Visit Tedd Riggs's column >>

TEDD RIGGS

Recalled by factory for repairs
Add To Watchlist
Articles Posted: 1; Links Seeded: 456
Member Since: 9/2007

Looking for answers on Microsoft's COFEE device

advertisement

Today's story on a Microsoft device that helps law enforcement gather forensic evidence from a crime suspect's computer has garnered lots of attention and raised questions about how exactly it works and what it's able to do. Update, 5:10 p.m. I just got a response from Microsoft. See the end of the post.

I've received calls and emails from law enforcement officials -- ranging from Amtrak's Office of Inspector General to a U.S. Army cybercrime investigator to the Citrus County, Florida, Sheriff's Office -- all wanting to know how they can get their hands on the device.

Other readers have wondered about the implications of the device for civil liberties and Windows security. There is also concern the device could fall into the hands of criminals (who, I'd add, would also have to gain physical access to a computer to do harm with it) or that something similar could be developed.

A reader from Snohomish County writes, "a little usb device cannot break encrypted info (passwords) -- unless microsoft has built a back door into its computers -- it seems. i have worked with encryption software before -- stuff it would take NSA a month to crack -- so how does MS do it in minutes?"

Published to:

What's this?
Who's leading the conversation?
This visualization below allows you to see the impact that each user has on the current conversation. The top row contains the group of users who have had the most impact, the 2nd row the group of users who have had the 2nd most impact (et cetera). Users with similar impact are grouped together, and the average score of the group is shown to the left of the group. The author of the article is also shown on the left, in their corresponding group. Each user's score is based on the number of comments the user has made plus the number of votes their comments have received. The scores are calculated relative one another, so while their absolute value is not particularly important, their relative difference does indicate a larger difference in impact on the conversation.
17
{"commentId":1750252,"authorDomain":"TeddRi"}

Interesting as it looks like yesterdays story got some rather wide coverage. That would explain why my and other people noticed their Firewalls acting up a bit on yesterdays article. Lots of questions !

{"commentId":1750252,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 3 votes
Reply#1 - Wed Apr 30, 2008 11:04 AM EDT
{"commentId":1750283,"authorDomain":"TeddRi"}
{"commentId":1750283,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 2 votes
Reply#2 - Wed Apr 30, 2008 11:08 AM EDT
{"commentId":1750345,"authorDomain":"TeddRi"}
"With this tool, they can just plug it into the computer, wherever it's located. They don't have to turn off the power. It has over 150 different technology tools that law enforcement officers can use to analyze data, to get access to passwords, to obtain the information typically that people need to successfully prosecute a crime."

I hope that thing never gets in the hands of a ID thief.....or mad spouse....or the TSA & Airport Secuity yikes...the damage that could be done would be unreal if used in the wrong hands.... that is scary.

{"commentId":1750345,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 2 votes
Reply#3 - Wed Apr 30, 2008 11:19 AM EDT
{"commentId":1750374,"authorDomain":"newsvice"}

this is very interesting to me,

i wonder what they really plan on doing with it...

after all ive always been told, and believe myself.... that if security can be constructed then someone can de-construct it... but this is like handing them the keys to the safe...

{"commentId":1750374,"threadId":"257679","contentId":"1461505","authorDomain":"newsvice"}
  • 2 votes
Reply#4 - Wed Apr 30, 2008 11:25 AM EDT
{"commentId":1750406,"authorDomain":"TeddRi"}

I have never had so many hits on my page as I did yesterday,,,,They were from all over the place. Yeah....A top cop from Hong Kong working with Microsoft Research Group ? That is handing over the keys to the town....

Well China is the largest copier of software in the world and is Microsofts and Adobe (PhotoShop) number 1 biggest loss of revenue for stolen software. So they do have a good reason for it. And for looking for people with ID theft and Child Porn, this will make it simple for Police.

In the right hands, with a warrant, I think its fine, but the chances of misuse are staggering.

{"commentId":1750406,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 2 votes
#4.1 - Wed Apr 30, 2008 11:31 AM EDT
{"commentId":1750687,"authorDomain":"fugitive247"}
In the right hands, with a warrant, I think its fine, but the chances of misuse are staggering.

Tedd, dah-link... all it would take is one jerkwad with a Barney Fife mentality to utter "Patriot Act" for all pretenses of a properly issued and executed search warrant to be tossed out the window.

And no, this isn't some form of conspiracy theorist paranoia, either. The potential for this kind of scenario to unfold (repeatedly, I might add) is all too possible.

{"commentId":1750687,"threadId":"257679","contentId":"1461505","authorDomain":"fugitive247"}
  • 3 votes
#4.2 - Wed Apr 30, 2008 12:43 PM EDT
{"commentId":1751190,"authorDomain":"TeddRi"}

Yeah....I noticed..Check out some of the readers comments on those three URL's...Some people have been doing some serious looking at this.

{"commentId":1751190,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 2 votes
#4.3 - Wed Apr 30, 2008 2:45 PM EDT
Reply
{"commentId":1750867,"authorDomain":"O-K"}

Tedd.thamks for following this. It could become a big story.

{"commentId":1750867,"threadId":"257679","contentId":"1461505","authorDomain":"O-K"}
  • 2 votes
Reply#5 - Wed Apr 30, 2008 1:29 PM EDT
{"commentId":1751198,"authorDomain":"TeddRi"}

It is becoming one pretty fast already. It raised a ton of questions !

{"commentId":1751198,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 1 vote
#5.1 - Wed Apr 30, 2008 2:46 PM EDT
{"commentId":1751293,"authorDomain":"newsvice"}

who else is looking into this, and do you think that this means that microsoft has some sort of keystroke-logging or something running in the background of their OS that they are now going to use to "break" these passwords and such in minutes rather than the traditional cracking softwares hours or longer to do the same breaking if they can break them at all.

{"commentId":1751293,"threadId":"257679","contentId":"1461505","authorDomain":"newsvice"}
  • 2 votes
#5.2 - Wed Apr 30, 2008 3:05 PM EDT
{"commentId":1751310,"authorDomain":"TeddRi"}

Since Microsoft has to make their code open source now I doubt if their is a keystroke logging going on or it would never pass any government approval. But as far as getting any details on what is involved with this technology I have not gotten anything. I keep trying and hitting alot of closed doors.

{"commentId":1751310,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 1 vote
#5.3 - Wed Apr 30, 2008 3:09 PM EDT
{"commentId":1751531,"authorDomain":"newsvice"}

how fitting- "I keep trying and hitting alot of closed doors."

somehow i knew that would be what would happen if anyone tried to know what the real deal was

thanks for alerting me to this, it is very disturbing stuff here, cheap and effective ( bad combination in the wrong hands)- i know its not cheap to make the software, but to produce many copies of it, it seems like a no-brainer- just get a usb stick duplicator.

{"commentId":1751531,"threadId":"257679","contentId":"1461505","authorDomain":"newsvice"}
  • 2 votes
#5.4 - Wed Apr 30, 2008 3:53 PM EDT
{"commentId":1751797,"authorDomain":"TeddRi"}
i know its not cheap to make the software

Did you ever use Laplink ? That software has been around since DOS1,1 by Traveling Software, 4 miles away from Microsoft....That can transfer basically anything from PC-PC or Mac-PC. My guess is that they worked together on that one as that is one of the best out there.

{"commentId":1751797,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 1 vote
#5.5 - Wed Apr 30, 2008 4:47 PM EDT
{"commentId":1751868,"authorDomain":"newsvice"}

hmm i will have to look into that one

{"commentId":1751868,"threadId":"257679","contentId":"1461505","authorDomain":"newsvice"}
  • 2 votes
#5.6 - Wed Apr 30, 2008 5:02 PM EDT
{"commentId":1751969,"authorDomain":"TeddRi"}

They started out in business 3 years after Microsoft did. A young guy named Mark Eppley started the place out as Traveling Software and came out with some awesome ways of synching and transfering files via the old Centronics Parallel Cables or RS-232 and using multiple lines at once to get up to 115 kbps, in those days, that was unheard of speeds. Then they started syncing PDA's, Watches, you name it, very solid products and a good company. I have worked with Mark for years. I am not sure if he is still involved or not. But those guys could make the USB software with ease.

LapLink

{"commentId":1751969,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 1 vote
#5.7 - Wed Apr 30, 2008 5:25 PM EDT
Reply
{"commentId":1752598,"authorDomain":"fugitive247"}

Four words: Separate Secure Linux Partition

Of course, there's more to it than that. ;oD

{"commentId":1752598,"threadId":"257679","contentId":"1461505","authorDomain":"fugitive247"}
  • 2 votes
Reply#6 - Wed Apr 30, 2008 9:17 PM EDT
{"commentId":1752773,"authorDomain":"TeddRi"}

Hate to say...That is not going to help, Microsoft has that one covered with

Virtual System Server

Systems Center

If this thing is working with the Systems group, then its got some hi end stuff to it that goes far past the Windows world. That is my concern.

{"commentId":1752773,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 2 votes
#6.1 - Wed Apr 30, 2008 10:12 PM EDT
{"commentId":1753028,"authorDomain":"fugitive247"}

Hmmm... This is getting more disturbing by the moment. At this rate those with the capability will be going largely wifi, as stealth as possible, and keeping their laptops in secret underground bunkers when not in use.

/me grumbles and skulks off to knit tiny little things while pondering...

{"commentId":1753028,"threadId":"257679","contentId":"1461505","authorDomain":"fugitive247"}
  • 2 votes
#6.2 - Wed Apr 30, 2008 11:38 PM EDT
{"commentId":1753086,"authorDomain":"TeddRi"}

Well I would not give up hope. The fact that getting any info on the product is good as if information was leaking out, it could be very messy. This has been in the works for a year and this is the first its has ever been heard of outside of Microsoft. So they have the access doors on this one locked tight.

The other big thing of course is Steve Gibson. I am sure he is looking at this thing with a magnifying glass and there is not much that he miss's in the security world either.

I want to get Steve's opinion on this, he would be the one that could tell you what is going on.

Until then, stay away from any "standard protocals" anything that is a "standard" can be cracked pretty easy. It sure did not take long with DES !

{"commentId":1753086,"threadId":"257679","contentId":"1461505","authorDomain":"TeddRi"}
  • 3 votes
#6.3 - Thu May 1, 2008 12:03 AM EDT
Reply
{"canLink":false,"threadId":"257679","isPrivate":false}
Leave a Comment:
You're in Easy Mode. If you prefer, you can use XHTML Mode instead.
As a new user, you may notice a few temporary content restrictions. Click here for more info.
{"threadId":"257679","contentId":"1461505"}
Start TrackingStart Tracking
Stop TrackingStop Tracking