Slashdot Log In
Legal Challenge to FBI's Keystroke Sniffing
Posted by
jamie
on Mon Jul 30, 2001 07:12 AM
from the I-know-what-you-typed-last-summer dept.
from the I-know-what-you-typed-last-summer dept.
Factomatic writes: The "Associated Press is reporting that lawyers for" an alleged "Mafia boss who used PGP will argue on Mon. Jul. 30 that keystroke logging is an illegal wiretap after the FBI bugged his computer to get his password to decrypt his files. The case has major implications for privacy rights and other electronic surveillance techniques like Carnivore. The Electronic Privacy Information Center (EPIC) has put the case documents online."
Meanwhile, a spending bill proposes a
$7 million increase
in the FBI's budget for defeating encryption (and stego).
This discussion has been archived.
No new comments can be posted.
Mobster to Challenge Computer Surveillance
|
Log In/Create an Account
| Top
| 217 comments
(Spill at 50!) | Index Only
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Re:they DIDN'T have a judge's approval! (Score:5)
They had a search warrant. The distinctin is a technical one, as they indicate that the "bug" did not transmit anything. It doesn't heed to usual wiretapping SOP, as it was placed on the PC in one warranted search, and the data was picked up at another. As such, the agents did not have the ability to choose not to intercept unrelated data, as they would in a standard wiretap (they have to cease listening after 1 minute if there is nothing relevant to the case said, and wait 1 hour before resuming listening, or something like that). Maybe it's easier to think about it like this: what if the FBI got a warrant, broke in while he wasn't there, stole the key to his safety deposit box, made a copy of it, and replaced it without him knowing. It's just different in that they had to come back later to pick up the copy of the key. They aren't relying on any communications intercepted by the key-capture to make their case, only his password, like his safety-deposit box key.
Re:they DIDN'T have a judge's approval! (Score:3)
What is the primary difference between a search and a wiretap? Why do we more evidence before a judge can authorize a wiretap than before he/she can authorize a search?
1) A search is a one-time event, whereas a wiretap represents ongoing surveilence. As such, a search tends to capture a small amount of private, transitory data (i.e. conversations, web cache, etc) while a wiretap tends to capture and catalog a large amount of this sort of information. This is a much greater invasion of privacy.
2) A search captures narrowly tailored information, whereas a wiretap casts a very wide net. A search warrent that authorized the authorities to look for root kits on your machine ought not allow them to page through your Quicken data. (I realize that the standards for searching a hard drive haven't yet caught up to the standards that apply to the physical realm, but I'm making a philosophical argument.) A wiretap wouldn't permit that level of distinction.
3) A search does not require, or generally permit, surreptitious entry. Police officers come to your door, announce that they have a search warrent, and enter. When someone searches your home, they have to provide you with a receipt of the items taken. Everything is done very much out in the open. A wiretap, on the other hand, requires that the police don't alert anyone to their entry when they install the bug. The open nature of the search provides a suspect with context that may be useful should he have to exercise his Constitutional right to confront his accuser at trial. In addition, it provides a useful check on government power since it permits outsiders to analyze the pattern and practice of searches to determine whether there's an abuse of power. The FBI could get away with a lot of abuses by wiretapping civil rights organizers in the 60's than they could not have had they done repeated physical searches.
Using the "if it looks like a duck, walks like a duck, and quacks like a duck" rule, I would submit that the FBI make a wire tap in this case.
Re:This is going to make me unpopular but... (Score:3)
The problem in this specific case is that the FBI had a search warrant, not a wiretap authorization. There's a distinct difference: the suspect knows that his home or office has been searched when a search warrant is acted upon. In the case of a wiretap, the suspect necessarily knows nothing.
What we have here is law enforcement gaining authorization for one type of activity - a search of a premises - and undertaking in another. I agree that keystroke logging is a valid investigative technique, but there needs to be a legal structure set up to make sure that it's not abused, as, I believe, it was in this case.
Re:they DIDN'T have a judge's approval! (Score:3)
I'm not sure if there is a precedent judging whether keylogging is a wiretap or a search, but common sense says it is a wiretap.
True, therefore I predict that the legal system will decide that it is a search.
Re:they DIDN'T have a judge's approval! (Score:4)
You don't have to be in favor of the existance of the mafia to be bothered by this.
Disclosal of methods... (Score:3)
Re:Who has the right to privacy? (Score:3)
Um, no they didn't; that's the whole point of this alleged mobster's suit.
They had a search warrant, which allowed the FBI to search for currently existing evidence. Scarfo's suit charges that in order to place whatever device they used, they needed a wiretap order, which has a stronger standard to meet.
Jay (=
Re:they DIDN'T have a judge's approval! (Score:5)
But searching someone's safety deposit box would also require a warrant, which would be separate from the warrant to search someone's home. I don't think your analogy is correct.
There is a distinction between hard copy communications which are physical objects that may be searched with a search warrant, and immaterial communications (electronic or just voice) which are by definition transitory and don't hang around to be searched. IMHO, if he had anything written down they could have taken it when they searched, but leaving a device which effectively converts a transitory communication (password keystrokes) into a permanent piece of evidence (keystrokes stored in a bug) is effectively a wiretap, rather than a search of physical property that the mafioso already had. The agents had to do something to convert his communications into physical form so they could take it with a search, and in doing so they stepped over the line into wiretap land.
Your argument has ludicrous consequences, because you could use it to do essentially any wiretap with just a search warrant - just place miniature voice recorders in all the phones, wait a week, come back again and harvest the tapes, and see what you got. I don't think that's consistent with the spirit of the law, which expects law enforcement to get a separate wiretap warrant for intercepting communications.
Remember: it's a "Microsoft virus", not an "email virus",
Also at the BBC (Score:3)
Re:Good (Score:3)
What chaps me about law enforcement is that every time a new technology comes out they assume that the constitution doesn't apply to it, and they walk on our constitutional freedoms until the courts reaffirm the constitution. Can't they see that the phrases "secure in their persons and property" and "unreasonable search and seizure" don't have anything to do with what technology is involved?
IMO, "zero tolerance" should start with the lawmakers and law enforcers. How can they expect us to behave when they don't?
--
Re:Hrm ... (Score:3)
Re:Good and bad aspects (Score:5)
There's a reasonable case that a search warrant for documents includes a search of the current contents of the target's computer. However, the keystroke sniffer, placed for the purpose of making it possible to monitor future communications, clearly falls into the "wiretap" category rather than the "search" category.
(The reason the two are different, and the latter requires a higher standard, is that a search can be executed in the presence of the suspect. This serves as a deterrent against illegal expansion of the search into a fishing expedition. Wiretaps, obviously, cannot be known to the suspect until after the fact, which makes them more open to abuse.)
/.
The FBI will use this to fight encryption (Score:5)
This falls perfectly into the government's propoganda that only criminals use encryption. Why is it that more of us don't use PGP for all of our emails? I would happily use it if any of my friends actually had public keys. We can't fight these fights unless we all pull together.
Re:So simple its scary (Score:3)
It's easy enough to generate a new passphrase or digital key, but swapping fingerprintes must be a bugger of an operation.
Re:So simple its scary (Score:3)
That's the way to go...
All cryptography expert will tell you that the best way to break encryption is by attacking the protocol. What most people forget, is that entering a secret (the passphrase in this case) is part of the protocol. It is so much easier to attack this part of the protocol than to attack other parts.
However I did not know that an agent was allowed to modify the scene when doing a search warrant. I always (maybe wrongly) though that search warrant were done to gather information based on what's present. Not to allow an agent to add spoofing devices without your knowledge.
they DIDN'T have a judge's approval! (Score:5)
So before people start flapping their mouths bout how this mafia probably got what he deserved, the agents didn't have a court order to do this. Think about it. If FBI agents have enough "probably cause" and figure they should tap your computer cause you're under suspicision of doing something illegal, and they don't even have to go see a judge to approve it, then your privacy and civil rights have gone right out the window.
Re:they DIDN'T have a judge's approval! (Score:3)
The Speed Trap analogy (Score:3)
A wiretap (or in this case some other form of bug) is like having the police put a monitor in your car, monitoring your speed and location until they come and pick it up.
If you know the police are watching, you act accordingly. Would you really want to get a ticket for every single time you went more than the posted limit? Would you want to live in a country that allowed it?
The bill of rights is a restraint on government, because it's better to let ten guilty men go free than to wrongly convict one innocent man.
The bias against the persons involved is irrelevant, innocent until proven guilty. The bug was illegal.
--Mike--
Re:they DIDN'T have a judge's approval! (Score:3)
Does this mean that if you spend one minute talking about the weather, how are the wifes and the kids, etc. you get one wiretap-free hour of talking "business"?
Re:So simple its scary (Score:4)
Re:Who has the right to privacy? (Score:3)
We are currently in very dangerous times. Every action by our government must be highly scrutinized to make sure it is in the best intrests of the populous.
Yes, this guy's a mobster. The courts will ultimately decide his guilt. Maybe it's fine that this guy goes away.
Is the FBI right to do this without permission of an advisory? Absolutely not.
The FBI is not autonomous, neither is our government. Both need oversight. Our constitution provides a means to oversee our government namely in checks and balances as well as elections. In a last resort we have the right to choose a new government as a government derives its authority by the consent of the governed.
If we choose to not fight each and every small battle for our privacy and rights, later we will not have the option as the war will be lost.
Re:Is my DNA protected by the DMCA (Score:3)
Re:Tapping LCDs? (Score:3)
Basically, there's 3 good ways to overcome this that I'm aware of:
- Make sure your display is gibberish. Unfortunately this makes it kinda difficult to use : )
- Set up something to broadcast a load of EM white noise to drown-out the signal from your machine.
- Only use your machine from inside a big thick metal box (to block the signal), and make sure that you take a portable power supply in there with you (signals can even propagate down the power supply cable).
Yes, it's time to be paranoid.Re:methods for keystroke logging? (Score:4)
Police moral decay? (Score:4)
I'm not sure that I agree with all this, but it's an interesting perspective.
Re:they DIDN'T have a judge's approval! (Score:3)
Yes they did. See for yourself.
From the document linked:
The seizure and retrival of key related information and encrypted file(s) ordered pursuant to this order do not involove captured communications protected under title 18, United States Code, Sections 2510 et seq..
This would indicate to me that this was an illegal wiretap. I'm not sure if there is a precedent judging whether keylogging is a wiretap or a search, but common sense says it is a wiretap.
Enigma
Re:they DIDN'T have a judge's approval! (Score:3)
Yes they did. See for yourself. [epic.org]
-
This is going to make me unpopular but... (Score:3)
...I actually think this is a good thing.
We've been told for years that encryption must be controlled because it gives Bad Guys the power to evade law enforcement in a way that was not possible using traditional means of telecommunications. This arrest puts lie to that claim. You can have publicly-available encryption without disrupting law enforcement's existing ability to conduct court-ordered surveillance.
I know some of you have a beef with court-ordered surveillance, and that's cool. But if you don't, then how is this case any different from surreptitious voice recording?
-
Re:This is going to make me unpopular but... (Score:3)
The court order is here [epic.org]. It grants permission to:
It seems from this that the judge indeed intended for a device to be used to get the private key. Scarfo's lawyers are just trying to argue that he should have specifically said "wiretap" if the device actually transmitted information. It's lawyerly semantics.
-
Re:they DIDN'T have a judge's approval! (Score:4)
You can get the device they used for US$139 (Score:3)
Re:Sad day (Score:3)
The Lottery:
Sad day (Score:5)
So simple its scary (Score:3)
This is clearly a case of wiretapping though. My keystrokes are the same a talking (to me anyway, IANAL) so if they need a court order to bug my house, they damn well better need one to bug my keyboard.
Time to start putting tiny pieces of tape or those warranty type stickers on my keyboard and PC :) Can't be too paranoid ;)
Re:Good (Score:3)
That, of course is not a good thing. But everyone makes mistakes, even the most skilled.
The reason why the law HAS to be what it is so that police who WILLFULLY violate the law do not get to use that illegal evidence to prosecute someone.
It's unfortunate, but the only way to prevent jailing INNOCENT people because of the actions of rogue law enforcement is to increase the chance of freeing the guilty. And the kicker is, the more power you give the jackboots, the more likely you are going to jail more innocents than guilty.
This comes because under the US Constitution, there is a PRESUMPTION of innocence. It's the burden of the state to prove guilt, and they should not be allowed to use evidence obatined illegally.
Re:Good (Score:4)
Don't hold your breath. The FBI has a long and distinguished history of breaking the law, and I've yet to see a FBI agent be punished for what they've done, unless it's spying.
FBI agent Lou Horouchi participated in a cold blooded murder, that of Vicki Weaver and her baby, yet wasn't even prosecuted. In fact, he and his fellow jackboots got awards and promotions. Hell, the FBI jackboot who is persecuting Sklyarov is up to become HEAD of the FBI!
Which is why we need the courts to defend the Constitution. While I'm all for putting mobsters away, the ENDS DO NOT JUSTIFY THE MEANS. To advocate that is to advocate lawlessness and anarchy.
The only way the FBI will stop violating the Constitution is to lose cases against people they violate.
This is why under US law, evidence obtained illegally is NOT evidence in the eye of the courts, this is ultimately the ONLY check and balance that will provide incentive for law enforcement to obey the law.
Good (Score:3)
There are legitimate needs for a wiretap, and there are checks in place that are supposed to prevent abuse. Calling the process "wiretap" was shortsighted but unfortunately the name sticks. Whether you're spying using a phone tap, concealed microphones, a pair of binoculars or some as yet discovered/revealed technology you're accomplishing the same thing. This particular event needs to be punished, and unfortunately in this case it means a guilty person goes free. Still, that is much better than a court case which ends up squashing citizens rights due to precident.
Tech-savvy Feds (Score:4)
You should be aware though that the US Supreme Court appears to be taking the issue of high tech's effects on privacy very seriously. In Kyllo v. United States, 121 S. Ct. 2038 (2001) (available on LexisOne [lexisone.com] - free registration required) the USSC held that the police's use of a thermal imaging unit to detect the use of heat lamps to grow marijuana inside the defendant's home violated the 4th Amendment's prohibition on unreasonable searches and seizures.
I predict that the USSC will continue to take privacy matters very seriously as technology progresses.
They can sniff all they want... (Score:4)
Re:they DIDN'T have a judge's approval! (Score:3)
By your argument, the FBI could place a tape recorder in my house during one warranted search and pick it up during another. Same principle, and that would be an illegal wiretap.