Skip to main content
Advertising

Originally published Friday, March 28, 2014 at 6:25 PM

  • Share:
             
  • Comments (19)
  • Print

Microsoft overhauls policy after it read blogger’s email

In investigations of stolen property, Microsoft will contact law enforcement rather than search a customer’s email account itself, the company said.


Seattle Times technology reporter

Most Popular Comments
Hide / Show comments
This seems like one of those intentional "goofs" that precede a "correct... MORE
Let me get this straight. Microsoft was reading email of one of thier email customers... MORE
This is a bigger blunder than the Google Buzz issue, and that was a big one. This will... MORE

advertising

Microsoft took a lot of criticism last week after it was revealed that the company looked at the email content of a customer in the course of tracking down someone suspected of stealing trade secrets from the company.

The company said then that its own terms of service allow it to carry out such an examination under “exceptional circumstances.”

Now Microsoft is changing its policy, saying that, in such circumstances, it will call in law enforcement to inspect a customer’s content, rather than doing so itself.

Brad Smith, Microsoft’s general counsel, wrote in a blog post Friday: “Effective immediately, if we receive information indicating that someone is using our services to traffic in stolen intellectual or physical property from Microsoft, we will not inspect a customer’s private content ourselves. Instead, we will refer the matter to law enforcement if further action is required.”

The change will also be incorporated into Microsoft’s terms of service in the coming months, Smith wrote.

The policy change stems from a case in which former Microsoft employee Alex Kibkalo was accused of stealing trade secrets.

Kibkalo, a former Microsoft software architect who worked for the company in Lebanon, was arrested March 19 in Bellevue. He is charged with stealing trade secrets related to pre-release software updates for Windows 8 and Microsoft’s “Activation Server Software Development Kit,” and giving that information to an unidentified tech blogger in France.

Microsoft found out about Kibkalo after searching the blogger’s Hotmail account.

The blogger, who had previously posted comments about “internal Microsoft build specifications for unreleased software,” was someone Microsoft had been tracking even before the Kibkalo leak, according to the complaint filed by federal prosecutors.

That blogger had apparently contacted an outside source using Hotmail and sent the source the proprietary Microsoft code, according to the complaint, which goes on to say that the outside source then contacted Microsoft.

Microsoft’s Office of Legal Compliance then approved content pulls of the blogger’s Hotmail account.

Microsoft said last week that a court order was not needed to do so and, in any case, it wouldn’t have been able to get one because courts do not “issue orders authorizing someone to search themselves,” according to a blog post from John Frank, Microsoft’s deputy general counsel.

The company did, however, put into place some new policies, including proceeding with such searches only after an outside attorney who is a former federal judge deems there’s sufficient evidence to justify a court order.

Friday’s policy change goes further in that Microsoft says it now will not conduct such searches itself. Instead, it will refer such cases to law enforcement — something that digital civil-rights organizations such as Electronic Frontier Foundation had advocated.

After the revelations from whistle-blower Edward Snowden about the U.S. government’s national-surveillance programs and tech companies’ involvement, Microsoft and other companies have been pushing the U.S. government for more transparency and reliance on legal processes to conduct its searches.

“We’ve advocated that governments should rely on formal legal processes and the rule of law for surveillance activities,” Smith said. “While our own search was clearly within our legal rights, it seems apparent that we should apply a similar principle and rely on formal legal processes for our own investigations involving people who we suspect are stealing from us.”

Janet I. Tu: 206-464-2272 or jtu@seattletimes.com On Twitter @janettu



Want unlimited access to seattletimes.com? Subscribe now!

News where, when and how you want it

Email Icon

Where in the world are Seahawks fans?

Where in the world are Seahawks fans?

Put your marker on The Seattle Times interactive map and share your fan story.

Advertising

Advertising


Advertising
The Seattle Times

The door is closed, but it's not locked.

Take a minute to subscribe and continue to enjoy The Seattle Times for as little as 99 cents a week.

Subscription options ►

Already a subscriber?

We've got good news for you. Unlimited seattletimes.com content access is included with most subscriptions.

Subscriber login ►
The Seattle Times

To keep reading, you need a subscription upgrade.

We hope you have enjoyed your complimentary access. For unlimited seattletimes.com access, please upgrade your digital subscription.

Call customer service at 1.800.542.0820 for assistance with your upgrade or questions about your subscriber status.

The Seattle Times

To keep reading, you need a subscription.

We hope you have enjoyed your complimentary access. Subscribe now for unlimited access!

Subscription options ►

Already a subscriber?

We've got good news for you. Unlimited seattletimes.com content access is included with most subscriptions.

Activate Subscriber Account ►