<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/">
<channel>
<title>Techdirt. Stories filed under &quot;fbi&quot;</title>
<description>Easily digestible tech news...</description>
<link>http://www.techdirt.com/</link>
<language>en-us</language>
<image><title>Techdirt. Stories filed under &quot;fbi&quot;</title><url>http://www.techdirt.com/images/td-88x31.gif</url><link>http://www.techdirt.com/</link></image>
<item>
<pubDate>Fri, 17 May 2013 14:34:00 PDT</pubDate>
<title>Want To Destroy Any Hope Of Serious Cybersecurity? Give The DOJ Its Desired Backdoor Wiretaps On All Communications</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130517/08111723117/want-to-destroy-any-hope-serious-cybersecurity-give-doj-its-desired-backdoor-wiretaps-all-communications.shtml</link>
<guid>http://www.techdirt.com/articles/20130517/08111723117/want-to-destroy-any-hope-serious-cybersecurity-give-doj-its-desired-backdoor-wiretaps-all-communications.shtml</guid>
<description><![CDATA[ The Obama administration has supposedly been "considering" the latest version of the DOJ's plan to require backdoor wiretapping abilities in <i>any</i> form of digital communication.  If you don't recall, the FBI <a href="http://www.techdirt.com/articles/20100927/10481011183/feds-pushing-for-new-legally-required-wiretap-backdoor-to-all-internet-communications.shtml">asks</a> for <a href="http://www.techdirt.com/articles/20110216/23535513143/its-back-fbi-announcing-desire-to-wiretap-internet.shtml">this</a> basically every year.  The latest version would lead to <a href="http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml">fines</a> for any company that doesn't build in a backdoor wiretapping ability.  We've been pointing out for quite some time that putting in such backdoors only makes us all <a href="http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml">less safe</a>, because those with malicious intent will find and use those backdoors.
<br /><br />
A new report has been released, put together by some of the best known technologists and security experts out there, saying that the plan, as being considered <a href="http://www.nytimes.com/2013/05/17/business/concerns-arise-on-us-effort-to-allow-internet-wiretaps.html?ref=sominisengupta&#038;_r=1&#038;" target="_blank">would effectively undermine any cybersecurity regime</a>.  At a time when the administration and Congress keep insisting that we <b>need</b> better <a href="http://www.techdirt.com/blog/?tag=cybersecurity">cybersecurity</a>, to undermine it all with wiretapping backdoors would be ridiculous.  And let's not even begin discussing how this would play out if it passed and number one CISPA backer Mike Rogers then <a href="http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml">became head</a> of the FBI.
<br /><br />
Among the report's authors are names you might recognize, like Ed Felten, Peter Neumann, Bruce Schneier and Phil Zimmerman.  You can read <a href="https://www.cdt.org/files/pdfs/CALEAII-techreport.pdf" target="_blank">the full report</a> (pdf) to see all the details.  As Ed Felten told the NY Times:
<blockquote><i>
&#8220;It&#8217;s a single point in the system through which all of the content can be collected if they can manage to activate it,&#8221; said Edward W. Felten, a computer science professor at Princeton and one of the authors of the report...  &#8220;That&#8217;s a security vulnerability waiting to happen, as if we needed more,&#8221; he said.
</i></blockquote>
Once again, all of this suggests that the efforts around "cybersecurity" have always been more of a cover story to try to make it easier for law enforcement to access data, rather than any legitimate effort at improving security.<br /><br /><a href="http://www.techdirt.com/articles/20130517/08111723117/want-to-destroy-any-hope-serious-cybersecurity-give-doj-its-desired-backdoor-wiretaps-all-communications.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130517/08111723117/want-to-destroy-any-hope-serious-cybersecurity-give-doj-its-desired-backdoor-wiretaps-all-communications.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130517/08111723117/want-to-destroy-any-hope-serious-cybersecurity-give-doj-its-desired-backdoor-wiretaps-all-communications.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>stupid-ideas</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130517/08111723117</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 16 May 2013 19:58:00 PDT</pubDate>
<title>NZ Supreme Court Will Review Kim Dotcom's Extradition Case</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130516/12483923107/nz-supreme-court-will-review-kim-dotcoms-extradition-case.shtml</link>
<guid>http://www.techdirt.com/articles/20130516/12483923107/nz-supreme-court-will-review-kim-dotcoms-extradition-case.shtml</guid>
<description><![CDATA[ Back in March, we noted that while a district court had <a href="http://www.techdirt.com/articles/20120815/23472720067/new-zealand-high-court-fbi-must-release-its-evidence-against-kim-dotcom.shtml">ordered</a> the US to hand over the evidence it was planning to use against Kim Dotcom, an appeals court had <a href="http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml">overturned</a> that ruling, and said that the evidence wasn't needed for the extradition fight.  Dotcom immediately appealed to New Zealand's Supreme Court, who has now said <a href="http://www.hollywoodreporter.com/thr-esq/kim-dotcom-case-be-reviewed-524004" target="_blank">that it will review that ruling as well</a>, so this case will continue to drag on for some time.<br /><br /><a href="http://www.techdirt.com/articles/20130516/12483923107/nz-supreme-court-will-review-kim-dotcoms-extradition-case.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130516/12483923107/nz-supreme-court-will-review-kim-dotcoms-extradition-case.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130516/12483923107/nz-supreme-court-will-review-kim-dotcoms-extradition-case.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>not-over-yet</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130516/12483923107</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 16 May 2013 11:56:00 PDT</pubDate>
<title>Footage Of Lethal Beating Deleted From Seized Phone; Sheriff Asks FBI To Take Over Investigation</title>
<dc:creator>Tim Cushing</dc:creator>
<link>http://www.techdirt.com/articles/20130515/18051923103/footage-lethal-beating-deleted-seized-phone-sheriff-asks-fbi-to-take-over-investigation.shtml</link>
<guid>http://www.techdirt.com/articles/20130515/18051923103/footage-lethal-beating-deleted-seized-phone-sheriff-asks-fbi-to-take-over-investigation.shtml</guid>
<description><![CDATA[ Well, this is rather unexpected. After sheriff's deputies <a href="http://www.techdirt.com/articles/20130512/20494523050/bakersfield-ca-law-enforcement-follow-up-beating-possibly-intoxicated-man-to-death-seizing-witnesses-cell-phones.shtml" target="_blank">seized cell phones</a> containing footage of David Silva's death at the hands of nine law enforcement officers, the assumption was that Kern County Sheriff Donny Youngblood's promise of a full investigation would result in little more than some officious noises being made and declarations that the recordings were "inconclusive" or "unrecoverable."
<br /><br />
That this is the most common assumption shows how far the trustworthiness of law enforcement has fallen. This precipitous drop in trust is almost inversely proportionate to the increase in <a href="http://www.techdirt.com/search-g.php?q=police+camera" target="_blank">recordings captured</a> by members of the public. Law enforcement has long been in control of the cameras and this power shift has resulted in some very ugly behavior. The expected mode is cover up and obfuscate, abusing the power that comes with the position.
<br /><br />
The unsurprising part of the David Silva beating is this: when one of the phones confiscated by law enforcement (one without a warrant, the other after an illegal nine-hour detention) was inspected at the Sheriff's office, Sheriff Youngblood discovered the footage had been deleted.
<br /><br />
The <i>surprising</i> part is that Youngblood <a href="http://www.latimes.com/news/local/la-me-kern-beating-fbi-20130515,0,760051,full.story" target="_blank">decided to call in the FBI to head up a parallel investigation into the death of David Silva</a>. Even better, he had the phones flown out to the FBI's Sacramento office for analysis. This is a rather unprecedented move. The general response from local law enforcement to situations like these is to close ranks and make vague promises and statements about "justice" and "truth." Instead, Youngblood opted to turn the investigation over to a more neutral party (and one with better tech tools).
<br /><br />
The fact that this story has attracted national interest probably pushed Youngblood to consider other options. There's little chance the Sheriff's department would be able to control the narrative (or contain the fallout) at this point and with potentially damning footage being deleted by a law enforcement officer, there's no chance for redemption without making the investigation more neutral.
<br /><br />
This isn't to say the FBI isn't capable of covering up misbehavior, but in this instance, it really doesn't have much of a stake in the outcome. If the footage shows what eyewitnesses have described, there shouldn't be too much of a question as to where the guilt lies.
<br /><br />
The deputies named by the department have been put on paid administrative leave pending the outcome of the investigation, and Sheriff Youngblood has stated that these officers have been receiving death threats and negative email. This, too, is an expected outcome. The court of public opinion creates a lot of judge/jury hybrids. Naming the officers involved is a small but significant step towards a transparent investigation. Hopefully, the FBI's involvement will continue in this fashion, rather than take a turn towards the opaque.<br /><br /><a href="http://www.techdirt.com/articles/20130515/18051923103/footage-lethal-beating-deleted-seized-phone-sheriff-asks-fbi-to-take-over-investigation.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130515/18051923103/footage-lethal-beating-deleted-seized-phone-sheriff-asks-fbi-to-take-over-investigation.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130515/18051923103/footage-lethal-beating-deleted-seized-phone-sheriff-asks-fbi-to-take-over-investigation.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>a-step-in-the-right-direction</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130515/18051923103</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 14 May 2013 12:53:19 PDT</pubDate>
<title>CISPA Sponsor Mike Rogers May Go On To Lead The FBI</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml</link>
<guid>http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml</guid>
<description><![CDATA[ We've often heard stories of politicians passing legislation soon before they left office, only to have that very same legislation help them in their next job (coincidentally, we're sure).  So it does seem interesting that Rep. Mike Rogers, the main champion behind CISPA, the privacy-destroy cybersecurity bill, is apparently a <a href="http://www.washingtonpost.com/world/national-security/fbi-agents-association-to-endorse-rep-mike-rogers-to-bureaus-new-leader/2013/05/06/1c4362ac-b66a-11e2-aa9e-a02b765ff0ea_story.html?hpid=z2" target="_blank">top candidate to head the FBI</a> -- so much so that the FBI Agents Association, representing 12,000 FBI agents, has officially stated that it would like him to take the job.  I'm sure it would be much easier to run the FBI if it could have companies violate the privacy of their users without any possible liability (even if they promised to protect that privacy), which is exactly what CISPA would allow.  For what it's worth, there are a number of other candidates for the job, though it's somewhat horrifying to see one other top candidate be Neil MacBride.  He's the former "anti-piracy" VP for the Business Software Alliance, who is now the US Attorney who has been driving the case against Kim Dotcom.  Just imagine what kind of FBI there would be under his watch...<br /><br /><a href="http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130507/18341622994/cispa-sponsor-mike-rogers-may-go-to-lead-fbi.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>sure-that-having-cispa-in-place-would-help</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130507/18341622994</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 14 May 2013 10:44:00 PDT</pubDate>
<title>DOJ's History Of Ignoring The Rules When Getting Phone Records Of Journalists</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130514/01190323076/dojs-history-ignoring-rules-when-getting-phone-records-journalists.shtml</link>
<guid>http://www.techdirt.com/articles/20130514/01190323076/dojs-history-ignoring-rules-when-getting-phone-records-journalists.shtml</guid>
<description><![CDATA[ There was, of course, plenty of talk about the DOJ getting two months of <a href="http://www.techdirt.com/articles/20130513/15401423065/doj-unconcerned-about-constitution-obtained-ap-reporters-phone-records.shtml">phone records</a> concerning calls involving some reporters.  Since the original story came out, reporters have quickly deduced <a href="http://www.huffingtonpost.com/2013/05/13/ap-phone-records-doj-leaks_n_3268932.html" target="_blank">what the government was after</a>: they were trying to figure out who leaked information about the CIA <a href="http://usatoday30.usatoday.com/news/washington/story/2012-05-07/al-qaeda-bomb-plot-foiled/54811054/1" target="_blank">stopping a plane bombing plot</a>, because the "would be bomber" was actually working for the US, and revealing the news apparently ended the work early.  The DOJ going batshit insane over a leak to the press is, unfortunately, par for the course for the Obama administration, which has been ridiculously <a href="http://www.techdirt.com/articles/20110702/00451614941/latest-attempt-obama-administration-to-punish-whistleblowers.shtml">aggressive</a> (to an unprecedented level) in going after anyone who leaks to the press.
<br /><br />
And while some are still trying to argue that this is a <a href="http://www.volokh.com/2013/05/13/the-non-story-of-the-ap-phone-records-at-least-so-far/" target="_blank">non-story</a>, what may be more important is pointing out what a complete bullshit response the DOJ gave to this whole thing:
<blockquote><i>
Despite the seizure of the phone records, a Justice Department spokesman said the agency valued freedom of the press and was &#8220;always careful and deliberative in seeking to strike the right balance between the public interest in the free flow of information and the public interest in the fair and effective administration of our criminal laws.&#8221;
</i></blockquote>
The "right balance"?  Well, let's take a look about how "always careful and deliberative" the DOJ is on these kinds of things.  Julian Sanchez <a href="https://twitter.com/normative/status/334117349852606464" target="_blank">helpfully points us</a> to the infamous 2010 report from the DOJ's Inspector General <a href="http://www.justice.gov/oig/special/s1001r.pdf" target="_blank">detailing how the FBI regularly abused "exigent letters"</a> (pdf) -- better known as National Security Letters or NSLs -- to get phone records.  This report got <a href="http://www.techdirt.com/articles/20100119/0339467809.shtml">plenty of attention</a> at the time, but if you don't recall all 300 pages of it, there's a discussion about getting info from reporters' call logs starting on page 89 (of the official pagination, which falls on page 102 of the pdf) detailing heavily redacted examples of getting reporters' phone records without getting the proper authorization or approvals.  What is striking is the extremely cavalier attitude law enforcement seems to have about this.  Here is just one example of the DOJ's "always careful and deliberative process" when "seeking to strike the right balance" in getting access to reporters' phone records.  This case was an investigation into a leak that appeared in articles in the NY Times and the Washington Post.  The full story is much longer, but here are the key points:
<blockquote><i>
On November 5, [redacted], the case agent sent an e-mail asking another Special Agent in the [redacted] Field Office to inquire, in the other agent's capacity as his squad's liaison to the CAU, whether the on-site communications service providers could obtain telephone toll records of U.S. persons making [redacted] calls [redacted].  The case agent's November 5 e-mail listed 12 [redacted] telephone numbers, 8 of which were identified in the e-mail as belonging to Washington Post reporters [redacted] and Washington Post researcher [redacted] and New York Times reporters [redacted]  The email identified a 7-month period -- a few months before and a few months after the published articles -- as the time period of interest for the leak investigation.
<br /><br />
[....] However, in absence of any request from the case agent or anyone in the FBI, the CAU SSA <b>issued an exigent letter</b> dated December 17, [redacted], to Company A for telephone records of the reporters and others listed in the case agent's November 5, [redacted], e-mail.  We determined that the SSA did this <b>without further discussion with the case agent or the Special Agent who had asked only whether such records could be obtained through on-site providers, not that the records should be obtained</b>.
<br /><br />
The CAU SSA's exigent letter sought records on nine telephone numbers, seven of which were identified in the e-mail exchanges described above as belonging to Washington Post and New York Times reporters or their news organizations' bureaus in [redacted].....
<br /><br />
<b>The exigent letter did not specify the 7-month interval noted in the case agent's November 5 e-mail, or contain any date restrictions.</b>  The exigent letter also stated that the request was made "due to exigent circumstances" and that "subpoenas requesting this information have been submitted to the U.S. Attorney's office who will process and serve them formally on [Company A] as expeditiously as possible."  However, <b>this statement was not accurate.  A subpoena request had not been sent to the U.S. Attorney's Office at the time the exigent letter was served, or at any time thereafter.</b>
</i></blockquote>
That's the "always careful and deliberative process"?  Hmm.  Later in the report, they note that even when the agent only had asked about (and never actually sought) 7 months of records, thanks to the NSL, they got months and months of records, nearly none of which was actually in the 7 month period the agent was interested in.  All total, they were sent 1,627 telephone call records, and only <i>three</i> calls were from that 7 month period.  Oh, and once they got those records, they were uploaded into a database, where they were searchable by other FBI staff and other government personnel as well.
<br /><br />
The report notes a few other examples of agents getting access to reporter phone information without the proper authorization as well.
<br /><br />
Of course, once this came out the FBI and DOJ insisted that this was no big deal.  But, in a coincidence of timing, just before this whole story broke, the FBI was in court, seeking to <a href="http://www.huffingtonpost.com/2013/05/13/fbi-exigent-letters-memo-_n_3268167.html" target="_blank">keep secret the memo that gave the "legal basis"</a> for its past use of NSLs to access phone records.  While the DOJ insists that it's not using these processes any more, it still thinks it should keep the legal basis for why it issued those letters a complete secret.  They claim, ridiculously, that this would "chill deliberative discussions within the Executive Branch."  But people aren't asking for deliberative discussions, just the very specific claimed legal basis for issuing such letters.  And, of course, the DOJ would prefer not to say.
<br /><br />
Given all of this, is it any wonder that people suspect the DOJ of being up to no good?<br /><br /><a href="http://www.techdirt.com/articles/20130514/01190323076/dojs-history-ignoring-rules-when-getting-phone-records-journalists.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130514/01190323076/dojs-history-ignoring-rules-when-getting-phone-records-journalists.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130514/01190323076/dojs-history-ignoring-rules-when-getting-phone-records-journalists.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>not-the-first-time</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130514/01190323076</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 9 May 2013 15:59:42 PDT</pubDate>
<title>Judge Allows FBI To Use Evidence Collected Via Stingray Fake Cell Towers</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml</link>
<guid>http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml</guid>
<description><![CDATA[ For the past few years, we've been covering a key DOJ case against Daniel Rigmaiden.  Rigmaiden appears to have been involved in some likely fraud, but after asking how the feds tracked him down, it was revealed that they used a <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml">fake mobile tower</a>, often referred to as a "stingray" (though the actual product goes by a few different names), to create an effective man in the middle attack. This allowed the FBI to keep tabs on Rigmaiden's location and some of what he was doing, as the aircard he used to get online was suddenly running through their own special fake Verizon tower.  In fact, it later came out that the DOJ has been <a href="http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml">misleading judges</a> for years about its use of the technology.
<br /><br />
However, a judge has now ruled that none of that really matters, and that the evidence collected by the stingray (or as a result of its use) <a href="http://www.wired.com/threatlevel/2013/05/rigmaiden-cell-tower-evidence/" target="_blank">can be used in the case against Rigmaiden</a>.  The reasoning is fairly odd, however.  The judge basically said that there's no 4th Amendment issue because Rigmaiden had no reasonable expectation of privacy in either the use of the aircard or in his apartment "because he had obtained the air card and rented the apartment and storage space through fraudulent means &#8212; that is, using identifications that he had stolen from other people."  That seems like a highly questionable standard on which to base that decision.  As the ACLU points out, while Rigmaiden may have been committing fraud elsewhere, and may have used different names in getting the aircard and the space, there is no indication that any fraud was involved in getting those particular things.  Under this ruling, you could see that doing something or buying something under an alias could be viewed as giving up one's 4th Amendment protections -- and that seems crazy.
<br /><br />
The court also didn't seem to much care about the DOJ hiding its use of the stingray from judges:
<blockquote><i>
The judge also ruled that the government was not in the wrong for failing to disclose to a magistrate judge that it planned to use a stingray to track the defendant, or to explain to the judge how the tracking device it intended to use worked. He characterized this information as a &#8220;detail of execution which need not be specified.&#8221;
</i></blockquote>
That seems fairly troubling, as it would allow the DOJ to hide other surveillance efforts that <i>might</i> be judged to be 4th Amendment violations... As the ACLU notes in response to this ruling:
<blockquote><i>
&#8220;When the government is seeking a warrant to use new technology, it has the duty to explain to the court what that technology is and how it works,&#8221; she said. &#8220;Stingrays are a very potent example of why that is so, because it scoops up innocent information of third parties who are not under probable cause surveillance.&#8221;
</i></blockquote><br /><br /><a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>that-4th-amendment-thing...</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130508/17171423010</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 9 May 2013 15:18:04 PDT</pubDate>
<title>FBI Didn't Even Inform Fusion Center About Tamerlan Tsarnaev</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130508/17354123014/fbi-didnt-even-inform-fusion-center-about-tamerlan-tsarnaev.shtml</link>
<guid>http://www.techdirt.com/articles/20130508/17354123014/fbi-didnt-even-inform-fusion-center-about-tamerlan-tsarnaev.shtml</guid>
<description><![CDATA[ Last year we noted that a Congressional investigation revealed that Homeland Security's "anti-terrorism fusion centers" <a href="http://www.techdirt.com/articles/20121002/22020120576/congressional-investigation-slams-dhs-anti-terror-centers-wasted-taxpayer-funds-created-no-useful-intelligence-violated-civil.shtml">were a complete joke</a>.  They created <i>no useful intelligence</i>, even though they cost a ton of taxpayer money, and they regularly violated American's civil liberties.  In the wake of the Boston bombings, then, it might be useful to wonder how much the local fusion centers were involved in the process -- especially since the FBI had been aware of Tamerlan Tsarnaev and had interviewed him.  Well... it turns out that the FBI <a href="http://www.privacysos.org/node/1053" target="_blank">didn't bother to share that with the fusion center</a>.  The FBI <i>did</i> share info with state and local police, but not with the fusion center:
<blockquote><i>
A spokeswoman for the Boston Police Department said the Boston Regional Intelligence Center [] was never notified about the FBI investigation.
<br /><br />
In response, FBI supervisory Agent Jason Pack e-mailed a statement suggesting that state and local officials had ample access to information about the Tsarnaev investigation in 2011, through their participation in an FBI unit in Boston, the Joint Terrorism Task Force.
</i></blockquote>
Once again, this has people wondering why we have these fusion centers in the first place.
<blockquote><i>
If the FBI&#8217;s investigatory work with state and locals on terrorism is situated at the JTTFs, as it appears to be, what useful purpose do fusion centers serve with respect to terrorism? The jury is out on that question. But we know a bit about some non-terrorism related activities at the BRIC.
<br /><br />
A public records lawsuit in 2011 showed that the Boston Regional Intelligence Center, like other fusion centers nationwide, devoted resources and time to <a href="http://aclum.org/policing_dissent">spying on perfectly peaceful dissenters</a> like Veterans for Peace and Code Pink.
</i></blockquote>
Perhaps the FBI only makes use of the fusion centers when stopping some of its <a href="http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml">self-created</a> terrorist plots.<br /><br /><a href="http://www.techdirt.com/articles/20130508/17354123014/fbi-didnt-even-inform-fusion-center-about-tamerlan-tsarnaev.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130508/17354123014/fbi-didnt-even-inform-fusion-center-about-tamerlan-tsarnaev.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130508/17354123014/fbi-didnt-even-inform-fusion-center-about-tamerlan-tsarnaev.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>perhaps-they-only-do-that-with-their-own-plots</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130508/17354123014</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 9 May 2013 07:51:54 PDT</pubDate>
<title>FBI Still Doesn't Think It Needs A Warrant To Read Your Email, Despite Court Ruling To The Contrary</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml</link>
<guid>http://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml</guid>
<description><![CDATA[ The ACLU has continued its campaign to explore whether or not the government gets a warrant before scouring your email.  Last month, they discovered that the IRS <a href="http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml">doesn't believe</a> in getting a warrant -- leading to the IRS promising to <a href="http://www.techdirt.com/articles/20130421/23062122797/irs-says-it-will-change-its-policy-looking-emails-without-warrant-some-point.shtml">change</a> that policy.  Now they've received some documents from the FBI in response to a FOIA request that again suggest that, despite the ruling in <a href="http://caselaw.findlaw.com/us-6th-circuit/1548071.html" target="_blank">US v. Warshak</a>, in which the 6th Circuit said that a warrant is needed to compel an ISP to turn over emails, the FBI <a href="http://www.aclu.org/blog/national-security-technology-and-liberty/fbi-documents-suggest-feds-read-emails-without-warrant" target="_blank">believes it can access emails older than 180 days without a warrant</a>, under ECPA.  As we've discussed at length, ECPA (the Electronic Communications Privacy Act) is a very outdated piece of legislation which considers emails on a server over 180 days to be "abandoned" because no one considered a cloud computing future.
<br /><br />
What the ACLU found in these documents is that the FBI hasn't updated its Domestic Investigations and Operations Guide (DIOG) in response to the Warshak ruling, and it still suggests that agents can easily access such emails without a warrant.  Instead, it says:
<blockquote><i>
In enacting the ECPA, Congress concluded that customers may not retain a &#8220;reasonable expectation of privacy&#8221; in information sent to network providers. . . [I]f the contents of an unopened message are kept beyond six months or stored on behalf of the customer after the e-mail has been received or opened, it should be treated the same as a business record in the hands of a third party, such as an accountant or attorney. In that case, the government may subpoena the records from the third party without running afoul of either the Fourth or Fifth Amendment.
</i></blockquote>
That's a... charitable interpretation of reality.  That's what Congress felt back then, but based on a very different network setup.  However, as the courts noted in Warshak, the 4th Amendment is still important and still rules.
<br /><br />
The ACLU also asked different US Attorney's offices for their guidelines, and found that policies differed greatly based on location.  Northern Illinois, for example, seemed to recognize the 4th Amendment.  But others, including in Texas, still seem to think that no warrant is required.  As the ACLU notes, this hodgepodge of rules and the fact that the FBI hasn't changed its guidelines in response to Warshak just highlights the need for comprehensive ECPA reform.
<blockquote><i>
If nothing else, these records show that federal policy around access to the contents of our electronic communications is in a state of chaos. The FBI, the Executive Office for U.S. Attorneys, and DOJ Criminal Division should clarify whether they believe warrants are required across the board when accessing people&#8217;s email. It has been clear since <a href="http://caselaw.lp.findlaw.com/cgi-bin/getcase.pl?court=us&#038;vol=96&#038;invol=727">1877</a> that the government needs a warrant to read letters sent via postal mail. The government should formally amend its policies to require law enforcement agents to obtain warrants when seeking the contents of all emails too.
<br /><br />
More importantly, Congress also needs to reform ECPA to make clear that a warrant is required for access to all electronic communications. Reform <a href="http://www.aclu.org/blog/technology-and-liberty/one-small-step-senate-judiciary-committee-one-giant-leap-online-privacy">legislation</a> is making its way through the Senate now, and the documents released by the U.S. Attorney in Illinois illustrate that the law can be fixed without harming law enforcement goals. If you agree that your email and other electronic communications should be private, you can urge Congress to take action <a href="https://ssl.capwiz.com/aclu/issues/alert/?alertid=62590096&#038;type=CO">here</a>.
</i></blockquote><br /><br /><a href="http://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>of-course-not</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130508/11523523006</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 7 May 2013 13:24:42 PDT</pubDate>
<title>Did FBI Counterterrorism Agent Reveal That Feds Now Record All Phone Calls?</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130506/18203522969/did-fbi-counterterrorism-agent-reveal-that-feds-now-record-all-phone-calls.shtml</link>
<guid>http://www.techdirt.com/articles/20130506/18203522969/did-fbi-counterterrorism-agent-reveal-that-feds-now-record-all-phone-calls.shtml</guid>
<description><![CDATA[ It's long been assumed (or hinted at very strongly by a variety of evidence) that the feds have been making and collecting copies of pretty much every digital communication available.  A whistleblower from AT&T more or less <a href="http://www.techdirt.com/articles/20060407/1514229.shtml">revealed</a> the details on that.  The NSA's ability to <a href="http://www.techdirt.com/articles/20120317/00381118147/terrifying-look-into-nsas-ability-to-capture-analyze-pretty-much-every-communication.shtml">collect</a> all this data is well documented, and people are just now coming to terms with the <a href="http://www.techdirt.com/articles/20120913/23182420380/house-approves-bill-to-spy-americans-misrepresenting-lying-about-whats-bill.shtml">legal loopholes</a> used to justify this mass sweeping up of communications.
<br /><br />
However, for the most part, it was believed that the content of <i>phone calls</i> was not included in this broad sweep.  While it's well known that law enforcement can get a wiretap on your phone if they suspect something, there was little indication that other calls are being recorded.  Similarly, information about <i>who</i> you called and when you spoke to them tends to be easy for law enforcement to get.  However, Glenn Greenwald is noting that a former FBI counterterrorism agent, Tim Clemente, went on TV, and in discussing the investigation of Katherine Russell (the wife of deceased accused Boston bomber Tamerlan Tsarnaev) has clearly said that <a href="http://www.guardian.co.uk/commentisfree/2013/may/04/telephone-calls-recorded-fbi-boston" target="_blank">the contents of historical phone calls are also available to the feds</a>.
<blockquote><i>
BURNETT: Tim, is there any way, obviously, there is a voice mail they can try to get the phone companies to give that up at this point. It's not a voice mail. It's just a conversation. There's no way they actually can find out what happened, right, unless she tells them?
<p>
CLEMENTE: "No, <b>there is a way. We certainly have ways in national security investigations to find out exactly what was said in that conversation.</b> It's not necessarily something that the FBI is going to want to present in court, but it may help lead the investigation and/or lead to questioning of her. We certainly can find that out.
</p>
<p>
BURNETT: "So they can actually get that? People are saying, look, that is incredible.
</p>
<p>
CLEMENTE: "No, <b>welcome to America. All of that stuff is being captured as we speak whether we know it or like it or not</b>."
</p>
</i></blockquote>
It's possible this was an exaggeration, but when questioned about this particular point later, Clemente again insisted that it was the case and specifically added that "all digital communications in the past" are recorded and stored.  Of course, again, he may have misspoken.  Or he may be exaggerating for effect.  There's also the possibility that Tamerlan's phone calls were actually being tapped given the earlier investigation of him for possible terrorist connections.
<br /><br />
So there are numerous possibilities here, but it is still a case of an FBI counterterrorism agent claiming, multiple times, that the contents of all phone calls are being recorded, which, if true, would be quite a revelation (and probably not something Clemente is supposed to be revealing via an interview with the media).  At the very least, it would be good for there to be some serious follow up on this to find out how true Clemente's claims really are.<br /><br /><a href="http://www.techdirt.com/articles/20130506/18203522969/did-fbi-counterterrorism-agent-reveal-that-feds-now-record-all-phone-calls.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130506/18203522969/did-fbi-counterterrorism-agent-reveal-that-feds-now-record-all-phone-calls.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130506/18203522969/did-fbi-counterterrorism-agent-reveal-that-feds-now-record-all-phone-calls.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>er...-what?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130506/18203522969</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 29 Apr 2013 14:19:00 PDT</pubDate>
<title>DOJ Wants To Be Able To Fine Tech Companies Who Don't Let It Wiretap Your Communications</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml</link>
<guid>http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml</guid>
<description><![CDATA[ We've talked a lot about how the Justice Department (DOJ), mainly via the FBI, has been pushing for years to change the laws in order to require tech companies <a href="http://www.techdirt.com/articles/20110216/23535513143/its-back-fbi-announcing-desire-to-wiretap-internet.shtml"> to build wiretapping backdoors</a> into any and every form of communication online.  As we've explained over and over again, this is a really silly proposal, that won't make us any safer.  Instead, it's likely to make us <a href="http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml">a lot less secure</a>, because those backdoors will be abused, not just by law enforcement, but by those with malicious intent who will work hard to find the backdoors and make use of them.
<br /><br />
The latest proposal on this front is equally ridiculous.  While it wouldn't dictate specific wiretapping/backdoor standards, it would require that companies make some sort of backdoor available <a href="http://www.washingtonpost.com/world/national-security/proposal-seeks-to-fine-tech-companies-for-noncompliance-with-wiretap-orders/2013/04/28/29e7d9d8-a83c-11e2-b029-8fb7e977ef71_story.html" target="_blank">or face rapidly escalating fines</a>.
<blockquote><i>
Under the draft proposal, a court could levy a series of escalating fines, starting at tens of thousands of dollars, on firms that fail to comply with wiretap orders, according to persons who spoke on the condition of anonymity to discuss internal deliberations. A company that does not comply with an order within a certain period would face an automatic judicial inquiry, which could lead to fines. After 90 days, fines that remain unpaid would double daily. 
</i></blockquote>
This would be a disaster for innovative companies and for public security and privacy as well.  The DOJ really needs to learn that <i>not everything</i> must be tappable.  As it stands now, if I just sit on a park bench talking to someone, the DOJ can't tap it.  Sometimes law enforcement <i>doesn't</i> get the right to hear everything I have to say.  That's the nature of freedom and privacy protection that we're supposed to believe in.  I'm sure with the news that chat apps are now <a href="http://news.cnet.com/8301-1035_3-57581830-94/chat-apps-now-more-popular-than-sms-worldwide/" target="_blank">more popular than SMS worldwide</a>, law enforcement folks think that they need to "do something" to make sure they can spy on those conversations, but that's not true.  Yes, it may make their job harder at times, but in a free country, the focus should be on protecting the freedom of the people, not decimating it to make the job of law enforcement easier.  Those who commit crimes leave other clues beyond their communications online.  Tapping such communications will lead to a massive security risk and huge expense for many innovative companies (likely slowing down the pace of innovation in that space).  Is that worth it just so the DOJ can spy on what you have to say?  That seems doubtful.<br /><br /><a href="http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130429/08042622880/doj-wants-to-be-able-to-fine-tech-companies-who-dont-let-it-wiretap-your-communications.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>no-that-won't-be-absued-at-all</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130429/08042622880</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 7 Mar 2013 16:00:19 PST</pubDate>
<title>Google Reveals Some Data About National Security Letters, May Have Exposed DOJ Duplicity</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130305/18204022210/google-reveals-some-data-about-national-security-letters-may-have-exposed-doj-duplicity.shtml</link>
<guid>http://www.techdirt.com/articles/20130305/18204022210/google-reveals-some-data-about-national-security-letters-may-have-exposed-doj-duplicity.shtml</guid>
<description><![CDATA[ We've talked for years about the government's use of <a href="http://www.techdirt.com/blog/?tag=national+security+letters">"national security letters"</a> or NSLs, which are effectively a way for law enforcement types to seek information with less oversight than a subpoena, and which usually come with a very, very extreme gag order attached.  Despite the fact that, by their own admission, law enforcement has regularly and systematically <a href="http://www.techdirt.com/articles/20070309/145914.shtml">abused</a> this tool, they are still widely used and there has been little effort to block the abuses.  Google's latest transparency report is seeking to <a href="http://googlepublicpolicy.blogspot.com/2013/03/transparency-report-shedding-more-light.html" target="_blank">reveal some data about the NSLs it has received</a>, but without revealing too much.  Rather than directly revealing how many NSLs it has received, it is posting ranges (in bunches of 1,000) -- and apparently the company got at least some level of approval from the government to do this ("We're thankful to U.S. government officials for working with us").
<br /><br />
By itself, the data doesn't seem <i>that</i> enlightening.
<center>
<a href="http://imgur.com/JcwyihH"><img src="http://i.imgur.com/JcwyihH.png" width=560 /></a>
</center>
However, there is some useful information you can pick out of there, and who better to pick out that info that Julian Sanchez, who has followed this issue closely.  He's found that you can actually <a href="http://www.cato.org/blog/google-illuminates-shadowy-world-national-security-letters" target="_blank">tease out some useful info</a> even with those broad ranges.
<blockquote><i>
<p>
It's illuminating to compare the <em>minimum</em> number of users affected by NSLs each year to the numbers we find in the government's official annual reports. In 2011&#8212;the last year for which we have a tally&#8212;the Justice Department acknowledged issuing 16,511 NSLs seeking information about U.S. persons, with a total of 7,201 Americans' information thus obtained. That's actually down from <a href="http://www.cato.org/blog/record-number-americans-targeted-national-security-letters">a staggering 14,212 Americans</a> whose information DOJ reported obtaining via NSL the previous year. Remember, this total includes National Security Letters issued not just to all telecommunications providers&#8212;including online services like Google, broadband Internet companies, and cell phone carriers&#8212;but also "financial institutions," which are defined broadly to include a vast array of businesses beyond such obvious candidates as banks and credit card companies.
</p>
<p>
What ought to leap out at you here is the magnitude of Google's tally relative to that total: They got requests affecting <em>at least </em>1,000 users in a year when DOJ reports just over 7,000 Americans affected by all NSLs&#8212;and it seems impossible that Google could account for anywhere remotely near a seventh of all NSL requests. Google, of course, is not limiting their tally to requests for information about Americans, which may explain part of the gap&#8212;but we know that, at least of a few years ago, the substantial majority of NSLs targeted Americans, and the proportion of the total targeting Americans was increasing year after year. As of 2006, for instance, 57 percent of NSL requests were for information about U.S. persons. So even if we reduce Google's minimum proportionately, that seems awfully high.
</p>
</i></blockquote>
Sanchez wonders if the DOJ is effectively under-counting how many NSLs it uses by pretending that <b>some of the NSLs they issue shouldn't count</b> towards its official tally of NSLs.
<blockquote><i>
There's a simple enough explanation for this apparent discrepancy: The numbers DOJ reports each year explicitly exclude NSL requests for &#8220;basic subscriber information,&#8221; meaning the &#8220;name, address, and length of service&#8221; associated with an account, and only count more expansive requests that also demand more detailed &#8220;electronic communications transactional records&#8221; that are &#8220;parallel to&#8221; the &#8220;toll billing records&#8221; maintained by traditional phone companies.
</i></blockquote>
That would mean that the NSL number that the DOJ reports is not particularly accurate, and that the FBI really issues a hell of a lot more NSLs (not so).  Shocking reveal of the day: the DOJ may not be entirely forthright about how often it's spying on Americans using a widely abused process with little oversight.<br /><br /><a href="http://www.techdirt.com/articles/20130305/18204022210/google-reveals-some-data-about-national-security-letters-may-have-exposed-doj-duplicity.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130305/18204022210/google-reveals-some-data-about-national-security-letters-may-have-exposed-doj-duplicity.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130305/18204022210/google-reveals-some-data-about-national-security-letters-may-have-exposed-doj-duplicity.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>transparency...</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130305/18204022210</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 1 Mar 2013 09:47:00 PST</pubDate>
<title>Kim Dotcom Loses Appeal Concerning Extradition</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml</link>
<guid>http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml</guid>
<description><![CDATA[ To date, Kim Dotcom has been having a long string of victories in court in his ongoing battle with the US concerning their attempt to extradite him and try him in the US for creating and running Megaupload.  One of the big victories was the district court ruling that the FBI needed to <a href="http://www.techdirt.com/articles/20120815/23472720067/new-zealand-high-court-fbi-must-release-its-evidence-against-kim-dotcom.shtml">reveal its evidence</a> against Dotcom as a part of the extradition procedure.  The US DOJ had been arguing that the evidence only matters for the US trial, and that New Zealand should effectively rubberstamp the extradition.  Eventually, you knew there had to be some setbacks in Dotcom's case, and now an appeals court has <a href="http://www.abc.net.au/news/2013-03-01/court-rules-against-kim-dotcom-in-extradition-fight/4548452" target="_blank">overturned that earlier ruling</a>, and said that the FBI does <i>not</i> need to reveal its evidence.
<blockquote><i>
In its judgment, the Court of Appeal says extradition hearings are not criminal trials and that the judge deciding whether to order extradition has only to be satisfied there is a case to answer.
<br /><br />
The court said the US government had a duty of "candour and good faith" in making an extradition bid, but a summary of the evidence held would suffice.
</i></blockquote>
Dotcom has made it clear that he's going to appeal this to the Supreme Court, so there's still the possibility of at least one more level of review before this is over.  I'm sure there are specific reasons for today's ruling, but I have to admit it does seem odd that you can pull someone out of their home country and take them across an ocean without having to actually prove you have an actual case first.  The idea that the US government is doing any of this in "good faith" seems like an assumption that isn't particularly supportable in reality.<br /><br /><a href="http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130301/02155422167/kim-dotcom-loses-appeal-concerning-extradition.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>it's-going-to-happen-eventually</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130301/02155422167</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 8 Feb 2013 16:32:44 PST</pubDate>
<title>FBI 'Stops' Yet Another Of Its Own Terrorist Threats</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml</link>
<guid>http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml</guid>
<description><![CDATA[ Well, there they go again.  We've talked a bunch about how the FBI has gotten really good at <a href="http://www.techdirt.com/search-g.php?q=fbi%2C+terrorist+plots">stopping its own terrorist plots</a> and they've gone and done it again.  Right here in the San Francisco Bay Area, the FBI has gleefully announced how they've <a href="http://www.fbi.gov/sanfrancisco/press-releases/2013/federal-agents-arrest-man-after-he-attempts-to-bomb-bank-in-oakland" target="_blank">stopped an attempt to bomb a Bank of America building</a> in Oakland.  The details are familiar: random guy with no <i>actual</i> connection to terrorists, and no actual way to build a connection with terrorists, is taken in by an FBI undercover agent who works with him to build a "bomb" that was never a bomb.  In other words, there was no plot.  There was no bomb.  There was just a bunch of undercover agents playing dressup, and one Joe Schmo who thought it was all real.  Maybe next time, the FBI can turn it into <a href="http://www.spike.com/shows/the-joe-schmo-show" target="_blank">a reality TV show on Spike</a>.  Ralph Garmin as... a fake terrorist.  I'd watch it.
<br /><br />
This all comes just a week after <i>On the Media</i> <a href="http://www.onthemedia.org/2013/feb/01/fbis-hatching-and-financing-terrorist-plots/" target="_blank">profiled a new book</a> called <a href="http://trevoraaronson.com/book/" target="_blank"><i>Terror Factory: Inside the FBI's Manufactured War On Terrorism</i></a>.  That book appears to collect a bunch of these stories, talking about how this is a major effort in the FBI these days: making up fake terrorist plots in order to stop people <i>they themselves convinced</i> to take part in the "plots" and then generate big headlines around them:
<blockquote><i>
The Terror Factory: Inside the FBI's Manufactured War on Terror shows how the FBI has, under the guise of engaging in counterterrorism since 9/11, built a network of more than 15,000 informants whose primary purpose is to infiltrate Muslim communities to create and facilitate phony terrorist plots so that the bureau can then claim victory in the war on terror.
</i></blockquote>
Think of just how many resources are wasted in entrapping random people, rather than stopping real crime.  I don't see how this makes us any safer at all.  Frankly, it makes me a lot more terrified.<br /><br /><a href="http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130208/12264121921/fbi-stops-yet-another-its-own-terrorist-threats.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>playing-dress-up</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130208/12264121921</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 15 Jan 2013 10:22:44 PST</pubDate>
<title>How The FBI's Desire To Wiretap Every New Technology Makes Us Less Safe</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml</link>
<guid>http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml</guid>
<description><![CDATA[ Here they go again.  Every year or so we end up writing about the FBI's desire for <a href="http://www.techdirt.com/articles/20110216/23535513143/its-back-fbi-announcing-desire-to-wiretap-internet.shtml">better wiretapping capabilities</a> for new technologies, such as Skype.  Basically, the FBI argues that because "bad guys" might use those tools to communicate in secret, they need backdoors to make sure that they can keep tabs on the bad guys.
<br /><br />
But they're forgetting something: the FBI isn't necessarily the only one who will get access to those backdoors.  In fact, by requiring backdoors to enable surveillance on all sorts of systems, the FBI is almost guaranteeing that <a href="http://www.wired.com/opinion/2013/01/wiretap-backdoors/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Top+Stories%29" target="_blank">the bad guys will use those backdoors for their own nefarious purposes</a>.  It's not security, it's anti-security.
<br /><br />
This is why claims by the feds that we need cybersecurity legislation, like CISPA or the Cybersecurity Act, ring hollow.  If they really wanted more protected networks, they wouldn't keep asking for specific security holes to be <i>explicitly added</i> to those networks.
<blockquote><i>
<p>Two decades ago, the FBI complained it was having trouble tapping the then-latest cellphones and digital telephone switches.&nbsp;After extensive FBI lobbying, Congress passed the Communications Assistance for Law Enforcement Act (CALEA) in 1994, mandating that <em>all </em>telephone switches include FBI-approved wiretapping capabilities.</p>
<p>CALEA was justifiably controversial, not least because its requirement for &#8220;backdoors&#8221; across our communications infrastructure seemed like a security nightmare: How could we keep criminals and foreign spies from exploiting weaknesses in the new wiretapping features?&nbsp;Would we even be able to detect them when they did?</p>
<p>Those fears were soon borne out. In 2004, a mysterious someone &#8212; the case was never solved &#8212; <a href="http://spectrum.ieee.org/telecom/security/the-athens-affair/0">hacked the wiretap backdoors of a Greek cellular switch</a> to listen in on senior government officials &#8230; including the prime minister.</p>
<p>Think this could only happen abroad? Some years ago, the U.S. National Security Agency <a href="http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2028152">discovered</a> that every telephone switch for sale to the Department of Defense had security vulnerabilities in their mandated wiretap implementations. Every. Single. One.</p>
</i></blockquote>
Somehow, the FBI always thinks that if there are backdoors, only it will use them.  That is extreme wishful thinking.<br /><br /><a href="http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130114/20442421683/how-fbis-desire-to-wiretap-every-new-technology-makes-us-less-safe.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>can-you-hear-me-now?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130114/20442421683</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 2 Jan 2013 14:36:00 PST</pubDate>
<title>FBI, Working With Banks, Chose Not To Inform Occupy Leadership Of Assassination Plot On Its Leaders</title>
<dc:creator>Timothy Geigner</dc:creator>
<link>http://www.techdirt.com/articles/20130102/09481421547/fbi-working-with-banks-chose-not-to-inform-occupy-leadership-assassination-plot-its-leaders.shtml</link>
<guid>http://www.techdirt.com/articles/20130102/09481421547/fbi-working-with-banks-chose-not-to-inform-occupy-leadership-assassination-plot-its-leaders.shtml</guid>
<description><![CDATA[ Whatever you thought of the so-called "<a href="http://www.techdirt.com/blog/?tag=occupy">Occupy</a>" movement of the past year or so, it seems clear that there has been at least a bit of overreaction to them. I mean, treating these protests, which have, by and large, been peaceful, as terrorist groups is just silly. But, as you may have seen over the past few days, <a href="http://www.justiceonline.org/commentary/fbi-files-ows.html#documents" target="_blank">that's exactly what the FBI did</a> (as uncovered by the Partnership for Civil Justice Fund (PCJF)), and they did it in a coordinated manner with both <a href="http://www.guardian.co.uk/commentisfree/2012/dec/29/fbi-coordinated-crackdown-occupy">Homeland Security and privately held banking corporations</a>. This certainly isn't the first time government organizations have allowed for the appearance of impropriety this way, but just as when DHS held a <a href="http://www.techdirt.com/articles/20100630/14391410029.shtml">press conference</a> from Disney's HQ, there's a certain flaunting feeling when the coordination with private companies against the public is so blatant.<br />
<br />
All that being said, you'd at least expect the FBI, no matter what level of corporate bowing they wish to engage in, to at least keep American citizens apprised of threats against their life. Unfortunately, it would appear the FBI disagrees when the citizens in question are Occupy leadership, as they allowed a plot to murder <a href="http://www.digitaljournal.com/article/340232">Occupy leadership in Texas with suppressed sniper rifles</a> go untold until a rights group dug it up.
<blockquote>
<i>Last week, Digital Journal reported that the documents obtained by PCJF detailed how the FBI cooperated with the Department of Homeland Security, US military and private corporations to monitor and investigate Occupy Wall Street protesters as "domestic terrorists" and "criminals." The documents prove that federal agencies are "functioning as a de facto intelligence arm of Wall Street and corporate America," PCJF said.</i></blockquote>
<blockquote>
<i>Thorough analyses of the documents has now revealed a heavily redacted file that clearly mentions a plan to use snipers to assassinate Occupy protesters. The names of the groups or individuals involved in the murderous plot have been redacted, so it is impossible to identify them at this time. What is known is that the FBI never alerted any of the potential victims of the danger to their lives.</i></blockquote>
We're talking heavily redacted text here, which strips out a bunch of details, but here's the text that is available.
<blockquote>
<i>An identified [redacted] of October planned to engage in sniper attacks against protesters in Houston, Texas, if deemed necessary. An identified [redacted] had received intelligence that indicated the protesters in New York and Seattle planned similar protests in Houston, Dallas, San Antonio and Austin, Texas. [Redacted] planned to gather intelligence against the leaders of the protest groups and obtain photographs then formulate a plan to kill the leadership via suppressed sniper rifles.</i></blockquote>
What's plain as day is that some group somewhere was plotting to murder OWS leadership in Texas. It's also clear that the FBI never bothered to inform the targets of the threats against their lives. This stands in apparent contrast to how closely they worked and coordinated with private banks to handle the OWS protests as a whole.  And, remember, this is the same FBI who has put tremendous effort over the past few years into <a href="http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml">breaking up</a> its <a href="http://www.techdirt.com/articles/20120818/18363620090/fbi-created-terrorist-plot-fails-to-produce-single-terrorist-does-plenty-damage-to-individual-liberties.shtml">own</a> terrorist plots.  You'd think that when it had a chance to go after <i>actual plots</i> to assassinate leaders of a political movement, they might, you know, actually do something and then trumpet the success in stopping a real plot.  Apparently not.
<br />
<br />
So the lesson here is simple. If you're a private bank, the FBI will help you demonize non-violent protesters as "terrorists," but if you're a protester, you don't get to know that you might have an infrared dot dancing on the back of your head -- or have the FBI take it as serious as one of its own made up terrorist plots.<br /><br /><a href="http://www.techdirt.com/articles/20130102/09481421547/fbi-working-with-banks-chose-not-to-inform-occupy-leadership-assassination-plot-its-leaders.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130102/09481421547/fbi-working-with-banks-chose-not-to-inform-occupy-leadership-assassination-plot-its-leaders.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130102/09481421547/fbi-working-with-banks-chose-not-to-inform-occupy-leadership-assassination-plot-its-leaders.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>gee,-thanks</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130102/09481421547</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 29 Nov 2012 13:07:13 PST</pubDate>
<title>Facebook 'Likes' Considered Key Evidence In 'Terrorist' Plot</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121128/18205421172/facebook-likes-considered-key-evidence-terrorist-plot.shtml</link>
<guid>http://www.techdirt.com/articles/20121128/18205421172/facebook-likes-considered-key-evidence-terrorist-plot.shtml</guid>
<description><![CDATA[ We've written a few times about how the FBI has been doing a bang up job foiling <a href="http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml">its own terrorist plots</a>, so we're a bit skeptical every time we see headlines of some giant "terrorist bust."  Almost every time, once you dig into the details, it involves some gullible, confused suckers who had no actual connection to terrorists, but were led along by FBI agents and informers until they were "convinced" to take part in a "plot" that was entirely concocted by the FBI.  The latest headline-grabbing case of <a href="http://www.huffingtonpost.com/2012/11/20/four-california-men-arrested-terror_n_2162612.html" target="_blank">"arrested terrorists"</a> actually appears like it may have slightly more substance, however, in that they may have actually had some sort of connection to al Qaeda and the Taliban in Afghanistan.
<br /><br />
That doesn't mean that there still aren't some oddities in the case, however.  As a number of folks have sent over, reading through <a href="https://www.documentcloud.org/documents/526016-kabir-et-al-complaintsigned-2.html" target="_blank">the indictment</a> (also embedded below) shows that a significant chunk of the "evidence" seems to <a href="http://www.fightbacknews.org/2012/11/27/facebook-likes-used-evidence-material-support-terrorism" target="_blank">consist of Facebook "likes" and shared content</a> among the accused.  From the indictment:
<blockquote><i>
I have reviewed several of the social media web sites
for KABIR, SANTANA, DELEON, each of whom has posted radical prom
jihad content on their respective pages. Additionally, portions
of the social media show that DELEON and SANTANA "liked"
postings on KABIR's Facebook page as early as May 2011.
<br /><br />
Public items posted by KABIR to his social media
accounts include photographs of himself, non-extremist content,
radical Islamist content, and items reflecting a mistrust of
mainstream media, abuses by the government, conspiracy theories,
abuses by law enforcement, and the war in Afghanistan. KABIR's
radical postings include videos and links to videos of Al-Qa'ida
leader Anwar Al-Awlagi and his lectures, jihad--based videos
regarding Afghanistan and elsewhere, videos depicting mujahideen
fighters in Afghanistan and elsewhere, videos depicting
terrorist training camps and related activities, videos
depicting improvised explosive device attacks, and
articles regarding the death of American soldiers in
Afghanistan. For example, on July 6, 2012, KABIR shared a video
to his public Facebook page entitled "Knights of Khorasan
Islamic Emirate Operation Against an Army Base in
Margha." This video, which I have reviewed, depicts a suicide
bombing operation against a large base wherein the suicide-
bomber drives an explosives-laden truck into a base and
detonates it. The video bears the symbol of As-Sahab, Al--
Qa'ida's media wing, in the lower right corner.
<br /><br />
KABIR has "shared" several postings with SANTANA
and/or DELEON, both of whom have "liked" or commented on several
other postings by KABIR, including the following:
<blockquote>
a. On December 7, 2011, KABIR posted a video
entitled "Black Flags of Khorasan: Part 2" that he later
"shared" with DELEON.- (Based on my training and experience,
conversations with other agents, and research of publicly
available information, the black flag or banner refers to a
traditional flag flown by Muhammad and later by Islamic military
leaders. More recently, several jihadi groups and terrorists
have adopted the black flag as a symbol for jihad and mujahideen
fighters.)
<br /><br />
b. On or about January 5, 2012, KABIR shared a link
regarding negotiating with the Taliban. SANTANA "liked" the
post and SANTANA and KABIR engaged in a public exchange of
comments. SANTANA said, "they messed up know?" KABIR followed
SANTANA's comment with a comment that appeared to
include excerpts of a "Statement of Islamic Emirate of
Afghanistan," which discussed the Taliban's desire to expel the
United States from, and establish their own government in,
Afghanistan. SANTANA replied to KABIR's comment by writing "Oh yea!!!!"
<br /><br />
c. On January 5, 2012, KABIR posted a photo on his
Facebook page depicting a veiled and covered woman leaning on an
assault rifle. DELEON and KABIR exchanged comments on the photo
wherein DELEON said "...hey bro are coming back? whats goin
on? how long gona stay there?" KABIR replied "Naa.. not comin back... movin 4wd.... =D.... 1/2 
way 2 my destination.. =D."
<br /><br />
(Based on the context of this statement, including the fact that
KABIR was then in Germany, I believe that KABIR intended to
inform DELEON that he had commenced his journey to Afghanistan.)
<br /><br />
d. On January 19, 2012, DELEON "liked" a shared link
posted on KABIR's page of a video entitled "Dua of Sheikh
Muhammad al Mohaisany masjid al haram makkah." The video, which
I have reviewed as posted on KABIR's page, appears to be a
prayer for the success of the mujahideen and features various
photos including Al--Qa'ida leaders Usama Bin Laden and Ayman al
Zawahiri, 9/11 attacks, bloodied adults and children, and
Islamic fighters. The video also calls for the liberation of
Al-Aqsa, the mosque referenced in the 1998 Al-Qa'ida fatwa
described above.
<br /><br />
e. On February 13, 2012, SANTANA "liked" two shared
video links on KABIR's page, including one for a video entitled
"Imam Anwar al Awlaki -- A Story of Courage."
<br /><br />
f. On May 28, 2012, KABIR posted two stories
regarding the death of Al-Qa'ida leader Usama Bin Laden. DELEON
"liked" both stories; SANTANA "liked" one.
<br /><br />
g. On June 16, 2012, SANTANA "liked" a video,
produced by Al--Qa'ida's media wing, As-Sahab, shared by KABIR to
his Facebook page entitled "Ghuraba." This video, which I have
reviewed, appears to depict life as a mujahideen fighter and
includes several interviews. The video also features mujahideen
fighters firing artillery.
<br /><br />
h. On July 5, 2012, KABIR posted a photo featuring
Al-Qa'ida leader Anwar Al-Awlaqi which contained a quote from
Al-Awlaqi.  DELEON "liked" and "shared" the photo.
<br /><br />
i. On September 16, 2012, DELEON "liked" KABIR's shared link to a video entitled "The Truth Has Come and Falsehood has perished Part 1 Urdu."  This video, which I have reviewed, is a production by As-Sahab and begins with footage of Al-Awlaqi and discusses the war in Afghanistan.  The video also features current Al-Qa'ida leader Ayman Al-Zawahiri.
</blockquote>
On September 17, 2012 SANTANA "liked" KABIR's post of an article entitled "A Public Talk by Ustadz Abu M Jibriel AR: The Truth of The 9/11 Jihad Operation, The Plots Of The Enemies and The Zionist Conspiracy."
</i></blockquote>
There is, of course, other evidence including statements made by all the defendants.  For all we know they may have actually been planning attacks on US targets and the indictment is entirely appropriate.  But it certainly gives pause to suggest that "likes" and "shares" on Facebook are somehow evidence of terrorist intent.  It could certainly be seen as having a chilling effect for anyone who might "like" or "share" content on Facebook that is critical of the US government.<br /><br /><a href="http://www.techdirt.com/articles/20121128/18205421172/facebook-likes-considered-key-evidence-terrorist-plot.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121128/18205421172/facebook-likes-considered-key-evidence-terrorist-plot.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121128/18205421172/facebook-likes-considered-key-evidence-terrorist-plot.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>signal-of-intent?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121128/18205421172</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 26 Nov 2012 09:14:00 PST</pubDate>
<title>Opportunistic Politicians Lean On The FBI And Twitter To Shut Down Terrorist Accounts</title>
<dc:creator>Tim Cushing</dc:creator>
<link>http://www.techdirt.com/articles/20121124/19452121134/opportunistic-politicians-lean-fbi-twitter-to-shut-down-terrorist-accounts.shtml</link>
<guid>http://www.techdirt.com/articles/20121124/19452121134/opportunistic-politicians-lean-fbi-twitter-to-shut-down-terrorist-accounts.shtml</guid>
<description><![CDATA[ I have no idea what it is with certain politicians that makes them believe they can somehow "curb" violence by cordoning off a section of the internet. They don&#39;t seem to realize that determined individuals will <a href="http://www.techdirt.com/articles/20110815/03054815523/as-governments-get-censorship-happy-new-technologies-popping-up-to-route-around-that.shtml" target="_blank">simply route around</a> their half-assed roadblock without breaking a sweat. Even worse, they don&#39;t seem to realize that useful information on violent groups and individuals can often be gleaned from the very same lines of communication they&#39;re trying to cut.<br />
<br />
In this case, it's very much like grandstanding politicians trying to shut down "human traffickers" like Backpages and Craigslist, failing to understand that law enforcement can <a href="http://www.techdirt.com/articles/20121002/07354820569/oh-look-police-can-use-backpagecom-to-track-down-arrest-convict-pimps-prostitutes.shtml" target="_blank">use the same services</a> to track down offenders. Rather than look for the upside of having a live feed from the enemy front (or realize the ultimate futility of their efforts), <a href="http://thehill.com/blogs/global-affairs/terrorism/269141-gaza-violence-leads-lawmakers-to-call-for-twitter-shuttering" target="_blank">these lawmakers have chosen to throw a bunch of effort (or at least, words) behind a bad idea</a>.
<blockquote>
<i>Seven House Republicans asked the FBI in September to demand that Twitter take down the accounts of U.S.-designated terrorist groups, such as Hamas, Hezbollah and Somalia&#39;s al Shabaab. The letter to FBI Director Robert Mueller was spearheaded by Rep. Ted Poe (R-Texas), who said Wednesday that the recent events vindicated the request.</i><br />
<br />
<i>&ldquo;Allowing foreign terrorist organizations like Hamas to operate on Twitter is enabling the enemy,&rdquo; Poe said in an e-mailed statement to The Hill. &ldquo;Failure to block access arms them with the ability to freely spread their violent propaganda and mobilize in their War on Israel.</i></blockquote>
Now, I&#39;m not going to claim to be smarter than these politicians (although you&#39;re certainly welcome to make that claim for me in the comment threads), but I&#39;m curious as to how they arrived at the conclusion that blocking Twitter accounts would somehow result in less violence committed by terrorists. One <i>could</i> argue that breaking down a line of communication might result in some temporary disruption, but I&#39;ve got to believe that Twitter isn&#39;t the <i>only</i> line of communication Hamas has.<br />
<br />
Shutting down these accounts would do little more than a) make these politicians feel better about having done something, b) annoy (and possibly provoke) already irritable and violent groups, and c) move communication anti-terrorist entities rely on to a new channel possibly unavailable to them. The downside <i>easily</i> outweighs the upside, because the "upside" only benefits these seven lawmakers, giving them a feeling of power and self-righteousness, which will be cold comfort to those who might actually be using these feeds to glean intelligence and help defend themselves.<br />
<br />
Then there&#39;s this amazing sentence, which must have been composed by Poe at a cost of one IQ point per letter:
<blockquote>
<i>The FBI and Twitter must recognize sooner rather than later that social media is a tool for the terrorists.</i></blockquote>
<i>Any</i> form of information dissemination can be considered a "tool" for terrorists. Imbuing Twitter with some sort of terrorist-defeating powers is ridiculous. Berating the FBI and Twitter for aiding and abetting terrorism through inaction is even more so. This is merely a continuation of Poe&#39;s anti-Twitter obsession, which <a href="http://poe.house.gov/index.php?option=com_content&#038;view=article&#038;id=8832:german-nazis-blocked-by-twitter-whos-next&#038;catid=119:in-the-news" target="_blank">began back in September when he first penned a letter to the FBI requesting the takedown of these "terrorist" accounts</a>, citing (of all things), Twitter&#39;s decision to <a href="http://www.techdirt.com/articles/20121018/00183120742/twitter-cuts-off-illegal-neo-nazi-group-account-germany.shtml" target="_blank">block a neo-Nazi account</a> in Germany. (The account could still be read anywhere else in the world, or even in Germany with minimal effort.)<br />
<br />
<a href="http://freebeacon.com/terror-twitter/" target="_blank">Poe is once again attempting to use Twitter&#39;s own statement against it</a>, but the FBI just isn&#39;t giving this group of lawmakers the one thing they need to get their way:
<blockquote>
<i>&ldquo;Twitter maintains that it will take down any account requested by the FBI,&rdquo; seven Republican members of Congress wrote to the FBI last month. &ldquo;As of this writing, the FBI has not made a single request to Twitter to take an account down.&rdquo;</i></blockquote>
And (once again), Poe and his co-signers are using recent events to further their own agenda.
<blockquote>
<i>&ldquo;Not one account has been shut down, unlike on YouTube and Facebook,&rdquo; Poe told the Free Beacon.</i><br />
<br />
<i>&ldquo;Twitter is not going to take it upon themselves to shut them down,&rdquo; which is why the FBI needs to take action, Poe said.</i></blockquote>
The FBI isn&#39;t buying it, however.
<blockquote>
<i>FBI Special Agent Jason Pack told the Free Beacon, &ldquo;The FBI received the Congressman&rsquo;s letter and will respond to it appropriately.&rdquo;</i></blockquote>
One assumes Pack "responded" by tossing the angry letter into the nearest trash can, possibly running it through the shredder first. The latest missive means someone at the FBI will need to empty the trash can, but given the results of Poe&#39;s previous demands, I highly doubt Twitter will be shuttering any accounts.<br />
<br />
Poe has also expressed his disappointment in the Obama administration for not pushing for more Twitter shutdowns.
<blockquote>
<i>Poe speculated that one reason the Obama administration has not pursued the issue is because terrorists&rsquo; Twitter pages are a rich vein for the intelligence community to mine.</i><br />
<br />
<i>Poe, however, said that this is not a good enough reason to give these radical actors free rein on the Internet.</i><br />
<br />
<i>&ldquo;If that&rsquo;s [the administration&rsquo;s] only way of knowing&rdquo; what terrorists are up to, &ldquo;we&rsquo;ve got some serious problems with our intelligence service,&rdquo; Poe said.</i></blockquote>
There&#39;s Poe&#39;s problem. He views Twitter as the <i>only</i> thing. In his mind, it&#39;s the <i>only&nbsp;</i>source of communication for terrorists and it&#39;s the <i>only</i> source of intel for the intelligence community. Poe has seized on Twitter as the <i>only</i> problem and won&#39;t be dissuaded easily, no matter how often the FBI refuses to indulge his "social media = terror" hobby horse.
<blockquote>
<i>The Free Beacon&#39;s Republican slant inadvertently suggests that Poe may just be kicking around Twitter because its "best friends" with Obama.</i><br />
<br />
<i>Twitter&rsquo;s Washington D.C. lobbying team is comprised of several Obama administration confidants and former Democratic Hill staffers.&nbsp;Adam Sharp, the site&rsquo;s top government liaison, formerly served as deputy chief of staff for Sen. Mary Landrieu (D., La.).&nbsp;Its global public policy official, Colin Crowell, was a senior aide to Rep. Ed Markey (D., Mass.), while Twitter&rsquo;s head of international strategy, Katie Jacobs Stanton, once worked with the Obama administration on new media strategies.</i><br />
<br />
<i>Since 2011, several individuals who list their employer as Twitter have donated primarily to Democrats, including the Obama campaign and Massachusetts Senate candidate Elizabeth Warren.</i></blockquote>
So... maybe it&#39;s not really about terrorism. Maybe it&#39;s just good, old fashioned partisanship sporting War on Terror clothing. No matter how you slice it, though, there&#39;s only one thing it <i>truly&nbsp;</i>is: stupid.<br /><br /><a href="http://www.techdirt.com/articles/20121124/19452121134/opportunistic-politicians-lean-fbi-twitter-to-shut-down-terrorist-accounts.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121124/19452121134/opportunistic-politicians-lean-fbi-twitter-to-shut-down-terrorist-accounts.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121124/19452121134/opportunistic-politicians-lean-fbi-twitter-to-shut-down-terrorist-accounts.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>and-then-what?-linkedin?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121124/19452121134</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 15 Nov 2012 09:25:24 PST</pubDate>
<title>If There Needs To Be An Investigation, It Should Be About Why The FBI Was Reading Certain Emails</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml</link>
<guid>http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml</guid>
<description><![CDATA[ While some have noted the <a href="http://www.newyorker.com/online/blogs/newsdesk/2012/11/david-petraeus-and-the-surveillance-state.html?mbid=social_retweet&#038;buffer_share=8e10a&#038;utm_source=buffer">irony</a> of General Petreaus being taken down due to online surveillance methods that he should have been aware of, the case is bringing growing attention to an issue many of us have been discussing for a while: how easy it is for law enforcement to snoop through your email.  We <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml">raised</a> the question already, but as more info comes out, the whole thing is looking that much more questionable.
<br /><br />
Julian Sanchez keeps trying to find out exactly what legal process the FBI used to go through a variety of email accounts based on an apparently non-criminal cyberstalking claim (which was apparently brought to the FBI by a non-cyber-focused agent who had seemed to have a crush on the "victim"of the cyberstalking), and notes that there are <a href="http://www.npr.org/blogs/itsallpolitics/2012/11/13/165050714/petraeus-scandal-raises-concerns-about-email-privacy" target="_blank">big questions</a> about what process was used to go through these emails and how much oversight was involved:
<blockquote><i>
To Julian Sanchez, a research fellow at the Cato Institute, the real scandal over the Petraeus affair is not the extramarital sex, but the invasion of privacy.
<br /><br />
"Law enforcement and certainly intelligence agencies have an incredible amount of ability to gather huge volumes of detailed information about people's most intimate online communications, a lot of it without requiring a full-blown warrant, a lot of it without requiring even any kind of judicial approval," Sanchez said.
</i></blockquote>
Meanwhile, Chris Soghoian, working for the ACLU, highlights some of what's been revealed about the snooping.  For example, FBI agents tracked down Patricia Broadwell as the email sender, even though she was using throwaway accounts, because webmail providers record the IP address from whence someone logs in -- and Broadwell didn't conceal that info.  Apparently, the IP addresses were a series of hotels, and cross-checking with guest lists, it didn't take long to narrow down the only real suspect.  Oh, and none of that info required judicial oversight for the FBI to get:
<blockquote><i>
The guest lists from hotels, IP login records, as well as the creative request to email providers for &#8220;information about other accounts that have logged in from this IP address&#8221; are all forms of data that the government can obtain with a subpoena. There is no independent review, no check against abuse, and further, the target of the subpoena will often never learn that the government obtained data (unless charges are filed, or, as in this particular case, government officials eagerly leak details of the investigation to the press). Unfortunately, our existing surveillance laws really only protect the &#8220;what&#8221; being communicated; the government&#8217;s powers to determine &#8220;who&#8221; communicated remain largely unchecked.
</i></blockquote>
He also delves into the method by which Petreaus and Broadwell communicated -- by sharing an account and communicating via "drafts" that were saved.  For the head of the CIA you'd think he'd use a method that wasn't long known to be just as (if not more) insecure than regular email.  Soghoian tears apart this supposedly "secret" method of communicating:
<blockquote><i>
<p>For more than a decade, a persistent myth in Washington DC, fueled by several counterterrorism experts, has been that it is possible to hide a communications trail by sharing an email inbox, and instead saving emails in a &#8220;draft&#8221; folder. This technique has been used by <a href="http://www.news24.com/World/News/Web-replaces-training-camps-20051027">Khaled Sheikh Mohammed</a>, <a href="http://www.investigativeproject.org/documents/case_docs/864.pdf">Richard Reid</a> (the shoe bomber), the 2004 <a href="http://www.nytimes.com/2006/04/27/world/europe/27iht-spain.html?_r=0">Madrid train bombers</a>, terrorists <a href="http://www.spiegel.de/international/germany/widening-the-net-german-investigators-seek-identities-of-terror-masterminds-a-504327.html">in Germany</a>, as well as some domestic &#8220;<a href="http://www.denverpost.com/news/ci_5988241">eco-terrorists</a>.&#8221; This technique has appeared in <a href="http://www.investigativeproject.org/documents/case_docs/864.pdf">federal court documents</a> as early as 2003, and was described in a <a href="http://www.stlr.org/html/volume5/hinnen.pdf">law journal article</a> written by a DOJ official in 2004. It is hardly a state secret.</p>
<p>Apparently, this method was also used by General Petraeus. <a href="http://m.apnews.com/ap/db_289563/contentdetail.htm?contentguid=VOlvNjF4">According to</a> the Associated Press, &#8220;[r]ather than transmitting emails to the other's inbox, they composed at least some messages and instead of transmitting them, left them in a draft folder or in an electronic &#8216;dropbox,&#8217; the official said. Then the other person could log onto the same account and read the draft emails there. This avoids creating an email trail that is easier to trace.&#8221;</p>
<p>The problem is, like so many other <a href="http://privacy-pc.com/articles/how-terrorists-encrypt-threatscape-overview.html">digital security methods</a> employed by terrorists, it doesn&#8217;t work. Emails saved in a draft folder are stored just like emails in any other folder in a cloud service, and further, the providers can be <a href="http://www.law.cornell.edu/uscode/text/18/2703">compelled</a>, prospectively, to save copies of everything (so that deleting the messages after reading them won&#8217;t actually stop investigators from getting a copy).</p>
<p>Ironically enough, by storing emails in a draft folder, rather than an inbox, individuals may be making it even easier for the government to intercept their communications. This is because the Department of Justice <a href="https://ssd.eff.org/3rdparties/protect/email-inbox">has argued</a> that emails in the &#8220;draft&#8221; or &#8220;sent mail&#8221; folder are not in &#8220;electronic storage&#8221; (as defined by the Stored Communications Act), and thus not deserving of warrant protection. Instead, the government has argued it should be able to get such messages with a mere subpoena.</p>
</i></blockquote>
Got all that?  It's even more info that the FBI may have been able to obtain without ever having to get approval from a judge.  That's not to say they <i>didn't</i> necessarily go before a judge to get a warrant or similar tool for surveillance, but it does highlight just how much info the FBI <i>can</i> obtain without any real oversight, and how it's entirely possible for it to be abused -- taking a very limited situation (non-criminal online harassment) and turning it into something massive.
<br /><br />
In fact, as the EFF's Trevor Timm notes, we should be <a href="http://www.foreignpolicy.com/articles/2012/11/14/investigate_the_fbi" target="_blank">investigating the FBI</a> over why it was snooping through people's emails and how frequently it does this.  He notes, as others have, that nothing about the origination of this case should have resulted in FBI involvement, let alone reading people's emails.  Remember, early on, no one knew this had anything to do with General Petreaus or any other high ranking official:
<blockquote><i>
<p>The spark that set events in motion was a handful of
allegedly harassing emails sent anonymously to Kelley, a friend of Petraeus's,
which she brought to a friend at the FBI. Yet it's unclear why an investigation
was ever opened, given that everything publicly known about the emails suggests
they weren't illegal.
</p>
<p>
As <a href="http://www.thedailybeast.com/articles/2012/11/12/exclusive-paula-broadwell-s-emails-revealed.html">the <i>Daily Beast</i> reported</a>, they
said things like "Who do you think you are? ... You parade around the base ... You
need to take it down a notch." The story noted, "when the FBI friend showed the emails to
the cyber squad in the Tampa field office, her fellow agents noted that the
absence of any overt threats."
</p>
<p>
It seems the deciding factor in opening the investigation
was not the emails' content, but the fact that the FBI agent was friendly with
Kelley. (Even more disturbing, the same FBI agent <a href="http://www.huffingtonpost.com/2012/11/13/jill-kelley-petraeus-fbi_n_2120526.html">has now been accused</a> of becoming "obsessed" with the Tampa socialite, sent
shirtless pictures to her, and has been removed from the case.)</p>
</i></blockquote>
Basically, it sounds like the FBI had very questionable reasons for digging all that deep into this case at all.  Michael Davis, at the Daily Beast, notes that the emails were <a href="http://www.thedailybeast.com/articles/2012/11/12/exclusive-paula-broadwell-s-emails-revealed.html" target="_blank">typical "cat-fight stuff,"</a> with no indication of illegal activity:
<blockquote><i>
When the FBI friend showed the emails to the cyber squad in the Tampa field office, her fellow agents noted that the absence of any overt threats.
<br /><br />
&#8220;No, &#8216;I&#8217;ll kill you&#8217; or &#8216;I'll burn your house down,&#8217;&#8221; the source says. &#8220;It doesn&#8217;t seem really that bad.&#8221;
<br /><br />
The squad was not even sure the case was worth pursuing, the source says.
<br /><br />
&#8220;What does this mean? There&#8217;s no threat there. This is against the law?&#8221; the agents asked themselves by the source&#8217;s account.
<br /><br />
At most the messages were harassing. The cyber squad had to consult the statute books in its effort to determine whether there was adequate legal cause to open a case.
<br /><br />
&#8220;It was a close call,&#8221; the source says. 
</i></blockquote>
So while there's all sorts of talk of investigations into who should have known the details of what was going on at what time, no one seems to be questioning why a simple "cat fight" resulted in the FBI digging in and reading people's emails.  Yet, that seems like something we should all be quite worried about.
<br /><br />
Indeed, if there's any "benefit" to come out of this, perhaps it's that more and more people are hopefully <a href="http://www.nytimes.com/2012/11/14/us/david-petraeus-case-raises-concerns-about-americans-privacy.html?smid=tw-nytimes&#038;_r=0" target="_blank">realizing just how easy it is for the FBI to spy on people</a> electronically.<br /><br /><a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>friendly-fire</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121114/02501621041</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 14 Nov 2012 09:45:32 PST</pubDate>
<title>The DHS And FBI Present: You Might Be A Terrorist If... (Hotel Guest Edition)</title>
<dc:creator>Tim Cushing</dc:creator>
<link>http://www.techdirt.com/articles/20121110/17435521005/dhs-fbi-present-you-might-be-terrorist-if-hotel-guest-edition.shtml</link>
<guid>http://www.techdirt.com/articles/20121110/17435521005/dhs-fbi-present-you-might-be-terrorist-if-hotel-guest-edition.shtml</guid>
<description><![CDATA[ As we seem to be told repeatedly, seeing something and saying something is perhaps the greatest duty an American citizen can perform in service to this country. It&#39;s simply not enough anymore to install an American flag in the front yard and purchase domestic vehicles. Now, every citizen should be keeping his eye out for (and on) his fellow citizens. The price of freedom may be eternal vigilance, but the price of security is endless paranoia.<br />
<br />
To that end, <a href="http://publicintelligence.net/dhs-fbi-suspicious-hotel-guests/" target="_blank">the DHS and the FBI have joined forces to compile a list of oddities</a> that might well indicate you are sleeping one paper-thin wall away from death personified&nbsp;(via <a href="http://www.schneier.com/blog/archives/2012/11/how_to_tell_if.html" target="_blank">Bruce Schneier&#39;s fine blog</a>).&nbsp;
<blockquote>
<i>Possible indicators of terrorist behaviors at hotels: The observation of multiple indicators may represent&mdash;based on the specific facts or circumstances&mdash;possible terrorist behaviors at hotels:</i><br />
<br />
<i>- Not providing professional or personal details on hotel registrations&mdash;such as place of employment, contact information, or place of residence.</i></blockquote>
[Place of employment? Seriously? "Alan Smithee, 123 Main Street, Anytown USA 5578H. Occupation: <strike>Death</strike> Hug Merchant."]&nbsp;
<blockquote>
<i>- Using payphones for outgoing calls or making front desk requests in person to avoid using the room telephone.</i></blockquote>
[Payphones? Are terrorists unaware of "burners?"]
<blockquote>
<i>- Interest in using Internet cafes, despite hotel Internet availability.</i></blockquote>
[This seems to suggest that the Feds have already let themselves in the back door on the (sometimes prohibitively expensive) hotel wi-fi.]
<blockquote>
<i>- Non-VIPs who request that their presence at a hotel not be divulged.</i></blockquote>
[Let me get this straight: normal, "non-VIP" people will just have their information divulged to whoever asks, simply because they&#39;re not "important" enough to deserve privacy? Perhaps that should be posted on a sign somewhere up by the check-in desk: "All guests are created equal, but some are more equal than others."]
<blockquote>
<i>- Extending departure dates one day at a time for prolonged periods.</i></blockquote>
[Something only a terrorist would do. Let me give you a real life, happened-to-me example: in town to visit the famous Mayo Clinic seeking medical help for my wife. What started out as three days turned into seven days, with the stay at the hotel being extended one day at a time. Open-ended hotel stays: not just for terrorists anymore.]
<blockquote>
<i>- Refusal of housekeeping services for extended periods.</i></blockquote>
[This I believe. No one wants to make their own bed.]
<blockquote>
<i>- Extended stays with little baggage or unpacked luggage.</i></blockquote>
[Unless the staff have been instructed to do a little snooping in every room, how would anyone know how much baggage someone brought and never unpacked? No doubt this will soon make its way onto propaganda posters: "<i>HAVE YOU PACKED ENOUGH? Traveling light is traveling with terror</i>."]
<blockquote>
<i>- Access or attempted access to areas of the hotel normally restricted to staff.</i><br />
<br />
<i>- Use of cash for large transactions or a credit card in someone else&rsquo;s name.</i><br />
<br />
<i>- Requests for specific rooms, floors, or other locations in the hotel.</i></blockquote>
[Close to the parking lot, ground floor. Convenience or criminal intent?]
<blockquote>
<i>- Use of a third party to register.</i></blockquote>
<blockquote>
<i>- Multiple visitors or deliveries to one individual or room.</i></blockquote>
[Ruthless cabal or post-prom drinking party?]
<blockquote>
<i>- Unusual interest in hotel access, including main and alternate entrances, emergency exits, and surrounding routes.</i></blockquote>
[IN CASE OF FIRE, PLEASE REMAIN IGNORANT.]
<blockquote>
<i>- Use of entrances and exits that avoid the lobby or other areas with cameras and hotel personnel.</i></blockquote>
[Like the one nearest your vehicle?]
<blockquote>
<i>- Attempting to access restricted parking areas with a vehicle or leaving unattended vehicles near the hotel building.</i></blockquote>
[During your stay at the hotel, please remain in your vehicle at all times.]
<blockquote>
<i>- Unusual interest in hotel staff operating procedures, shift changes, closed-circuit TV systems, fire alarms, and security systems.</i><br />
<br />
<i>- Leaving the property for several days and then returning.</i><br />
<br />
<i>- Abandoning a room and leaving behind clothing, toiletries, or other items.</i></blockquote>
[You&#39;d think the Feds would be happy to have CLUES and EVIDENCE just laying around.]
<blockquote>
<i>- Noncompliance with other hotel policies.</i></blockquote>
[Ah. The handy catch-all. If the other points don&#39;t directly implicate you, then maybe something from this list will!]<br />
<br />
So, to be a standup, non-terrorist citizen, here&#39;s what you need to do:<br />
<br />
Pack for two weeks if you&#39;re staying for two days. Park your vehicle a safe distance away from the hotel, perhaps across the street or at another hotel. Leaving your vehicle dangerously unattended, walk directly through the main entrance with hands open and displayed in a non-threatening manner.<br />
<br />
When registering, present as many forms of ID as possible. Be sure to mention where you work EVEN if no one asks. Brag if you have to. Hand out business cards to the staff. Let the desk clerk know that your stay here is no secret and that your room number should be given to anyone who asks, including those who don&#39;t ask. When asked if you have a room preference, answer with a bright, but unfrightening, "I&#39;ve never had a &#39;preference&#39; in my life! I&#39;m easy to please and an American citizen!"<br />
<br />
Head directly to your room, carefully avoiding eye contact with doors marked "Employees Only." Immediately unpack all of your luggage. Make several phones calls using ONLY the in-room phone. Call the front desk several times so as to avoid appearing suspicious. Return to your unattended vehicle and clone yourself using existing, but non-potentially-dangerous technology. Make no sudden movements and keep your ID and passport displayed prominently. Return one of yourselves to your hotel room, again using the front entrance in a non-threatening, flag-waving manner.<br />
<br />
Stay in your room. Use the provided wi-fi. Avoid sites that use any form of encryption. Be careful not to stay in your room too long. When venturing out for something to eat or a non-suspicious conversation with the suspicious staff, avoid stairwells, hallways, exits/entrances, and connecting roads. On second thought, just stay in your room. This will make it easier to avoid being caught up in the middle of a personnel shift change.<br />
<br />
If you must leave your room, smile and wave at each and every security camera. Lift your shirt to display lack of weapons, explosives or identifiable scars and tattoos. If purchasing anything from the hotel, use only credit cards, checks or DNA. Return to your room using the most surveilled route. Use the in-room phone to order room service. Turn down the delivery when it comes, stating that you&#39;re trying to keep visitors and deliveries to a minimum. Apologize for not having any cash to tip with, but explain that this lack of cash directly contributes (not monetarily, of course) to the safety of everyone in the hotel. Repeat this apology to housekeeping when they arrive, being sure to answer the door before they get to the second knock. Try to ignore their just-out-of-earshot griping about having to clean around the scattered contents of four large suitcases. Smile in a non-threatening fashion and shrug as if to say, "LOOK AT HOW MUCH I DON&#39;T HAVE TO HIDE."<br />
<br />
If you find that, despite your careful planning, your stay is going to be extended indefinitey, switch hotels. Pack all of your belongings carefully. Police the room for any stray socks, unused condoms or stealable toiletries. Turn the coffee maker OFF (if applicable). Leave in an unhurried fashion, but don&#39;t dawdle. Return to your attended vehicle and (most likely) dead clone. Drive to another hotel, preferably one a non-suspicious distance away and repeat the process. Once you return to your hometown, turn yourself into the nearest authorities for a thorough post-travel debriefing.<br /><br /><a href="http://www.techdirt.com/articles/20121110/17435521005/dhs-fbi-present-you-might-be-terrorist-if-hotel-guest-edition.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121110/17435521005/dhs-fbi-present-you-might-be-terrorist-if-hotel-guest-edition.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121110/17435521005/dhs-fbi-present-you-might-be-terrorist-if-hotel-guest-edition.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>glass-container-in-the-pool-area?-threat-level-upgraded-to-'orange'</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121110/17435521005</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 13 Nov 2012 10:27:00 PST</pubDate>
<title>How Much Did The FBI Snoop On Email Messages To Uncover The Petreaus Situation?</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml</link>
<guid>http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml</guid>
<description><![CDATA[ As you're probably aware since it's "the big story" right now, General David Petreaus stepped down last week after an FBI investigation turned up an affair he'd been having.  It seems that every few hours more news "breaks" on the story, and it keeps getting more involved, with a growing number of players (and with each new revelation the story gets more and more bizarre).  However, some have started wondering how and why the FBI was snooping on various emails.  The original story was that it came about after Petreaus' mistress allegedly sent threatening (anonymous) emails to another woman, who reported them to the FBI.  From that came a wider investigation, which supposedly may involve another General and a variety of other players.  But some are realizing that this seems to show <a href="http://www.huffingtonpost.com/2012/11/12/petraeus-fbi-gmail_n_2119319.html" target="_blank">how the FBI has pretty free rein in terms of snooping on email accounts</a> hosted online:
<blockquote><i>
Under the 1986 Electronic Communications Privacy Act, federal authorities need only a subpoena approved by a federal prosecutor &#8212; not a judge &#8212; to obtain electronic messages that are six months old or older. To get more recent communications, a warrant from a judge is required. This is a higher standard that requires proof of probable cause that a crime is being committed.
</i></blockquote>
But even that isn't entirely clear.  Folks like <a href="https://twitter.com/normative" target="_blank">Julian Sanchez</a> have been puzzling through the timeline of events and wondering how a simple investigation into a small number of "rude" (but not illegal) emails <a href="https://twitter.com/normative/status/268237889429729280" target="_blank">then uncovered <i>thousands</i></a> of questionable emails involving a <i>different</i> general as alleged in <a href="http://www.washingtonpost.com/world/national-security/scandal-probe-ensnares-commander-of-us-nato-troops-in-afghanistan/2012/11/13/a2a27232-2d7d-11e2-a99d-5c4203af7b7a_story.html?tid=sm_twitter_washingtonpost" target="_blank">the news that broke last night</a>.  It feels like the FBI may have taken a simple report of misconduct (which may have been driven by another love triangle issue involving an FBI agent who seemed to take the whole thing a <i>lot more</i> personally than makes sense) and turned it into a <a href="https://twitter.com/normative/status/268244620234858497" target="_blank">massive fishing expedition</a>.
<br /><br />
Given how fast new parts of this story keep breaking, I'm sure there are still a number of other dominoes to fall, but hopefully this actually gets people to pay attention to just how easy it is for law enforcement to snoop on people's emails these days based on next to nothing.<br /><br /><a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>all-for-what?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121113/03121121028</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 17 Sep 2012 12:30:00 PDT</pubDate>
<title>FBI Continues To Foil Its Own Devised Terrorist Plots</title>
<dc:creator>Timothy Geigner</dc:creator>
<link>http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml</link>
<guid>http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml</guid>
<description><![CDATA[ It seems there&#39;s a new pattern showing itself every time I read a news report in which the FBI <a href="http://www.techdirt.com/articles/20120818/18363620090/fbi-created-terrorist-plot-fails-to-produce-single-terrorist-does-plenty-damage-to-individual-liberties.shtml">proudly announces</a> it foiled a terrorist plot. That pattern goes something like this: hear that a huge explosion was averted and lives were saved, find out the plotter was an American citizen, find out he was under investigation by the FBI for several years, and then finally find out that it was the FBI that egged on the suspect and built his "bomb" for him. In other words, the only way these things could become less impressive is if the FBI actually decided to quit finding these loner folks to urge into violence and just built their own physical straw man to parade in front of the cameras.
<br /><br />
This whole game of pretend law enforcement showed up at my doorstep this weekend, when the <a href="http://www.chicagotribune.com/news/local/breaking/chi-teen-accused-in-bomb-plot-in-court-today-20120917,0,615862.story">FBI announced yet another arrest of a potential terrorist</a>, this time an 18 year old suburbanite whom the FBI (you guessed it) encouraged to try to bomb a downtown bar in Chicago.
<blockquote>
<i>Adel Daoud, 18, was arrested following a months-long FBI undercover investigation. He was taken into custody after he parked a Jeep Cherokee in front of the bar Friday night and walked into a nearby alley where he tried to detonate the device, court documents allege.</i>
<br /><br />
<i>The bomb, which was inert and had been constructed by FBI technicians, didn&#39;t explode, according to federal authorities.</i>
</blockquote>
Oddly, the article notes that Daoud allegedly gave the FBI more than two dozen high profile Chicago targets to &#39;splode, but decided eventually on this unnamed bar instead, perhaps because they had, like, totally taken his fake ID that one time. Actually, I just made that up because I can&#39;t think of a single reason why a supposed terrorist would settle on a drinkery as their target.
<br /><br />
Now, it is true that Daoud professed his wish to participate in jihad. It is true that he attempted to set off this pseudo bomb. He does indeed sound like a disturbed kid that needs to be dealt with in some fashion. But would he have participated in any of this without the urging of the FBI?
<br /><br />
Perhaps more importantly, is foiling their own plots the best use of law enforcement in Chicago, a city that appears to be engaged in a concerted effort to have the most <a href="http://homicides.redeyechicago.com/">murders ever</a> in a calendar year?<br /><br /><a href="http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120917/05193620404/fbi-continues-to-foil-its-own-devised-terrorist-plots.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>sarcastic-golf-clap</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120917/05193620404</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 10 Sep 2012 11:30:00 PDT</pubDate>
<title>Publishing Company Admits That Anonymous' UDID Data Leak Was Actually Taken From Their Database</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120910/11031720329/publishing-company-admits-that-anonymous-udid-data-leak-was-actually-taken-their-database.shtml</link>
<guid>http://www.techdirt.com/articles/20120910/11031720329/publishing-company-admits-that-anonymous-udid-data-leak-was-actually-taken-their-database.shtml</guid>
<description><![CDATA[ Last week, there was a big story in which AntiSec, a part of Anonymous, claimed to have downloaded personal info on about 12 million Apple device users <a href="http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml">from</a> an FBI agent's computer.  They released about a million UDIDs to "prove" it, claiming they had a lot more information as well.  The FBI quickly <a href="http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml">denied</a> that the evidence came from them, and Apple later insisted that it had not shared such info with the FBI either.  Now, a Florida company, Blue Toad, has told NBC that an analysis of the leaked data and its own data set has made it almost certain <a href="http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week" target="_blank">that the data actually originated from Blue Toad's servers</a> (whether or not it eventually got onto an FBI machine is a separate issue):
<blockquote><i>
"That's 100 percent confidence level, it's our data," [Blue Toad CEO Paul] DeHart said. "As soon as we found out we were involved and victimized, we approached the appropriate law enforcement officials, and we began to take steps to come forward, clear the record and take responsibility for this.&#8221;
</i></blockquote>
Apparently, Blue Toad's technology is used by tons of app publishers to help them build their own digital editions and apps -- which is why it would have access to all of this information.
<br /><br />
The researcher who figured out that the data came from Blue Toad, David Schuetz, has pointed out that he can't say for certain if the FBI later got the same data, or where Anonymous got the data, but he does suggest that people should be skeptical of claims like that:
<blockquote><i>
&#8220;It does raise questions,&#8221; he said. &#8220;I think people need to question what they see online, whether it comes from Anonymous or from a news organization or from a politician or from a corporation.  You need to not take things at face value right away and jump straight to what you think it says.  Somebody says, &#8216;Oh, this came from the FBI, everybody believes it. Well, let&#8217;s think about (it).&#8221; 
</i></blockquote>
Good advice.<br /><br /><a href="http://www.techdirt.com/articles/20120910/11031720329/publishing-company-admits-that-anonymous-udid-data-leak-was-actually-taken-their-database.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120910/11031720329/publishing-company-admits-that-anonymous-udid-data-leak-was-actually-taken-their-database.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120910/11031720329/publishing-company-admits-that-anonymous-udid-data-leak-was-actually-taken-their-database.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>the-plot-thickens</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120910/11031720329</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 4 Sep 2012 15:12:36 PDT</pubDate>
<title>FBI Denies That Hacked Apple Info Came From FBI</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml</link>
<guid>http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml</guid>
<description><![CDATA[ Earlier today, we wrote about Antisec <a href="http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml">releasing</a> some Apple UDIDs to show that it had apparently collected info on 12 million Apple users, which it claims to have found when it hacked into an FBI's laptop.  As we noted at the time, the file was called "NCFTA_iOS_devices_intel.csv," which implied that it came from the National Cyber-Forensics &#038; Training Alliance, a vehicle set up to allow companies to share info with the government.  However, the FBI is now <a href="https://twitter.com/FBIPressOffice/status/243089221529763840" target="_blank">flat out denying</a> that any of its laptops had been hacked or that it had the info.  Antisec is, to say the least, <a href="https://twitter.com/AnonymousIRC/status/243090729398829056" target="_blank">unimpressed</a>:
<center>
<a href="http://imgur.com/xaFgV"><img src="http://i.imgur.com/xaFgV.png" /></a>
</center>
The FBI's denial comes after an earlier, weaker denial, in which they just said they had "no evidence" to support the story.  Now they're saying it's "TOTALLY FALSE" (all caps for EMPHASIS).  And, of course, Antisec folks are reminding the FBI (and the public) that <a href="https://twitter.com/AnonymousIRC/status/243095317644451840" target="_blank">they're still sitting on 3TB of additional data</a> from this hack -- which suggests that they're planning to release more to prove that the hack really was of an FBI machine.  Either way, now that the fight is happening on Twitter, it seems time to grab some virtual popcorn, sit back and watch the fireworks.<br /><br /><a href="http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120904/14295020268/fbi-denies-that-hacked-apple-info-came-fbi.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>then-where-did-it-come-from</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120904/14295020268</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 4 Sep 2012 08:15:00 PDT</pubDate>
<title>Hackers Get Personal Info On 12-Million Apple Users... From An FBI Laptop</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml</link>
<guid>http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml</guid>
<description><![CDATA[ Much of the debate over cybersecurity legislation like CISPA and the Cybersecurity Act focused on getting more private companies to "share data" with federal government agencies, including the FBI and the NSA.  As we've pointed out time and time again, beyond the basic privacy rules that the bills tended to bulldoze through, any time you increase the sharing of private data, you're only making it <i>that much easier for hackers</i> to access that info because you're putting it in more places -- some of which will almost definitely be insecure.  In other words, even though these bills were ostensibly about "protecting" from hack attacks, by increasing the sharing of data, they'd almost certainly open up new attack opportunities and make it easier for hackers to get info.  
<br /><br />
While neither bill passed (yet), the latest example of what happens when you have widespread data sharing comes from some Antisec hackers, who claim that -- in response to a presentation from the NSA's General Keith Alexander -- they wanted to probe the security of various government agencies, including the FBI.  End result?  They claim to have <a href="http://www.zdnet.com/fbi-hack-yielded-12-million-iphone-and-ipad-ids-anonymous-claims-7000003668/" target="_blank">hacked into the laptop of FBI agent Christopher Stangl</a>, who has appeared in <a href="https://www.facebook.com/video/video.php?v=512364171294" target="_blank">recruitment videos</a> for the FBI looking to hire "cyber security experts."
<br /><br />
The hackers claim that on his laptop, they <a href="http://news.ycombinator.com/item?id=4472897" target="_blank">found a csv file with</a>:
<blockquote><i>
...a list of 12,367,232 Apple iOS
  devices including Unique Device Identifiers (UDID), user names, name of device,
  type of device, Apple Push Notification Service tokens, zipcodes, cellphone
  numbers, addresses, etc.
</i></blockquote>
The hackers have released 1,000,001 UDIDs and APNS tokens to prove they had the data, stripping out the personal info.  The file they found was called: "NCFTA_iOS_devices_intel.csv" which folks at Hacker News have pointed out likely refers to the National Cyber-Forensics & Training Alliance. According to its <a href="http://www.ncfta.net/" target="_blank">website</a>, the NCFTA...
<blockquote><i>
functions as a conduit between private industry and law enforcement with a core mission to identify, mitigate and neutralize cyber crime. In an effort to streamline intelligence exchange, the NCFTA will often organize SME interaction into threat-specific initiatives. Once a significant online scheme is realized and a stakeholder consensus defined, an initiative is developed wherein the NCFTA manages the collection and sharing of intelligence with the affected parties, industry partners, appropriate law enforcement, and other SMEs.
</i></blockquote>
In other words, it's almost <i>exactly</i> what we were told we needed CISPA to enable.  In fact, during the CISPA debate, we specifically <a href="http://www.techdirt.com/articles/20120426/16471718672/law-enforcement-already-has-way-to-share-cybersecurity-info-with-companies-why-do-we-need-cispa.shtml">pointed to the NCFTA</a> to ask why we needed CISPA, since something like that was already possible.
<br /><br />
And now it seems to also be showing why CISPA or other similar legislation focused on increased "sharing" of info could actually put many more users at risk, rather than protect them.  When the feds are careless with the info they receive from companies, it's going to get hacked.  These kinds of things just put a giant target on their back, and now we're seeing the harmful results of such sharing without effective privacy protections.
<br /><br />
And the feds want <i>more</i> of this?<br /><br /><a href="http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120904/07434620264/hackers-get-personal-info-12-million-apple-users-fbi-laptop.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>privacy-schmivacy?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120904/07434620264</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 22 Aug 2012 08:14:00 PDT</pubDate>
<title>Feds Back To Seizing Websites Over Claims Of Copyright Infringement</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120822/07274420123/feds-back-to-seizing-websites-over-claims-copyright-infringement.shtml</link>
<guid>http://www.techdirt.com/articles/20120822/07274420123/feds-back-to-seizing-websites-over-claims-copyright-infringement.shtml</guid>
<description><![CDATA[ While we've written plenty about the US Justice Department and US Homeland Security (via ICE) seizing various websites on questionable legal authority by claiming they were tools used for criminal copyright infringement, a series of pretty massive screwups seemed to have them, at least temporarily, shying away from such seizures around copyright claims.  Huge errors like seizing Dajaz1 for over a year and then having to admit they had no evidence and <a href="http://www.techdirt.com/articles/20111208/08225217010/breaking-news-feds-falsely-censor-popular-blog-over-year-deny-all-due-process-hide-all-details.shtml">give it back</a> seemed to at least make them a little less cowboyish about the websites they chose to shut down and censor.
<br /><br />
But, of course, this is the federal government we're talking about, and they sure loved the ability to shut down speech without any sort of adversarial hearing or, you know, due process.  So you just knew it wouldn't last.  The latest is that the feds <a href="http://www.justice.gov/opa/pr/2012/August/12-crm-1033.html" target="_blank">have seized three more domains</a> (applanet.net, appbucket.net and snappzmarket.com), claiming that they were "engaged in the illegal distribution of copies of copyrighted Android cell phone apps."  Indeed, a quick look at the internet archive certainly suggests that these sites advertised that you could <a href="http://web.archive.org/web/20110611110033/http://www.applanet.net/" target="_blank">get "paid" apps for free if you joined</a>. But does that warrant a criminal investigation and seizure?  Perhaps there are more details, but given the sketchy details of earlier seizures, I'd wonder.
<br /><br />
But, more to the point, if these sites were really engaged in such things, why wouldn't a civil copyright infringement lawsuit suffice?  Why should the government get involved, when it involves completely pulling down a website with no warning, no adversarial hearing and no due process for those accused?
<br /><br />
The Justice Department seems to indicate that this sort of thing is now a "top priority," because (apparently) they have way too much free time on their hands:
<blockquote><i>
&#8220;Cracking down on piracy of copyrighted works &#8211; including popular apps &#8211; is a top priority of the Criminal Division,&#8221; said Assistant Attorney General Breuer.  &#8220;Software apps have become an increasingly essential part of our nation&#8217;s economy and creative culture, and the Criminal Division is committed to working with our law enforcement partners to protect the creators of these apps and other forms of intellectual property from those who seek to steal it.&#8221;
<br /><br />
&#8220;Criminal copyright laws apply to apps for cell phones and tablets, just as they do to other software, music and writings.  These laws protect and encourage the hard work and ingenuity of software developers entering this growing and important part of our economy.  We will continue to seize and shut down websites that market pirated apps, and to pursue those responsible for criminal charges if appropriate,&#8221; said U.S. Attorney Yates.
 <br /><br />
&#8220;The theft of intellectual property, particularly within the cyber arena, is a growing problem and one that cannot be ignored by the U.S government&#8217;s law enforcement community.  These thefts cost companies millions of dollars and can even inhibit the development and implementation of new ideas and applications.  The FBI, in working with its various corporate and government partners, is not only committed to combating such thefts but is well poised to coordinate with the many jurisdictions that are impacted by such activities,&#8221; said FBI Special Agent in Charge Lamkin. 
</i></blockquote>
One other tidbit of interest.  Unlike the previous seizure disasters, this one appears not to have been led by ICE, but directly by the Justice Department (via the FBI).  The announcement doesn't name this as a part of "Operation in our Sites" which seems to be a term specific to ICE's controversial program.  Either way, they're still certainly using the eagle-heavy "seized" graphic they love to throw around, so, of course, we'd be remiss if we did not remind folks that they can <a href="http://rtb.techdirt.com/products/seized-tee/">purchase their very own</a> "seized tee," to show what you think of the government's efforts.<br /><br /><a href="http://www.techdirt.com/articles/20120822/07274420123/feds-back-to-seizing-websites-over-claims-copyright-infringement.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120822/07274420123/feds-back-to-seizing-websites-over-claims-copyright-infringement.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120822/07274420123/feds-back-to-seizing-websites-over-claims-copyright-infringement.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>motherfucking-eagles</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120822/07274420123</wfw:commentRss>
</item>
</channel>
</rss>