Het laden…
De veiligheids zullen firma's politie spyware ontdekken?
|
|
Door Declan McCullagh en Anne Broache
Een recent federaal hofbesluit stelt de kwestie van of antivirus de bedrijven opzettelijk kunnen overzien spyware dat in het geheim op computers door politie wordt geplaatst.
In geval vroeger beslist deze maand door de 9de V.S. Hof van de kring van Beroep, federale agenten gebruikte spyware met een aanslag registreerapparaat-vraag het fedware-om het typen van een veronderstelde Ecstasy fabrikant te registreren die encryptie gebruikte om de politie tegen te werken.
Een overzicht van CNET News.com van 13 belangrijke antispyware verkopers vond dat niet één bedrijf erkende samenwerkend unofficially met overheidsagentschappen. Some, however, indicated that they would not alert customers to the presence of fedware if they were ordered by a court to remain quiet.
Most of the companies surveyed, which covered the range from tiny firms to Symantec and IBM, said they never had received such a court order. The full list of companies surveyed: AVG/Grisoft, Computer Associates, Check Point, eEye, IBM, Kaspersky Lab, McAfee, Microsoft, Sana Security, Sophos, Symantec, Trend Micro and Websense. Only McAfee and Microsoft flatly declined to answer that question. (Click here for the verbatim responses to the survey.)
Because only two known criminal prosecutions in the United States involve police use of key loggers, important legal rules remain unsettled. But key logger makers say that police and investigative agencies are frequent customers, in part because recording keystrokes can bypass the increasingly common use of encryption to scramble communications and hard drives. Microsoft’s Windows Vista and Apple’s OS X include built-in encryption.
Some companies that responded to the survey were vehemently pro-privacy. “Our customers are paying us for a service, to protect them from all forms of malicious code,” said Marc Maiffret, eEye Digital Security’s co-founder and chief technology officer. “It is not up to us to do law enforcement’s job for them so we do not, and will not, make any exceptions for law enforcement malware or other tools.” eEye sells Blink Personal for $25, which includes antivirus and antispyware features.
Others were more conciliatory. Check Point, which makes the popular ZoneAlarm utility, said it would offer federal police the “same courtesy” that it extends to legitimate third-party vendors that request to be whitelisted. A Check Point representative said, though, that the company had “never been” in that situation.
This isn’t exactly a new question. After the last high-profile case in which federal agents turned to a key logger, some security companies allegedly volunteered to ignore fedware. The Associated Press reported in 2001 that “McAfee Corp. contacted the FBI… to ensure its software wouldn’t inadvertently detect the bureau’s snooping software.” McAfee subsequently said the report was inaccurate.
Later that year, the FBI confirmed that it was creating spy software called “Magic Lantern” that would allow agents to inject keystroke loggers remotely through a virus without having physical access to the computer. (In both the recent Ecstasy case and the earlier key logging case involving an alleged mobster, federal agents obtained court orders authorizing them to break into buildings to install key loggers.)
Government agencies and backdoors in technology products have a long and frequently clandestine relationship. One 1995 expose by the Baltimore Sun described how the National Security Agency persuaded a Swiss firm, Crypto, to build backdoors into its encryption devices. In his 1982 book, The Puzzle Palace, author James Bamford described how the NSA’s predecessor in 1945 coerced Western Union, RCA and ITT Communications to turn over telegraph traffic to the feds.
More recently, after the BBC reported last year on supposed talks between the British government and Microsoft, the software maker pledged not to build backdoors into Windows Vista’s encryption functions.
Comment on 'Will security firms detect police spyware?' :
Related News:
