SecurityCurve Weblog

Coffee. Strong. Hold the liquid

So, I was reading today about the Hong Kong police using the Microsoft Cofee toolkit. Interesting stuff. Of course, there hasn't been much data made available to the general public about Cofee (the "Computer Online Forensic Evidence Extractor" for sticklers) ,so I'm eagerly awaiting to see what it looks like.

What I find particularly interesting is whether Microsoft will specifically introduce new features to aid law enforcement in terms of access enablement. The temptation here would be to give the fuzz some type of "get around your security free" card (like people have been worried about), but I really don't think they're stupid enough to go there. Of course, if they're going to rely on autoplay, then I don't see how the toolkit is more helpful than, say, a bootable CD.

Like I say, there's an interesting balance here, and I'm wondering which side they'll wind up on.