Microsoft Cofee brews 'back door' fears

Powered by SC Magazine
 

Industry experts have welcomed assurances from Microsoft that the firm has not provided law enforcement agencies with a 'back door' into its systems..

Microsoft briefed Gartner on 2 May about its Computer Online Forensic Evidence Extractor (Cofee) USB device that the company began distributing to law enforcement agencies in 2007.

Cofee is designed to offer police and other agencies a way of collecting digital evidence, decrypting passwords and analysing computer and web surfing activity.

The assurances came after reports claiming that Cofee could provide a 'back door' into Microsoft operating systems and applications.

In its Gartner briefing, however, Microsoft stated that Cofee offers nothing more sinister than a set of scripts designed to help law enforcement professionals take a system snapshot.

Microsoft claimed that the commands held on the USB stick are all public, and that no new code has been written and no back doors are present.

"Gartner believes, and Microsoft agrees, that it was a mistake to widely deploy the Cofee initiative without public disclosure and a formal distribution plan," said John Girard, a vice president and distinguished analyst at Gartner.

"We also believe that Microsoft should work closely with professional third-party forensics product and service vendors to develop, manage and track future data capture utility projects.

"Another concern raised by Microsoft's failure to offer public information about this initiative is that the widespread attention it has drawn will likely encourage otherwise well-intentioned enterprise IT personnel to search the internet for penetration tools with which to experiment.

"Enterprises should review their internal protection measures to ensure that their business data is secure and private."

Copyright ©v3.co.uk


 
 
 
Top Stories
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Images: the next frontier in data analytics?
Barclay’s global data chief says we’re still at the starting line.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Optus expands 4G coverage
Oct 10, 2014
If you rely on an Optus phone for work you might be interested to know that there are now 200 ...
Microsoft Office is now free for some charities
Oct 10, 2014
Microsoft has announced that eligible Australian non-profit organisations and charities can now ...
Vodafone lights up 4G in Adelaide
Oct 9, 2014
Live and work in Adelaide? Vodafone has switched on its 4G network in the city and suburbs.
Next year tradies will be able to take payments using ingogo
Oct 3, 2014
Ingogo is going to provide a card payment service for Xero users.
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  26%
TOTAL VOTES: 414

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  55%
 
No
  45%
TOTAL VOTES: 194

Vote