BugWatch: Magic Lantern - not magic and not very bright

FBI Trojan horse lacks the Hogwart touch

Written by Natasha Staley, vnunet.com

This week, Natasha Staley, of Sophos AntiVirus, discusses the implications of the FBI's Magic Lantern Trojan horse.

The FBI's recent confirmation that it is developing a Trojan Horse - codenamed Magic Lantern - has rekindled the debate over whether it is acceptable to use computer viruses for so-called good causes.

The 'e-bug' is reported to plant a keystroke logger on the target's PC and will allow the FBI to gather valuable intelligence in its continued fight against crime and terrorism.

Advertisement

However honourable the intention, the development of this Trojan represents a huge dilemma for the antivirus industry. Should it comply with the FBI by turning a blind eye to malicious code, or should it continue to protect its customers from all known malware?

For both ethical and practical reasons, it's doubtful that Magic Lantern will ever get off the ground and, even if it does, it is unlikely to achieve the desired effect.

Aside from the moral and legal problems associated with snooping, there are a number of practical reasons why Magic Lantern simply won't work.

Firstly, for antivirus vendors to know which Trojan horse to 'overlook', the FBI would need to provide a sample of the code. For security reasons, it is unlikely that this would happen.

So, how will vendors know which code is written by the FBI and which originates from virus authors with a chip on their shoulder?

In order to properly protect their customers, vendors are going to issue protection against any detected malicious code.

Even if vendors are made aware of the code, how will they know that their customer was the intended target of the FBI?

By planting a Trojan on the machines of those under suspicion, the FBI would essentially be placing a weapon directly into the hands of their enemies.

The code could easily be adapted and new variants created with far more sinister intentions in mind. Once the Trojan was released, there would be no way of knowing who would use it to spy on whom, and with what consequences. In an ironic twist of fate, the FBI could even find itself to be the victim of its own code.

It is also necessary to consider the diplomatic connotations of using viruses to glean intelligence. It is likely that the governments of other nations would want protection against anything like Magic Lantern. Understandably, these institutions would argue that the FBI has absolutely no right to spy on them.

Would antivirus vendors issue them with protection as well? And what if British, French or Italian law enforcement agencies decided that they too would develop something similar to Magic Lantern?

If we turn a blind eye to the FBI, surely we would have no choice but to do the same for other agencies?

Of course, the FBI could make a success of Magic Lantern by basing it on undetectable code. However, the bad news for the Feds is that it has been mathematically proven that writing such code is impossible; everything leaves a trace.

Ultimately, if this Trojan is going to work, it really will have to be magic.

Tags:

Reader comments

More from Computeractive

News

The latest home computing news

Downloads

The best PC tools, applications and more

Reviews

Independent opinions on new hardware and software

Step-by-step guides

Easy-to-follow projects with pictures

PC Help

Solve PC problems with our Q&A

Videos

PC projects demonstrated and product reviews

Articles

An in-depth look at how to get the best from your PC

Magazine

What's coming up in Computeractive

Forums

Get help with your PC problems from our readers

Competitions

Your chance to win computing prizes

Shopping

Great deals on products, services and more

Computeractive CD Rom 10
All 26 issues of Computeractive from 2007 on one CD-Rom.

Ultimate Guide to PC Troubleshooting
Everything you need to know to solve your PC problems.

Create your own calendars softwareCreate your own Calendars
The fun and easy way to create your own calendars!

Computeractive - Issue 280Computeractive Back Issues
Missed an issue? Click here to find a back issue

Blogs

Windows Watch

Windows Watch

Keeping an eye on the latest XP and Vista news

Standards for standards

08 Jan 2009Maybe the recession has forced vendors to appreciate the value of a grown up attitude to standards. Panasonic's approach to an industry-wide...

Download Junkie

Download Junkie

Your daily dose of download discussion

Transfer files across the Internet with FileZilla

09 Jan 2009It wasn't so long ago that a good FTP client would have been a useful tool for most Internet users....

Advertisement

Free email newsletters

Techno babble demystified...

[Display all definitions]

Or type in any computer-related word and click "Go"

Advertisement

Computeractive is not reponsible for content of Google adverts

Primary Navigation

© Incisive Media Ltd. 2009. Incisive Media Limited, Haymarket House,
28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503

Search computeractive.co.uk