May 19, 2012

ElcomSoft’s Phone Forensics Software Offers Near Real-Time Access to iCloud Backups

Russian forensics firm ElcomSoft earlier this week announced that it has discovered a way to easily access iCloud backups of iOS devices, incorporating the functionality into its Elcomsoft Phone Password Breaker software. While the Apple ID and password must be known in order to access the iCloud data, once that information has been obtained the software makes it easy for investigators to download full iCloud backups and then follow incremental backups in near real-time to track a device’s use without the knowledge of the user.

ElcomSoft researchers analyzed the communication protocol connecting iPhone users with Apple iCloud, and were able to emulate the correct commands in order to retrieve the content of iOS users’ iCloud storage. It’s important to note that, unlike offline backups that may come encrypted and must be broken into (a time-consuming operation), data retrieved from iCloud is received in plain, unencrypted form . The 5GB of storage space can be retrieved in reasonable time, while receiving incremental updates is even faster.

Obtaining a user’s Apple ID password may not always be trivial, but ElcomSoft tools can also be used to capture that information from offline backups stored in iTunes. And of course if the user disables iCloud syncing on its device or changes the Apple ID password, remote access is lost.

ElcomSoft has been at the forefront of development of password-cracking tools, last year incorporating a tool to bypass hardware encryption included in iOS 4. Such tools are increasingly being used by law enforcement to aid their investigations as smartphones become increasingly common and collect a growing amount of information about users and their activity.

ElcomSoft offers several levels of its software, with the most powerful versions restricted to certain governmental agencies, including law enforcement, intelligence services, and other qualified forensic organizations.

macrumors.com

Apr 14, 2012

Microsoft Needs Your Help: Promises Free Software In Return For Windows 8 Feedback

With Windows 8 getting ever closer to its release date, Microsoft today announced that it is looking for volunteers to join its invite-only feedback program for active Windows 7 and Windows 8 Consumer Preview users in the U.S. In return for providing feedback to Microsoft – both by sending the company data or by filling out surveys – participants who stay in the program for more than four months will be eligible for “free software and Xbox games such as Microsoft Office 2012, Kinect Disneyland, and Forza Motorsport 4.”

In the announcement today, Microsoft communications manager Brandon LeBlanc stresses that this is not meant to be a way to submit bug reports. Instead, the idea here is to help Microsoft “build better software by getting a broader understanding of your perceptions and experiences with our products.”

It’s somewhat odd that Microsoft would choose this time to highlight this program. The Windows Feedback Program, after all, has been running for years already. Indeed, the sign-up for the Feedback Program is from 2009. While the sign-up form specifically mentions that volunteers will also be asked to provide feedback about Windows Live, including Hotmail and Messenger, today’s announcement puts the emphasis on Windows 7 and 8.

Chances are that the company is mostly making this appeal today because it is looking for more data about the Windows 8 user experience (a user experience that could definitely still use some work). It feels like it is rather late in the Windows 8 development cycle to ask for this kind of data now, though.

techcrunch.com