Security threats Toolkit

Story: Vista backdoor rumours shut down

• 
• 

Why would a backdoor be limited to BitLocker? All we hear from Ferguson is that BitLocker by itself make not have a back door and his team will not put that one in. Why would MS use it's own developers for such a sensitive issue requiring the utmost of confidentiality?

Unless the reassurance comes from the top, these assurances aren't worth much. There are too many qualifiers in Ferguson's statement.

Besides, what about Windows Update? It's effectively a backdoor, the difference being that everyone knows about it and signed off on the EULA covering it. It gives MS or its designated representatives full access to the content of the hard drive, even to the extent of being able to read files and change configurations. That level of access would also be available to unauthorized third parites who are able to hijack the Windows Update or key components. With MS' poor track record on security, that scenario is a probability not just a possibility.

• 
• 

• 
• 
• 

Full Talkback thread