Windows98のプライバシーはあなたの思っているよりも悪い

アップルボール以下はUSのWindowsMagazineからの転記です。

英語なので読むのが面倒な人に簡単に言うと
Windows98マシンを使ってInternetをしていると、しらないあいだに、あなたのパソコンのデータがマイクロソフト社から盗まれるということです。
マイクロソフト社がその気になれば、あなたのパソコンのデータを抜き取ることが可能なのです。
そういう仕掛けをマイクロソフトはWindowsに組み込んであると言うことです。
こわいですねえ。よくもまあこれだけのことをされながらWindowsマシンを企業に入れる人の気が知れません。マックならこんなことはないのにねえ。

詳しいことは以下の英文を読んでください。


Friday, March 12, 1999

 

WinMag Exclusive: Windows 98 Privacy Issue Is Worse Than You Thought

 

A WINDOWS Magazine investigation has shown that the recently reported privacy concern with Microsoft's Windows 98 Registration Wizard goes much deeper than previously reported. It's not only possible for any Web site to read information that uniquely identifies you and your PC, but that information can be modified and/or sent to Microsoft without your consent.

 

Last week, Richard Smith of Phar Lap Software first identified a risk with the Registration Wizard, or RegWiz. (The Phar Lap discussion of this problem is at http://security.pharlap.com/regwiz/index.htm). Windows 98 uses RegWiz to process your product registration form and submit it to a Microsoft server over the Internet. Two identification numbers are generated based on your PC configuration and the data you enter during registration. The first number, called the hardware identification number (HWID), can in most cases uniquely identify the computer. A second number, called the Microsoft ID (MSID), uniquely identifies a user and is placed in a browser cookie for access to services on Microsoft's Web site.

 

WINDOWS Magazine contributing editor Martin Heller examined the interface to RegWiz and discovered that not only does the control allow the HWID and MSID numbers to be read by any site, it allows them to be changed as well. That means any Web page can alter these identification numbers, and can even do so without your knowledge. A demonstration that uses RegWiz to read and set this information can be found at http://www.winmag.com/web/regwiz.htm.

 

RegWiz also includes the ability to send a PC's registration information to Microsoft. This can be triggered from any Web page without the user's consent. When this function is used a small window appears that says "Sending the registration information to Microsoft ... Please wait." Other than disconnecting from the Internet, there is no way for a user to stop the transfer once it has started.

 

In response to the privacy concerns raised by the Registration Wizard, Microsoft has said that they will no longer record the HWID information when a user registers, and will elminate any use of the HWID information that might currently be in their databases. The company also expects to have a utility available within two weeks that deletes the HWID personal registration data from the registry. It is possible to disable RegWiz and remove the information manually by using the Windows 98 registry editor, and we have provided instructions for doing this at http://www.winmag.com/web/regwizoff.htm..

 

-- David Methvin


戻るトップ

Macリンク集・・OSX/ OS9.x,OS8.x/ mac本体/ネットワーク/ 周辺機器/ ソフトウェア/ QuickTimeとムービー/
アップルUS訪問/ ダウンロード/ Macとwindows比較 / MacのTシャツ・コレクション/