12.16.09

Gemini version available ♊︎

Microsoft Assumes You Too Are a Criminal

Posted in Google, Microsoft, Security, Windows at 12:09 pm by Dr. Roy Schestowitz

“Technological progress is like an axe in the hands of a pathological criminal.”

Albert Einstein

Summary: Microsoft treats everyone like a criminal with its COFEE software; preventive measures are therefore created

BACK in November we wrote about Microsoft’s COFEE [1, 2], which makes use of diagnostic/forensic antifeatures that Microsoft put in Vista and in Vista 7, right under many people’s noses. After Vista in particular, Windows is a really user-hostile piece of software and after a lot of noise (especially against DRM) people seem to have forgotten about it, much to Microsoft’s delight. They even renamed “Vista”.

In essence, Microsoft has Windows spy on any user by logging his/her actions. What is wrong with all this? Well, it is not there for the user really, thus it’s an antifeature; it’s there to be used against the user.

The danger of COFEE was explained by Bruce Schneier last week (incidentally in response to Eric Schmidt).

Schmidt said:

I think judgment matters. If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place. If you really need that kind of privacy, the reality is that search engines — including Google — do retain this information for some time and it’s important, for example, that we are all subject in the United States to the Patriot Act and it is possible that all that information could be made available to the authorities.

This, from 2006, is my response:

Privacy protects us from abuses by those in power, even if we’re doing nothing wrong at the time of surveillance.

We do nothing wrong when we make love or go to the bathroom. We are not deliberately hiding anything when we seek out private places for reflection or conversation. We keep private journals, sing in the privacy of the shower, and write letters to secret lovers and then burn them. Privacy is a basic human need.

[...]

For if we are observed in all matters, we are constantly under threat of correction, judgment, criticism, even plagiarism of our own uniqueness. We become children, fettered under watchful eyes, constantly fearful that — either now or in the uncertain future — patterns we leave behind will be brought back to implicate us, by whatever authority has now become focused upon our once-private and innocent acts. We lose our individuality, because everything we do is observable and recordable.

[...]

This is the loss of freedom we face when our privacy is taken from us. This is life in former East Germany, or life in Saddam Hussein’s Iraq. And it’s our future as we allow an ever-intrusive eye into our personal, private lives.

Too many wrongly characterize the debate as “security versus privacy.” The real choice is liberty versus control. Tyranny, whether it arises under threat of foreign physical attack or under constant domestic authoritative scrutiny, is still tyranny. Liberty requires security without intrusion, security plus privacy. Widespread police surveillance is the very definition of a police state. And that’s why we should champion privacy even when we have nothing to hide.

Abuse of power is a true danger to democracy, which is precisely what laws were establish to prevent (e.g. requirement of a search warrant). But Microsoft is turning in all users to authorities/policemen, who can also abuse their power to weaken democratic dissent (here in the UK even pro-environment activists are abused, harassed and sometimes arrested after eavesdropping, despite doing nothing wrong). Microsoft does not make “COFEE-readiness” selective based on prior activity like a criminal record or inclusion in a suspects list.

Software that’s called DECAF has just made its debut and the Microsoft folks write about it.

Two developers have created “Detect and Eliminate Computer Assisted Forensics” (DECAF). The tool tries to stop Microsoft’s Computer Online Forensic Evidence Extractor (COFEE), which helps law enforcement officials grab data from password protected or encrypted sources.

[...]

More specifically, the program deletes COFEE’s temporary files, kills its processes, erases all COFEE logs, disables USB drives, and even contaminates or spoofs a variety of MAC addresses to muddy forensic tracks. It can be told to disable almost every piece of hardware on a machine and delete pre-defined files in the background. The 181KB DECAF program even has a ‘Spill the cofee’ mode in which it simulates COFEE’s presence to give the user an opportunity to test his or her configuration before actually using it. Source code for DECAF has not been made available, since the authors fear it will be reverse engineered, making it unclear what else the tool might be doing and whether or not it is completely safe to use.

This seems like a tool that any activist who is still not using Free software should make use of.

Is it not hysterical that Microsoft pretends that it cares about privacy? Microsoft remains a great threat to democracy. Unlike Google, Microsoft does not ask if you are willing to be spied on and there is no option to opt out, either. This spyware/malware is already preinstalled on most new computers. It’s ‘baked into’ Windows.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

3 Comments

  1. dyfet said,

    December 16, 2009 at 12:36 pm

    Gravatar

    Privacy is ultimately about liberty and security is always about control. Therefore human freedom and any form of mass surveillance, where you exchange privacy for the illusion of security and the efficiency of the state, can never co-exist. The question of reducing humans to children further brings to mind very basic questions of human dignity.

    The very idea of proprietary software and this false thing so called “IP”, or more properly, Intellectual Restrictions, is that you can somehow give something to someone and yet also control what they do with it or even what they are permitted to think. This mindset makes it very natural I imagine to also to try and track what other people think and do, which converges well with the needs and philosophy of fascist states and societies. It is socially destructive in the most extreme, and one of the reasons I think the mindset of proprietary software is fundamentally an anti-social one.

    Roy Schestowitz Reply:

    Some new campaign ought to raise awareness of Windows’ impact on privacy.

  2. Yuhong Bao said,

    December 16, 2009 at 9:34 pm

    Gravatar

    “They even renamed “Vista”.”
    Not exactly, but I discussed that one before, and it reminds me of Server 2008 R2, which Ars just reviewed positively.
    “which makes use of diagnostic/forensic antifeatures that Microsoft put in Vista and in Vista 7,”
    Really? Did MS really put features in Vista/7 specifically for this?

DecorWhat Else is New


  1. Links 08/02/2023: Transmission 4.0.0 Released and Mass Layoffs at Zoom

    Links for the day



  2. IRC Proceedings: Tuesday, February 07, 2023

    IRC logs for Tuesday, February 07, 2023



  3. When the Pension Vanishes

    Today we commenced a multi-part mini-series about pensions and what happens when they suddenly vanish and nobody is willing to explain where all the money went



  4. Sirius 'Open Source' Pensiongate: An Introduction

    The Sirius ‘Open Source’ series continues in the form of a mini-series about pensions; it’s part of an ongoing investigation of a deep mystery that impacts people who left the company quite a long time ago and some of the lessons herein are applicable to any worker with a pension (at times of financial uncertainties)



  5. Links 07/02/2023: Endless OS 5.0 and Voice.AI GPL Violations

    Links for the day



  6. No Doubt Microsoft Unleashed Another 'Tay', Spreading Bigotry Under the Guise of Hey Hi (AI)

    Reprinted with permission from Ryan



  7. Links 07/02/2023: Fedora 39 Development Plans Outlines

    Links for the day



  8. IRC Proceedings: Monday, February 06, 2023

    IRC logs for Monday, February 06, 2023



  9. Links 06/02/2023: Escuelas Linux 8.0 and Many Political Issues

    Links for the day



  10. Links 06/02/2023: Sparky 6.6 and IPFire 2.27 – Core Update 173

    Links for the day



  11. Taking Back Control or Seizing Autonomy Over the News Cycle (Informing People, Culling the Marketing)





  12. Reality Versus Fiction: EPO Insiders Versus EPO Web Site and UPC 'Churnalists'

    The "official" sources of the European Patent Office (EPO), as well as the sedated "media" that the EPO is bribing for further bias, cannot tell the truth about this very large institution; for proper examination of Europe's largest patent office one must pursue the interpretation by longtime veterans and insiders, who are increasingly upset and abused (they're being pressured to grant patents in violation of the charter of the EPO)



  13. Links 06/02/2023: Linux 6.2 RC7 and Fatal Earthquake

    Links for the day



  14. IRC Proceedings: Sunday, February 05, 2023

    IRC logs for Sunday, February 05, 2023



  15. Links 05/02/2023: Wayland in Bookworm and xvidtune 1.0.4

    Links for the day



  16. Links 05/02/2023: Pakistan Blocks Wikipedia, Musharraf Dies

    Links for the day



  17. IRC Proceedings: Saturday, February 04, 2023

    IRC logs for Saturday, February 04, 2023



  18. Links 04/02/2023: FOSDEM Happening and Ken Thompson in SoCal Linux Expo

    Links for the day



  19. 2023 is the Year Taxpayers' Money Goes to War and Energy Subsidies, Not Tech

    Now that a lot of powerful and omnipresent ‘tech’ (spying and policing) companies are rotting away we have golden opportunities to bring about positive change and maybe even recruit technical people for good causes



  20. Getting Back to Productive Computer Systems Would Benefit Public Health and Not Just Boost Productivity

    “Smartphoneshame” (shaming an unhealthy culture of obsession with “apps”) would potentially bring about a better, more sociable society with fewer mental health crises and higher productivity levels



  21. Links 04/02/2023: This Week in KDE and Many More Tech Layoffs

    Links for the day



  22. Dotcom Boom and Bust, Round 2

    The age of technology giants/monopolies devouring everything or military-funded (i.e. taxpayers-subsidised) surveillance/censorship tentacles, in effect privatised eyes of the state, may be ending; the United States can barely sustain that anymore and raising the debt ceiling won't solve that (buying time isn't the solution)



  23. Society Would Benefit From a Smartphoneshame Movement

    In a society plagued by blackmail, surveillance and frivolous lawsuits it is important to reconsider the notion of “smart” phone ownership; these devices give potentially authoritarian companies and governments far too much power over people (in the EU they want to introduce new legislation that would, in effect, ban Free software if it enables true privacy)



  24. IRC Proceedings: Friday, February 03, 2023

    IRC logs for Friday, February 03, 2023



  25. IRC Proceedings: Thursday, February 02, 2023

    IRC logs for Thursday, February 02, 2023



  26. Links 03/02/2023: Proton 7.0-6 Released, ScummVM 2.7 Testing

    Links for the day



  27. Links 03/02/2023: OpenSSH 9.2 and OBS Studio 29.0.1

    Links for the day



  28. Links 03/02/2023: GNU C Library 2.37

    Links for the day



  29. Sirius Finished

    Yesterday I was sent a letter approving my resignation from Sirius ‘Open Source’, two months after I had already announced that I was resigning with immediate effect; they sent an identical letter to my wife (this time, unlike before, they remembered to also change the names!!)



  30. The Collapse of Sirius in a Nutshell: How to Identify the Symptoms and Decide When to Leave

    Sirius is finished, but it's important to share the lessons learned with other people; there might be other "pretenders" out there and they need to be abandoned


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts