Microsoft Lockout Cripples WireGuard Updates

The popular open-source VPN software, WireGuard, is currently facing significant challenges in distributing updates to its Windows user base. Jason Donenfeld, the creator of WireGuard, has been unexpectedly locked out of his Microsoft developer account, preventing him from signing drivers or shipping necessary software updates.

This lockout stems from Microsoft's recent mandatory account verification process for the Windows Hardware Program, which has now concluded. Developers who did not complete this verification by a specific deadline have had their accounts suspended, effectively halting their ability to release updates. Donenfeld reported receiving no prior notification from Microsoft regarding this impending suspension.

Similar issues have affected other critical open-source projects. Mounir Idrassi, the developer behind the encryption software VeraCrypt, also found himself locked out of his Microsoft account. This prevents him from updating VeraCrypt in time for a crucial certificate authority expiry, which could impact users' ability to boot their systems.

Donenfeld expressed concern that such a situation could leave users vulnerable if a critical vulnerability needed immediate patching. Windscribe, another VPN provider, has also publicly stated it was locked out of its Partner Center account after years of verified status, citing a lack of effective support from Microsoft.

As of late Wednesday, there was a positive development for Donenfeld, who reported being in contact with Microsoft and expressed hope for a swift resolution. However, the situation underscores broader concerns about Microsoft's developer account management and its impact on essential open-source software.