Slashdot Mirror


UK Police Want Plug-In Computer Crime Detectors

An anonymous reader writes "UK police are talking to private companies about using plug-in USB devices that can scour the hard drive of any device they are attached to, searching for evidence of illegal activity. The UK's Association of Chief Police Officers is considering using commercial devices that can perform targeted searches of text, pictures and computer code on hard drives, allowing untrained cops to detect anything from correspondence on stolen goods to child pornography. Police in the UK are desperate for a way of slashing the backlog of machines seized by the police in raids, with many forces having a backlog that will take a year to process." Maybe they shouldn't seize so many computers.

14 of 382 comments (clear)

  1. Just one thing to say: by courteaudotbiz · · Score: 4, Informative
    1. Re:Just one thing to say: by Afforess · · Score: 3, Informative

      Yeah, with truecrypt create a hidden partition, and just have the machine boot into a clean XP install when someone (without the pass key) starts it up.

      --
      If our elected representatives no longer represent us, do we still live in a Democracy?
  2. Microsoft already provides this by Anonymous Coward · · Score: 5, Informative

    It's called COFEE

    Q.What is COFEE?

    A.COFEE (Computer Online Forensic Evidence Extractor) is a tool that helps simplify the very complex problem of gathering "live" computer evidence of cybercrime. It utilizes common forensics tools to aid officers at the scene in gathering important live evidence with a single USB device. It also provides reports in a simple format for later interpretation by computer experts, or as supportive evidence for computer investigations. This means that first-responder officers on the scene of a crime don't have to be computer forensic experts to capture live data for later analysis and that this critical information does not have to be lost once a computer is shut down to be taken for a traditional offline forensic analysis.

    Cops got even got their own web portal courtesy of Microsoft.

  3. Inspired! by shadowknot · · Score: 5, Informative

    Maybe they shouldn't seize so many computers.

    As someone working in Digital Forensics in the UK I can honestly say that this is the most inspired piece of wisdom I have seen in a long time. Our company has literally had computers that haven't been switched on in a decade that have been sitting in a garage or attic until the cops decide to seize them. This is good for business but bad for taxpayer expenditure and the expedient discovery of data of evidential worth. The process for seizure of computer equipment in police investigations is essentially "if it has an on-off switch then seize it". There needs to be some training given to officers seizing although I doubt they will as they are scared of the first case of non-seized items containing illicit material.

  4. Re:Great... by DanTheStone · · Score: 5, Informative
  5. Re:A year? by Sporkinum · · Score: 3, Informative

    Interesting little side story to this.. A co-worker's daughter had her purse stolen at college. The perp used her bank card to buy gasoline and make online purchases. They were traced and the person was caught. The local sheriff seized the perp's computer as evidence.

    Where it gets interesting is that we had a MAJOR flood last year that flooded the sheriff's office. All of the evidence on hand was destroyed in the flood, and the cases the relied on the evidence had to be thrown out. To add insult to injury, they had to replace all the evidence that was destroyed. The perp ended up getting charged with nothing, and got a brand new computer out of the deal.

    Needless to say, my co-worker was not happy!

    --
    "He's lost in a 'floyd hole"
  6. Re:Great... by ve3id · · Score: 5, Informative

    This reminds me of another idiot device they gave to the British bobby: back in the 70's and 80's, there was a glut of illegal CB sets in England. They never legalised the use of 27MHz AM/SSB CBs and all the units sold were marked 'for export only' When they legalised CB, units that were approved could only transmit FM. Instead of overworking the radio inspectors, they gave bobbies on the beat a box that detected if a close transmitter was AM or FM, with two LEDs. The only problem was amateur radio operators can legally use AM and SSB (after all, they invented it!). One beat p.c. stopped a ham and asked him to talk in the mike, and, you guessed it, the illegal CB light lit up! Only when the amateur radio operator started cursing and swearing at the p.c. and getting red in the face did he consult another p.c. over the police radio who was a ham. This being the appropriate behaviour for a ham accused of being a CB'er, he let him go with an apology.

  7. Re:Should be easy in the UK. by wowbagger · · Score: 3, Informative

    "Whatever happened to "You have the right to remain silent . . ." "

    I wasn't aware the Miranda decision and the Bill of Rights applied to the UK.

  8. Re:Should be easy in the UK. by lattyware · · Score: 4, Informative
    --
    -- Lattyware (www.lattyware.co.uk)
  9. Re:Should be easy in the UK. by Allicorn · · Score: 5, Informative

    A little time eh? Failure to surrender your encryption keys to the UK authorities will net you two years.

    http://en.wikipedia.org/wiki/Regulation_of_Investigatory_Powers_Act

    And that's assuming that the act of trying to defend your individual sovreignty doesn't just make them trump up a whole bunch more charges to keep you out of the way for much longer since you're obviously in league with the terrorists/pedos/catholics.

    --
    OMG!!! Ponies!!!
  10. Re:Great... by shadowknot · · Score: 3, Informative

    Officer: I pushed the button, and the computer told me to arrest him.

    So they'll be just like cell phone analysts then, ha! (Sorry, that's a digital forensics joke). But seriously that is an accurate assessment. The handful of times I have been to court to give evidence involving an analysis I have performed they have asked me simple but semi-well researched questions. Most officers I speak to can barely spell let alone describe how a device they have no idea about discovered illegal material on a computer they don't know how to use. I do, however, suspect that this device, if ever rolled-out, would be used to "preview" the devices on-site and if it beeped and flashed a green light at them they'd send it off for full analysis.

  11. Re:Should be easy in the UK. by Ash+Vince · · Score: 5, Informative

    What happened was that out current Labour government jumped on board with the war on terror then got this bill through parliament without any real public debate about the contents under the guise of fighting terror. The vast majority of the British public have no idea this shite is on the books as the press all agreed not to cover the law in any depth before it was passed.

    Maybe the bill was D-noticed but we will never know since the press are not allowed to mention what is D-noticed and what is not.

    http://en.wikipedia.org/wiki/D-Notice

    --
    I dont read /. to RTFA, I read /. to offend people in ignorance.
  12. Re:Encryption=suspicious? by Anonymous+Cowpat · · Score: 3, Informative

    they don't - you have to prove that you've forgotten it O.o.
    Yes, this is a bad law.

    --
    FGD 135
  13. UK cybercops demand magical digital snake-oil by David+Gerard · · Score: 3, Informative

    UK police are asking for a "breathalyser"-style tool for computers that could instantly flag up illegal activity on any PC it is attached to.

    Detective Superintendent Charlie McMurdie, who is what passes for a computer expert in the police force, said such a tool could run on suspects' machines, instantly read and analyse their email, web browsing and chat logs, identify credit card fraud or selling stolen goods online, reliably detect and assess images containing children on the five-level child porn scale and create a handy log of relevant evidence. And a pony.

    "It's surely just a simple matter of programming," said McMurdie. "We're seizing so many computers from people with a copy of Virgin Killer that frontline police need a digital forensic tool as easy to use as the breathalyser, to magically flash up 'HONEST UPSTANDING CITIZEN' or ''E'S A NONCE, GUV'. Do we need to seize five computers, all their mobile phones, their CD and DVD collection and basically everything that runs on electricity, or could we use a magical police gadget with impressive flashy lights and stuff? I thought computers were supposed to make life easier!"

    The eventual development of such a tool could help ease a backlog of digital forensic work that has officers waiting up to a year for evidence to be recovered from seized machines, though threatening to destroy people's livelihoods has proven very efficient in extracting confessions.

    EDS Capita Goatse have promised they can "absolutely, definitely, certainly, probably" produce such a tool with only an ironclad GBP100m five year contract, and also reliably determine whether a computer program halts or not. The Internet Watch Foundation also demanded to be involved, and were told their details would be kept on file.

    "It was so much simpler in the old days," sighed McMurdie. "People asking you what time it was, burglars with domino masks and striped jumpers and bags marked 'SWAG,' chirpy Cockney sparrow second-hand car dealers wiv a heart of gold ... you just can't get the wood, you know."

    --
    http://rocknerd.co.uk