Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Bug Security Software

Symantec Hit by Product Activation Glitch 277

An anonymous reader writes "According to this article, Symantec has hit a snag in their product activation scheme. On a certain machine, the software machine would always ask for the activation when the computer is started or restarted, despite the fact that they have thoroughly tested the scheme." According to the article, Symantec has finally managed to replicate the problem, and those hit by the bug are asked to contact Symantec's support channels. However, there's no mention of a fix yet.
This discussion has been archived. No new comments can be posted.

Symantec Hit by Product Activation Glitch

Comments Filter:
  • Re:Time to move (Score:1, Interesting)

    by Anonymous Coward on Saturday November 01, 2003 @11:17AM (#7366420)
    Unfortunately, I've seen plenty of cases of viruses under Linux. My machine has been repeatedly scanned by other machines that are infected with a trojan that exists only under Linux. And don't forget the most insidious security threat - the rootkit. A number of my friends have had their machines rooted, probably for months, and don't even suspect anything. Oh, and there's plenty of poorly written software such as sendmail that aids in the rooting of machines. And some of this is in the default install of most distros.

    Doesn't have virus problems? Whatever.
  • by Jameth ( 664111 ) on Saturday November 01, 2003 @11:21AM (#7366433)
    I have to assume that there are very many intelligent programmers at these companies. They have to know that everything they do can and will be cracked by pirates and that the cracks will be publicly available and easily accessible.

    Is this just another case of managerial idiocy--the programmer grunts can't explain to the bosses that it is a futile misguided effort?

    Or are the programmers just not really trying? Are they just going along with it because it's their job, rather than actually trying to make a quality product? (which, as it turns out, really isn't their job)
  • by Anonymous Coward on Saturday November 01, 2003 @11:23AM (#7366446)
    Precisely. I recommended PowerQuest Drive Image to a colleague, because I did not realize they added "product activation." That is the last sale they will get from either my colleague or me. I had previously purchased several versions of their products over the years.
  • by Jameth ( 664111 ) on Saturday November 01, 2003 @11:27AM (#7366459)
    Actually, I just read the article, and it answers my question just fine:

    "This really has been a top priority for our product activation development team."

    They have a 'product activation developement team.' So, there's one group of people working on this, and that's their job. the people with other jobs aren't in the loop about product activation, and those working on it need it for job security.

    I can't really see many people saying, "Excuse me, sir, my job doesn't matter."

    I wonder if they actually decided to implement product activation without asking the programmers? It seems insane, and there's no way to know, but anything is possible.
  • by Adrian De Leon ( 30979 ) <adrian DOT deleon AT gmail DOT com> on Saturday November 01, 2003 @11:41AM (#7366514) Homepage
    Here is my product activation story, I frist posted this on my blog but I wanted to contribute it here too.

    I had to reinstall one of the machines in the Web Cafe that I own. Since all the computers have the exact same hardware, the easiest way was to pull the hard drive from one of the PCs to the one that is acting as a file and print server.

    Because of several reasons that I really don't want to explain right now, all the machines are running Windows XP Pro (yes, I did try using Linux first, no, the clients didn't want to use it.)

    So I have all my licenses in order ( the BSA can come here and kiss my ass) and activated.

    I swapped the hard drives, and of course, I knew I would had to activate Windows again. No problem right?

    yeah, right

    A message came up saying that I had exceeded the number of installations valid for my CD Key or something like that.

    "Crap, now what? I paid for All these licenses!"

    So I called the 1-800 number on the screen and tried to navigate the voice menu (I hate those). The system hanged on me twice before I could speak to a real person.

    "What seems to be the problem"

    I described to her the problem and I had to dictate her a 30 digit number that was on screen. After a while, she gave me another 30 digit number to type.

    After we were finished I asked her If I would have to call every single time I needed to reinstall Windows. She said that she didn't knew.

    If I have to call Microsoft every single time I need to reinstall MY machines, I am going to be very, very pissed.

    With product activation, Microsoft is treating their customers, me in this case, like criminals. I could have downloaded a crack from the Net, but no, instead I spend 10,000 pesos (almost 1,000 dollars) in Microsoft software and I get treated like a criminal and waste my time calling them for permission to reinstall my machines.

    This sucks.

    As soon as I think my clients could start using a Linux desktop just by sitting in front of it and not needing any training, all Microsoft software is out from here.

    Product activation sucks. The people who want to use software illegaly with product activation will find a way (cracks, serials, etc) and the only ones getting the finger are the honest paying costumers.
  • by Anonymous Coward on Saturday November 01, 2003 @12:18PM (#7366618)
    got to be such a PITA!

    My company standardised on Office 2000 at a cost of > $300 per seat (10 seats). The original activation was sooo easy; we have an "always-on" Internet connection, the software connected to Microsoft's site and we were off to the races in about 30 seconds after installing.

    As computers will do, several went belly up and I had to replace them. One needed nothing more than a bigger hard disk, but required re-authorization. In the meantime (less than 6 mos), MS had released Office XP. Wouldn't you know that activation was no longer so easy! The software kept coming up with "server not responding" and I was forced to call to get an authorization code. This activity included an extra copy that we bought that had never been activated! So much for their promises of being easy to authorize.

    After a couple of 20 minute (mostly on hold) sessions to get authorization numbers, I tracked down a cracked copy of Office. I still keep the original licenses in a locked cabinet in case we are ever audited by the software gestapo, but I re-install off of the cracked copy to avoid the authorization. I personally think this is a forced upgrade policy.

    We can no longer buy Office 2000. What do you think I'm going to do when we need a new copy of Office? Microsoft has forced me to pirate their software!

    (posted as AC for obvious reasons)
  • by Joe Tennies ( 564856 ) on Saturday November 01, 2003 @12:35PM (#7366701) Homepage
    If the product is so expensive, you should consider the hardware keys instead of product activation. I know CADKey used to have them. A small device that plugs into the... serial port (might have been parallel port) that had to be checked. Another possibility is a USB version.
  • by henryhbk ( 645948 ) on Saturday November 01, 2003 @12:38PM (#7366712) Homepage
    The 2 kinds of products you don't want activations snags in(because they are really needed for emergencies by the consumer) are anti-virus software and disk-recovery software. I mean if your hard-disk is corrupt or you have a bad virus (please no debates on whether norton's has helped/hurt you, or whether you running some virus immune OS, I'm speaking conceptually here) and you can't activate your de-corrupting utility, then you a) wasted your money and b) are screwed!

    Symantec should realize their market, and for those who paid, expect to be able to use their product.

    Luckily they don't have this yet on the macintosh side...

  • by Anonymous Coward on Saturday November 01, 2003 @12:50PM (#7366758)
    So, why complain when crappy software companies join the activation bandwagon?

    Ditch them. Support their efforts by avoiding them by any means necessary until they start making good software or dry up and die, whichever comes first.

    Symantec is nothing compared to the d day.. the day microsoft releases that longhorn bull crap. I bet that'll piss off the rest of the people who were thinking about whether to ditch xp or not.

    Software activation is AWESOME. At least for us, "teh open-sore hax0rs" of evil openness.
  • Re:Hello, McAfee! (Score:3, Interesting)

    by Dunark ( 621237 ) on Saturday November 01, 2003 @01:20PM (#7366870)
    What they are trying to do is to make you and me - and people like us - who own multiple machines at home, buy a copy for each computer we own. ...

    This is particularly irksome with products like Powerquest's Partition Magic. I mean really, how often does someone need to change the partitioning on a hard drive? I only find a need about once every few months on any given computer. PQ is outta their minds if they think people are going to buy a second copy of PM when they already have one doing nothing on another system.
  • by pipingguy ( 566974 ) on Saturday November 01, 2003 @01:22PM (#7366874)
    The only explanations I can come up with for companues that actually waste their time on this crap is that the decision makers don't even know what these computer things are

    No, it is comfortable, highly-paid executives trying to force oldthink onto a new problem. Product activation is destined to fail simply because it punishes the legitimate user.

    I chose W2K a year ago rather than the fancier and "newer" XP for exactly this reason (me not being bright enough/have the time to run Linux), since I add hardware to my machine fairly often and didn't want the additional hassle.
  • Dear Symantec, (Score:4, Interesting)

    by A_Non_Moose ( 413034 ) on Saturday November 01, 2003 @01:26PM (#7366884) Homepage Journal
    Here's a free clue, from the article:

    Some of the 1.2 million customers that have installed software maker Symantec's latest Norton PC security package have been unable to use the software because of new antipiracy technology, the company confirmed Thursday.

    Ok, so 1.2mil is decent install base.

    But...

    "We thoroughly tested the technology," Smith said. "We ran extensive tests worldwide. You had well over 250,000 customers complete activation, and we didn't have any complaints about this."

    So, 1/5'th of your install base did ok, and the rest did not?

    Ok, yes I've taken this out of context, but even a second reading *still* seems to imply that 4 out of 5 dentist^H^H^H^H^H^H customers think product activation sucks.
  • by Chief Typist ( 110285 ) on Saturday November 01, 2003 @01:48PM (#7366971) Homepage
    I develop shareware applications. Getting people to register their software is how I make my living.

    I tried using a complicated scheme where the registration codes would expire after a period of time and the license key was written to the user's hard drive (along with a MAC address to prevent that file from being copied.) It took the pirates about 2 months longer to crack the scheme, but other than that, it had no effect other than to piss off customers.

    Of course I dumped that scheme and went back to a simpler name/code written to a preference file.

    But, at the same time, I've introduced a few "anomalies" that pop up only when a pirated serial number is used. This, in turn, causes the casual pirate to send me an e-mail saying "feature x isn't working". And then I politely explain why. I've actually gotten a few new customers because of this technique -- a twist on the "support" theme of the parent post.

    And it's fun to watch the confusion caused by the "anomalies" on the cracker discussion forums :-)
  • by Ark42 ( 522144 ) <slashdot@@@morpheussoftware...net> on Saturday November 01, 2003 @01:58PM (#7367026) Homepage

    Wrong. I have prooved to myself so many times how very worth it it is to have activation in my product. Unless you don't have an internet connection, mine never has any troubles. I don't know why symantec couldn't manage to make something that just works like mine. Simple public key/private key encryption and a single registry setting and a single hit to a website to encrypt your computer specifics.
    Almost nobody even realizes my program uses activation unless they don't have an internet connection and have to do it by email and a little copy and paste. Several times I have seen schools purchase 1 copy and try to activate on a whole lab of computers. Didn't work and most ended up purchasing 20 or 30 copies later on. Somebody uses a stolen credit card and posts the activation code on some chinese website. Over 1000 attempts at activation with that single code within only a few days, but only the first 3 were lucky enough to get it for free because then I disabled the code forever.
    And if I ever decide to stop selling and supporting my product, I will compile a freeware version and let the community decide where to host it so nobody ever has to worry about not being able to use what they bought. Not that I plan to stop being self employed, its really a lot of fun.
  • by Anonymous Coward on Saturday November 01, 2003 @02:19PM (#7367103)
    I agree. You could add in any software needed in a disaster recovery situation such as backup software (The older versions of Arcserve were bad for this. Not sure about the newer ones.)

    and volume managers:

    Last year we had a Sun box go nuts and decided to switch the internal drives and storage array over to a duplicate machine while the tech debugged the hardware on the bad box. Would it work? Of course not. Veritas' volume manager has a licence algorithm geared to the MAC address of the box. Great! Thanks Veritas!

    The Sun tech got it going by swapping the firmware chip from one box to the other but you shouldn't have to go digging around in the guts of the computer to do something like this in an emergency.

  • my experience (Score:5, Interesting)

    by mlong ( 160620 ) on Saturday November 01, 2003 @02:37PM (#7367166)
    I have Windows XP and recently upgraded on the symantec website. I hit this exact problem. After several reboots I decided to uninstall it, delete every file and mention in the registry, and reinstall it. Oops...too late. It said I exceeded my license. So here is what happened:

    1. Called 1-800-745-6055. They said to call the download dept. at 1-866-285-6460
    2. Called the download department. Their menu didn't sound anything like a download dept. After calling several times and figuring out the number to press to talk to a live human, I was told to call their subscription key dept. at 1-800-441-7234.
    3. Called the subscription key department. Had to again figure out how to talk to a human. Finally I did and they forwarded me to an "activation support specialist".
    4. Specialist tells me to call the download dept. as specialist only has access to physical CD keys, not the downloaded keys.
    5. Called the Download Department. They told me to call the subscription key department. I told them I already did and I'm getting sick of the run around. They put me on hold. Finally said there is no way they can reset my key but they will either ship me a new CD out or let me download a new copy. They tell me it will take 10 days.

    I have not received the new CD yet but I did get an email saying it was shipped out. So we will see if this fixes the problem.

  • by MadCow42 ( 243108 ) on Saturday November 01, 2003 @02:42PM (#7367185) Homepage
    I write shareware too... but have a very different view from you.

    The first few programs I released I simply had a "reminder" window pop up regularly to tell the user that it was a shareware program and that they should make a donation to support the development. One of these programs became relatively popular in a niche market, and I know for a fact that over 250 users are using it daily in BUSINESS production. Guess how many people registered? One. Guess how many people email for support, and get pissed off after I only answer their first 2-3 emails? LOTS.

    So, my new programs have an activation feature tied to the program after a 30-day trial. Sure, there's tons of pissed off people that get annoyed when the 30-day trial expires and they have to register to continue using it in their business. Do I care? No, because otherwise they wouldn't register and I would have $0 to show for my thousands of hours of work on the software.

    Now for commercial software where they pay money up front, that's a different issue. For shareware, it's the ONLY way to get compensated for the value you're giving people. I find the 30-day trial period lets them decide if its worth the money. If they get caught on day 30 in a pickle, that's their problem because I've warned them for 29 days that it would expire if they didn't register.

    MadCow.
  • by Ark42 ( 522144 ) <slashdot@@@morpheussoftware...net> on Saturday November 01, 2003 @03:00PM (#7367275) Homepage
    "Almost nobody even realizes my program uses activation"


    So you don't tell your users that you are sending information from their computers to your website? How honest is that? Even MS tells you when this is going to occur.


    Well there is a notice that says you must be online in order to activate, on the screen where the user must enter their code, but no personal information is really sent with the activation request anyways, its already stored on my server in a database from when they purchased, since you can only purchase and download my program online.

  • by Johnny Mnemonic ( 176043 ) <mdinsmore@NoSPaM.gmail.com> on Saturday November 01, 2003 @03:57PM (#7367519) Homepage Journal

    Friend, I sympathize, I really do. If the world didn't have serial numbers and passwords, I would be out of a job. I'm even a Mac pro, too. But, all that said, there's no way that I would use warez serial numbers anywhere that I was getting paid to do work. I'll sometimes take that chance on my own machines, when I'm demoing something--I'm not going to purchase a full version of Quark, say, just so I can learn how it operates, so I can learn how to support it. But at work--no way.

    If Quark wants to waste your time, pass on the cost to the client. When they challenge a 1/2hr charge, you can explain to them that that was for the 1/2hr you spent on the phone with Quark Volume Licensing--and, oh, btw, Adobe picks up their phone right away, so now do you see how ID would actually save you money? Passing on the costs of Product Activation is the only way to get these corps to change their practices and remember on which side their bread is buttered; enabling that customer-hostility is only going to wind up costing you grief.

To the systems programmer, users and applications serve only to provide a test load.

Working...