Microsoft handed the government encryption keys for customer data

The FBI went to Microsoft past twelvemonth pinch a warrant, asking them to manus complete keys to unlock encrypted information stored connected 3 laptops arsenic portion of an investigation into imaginable fraud involving the COVID unemployment assistance programme successful Guam — and Microsoft complied.

Typically, companies defy handing complete encryption keys to authorities. Most famously, Apple refused to assistance the FBI entree to a telephone utilized by the San Bernardino shooters successful 2016. The FBI yet recovered a third-party to hack their measurement into the phone, but yet withdrew its case. Most of the awesome tech companies, including Google and Facebook backed Apple successful its conflict pinch the FBI. Even Microsoft supported Tim Cook’s position, if a spot less forcefully than immoderate others.

In this instance, however, it seems that Microsoft has decided to front to authorities demands and confirmed to Forbes that it “does supply BitLocker betterment keys if it receives a valid ineligible order.” Microsoft spokesperson Charles Chamberlayne told The Verge that Microsoft is legally required to nutrient the keys stored connected its servers.

Chamberlayne ellaborated saying, “customers tin take to shop their encryption keys locally, successful a location inaccessible to Microsoft, aliases successful Microsoft’s cloud. We admit that immoderate customers for illustration Microsoft’s unreality retention truthful we tin thief retrieve their encryption cardinal if needed. While cardinal betterment offers convenience, it besides carries a consequence of unwanted access.”

Senator Ron Wyden of Oregon countered, telling Forbes that it was “irresponsible” for companies to “secretly move complete users’ encryption keys.”

What alarms privateness advocates for illustration the ACLU is the precedent this sets and the imaginable for abuse. The existent management and ICE person shown small respect for data security aliases the rule of law. And beyond American borders, Jennifer Granick, surveillance and cybersecurity counsel astatine the ACLU, told Forbes that “foreign governments pinch questionable quality authorities records” whitethorn besides expect Microsoft to manus complete keys to customer data.