Clan x86

General Forums => General Discussion => Topic started by: Warrior on March 04, 2006, 02:17:00 PM

Title: "Over my dead body" says a Microsoft cryptographer
Post by: Warrior on March 04, 2006, 02:17:00 PM
"Two weeks ago BBC News published an article speculating about a possible "back door" in BitLocker (http://news.bbc.co.uk/1/hi/uk_politics/4713018.stm). The suggestion is that we are working with governments to create a back door so that they can always access BitLocker-encrypted data.



Over my dead body."

http://blogs.msdn.com/si_team/archive/2006/03/02/542590.aspx

Bam.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: Sidoh on March 04, 2006, 02:19:10 PM
It was an obvious outcome.  I don't think anyone expected Microsoft to comply.  It's a pretty ironic thing, though.  Maybe they want Microsoft gone!  Buahaha.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: Warrior on March 04, 2006, 02:22:25 PM
I think they just need to now not comply with the EU wanting backdoors in their FS as well..things like this shouldn't ever be done as they can be abused pretty easily.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: Sidoh on March 04, 2006, 02:34:12 PM
Quote from: Warriorx86] link=topic=5073.msg58390#msg58390 date=1141500145]
I think they just need to now not comply with the EU wanting backdoors in their FS as well..things like this shouldn't ever be done as they can be abused pretty easily.

(http://sidoh.dark-wire.net/upload/viewitem.php?id=58)
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: MyndFyre on March 04, 2006, 03:05:25 PM

...........................................__,,,,,,,---,,,,,,_..................................................................
.............................._,,,--~''¯¯ ; ; ; ; ; ; ; ; ; ; ;¯''-,,_..........................................................
.........................,-~'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯'~,_...................................................
.....................,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''~-,,.............................................
.................,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; _,,_ ; ; ;¯'-,.........................................
..............,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;,-''_ ¯'-,\ ; ; ; ; ',.......................................
............,' ; ; ; ; ; ; ; ; ; ;,,-~'''''~-,, ; ; ; ; ; ; ; ; ; ; ; ; ;'-';;;', : :||; ; ; ; ; ',.....................................
..........,-' ; ; ; ; ; ; ; ; ;,-'/ :,-~''~, : ',, ; ; ; ; ; ; ; ; ; ; ; ; ;'-,-' : // ; ; ; ; ; ;',...................................
........,-' ; ; ; ; ; ; ; ; ; ;',| : '-,;;;;,-' : /' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ¯'''¯ ; ; ; ; ; ; ; '-,.................................
.......,' ; ; ; ; ; ; ; ; ; ; ; ;''-,,___,,-~' ; ; ; ; ; ; ; ; ; ;''~,, ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-,...............................
.......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-,;;', ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-...............................
......,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-;;;;| ; ; ; ; ; ; ; ; ; ; ; ; ; ; |..............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ,,-',;;;;|''-~ ; ; ; ; ; ; ; ; ; ; ; ; ',..............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;---,,,,,,,_,,,,-~'', '-,;;;| ,,-' ; ; ; ; ; ; ; ; ; ; ; ; ;',............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯''~-,,,_ , , , , , , ',;,',' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;\............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''-,~-,, , ,,'',' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',...........................
......', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ''-,,¯'';;;;| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',...........................
.......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''-,_,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ',...........................
.......', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',..........................
........', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; \.........................
.........\ ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ',........................
..........', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;|........................
...........| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-,......................
...........', ; ; ; ; ; ; ; ; ,,--~~--,, ; ; ; ; ;,--------,, ; ,--~, ; ; ,,-~, ; ;,--,,;,,-~~-,, ; ; ; ; ; ;',....................
............| ; ; ; ; ; ; ,-'' . ,,--,, . '-, ; ; ; ;| . ,-,, . ', | . . | ; ;'-, . .\,,/ . ./'-,,--, . ', ; ; ; ; ; ; '-,..................
............| ; ; ; ; ; ; | . .,' ; ; ;', . .| ; ; ; | . .'-' . ,-' | . . | ; ; ; '-, . . .,-' ; ;,-' . ,-' ; ; ; ; ; ; ; '-,................
............', ; ; ; ; ; ;', . '-,__,-' . ,' ; ; ; | . .|\ . .\ . | . . |___ ; ;} . . / ; ; ;'----' ; ; ; ; ; ; ; ; ; ;'-,.............
.............| ; ; ; ; ; ; ;'-,,_ . ._,,-' ; ; ; ; |__| .\__\ ;|_____/ ; ;/__/ ; ; ; ; (¯) ; ; ; ; ; ; ; ; ; ; ; '-,............
.............', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯ ; ; ; ; ; ; ; ; ; ; ; ; ; '-,.........
............,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-,,_......
............| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: Joe on March 04, 2006, 05:25:13 PM
(http://www.cryptoptic.com/junk/ya_rly.jpg)
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: iago on March 05, 2006, 01:03:30 AM
So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: Ergot on March 05, 2006, 01:35:45 AM
Tomorrow Headline: Niels Ferguson Shot 20 Times.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: MyndFyre on March 05, 2006, 03:00:25 PM
Quote from: iago on March 05, 2006, 01:03:30 AM
So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: rabbit on March 05, 2006, 06:24:28 PM
Quote from: MyndFyrex86] link=topic=5073.msg58590#msg58590 date=1141588825]
Quote from: iago on March 05, 2006, 01:03:30 AM
So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.
Not if all of the employees are (which I'm pretty sure they are) required to sign non-disclosure agreements.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: MyndFyre on March 05, 2006, 10:35:18 PM
Quote from: rabbit on March 05, 2006, 06:24:28 PM
Not if all of the employees are (which I'm pretty sure they are) required to sign non-disclosure agreements.

It's against US law to disclose the identity of a CIA operative.  But that wife of whatever ambassor's identity was disclosed as a CIA operative.

Shit happens when you have large organizations.  So what if there's an NDA?  All someone at MS has to do is call a tech writer, be an anonymous MS employee, and tell them that there's a back door.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: iago on March 06, 2006, 12:08:46 AM
Quote from: MyndFyrex86] link=topic=5073.msg58590#msg58590 date=1141588825]
Quote from: iago on March 05, 2006, 01:03:30 AM
So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.
I disagree.  I think that you're reading more into the argument than what I said. 

First of all, I don't think they would try to hide the fact.  That would be worse overall because it would eventually be leaked. 

However, I said that Microsoft will pursue the option that will make them more money in the long run.  I intentionally left out what option that is, though.  But the point is, if backdooring their software will make them more money in the end, then they won't think twice.  I doubt it will, so like I said in my last paragraph before, the logical conclusion is that they should remove it.  It seems that they agree with that. 
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: MyndFyre on March 06, 2006, 03:35:22 AM
Quote from: iago on March 06, 2006, 12:08:46 AM
the logical conclusion is that they should remove it.  It seems that they agree with that. 

Do you know something I don't?  The latest CP has "BitLocker" prominently throughout.
Title: Re: "Over my dead body" says a Microsoft cryptographer
Post by: iago on March 06, 2006, 10:51:16 AM
Quote from: MyndFyrex86] link=topic=5073.msg58636#msg58636 date=1141634122]
Quote from: iago on March 06, 2006, 12:08:46 AM
the logical conclusion is that they should remove it.  It seems that they agree with that. 

Do you know something I don't?  The latest CP has "BitLocker" prominently throughout.

I used the wrong word.  I meant that they "shouldn't add" the backdoor, not remove it.