differentiate between the initial (and
presumably legitimate user) of a software license and others who steal and
misuse that product key. Everyone who uses that product key can have
their software disabled.

[snipped]

1. WHAT HAPPENS IF YOUR PRODUCT KEY IS STOLEN - PART 2
See this article online at http://news.office-watch.com?202

We continue our look at some concerns with product activation and
disabling in Office 2007 and Vista. Last week
http://news.office-watch.com?191 we talked about how easy it is for your
product key to be stolen and how your legally bought software could be
disabled by Microsoft.

In this issue we look at some consequences of a stolen product key, noting
the lack of a clear and open process by Microsoft to deal with disputes.
We end with some ideas for what you can do...

3. WHAT'S HAPPENED TO MY PRODUCT KEY?
One problem with the activation process is there's no way for the customer
to know how the product key / software license has been used. Microsoft
keeps close records of each activation for a product key but withholds
that information from the customer.

If your product key is stolen and attempts are made to use it, you (as the
legitimate owner) aren't notified. You'll only find out if the product
key is deactivated and even then you won't know why.

If you have an activation problem, Microsoft knows what has happened but
won't tell the customer. It's possible the activation record could reveal
details that would support a case that your product key was stolen (eg
activation in another country) but Microsoft won't tell you.
Since you never see the activation history, you also can't check to see if
your product key has been misused. Ideally the registered user could
login to a special site, review their activation history and know when
there's been improper use.

As it stands, you don't know there's a problem until you try to activate
the software or Microsoft imposes their 'kill switch' on your legal
software.


4. WHY HAS MY SOFTWARE BEEN KILLED?
So your product key was stolen, used and as a consequence, you start
getting messages saying that your Windows Vista (or maybe Office 2007) is
illegal - what can you do?

Good question and there's no good answer - presumably you'll phone
Microsoft's call centre to ask for an explanation. That's where the
situation gets messy - there's no clear path from Microsoft to deal with
this situation.

The obligation falls on you to prove to Microsoft that you bought legally.
That can be difficult because Microsoft has already decided that your
product key has been used illegally by a number of people and it has no
means of knowing whether anyone was a legitimate user of that product key,
and it has no clear path for customers to prove otherwise. Microsoft's
recommendations about documentation would not really help.
Since the product key isn't linked to you by name there is no way for you
to prove that you are the legitimate owner of that product key.

Having an itemized receipt (as suggested by Microsoft) doesn't help
because the product key isn't shown on a shop receipt. Microsoft could
argue that a receipt is for any copy of Office or Vista - not necessarily
the product key in question.

In the end all you can do is call, plead your case and hope for a
sympathetic response.

Corporate or volume customers who are victims of product key theft might
have some more power with Microsoft to negotiate a solution. But home or
small business customers have no such leverage nor is there the vital link
between the owner and the product key.

Microsoft argues there are 'few cases' but since there's no external
checks of that statement, we only have Microsoft's word for that. It
would be in Microsoft's direct interests to downplay the possibility.

[snipped]

_______
5. THE TIME LAG BETWEEN THEFT AND DETECTION
With Microsoft holding all the software license and activation history it
can be long time between the actual theft of your product key and when
there are noticeable consequences.

This will deepen the mystery for you when you start seeing warnings that
you have pirated software. The theft of your product key may have been
weeks, months or years ago.


6. WHAT APPEAL PROCESS?
What if Microsoft disables your copy of Vista or Office 2007? You've
tried to explain to Microsoft that you were the original purchaser but
they won't believe you. How can you appeal?

You can't - there's no appeal process.

Microsoft's decision is final; you're a software thief, then you've lost
that software license. You're expected to buy another copy of the
software (and hope the same thing doesn't happen again).


[snipped]



7. HOW YOU CAN PROTECT YOURSELF
After reading this, I'm sure some people will decide that there's
insufficient 'security of tenure' in buying a Vista or Office 2007 license
to warrant the high cost.

License problems and the possibility of Microsoft 'killing' your software
probably isn't enough on its own to make you decide not to get the new
versions, but combined with the cost and the usual changeover hassles
these concerns might be enough to keep your money in your pocket.

While Microsoft fails to provide a clear path for customers who have their
product key stolen there is no reliable method of guaranteeing your Vista
or Office 2007 license is safe, but there are some things you can do:

- Keep your paperwork. Save a copy of the itemized receipt for the
software purchase with a copy of the product key (preferably a copy of the
actual product key label).

- Know your license. Windows and Office software licenses vary in many
ways, especially how many computers you can install the software on. It's
a complicated thing and not always obvious to the purchaser. To save
later trouble you should know the license terms from the start. We
suspect many people have bought new copies of Office when they don't need
to. Either they have misunderstood the nature of their license to use
Office or the flexibility of the software activation system (which,
despite flaws, is considerably more flexible that most people realize).

- Track your activations. Microsoft tracks your software activations but
keeps that info for themselves, therefore you should keep a record of
when, where and on which computer you have activated Microsoft software.
This will give you a firm basis to dispute Microsoft's version of events.

- Protect your computer. Make sure that access at start-up and the
screen-saver is password protected. This is good practice to protect all
your personal data, not just product keys.

- Protect your paperwork. Keep product keys out of easy reach. It's the
product key that is vital to your ownership of Office or Vista, the CD /
DVD isn't as important.

[snipped]