Court Calls Out Government For The 'General Warrant' It Served To Facebook

from the but-awards-it-an-A-for-effort dept

In a disturbing case involving the sex trafficking of minors, the 11th Circuit Appeals Court has reached a few interesting conclusions involving digital searches and the Fourth Amendment. Included in the court's findings are rulings on the use of the All Writs Act to force Apple to unlock a device, an email warrant served to Microsoft, and warrants used to obtain a vast amount of information from Facebook. [h/t Orin Kerr]

The All Writs Act received a ton of free publicity thanks to Apple's fight with the DOJ over the (forced) unlocking of the San Bernardino shooter's iPhone. Ultimately, the DOJ hired outside help to crack open the phone, abandoning its search for helpful precedent. (And, ultimately, the phone -- the shooter's work-issued phone -- contained nothing of interest.)

Here, the Appeals Court finds [PDF] there's nothing wrong with using the 1789 All Writs Act to paper over holes in the 200+ years of legislation.

The authority granted by the All Writs Act is broad but not boundless. The Act “is a residual source of authority” that permits issuing writs only if they “are not otherwise covered by statute.” Penn. Bureau of Corr. v. U.S. Marshals Serv., 474 U.S. 34, 43, 106 S. Ct. 355, 361 (1985). It is a gap filler. “Where a statute specifically addresses the particular issue at hand, it is that authority, and not the All Writs Act, that is controlling.” Id. And where Congress has proscribed a certain type of judicial action, the Act cannot overcome that proscription. See id. The bypass order meets this requirement because no statute expressly permits or prohibits it.

Using somewhat circular reasoning, the court states the All Writs warrant issued here doesn't produce any Fourth Amendment difficulties because Apple willingly complied with it.

To comply with the bypass order, Apple simply had to have an employee plug the iPad into a special computer and then transfer the iPad’s data to a thumb drive. That is not an unreasonable burden, especially in light of the fact that Apple did not object to the bypass order’s requirements.

More helpfully, the court seems to suggest it's amenable to challenges like the one raised here. In most cases, challenging an All Writs warrant can only be done by the company receiving it. The court doesn't have to meet the issue of whether or not the defendants had standing to challenge the warrant served to Apple, but doesn't immediately dismiss their attempt to establish standing.

Moving on, the court examines the warrant served to Microsoft for emails related to the criminal charges. The court finds the warrant was not overbroad.

Viewed against that constitutional history, the Microsoft warrant complied with the particularity requirement. It limited the emails to be turned over to the government, ensuring that only those that had the potential to contain incriminating evidence would be disclosed. Those limitations prevented “a general, exploratory rummaging” through Moore’s email correspondence. The Microsoft warrant was okay.

How often does a court describe a warrant as merely "okay?" I'm guessing it's probably not that often. Here's why it did in this case, explained in the footnote attached to the "okay" descriptor.

It is somewhat troubling that the Microsoft warrant did not limit the emails sought to emails sent or received within the time period of Moore’s suspected participation in the conspiracy. Nevertheless, the warrant was appropriately limited in scope because it sought only discrete categories of emails that were connected to the alleged crimes. As a result, the lack of a time limitation did not render the warrant unconstitutional.

The government passes this warrant examination with C-. The work needs improvement and the government just isn't applying itself. Unfortunately, neither is the court if it's going to allow third parties do the government's particularity work for it.

The Facebook warrant, however, doesn't live up to the court's "okay" standard.

The Facebook warrants are another matter. They required disclosure to the government of virtually every kind of data that could be found in a social media account… And unnecessarily so. With respect to private instant messages, for example, the warrants could have limited the request to messages sent to or from persons suspected at that time of being prostitutes or customers. And the warrants should have requested data only from the period of time during which Moore was suspected of taking part in the prostitution conspiracy. Disclosures consistent with those limitations might then have provided probable cause for a broader, although still targeted, search of Moore’s Facebook account. That procedure would have undermined any claim that the Facebook warrants were the internet-era version of a “general warrant.”

If there's one thing law enforcement doesn't want to hear from a judge, it's the term "general warrant." Being compared to an occupying force is never a good thing. And these warrants are definitely not "okay."

The two warrants required Facebook to “disclose” to the government virtually every type of data that could be located in a Facebook account, including every private instant message Moore had ever sent or received, every IP address she had ever logged in from, every photograph she had ever uploaded or been “tagged” in, every private or public group she had ever been a member of, every search on the website she had ever conducted, and every purchase she had ever made through “Facebook Marketplace,” as well as her entire contact list. The disclosures were not limited to data from the period of time during which Moore managed the prostitution ring; one warrant asked for all data “from the period of the creation of the account” and the other did not specify what period of time was requested.

The government claimed the Facebook warrant was no different than warrants used to search electronic devices. In the latter case, the government generally takes possession of the device and digs through it until it finds what it needs. (This is an area of jurisprudence that is slowly shifting. With "persons' entire lives" often located on devices like smartphones, the analog equivalent is the government seizing the entire contents of a person's home before taking what's actually relevant to the case at hand.) The court has no sympathy for this argument, pointing out the warrant should have asked Facebook for only what was relevant and allow a non-government party to dig through the suspects' digital personal effects.

The means of hiding evidence on a hard drive — obscure folders, misnamed files, encrypted data — are not currently possible in the context of a Facebook account. Hard drive searches require time-consuming electronic forensic investigation with special equipment, and conducting that kind of search in the defendant’s home would be impractical, if not impossible. By contrast, when it comes to Facebook account searches, the government need only send a request with the specific data sought and Facebook will respond with precisely that data.

And the government should know this, because it does this thousands of times a year.

That procedure does not appear to be impractical for Facebook or for the government. Facebook produced data in response to over 9500 search warrants in the six-month period between July and December 2015.

Unfortunately, the government is allowed to keep the Facebook evidence under the "good faith" exception.

The Facebook warrants do not fall within either category of excludable warrants. As we have already explained, probable cause supported issuance of the warrants. And while the warrants may have violated the particularity requirement, whether they did is not an open and shut matter; it is a close enough question that the warrants were not “so facially deficient” that the FBI agents who executed them could not have reasonably believed them to be valid.

This suggests a two-step process for warrants served to service providers might be the better path to take in the future. While particularity is difficult to nail down when you're not sure exactly what you're looking for, trimming down demands for data and communications to relevant time periods raises the chances of warrants surviving suppression challenges. The court sets no precedent in this decision thanks to its good faith ruling, but the footnote addressing the Microsoft warrant and the multiple paragraphs devoted to the government's Facebook haul hints the government really needs to tighten up its search warrant procedures.


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    TechDescartes (profile), 29 Aug 2017 @ 7:59am

    So what you're saying is...

    ...the "good faith" exception is a euphemism for the "ends justifies the means" exception.

    reply to this | link to this | view in chronology ]

    • identicon
      David, 29 Aug 2017 @ 10:50am

      Re: So what you're saying is...

      I don't get how "good faith" can even apply in the case of a warrant. "Good faith" is for something like officers in the field not versed in the fine points of law and getting their case invalidated even though they did their best to act according to laws.

      But for a prosecutor or other law practitioner, and warrants are signed by those, having to rely on "good faith" means that they are unfit for performing the job they are paid for.

      We can argue about qualified immunity regarding them having to pay for the consequences of an invalid warrant. But if anybody should have not the right to revert to a "good faith exception" it is those who are paid to act on knowledge of the law rather than good faith.

      The ordinary citizen would have more justification to invoke "good faith exceptions" than a law practitioner.

      reply to this | link to this | view in chronology ]

  • icon
    TheResidentSkeptic (profile), 29 Aug 2017 @ 9:32am

    Or they could just be honest about...

    ... demanding ALL the data they have on every server in every country.

    reply to this | link to this | view in chronology ]

  • identicon
    tin-foil-hat, 29 Aug 2017 @ 10:46am

    A windfall for the dishonest

    The good faith exception is a terrible precedent but it's not guaranteed. The risk of blowing an investigation is probably incentive enough for most to be done by the book. Not everyone is as conscientious. Allowing a search of years worth of data provides an opportunity for a dishonest investigator to cherry pick data to win a case. If someone did a search 5 years ago for bomb making information after watching a documentary and the fact that all subsequent searches were for kittens, needlepoint and cupcake recipes is excluded an innocent person could potentially be framed for a crime they didn't commit. The 4th amendment exists to specifically address this risk. For all it's worth I believe the double jeopardy law was designed to prevent a situation where people are deprived of their right to a fair trial by having the government charge them with as many crimes as possible to negotiate a plea bargain. So much for that. There are not a lot of nails left to go in the 4th amendment coffin.

    reply to this | link to this | view in chronology ]

  • icon
    JoeCool (profile), 29 Aug 2017 @ 12:41pm

    Real life vs TV

    In Criminal Minds, Penelope would have just hacking Facebook's server and gotten all that info in minutes. Over the years of reading sites like this and the issues brought up, you see a disturbing trend in TV/Hollywood - you are not only being trained to think LEOs accessing all info on the net is okay regardless of how it's done, but you CHEER for them while they do so! Sure, the CM agents COULD get a warrant, but DAMN IT, lives are on the line! No TIME! Just hack in and take the data. And see? They just barely caught the crook in time. If they had done it the way the mamby-pamby bleeding hearts want (you know, the LAW), the poor innocent person would have been killed!

    reply to this | link to this | view in chronology ]

    • icon
      Bergman (profile), 30 Aug 2017 @ 2:06pm

      Re: Real life vs TV

      Oh, absolutely.

      The funny thing about laws like the CFAA, wiretapping statutes and the like, is that all of them have law enforcement exemptions, and every single one of those exemptions is contingent upon a valid warrant.

      Without a warrant, violating them is just as much a crime for law enforcement as it is for any private citizen.

      reply to this | link to this | view in chronology ]

      • icon
        JoeCool (profile), 31 Aug 2017 @ 9:43am

        Re: Re: Real life vs TV

        Yeah, in real life poor Penny would eventually get tossed under the bus for violating privacy rights and such. "We had no idea she was hacking sites like this for data!" And the bosses then continue on business as usual.

        reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 29 Aug 2017 @ 2:03pm

    Facebook served a general warrant to society. Of course the government wants in.

    reply to this | link to this | view in chronology ]

    • icon
      That One Guy (profile), 29 Aug 2017 @ 3:43pm

      Re:

      When Facebook does it you're allowed to say 'no'. When the government does it saying 'no' isn't really an option unless you want to sit in a cell until you change your mind.

      reply to this | link to this | view in chronology ]

  • icon
    That One Guy (profile), 29 Aug 2017 @ 3:51pm

    'Following the law', only a requirement for those without badges apparently

    Unfortunately, the government is allowed to keep the Facebook evidence under the "good faith" exception.

    ...

    The court sets no precedent in this decision thanks to its good faith ruling, but the footnote addressing the Microsoft warrant and the multiple paragraphs devoted to the government's Facebook haul hints the government really needs to tighten up its search warrant procedures.

    No, not really, because even when the judge found that the warrant was over-broad they still got to keep everything from it. Why would they 'tighten up' search requirements, which would result in getting less information to sift through for incriminating evidence, when the odds are good that even a something a judge calls out as a 'general warrant' will get a pass via a 'good faith exception'?

    At this point the judges involved should just be honest enough to admit flat out that the government/police can do no wrong, that so long as The Good Guys are claiming to be going after The Bad Guys then the laws are more guidelines than hard and fast rules. Same general result, but at least they'd be honest about it.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 30 Aug 2017 @ 11:02pm

    All Writs is basically treated as a God Mode cheat for getting quick brownie points by fast tracking convictions for generally unsavory cases. This kind of reaction from the justice system isn't much better than that of a pitchfork mob.

    reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Use markdown for basic formatting. HTML is no longer supported.
  Save me a cookie
Follow Techdirt
Techdirt Gear
Show Now: Takedown
Advertisement
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Advertisement
Report this ad  |  Hide Techdirt ads
Recent Stories
Advertisement
Report this ad  |  Hide Techdirt ads

Close

Email This

This feature is only available to registered users. Register or sign in to use it.