Slashdot Mirror

← Back to Stories (view on slashdot.org)

Vista For Forensic Investigators

Posted by kdawson on from the recovering-it dept.

Ant writes "SecurityFocus has a two-part article offering a high-level look at changes in Windows Vista that a computer forensic investigator needs to know about. Part 1 covers the different versions of Vista available and Vista's built-in encryption, backup, and system protection features. Part 2 continues with a look at typical user activities such as Web browser and email usage."

9 of 125 comments (clear)

  1. If they want to bust you, they will by heretic108 · · Score: 3, Insightful

    I see from TFA that they're shitting themselves at the prospect of widespread drive-level encryption. They console themselves with the fact that only the high-end Vista versions support BitLocker.

    But in the end, encryption offers only limited protection. If some well-resourced hostile authority wants to take you down, there's endless options for framing you up. For instance, they could mess with your ISP's logs to fabricate http hits to k1dd13 pr0n sites, or infect your box with a bot that hits such sites on your behalf, which will cause the hits without messing with the ISP's logs...

    --
    -- In the beginning was the WORD, and the WORD was UNSIGNED, and the main(){} was without form and void...
    1. Re:If they want to bust you, they will by nine-times · · Score: 3, Insightful

      I see from TFA that they're shitting themselves at the prospect of widespread drive-level encryption.

      Whenever it comes to these things, I find myself in a bit of a quandary. Of course I want various criminals to get busted, but these investigators are essentially relying on poor security to get their information. I generally want computers to have good security. I don't like the idea of people being able to see my personal info or browsing history, but I'm also not really hiding anything.

      oh well...

    2. Re:If they want to bust you, they will by Qzukk · · Score: 3, Insightful

      *mboverload is sad because he hears these arguments from people but doesn't know how to fight against it. Someone help.*

      "If you have nothing to hide, then you won't mind taking out a newspaper ad with your SSN, your DOB, your credit card numbers, your mother's maiden name, and your driver's license number. Either you have something to hide, or you'll quickly learn that you had something you should have kept hidden."

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    3. Re:If they want to bust you, they will by Oktober+Sunset · · Score: 2, Insightful
      The correct reply to that arguement is: "cool, can I come over to your house and install these Web Cams in your house, specifically, your bedroom and your shower, they are gunna broadcast on the internet 24/7"

      Also, demand all government officials (including senators and the president) must be bugged and have their movements and conversation monitored 24/7, and the full details made public, with archives and live feed to ensure that they aren't corrupt. Remember, they won't object if they have nothing to hide.

      --
      What if Tetris was invented by Nazis?
  2. Re:No encryption by default by RedElf · · Score: 4, Insightful

    With Vista, the OS from MS that phones home more than any previous release, can we really trust it not to "Phone Home" the encryption keys of bitlocker once it's enabled?

    --
    You know, I have one simple request. And that is to have sharks with frickin' laser beams attached to their heads!
  3. Re:Encryption use is low anyway... by Anonymous Coward · · Score: 1, Insightful

    There are also laws being enacted in certain countries to force the bad guy to give up passwords/ keys etc (ie we are going to lock you up until you give it to use so you may as well do it now...).

    That's awesome - as long as you have some way to tell who the "bad guys" are before you get their password. Otherwise what you are talking about is making the use of encryption a jailable offence.

  4. Re:Oh n0es by Detritus · · Score: 4, Insightful
    See the Fifth Amendment.

    The defendant has no obligation to provide the prosecution with incriminating information.

    --
    Mea navis aericumbens anguillis abundat
  5. BDE, a fitting name... by plasmacutter · · Score: 2, Insightful

    if i remember correctly from 4-5 years ago.. BDE also stood for "borland database engine".. or in colloquial english, the spyware that kazza installed.

    now microsoft has made it a feature in their new os, giving us greater spyware value by cutting out the middle man!

    --
    VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
  6. Know what's interesting? by Opportunist · · Score: 2, Insightful

    Reading those comments, more than the article itself.

    Peruse them and you might notice something. Well? Right. A handful deals with the problem of having your notebook stolen, while the majority discusses the effects of it on a search. I.e. more people being concerned of the effects to a search than to having your computer stolen.

    Makes me wonder... does it tell me something 'bout the people here or about the governments we live in?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.