Well, maybe on your systems. That's the product ID that MS might want to SUPPORT your system, but has nothing to do with Product Activation or the ability to shut it off, if MS so desires.
Now, the DigitalProductID is a bit different - it DOES contain some information, but is only part of the piece that one would need. The key that is on the back of your CD case or the 25 AlphNum that is input for activation is NOT the ProductID. So, I'm still a bit puzzled over what the threat to security and the potential for someone to remotely (or locally for that matter, unless - of course, you've left the CD case next to the computer) retrieve any codes that could be used to shut down a group of systems. -rtk -----Original Message----- From: Geoincidents [mailto:[EMAIL PROTECTED] Sent: Sunday, September 07, 2003 5:41 AM To: Rick Kingslan; [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] Product activation is exploitable > Interesting. But, I'm not sure how effective this would be, as > everything that I've looked at (XP, 2003) doesn't have the actual WPA > keys in the registry In windows XP it's at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductID Geo. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
