"Over my dead body" says a Microsoft cryptographer

[Warrior]

"Two weeks ago BBC News published an article speculating about a possible "back door" in BitLocker (http://news.bbc.co.uk/1/hi/uk_politics/4713018.stm). The suggestion is that we are working with governments to create a back door so that they can always access BitLocker-encrypted data.



Over my dead body."

http://blogs.msdn.com/si_team/archive/2006/03/02/542590.aspx

Bam.

[Sidoh]

It was an obvious outcome.  I don't think anyone expected Microsoft to comply.  It's a pretty ironic thing, though.  Maybe they want Microsoft gone!  Buahaha.

[Warrior]

I think they just need to now not comply with the EU wanting backdoors in their FS as well..things like this shouldn't ever be done as they can be abused pretty easily.

[Sidoh]

x86] link=topic=5073.msg58390#msg58390 date=1141500145]
I think they just need to now not comply with the EU wanting backdoors in their FS as well..things like this shouldn't ever be done as they can be abused pretty easily.

[MyndFyre]

...........................................__,,,,,,,---,,,,,,_..................................................................
.............................._,,,--~''¯¯ ; ; ; ; ; ; ; ; ; ; ;¯''-,,_..........................................................
.........................,-~'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯'~,_...................................................
.....................,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''~-,,.............................................
.................,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; _,,_ ; ; ;¯'-,.........................................
..............,-'' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;,-''_ ¯'-,\ ; ; ; ; ',.......................................
............,' ; ; ; ; ; ; ; ; ; ;,,-~'''''~-,, ; ; ; ; ; ; ; ; ; ; ; ; ;'-';;;', : :||; ; ; ; ; ',.....................................
..........,-' ; ; ; ; ; ; ; ; ;,-'/ :,-~''~, : ',, ; ; ; ; ; ; ; ; ; ; ; ; ;'-,-' : // ; ; ; ; ; ;',...................................
........,-' ; ; ; ; ; ; ; ; ; ;',| : '-,;;;;,-' : /' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ¯'''¯ ; ; ; ; ; ; ; '-,.................................
.......,' ; ; ; ; ; ; ; ; ; ; ; ;''-,,___,,-~' ; ; ; ; ; ; ; ; ; ;''~,, ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-,...............................
.......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-,;;', ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-...............................
......,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-;;;;| ; ; ; ; ; ; ; ; ; ; ; ; ; ; |..............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ,,-',;;;;|''-~ ; ; ; ; ; ; ; ; ; ; ; ; ',..............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;---,,,,,,,_,,,,-~'', '-,;;;| ,,-' ; ; ; ; ; ; ; ; ; ; ; ; ;',............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯''~-,,,_ , , , , , , ',;,',' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;\............................
......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''-,~-,, , ,,'',' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',...........................
......', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ''-,,¯'';;;;| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',...........................
.......| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;''-,_,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ',...........................
.......', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;',..........................
........', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; \.........................
.........\ ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ',........................
..........', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;|........................
...........| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;'-,......................
...........', ; ; ; ; ; ; ; ; ,,--~~--,, ; ; ; ; ;,--------,, ; ,--~, ; ; ,,-~, ; ;,--,,;,,-~~-,, ; ; ; ; ; ;',....................
............| ; ; ; ; ; ; ,-'' . ,,--,, . '-, ; ; ; ;| . ,-,, . ', | . . | ; ;'-, . .\,,/ . ./'-,,--, . ', ; ; ; ; ; ; '-,..................
............| ; ; ; ; ; ; | . .,' ; ; ;', . .| ; ; ; | . .'-' . ,-' | . . | ; ; ; '-, . . .,-' ; ;,-' . ,-' ; ; ; ; ; ; ; '-,................
............', ; ; ; ; ; ;', . '-,__,-' . ,' ; ; ; | . .|\ . .\ . | . . |___ ; ;} . . / ; ; ;'----' ; ; ; ; ; ; ; ; ; ;'-,.............
.............| ; ; ; ; ; ; ;'-,,_ . ._,,-' ; ; ; ; |__| .\__\ ;|_____/ ; ;/__/ ; ; ; ; (¯) ; ; ; ; ; ; ; ; ; ; ; '-,............
.............', ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;¯ ; ; ; ; ; ; ; ; ; ; ; ; ; '-,.........
............,' ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;-,,_......
............| ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;

[Joe]

[iago]

So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

[Ergot]

Tomorrow Headline: Niels Ferguson Shot 20 Times.

[MyndFyre]

So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.

[rabbit]

x86] link=topic=5073.msg58590#msg58590 date=1141588825]

So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.

Not if all of the employees are (which I'm pretty sure they are) required to sign non-disclosure agreements.

[MyndFyre]

Not if all of the employees are (which I'm pretty sure they are) required to sign non-disclosure agreements.

It's against US law to disclose the identity of a CIA operative.  But that wife of whatever ambassor's identity was disclosed as a CIA operative.

Shit happens when you have large organizations.  So what if there's an NDA?  All someone at MS has to do is call a tech writer, be an anonymous MS employee, and tell them that there's a back door.

[iago]

x86] link=topic=5073.msg58590#msg58590 date=1141588825]

So one employee said no.  What about the hundreds of others? :P

I don't think any of us can deny one thing.  If Microsoft thinks it will make them more money in the long run, they will put it in regardless of the principles of the programmers.  That pretty much defines the reason I like opensource/free software: they write software based on principles, not on money.  I hate to break it to you, but all Microsoft cares about it money and you know that.

But yeah, that is a pretty obvious outcome.  Microsoft will still be helping law enforcement understand the encryption and the limitations of it, so we may yet see it broken. 

With as incredibly large as Microsoft is, I think it would be difficult to contain the fact that they backdoored the software, particularly if there are others like this employee.

With the motivator of money, iago, they have to depend on the consumer first.  What business would be satisfied knowing that their encryption can be broken just by a backdoor?

I think you're not carrying your argument out to its logical end.

I disagree.  I think that you're reading more into the argument than what I said. 

First of all, I don't think they would try to hide the fact.  That would be worse overall because it would eventually be leaked. 

However, I said that Microsoft will pursue the option that will make them more money in the long run.  I intentionally left out what option that is, though.  But the point is, if backdooring their software will make them more money in the end, then they won't think twice.  I doubt it will, so like I said in my last paragraph before, the logical conclusion is that they should remove it.  It seems that they agree with that. 

[MyndFyre]

the logical conclusion is that they should remove it.  It seems that they agree with that. 

Do you know something I don't?  The latest CP has "BitLocker" prominently throughout.

[iago]

x86] link=topic=5073.msg58636#msg58636 date=1141634122]

the logical conclusion is that they should remove it.  It seems that they agree with that. 

Do you know something I don't?  The latest CP has "BitLocker" prominently throughout.

I used the wrong word.  I meant that they "shouldn't add" the backdoor, not remove it.