Microsoft's wiretap guide goes online, security site goes offline
Hotmail hacking how-to for spooks and cops
Updated Long-established privacy and cryptology website Cryptome.org was pulled offline on Wednesday after Microsoft launched a legal offensive over its publication of Redmond's guide to internet wiretapping.
Microsoft's Global Criminal Compliance Handbook, a 22 page booklet designed solely for police and intelligence services, provides an overview of Microsoft's online services, what information it collects on users and how long it keeps it. The guide also explains how to serve warrants and how to make sense of the records it stores to understand, for example, when and to who a Hotmail user sent an email.
Redmond's lawyers used the Digital Millennium Copyright Act (DMCA) in an attempt to force Cryptome to pull the guide, a request it refused, before going to hosting provider Network Solutions. The firm not only complied with this order but went one step further by placing a lock on the Cryptome.org domain to keep the site down.
Cryptome.org remain unavailbel but the site, minus the controversial Microsoft documents, can still be found at cryptomeorg.siteprotect.net.
The secret government surveillance document didn't stay offline for long and was soon republished on Wikileaks which, unlike Cryptome, has a distributed system not tied to a US registered domain.
Cryptome, which began way back in 1996 and serves as an outlet for whistleblowers, previously got into hot water for publishing Microsoft's point-and-click "computer forensics for cops" COFFEE tool back in November.
More background on the circumstances of the Cryptome DMCA takedown can be found on the Geekosystems blog here.
The blog reports that last year Cryptome published a surveillance guide from Yahoo, similar to Microsoft's but including a price-list for lawful interception compliance absent from Redmond's run-down. ®
it gets better . . .
you can even find it with bing. Well if I can anyone can.
That's the new site BTW.
Network Solutions are such tossers. I ran screaming from them at the first opportunity, and have been very happy at gandi.net ever since (who were the first registrar I found who's T&Cs stated that the domain belonged to you, and they were simply hosting it for you -- it's run by Debian geeks as well, which I find reassuring)
As for NSI, before I fled I tried submitting one of their web forms to make a change to my domain, not realising that the form would simply send me a mail with my submission in it, which I'd then have to mail in anyway. Four months later, I got the mail. Examining the Received: headers revealed that it had spent 4 months going from _their_ web server to _their_ mail server, and then seven seconds later it was in my inbox -- and these were the people being trusted to keep the internet running at the time -- scary.
u have to ask?
Wellllll..... seeing as the data is likely stored in the U.K. somewhere.....
I would put it as pretty likely that you can be found.
Obfuscate enough and you can buy some time if you are worried.
It was sweet of them to provide an Orwell icon though