Monday, May 12, 2008
COFEE - "Computer Online Forensic Evidence Extractor"
I think it is a quite significant event... Yes, Microsoft helps Big Brother to sneak into your PC for forensics evidence with a software that is not available to the general public. From one point of view, it's a great help to those folks who are working for FBI. From another point of view, it's a good idea to remember that the Big Brother is watching: don't use your employer's PC for personal (and sensitive!) information as it can be easily extracted any time even if you have emptied your trash can.
Microsoft is now talking about COFEE, a tool they have released to some law enforcement agencies to let them take a look at Windows computer in a faster, less intrusive way that's easy to use. COFEE stands for "Computer Online Forensic Evidence Extractor" and details about what it can do are thin on the ground. That's understandable from a law enforcement perspective but when you combine a lack of hard facts to a distrust of Microsoft and some government agencies you get plenty of rumor, guesswork and outright paranoia all across the Internet. Office Watch has the whole story: