12.16.09

Gemini version available ♊︎

Microsoft Assumes You Too Are a Criminal

Posted in Google, Microsoft, Security, Windows at 12:09 pm by Dr. Roy Schestowitz

“Technological progress is like an axe in the hands of a pathological criminal.”

Albert Einstein

Summary: Microsoft treats everyone like a criminal with its COFEE software; preventive measures are therefore created

BACK in November we wrote about Microsoft’s COFEE [1, 2], which makes use of diagnostic/forensic antifeatures that Microsoft put in Vista and in Vista 7, right under many people’s noses. After Vista in particular, Windows is a really user-hostile piece of software and after a lot of noise (especially against DRM) people seem to have forgotten about it, much to Microsoft’s delight. They even renamed “Vista”.

In essence, Microsoft has Windows spy on any user by logging his/her actions. What is wrong with all this? Well, it is not there for the user really, thus it’s an antifeature; it’s there to be used against the user.

The danger of COFEE was explained by Bruce Schneier last week (incidentally in response to Eric Schmidt).

Schmidt said:

I think judgment matters. If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place. If you really need that kind of privacy, the reality is that search engines — including Google — do retain this information for some time and it’s important, for example, that we are all subject in the United States to the Patriot Act and it is possible that all that information could be made available to the authorities.

This, from 2006, is my response:

Privacy protects us from abuses by those in power, even if we’re doing nothing wrong at the time of surveillance.

We do nothing wrong when we make love or go to the bathroom. We are not deliberately hiding anything when we seek out private places for reflection or conversation. We keep private journals, sing in the privacy of the shower, and write letters to secret lovers and then burn them. Privacy is a basic human need.

[...]

For if we are observed in all matters, we are constantly under threat of correction, judgment, criticism, even plagiarism of our own uniqueness. We become children, fettered under watchful eyes, constantly fearful that — either now or in the uncertain future — patterns we leave behind will be brought back to implicate us, by whatever authority has now become focused upon our once-private and innocent acts. We lose our individuality, because everything we do is observable and recordable.

[...]

This is the loss of freedom we face when our privacy is taken from us. This is life in former East Germany, or life in Saddam Hussein’s Iraq. And it’s our future as we allow an ever-intrusive eye into our personal, private lives.

Too many wrongly characterize the debate as “security versus privacy.” The real choice is liberty versus control. Tyranny, whether it arises under threat of foreign physical attack or under constant domestic authoritative scrutiny, is still tyranny. Liberty requires security without intrusion, security plus privacy. Widespread police surveillance is the very definition of a police state. And that’s why we should champion privacy even when we have nothing to hide.

Abuse of power is a true danger to democracy, which is precisely what laws were establish to prevent (e.g. requirement of a search warrant). But Microsoft is turning in all users to authorities/policemen, who can also abuse their power to weaken democratic dissent (here in the UK even pro-environment activists are abused, harassed and sometimes arrested after eavesdropping, despite doing nothing wrong). Microsoft does not make “COFEE-readiness” selective based on prior activity like a criminal record or inclusion in a suspects list.

Software that’s called DECAF has just made its debut and the Microsoft folks write about it.

Two developers have created “Detect and Eliminate Computer Assisted Forensics” (DECAF). The tool tries to stop Microsoft’s Computer Online Forensic Evidence Extractor (COFEE), which helps law enforcement officials grab data from password protected or encrypted sources.

[...]

More specifically, the program deletes COFEE’s temporary files, kills its processes, erases all COFEE logs, disables USB drives, and even contaminates or spoofs a variety of MAC addresses to muddy forensic tracks. It can be told to disable almost every piece of hardware on a machine and delete pre-defined files in the background. The 181KB DECAF program even has a ‘Spill the cofee’ mode in which it simulates COFEE’s presence to give the user an opportunity to test his or her configuration before actually using it. Source code for DECAF has not been made available, since the authors fear it will be reverse engineered, making it unclear what else the tool might be doing and whether or not it is completely safe to use.

This seems like a tool that any activist who is still not using Free software should make use of.

Is it not hysterical that Microsoft pretends that it cares about privacy? Microsoft remains a great threat to democracy. Unlike Google, Microsoft does not ask if you are willing to be spied on and there is no option to opt out, either. This spyware/malware is already preinstalled on most new computers. It’s ‘baked into’ Windows.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

3 Comments

  1. dyfet said,

    December 16, 2009 at 12:36 pm

    Gravatar

    Privacy is ultimately about liberty and security is always about control. Therefore human freedom and any form of mass surveillance, where you exchange privacy for the illusion of security and the efficiency of the state, can never co-exist. The question of reducing humans to children further brings to mind very basic questions of human dignity.

    The very idea of proprietary software and this false thing so called “IP”, or more properly, Intellectual Restrictions, is that you can somehow give something to someone and yet also control what they do with it or even what they are permitted to think. This mindset makes it very natural I imagine to also to try and track what other people think and do, which converges well with the needs and philosophy of fascist states and societies. It is socially destructive in the most extreme, and one of the reasons I think the mindset of proprietary software is fundamentally an anti-social one.

    Roy Schestowitz Reply:

    Some new campaign ought to raise awareness of Windows’ impact on privacy.

  2. Yuhong Bao said,

    December 16, 2009 at 9:34 pm

    Gravatar

    “They even renamed “Vista”.”
    Not exactly, but I discussed that one before, and it reminds me of Server 2008 R2, which Ars just reviewed positively.
    “which makes use of diagnostic/forensic antifeatures that Microsoft put in Vista and in Vista 7,”
    Really? Did MS really put features in Vista/7 specifically for this?

DecorWhat Else is New


  1. Links 18/05/2022: Qt Company Loses Chief; OpenSUSE Leap Micro 5.2 and RHEL 9 Final

    Links for the day



  2. Jim Zemlin's Wife is Funded by Puppies (Microsoft)

    Jim Zemlin — like his wife — is bagging millions from Microsoft, but that’s clearly a conflict of interest for the Linux Foundation



  3. Links 18/05/2022: More Defections From WordPress to Gemini

    Links for the day



  4. Links 18/05/2022: PikaScript and cURL's Annual User Survey

    Links for the day



  5. IRC Proceedings: Tuesday, May 17, 2022

    IRC logs for Tuesday, May 17, 2022



  6. Phoronix: Microsoft and Phoronix Sponsor (and Close Microsoft Partner) AMD All Over the Place

    When you’re taking massive 'gifts' from AMD (and also some from Microsoft) maybe it’s not surprising that editorial decisions change somewhat…



  7. EPO Has No F-ing Oversight

    Earlier today SUEPO mentioned this new article demonstrating that EPO President António Campinos can very obviously and blatantly violate the Code of Conduct of the Office without facing any consequences; there are translations too, so the report is now available in four languages



  8. [Meme] Linux-Rejecting Foundation

    The Linux Foundation never really leads by example; by default, it uses proprietary software



  9. Linux Foundation Almost Never uses Open Source

    The Linux Foundation uses proprietary software (look where they hire and take money from) and be sure they're probably not even aware of it



  10. Links 17/05/2022: Many More Games on GNU/Linux, YaST Development Report

    Links for the day



  11. Links 17/05/2022: Rocky Linux 8.6 and Budgie Desktop in Fedora

    Links for the day



  12. Patent Examiners Rising Up Against EPO Abuse

    Unhappy with the law-breaking autocracy (the EPO‘s management breaks the law as a matter of routine), fast-deteriorating working conditions and rapidly-decreasing quality of work (or lack of compliance with the law), workers have escalated further, topping off strikes and industrial actions with a large-scale petition



  13. [Meme] What Managers (Really) Mean by Acting Professionally

    The myth of 'professionalism' needs to die along with the façade of conformity as prerequisite for employment (Linus Torvalds can work just fine in a bathrobe in his own home)



  14. Internal Poll: 93% of European Patent Office (EPO) Workers Are Unhappy With the EPO

    On top of strike/s and industrial action/s there are now also petitions; at the EPO, almost all staff is "disgruntled" because of utterly corrupt and defunct leadership



  15. Links 17/05/2022: OpenSUSE Leap 15.4 Release Candidate

    Links for the day



  16. IRC Proceedings: Monday, May 16, 2022

    IRC logs for Monday, May 16, 2022



  17. Links 16/05/2022: FreeBSD 13.1 and Inkscape 1.2 Released

    Links for the day



  18. Archiving Latest Posts in Geminispace (Like a Dated Web Directory But for Gemini)

    Earlier today we saw several more people crossing over from the World Wide Web to Gemini; we're trying to make a decent aggregator and archive for the rapidly-expanding Geminispace, which will soon have 2,500 capsules that are known to Lupa alone



  19. Microsoft Vidal Does Not Want to Listen (USPTO is Just for Megacorporations)

    Microsoft Vidal knows her real bosses. They’re international corporations (multinationals like Microsoft), not American people.



  20. Links 16/05/2022: China Advances on GNU/Linux and Maui 2.1.2 is Out

    Links for the day



  21. Jim Zemlin: Chief Revenue Officer in 'Linux' Seat-Selling Foundation

    Board seats in the Linux Foundation are basically a product on sale, based internal documents



  22. Reminder: Linux Foundation's Last IRS Filing is Very Old (Same Year the CFO Left)

    People really need to ask the Linux Foundation, directly, why its filings are years behind; this seems like a sensitive subject



  23. Linux Foundation Does Not Speak for GNU/Linux Users

    There's a serious problem in the "Linux" world as the so-called 'Linux' Foundation claims to speak for us (the GNU/Linux community) while in fact speaking against us (on the payroll of those looking to extinguish us)



  24. IBM's Lennart Poettering on Breaking Software for Pseudo Novelty

    Recently-uploaded ELCE 2011 clip shows a panel with Linus Torvalds, Alan Cox, Thomas Gleixner, Paul McKenney, and Lennart Poettering (relevant to novelty or perceived novelty that mostly degrades the experience of longtime users, e.g. Wayland and systemd)



  25. IRC Proceedings: Sunday, May 15, 2022

    IRC logs for Sunday, May 15, 2022



  26. Links 15/05/2022: Linux 5.18 RC7 and Calls for More Mass Surveillance

    Links for the day



  27. Audio: Mark Shuttleworth Marketed to Young Males, With Sexy Pictures

    The Web is rotting away, old links become broken links within months or years, so I’ve decided to encode a 3-minute segment of the whole as Ogg



  28. What a Difference Half a Decade Makes (When Linux Foundation is 'Having Fun')

    Media shaming campaigns may have taken their toll on the founder of Linux, who is now bossed by someone who rejects Linux and is married to a Microsoft booster. Like Richard Stallman under FSF guidance (and conditions for return, mostly for fear of further media assaults and attack dogs), he has become a more publicity-shy and private person. The Linux Foundation has in effect reduced the founder of what it’s called after (Linux) into a weekly release manager and mascot, whose brand it is gradually diluting/cheapening.



  29. Links 15/05/2022: GNU libiconv 1.17

    Links for the day



  30. [Meme] Unitary Patent and Unified Patent Court (UPC) Cannot Be Reconciled With the Law

    Unitary Patent and Unified Patent Court (UPC)? Impossible. But Team UPC counts on an endless torrent of fake news managing to convince you (and more importantly politicians) otherwise.


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts