This kind of scheme is also going to fail if your user gets a new PC.
Why not use a third-party authentication provider instead of trying to roll your own?
Is the BIOS Serial Number Always Set, Constant & Reliable
- Motherboard BIOS (even UEFI) modding is not uncommon.
- Especially on desktop PCs the final user could change it's motherboard, so the UUID could change (mostly be empty or invalid od desktop PCs)
- On virtual machine the UUID is "fake" and easily editable by the final users.
- a motherboard UUID system protection will add only headache to the developers (they should need to add some sort of "re-validate" license system), will make final user angry (it's not nice see your software being blocked just for an hardware change) and you are also preventing users to install on multiple PCs the same software.
- Disassembly and searching for a certain and fixed winapi call is easy.
- It's just a waste of time, money and resources.
I was immediately thinking that your Media Access Control address could be used. Everything that is connected to the Internet has one, most have more, as anything that is part of the Ethernet protocol has one, and they are supposed to be unique. It is not (usually) very hard to change, though.
I was also thinking about CPUID: Processor Serial Number, but that does not seem to have been implemented for quite a few years, and AMD never implemented this. If I remember correctly, I used to turn this feature off in the BIOS anyway.
This discussion reminded me of how the Windows activation process works. Here is a discussion how it works, it might give you some ideas:
http://www.technibble.com/windows-xp-activation-explained/
A question to ask, is wether this is so important that you are willing to waste your time doing this? It is cracked faster than you can say 'cake' anyway, if the right person gets interest in your product.
This topic is closed to new replies.
Advertisement
Popular Topics
Advertisement
