Court Gives Its Blessing To FBI’s J6 Geofence Warrant, Denies Motion To Suppress

from the tons-of-data-in-a-pretty-tight-fence dept

Geofence warrants are just part of day-to-day cop business these days. Rather than moving forward with a list of suspects, law enforcement agencies just ask for data on everyone in a certain area at a certain time and move backwards to probable cause to investigate and arrest.

When a bunch of violent jackasses stormed the Capitol in hopes of disrupting a (no longer peaceful) transition of power, they immediately became targets of federal investigators. The Capitol raid gave investigators a haystack of targets, all generating another, larger haystack of location data. The best place to get this data in bulk is from Google, which really enjoys collecting location data.

Shortly after the insurrection attempt, the FBI issued lots of geofence warrants and began working its way back to a (long) list of suspects. How much data the FBI initially obtained wasn’t revealed until a J6 suspect challenged one of the FBI’s geofence warrants in court. It was a lot.

A filing in the case of one of the January 6 suspects, David Rhine, shows that Google initially identified 5,723 devices as being in or near the US Capitol during the riot. Only around 900 people have so far been charged with offenses relating to the siege.

[…]

For the final step, the government sought subscriber information, including phone numbers, Google accounts, and email addresses, for two groups of users. The first was for devices that appeared to have been entirely within the geofence, to about a 70 percent probability. The second was any devices for which the Location History was deleted between January 6 and January 13

From this, in early May 2021, the FBI received identifying details for 1,535 users, as well as detailed maps showing how their phones moved through the Capitol and its grounds.

The suppression motion filed last month has been denied. The ruling [PDF] from the DC District Court does have a few problems with geofence warrants generally, but not this particular one. (h/t Michael Vario)

Drawing from a dearth of precedent (one federal court opinion and six magistrate judge examinations of warrant requests), the DC court moves toward creating some of its own.

First, it says the warrant was not “overbroad,” no matter how much data was sorted through by Google and given to the FBI.

Specifically, Defendant first argues that step one, in which Google provided the Government with an anonymized list of devices falling within the geofence’s geographic and temporal parameters, was overbroad because it required Google to query its entire Sensorvault without probable cause “to search untold millions of unknown accounts in a massive fishing expedition.” But, as the Government points out, the relevant question is not how Google runs searches on its data, but what the warrant authorizes the Government to search and seize. Under Defendant’s theory, no doubt many search warrants and most third-party subpoenas for protected records would be unconstitutionally overbroad because they necessarily would require the third party to search some group of records larger than those specifically requested, whether they reside in a file cabinet or on a server

The court also says there’s no expectation of privacy in anonymized location data. Referencing the Supreme Court’s Carpenter decision, it says hoovering up massive amounts of data related to hundreds of devices isn’t the same thing as harvesting data targeting a particular device over the space of days or weeks. But even though it comes to this conclusion, it still says geofence warrants have the potential to do damage to Fourth Amendment rights.

Defendant has made no allegation that his or others’ identity was knowable based on the anonymized list produced at step one, and considering the geographic and temporal limitations on the geofence area, it likely would not be possible to deanonymize the list indirectly by cross-referencing more revealing location points—for example, the location where the device spent the night. Accordingly, on the facts of this case, the Court has no basis on which to find that Defendant’s Fourth Amendment rights were implicated at step one.

That said, the Court acknowledges that the scope of legally obtainable anonymous data made possible by geofencing technology could present potentially significant risks to privacy, even if those privacy interests cannot be expressed through Defendant’s challenge to step one of this particular warrant, on these particular facts, under current law.

Finally, it says the supposed overbreadth of the warrant was justified by the scope of the (mass) criminal event.

At the outset, because a warrant’s authorization may be “no broader than the probable cause on which it is based,” Hurwitz, 459 F.3d at 473 (citation omitted), it is necessary to define the scope of that probable cause. January 6 was a unique event in a geographically unusual place such that the scope of probable cause was uncommonly large. Because the Capitol building was not open to the public on January 6 due to the counting of the votes of the Electoral College, the fact of having entered the building during the geofence timeframe itself constitutes evidence of a crime

Based on an unusual abundance of surveillance footage, news footage, and photographs and videos taken by the suspects themselves while inside the Capitol building, there is much more than a “fair probability” that the suspects were within the geofence area and were carrying and using smartphones while there, such that their devices’ LH would provide evidence of a crime.

Also, the geofence set up by the FBI was extremely unlikely to cast a dragnet full of innocent bystanders, given the Capitol building’s location.

[A]s relevant to the 37 deleted devices, the area around the Capitol is unusual for its lack of nearby commercial businesses or residences. Indeed, while Defendant does not make any specific allegations about any such nearby buildings, the Court’s best estimate is that the nearest is no less than about a quarter of a mile away, or approximately 400 meters. By Defendant’s own admission, the error radius is not known to exceed 387 meters, Def.’s Mot.Suppress at 8, and the error radius for Defendant’s location points in particular extends only as high as 264 meters…

Furthermore, while public streets do appear to be somewhat closer to the geofence area, extensive road closures west of the Capitol, in anticipation of the rally on the ellipse on January 6, including on Pennsylvania Avenue, reduce the likelihood that any stray cars would have been picked up in the geofence error radius

To its credit, the FBI set up a very tight geofence.

And it could do it in this case because, as the court pointed out, pretty much everyone in the Capitol building that didn’t work there was, at the very least, trespassing on federal property.

And, even if it hadn’t found this particular warrant in this particular case to be constitutional, the court still would have given the government a pass on this one. The good faith exception would apply, especially since the defendant’s particularity arguments seem to focus more on the size Google’s data dump, rather than the warrant approved to obtain the location records from Google.

This denial can be appealed. And maybe it will be. But given the facts of the case here, it seems unlikely the DC Appeals Court will find any reason to overturn the lower court’s ruling. The facts favor the FBI here and the dearth of existing precedent will likely result in future applications of the good faith exception. That doesn’t mean these warrants aren’t worth challenging. It just means this geofence warrant was better crafted than most.

Filed Under: , , ,
Companies: google

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Court Gives Its Blessing To FBI’s J6 Geofence Warrant, Denies Motion To Suppress”

Subscribe: RSS Leave a comment
29 Comments
That One Guy (profile) says:

Start with the guilty and narrow down to the more so

Probably the biggest problem with geofence warrants is how they turn the entire process on it’s head, starting with a bunch of innocent people and then narrowing it down from there to the suspected guilty individual(s). When one is crafted such that anyone within the area has very high odds of being guilty of trespassing at a minimum that problem might still be there but it’s a lot less so, so I can’t say I’m surprised that the judge ruled this way.

HotHead says:

Re: Re:

Any investigation looks at anyone within the vicinity with means, then narrows it down to those with motive.

Is that a good way of describing it? Normally, there needs to be probable cause to believe that someone committed a crime. Most investigations need to do more than physically look at someone from a distance, and “do more” often requires a warrant-authorized search.

Suppose someone reports a fist fight in the open and that a police officer arrives at the scene in a minute. The police officer records every person nearby who looks physically capable of being in a fist fight. Is it reasonable for the police officer to get a single warrant which would allow the police to question every recorded person for the sake of determining which ones have a motive?

Unfortunately, I don’t know much about what the Fourth Amendment actually protects, but that kind of search covers too many innocent people.

Anathema Device (profile) says:

Re: Re: Re:

“there needs to be probable cause”

To get a warrant etc, or arrest someone.

Not to ask questions. Or investigate the person without involving them.

In this case, the fact they were only looking at people in the Capitol who had no right to be there, means you’ve got probable cause straight up.

You’re misunderstanding me.

If there’s a fight and police are called, they are going to question bystanders as to what happened. Then they will narrow it down by discovering who knew the victim, who hated the victim etc. But the fact people were there means they might know something.

Now take a murder victim to the house. The first people the police will talk to is anyone with access to the house, or who saw the victim recently. Then they narrow it down from that.

They can’t possibly start investigating until they know who the guilty party. The whole point of the initial investigation is to work who could have done it, and then focus. It’s absolutely the wrong way to go about it to decide who did it and then focus on that person before they rule out other possible suspects.

I mean, maybe the police are different in the USA. But in Australia and the UK, that’s how they do things. You can even watch them explain it all on Youtube 😉

nasch (profile) says:

Re: Re:

Any investigation looks at anyone within the vicinity with means

I’m not an investigator but that doesn’t sound right to me. I would expect most investigations would start with either people who had a motive to commit the crime, or with some kind of identification. A person in the area fitting an eyewitness description of the suspect, for example. Not just investigating everyone who happened to be near the crime in hopes of narrowing it down to the guilty party/ies.

Anon says:

Not Surprising

Considering that the odds are that of the 5700 devices identified, at least 1 in 6 appears to be tied to someone committing a serious act, I would say this time the court got it right.

Every court case is different. I would hope when a case involves 5700 data points to catch maybe one or two suspects, and many could have been in legitimate locations or time periods not connected to a crime, that the court would see it the other way. My fear is that the police who get data in such a case will not look at 5700 suspects in depth to find one or two, but rather will focus on “the usual suspects” to what may be an unlikely actual perp. I would hope mere cellphone data is not at all sufficient to obtain a broader warrant to search a suspect’s home etc.

I also hope that the existence of cellphone location data is not in and of itself sufficient to remove “reasonable doubt”. Much more evidence is (should be) required that establishes beyond a reasonable doubt the guilt of the suspect.

Innocent people have the right to be free from intrusive police investigation unless there is more than a single simple data point to precipitate the investigation, much as “broken taillight” and skin colour is not an excuse to search a car for drugs or weapons.

Private Coward says:

Deleting Location History

What’s particularly unsettling is that a warrant was granted to isolate users who deleted their location history. It’s entirely plausible that an innocent protester near (but not on) the Capitol grounds might have been appalled by what transpired, and deleted his/her location history out of disgust, or an abundance of caution. Or simply as a routine measure to limit the amount of personal data held by Google.

To base such a broad warrant on the use of a practice intended to improve privacy is disgraceful.

I can see that once a suspect has been identified by other means, that it would be fair to argue their deletion of location history demonstrates consciousness of guilt. But to simply round up people based on their desire to improve their privacy really seems wrong.

This comment has been flagged by the community. Click here to show it.

This comment has been flagged by the community. Click here to show it.

Anonymous Coward says:

“.. law enforcement agencies just ask for data on everyone in a certain area at a certain time and move backwards to probable cause to investigate and arrest. ”

But what if someone is not in possession of a cell phone at the time and is simply wandering around unaccounted for?
Oh Noes!!!
Soon we will all be required to have our cell phone in our possession at all times – or else!
That’s going on your permanent record Mr!

PaulT (profile) says:

Re:

“But what if someone is not in possession of a cell phone at the time and is simply wandering around unaccounted for?”

There’s enough video evidence by the mob gleefully recording their own crimes that such a person can likely be tracked by watching the footage, but interviewing people who were with them at the time of the attack, etc. For other people, it’s easier to do it the other way.

I get paranoia, but you are really stretching matters if you think this particular event is going to lead to any persecution of the innocent. In fact, I’d argue that the reason this is taking so long to prosecute everyone who committed crimes while broadcasting them to the world is because they’re taking great pains not to involve innocent parties.

ke9tv (profile) says:

Re: Re:

I’d argue that the reason this is taking so long to prosecute everyone who committed crimes while broadcasting them to the world is because they’re taking great pains not to involve innocent parties.

The biggest single reason that it’s taking so long is that there are so many defendants. Prosecuting over a thousand criminal cases doesn’t happen overnight. You can’t really have a large number in the courtroom simultaneously and give everyone a fair trial, so the cases are having to go in sequence.

One thing that’s impressed me with the prosecutions is that they’re being so successful at going after the big charges, such as sedition. They’ve been agonizingly slow at going after the suits, but these things always start by prosecuting the boots and working up. For one thing, prosecuting the boots is one way that you get witnesses to flip on the bigger fish. Unfortunately, Tr-mp’s life expectancy at his age is shorter than the probable time it will take to bring him to trial.

This comment has been flagged by the community. Click here to show it.

This comment has been deemed insightful by the community.
Brian Kirschner says:

Re: Murder?

Can you offer evidence that the officer who shot and killed Ashli Babbitt acting contrary to what a typical law enforcement officer in the same situation with the same knowledge of the facts at that moment would act?

That is the layman’s version of the legal principal that determines when an officer’s shooting of a person is a lawful use of force or a potential crime.

What evidence can you offer that Ii n that crucial moment while defending the very last barrier prior to entry to nto the floor of the House chamber, while the members of the House and their staff were still in the process f being evacuated, when Ashli was the very first person to attempt to cross the threshold of the doorway after the glass had been shattered, that this was an unlawful use of force by the law enforcement officer?

I understand your sympathies may align more with the protest at the Capitol than with the people attempting to complete the peaceful transfer of power but if you want to claim Ashli Babbitt was murdered, you need to meet the evidentiary standard and not just express your emotional reaction to her death.

That One Guy (profile) says:

Re: Re: Motives matter

Hell, even if they were equal the comparison still wouldn’t hold up as BLM protests are due to the ‘unfortunate’ tendency for people not lily-white to die with startling frequency when interacting with law enforcement and the legal system’s indifference towards that whereas the Jan 6 failed insurrection was a bunch of people trying to prevent the transfer of power to the newly elected president.

‘If society won’t pay attention to us being killed and a legal system that doesn’t care we’ll make enough of a racket that they’ll have to pay attention’ isn’t even in the same ballpark with ‘Our guy lost the election and literally dozens of court cases trying to overturn it so we’ll storm the capitol and attempt to overthrow the election that way.’

Anonymous Coward says:

Can the Pipe-Bomber’s identity can be sourced from geofence information? It seems as though the Secret Service had a vested interest in erasing all texts of J6 but was one of few agencies that knew that when the 1st pipe bomb was discovered that the security for from of Capital would immediately be diverted to pipe bomb’s location.

LostInLoDOS (profile) says:

The mess of 6 Jan

This entire situation was and remains a mess.
First you have a few brain-dead fools militarised for a man who specifically said multiple times to remain peaceful and ovary the law.

Then You have the prosecution round up. Where nearly a thousand people who broke no law, and are overwhelmingly lower income, are threatened with major (and unsubstantiated) crimes in order to pad out many plea deals that are, at best, political theatre.

Now we find out many of those arrested were found by less than perfect data searches.

And
The growing number of people being released, saying they made the plea because they couldn’t afford to fight? And the reactions of the Judges is not to investigate prosecutorial misconduct… rather they threaten the released with further time for perjury.

The whole situation is a mess.

A few dozen break the law. Thousands more fall to the jackboots. A political roundup for exercising the constitutional right to protest.
We have seen this for years now.
Every protest has criminal elements. The looters and anarchists of Antifa. The Nazi thugs of counter protest.
But both sides play the wrong tune!
There is nothing wrong with peaceful protest. That is what the majority of recent protests have seen. BLM, historical statues, police misconduct, 6 Jan.
video footage when looked at completely and objectively shows every one of these protests (excluding Seattle) has been overwhelmingly peaceful.

This nonsense needs to stop. The media, be it CNN or FN, needs to stop cherry picking footage. Prosecutors who target based on politics need to be healed accountable. And people need to stop pretending that either BLM or 6Jan actions were, except for a small group, anything but peaceful.

mfellalaw (user link) says:

Thanks for social bookmarking websites list. Really it gonna help many freshers to bookmark their websites/posts, etc. it has various advantages as mentioned above but most importantly it has the main advantage to bloggers, free social bookmarking websites will help them fetch traffic to their websites. When anyone submits any link to any famous bookmarking website, it gets tonnes of free attention and traffic.
https://www.mfellalaw.com/

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...