<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Hacker&#8217;s Holy Grail - Redefined by Microsoft&#8230;</title>
	<atom:link href="http://artofinfosec.com/56/hackers-holy-grail-redefined-by-microsoft/feed/" rel="self" type="application/rss+xml" />
	<link>http://artofinfosec.com/56/hackers-holy-grail-redefined-by-microsoft/</link>
	<description>Random Insights on Protecting Data, Privacy, and Digital Infrastructure</description>
	<pubDate>Thu, 28 Aug 2008 13:30:01 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>By: Bozidar Spirovski</title>
		<link>http://artofinfosec.com/56/hackers-holy-grail-redefined-by-microsoft/#comment-189</link>
		<dc:creator>Bozidar Spirovski</dc:creator>
		<pubDate>Tue, 29 Jul 2008 12:15:48 +0000</pubDate>
		<guid isPermaLink="false">http://artofinfosec.com/?p=56#comment-189</guid>
		<description>In a process of computer forsensics it is quite frequent that the forensic team employs tools which will analyze browser cookies, decrypt passwords, search for hidden text etc, much like a hacker. To be very frank, both forensic experts and hackers might find themselves using the same tools.

But that doesn't mean that Microsoft produced anything new or spectatular. The same set of tools can be found in Helix forensic CD or several oter toolkits - when looking at open platforms and known standards, the tools are already outhere - and they are mostly free. 

What Microsoft could have done to empower government officials (FBI, DEA etc) is to produce tools that employ backdoors into their systems to achieve certain forensic actions at a faster rate. But this would be a very dangerous road to tread on - since any such back door will become public domain knowledge before long, and then MS will be deemed extremely insecure - once again

Bozidar Spirovski
http://www.shortinfosec.net</description>
		<content:encoded><![CDATA[<p>In a process of computer forsensics it is quite frequent that the forensic team employs tools which will analyze browser cookies, decrypt passwords, search for hidden text etc, much like a hacker. To be very frank, both forensic experts and hackers might find themselves using the same tools.</p>
<p>But that doesn&#8217;t mean that Microsoft produced anything new or spectatular. The same set of tools can be found in Helix forensic CD or several oter toolkits - when looking at open platforms and known standards, the tools are already outhere - and they are mostly free. </p>
<p>What Microsoft could have done to empower government officials (FBI, DEA etc) is to produce tools that employ backdoors into their systems to achieve certain forensic actions at a faster rate. But this would be a very dangerous road to tread on - since any such back door will become public domain knowledge before long, and then MS will be deemed extremely insecure - once again</p>
<p>Bozidar Spirovski<br />
<a href="http://www.shortinfosec.net" onclick="javascript:pageTracker._trackPageview('/outbound/comment/http://www.shortinfosec.net');" rel="nofollow">http://www.shortinfosec.net</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Erik</title>
		<link>http://artofinfosec.com/56/hackers-holy-grail-redefined-by-microsoft/#comment-66</link>
		<dc:creator>Erik</dc:creator>
		<pubDate>Wed, 30 Apr 2008 11:21:01 +0000</pubDate>
		<guid isPermaLink="false">http://artofinfosec.com/?p=56#comment-66</guid>
		<description>Rory -

I concede that your are probably right. The exploit functions are the functions that permit for cracking passwords, reading memory contents, etc. via the USB port on a running machine, and I don't know how much of that functionality is on the device.

I am trying to get more detailed information and I will pass that on (with corrections to my post of course ;-) ) as I am able to get it.

Thanks for your comment. 
Erik</description>
		<content:encoded><![CDATA[<p>Rory -</p>
<p>I concede that your are probably right. The exploit functions are the functions that permit for cracking passwords, reading memory contents, etc. via the USB port on a running machine, and I don&#8217;t know how much of that functionality is on the device.</p>
<p>I am trying to get more detailed information and I will pass that on (with corrections to my post of course <img src='http://artofinfosec.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> ) as I am able to get it.</p>
<p>Thanks for your comment.<br />
Erik</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rory McCune</title>
		<link>http://artofinfosec.com/56/hackers-holy-grail-redefined-by-microsoft/#comment-65</link>
		<dc:creator>Rory McCune</dc:creator>
		<pubDate>Wed, 30 Apr 2008 05:25:39 +0000</pubDate>
		<guid isPermaLink="false">http://artofinfosec.com/?p=56#comment-65</guid>
		<description>I'm not quite sure how you're making the jump from the quote saying 150 commands to the idea that those commands will be exploits.

I'd expect the commands on the key to be forensics tools like you see on some of the bootable Linux forensics distributions which help an investigator gather information from a potential target machine.</description>
		<content:encoded><![CDATA[<p>I&#8217;m not quite sure how you&#8217;re making the jump from the quote saying 150 commands to the idea that those commands will be exploits.</p>
<p>I&#8217;d expect the commands on the key to be forensics tools like you see on some of the bootable Linux forensics distributions which help an investigator gather information from a potential target machine.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
