WGA: Phoning Home Regardless

Saying "Yes" or "No" to Windows Genuine Advantage (WGA) makes no difference to Microsoft. They'll take your data anyway.
According to tests conducted by London-based heise Security, clicking the Cancel button on the WGA installer's not enough. It still sends off data.
Intercepting the out-bound stream with a packet sniffer revealed it contained "some confusing, apparently encrypted data" along with registry settings, "information about the version of the WGA Notification Tool, Windows, and the language of the operating system. Furthermore, a cookie containing a GUID is also used to contact the server. It may be possible to identify individual computers by these means."
In yet another repeat of a practice that first emerged with Windows 95's Registration Wizard, Microsoft once again insist that saying "No!" really means "Yes". Or in this case they told heise that they "collected [the] data to improve the quality of the WGA for users".
But hang on a minute. It sends back data on users who pressed Cancel. Users who don't want to use WGA. Users who aren't interested in installing WGA, irrespective of its quality.
heise also noted that "Microsoft did not explain why setup does not inform the user that data are being sent, much less get the user's consent."
"Spyware," according to Wikipedia, "is computer software that collects personal information about users without their informed consent."
So is this spyware?
Does Microsoft have the right to collect information without asking your permission?
Even on installations you decline?



























PC World is New Zealand’s top selling computing and technology magazine.