No. 1 Story

ACCC clears Optus to scrap HFC network and use NBN instead

The ACCC has cleared, provisionally, the proposed deal between Optus and NBN Co under which Optus is to be paid around $800m to shut down its HFC network and transfer customers onto the NBN. read more

Related Articles

, there, NSA, backdoor, Windows,
Security vendor Sophos claims that presently Apple is not displaying the correct name for...
A majority of a Windows users sample have indicated that the latest critical vulnerability in...
Three years from now, most home computers may be Apple Mac OSX boxes rather...
Microsoft has identified no less than eight critical flaws in its Windows and Office...
New data from Microsoft reveals that about 1 in every 300 times its scans...

Is there an NSA backdoor in Windows 7?

Business IT - Security

There have been rumours all week that NSA's involvement in Windows 7 was less than altruistic.

In stark contrast to the previous administration, President Obama has embraced cyber security and elevated it to a major position in the President's policy agenda.  Cyber security however, comes with many swords, each with at least one edge.

The US National Security Agency (NSA) has been mired in controversy pretty-much whenever they have chosen to enter the 'public security' space.  Just think back to the Clipper encryption chip 'incident' from 1993.  Later there was the supposed back-door in Windows XP which simply turned out to be a non-event.

This time, it started all over again when the NSA's information assurance director Richard Schaeffer, told the Senate's Subcommittee on Terrorism and Homeland Security early last week that the agency had partnered with the developer during the creation of Windows 7 "to enhance Microsoft's operating system security guide."  Well, of course everyone with an opinion to share decided that Schaeffer MUST be talking code for 'backdoor.'

In reaction, a Microsoft spokesperson said "Microsoft has not and will not put backdoors into Windows.  The work being discussed here is purely in conjunction with our Security Compliance Management Toolkit."

Of course Microsoft would deny this; true or not!  What else would they say?

However, security researchers were generally in agreement with Microsoft on this one.  For instance, AVG Technologies' Roger Thompson (the chief research officer), noted earlier "I can't imagine NSA and Microsoft would do anything deliberate, because the repercussions would be enormous if they got caught."

Other commentators have taken similar views. 

The problem here is that The NSA has two very different roles and the exercising of one of them seems to trigger visions of the other.  Firstly, they are active (nay, VERY active) in SIGINT (Signals Intelligence), which in plain English means they spy on anyone they think needs spying on.  This role involves tapping pretty-well every communications system within reach and searching for items of interest.  Such searching obviously involves massive computer decryption hardware; hence everyone's concern.

The other role is COMPUSEC (Computer Security, sometimes now referred to as Cyber Security).  In this role, The NSA attempts to assist computer system developers to harden their systems against attack.  This is the role that triggered the 'backdoor' slanging match.

Overall, it would seem incredibly unlikely that such a backdoor exists.  Modern analysis techniques would expose it relatively quickly, especially now that so many people are actively looking for it!  The price that Microsoft would pay for such a discovery would be far too horrible for the company to even contemplate.