some excerpts from the Global Criminal Compliance Handbook, March 2008of Microsoft

These are the some excerpts from the Global Criminal Compliance Handbook, March 2008.

Targeting specific people or group of people or a country is very easy for US.

NON-US LAW ENFORCEMENT
"as all Microsoft Online Services customer data is stored in the US"

These are the online servies provided by the Microsoft according to the document :

Microsoft Online Services :
e-mail services.
authentication service : windows live id.
instant messanging services : windows live spaces & msn groups.
custom domains : windows live admin center & office live small business.
online file storage : office live workspace & windows live skydrive.
gaming : xbox live.

This is the most information because it effects our daily life in one or another way. If possible make a note or save this information. It is very useful.

Microsoft retains e-mail accounts registration records for the life of the account.

For free msn hotmail and free windows live hotmail accounts, the e-mail content is typically deleted after 60 days of inactivity.

This has really surprised me. Paying for the e-mail seems to be the best option.

Stored e-mail records for msn premium customers :

Be aware that users may also store e-mail content on their computer's hard drive. Microsoft will not be able to disclose e-mail content stored on a user's computer - only e-mail content stored on Microsoft's e-mail servers.

I have always thought that all my chat history is recorded by the Microsoft. The law enforcement authoritites should work overtime if they are going to rely on instant messanging :

Windows Live Messenger program is downloaded onto client :

Microsoft servers authenticates users, but Microsoft does not log the content of communications between users.

Persons who comment unnecessarily and post hate messgaes should think twice before doing so. It is somewhat creepy that they maintain record of all things. I was under impression that they retain only text.

Windows Live Spaces :
Only the owner of a Windows Live Space can upload content, and when they do so, the IP address and date and time is also captured. In addition, if someone posts a comment on the blog, Microsoft captures the text of the comments as well as the IP address, date adn time of upload and nickname. These transactional records are retained for 90 days.

This is about the expiration of transaction records of MSN groups :

MSN groups : When a manager or member of an MSN Group uploads content, Microsoft captures the IP address and date and time of content upload. These transactions records are retained for 60 days.

The onus is clearly on the law enforcement authorities and if any country follows all the guidelines given by the Microsoft, the law breaker has no opportunity to escape :

Law enforcement should know to send their criminal legal process to Microsoft if a domain name lookup indicates association with Microsoft.

This will provide some respite to the Xbox owners :

XBOX LIVE :

General subscriber information is unverified. Detailed credit card verification has been implemented.

If your investigation involves a stolen Xbox console, if the console serial number or Xbox LIVE user gamertag is provided and the console has been connected to the Internet, IP connection records may be available.

If you want to know how microsoft e-mail age out timeline, click HERE.

The End.
 
 

This work by maniac.vardhan is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.