<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/">
<channel>
<title>Techdirt. Stories filed under &quot;warrants&quot;</title>
<description>Easily digestible tech news...</description>
<link>http://www.techdirt.com/</link>
<language>en-us</language>
<image><title>Techdirt. Stories filed under &quot;warrants&quot;</title><url>http://www.techdirt.com/images/td-88x31.gif</url><link>http://www.techdirt.com/</link></image>
<item>
<pubDate>Wed, 12 Jun 2013 11:09:36 PDT</pubDate>
<title>Even The AP Is Calling Bull On Government Claims Of PRISM Helping Stop NYC Subway Bomb</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130611/17450923413/even-ap-is-calling-bull-government-claims-prism-helping-stop-nyc-subway-bomb.shtml</link>
<guid>http://www.techdirt.com/articles/20130611/17450923413/even-ap-is-calling-bull-government-claims-prism-helping-stop-nyc-subway-bomb.shtml</guid>
<description><![CDATA[ We've already explained how some NSA supporters, including Rep. Mike Rogers and Senator Dianne Feinstein, are trying to defend PRISM and other NSA surveillance efforts by saying that it stopped a NYC subway bombing but their claims don't seem to <a href="http://www.techdirt.com/articles/20130608/12574223380/nsa-defenders-claim-prism-helped-stop-nyc-subway-bombing-other-evidence-suggests-it-didnt.shtml">hold up</a> under scrutiny.  Now <a href="http://m.apnews.com/ap/db_289563/contentdetail.htm?contentguid=cj2UUZ0P" target="_blank">even the Associated Press is calling out those statements as highly questionable</a>, which is somewhat amazing for the AP, as it normally loves to just present "both sides of the story" and then let you decide what's real.  But the article linked above actually digs in and points out where the claims by the NSA's defenders don't seem to add up to anything.
<blockquote><i>
Director of National Intelligence James Clapper said investigators "found backpacks with bombs." Really, the bombs hadn't been completed and the backpacks the FBI found were unrelated to the plot.
<br /><br />
Feinstein said the FBI had Zazi under surveillance for six months. Court testimony showed Zazi was watched only for about two weeks before he was arrested.
</i></blockquote>
But there's a much bigger point that the AP makes.  Even if the claim was somehow true that PRISM was useful, nowhere does that claim show how a standard warrant wouldn't have provided the same information:
<blockquote><i>
That's because, even before the surveillance laws of 2007 and 2008, the FBI had the authority to - and did, regularly - monitor email accounts linked to terrorists. The only difference was, before the laws changed, the government needed a warrant.
<br /><br />
To get a warrant, the law requires that the government show that the target is a suspected member of a terrorist group or foreign government, something that had been well established at that point in the Zazi case.
</i></blockquote>
In other words, even if PRISM was used, there's no evidence that it was needed, because the NSA could have easily obtained the same information through traditional means -- getting a warrant -- and without potentially violating the privacy of millions of others.<br /><br /><a href="http://www.techdirt.com/articles/20130611/17450923413/even-ap-is-calling-bull-government-claims-prism-helping-stop-nyc-subway-bomb.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130611/17450923413/even-ap-is-calling-bull-government-claims-prism-helping-stop-nyc-subway-bomb.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130611/17450923413/even-ap-is-calling-bull-government-claims-prism-helping-stop-nyc-subway-bomb.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>when-you-can't-even-convince-them...</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130611/17450923413</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 4 Jun 2013 00:01:00 PDT</pubDate>
<title>Eric Holder's 'Off-The-Record' Meeting With Journalists Leads To 'On-The-Record' Quotes, But Not Much Else</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130602/11273023286/eric-holders-off-the-record-meeting-with-journalists-leads-to-on-the-record-quotes-not-much-else.shtml</link>
<guid>http://www.techdirt.com/articles/20130602/11273023286/eric-holders-off-the-record-meeting-with-journalists-leads-to-on-the-record-quotes-not-much-else.shtml</guid>
<description><![CDATA[ Remember how Eric Holder wanted to hold a meeting with a bunch of journalists as he seeks to revise the "guidelines" the DOJ sets up for itself (fox watching the hen house, anyone?) on how it spies on journalists?  A meeting where many top news organizations <a href="http://www.techdirt.com/articles/20130529/16525523245/reporters-tell-attorney-general-eric-holder-they-wont-agree-to-off-record-meeting-as-scale-journalist-spying-expands.shtml">refused to go</a> because it was officially "off the record?"  In the end, the media seemed to be <a href="http://www.huffingtonpost.com/michael-calderone/whos-attending-holders-off-the-record-meeting_b_3359562.html" target="_blank">split on whether or not to go</a>, as summarized by the Huffington Post (who didn't go):
<blockquote><i>
<b>Not going:</b> New York Times, AP, Huffington Post, McClatchy, CNN, CBS News, Fox News, Reuters, and NBC News.
<br /><br />
<b>Going:</b> The Washington Post, Politico, Wall Street Journal, Los Angeles Times/ Chicago Tribune, ABC News, Bloomberg, USA Today.
</i></blockquote>
And then, for all the fuss, at the end of the meeting, DOJ officials told the reporters <a href="http://www.politico.com/blogs/media/2013/05/eric-holders-offtherecord-meeting-165093.html" target="_blank">they could discuss "in general some of the ideas that were discussed,"</a> though it appears that some points still remained off the record.  As for what was publicly disclosed, it sounds like reporters were not impressed.
<blockquote><i>
At the session, Holder and Deputy Attorney General James Cole expressed a willingness to revise the guidelines for such investigations, journalists present at the get-together told POLITICO.
<br /><br />
But Holder stopped short of offering any concrete changes to the guidelines. Instead, the Attorney General sought to assure the journalists that he and the DOJ were trying to seek a balance between the demands of national security and the free flow of information, and sought suggestions from the journalists on how those changes might be achieved.
</i></blockquote>
Ah, so the hens get to suggest to the fox how they'd like their rights to be violated, and then the fox gets to decide how best to "incorporate those suggestions"?  I'm sure that will work out just great.  As some who were in attendance noted, nothing in the meeting suggested that the DOJ was actually going to change or adjust its policies.<br /><br /><a href="http://www.techdirt.com/articles/20130602/11273023286/eric-holders-off-the-record-meeting-with-journalists-leads-to-on-the-record-quotes-not-much-else.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130602/11273023286/eric-holders-off-the-record-meeting-with-journalists-leads-to-on-the-record-quotes-not-much-else.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130602/11273023286/eric-holders-off-the-record-meeting-with-journalists-leads-to-on-the-record-quotes-not-much-else.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>blah-de-blah-blah</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130602/11273023286</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 9 May 2013 15:59:42 PDT</pubDate>
<title>Judge Allows FBI To Use Evidence Collected Via Stingray Fake Cell Towers</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml</link>
<guid>http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml</guid>
<description><![CDATA[ For the past few years, we've been covering a key DOJ case against Daniel Rigmaiden.  Rigmaiden appears to have been involved in some likely fraud, but after asking how the feds tracked him down, it was revealed that they used a <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml">fake mobile tower</a>, often referred to as a "stingray" (though the actual product goes by a few different names), to create an effective man in the middle attack. This allowed the FBI to keep tabs on Rigmaiden's location and some of what he was doing, as the aircard he used to get online was suddenly running through their own special fake Verizon tower.  In fact, it later came out that the DOJ has been <a href="http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml">misleading judges</a> for years about its use of the technology.
<br /><br />
However, a judge has now ruled that none of that really matters, and that the evidence collected by the stingray (or as a result of its use) <a href="http://www.wired.com/threatlevel/2013/05/rigmaiden-cell-tower-evidence/" target="_blank">can be used in the case against Rigmaiden</a>.  The reasoning is fairly odd, however.  The judge basically said that there's no 4th Amendment issue because Rigmaiden had no reasonable expectation of privacy in either the use of the aircard or in his apartment "because he had obtained the air card and rented the apartment and storage space through fraudulent means &#8212; that is, using identifications that he had stolen from other people."  That seems like a highly questionable standard on which to base that decision.  As the ACLU points out, while Rigmaiden may have been committing fraud elsewhere, and may have used different names in getting the aircard and the space, there is no indication that any fraud was involved in getting those particular things.  Under this ruling, you could see that doing something or buying something under an alias could be viewed as giving up one's 4th Amendment protections -- and that seems crazy.
<br /><br />
The court also didn't seem to much care about the DOJ hiding its use of the stingray from judges:
<blockquote><i>
The judge also ruled that the government was not in the wrong for failing to disclose to a magistrate judge that it planned to use a stingray to track the defendant, or to explain to the judge how the tracking device it intended to use worked. He characterized this information as a &#8220;detail of execution which need not be specified.&#8221;
</i></blockquote>
That seems fairly troubling, as it would allow the DOJ to hide other surveillance efforts that <i>might</i> be judged to be 4th Amendment violations... As the ACLU notes in response to this ruling:
<blockquote><i>
&#8220;When the government is seeking a warrant to use new technology, it has the duty to explain to the court what that technology is and how it works,&#8221; she said. &#8220;Stingrays are a very potent example of why that is so, because it scoops up innocent information of third parties who are not under probable cause surveillance.&#8221;
</i></blockquote><br /><br /><a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130508/17171423010/judge-allows-fbi-to-use-evidence-collected-via-stingray-fake-cell-towers.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>that-4th-amendment-thing...</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130508/17171423010</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 11 Apr 2013 11:40:00 PDT</pubDate>
<title>IRS Investigators See No Need For A Warrant To Snoop On Emails</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml</link>
<guid>http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml</guid>
<description><![CDATA[ The ACLU filed a freedom of information act (FOIA) request last year, asking for details about whether not IRS investigators get warrants before reading people's private communications.  After finally getting <a href="http://www.aclu.org/national-security/irs-response-warrantless-electronic-communications-foia-request" target="_blank">247 pages of records</a> (which don't fully answer the questions asked), the ACLU has noted that the documents suggest that the IRS <a href="http://www.aclu.org/blog/technology-and-liberty-national-security/new-documents-suggest-irs-reads-emails-without-warrant" target="_blank">likely read private emails regularly without obtaining a warrant</a>.  In their blog post, they note that in the US v. Warshak case, the 6th Circuit made it clear that the government must get a warrant to turn over emails, and it seems clear that the IRS had to change its policy because of that.
<blockquote><i>
The documents the ACLU obtained make clear that, before Warshak, it was the policy of the IRS to read people&#8217;s email without getting a warrant. Not only that, but the IRS believed that the Fourth Amendment did not apply to email at all. A 2009 &#8220;<a href="http://www.aclu.org/national-security/search-warrant-handbook">Search Warrant Handbook</a>&#8221; from the IRS Criminal Tax Division&#8217;s Office of Chief Counsel baldly asserts that &#8220;the Fourth Amendment does not protect communications held in electronic storage, such as email messages stored on a server, because internet users do not have a reasonable expectation of privacy in such communications.&#8221; Again in 2010, a <a href="http://www.aclu.org/national-security/irs-office-chief-counsel-search-warrants">presentation</a> by the IRS Office of Chief Counsel asserts that the &#8220;4<sup>th</sup> Amendment Does Not Protect Emails Stored on Server&#8221; and there is &#8220;No Privacy Expectation&#8221; in those emails.
<br /><br />
Other older documents corroborate that the IRS did not get warrants across the board. For example, the 2009 edition of the Internal Revenue Manual (the official compilation of IRS policies and procedures) <a href="http://www.aclu.org/national-security/manual-transmittal-re-irm-946">explains </a>that &#8220;the government may obtain the contents of electronic communication that has been in storage for more than 180 days&#8221; without a warrant.
</i></blockquote>
Of course, the IRS is not alone in this.  That's the same way other government agencies have treated email thanks to the outdated nature of <a href="http://www.techdirt.com/blog/?tag=ecpa">ECPA</a>, the Electronic Communications Privacy Act, a law written nearly 30 years ago, which assumed that any content left on a server for over 180 days was "abandoned," because the idea of online messaging systems was foreign to folks in Congress at the time.
<br /><br />
The bigger question, though, is whether or not the IRS paid attention to the ruling in Warshak and started getting warrants.  As the ACLU notes, while not entirely clear, the answer is likely "no."
<blockquote><i>
Then came Warshak, decided on December 14, 2010. The key question our FOIA request seeks to answer is whether the IRS&#8217;s policy changed after Warshak, which should have put the agency on notice that the Fourth Amendment does in fact protect the contents of emails. The first indication of the IRS&#8217;s position, from an <a href="http://www.aclu.org/national-security/email-exchange-re-us-v-warshak">email exchange</a><b> </b>in mid-January 2011, does not bode well. In an email titled &#8220;US v. Warshak,&#8221; an employee of the IRS Criminal Investigation unit asks two lawyers in the IRS Criminal Tax Division whether Warshak will have any effect on the IRS&#8217;s work. A Special Counsel in the Criminal Tax Division replies: &#8220;I have not heard anything related to this opinion. We have always taken the position that a warrant is necessary when retrieving e-mails that are less than 180 days old.&#8221; But that&#8217;s just the ECPA standard. The real question is whether the IRS is obtaining warrants for emails more than 180 days old. Shortly after Warshak, apparently it still was not
<br /><br />
The IRS had an opportunity to officially reconsider its position when it issued <a href="http://www.aclu.org/national-security/manual-transmittal-re-irm-949">edits to the Internal Revenue Manual </a>in March 2011. But its policy stayed the same: the Manual explained that under ECPA, &#8220;Investigators can obtain everything in an account except for unopened e-mail or voice mail stored with a provider for 180 days or less using a [relevant-and-material-standard] court order&#8221; instead of a warrant. Again, no suggestion that the Fourth Amendment might require more.
</i></blockquote>
As the ACLU notes, the IRS owes the American public a clear explanation of its view on warrants... and it should put in place a clear warrant requirement before snooping through emails.<br /><br /><a href="http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>time-for-an-audit-of-aclu-folks</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130411/01260522676</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 28 Mar 2013 05:56:01 PDT</pubDate>
<title>DOJ Misled Judges For Years About How It Was Using Stingray Devices To Spy On People</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml</link>
<guid>http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml</guid>
<description><![CDATA[ How many times does it need to be repeated?  If you give law enforcement the ability to spy on people -- even with limits -- law enforcement will <i>always</i> blow through those limits and abuse its powers.  It happens over and over and over again.  And that becomes doubly true when law enforcement has worked out ways to avoid oversight.  Back in 2011, the WSJ broke a huge story about the frequent use by government officials of a technique for mobile device surveillance generically called <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml">"stingray"</a> devices (technically, there are a few products used for this, only some of which are actually called Stingrays, but the name is now used to refer to all of them).  The device works by pretending to be a mobile phone tower, so devices can connect to it, and law enforcement gets all your data.  It's basically a cellular man-in-the-middle attack, with law enforcement being that man in the middle.  Yay.
<br /><br />
The technology has been a key component in a case involving Daniel Rigmaiden, which we wrote about <a href="http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml">last year</a>.  Rigmaiden was taken into custody (on a fraud charge) and, representing himself in court, he has sought more info on how he was tracked down -- leading to some reluctant disclosure about law enforcement using Stingray devices on questionable authority to find him.  In that case, we noted that law enforcement claimed it had a court order to use the technology, but the judge was confused, asking where were the warrants for the use of the device.  The judge asked how it was possible that a court order or warrant was issued without the judge ever being told about the technology used in surveillance and was told, simply, "it was a standard practice."
<br /><br />
Indeed, that appears to be the case.  The ACLU filed a bunch of FOIA (Freedom of Information Act) requests to dig into this and newly released documents show that, indeed, it was apparently <a href="http://www.aclu.org/blog/national-security-technology-and-liberty/doj-emails-show-feds-were-less-explicit-judges-cell" target="_blank">standard practice by the DOJ to be "less than explicit" and less than "forthright" with judges</a> in seeking warrants and court orders to make use of this technology.  Here's an email that was revealed:
<blockquote><i>
As some of you may be aware, our office has been working closely with the magistrate judges in an effort to address their collective concerns regarding whether a pen register is sufficient to authorize the use of law enforcement's WIT technology (a box that simulates a cell tower and can be placed inside a van to help pinpoint an individual's location with some specificity) to locate an individual. It has recently come to my attention that many agents are still using WIT technology in the field although the pen register application does not make that explicit.
<br /><br />
While we continue work on a long term fix for this problem, it is important that we are consistent and forthright in our pen register requests to the magistrates&#8230;
</i></blockquote>
Basically, that's the DOJ admitting that it has not been forthright or explicit in letting judges know that it is going to use this extremely intrusive form of surveillance in seeking approvals.  And the courts have been concerned about this.  As the ACLU notes, this email was written three years <b>after</b> the Rigmaiden situation happened -- suggesting that the DOJ has been getting away with this sort of thing for many years, without anyone digging in.  The ACLU is now arguing that this should be a reason to suppress the evidence obtained via these devices, and will ask the court to "send a clear message" that it cannot hide the truth from federal judges in seeking rubber stamps to violate the privacy of the public.<br /><br /><a href="http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130327/15223122490/doj-mislead-judges-how-much-it-was-using-stingray-mobile-surveillance.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>well-of-course</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130327/15223122490</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 19 Mar 2013 15:24:28 PDT</pubDate>
<title>Patrick Leahy Introduces Legislation (Yet Again) To Require Government Warrants To Get Your Electronic Info</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20130319/14590722380/patrick-leahy-introduces-legislation-yet-again-to-require-government-warrants-to-get-your-electronic-info.shtml</link>
<guid>http://www.techdirt.com/articles/20130319/14590722380/patrick-leahy-introduces-legislation-yet-again-to-require-government-warrants-to-get-your-electronic-info.shtml</guid>
<description><![CDATA[ It's been quite a day in terms of news out of DC.  We've been talking about copyright/first sale, cybersecurity bills, the CFAA... and now Senator Patrick Leahy, for what feels like the 2,394th time, has <a href="http://www.slate.com/blogs/future_tense/2013/03/19/patrick_leahy_introduces_legislation_to_update_ancient_electronic_communications.html" target="_blank">introduced a plan to reform ECPA</a>.  Like the CFAA, ECPA is an extremely troubling and outdated piece of legislation where Congress tried to deal with "those computer things" back in the 1980s in a manner that just doesn't make any sense today.  Mainly it has opened up massive loopholes for the US government to access your data with little to no oversight (for example, the law considers messages on a server for over 180 days to be "abandoned" and thus fair game for law enforcement, as it never considered the idea of cloud storage).  Senator Leahy would like to update the law to protect our privacy, such that law enforcement would actually be required to get a warrant.
<br /><br />
If all of this sounds familiar, you wouldn't be wrong.  We've been <a href="http://www.techdirt.com/blog/?tag=ecpa+reform">discussing it</a> forever.  Leahy keeps introducing bills and they never seem to turn into law.  Law enforcement has been his main antagonist on this, though the DOJ (somewhat surprisingly) appeared to concede today that ECPA needs significant reform, even calling out the 180 day issue <a href="http://judiciary.house.gov/hearings/113th/03192013_2/Tyrangiel%2003192013.pdf" target="_blank">explicitly</a> in testimony before the Judiciary Committee:
<blockquote><i>
Many have noted&#8212;and we agree&#8212;that some of the lines drawn by the SCA that may have made sense in the past have failed to keep up with the development of technology, and the ways in which individuals and companies use, and increasingly rely on, electronic and stored communications. We agree, for example, that there is no principled basis to treat email less than 180 days old differently than email more than 180 days old. Similarly, it makes sense that the statute not accord lesser protection to opened emails than it gives to emails that are unopened.
</i></blockquote>
That said, the DOJ is likely to push back on significant parts of any ECPA reform effort, to make sure it still has the ability to trawl through as much data as possible.  Much of the testimony seems to warn of a parade of horribles that could occur if (*gasp*!) it has to get warrants for everything.<br /><br /><a href="http://www.techdirt.com/articles/20130319/14590722380/patrick-leahy-introduces-legislation-yet-again-to-require-government-warrants-to-get-your-electronic-info.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20130319/14590722380/patrick-leahy-introduces-legislation-yet-again-to-require-government-warrants-to-get-your-electronic-info.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20130319/14590722380/patrick-leahy-introduces-legislation-yet-again-to-require-government-warrants-to-get-your-electronic-info.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>dc-just-keeps-doing-remakes</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20130319/14590722380</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 14 Dec 2012 09:00:00 PST</pubDate>
<title>The FISA Amendments Act Is Clearly Unconstitutional; And Congress Doesn't Care</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121213/23443021384/fisa-amendments-act-is-clearly-unconstitutional-congress-doesnt-care.shtml</link>
<guid>http://www.techdirt.com/articles/20121213/23443021384/fisa-amendments-act-is-clearly-unconstitutional-congress-doesnt-care.shtml</guid>
<description><![CDATA[ We've been discussing the now annual rush to re-approve the <a href="http://www.techdirt.com/blog/?tag=fisa+amendments+act">FISA Amendments Act</a>, despite the fact that the original bill was on shaky constitutional ground, and it's been made much (much, much) worse due to a secret interpretation of what the law means (a secret interpretation that many in Congress apparently have no interest in finding out about).  Andrew Napolitano, a former judge, has penned an interesting column laying out many of the reasons why <a href="http://reason.com/archives/2012/12/13/government-spying-out-of-control" target="_blank">the whole thing is completely unconstitutional</a>.  First, he notes that the establishment of FISA itself is likely a violation of the 4th Amendment:
<blockquote><i>
The constitutional standard for all search warrants is probable cause of <b>crime</b>. FISA, however, established a new, different and lesser standard -- thus unconstitutional on its face since Congress is bound by, and cannot change, the Constitution -- of probable cause of <b>status</b>. The status was that of an agent of a foreign power. So, under FISA, the feds needed to demonstrate to a secret court only that a non-American physically present in the U.S., perhaps under the guise of a student, diplomat or embassy janitor, was really an agent of a foreign power, and the demonstration of that agency alone was sufficient to authorize a search warrant to listen to the agent's telephone calls or read his mail.
</i></blockquote>
Already troubling enough, but, as Napolitano notes, things weren't just left there.  They've continued to stretch and change the conditions, taking it further and further into unconstitutional realms:
<blockquote><i>
Over time, the requirement of status as a foreign agent was modified to status as a foreign person. This, of course, was an even lesser standard and one rarely rejected by the FISA court. In fact, that court has rarely rejected anything, having granted search warrants in well over 97 percent of applications. This is hardly harmless, as foreign persons in the U.S. are frequently talking to Americans in the U.S. Thus, not only did FISA violate the privacy rights of foreigners (the Fourth Amendment protects "people," not just Americans); it violated the rights of those with whom they were communicating, American or non-American.
<br /><br />
It gets worse. The Patriot Act, which was enacted in 2001 and permits federal agents to write their own search warrants in violation of the Fourth Amendment, actually amended FISA so as to do away with the FISA-issued search warrant requirement when the foreign person is outside the U.S. This means that if you email or call your cousin in Europe or a business colleague in Asia, the feds are reading or listening, without a warrant, without suspicion, without records and without evidence of anything unlawful.
</i></blockquote>
It's just those Patriot Act amendments (the FISA Amendments Act) that is being debated right now.  And given some of the questions being asked by politicians who understand the "secret interpretation" of the FISA Amendments Act, it appears that it actually gives law enforcement the ability to go even further.  So it's not even just about emailing or calling your cousin in Europe, but as long as law enforcement (a) claims that it's related to a terrorism investigation and (b) they have no specific knowledge at the time of acquisition only that the communication is domestic -- then they can collect just about anything.  So, under that interpretation, it appears that the NSA can just collect well, almost anything, by saying that it's all for the sake of a permanent and all encompassing terrorism investigation, and since they're just collecting absolutely everything, they have no specific knowledge at the time of acquisition that the communication is domestic.
<br /><br />
Considering that Napolitano's argument starts from the idea that FISA itself is unconstitutional, looking at where we are now from where we started, we're no longer just in "unconstitutional" mode, in which we've tip toed over the boundary.  We're now in a full on, 100% "let's mock the Constitution" mode.   And, Napolitano, like many others, wonders why almost no one in Congress is willing to point this out:
<blockquote><i>
Moreover, everyone in Congress has taken an oath to uphold the Constitution, which could not be more clear: "The right of the people to be secure in their persons, houses, papers, and effects..." shall not be violated, except via a warrant issued by a neutral judge upon the judge finding probable cause of crime. If we let Congress, which is a creature of the Constitution, change the Constitution, then no one's liberty or property is safe, and freedom is dependent upon the political needs of those in power.
<br /><br />
The President and the leadership of both political parties in both houses of Congress have abandoned their oaths to uphold the Constitution. They have claimed that foreigners and their American communicants are committed to destroying the country and only the invasion of everyone's right to privacy will keep us safe. They are violating the privacy of us all to find the communications of a few. Who will keep us safe from them?
</i></blockquote>
It's no secret that politicians use fear to increase their own power and to cut away at civil liberties.  We have plenty of history that demonstrates that.  It's just a real shame that so few people seem willing to speak out about this -- or that so few people even seem to care that the government has done this.<br /><br /><a href="http://www.techdirt.com/articles/20121213/23443021384/fisa-amendments-act-is-clearly-unconstitutional-congress-doesnt-care.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121213/23443021384/fisa-amendments-act-is-clearly-unconstitutional-congress-doesnt-care.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121213/23443021384/fisa-amendments-act-is-clearly-unconstitutional-congress-doesnt-care.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>but-but-terrorism</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121213/23443021384</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 29 Nov 2012 20:05:00 PST</pubDate>
<title>Senate Committee Approves ECPA Reform That Requires Warrants; But Will It Ever Become Law?</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121129/12241721176/senate-committee-approves-ecpa-reform-that-requires-warrants-will-it-ever-become-law.shtml</link>
<guid>http://www.techdirt.com/articles/20121129/12241721176/senate-committee-approves-ecpa-reform-that-requires-warrants-will-it-ever-become-law.shtml</guid>
<description><![CDATA[ As we had <a href="http://www.techdirt.com/articles/20121125/21014621139/its-time-to-update-our-privacy-laws-tell-your-elected-officials-to-reform-ecpa-now.shtml">hoped</a> earlier this week, the Senate Judiciary Committee did, in fact, <a href="http://www.wired.com/threatlevel/2012/11/ecpa-reform-approved/" target="_blank">approve Senator Patrick Leahy's attempt at ECPA reform</a>, which would require law enforcement to do something crazy like "get a warrant" before sifting through your email.  The bill was approved despite law enforcement types freaking out that they might actually have to ask a court for permission.  Senator Chuck Grassley, as expected, introduced an amendment that would have greatly weakened the warrant requirement for various federal agencies, but it was thankfully voted down.
<br /><br />
Of course, at this point, the victory is largely symbolic, as it's happening in a lameduck Congress.  The bill still needs to pass the full Senate and have a comparable House version pass as well.  In other words: nothing is happening until next year when this whole process may need to repeat.  And given some of the quotes from Grassley and law enforcement, there will be yet another effort to strip some of these warrant requirements.  Still, it's nice to see that there's at least some recognition in Congress that electronic privacy laws are woefully out of date, and leave private information, such as emails, way too open to law enforcement snooping.<br /><br /><a href="http://www.techdirt.com/articles/20121129/12241721176/senate-committee-approves-ecpa-reform-that-requires-warrants-will-it-ever-become-law.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121129/12241721176/senate-committee-approves-ecpa-reform-that-requires-warrants-will-it-ever-become-law.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121129/12241721176/senate-committee-approves-ecpa-reform-that-requires-warrants-will-it-ever-become-law.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>doubtful</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121129/12241721176</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 21 Nov 2012 11:27:52 PST</pubDate>
<title>Megaupload Helped DOJ In NinjaVideo Prosecution; And DOJ Uses That Against Megaupload</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121121/06442521110/megaupload-helped-doj-ninjavideo-prosecution-doj-uses-that-against-megaupload.shtml</link>
<guid>http://www.techdirt.com/articles/20121121/06442521110/megaupload-helped-doj-ninjavideo-prosecution-doj-uses-that-against-megaupload.shtml</guid>
<description><![CDATA[ On Friday, we wrote about the <a href="http://www.techdirt.com/articles/20121116/14300021077/unsealed-megaupload-seizure-warrants-reveal-use-flawed-logic-undercover-computer.shtml">unsealed</a> seizure warrants against Megaupload, and noted that they showed how Megaupload had <i>assisted</i> in a criminal investigation, in which they were told not to interfere with the files, but then those very files were used as evidence against Megaupload itself.  It's now come out that <a href="http://www.wired.com/threatlevel/2012/11/megaupload-investigation-roots/" target="_blank">this was part of the case against NinjaVideo</a>, which we <a href="http://www.techdirt.com/articles/20120106/11034317305/ninjavideo-admin-phara-gets-22-months-jail-500-hours-community-service-has-to-pay-mpaa-210k.shtml">wrote about</a> a few times.  Apparently, NinjaVideo used Megaupload to store some of its files, and the DOJ sent a warrant to Megaupload, which they complied with:
<blockquote><i>
&#8220;Megaupload complied with the warrant and cooperated with the government&#8217;s request,&#8221; Rothken said. He said Megaupload had gotten &#8220;a number of such warrant and subpoena type requests a year and still have an expectation that as classic &#8216;online service providers&#8217; they are immune from liability for the acts of users who are the target of such warrants and subpoenas.&#8221;
</i></blockquote>
But, as the unsealed warrants show, the DOJ later used those same files as evidence that Megaupload "knew" there were infringing files on its servers, leaving out the bit about how they had requested Megaupload not delete them.  That seems like yet more fairly egregious behavior by the DOJ in a case that's chock full of it.  Once again, I'm left wondering how the DOJ could do so many questionable things in their pursuit of Dotcom.  It really looks like they bought Hollywood's mythic story about Dotcom hook, line and sinker, and believed that once they took him down, the case would simply fall into place.
<blockquote><i>
Rothken calls the government&#8217;s argument &#8220;outrageous.&#8221; Given the NinjaVideo search warrant, and the government&#8217;s specific request for secrecy and to retain the files, Megaupload might have been accused of evidence-spoliation if it had taken the movies down, says Rothken.
<br /><br />
&#8220;If anything, such a cooperation request by the government bolstered Megaupload&#8217;s view that as a cloud storage intermediary it was operating lawfully even if some users may have been misbehaving,&#8221; Rothken said.
</i></blockquote>
Back when the Megaupload indictment and arrests first came down, I had a conversation with a couple of lawyers who insisted that, given the claims in the indictment, the DOJ must have had really strong evidence against Megaupload.  But pretty much every discovery since then has suggested that they only had strong evidence in their minds...<br /><br /><a href="http://www.techdirt.com/articles/20121121/06442521110/megaupload-helped-doj-ninjavideo-prosecution-doj-uses-that-against-megaupload.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121121/06442521110/megaupload-helped-doj-ninjavideo-prosecution-doj-uses-that-against-megaupload.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121121/06442521110/megaupload-helped-doj-ninjavideo-prosecution-doj-uses-that-against-megaupload.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>outrageous</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121121/06442521110</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 15 Nov 2012 09:25:24 PST</pubDate>
<title>If There Needs To Be An Investigation, It Should Be About Why The FBI Was Reading Certain Emails</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml</link>
<guid>http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml</guid>
<description><![CDATA[ While some have noted the <a href="http://www.newyorker.com/online/blogs/newsdesk/2012/11/david-petraeus-and-the-surveillance-state.html?mbid=social_retweet&#038;buffer_share=8e10a&#038;utm_source=buffer">irony</a> of General Petreaus being taken down due to online surveillance methods that he should have been aware of, the case is bringing growing attention to an issue many of us have been discussing for a while: how easy it is for law enforcement to snoop through your email.  We <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml">raised</a> the question already, but as more info comes out, the whole thing is looking that much more questionable.
<br /><br />
Julian Sanchez keeps trying to find out exactly what legal process the FBI used to go through a variety of email accounts based on an apparently non-criminal cyberstalking claim (which was apparently brought to the FBI by a non-cyber-focused agent who had seemed to have a crush on the "victim"of the cyberstalking), and notes that there are <a href="http://www.npr.org/blogs/itsallpolitics/2012/11/13/165050714/petraeus-scandal-raises-concerns-about-email-privacy" target="_blank">big questions</a> about what process was used to go through these emails and how much oversight was involved:
<blockquote><i>
To Julian Sanchez, a research fellow at the Cato Institute, the real scandal over the Petraeus affair is not the extramarital sex, but the invasion of privacy.
<br /><br />
"Law enforcement and certainly intelligence agencies have an incredible amount of ability to gather huge volumes of detailed information about people's most intimate online communications, a lot of it without requiring a full-blown warrant, a lot of it without requiring even any kind of judicial approval," Sanchez said.
</i></blockquote>
Meanwhile, Chris Soghoian, working for the ACLU, highlights some of what's been revealed about the snooping.  For example, FBI agents tracked down Patricia Broadwell as the email sender, even though she was using throwaway accounts, because webmail providers record the IP address from whence someone logs in -- and Broadwell didn't conceal that info.  Apparently, the IP addresses were a series of hotels, and cross-checking with guest lists, it didn't take long to narrow down the only real suspect.  Oh, and none of that info required judicial oversight for the FBI to get:
<blockquote><i>
The guest lists from hotels, IP login records, as well as the creative request to email providers for &#8220;information about other accounts that have logged in from this IP address&#8221; are all forms of data that the government can obtain with a subpoena. There is no independent review, no check against abuse, and further, the target of the subpoena will often never learn that the government obtained data (unless charges are filed, or, as in this particular case, government officials eagerly leak details of the investigation to the press). Unfortunately, our existing surveillance laws really only protect the &#8220;what&#8221; being communicated; the government&#8217;s powers to determine &#8220;who&#8221; communicated remain largely unchecked.
</i></blockquote>
He also delves into the method by which Petreaus and Broadwell communicated -- by sharing an account and communicating via "drafts" that were saved.  For the head of the CIA you'd think he'd use a method that wasn't long known to be just as (if not more) insecure than regular email.  Soghoian tears apart this supposedly "secret" method of communicating:
<blockquote><i>
<p>For more than a decade, a persistent myth in Washington DC, fueled by several counterterrorism experts, has been that it is possible to hide a communications trail by sharing an email inbox, and instead saving emails in a &#8220;draft&#8221; folder. This technique has been used by <a href="http://www.news24.com/World/News/Web-replaces-training-camps-20051027">Khaled Sheikh Mohammed</a>, <a href="http://www.investigativeproject.org/documents/case_docs/864.pdf">Richard Reid</a> (the shoe bomber), the 2004 <a href="http://www.nytimes.com/2006/04/27/world/europe/27iht-spain.html?_r=0">Madrid train bombers</a>, terrorists <a href="http://www.spiegel.de/international/germany/widening-the-net-german-investigators-seek-identities-of-terror-masterminds-a-504327.html">in Germany</a>, as well as some domestic &#8220;<a href="http://www.denverpost.com/news/ci_5988241">eco-terrorists</a>.&#8221; This technique has appeared in <a href="http://www.investigativeproject.org/documents/case_docs/864.pdf">federal court documents</a> as early as 2003, and was described in a <a href="http://www.stlr.org/html/volume5/hinnen.pdf">law journal article</a> written by a DOJ official in 2004. It is hardly a state secret.</p>
<p>Apparently, this method was also used by General Petraeus. <a href="http://m.apnews.com/ap/db_289563/contentdetail.htm?contentguid=VOlvNjF4">According to</a> the Associated Press, &#8220;[r]ather than transmitting emails to the other's inbox, they composed at least some messages and instead of transmitting them, left them in a draft folder or in an electronic &#8216;dropbox,&#8217; the official said. Then the other person could log onto the same account and read the draft emails there. This avoids creating an email trail that is easier to trace.&#8221;</p>
<p>The problem is, like so many other <a href="http://privacy-pc.com/articles/how-terrorists-encrypt-threatscape-overview.html">digital security methods</a> employed by terrorists, it doesn&#8217;t work. Emails saved in a draft folder are stored just like emails in any other folder in a cloud service, and further, the providers can be <a href="http://www.law.cornell.edu/uscode/text/18/2703">compelled</a>, prospectively, to save copies of everything (so that deleting the messages after reading them won&#8217;t actually stop investigators from getting a copy).</p>
<p>Ironically enough, by storing emails in a draft folder, rather than an inbox, individuals may be making it even easier for the government to intercept their communications. This is because the Department of Justice <a href="https://ssd.eff.org/3rdparties/protect/email-inbox">has argued</a> that emails in the &#8220;draft&#8221; or &#8220;sent mail&#8221; folder are not in &#8220;electronic storage&#8221; (as defined by the Stored Communications Act), and thus not deserving of warrant protection. Instead, the government has argued it should be able to get such messages with a mere subpoena.</p>
</i></blockquote>
Got all that?  It's even more info that the FBI may have been able to obtain without ever having to get approval from a judge.  That's not to say they <i>didn't</i> necessarily go before a judge to get a warrant or similar tool for surveillance, but it does highlight just how much info the FBI <i>can</i> obtain without any real oversight, and how it's entirely possible for it to be abused -- taking a very limited situation (non-criminal online harassment) and turning it into something massive.
<br /><br />
In fact, as the EFF's Trevor Timm notes, we should be <a href="http://www.foreignpolicy.com/articles/2012/11/14/investigate_the_fbi" target="_blank">investigating the FBI</a> over why it was snooping through people's emails and how frequently it does this.  He notes, as others have, that nothing about the origination of this case should have resulted in FBI involvement, let alone reading people's emails.  Remember, early on, no one knew this had anything to do with General Petreaus or any other high ranking official:
<blockquote><i>
<p>The spark that set events in motion was a handful of
allegedly harassing emails sent anonymously to Kelley, a friend of Petraeus's,
which she brought to a friend at the FBI. Yet it's unclear why an investigation
was ever opened, given that everything publicly known about the emails suggests
they weren't illegal.
</p>
<p>
As <a href="http://www.thedailybeast.com/articles/2012/11/12/exclusive-paula-broadwell-s-emails-revealed.html">the <i>Daily Beast</i> reported</a>, they
said things like "Who do you think you are? ... You parade around the base ... You
need to take it down a notch." The story noted, "when the FBI friend showed the emails to
the cyber squad in the Tampa field office, her fellow agents noted that the
absence of any overt threats."
</p>
<p>
It seems the deciding factor in opening the investigation
was not the emails' content, but the fact that the FBI agent was friendly with
Kelley. (Even more disturbing, the same FBI agent <a href="http://www.huffingtonpost.com/2012/11/13/jill-kelley-petraeus-fbi_n_2120526.html">has now been accused</a> of becoming "obsessed" with the Tampa socialite, sent
shirtless pictures to her, and has been removed from the case.)</p>
</i></blockquote>
Basically, it sounds like the FBI had very questionable reasons for digging all that deep into this case at all.  Michael Davis, at the Daily Beast, notes that the emails were <a href="http://www.thedailybeast.com/articles/2012/11/12/exclusive-paula-broadwell-s-emails-revealed.html" target="_blank">typical "cat-fight stuff,"</a> with no indication of illegal activity:
<blockquote><i>
When the FBI friend showed the emails to the cyber squad in the Tampa field office, her fellow agents noted that the absence of any overt threats.
<br /><br />
&#8220;No, &#8216;I&#8217;ll kill you&#8217; or &#8216;I'll burn your house down,&#8217;&#8221; the source says. &#8220;It doesn&#8217;t seem really that bad.&#8221;
<br /><br />
The squad was not even sure the case was worth pursuing, the source says.
<br /><br />
&#8220;What does this mean? There&#8217;s no threat there. This is against the law?&#8221; the agents asked themselves by the source&#8217;s account.
<br /><br />
At most the messages were harassing. The cyber squad had to consult the statute books in its effort to determine whether there was adequate legal cause to open a case.
<br /><br />
&#8220;It was a close call,&#8221; the source says. 
</i></blockquote>
So while there's all sorts of talk of investigations into who should have known the details of what was going on at what time, no one seems to be questioning why a simple "cat fight" resulted in the FBI digging in and reading people's emails.  Yet, that seems like something we should all be quite worried about.
<br /><br />
Indeed, if there's any "benefit" to come out of this, perhaps it's that more and more people are hopefully <a href="http://www.nytimes.com/2012/11/14/us/david-petraeus-case-raises-concerns-about-americans-privacy.html?smid=tw-nytimes&#038;_r=0" target="_blank">realizing just how easy it is for the FBI to spy on people</a> electronically.<br /><br /><a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121114/02501621041/if-there-needs-to-be-investigation-it-should-be-about-why-fbi-was-reading-certain-emails.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>friendly-fire</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121114/02501621041</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 13 Nov 2012 10:27:00 PST</pubDate>
<title>How Much Did The FBI Snoop On Email Messages To Uncover The Petreaus Situation?</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml</link>
<guid>http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml</guid>
<description><![CDATA[ As you're probably aware since it's "the big story" right now, General David Petreaus stepped down last week after an FBI investigation turned up an affair he'd been having.  It seems that every few hours more news "breaks" on the story, and it keeps getting more involved, with a growing number of players (and with each new revelation the story gets more and more bizarre).  However, some have started wondering how and why the FBI was snooping on various emails.  The original story was that it came about after Petreaus' mistress allegedly sent threatening (anonymous) emails to another woman, who reported them to the FBI.  From that came a wider investigation, which supposedly may involve another General and a variety of other players.  But some are realizing that this seems to show <a href="http://www.huffingtonpost.com/2012/11/12/petraeus-fbi-gmail_n_2119319.html" target="_blank">how the FBI has pretty free rein in terms of snooping on email accounts</a> hosted online:
<blockquote><i>
Under the 1986 Electronic Communications Privacy Act, federal authorities need only a subpoena approved by a federal prosecutor &#8212; not a judge &#8212; to obtain electronic messages that are six months old or older. To get more recent communications, a warrant from a judge is required. This is a higher standard that requires proof of probable cause that a crime is being committed.
</i></blockquote>
But even that isn't entirely clear.  Folks like <a href="https://twitter.com/normative" target="_blank">Julian Sanchez</a> have been puzzling through the timeline of events and wondering how a simple investigation into a small number of "rude" (but not illegal) emails <a href="https://twitter.com/normative/status/268237889429729280" target="_blank">then uncovered <i>thousands</i></a> of questionable emails involving a <i>different</i> general as alleged in <a href="http://www.washingtonpost.com/world/national-security/scandal-probe-ensnares-commander-of-us-nato-troops-in-afghanistan/2012/11/13/a2a27232-2d7d-11e2-a99d-5c4203af7b7a_story.html?tid=sm_twitter_washingtonpost" target="_blank">the news that broke last night</a>.  It feels like the FBI may have taken a simple report of misconduct (which may have been driven by another love triangle issue involving an FBI agent who seemed to take the whole thing a <i>lot more</i> personally than makes sense) and turned it into a <a href="https://twitter.com/normative/status/268244620234858497" target="_blank">massive fishing expedition</a>.
<br /><br />
Given how fast new parts of this story keep breaking, I'm sure there are still a number of other dominoes to fall, but hopefully this actually gets people to pay attention to just how easy it is for law enforcement to snoop on people's emails these days based on next to nothing.<br /><br /><a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20121113/03121121028/how-much-did-fbi-snoop-email-messages-to-uncover-petreaus-situation.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>all-for-what?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20121113/03121121028</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 21 Sep 2012 09:25:00 PDT</pubDate>
<title>Law Enforcement Officials Freak Out About Possibility Of Having To Get Warrants To Read Your Email</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120921/00444620455/law-enforcement-officials-freak-out-about-possibility-having-to-get-warrants-to-read-your-email.shtml</link>
<guid>http://www.techdirt.com/articles/20120921/00444620455/law-enforcement-officials-freak-out-about-possibility-having-to-get-warrants-to-read-your-email.shtml</guid>
<description><![CDATA[ We recently noted that Senator Leahy had <a href="http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml">attached</a> his mostly good ECPA (Electronic Communications Privacy Act) reform bill to another bill reforming the VPPA (Video Privacy Protection Act).  The ECPA reform would update a decades-old law that law enforcement has interpreted to more or less mean they don't need a warrant to read your online email.  Leahy's update would require a warrant.  This is a good and important reform that should be supported.  But, of course, law enforcement freaked out and it appears that <a href="http://news.cnet.com/8301-13578_3-57517033-38/senate-delays-netflix-e-mail-privacy-fix-after-cops-protest/?part=rss&#038;tag=feed&#038;subj=News-PoliticsandLaw" target="_blank">Leahy has backed down</a>, delaying hearings on the bill for now (funny how he really wanted to push through PIPA despite massive public protests, but a few law enforcement people get upset about respecting the 4th Amendment and things get delayed).  From Declan McCullagh's coverage:
<blockquote><i>
The delay comes two days after a phalanx of law enforcement organizations objected to the legislation, asking Leahy to "reconsider acting" on it "until a more comprehensive review of its impact on law enforcement investigations is conducted." The groups included the National District Attorneys' Association and the National Sheriffs' Association.
<br /><br />
[....] A person participating in Capitol Hill meetings on this topic told CNET that Justice Department officials have been expressing their displeasure about requiring search warrants. The department is on record as opposing such a requirement: James Baker, the associate deputy attorney general, has publicly warned that requiring a warrant to obtain stored e-mail could have an "adverse impact" on criminal investigations. 
</i></blockquote>
Of course it would have "adverse impact" on criminal investigations.  So do lots of things -- but those are the rules law enforcement plays by in a free society.  It's not built to make law enforcement's life easy.
<br /><br />
Either way, it appears that this bit of ECPA reform will get pushed off once again.  Hopefully, when it comes back, it won't be watered down.
<br /><br />
For what it's worth, both the EFF and the ACLU -- who strongly support ECPA reform similar to what Leahy has been proposing -- have also not been that happy with how Leahy introduced this bill, because they both oppose the changes to the VPPA, which they're afraid will weaken privacy for people.  This is a (somewhat rare, but not unprecedented) situation where I disagree with both of those organizations.  The VPPA was a specific and broad carve-out to deal with a single situation (<a href="http://en.wikipedia.org/wiki/Video_Privacy_Protection_Act" target="_blank">bork bork bork</a>).  I think it's reasonable to update it to allow for things like letting people <i>choose</i> to let Netflix and social networks share info on what movies they've watched -- just like the can choose to show what music they listen to.  I don't necessarily believe that it makes sense to link the VPPA to ECPA reform, but I don't think that passing the VPPA reform is so problematic that it should stop ECPA reform.  Of course, if law enforcement has its way (and so far, that seems to be the case), ECPA reform might never happen.  Is it really worth worrying about how you can choose to share your Netflix movies on Facebook while the Justice Department feels it can snoop broadly through your Gmail?<br /><br /><a href="http://www.techdirt.com/articles/20120921/00444620455/law-enforcement-officials-freak-out-about-possibility-having-to-get-warrants-to-read-your-email.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120921/00444620455/law-enforcement-officials-freak-out-about-possibility-having-to-get-warrants-to-read-your-email.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120921/00444620455/law-enforcement-officials-freak-out-about-possibility-having-to-get-warrants-to-read-your-email.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>bill-delayed</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120921/00444620455</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 20 Sep 2012 15:37:54 PDT</pubDate>
<title>LAPD Joins Feds In Skirting Fourth Amendment With Cell Phone Tracking Devices</title>
<dc:creator>Tim Cushing</dc:creator>
<link>http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml</link>
<guid>http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml</guid>
<description><![CDATA[ About this time last year, <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml" target="_blank">details emerged</a> on a new cell phone tracking device being used by the FBI to triangulate suspects&#39; locations via their cell phone signals. One of these, the StingRay, mimics mobile phone towers, allowing the feds to triangulate someone&#39;s position using signal strength. It had been used successfully to bring Daniel Rigmaiden, wanted for fraud, into custody.<br />
<br />
Rigmaiden (who is representing himself) was curious as to how he was located and a question on due process was posed by the judge:
<blockquote>
<i>In a February hearing, according to a transcript, Judge Campbell asked the prosecutor, "Were there warrants obtained in connection with the use of this device?"</i><br />
<br />
<i>The prosecutor, Frederick A. Battista, said the government obtained a "court order that satisfied [the] language" in the federal law on warrants. The judge then asked how an order or warrant could have been obtained without telling the judge what technology was being used. Mr. Battista said: "It was a standard practice, your honor."</i><br />
<br />
<i>Judge Campbell responded that it "can be litigated whether those orders were appropriate."</i></blockquote>
The FBI believes it can (and apparently, still does) track people using these devices without securing a warrant. Most discussion of the devices has been shut down by stating that revealing too much information would "harm law enforcement efforts by compromising future use of the equipment." The feds also believe that since the device only detects location, rather than eavesdropping, it&#39;s all cool, 4th Amendment rights or no.<br />
<br />
So, while the jury is almost literally still out on the constitutionality of these devices, local law enforcement members have been availing themselves of them. <a href="http://www.laweekly.com/2012-09-13/news/LAPD-stingray-spying-cellphone/" target="_blank">LA Weekly, using recently obtained FOIA documents, discovered that the Los Angeles Police Department</a> (along with police in Miami, Ft. Worth and Gilbert, AZ) has obtained and deployed the questionable StingRay. Not that the LAPD has much to say about its use, however:
<blockquote>
<i>LAPD refuses to discuss how it uses the powerful tool, perhaps copying the FBI&#39;s playbook, which argued in the Rigmaiden case that revealing too many details would cause serious harm to future investigations.</i><br />
<br />
<i>The department, through a spokesperson, refused to comment on the device, despite repeated requests from the Weekly. Through the department&#39;s Discovery Unit, which handles requests from the public and media under the California Public Records Act, LAPD also declined to reveal any information on how the devices are used.</i><br />
<br />
<i>LAPD even refuses to say whether its detectives are required by police chief Charlie Beckand the Los Angeles Police Commission &mdash; all of whom are appointed by Mayor Antonio Villaraigosa &mdash; to obtain a search warrant before the StingRay is deployed against unsuspecting L.A. residents&#39; cellphones.</i></blockquote>
Chances are the LAPD is deploying the devices without obtaining warrants, what with the FBI having set the precedent. With no court decision having been handed down yet dealing specifically with cell phone location trackers, law enforcement officers are pretty much free to explore the limits of this gray area. Refusing to discuss <i>any</i>&nbsp;details is par for the course for most enforcement agencies when asked about questionable means and technology, most of whom cite "serious harm" or "compromised investigations" as the reason for their obfuscation.<br />
<br />
Speaking of dubious catch-all phrases, guess which one of the all-time "greats" was used to justify the purchase of these cell phone tracking systems:
<blockquote>
<i>Documents obtained from the Inspector General&#39;s office of the Department of Homeland Security reveal that LAPD bought two so-called "IMSI catchers" around 2006. At the time, LAPD had "recently purchased a cellphone tracking system (CPTS) for regional, <b>terrorist-related investigations</b>." The records mention StingRay and KingFish, brand names for IMSI devices made by Florida&#39;s Harris Corp.</i></blockquote>
Oh, yes. "<a href="http://www.techdirt.com/search.php?q=terrorist" target="_blank">Terrorism</a>." Citing this vague threat in the law enforcement arena tends to open wallets and close minds with incredible efficiency. But the LAPD&#39;s acquisition of the cell phone trackers went one step further, and completely cut out any last vestige of public accountability.
<blockquote>
<i>Separate documents show that, in April 2010, the Los Angeles City Council approved the purchase of $347,050 in additional "StingRay II" equipment &mdash; and paid for it with outside funds from the Los Angeles Police Foundation, a nonprofit group that supports police functions, over which the city has no control.</i></blockquote>
The LAPD&#39;s refusal to discuss<i>&nbsp;any</i>&nbsp;aspect of these devices is "inconsistent with the democratic process," according to Peter Bibring of the ACLU, which makes sense, considering the use of the device itself seems to be "inconsistent with the democratic process." Seeing as the devices mimic cell phone towers, it would seem that the public might be <i>very</i> interested to know that the strongest signal in their neighborhood might actually be the LAPD doing a little tracking without a warrant or oversight.
<blockquote>
<i>Mobile devices connect to the wider network by using the antennae closest to them at the time. But when LAPD fires up a StingRay, it&#39;s often the most powerful signal in the area. Instantly, the department&#39;s spy equipment becomes the go-to "tower" for every cellphone and mobile device nearby &mdash; not just the phone carried by the suspect they&#39;re tracking.</i><br />
<br />
<i>"If the government shows up in your neighborhood, essentially every phone in the neighborhood is going to check in with the government," Soghoian warns. "It&#39;s almost like Marco Polo &mdash; the government tower says &#39;Marco,&#39; and every cellphone in the area says &#39;Polo.&#39;&thinsp;"</i></blockquote>
Maybe the feds and other smaller law enforcement agencies could just work to cut out the cell phone provider middleman and simply convert existing towers to "always-on" tracking devices. With enough subsidization, even those with the lowest income could avail themselves of 3G/4G service (depending on how many G-men are staffing the <i>Flowers By Irene</i> van), and the California Department of Corrections could up the ante by promising "More Bars in More Places."<br />
<br />
Until a decision is handed down on the warrant question, it&#39;s safe to assume that law enforcement will be deploying these cell phone trackers as often as possible, using the "Beating Up on Crime/Terrorism" ends to justify the 4th Amendment-skirting means.<br /><br /><a href="http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120919/15083020437/lapd-joins-feds-skirting-fourth-amendment-with-cell-phone-tracking-devices.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>rules-are-for-the-people-on-the-other-side-of-the-thin-blue-line</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120919/15083020437</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 14 Sep 2012 07:01:00 PDT</pubDate>
<title>Senator Leahy Brings Back Bill That Would Require Warrants When Gov't Snoops Through Servers For Your Info</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml</link>
<guid>http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml</guid>
<description><![CDATA[ The Electronic Communications Privacy Act (ECPA) is ridiculously outdated.  It was passed in 1986, and to this day provides the (incredibly inconsistent and difficult to apply) rules for what sort of privacy electronic communications have, even though the technology has changed drastically.  This has created some wacky consequences, including that (for example) emails have different privacy protections when an email is being written compared to when it's being sent compared to when it's been received compared to when it's been read compared to when it's been archived.  As an example, since most messages did not stay on servers for very long (they were downloaded and deleted), the law decided that messages stored on a server for more than 180 days were considered "abandoned" and subject to even lower standards of privacy protections.  Think about that the next time you open your Gmail account...  ECPA has lots of problems, but the basics are this: it certainly didn't anticipate an era where most of the things we do were in the so-called "cloud," and it takes almost no account of the expectation of privacy.
<br /><br />
Last year, Senator Pat Leahy introduced an <a href="http://www.techdirt.com/articles/20110517/13460914302/senator-leahy-wants-to-update-digital-privacy-law-some-good-some-bad.shtml">ECPA reform bill</a> that was mostly good.  It basically said that if the government wants to get access to your data on a server, it first needs to obtain a warrant -- something that is sorely missing today.  There were some loopholes that concerned us, but for the most part, it was a very big improvement.  And it went nowhere.  Now, many folks around here will remember Senator Leahy for being the driving force in the Senate behind PIPA -- and you may be quick to want to dismiss his actions here.  But just because he's (strongly) supported that bad bill, it doesn't mean that everything he introduces has been similarly problematic.
<br /><br />
Leahy is trying again to move forward with his ECPA reform plan, this time <a href="http://www.wired.com/threatlevel/2012/09/netflix-warrants/?utm_source=feedburner&#038;utm_medium=feed&#038;utm_campaign=Feed%3A wired%2Findex %28Wired%3A Top Stories%29" target="_blank">attaching it to an update of the Video Privacy Protection Act</a> (VPPA).  We've discussed the VPPA <a href="http://www.techdirt.com/articles/20090922/0417256277.shtml">before</a>.  The short version is that it was a special law that bars the release of video rental info, passed in response to Supreme Court nominee Robert Bork having his video rental history leaked.  But, of course, in this modern age where people automatically stream their music playlists or book purchases to Facebook... Netflix is left out in the cold, because the VPPA doesn't allow them to do the very same thing.  So, there's an update to the VPPA making the rounds that basically changes the law to let you tell the world what you streamed from Netflix last night (if you so choose to share that kind of info).
<br /><br />
That bill has a chance to actually go somewhere, and it looks like Leahy sees it as another chance to see if he can get his ECPA reform package through the Senate.  While it's no secret that I've had my differences with various Leahy proposals in the past, this is a reform that is badly needed to protect our privacy from government intrusion.  Requiring a warrant to access your info in the cloud is a common sense move that's long overdue.<br /><br /><a href="http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120913/22534720379/senator-leahy-brings-back-bill-that-would-require-warrants-when-govt-snoops-through-servers-your-info.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>ecpa-reform</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120913/22534720379</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 6 Sep 2012 15:15:00 PDT</pubDate>
<title>Murder Case Upended After Police Read Phone Texts Without A Warrant</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120905/17595720288/murder-case-upended-after-police-read-phone-texts-without-warrant.shtml</link>
<guid>http://www.techdirt.com/articles/20120905/17595720288/murder-case-upended-after-police-read-phone-texts-without-warrant.shtml</guid>
<description><![CDATA[ There have been a number of cases on the legality of police going through your mobile phone, and the courts are basically all over the place on rulings, with very little guidance from the Supreme Court.  You can find cases where <a href="http://www.techdirt.com/blog/wireless/articles/20120308/03410718033/court-confirms-police-dont-need-warrant-to-search-mobile-phone.shtmll">it's legal</a> and some where <a href="http://www.techdirt.com/articles/20090112/1410233382.shtml">it's not</a>.  The Supreme Court had a chance to clarify and <a href="http://www.techdirt.com/articles/20100617/1533559870.shtml">punted</a> (as it often does these days), choosing instead to tap dance around the 4th Amendment issue and deal with the case on other grounds.
<br /><br />
Now we've got yet another ruling saying that <a href="http://arstechnica.com/tech-policy/2012/09/police-seizure-of-text-messages-violated-4th-amendment-judge-rules/" target="_blank">looking at texts without a warrant violates the 4th Amendment</a>.  The case involved a six year old boy who stopped breathing and later died.  His mother had called the police to report the not breathing bit... and while the police were in the house, they picked up the mother's cell phone and noticed a written (but unsent) text to her boyfriend which suggested foul play:
<blockquote><i>
Wat if I got 2 take him 2 da hospital wat do I say and dos marks on his neck omg
</i></blockquote>
Other texts mentioned punching the kid.  Not surprisingly, police used this to start a murder investigation, leading to the arrest of the kid's mother's boyfriend.  Except... the court has now rejected much of the evidence because it was obtained in a manner that violated the 4th Amendment.  Even though such info is clearly useful for the case, this (Rhode Island state) court didn't <a href="http://www.techdirt.com/articles/20120815/12454120062/court-if-violating-your-privacy-helps-police-its-not-violating-your-privacy.shtml">fall</a> for the claim that "if it helps police, there aren't any 4th amendment concerns."
<blockquote><i>
... the Defendant has a reasonable expectation of privacy in his text messages and in the apartment where the subject cell phones were searched and seized so as to grant him standing, under the Fourth Amendment, to challenge the legality of the searches and seizures of those phones and their contents by the police. Based on the tsunami of illegal evidence collected by the Cranston Police Department, this Court grants Defendant&#8216;s suppression motions and excludes the State&#8216;s core evidence from being used at trial, including the text messages, all cell phones and their contents, all cell phone records, and critical portions of the Defendant&#8216;s videotaped statement and his written statement given to the police.
</i></blockquote>
The ruling will almost certainly be appealed, and it's reasonable to want to make use of any evidence that points to a potential murder suspect (especially one who killed a six year old boy!).  But, at the same time, we believe in the 4th Amendment for a reason -- and we expect law enforcement to live by that in collecting evidence, or we cross over into a police state (and yes, some people think we're already there).  It's the cases like these that are often the toughest, because it's so tempting to come up with some sort of excuse to allow the evidence in order to lock up someone "bad."  But at the same time, you want courts to recognize the importance of the 4th Amendment for all of those other cases where people get unfairly searched without a warrant.<br /><br /><a href="http://www.techdirt.com/articles/20120905/17595720288/murder-case-upended-after-police-read-phone-texts-without-warrant.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120905/17595720288/murder-case-upended-after-police-read-phone-texts-without-warrant.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120905/17595720288/murder-case-upended-after-police-read-phone-texts-without-warrant.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>get-a-warrant-maybe</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120905/17595720288</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 2 Jul 2012 16:17:15 PDT</pubDate>
<title>Twitter Forced To Hand Over Occupy Protestor's Info</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120702/12183019554/twitter-forced-to-hand-over-occupy-protestors-info.shtml</link>
<guid>http://www.techdirt.com/articles/20120702/12183019554/twitter-forced-to-hand-over-occupy-protestors-info.shtml</guid>
<description><![CDATA[ We recently wrote about Twitter <a href="http://www.techdirt.com/articles/20120508/12234118833/twitter-challenges-court-ruling-that-twitter-users-have-no-standing-to-protect-their-own-account-info.shtml">standing up</a> for a user, Malcolm Harris, who had participated in the Occupy Wall St. protests, and whose info was sought by the government under a <a href="http://itlaw.wikia.com/wiki/2703%28d%29_order" target="_blank">2703(d) order</a> (which has fewer protections than an ordinary warrant).  Twitter told Harris about the order, and Harris sought to have it blocked -- but the court claimed he had no standing to do so, as it was just an issue between the government and Twitter.  Twitter pushed back, noting that individuals control the content of their own account, so Harris should have standing.  Unfortunately, a NYC judge has <a href="http://www.nbcnewyork.com/news/local/Occupy-Wall-Street-Protester-Malcolm-Harris-Tweet-Ruling-Judge-Subpoena-Prosecutor-161089825.html" target="_blank">told Twitter to give up Harris' info</a>, though it did say that the government would need to get a warrant for the last day's worth of info, due to a technicality on timing.  The court basically punts on the larger issues, focusing on the fact that most of the information requested, Harris' tweets, are already public, and thus there's little to be concerned about.  Of course, if that's the case, it's unclear why the government needs to request info from Twitter in the first place...<br /><br /><a href="http://www.techdirt.com/articles/20120702/12183019554/twitter-forced-to-hand-over-occupy-protestors-info.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120702/12183019554/twitter-forced-to-hand-over-occupy-protestors-info.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120702/12183019554/twitter-forced-to-hand-over-occupy-protestors-info.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>privacy?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120702/12183019554</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 2 Jul 2012 12:31:15 PDT</pubDate>
<title>Congress Plays See-No-Evil, Pretend-There's-No-Evil, Let-The-Evil-Continue With NSA Domestic Spying</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120702/03412919549/congress-plays-see-no-evil-pretend-theres-no-evil-let-the-evil-continue-with-nsa-domestic-spying.shtml</link>
<guid>http://www.techdirt.com/articles/20120702/03412919549/congress-plays-see-no-evil-pretend-theres-no-evil-let-the-evil-continue-with-nsa-domestic-spying.shtml</guid>
<description><![CDATA[ We're still completely <a href="http://www.techdirt.com/articles/20120619/17382219391/lamar-smith-house-judiciary-committee-dont-want-to-know-how-often-nsa-spies-americans.shtml">perplexed</a> at how anyone in Congress could recognize that the NSA has <a href="http://www.techdirt.com/articles/20120619/04401919384/nsa-figuring-out-how-many-us-citizens-we-illegally-spied-would-violate-their-privacy.shtml">refused</a> to tell Congress how often it's violated the privacy of Americans without a warrant under the FISA Amendments Act (FAA) -- and then still vote to renew it.  What kind of "oversight" is that?  As Julian Sanchez recently wrote, <a href="http://www.cato-at-liberty.org/nsa-spying-and-the-illusion-of-oversight/" target="_blank">it's no oversight at all</a>.  As he notes, the law requires the NSA to "prevent" the spying on folks when both parties in communication are in the US -- but here, the NSA is admitting that it has no mechanism to actually do that.  Either (a) it's lying or (b) it's admitting that it cannot do what the law requires.
<blockquote><i>
If we care about the spirit as well as the letter of that constraint being respected, it ought to be a little disturbing that the NSA has admitted it doesn&#8217;t have any systematic mechanism for identifying communications with U.S. endpoints. Similar considerations apply to the &#8220;minimization procedures&#8221; which are supposed to limit the retention and dissemination of information about U.S. persons: How meaningfully can these be applied if there&#8217;s no systematic effort to detect when a U.S. person is party to a communication?
</i></blockquote>
Normally, this should be the point at which Congress steps in and says "no more" to the NSA.  Instead, it shuns those who even <i>ask</i> the basic questions -- and as in the case of Rep. Dan Lungren, pretends that as long as no one proves to them that the NSA is abusing its power, there's simply no reason to demand evidence.  That's not oversight.  That's willful ignorance.
<br /><br />
And... given that they're <i>choosing</i> to ignore their own oversight obligations over the NSA's spying on Americans, it should come as no surprise that the House Intelligence Committee <a href="http://www.cato-at-liberty.org/the-nsa-spying-numbers-we-cant-see/" target="_blank">unanimously voted to extend the FAA for five more years</a>.  Why not?  It's not like Congress is actually going to make sure that the NSA is playing by the rules.  The NSA apparently just needs to say that it would be too much work to do what the law requires and Congress says, "here, have a gift of five more years to spy on Americans against the specifics of the law."  And, once again, as Sanchez points out, there are plenty of ways that the NSA could at least <i>estimate</i> how many Americans they're spying on.
<br /><br />
But why would it do that?  As Sanchez also points out, the NSA seems to redact anything even remotely embarrassing from its reports... including data on how often it failed to follow the law:
<blockquote><i>
More generally, these reports contain a good deal of redacted statistical information that there is simply no plausible excuse for keeping secret. A table of &#8220;statistical data relating to compliance incidents,&#8221; for example, is included&#8212;but entirely blacked out. Are we to believe that the national security of the United States would be imperiled if the public knew the number of times the NSA had difficulty following the law? The reviewers conclude that the &#8220;number of compliance incidents remains small, particularly when compared with the total amount of activity&#8221;&#8212;but is there any legitimate reason for barring the public from knowing what counts as a &#8220;small&#8221; number, or just how massive the &#8220;total amount of activity&#8221; truly is?
</i></blockquote>
How do folks in Congress who vote for this kind of thing defend such actions?  They can't say that it's to protect Americans, when they refuse to even seek to get the data on whether or not Americans are being illegally spied upon.<br /><br /><a href="http://www.techdirt.com/articles/20120702/03412919549/congress-plays-see-no-evil-pretend-theres-no-evil-let-the-evil-continue-with-nsa-domestic-spying.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120702/03412919549/congress-plays-see-no-evil-pretend-theres-no-evil-let-the-evil-continue-with-nsa-domestic-spying.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120702/03412919549/congress-plays-see-no-evil-pretend-theres-no-evil-let-the-evil-continue-with-nsa-domestic-spying.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>wtf</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120702/03412919549</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 23 Apr 2012 14:25:00 PDT</pubDate>
<title>Wireless Industry Association Opposes Bill That Would Require Warrant For Them To Turn Data Over To Law Enforcement</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/blog/wireless/articles/20120423/13384918616/wireless-industry-association-opposes-bill-that-would-require-warrant-them-to-turn-data-over-to-law-enforcement.shtml</link>
<guid>http://www.techdirt.com/blog/wireless/articles/20120423/13384918616/wireless-industry-association-opposes-bill-that-would-require-warrant-them-to-turn-data-over-to-law-enforcement.shtml</guid>
<description><![CDATA[ You would think that it would be in the mobile operators' best interest to protect their own customers' privacy and to stand up for their basic rights.  You would think, but apparently you'd be wrong.  It appears that CTIA -- the mobile operators' industry association -- <a href="http://news.cnet.com/8301-31921_3-57418662-281/wireless-providers-side-with-cops-over-users-on-location-privacy/" target="_blank">is opposing an effort in California to require mobile operators to require a warrant</a> before disclosing personal info.  The bill also requires some basic reporting requirements for the companies, having them say how often info has been disclosed (hardly onerous info to track).  Basically, the law asks that the mobile operators respect the 4th Amendment when dealing with law enforcement -- something that the federal government has been successfully chipping away at for years.
<br /><br />
But the CTIA is <a href="http://www.aclunc.org/docs/technology/cita_opposes_sb_1434_leno.pdf" target="_blank">against all of this</a> (pdf), claiming that it would be "confusing" for mobile operators.
<blockquote>
... the wireless industry opposes SB 1434 as it could create greater confusion for wireless providers when responding to legitimate law enforcement requests
</blockquote>
The crux of the "confusion" apparently is that the definitions in the bill are somewhat broader than what the industry says is standard, and they're afraid that this means "It could place providers in the position of 
requiring warrants for all law enforcement requests."  I'm struggling to see what the problem is here.  What's wrong with requiring warrants?
<br /><br />
The letter also fails to explain why the reporting requirements would be so "burdensome," other than the claim that providers already "are working day and night to assist law enforcement to ensure the public&#8217;s safety and  to save 
lives."  So, if I read this right, they're arguing that they're already <i>so busy</i> responding to law enforcement that telling users that your personal data is being handed over to the government willy nilly is, you know, too much effort.
<br /><br />
The ACLU is <a href="http://www.aclunc.org/issues/technology/blog/wireless_industry_admits_working_day_and_night_to_hand_over_your_location_info_to_police.shtml" target="_blank">calling out the industry</a> for this move -- noting that it seems to have no problem spending all these resources passing on all of our info -- why can't it spend a little defending its subscribers' rights too?
<br /><br />
California is supposed to vote on this bill shortly.  Hopefully, the state sees through these baseless claims from CTIA.<br /><br /><a href="http://www.techdirt.com/blog/wireless/articles/20120423/13384918616/wireless-industry-association-opposes-bill-that-would-require-warrant-them-to-turn-data-over-to-law-enforcement.shtml">Permalink</a> | <a href="http://www.techdirt.com/blog/wireless/articles/20120423/13384918616/wireless-industry-association-opposes-bill-that-would-require-warrant-them-to-turn-data-over-to-law-enforcement.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/blog/wireless/articles/20120423/13384918616/wireless-industry-association-opposes-bill-that-would-require-warrant-them-to-turn-data-over-to-law-enforcement.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>do-they-not-care-about-their-users?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120423/13384918616</wfw:commentRss>
</item>
<item>
<pubDate>Fri, 23 Mar 2012 13:27:00 PDT</pubDate>
<title>FBI Turns Back On 2,750 Of The 3,000 GPS Devices It Turned Off For Lack Of A Warrant</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120323/03114118220/fbi-turns-back-2750-3000-gps-devices-it-turned-off-lack-warrant.shtml</link>
<guid>http://www.techdirt.com/articles/20120323/03114118220/fbi-turns-back-2750-3000-gps-devices-it-turned-off-lack-warrant.shtml</guid>
<description><![CDATA[ In January, we wrote about the Supreme Court's somewhat surprising <a href="http://www.techdirt.com/articles/20120123/11261317515/fourth-amendment-lives-supreme-court-says-gps-monitoring-is-search-that-may-require-warrant-updated.shtml">ruling</a> on GPS monitoring by law enforcement, in which it suggested (but didn't fully say) that putting a GPS device on a car might need a warrant -- a pretty easy process that the FBI just didn't want to go through.  Following this, we noted a report saying that the FBI scrambled to <a href="http://www.techdirt.com/articles/20120301/03070317923/fbi-turns-off-about-3000-gps-devices-following-supreme-court-ruling.shtml">turn off 3,000 such devices</a> that had been placed without a warrant. 
<br /><br />
However, in an NPR report about just how unhappy the FBI is about all of this, it notes that the FBI actually scrambled to file for warrants on most of those 3,000 devices, such that <a href="http://www.npr.org/2012/03/21/149011887/fbi-still-struggling-with-supreme-courts-gps-ruling" target="_blank">only 250 were permanently shut off</a>.  And yet it's still complaining about this whole "getting a warrant" thing. As Tim Lee notes, FBI director Robert Mueller is basically complaining to Congress that it's <a href="http://arstechnica.com/tech-policy/news/2012/03/gps-ruling-is-hard-on-the-fbiand-thats-a-feature-not-a-bug.ars" target="_blank">just so <i>hard:</i></a>
<blockquote><i>
In Congressional testimony last month, FBI Director Robert Meuller said the ruling "will inhibit our ability" to do GPS tracking "in a number of surveillances where it has been tremendously beneficial." Mueller said that in cases where they didn't have probable cause, the FBI is forced to deploy teams of six to eight people to track suspects the old-fashioned way.
<br /><br />
"If you require probable cause for every technique, then you are making it very, very hard for law enforcement," an FBI lawyer told NPR.
</i></blockquote>
But, uh, isn't that <i>why</i> we require a warrant?  It's <i>supposed to be hard</i> to spy on people.  That's kind of one of the key principles of the Constitution.  Again, as Lee notes:
<blockquote><i>
Of course, that's kind of the point. Law enforcement's job would be a lot easier if we just did away with the Fourth Amendment and gave the police unfettered spying powers. But that would open the door to abuses of power, so the founders wisely limited government searches to cases where the government could demonstrate it had probable cause to believe that a crime had been committed.
</i></blockquote>
Separately, the fact that so many of the devices were able to be turned back on via a warrant suggests that this intermediary review step isn't really a problem for the FBI in most cases.  But it's one that likely stops significant abuse of the system.<br /><br /><a href="http://www.techdirt.com/articles/20120323/03114118220/fbi-turns-back-2750-3000-gps-devices-it-turned-off-lack-warrant.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120323/03114118220/fbi-turns-back-2750-3000-gps-devices-it-turned-off-lack-warrant.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120323/03114118220/fbi-turns-back-2750-3000-gps-devices-it-turned-off-lack-warrant.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>spy-spy-spy-away</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120323/03114118220</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 21 Mar 2012 10:57:59 PDT</pubDate>
<title>NSA Insists It Doesn't Have 'The Ability' To Spy On American Emails, Texts, Etc.</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120321/10182618184/nsa-insists-it-doesnt-have-ability-to-spy-american-emails-texts-etc.shtml</link>
<guid>http://www.techdirt.com/articles/20120321/10182618184/nsa-insists-it-doesnt-have-ability-to-spy-american-emails-texts-etc.shtml</guid>
<description><![CDATA[ Earlier this week, we <a href="http://www.techdirt.com/articles/20120317/00381118147/terrifying-look-into-nsas-ability-to-capture-analyze-pretty-much-every-communication.shtml" target="_blank">wrote</a> about an excellent and detailed <a href="http://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/all/1" target="_blank">article in Wired</a> about the efforts by the NSA to collect and store pretty much all communications data they could get their hands on -- whether originating in the US or not (despite clear rules that the NSA is only supposed to deal with foreign threats and communications).  Some of that report merely confirmed earlier stories and news reports about programs like the warrantless wiretapping program the NSA runs, as well as deals with major telcos to allow NSA equipment directly on the network at key points to collect data.  But parts of it broke some new news about the extent and depth of the NSA's data collection program, as well as its efforts to break the encryption that protects certain communications.  As we noted, it was all pretty terrifying.
<br /><br />
The article appears to have caught the attention of Congress as well, with Rep. Hank Johnson directly asking NSA boss General Keith Alexander (who you may remember from his FUD warnings about Anonymous <a href="http://www.techdirt.com/articles/20120221/23433317835/nsa-anonymous-might-one-day-hack-power-grids-anonymous-huh.shtml">taking down power grids</a>) about whether or not various points made in the article are true, and <a href="http://www.wired.com/threatlevel/2012/03/nsa-denies-wired/" target="_blank">Alexander denies them all</a>, insisting that the NSA has neither the <i>technical</i> nor the <i>legal</i> capabilities to capture and sift through communications from Americans.
<center>
<iframe width="420" height="315" src="http://www.youtube.com/embed/oYNXVgYhPOc?rel=0" frameborder="0" allowfullscreen></iframe>
</center>
He clearly states that "the NSA does not have the ability to do that in the United States," which is almost certainly untrue.  He repeatedly states that for content in the US, the NSA would need to get a warrant to get this information.  To be fair, he may be responding very carefully to Johnson's question, which is directed at the contents of emails or phone conversations -- which does require a warrant.  Many of the bigger questions are less about the direct content of the communications but the metadata around those communications.  Though, there are <i>some</i> questions about access to the actual content as well, especially when it comes to email.  Alexander also insists that the NSA defers to the FBI on matters involving people in the US, even though many, many reports have suggested this is not actually true.
<br /><br />
Johnson does press Alexander a bit on the question of whether it's the legal or technical parts that are holding the NSA back, and Alexander repeats that they simply don't have the technical capabilities:
<blockquote><i>
"We don&#8217;t have the technical insights in the United States. In other words, you have to have something to intercept, or some way of doing that either by going to a service provider with a warrant or you have to be collecting in that area. We&#8217;re not authorized to do that, nor do we have the equipment in the United States to collect that kind of information."
</i></blockquote>
There is a slight pause between "technical" and "insights" in the way he says it, as if he's searching for the proper word before choosing insights, but he later clearly says they don't have the equipment to do so -- which seems to contradict a ton of reports out there from pretty credible sources within the NSA.
<br /><br />
As Ryan Singel <a href="http://www.wired.com/threatlevel/2012/03/nsa-denies-wired/" target="_blank">writes at Wired</a>:
<blockquote><i>
It&#8217;s hard to tell here whether Alexander is parsing the questions closely, misspeaking or telling the truth. The heads of the intelligence service have a long tradition of misspeaking or telling untruths that advance their agenda. President George Bush himself on the re-election campaign trail said that no American had been wiretapped without a warrant, which was plainly false, according to numerous news stories and the government&#8217;s own admissions of the program.
<br /><br />
In the aftermath of those half-truths, the Congress passed, and Bush signed into law, the FISA Amendments Act, which re-wrote the nation&#8217;s surveillance laws to give the NSA a much freer hand to wiretap American infrastructure wholesale.
</i></blockquote>
I know that the assumption many will make is that he's flat out lying, and that wouldn't surprise me, but I do wonder if he's trying to pick his words carefully to get around lying&mdash;or if he knows he's so protected that he can just say whatever he wants without much fear of ever being called on it.<br /><br /><a href="http://www.techdirt.com/articles/20120321/10182618184/nsa-insists-it-doesnt-have-ability-to-spy-american-emails-texts-etc.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120321/10182618184/nsa-insists-it-doesnt-have-ability-to-spy-american-emails-texts-etc.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120321/10182618184/nsa-insists-it-doesnt-have-ability-to-spy-american-emails-texts-etc.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>are-they-just-lying?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120321/10182618184</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 5 Oct 2011 11:32:46 PDT</pubDate>
<title>RIAA Law Lets Law Enforcement Ignore 4th Amendment, Search Private Property With No Warrants</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20111005/03430716204/riaa-law-lets-law-enforcement-ignore-4th-amendment-search-private-property-with-no-warrants.shtml</link>
<guid>http://www.techdirt.com/articles/20111005/03430716204/riaa-law-lets-law-enforcement-ignore-4th-amendment-search-private-property-with-no-warrants.shtml</guid>
<description><![CDATA[ One of my favorite historical stories that really demonstrates how a "legacy" industry can take regulatory capture to extreme lengths to protect their monopoly rights is the story of the <a href="http://www.techdirt.com/articles/20070110/004225.shtml">French button-makers guild</a> in 1666, as relayed by famed economic historian Robert Heilbroner:
<blockquote><i>
The question has come up whether a guild master of the weaving industry should be allowed to try an innovation in his product. The verdict: 'If a cloth weaver intends to process a piece according to his own invention, he must not set it on the loom, but should obtain permission from the judges of the town to employ the number and length of threads that he desires, after the question has been considered by four of the oldest merchants and four of the oldest weavers of the guild.' One can imagine how many suggestions for change were tolerated.
<br /><br />
Shortly after the matter of cloth weaving has been disposed of, the button makers guild raises a cry of outrage; the tailors are beginning to make buttons out of cloth, an unheard-of thing. The government, indignant that an innovation should threaten a settled industry, imposes a fine on the cloth-button makers. But the wardens of the button guild are not yet satisfied. They demand the right to search people's homes and wardrobes and fine and even arrest them on the streets if they are seen wearing these subversive goods."
</i></blockquote>
It's not hard to see the RIAA or the MPAA in that description of the old guilds, and it seems like they're trying to take the comparison even further.  As we covered back in May, the RIAA has been pushing really, really hard for California to pass a law that would allow for <a href="http://www.techdirt.com/articles/20110517/22252614309/riaa-calls-4th-amendment-passe-pushes-warrantless-searches.shtml">warrantless searches</a> of private property, specifically of anyone involved in reproducing CDs or DVDs for "commercial" purposes.  The RIAA was so cavalier about this, that a spokesperson even said: "I don't think the scope of the search is something a regulator needs to be worried about."  In other words, no government oversight.  Just go ahead and search private businesses.
<br /><br />
This seemed to be so obviously against the 4th Amendment that it seemed ridiculous that anyone would seriously consider such a bill.  So, of course, Governor Jerry Brown of California <a href="http://techfreedom.org/blog/2011/10/04/copyright-done-right-warrantless-factory-searches-arent-right-way-stop-dvd-piracy" target="_blank">just signed it into law</a>.  The law decimates the 4th Amendment, and says that law enforcement has the right to search the premises of anyone making optical discs for commercial purposes, without any warning or warrant.   Hell, even the state's <a href="http://www.leginfo.ca.gov/pub/11-12/bill/sen/sb_0501-0550/sb_550_cfa_20110816_164658_asm_comm.html" target="_blank">own analysis of the bill</a> warns that it's not sure that the bill "would stand up to constitutional scrutiny."
<br /><br />
It's beginning to sound like the French button makers guild getting to enter your homes and closets to find those dreaded "non-compliant" buttons.  It's getting so ridiculous that even those who are generally supporters of the RIAA/MPAA's positions <a href="http://techfreedom.org/blog/2011/10/04/copyright-done-right-warrantless-factory-searches-arent-right-way-stop-dvd-piracy" target="_blank">are saying this bill goes way too far</a>, noting that it grants way too much power to law enforcement (often at the urging of private industry) to go on "fishing expeditions" at companies they dislike.  And let's not even get started on what kind of precedent it sets when you can so easily remove the Constitutional requirement for a warrant.<br /><br /><a href="http://www.techdirt.com/articles/20111005/03430716204/riaa-law-lets-law-enforcement-ignore-4th-amendment-search-private-property-with-no-warrants.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20111005/03430716204/riaa-law-lets-law-enforcement-ignore-4th-amendment-search-private-property-with-no-warrants.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20111005/03430716204/riaa-law-lets-law-enforcement-ignore-4th-amendment-search-private-property-with-no-warrants.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>the-infringement-police</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20111005/03430716204</wfw:commentRss>
</item>
<item>
<pubDate>Tue, 27 Sep 2011 04:21:10 PDT</pubDate>
<title>Details Emerging On Stingray Technology, Allowing Feds To Locate People By Pretending To Be Cell Towers</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml</link>
<guid>http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml</guid>
<description><![CDATA[ More details are emerging on yet another secret program used by federal law enforcement to locate people using their mobile phones... but without obtaining warrants.  The WSJ has the scoop on what's generically referred to <a href="http://online.wsj.com/article/SB10001424053111904194604576583112723197574.html" target="_blank">as Stingray tracking devices</a> (even if the actual products go by a few names, and only some are actually called Stingrays).  They appear to be devices that mimic mobile phone towers.  The feds use them hoping to have the phones of people they're tracking connect to the device (instead of a real mobile phone tower), and then using signal strength to figure out how far away they are.  Do that a few times and you can triangulate someone's location, even if they're not making a call, and without having to ask the telcos for any location info (which, so far, they've been more than happy to turn over anyway).
<br /><br />
They apparently used this technology to arrest a guy named Daniel David Rigmaiden, but he's now causing some trouble.  That's because he's asking for the details of how he was found, and the court seems equally concerned that this was done outside of the bounds of the Fourth Amendment.  It won't surprise you to discover that law enforcement regularly uses such Stingrays without a warrant.  Apparently, the court is skeptical of the government's claim that it doesn't need a warrant to use such a device:
<blockquote><i>
In a February hearing, according to a transcript, Judge Campbell asked the prosecutor, "Were there warrants obtained in connection with the use of this device?"
<br /><br />
The prosecutor, Frederick A. Battista, said the government obtained a "court order that satisfied [the] language" in the federal law on warrants. The judge then asked how an order or warrant could have been obtained without telling the judge what technology was being used. Mr. Battista said: "It was a standard practice, your honor."
<br /><br />
Judge Campbell responded that it "can be litigated whether those orders were appropriate."
</i></blockquote>
Last week, the feds argued that they should not have to explain how they tracked Rigmaiden, because it would reveal too much information "since its public release could harm law enforcement efforts by compromising future use of the equipment."  So, we can't tell you if the tracking system we use violates the 4th Amendment, because, you know, you might stop us from using it.  Very compelling, but all too typical of law enforcement these days.  Hopefully the court rejects the argument.
<br /><br />
Later in the article, various law enforcement officials say that they can use the device since it only detects location, but doesn't eavesdrop.  That's pretty questionable.  The 4th Amendment doesn't make such a distinction.  In fact, reading the 4th Amendment:
<blockquote><i>
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
</i></blockquote>
It would seem that using such a device to locate a person in their house without a warrant seems to clearly violate the text of the Amendment.  Hopefully the court will agree.<br /><br /><a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20110923/17251716080/details-emerging-stingray-technology-allowing-feds-to-locate-people-pretending-to-be-cell-towers.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>without-warrants-of-course</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20110923/17251716080</wfw:commentRss>
</item>
<item>
<pubDate>Mon, 26 Sep 2011 07:08:30 PDT</pubDate>
<title>Will California's Governor Outlaw Police From Searching Mobile Phones Without A Warrant?</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/blog/wireless/articles/20110925/23375616087/will-californias-governor-outlaw-police-searching-mobile-phones-without-warrant.shtml</link>
<guid>http://www.techdirt.com/blog/wireless/articles/20110925/23375616087/will-californias-governor-outlaw-police-searching-mobile-phones-without-warrant.shtml</guid>
<description><![CDATA[ For years, we've discussed the <a href="http://www.techdirt.com/articles/20080122/005904.shtml">legality</a> of police searching the contents of your smartphone at a traffic stop.  The issue is a bit complex legally.  The law generally says that police can search through anything on your body, but that was generally meant for things like your wallet or other <i>physical</i> storage.  When it comes to something like a smartphone, that contains all sorts of details about your life (and the ability to access a hell of a lot more) the questions become a lot trickier.  It certainly feels like it should be against the 4th Amendment to allow such searches without a warrant -- but the courts have been mixed.  Tragically, earlier this year, California's Supreme Court <a href="http://www.techdirt.com/blog/wireless/articles/20110105/03061512525/another-court-says-its-okay-police-to-search-your-mobile-phone-without-warrant.shtml">ruled that such searches were perfectly legal</a> without a warrant.  In response, the California legislature passed a bill, <a href="http://info.sen.ca.gov/cgi-bin/postquery?bill_number=sb_914&#038;sess=CUR&#038;house=B&#038;site=sen" target="_blank">SB 914</a>, which would require police to get a warrant.
<br /><br />
But there's a problem: Governor Jerry Brown hasn't signed it yet.
<br /><br />
Despite <a href="http://www.sfbg.com/bruce/2011/09/22/sos-sign-petition-urge-gov-brown-sign-bill-restricting-warrantless-police-searches-" target="_blank">petitions</a> and a variety of <a href="http://www.pressdemocrat.com/article/20110914/OPINION/110919779/1042?Title=PD-Editorial-Brown-should-OK-limits-on-cell-searches" target="_blank">editorials</a> urging him to sign it, he's still sitting on it (he has until October 9th).  Wired is reporting a rumor that Brown has <a href="http://www.wired.com/threatlevel/2011/09/smartphone-warrant/?utm_source=feedburner&#038;utm_medium=feed&#038;utm_campaign=Feed%3A wired27b %28Blog - 27B Stroke 6 %28Threat Level%29%29" target="_blank">agreed to veto the legislation</a> in an effort to please the "law enforcement lobby."
<br /><br />
As the Wired article notes, the law itself is already pretty weak, allowing law enforcement to ignore the warrant requirement under vaguely defined emergency circumstances.  It also doesn't require any official reporting of such uses where the warrant requirement is ignored, meaning that such an exception might be abused.  But it certainly takes things a big step in the right direction concerning an individual's right to privacy.  Hopefully Governor Brown recognizes this and signs the bill.<br /><br /><a href="http://www.techdirt.com/blog/wireless/articles/20110925/23375616087/will-californias-governor-outlaw-police-searching-mobile-phones-without-warrant.shtml">Permalink</a> | <a href="http://www.techdirt.com/blog/wireless/articles/20110925/23375616087/will-californias-governor-outlaw-police-searching-mobile-phones-without-warrant.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/blog/wireless/articles/20110925/23375616087/will-californias-governor-outlaw-police-searching-mobile-phones-without-warrant.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>what-4th-amendment?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20110925/23375616087</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 24 Aug 2011 08:58:28 PDT</pubDate>
<title>Surprise: Federal Court Says Warrant Needed For Mobile Phone Location Info</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20110823/17433915639/surprise-federal-court-says-warrant-needed-mobile-phone-location-info.shtml</link>
<guid>http://www.techdirt.com/articles/20110823/17433915639/surprise-federal-court-says-warrant-needed-mobile-phone-location-info.shtml</guid>
<description><![CDATA[ There have been some mixed rulings on whether or not the government needs a warrant and to show probable cause (a la what's left of the 4th Amendment) in order to get mobile phone location info.  Courts have ruled in different ways, but the federal courts, for the most part, have been much more agreeable to saying no warrant is needed (state court seem to lean the other way).  However, in a bit of a surprise, a federal court <a href="http://arstechnica.com/tech-policy/news/2011/08/judge-says-warrant-required-for-cell-phone-location-data.ars" target="_blank">went the other way and said a warrant is needed</a> under the 4th Amendment.
<br /><br />
The court actually lays out the issue directly, and worries about what it means if the government can just get this info without showing probable cause:
<blockquote><i>
What does this mean for ordinary Americans? That at all times, our physical movements
are being monitored and recorded, and once the Government can make a showing of less-than-probable-
cause, it may obtain these records of our movements, study the map our lives, and learn
the many things we reveal about ourselves through our physical presence.
</i></blockquote>
After going through the relevant (and at times conflicting) laws and case law, the court notes that while general location info may be public, rather than private info, a massive collection of such info seems to go over the line.  That's especially true when the government can access multiple records from multiple people:
<blockquote><i>
The cell-site-location records at issue here currently enable the tracking
of the vast majority of Americans. Thus, the collection of cell-site-location records effectively
enables "mass" or "wholesale" electronic surveillance, and raises greater Fourth Amendment
concerns than a single electronically surveilled car trip. This further supports the court's
conclusion that cell-phone users maintain a reasonable expectation of privacy in long-term cell-site-
location records and that the Government's obtaining these records constitutes a Fourth
Amendment search.
</i></blockquote>
The court also dives into the controversy over the <a href="http://www.techdirt.com/articles/20100118/0232247789.shtml">third party doctrine</a>, which basically says that once you "give up" information to a third party, you no longer have 4th Amendment protections over it -- and in this case, the government argues that users have given up their location info to mobile operators.  The court notes that the third party doctrine does still apply to such info, but that it should not apply to <i>cumulative</i> records, saying that this is an important limitation on the third party doctrine.
<blockquote><i>
This court concludes that cumulative cell-site-location
records implicate sufficiently serious protected privacy concerns that an exception to the third-party-
disclosure doctrine should apply to them, as it does to content, to prohibit undue
governmental intrusion. 7 Consequently, the court concludes that an exception to the third-party-disclosure
doctrine applies here because cell-phone users have a reasonable expectation of
privacy in cumulative cell-site-location records, despite the fact that those records are collected
and stored by a third party.
</i></blockquote>
Finally, and most importantly, the court makes a plain language rejection of the excuses often used by the government to pick away at the 4th Amendment:
<blockquote><i>
The fiction that the vast majority of the American population consents to warrantless
government access to the records of a significant share of their movements by "choosing" to
carry a cell phone must be rejected. In light of drastic developments in technology, the Fourth
Amendment doctrine must evolve to preserve cell-phone user's reasonable expectation of
privacy in cumulative cell-site-location records.
</i></blockquote>
It's definitely a compelling and well-reasoned argument from Judge Nicholas Garaufis, and we hope that other courts will follow.  However, we fear that he walks such a fine line in distinguishing this ruling from other cases, that it will be way too easy for higher courts to overturn this ruling.<br /><br /><a href="http://www.techdirt.com/articles/20110823/17433915639/surprise-federal-court-says-warrant-needed-mobile-phone-location-info.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20110823/17433915639/surprise-federal-court-says-warrant-needed-mobile-phone-location-info.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20110823/17433915639/surprise-federal-court-says-warrant-needed-mobile-phone-location-info.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>didn't-see-that-coming</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20110823/17433915639</wfw:commentRss>
</item>
<item>
<pubDate>Wed, 22 Jun 2011 05:32:08 PDT</pubDate>
<title>Prosecutors In Vermont Don't Want Limits On Computer Search Warrant</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20110620/11130314767/prosecutors-vermont-dont-want-limits-computer-search-warrant.shtml</link>
<guid>http://www.techdirt.com/articles/20110620/11130314767/prosecutors-vermont-dont-want-limits-computer-search-warrant.shtml</guid>
<description><![CDATA[ The EFF has the unfortunate story of how prosecutors in Vermont, doing an investigation into an identity theft, requested <a href="https://www.eff.org/press/archives/2011/06/17" target="_blank">an incredibly broad warrant to seize computer equipment, CDs, mobile phones and other devices</a> in someone's home.  The judge realized this might be way too broad, and limited the warrant, "putting reasonable bounds on the search, as well as including basic privacy protections for information and data not connected to the identity theft under investigation."  It's hard to see how anyone could argue against such limits... but apparently, the prosecutors feel otherwise.  They filed a petition in the Vermont Supreme Court to allow the original, overly broad warrant be allowed instead.  I can't fathom the argument for such a fishing expedition.  Warrants are supposed to be narrowly executed around the specific crime being investigated.  The court limits made sense here, and yet prosecutors seem to be admitting that they want to go fishing for anything else they can find as well.<br /><br /><a href="http://www.techdirt.com/articles/20110620/11130314767/prosecutors-vermont-dont-want-limits-computer-search-warrant.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20110620/11130314767/prosecutors-vermont-dont-want-limits-computer-search-warrant.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20110620/11130314767/prosecutors-vermont-dont-want-limits-computer-search-warrant.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>why?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20110620/11130314767</wfw:commentRss>
</item>
</channel>
</rss>