Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Security Your Rights Online

UK Court Rejects Encryption Key Disclosure Defense 708

truthsearch writes "Defendants can't deny police an encryption key because of fears the data it unlocks will incriminate them, a British appeals court has ruled. The case marked an interesting challenge to the UK's Regulation of Investigatory Powers Act (RIPA), which in part compels someone served under the act to divulge an encryption key used to scramble data on a PC's hard drive. The appeals court heard a case in which two suspects refused to give up encryption keys, arguing that disclosure was incompatible with the privilege against self incrimination. In its ruling, the appeals court said an encryption key is no different than a physical key and exists separately from a person's will."
This discussion has been archived. No new comments can be posted.

UK Court Rejects Encryption Key Disclosure Defense

Comments Filter:
  • by Tyrannicalposter ( 1347903 ) on Thursday October 16, 2008 @04:07AM (#25396149)

    I wish the US Supreme Court was that smart.

    Protection from self incrimination was to prevent confesions under duress or torture.

    I don't see the difference between refusing to turn over an encryption key and refusing to let the police in your house when they have a valid search warrant.

    Oh noes! You police can't come into my meth lab. Me letting you in would be self incrimination!

  • willpower (Score:2, Insightful)

    by ritalinvillain ( 780156 ) on Thursday October 16, 2008 @04:07AM (#25396153)
    if it is physical, can't they just take it off them? i guess it is will. that barrister sucks.
  • Huh? (Score:5, Insightful)

    by someone1234 ( 830754 ) on Thursday October 16, 2008 @04:09AM (#25396169)

    Memorised encryption keys exist outside of your will?
    I'm sure the number exists somewhere out there, good luck finding it by brute force.

  • by freedom_india ( 780002 ) on Thursday October 16, 2008 @04:14AM (#25396207) Homepage Journal

    Why these jokers didn't say i forgot i will never know.
    I mean how hard is it to NOT self-incriminate oneself: Say you forgot. Just like every other government official says after losing a laptop full of Witness Protection persons or intelligence officers, etc.
    They can't compel you to recall something you don't remember.
    Simply say "iam sorry i can't remember: my memory is a bit hazy from all the manhandling the cops did, your honor."
    What's the worst? Gitmo? I don't think so (although Britain has a track record of renditioning suspects to US).
    At a time when courts and the government make a combined assault on our privacy and rights, while being more secretive themselves, it is up to us protect ourselves. Call me paranoid, but am the Burt Gummer type.
    The Government has NO right to force me to divulge my self-secrets just like i can't force a government of the people, by the people and for the people to divulge its dirty secrets.
    I can't be transparent when the Government wants to be opaque.
    After all it has been proven that the Government cannot be trusted even with the most basic secrets.
    What is the criminal penalty for jokers who lost various laptops holding government secrets and OUR data? NONE.
    What is the financial and criminal penalty the Government will pay if it causes me harm by leaking my secrets? NONE.
    Until the Government pays for its mistakes(and heavily), am not going to divulge anything more to it. After all the Government am not trusty enough to know about its secrets, so why should i trust Government.
    Ben Franklin, Hamilton and Mark Twain were absolutely right: You CANNOT and SHOULD NOT trust the government, if it doesn't trust you.

    You can take my keys from my cold dead hands.

  • by Anonymous Coward on Thursday October 16, 2008 @04:14AM (#25396219)

    How is locking somebody up for a full year in a prison cell because they do not give up the encryption key, claiming they don't know it, other than torture?

    In short, how is it different?

  • by ShakaUVM ( 157947 ) on Thursday October 16, 2008 @04:18AM (#25396249) Homepage Journal

    The US has already ruled you can't be forced to give out an encryption key.

    It's nice having a Bill of Rights, ain't it?

    Laugh at all the British who say such a thing is unnecessary.

  • by Gordonjcp ( 186804 ) on Thursday October 16, 2008 @04:23AM (#25396297) Homepage

    Firstly, this doesn't mean that the police can come and demand your encryption keys at any time. This isn't the US, where the police can kick your door in at any time for any reason, just because they feel like having a look at your stuff and maybe relieving you of a few high-value items. If they're looking for an encryption key, it's pretty much going to be because they've already had a warrant to search your property. It really *is* no different to being forced to hand over the key to the basement dungeon where you keep your step-daughter - chances are that they already know what they're looking for and where to look for it.

    Of course, if you don't feel like handing it over, you can always say you left it on a bus, or in a taxi, or you posted it somewhere and it was never seen again...

  • So what's worse? (Score:4, Insightful)

    by Anonymous Coward on Thursday October 16, 2008 @04:30AM (#25396357)

    If I'm the defendant, I'm simply going to assess which is worse:

    1. The punishment you'll get for not divulging your encryption key

    2. The punishment you'll get when you divulge your encryption key and they find 18 gigs of child porn on your computer

    Depending on the encrypte data in question, the decision whether to divulge your key could an easy one.

  • by Anonymous Coward on Thursday October 16, 2008 @04:34AM (#25396387)

    Our country doesn't make the same promises about liberty in a single document which all our countrymen regard as some kind of holy scripture. It is the American attitude of how you are all in the "land of freedom, better than all other nations in every way" that makes your massive overreaction to one terrorist attack so ironic. It's like a kid vowing to never go back to school again because a bully once stole his lunch money.

    I don't mean any disrespect to those who died in 9/11, but people are dying all the time from accidents, disease and natural disaster. Wasting all the money you have on going to war in Iraq and Afghanistan when in fact it was a terrorist organisation and not a single country that attacked you, is pretty dumb. If you go around spending billions attacking everyone that you feel slightly threatened by, you'll end up in financial meltdown... oh, wait...

  • by Koim-Do ( 552500 ) on Thursday October 16, 2008 @04:37AM (#25396409)

    A warranted police search of your meth lab does not require any consent on your side - that's what the warrant is for. they will just break down the door and go on with the search.

    same with the safe in your lab: you can either give the police the code for your safe, or refuse and watch them breaking it.

    Why is your encryption key any different from the safe/door you have?

  • by phoenix321 ( 734987 ) * on Thursday October 16, 2008 @04:37AM (#25396411)

    An encryption key is separate from a physical key, because no one can reliably prove if I still have it or not. Physical keys I may have hidden or swallowed can be found or the locks picked open. But for strong encryption, this is not feasible and the defendant might very well have forgotten the passphrase and never remember it.

    What will They do when the defendant claims to have forgotten their key? (capital "They" intentional for Them being Orwellian monsters) - No one can ever prove or disprove that the passphrase still exists in the defendants brain cells, not the accuser and not the accused.

    And then? Sleep deprivation? Torture? Guilty unless proven innocent? In dubio contra reo?

    Releasing the defendant is under this view obviously unfeasible, because otherwise EVERY defendant would claim to have forgotten the passphrase, which would render this judicial scheme moot. But NOT releasing a possibly innocent defendant because they really have forgotten their passphrase - and no one knows whats inside the encrypted files - is a serious crime in itself.

    I doubt there's a possible solution to this problem. Keeping people in prison for even one day because of abstract words that *possibly* exist in their minds (and only there) is pretty laughable - and pretty dangerous.

    Something that no human and no machine can reliably prove or disprove cannot be the basis of a prison sentence. In the Western civilized society after the Renaissance era anyway.

    Also, this is stuff from the darkest dystopian novels and can be misused in thousands of ways. We've all heard rumors about cops who place contraband in a defendants pocket or house. But that takes at least physical access to a contraband item.

    But encryption keys that may not even exist anywhere? It is ridiculously easy to incriminate people that way, say for example to create a file containing several megabytes from /dev/random. Name it "pre-teen_volume_320.7z" and send it via mail to the defendant with a fake note "here's the 320th delivery of your stuff, you pervert and the password is the same as last time. the photos of your kids were nice, too".

    And then? No one can distinguish between random data and well-encrypted data. No one can prove the defendant does NOT know the "password" to this "encrypted" file. Will They let them go or will they be imprisoned and tortured forever until they "remember" the nonexisting password or simply confess to having had intercourse with the devil?

  • by Anonymous Coward on Thursday October 16, 2008 @04:39AM (#25396421)

    *cough*Gitmo*cough*

  • by Kokuyo ( 549451 ) on Thursday October 16, 2008 @04:49AM (#25396479) Journal

    Yeah, we'll laugh at them as soon as we're through laughing at the US for letting their bill of rights be trampled in the name of security.

    Freedom must not only be won, it must be protected. Fail to do so and what's coming to you is solely your own fault.

  • Re:a difference (Score:1, Insightful)

    by Anonymous Coward on Thursday October 16, 2008 @04:51AM (#25396489)

    I have some photos of my SO that I've put in a folder that I subsequently encrypted. I subsequently forget the password

    Don't worry, I made backups for you, just like everyone else on the internet.

  • by DrVxD ( 184537 ) on Thursday October 16, 2008 @04:53AM (#25396497) Homepage Journal

    You think nobody's ever confessed to something they didn't do under torture?
    I'd say a false confession qualifies as "making up sh*t"

  • Don't think so (Score:5, Insightful)

    by SmallFurryCreature ( 593017 ) on Thursday October 16, 2008 @04:59AM (#25396525) Journal

    Your logic is flawed, my locking/hiding the door to my dungeon where I keep my daughter is to stop me incrimincating myself by her being found. ALL criminals hide data from the sight of others to stop them from showing their criminal activities.

    If you accept that the police under the rules of law can demand access to things then this includes digital data. I have always been loath to see the internet and computers in general as some kind of new world where we can have a different set of rules. If I can be ordered to hand over my swiss bank account number (just a number for a service) then so can I be ordered to hand over the key to my encrypted files.

    If you want to change it, chance ALL the laws related to the gathering of evidence. No cyber laws, just laws.

  • by scientus ( 1357317 ) <instigatorircNO@SPAMgmail.com> on Thursday October 16, 2008 @05:09AM (#25396603)
    The key is not digital, it does not exist on any machine. It *may* exist, and then only in the mind of the defendant. It only becomes digital when it is typed in, and then is erased after, it is like knowing where a treasure is hidden, and the right to refuse to tell of that is solidly defended, both in physical reality and in law (at least here in the us). By ruling that he (or anybody) has to give up a key he (or anybody) may or may not have (only those on trial truly know) the law becomes guilty until proven innocent, a system that can only yield to oppression.
  • by Xest ( 935314 ) on Thursday October 16, 2008 @05:12AM (#25396621)

    Perhaps this was the crux of the problem, they used a defence of suggesting if they hand it over it would be self-incriminating?

    Wouldn't a better defence have been to suggest that the data encrypted was entirely irrelevant to the case. Wouldn't it then be up to the police to actually do some police work and prove otherwise?

    By using a self-incrimination defence it's effectively admitting, yeah you've got some data that's evidence locked up but you're not handing it over. Surely it's better to simply just deny the encrypted data is relevant to the case or even that you've no idea what that encrypted data is. Hell, claim it's your own personal copyrighted works or some trade secrets and get them to prove to a court either that it's not or that they need access to said private content. I'd have thought both of these would put the burden on the police to do police work in an ideal scenario.

    That said, Labour's totalitarian regime doesn't follow the ideal scenario mindset and innocent until proven guilty means nothing anymore so I guess either way these people were screwed.

    If the people are guilty then it's great they've been caught, but the way they go about reach the goal is entirely unacceptable and comes down to one thing - the police are too damn lazy to actually do any police work nowadays. It's all about abusing various laws and technologies Labour has handed them which they really shouldn't have.

  • Re:Wow... (Score:2, Insightful)

    by Anonymous Coward on Thursday October 16, 2008 @05:16AM (#25396659)

    Um, I'm A UK citizen and on my last visit to the US (september 2007) I had my fingerprint scanned. So the US is also using biometric scanning of visitors.

  • Re:Huh? (Score:4, Insightful)

    by Chrisq ( 894406 ) on Thursday October 16, 2008 @05:18AM (#25396675)
    This of course leaves a brilliant way to set someone up. Send them an encrypted email. Anonymous tip off to police. Wait until police ask them for the keys. Of course they cannot prove that they don't know the key so off to jail they go.

    Someone sent encrypted files to the Home Secretary once, which included details of a crime (reported by someone outside the UK). I expect it was driving over the speed limit or littering or something minor, but even so they could then genuinely inform the police that he home secretary had an encrypted email detailing a crime.
  • Re:Wow... (Score:2, Insightful)

    by Anonymous Coward on Thursday October 16, 2008 @05:19AM (#25396689)

    Hmmm, you must be American or you have never travelled to America. "Mandatory biometric scanning" would include taking your fingerprints or a photograph? Both have been in place for visitors to America for years now: "US-VISIT".

  • by thetoadwarrior ( 1268702 ) on Thursday October 16, 2008 @05:27AM (#25396741) Homepage
    Shame most Americans are ok with their government crapping all over the Bill of Rights and they're left with less rights than they started out with.
  • by radio4fan ( 304271 ) on Thursday October 16, 2008 @05:31AM (#25396773)

    It's nice having a Bill of Rights, ain't it?

    Laugh at all the British who say such a thing is unnecessary.

    Who are all these British who say such a thing?

    Britain has got a 'Bill of Rights': the Human Rights Act [opsi.gov.uk], which guarantees free speech, right to a fair trial (including the right not to incriminate oneself), etc, etc. This act formally enshrines rights that we've had under common law for centuries (eg, Habeas Corpus).

    The fact that this court (not the highest in the land, mind) has chosen to interpret an encryption key as not covered under the right not to self-incriminate does not alter the fact that we also have constitutional rights.

    So laugh away at your mythical British who say they don't need anything like the Bill of Rights.

    Disclaimer: I think Britain is royally fucked anyway.

  • by Tyrannicalposter ( 1347903 ) on Thursday October 16, 2008 @05:37AM (#25396817)

    "A warranted police search of your meth lab does not require any consent on your side - that's what the warrant is for. they will just break down the door and go on with the search."

    That's true, but....

    If my door was two inches thick steel and required an hour or so with a cutting torch to open...

    Then you'd be looking at obstruction of justice, disobeying a lawful order, and destruction of evidence because they ain't finding a damn thing after two hours.

  • by Chris_Jefferson ( 581445 ) on Thursday October 16, 2008 @05:42AM (#25396863) Homepage
    How is that any different from me just physically mailing you a box of child pornography, along with a letter saying "Here is your order from kid's-r-us"? To me this seems to be an area where the parallels with existing situations are compelling. You should have to give over your virtual keys and locations of data in the same situations you had to give over physical keys and locations of real things.
  • by Mawbid ( 3993 ) on Thursday October 16, 2008 @05:43AM (#25396871)
    I think what the AC is getting at is that if you torture an innocent man and he makes a false confession to make the pain stop, you're done. You throw the guy in jail. If the guy gives up a false passphrase, you're back to square one.

    This is a genuine distinction between passphrases and other information they might want you to reveal.

    This is not a distinction that should ever come into play however. Punishing a person for not doing something that might be completely impossible for them to do is wrong.

  • by Anonymous Coward on Thursday October 16, 2008 @05:47AM (#25396893)

    *cough* not citizens *cough*

  • Re:Fingerprint (Score:3, Insightful)

    by Thiez ( 1281866 ) on Thursday October 16, 2008 @05:51AM (#25396917)

    I think it is safe to assume they will make a copy of your HD. Your thumb 'trick' is a great way to get screwed for attempting to destroy evidence or something like that.

  • by benwiggy ( 1262536 ) on Thursday October 16, 2008 @05:53AM (#25396947)
    I'd be surprised if this didn't go before the House of Lords and get over-turned.
    It's amazing how many of the draconian, rights-reducing laws drawn up by democratically elected representatives get knocked back by the House of Lords, an un-elected body.

    The Lords can alter Bills before Parliament, but are also the last appeal court (before going to the European Court of Human Rights).

    Let's hear it for a benevolent oligarchy!

  • Re:Fingerprint (Score:3, Insightful)

    by Yakman ( 22964 ) on Thursday October 16, 2008 @05:54AM (#25396949) Homepage Journal

    The first thing a computer forensics person would do is take one or more copies of your hard drive and work from that - for the very reason you were talking about, in case there's some logic bomb they don't defuse.

    So you wipe the files, they make another copy from their backup, waterboard you for a while, and try again :)

  • by ionix5891 ( 1228718 ) on Thursday October 16, 2008 @05:59AM (#25396975)

    They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.

    anyways don't more people die every year due to NUTS than terrorism?

  • by Mawbid ( 3993 ) on Thursday October 16, 2008 @06:01AM (#25396985)

    "Something you know" isn't what counts when it comes to protecting you from self incrimination; it is whether the "something you know" is incriminating you.

    This leads to an interesting idea. Claim that you passphrase is a confession. If you plan ahead, you can even make that claim true. Encrypt your plan to assassinate the president with "I plan to assassinate the president OV:}A7MC".

  • by MindKata ( 957167 ) on Thursday October 16, 2008 @06:02AM (#25397001) Journal
    "They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety" ... sadly very true... So now we have two UK Big Brother bits of news in one morning. Oh what a time to live in the UK. But in the end, it doesn't just affect the UK. It will eventually apply to every country, because...

    Unfortunately most people fail to see the connection between lists and any danger. The lists are being made to influence people who speaking out against the ones in power. But most people fail to see the danger of giving the power seekers ever more data to mine on everyone. Knowledge is power and the ones in power seek the use that knowledge to prevent people standing against their point of view.

    With ever more detailed lists on peoples views, soon we end up with people fearful of what they say on the phone and in emails, for fear of their views could even just risk being taken out of context and in any way critical of the people in power. At that point, the ones in power are influencing people directly.

    At that point, we live in a police state, where freedom is gone and replaced by fear of the ones in power. Problem is, we are getting there now, and from here on out, its simply a matter of consolidation of ever more detailed data mining. The central reason why centuries ago votes were made in secret, was to prevent the ones in power, from seeking to influence the voters. Yet the power seekers are forever seeking to game the system to gain ever more information on peoples opinions. Now the ones in power are building automated systems to influence people.

    Throughout history its been shown time and time again that the ones in power become ever more corrupt over time without any feedback on how they are behaving. Its been show so many times through history.

    Most people don't realise the game people in power are playing. People in power are not so interested in individuals. The ones in power are interested in adding everyone to different lists so they can then control and profiling groups of people, so they can then use divide and conquer tactics, to break groups of people up. The goal is that the fragmented groups cannot then stand and oppose the point of view of the ones in power. That is why they data mine.

    The lessons of history have not been learned by enough people. Looks like the world is seeking to repeat the mistakes of the past. Freedom and democracy are constantly undermined by a minority of people in power for their own gain. Its just a matter of time and how far we are going to let them all game the system to push the excesses ever more unfairly in their favour. After all, its not as if they are robbing hundreds of billions of tax payers money to keep their rich lifestyles while millions risk loosing everything.

    Anyway, if the millions of people can't buy bread, then let them eat cake. ... My point is, the names in history change and the names of their ideologies change. But what remains is basic human psychology and that doesn't change. The lack of empathy of the ones in power over their powerless minions never changes. For all their words, its only their actions which count and millions now face loosing their jobs and millions are treated unfairly by the ones in power. In such a world, its no surprise that the ones in power would want to watch their minions very closely. After all, people could start to complain its getting all to unfair. But we cannot have that. We need ever more laws to protect the ones in power and ever more laws to keep the minions down and away from power.

    The world will never change until everyone worldwide realises that people who constantly seek power over others have a recognisable cluster B personality disorder. All cluster B personality disorders are ultimately driven by fear. And the ones with the disorder constantly seek to control that fear and control everyone around them based on their fear. (There are multiple fears, two examples are lack of a
  • by mbone ( 558574 ) on Thursday October 16, 2008 @06:09AM (#25397045)

    I don't see the difference between refusing to turn over an encryption key and refusing to let the police in your house when they have a valid search warrant.

    It is much more like refusing to tell the police where in your house the contraband is hidden, or if there is contraband at all, and being put in jail because of your refusal.

  • Re:a difference (Score:1, Insightful)

    by Anonymous Coward on Thursday October 16, 2008 @06:10AM (#25397061)

    Oh dear, did AC insult your invisible girlfriend?

  • by theaveng ( 1243528 ) on Thursday October 16, 2008 @06:13AM (#25397067)

    I gotta disagree there. In the article it states:

    >>>In its ruling, the appeals court said an encryption key is no different than a physical key and exists separately from a person's will.

    If a presumed-innocent person drops an actual key into a hole-in-the-ground, and refuses to divulge its location, the police can't incarcerate him simply because he refuses to say where it's located. That's loss of liberty without due process. They have to let him go.

    And they can't use torture to try to force the hidden location out of him either. The man might be completely innocent and have no clue where a key exists, and therefore unable to reveal the location, even under threat of one year imprisonment.

  • by bestalexguy ( 959961 ) on Thursday October 16, 2008 @06:18AM (#25397103)

    Sorry Judge, I forgot

    You seem to grossly miss a point: a password might easily be really forgotten. Ever happened to you?
    How would you, as a lawmaker, fairly address this situation?
    Put everyone in jail, just to be sure to catch the deceitful villain, too?

  • You can be forced to testify to things that indicate you committed a crime, you just can't be made to incriminate yourself.

    The difference is subtle but one part of it is that a judge can give you immunity for your testimony, e.g., tell us X and we promise not to use it to prosecute you, and then you can no longer refuse on 5th ammendment grounds since it would no longer incriminate you.

    Thus while this is a neat idea it wouldn't work. The prosecution would just offer you immunity for the contents of your passphrase but not the data it unlocks. Well in the US, but in the US you might not have to reveal the passphrase anyway.

  • by HungryHobo ( 1314109 ) on Thursday October 16, 2008 @06:27AM (#25397151)

    Exactly.
    It's just a power grab.

    1:Encrypted data can be hidden within random data.
    2:Encrypted data can be hidden within normal data such as the least significant bit of your family photos.
    3:Encrypted data can be hidden on a seemingly "empty" drive.
    4:It is impossible to prove with certainty any of the above situations as opposed to 1:the data actually being random, 2:there being no data hidden within the normal data, 3: a drive really bing empty.
    5:If the police think you have encrypted data you must give up the key or go to jail.

    Result:If you live in the UK and own any form of electronic storage you can be jailed at at time.

  • by MindKata ( 957167 ) on Thursday October 16, 2008 @06:32AM (#25397179) Journal
    I should also have added, the process of information gathering (i.e. Big Brother) allows the creation of lists of people's views to be created. Thats why I mentioned lists, although hopefully most people will get that connection.

    Now I've had some more time to think about this news, (and adding this password news to the news about them wanting access to every phone call and email etc..., then its occured to me, how long will it be, before we have to send our passwords to the government, whenever we send an email containing a password protected file? ... its the logical next step, in their creation of Big Brother, otherwise people could talk behind their backs, about how unfair the ones in power are getting, simply by sending password protected encripted text. But then they tell us they are not going to look in the emails, (yet), so we can just trust they are not really going to read everyones emails ... and once they have the power to monitor everything, we can trust them not to extend that power.

    (You can probably guess today, I've finally sadly had enough of living in a growing police state, I once knew as England).
  • by ricegf ( 1059658 ) on Thursday October 16, 2008 @06:37AM (#25397203) Journal

    The Taliban regime in Afghanistan openly supported Al Queda training camps used to prepare for the 9/11 attacks. The original Bush Doctrine (you know, before there were 30 of them [wikipedia.org]) stated (more or less) that a government that supported a terrorist organization is as illegitimate at the terrorist organization itself. This was a Good Reason for removing the Taliban, and indeed we did so with strong support [wikipedia.org] from the civilized world. (After 2001, of course, we threw logic out the window, but that's a different tale.)

    By your logic, spending money to find a cure for a rare disease is "pretty dumb", since a lot more people die from other causes. I believe that your logic is faulty. It makes sense to address all of the causes of harm, as cash permits. To a person of my Libertarianesque perspective, that means the causes for which people are willing to spend their own cash, of course - including cash taken in taxes - but not my grandchildren's cash. A government that is trillions of dollars in debt ought to be horsewhipped and put on a very tight budget until they pay their debts - but again, that's a different tale.

  • by Thiez ( 1281866 ) on Thursday October 16, 2008 @06:39AM (#25397231)

    Don't be ridiculous. The problem isn't that people can't resist, the problem is that they don't. They don't care. Giving every person in the UK a gun is not going to change anything.

  • by GauteL ( 29207 ) on Thursday October 16, 2008 @06:57AM (#25397337)

    "New" Labour, Old Communist party

    Yes, keep on using this term "communist" willy nilly. It lets you tar any lefties at the same time as you tar the repressive policies of Labour. New labour are in social and economic policies a centrist-right party, very far from "socialist" or "communist".

    Their policies on detention, warrantless searches, etc. are, however, quite repressive.

    Since they protect the status quo and the interest of the wealthy, they are far more facist than communist.

  • by Stooshie ( 993666 ) on Thursday October 16, 2008 @06:57AM (#25397345) Journal

    ... immunity for the contents of your passphrase but not the data it unlocks ...

    Unless the passphrase is the incriminating data.

  • by Eivind ( 15695 ) <eivindorama@gmail.com> on Thursday October 16, 2008 @07:00AM (#25397367) Homepage
    It is not different. If they have a warrant, they are free to forcefully break down the encryption, just like they are free to forcefully break down the door to your house.
  • Re:Wow... (Score:4, Insightful)

    by superskippy ( 772852 ) on Thursday October 16, 2008 @07:05AM (#25397393)
    The simple truth is that being nasty to foreigners in immigration controls is an easy vote winner since it creates imaginary "extra security" layer for people who do get to vote, and all the people affected don't get to vote, since they're foreign.

    This equation is true all over the world.

  • by Anonymous Coward on Thursday October 16, 2008 @07:09AM (#25397417)

    A subpoena ad testificandum orders a person to testify before the ordering authority or face punishment.

    ... unless such testimony would incriminate them.

  • by _Shad0w_ ( 127912 ) on Thursday October 16, 2008 @07:13AM (#25397451)

    Yeah it is. We've had one since 1689 and we've had the Magna Carta since 1215.

  • No (Score:5, Insightful)

    by Sycraft-fu ( 314770 ) on Thursday October 16, 2008 @07:15AM (#25397469)

    It is also about avoiding catch-22s. The problem with requiring self incrimination is it can lead to a situation where they can lock people up for no reason. They charge you with a crime and say "Confess to this crime," you say "I didn't do it," they say "Refusal to testify against yourself is against the law, we are going to lock you up until you confess." So that is one important reason for the 5th amendment, it avoids situations like that.

    Well encryption keys fall in that category. There are three important cases I can think of:

    1) You forgot the password. This happens. I deal with many password reset requests a year and this is for computer/e-mail accounts that people use on a regular basis. If these people can't remember that, I find it extremely reasonable to assume they'd forget the password to an encryption volume they don't often use. Well, if you can go to jail for refusing to disclose your key, then you can go to jail for being forgetful.

    2) A file that isn't yours. Your computer gets hacked, or someone you know uses it without your permission. Whatever the case, an encrypted file gets stuck on your computer that isn't yours. You can't had over the key, you don't know it. However there's no way to prove that so you go to jail.

    3) Random data. Good crypto is nice and random. You can't distinguish it from other random or pseudo random noise. So you have a random file on your computer, or maybe just random data that there is a deleted file record for (as in there was a legit file there, it got deleted, it's space has now been overwritten by garbage). You can't prove it isn't encrypted data so you go to jail.

    So I see encryption keys as very relevant under 5th amendment protection. We do not want a catch-22 situation where police can lock you up indefinitely just because they find something that looks encrypted.

  • by erroneus ( 253617 ) on Thursday October 16, 2008 @07:26AM (#25397547) Homepage

    A lot of things were lost when the use of the SSN was required in order to participate in the financial system. Interestingly enough, when the system was brought about, people protested that very thing and it was written into law that the SSN could only be used for the purposes of tracking your social security account. The IRS ignored it (though you can request a tax ID) employers ignore it, banks ignore it, the whole system ignores it.

    This isn't technology at play. It's something else.

    Now you can't have a normal life without participating in this system; without allowing your transactions to be tracked.

  • by Attila Dimedici ( 1036002 ) on Thursday October 16, 2008 @07:27AM (#25397561)
    Saying they are "far more facist (sic) than communist" is like saying that a color is "far more aquamarine than green".
  • by Anonymous Coward on Thursday October 16, 2008 @07:31AM (#25397581)

    "Fail to do so and what's coming to you is solely your own fault."

    Really? You don't think its the fault of the person who goes on to commit what ever injustice against the victim?

    So you're saying, for example, a robbery is the house owners fault for not locking his door? The robber is some sort of force of nature that bares no responsibility?

    Is that really what you mean or have you just not thought you statement through.

  • by elfguy ( 22889 ) on Thursday October 16, 2008 @08:06AM (#25397829) Homepage

    That's why it's far better to create hidden, encrypted containers, using Truecrypt's plausible deniability. If the cops see your whole HD is encrypted, it's pretty obvious, and they will want to see what's on it because then they start suspecting you have something to hide. But if you have a file called C:\Documents and Settings\Application Data\kb2357334.dat which is in fact a hidden Truecrypt volume, first they'd have to find the file, and then think that it may be encrypted, which is a chance in a million, so you're so much safer.

  • by OeLeWaPpErKe ( 412765 ) on Thursday October 16, 2008 @08:17AM (#25397931) Homepage

    Most people don't realise the game people in power are playing. People in power are not so interested in individuals. The ones in power are interested in adding everyone to different lists so they can then control and profiling groups of people, so they can then use divide and conquer tactics, to break groups of people up. The goal is that the fragmented groups cannot then stand and oppose the point of view of the ones in power. That is why they data mine.

    Now replace "the people in power" with "everyone". Give a few days thought for the very obvious but highly non-trivial fact that you yourself are part of "the people in power", and how you, nor anyone else, will do better.

    Because let's not kid ourselves. The more "progressive" a government, the more it progressed in the UK in placing surveillance. This is not to say the tories did not do it too.

    They did it less, and that's all we can hope for in the real world.

  • by Chaos Incarnate ( 772793 ) on Thursday October 16, 2008 @08:21AM (#25397959) Homepage
    Legally, the US government can't do that either. The current government simply considers itself above the law.
  • by thetoadwarrior ( 1268702 ) on Thursday October 16, 2008 @08:23AM (#25397973) Homepage

    It's amazing how many of the draconian, rights-reducing laws drawn up by democratically elected representatives get knocked back by the House of Lords, an un-elected body.

    The reason the elected people are more problem is because quite frankly most people aren't educated enough to vote properly. The house of Lords don't have to answer to half-wits who believe in the "if you have nothing to hide" ideology.

    Sure they could abuse that power but luckily they've proven to generally be a sensible bunch and I think that's why the government has been trying to destroy the house of Lords and make their positions electable by the public as well.

  • by scientus ( 1357317 ) <instigatorircNO@SPAMgmail.com> on Thursday October 16, 2008 @08:28AM (#25398013)
    Not if the rule of law is upheld. If courts are answerable to higher courts, and the highest courts answerable to quality written declarations, then as long as defendants appeal when they should, and as long as those of the highest courts do not cheat the word which founded their institutions, then there is a way, albeit slow and perhaps unattainable to some due to money and thereby representation (the ACLU and others try to offset this), of maintaining order.
  • by OeLeWaPpErKe ( 412765 ) on Thursday October 16, 2008 @08:29AM (#25398025) Homepage

    Your suggestion that the war in afghanistan is popular worldwide is ridiculous. It's unfortunate, but that's the truth.

    Yes it's given lip-service of supposedly being more "just" (what does just mean in this age of postmodernism ? In "modern" times it meant that Christianity was in a better position after the war, which is the doctrine (wars for ideology) that built the world we live in. What does a "just" war mean in a world without meaning (=postmodernism) ? Nothing. All wars are just. All wars are unjust. It's just a fashion, a feeling, nothing more, which boils down to "wars that benefit me financially or politically are just, the rest are unjust"). But support ? It has no support.

    Not a single "American" war has any real support in Europe (outside of, ironically, Turkey and the ex-USSR states, even though both have radically different reasons for the popular support)

    The sad thing is, if the USSR had lasted 10 more years (perhaps even a mere 2 years), the taliban would have been exterminated to the last man. As soon as the Russians realize this trivial truth, the USSR will (I think) resurrect itself.

    The real problem is deeper for the American republic. Just like the problem was deeper for the Roman republic before it. Obama, imho, plays the role of Catiline [wikipedia.org].

    Europe hates America because America is living proof that the "democrat-social" states of Western Europe are at best suboptimal, and probably doomed to succomb to the social part of their states, and America appears not to be. An essential part of the "social" ideology is that everybody is a socialist, and those that aren't are really criminals. Therefore America, and any war they're involved in, is criminal.

    Obama's popularity in Europe comes from his promise to change America into an equally doomed "social" "democracy" (which will obviously neither be social, nor democratic).

    It has nothing whatsoever to do with who attacked who and who is "guilty".

  • by OeLeWaPpErKe ( 412765 ) on Thursday October 16, 2008 @08:34AM (#25398063) Homepage

    You advocate waiting them out, and that has worked thus far with a pretty darned significant list of anti-democracy types. Not with Libya, though - they settled down only after a bombing run that killed Khadafi's daughter (among 45 military and 15 civilian casualties) - similar to option 2 above. It also failed most notably in the prelude to WWII, as has been endlessly rehashed over the past 7 years, so there are no guarantees.

    You call the cold war "waiting out" the USSR ? I want what you're smoking. I suppose it looked more like waiting from a large distance. The US wasn't "waiting" on the USSR at all, but constantly fighting, and winning most (but not all) fights.

    Sometimes with dubious allies, constant battles, some won, some lost (even though it's a lie that the US ever supported Bin Laden, it is true that the US supported the once-existing "secular" wing of the taliban, which wasn't all that secular, but at least opposed to islam's jihad. They were massacred by the rest (as islam dictates, muslims who refuse to "fight, kill and die" for jihad are to be executed), and only the terrorists remain, having killed all the others)

  • by westlake ( 615356 ) on Thursday October 16, 2008 @08:34AM (#25398081)
    If a presumed-innocent person drops an actual key into a hole-in-the-ground, and refuses to divulge its location, the police can't incarcerate him simply because he refuses to say where it's located. That's loss of liberty without due process. They have to let him go.
    .

    No they don't.

    The procedure is the same:

    The judge will decide whether the demand for the key is legitimate. The judge will decide whether it is reasonable to believe you can produce it.

    That is "due process."

    If his answer to both questions is "Yes" then you can either cough up the key or reconsider your options from inside a 6x8 cell.

  • by MindKata ( 957167 ) on Thursday October 16, 2008 @08:47AM (#25398217) Journal
    "The more "progressive" a government, the more it progressed in the UK in placing surveillance."

    The word "progressive" is a PR way of implying improvement and governments are getting very good at using PR to manipulate perceptions. The goal of any "improvement" is simply an improvement for the ones in power, to gain a greater control over the ones they seek to lead. They consider more control an improvement. Ultimately its about Cluster B Personality Disorders and how they behave. They relentlessly seek power over others. Normal people do not seek power so relentlessly, not matter what the people who seek power say or even think. Because people who seek power, think others are like them and so assume they think the same way as them. People who seek power fear the loss of power and constantly seek to gain ever more power. Over time, they bias things ever further in their faviour. This pattern of behaviour has been shown throughout history.
  • by guruevi ( 827432 ) on Thursday October 16, 2008 @08:49AM (#25398237)

    If they don't announce properly they have a search warrant, you can shoot them. You also have a right to refuse to unlock doors. They have a right to get a locksmith. The problem with encrypted data is almost no entity (unless you're the NSA) has a locksmith.

  • by Shakrai ( 717556 ) on Thursday October 16, 2008 @09:33AM (#25398735) Journal

    Yeah right, because french people are so open minded when it comes to influences themself?

    The French have a cultural inferiority complex regarding anything from the Anglosphere. They feel that the French language and culture deserve the same recognition on the World stage as the Anglo-Saxon language and culture. They can be amazingly hypocritical at times -- our actions as the "world cop" don't even come close to the atrocities committed by the French in Algeria or Vietnam. I do always find it amusing that they accuse us of imperialism while forgetting about their own history though.

    Oh, and they talked about how Europe, china (?) and especially japan needed the oil from the middle east region much more than USA but didn't helped to keep it political stable and keep the oil flowing.

    This is the part that amuses me the most. We get most of our oil from Canada, Mexico and Venezuela. Keeping the Middle East stable is less for our benefit and more for the benefit of the countries that you mentioned. Funny how people never that.

  • by fastest fascist ( 1086001 ) on Thursday October 16, 2008 @09:35AM (#25398777)
    There is such a thing as criminal negligence. In many places, if you own a gun, you need to keep it locked up, and I doubt "oh, I forgot" would really cut it as an excuse if you were seriously prosecuted for neglecting to do so. You might forget to look for pedestrians at a zebra crossing, but that's not going to get you off the hook should you run someone over. In this case, requiring a person to be able to hand over their encryption keys if requested to do so basically means anyone using encryption has to take some care to make sure they don't forget the password.

    Whether this is good or bad will depend on your viewpoint, but there's nothing inherently ludicrous about legally requiring people to remember things, or to make sure they have the relevant information stored somewhere should they be asked to produce it.
  • by Shakrai ( 717556 ) on Thursday October 16, 2008 @09:38AM (#25398825) Journal

    Now days if, for example, the entire population of new york fought against the US army the whole place could be turned into a blackened crater in the space of a few hours

    What makes you think the US Army would go along with turning an American state into a 'blackened crater'?

  • by fastest fascist ( 1086001 ) on Thursday October 16, 2008 @09:47AM (#25398943)

    I'm not a regular protester at any events or anything like that, but I'd rather be shot for defending my freedom than live to see it gone.

    But that's not how it works nowadays, is it? By and large you're not going to be given the chance to martyr yourself for liberty. You just get to watch basic freedoms slowly erode away while most people don't give a damn. Your options are either to try to effect change through the political system (good luck with that, you godless nihilist), to start an outright armed revolt (good luck with that, you godless terrorist) or to simply quietly secede and disregard the authority of "your" government to rule you. The last option will pretty much inevitably lead you into conflict with law enforcement, and ultimately you'll be faced with either giving up or taking up arms (good luck with that, you godless nutcase).

    So either you're quiet and no-one notices or you're loud and your actions are used to further justify the need for increasingly draconian law enforcement.

  • by Anonymous Coward on Thursday October 16, 2008 @09:51AM (#25399009)

    Not really, as a reasonably intelligent person would do one of two things first or both: search for recently modified files or produce a list of files sorted by size. Unless you do take the time to split encrypted volumes across files and afterwards set artificial timestamps, you're going to get tagged. Another thing I would do is produced a list of files sorted by full path and filenames and just filenames, because a person will need a system to easily remember where they left the volume files, if they split them. There are still ways to make this a little more difficult but for someone who is used to looking for such things, you would leave clues, even in the applications you use. You have to have decryption software installed or on external storage. After which I will ask first politely for the encryption key. Don't want to talk? Let's just say you would want to.

    The way to hide encrypted information is in a "free" area of the disk, using a partition and filesystem that is laid out much different than others (like putting partition/filesytem information at the end of the area). But when the investigator sees a "huge" area of unallocated disk, he's going to wonder still. But you will still need software to access the information. There's a lot here to unpack. Maybe using a website to temporarily pulling down the software (like a java app), then securely clear your cache, cookie, etc.

    The point is your method would leave breadcrumbs, and if I needed access to secure information for some reason and wanted to waste my time with you, you would give up the access. Ruthless, yes. But you shouldn't try to play with the big boys unless you are one. It's like some punk gang member trying to steal drugs from the mob; he just thinks he's a badass.

    Me personally, I would secure my information as best I could conviently and leave it at that. I have nothing to hide that the government couldn't find out on it's own.

  • by MindKata ( 957167 ) on Thursday October 16, 2008 @10:29AM (#25399617) Journal
    "1. Everyone in power is corrupt and has a disorder that caused them to get there."

    No, not all people in power, but there is a disproportionate amount of them, that seek higher levels of power. Politics acts a natural selection process, acting on the ones seeking to fight for power over others.

    "2. We can never trust those in power because to get there they had to have this disorder and became corrupt as a part of the process."
    No, but many of them do bias power in their favor at the expense of fairness. The process of seeking power over someone else, in other words, the power to dictate terms to someone else, means that person seeks to push others lower than them.

    You show very extreme thinking. Taking things to extremes and then thinking the extreme must be wrong. Its not so extreme. Its far more subtle.

    "Where do you people come from? I'll tell me what makes me sick. It's the people like yourself who see ghosts around every corner"
    Its blind fools like you, who let these people get away with it all, for so long that, when its finally bad enough for even you to see, then by that time, its too late to stop them. The harm by then, is already done. Try reading some history, if you fail to see the nature of power seeking. I can assure you many of the most successful politicians definitely study political history. They study for years to learn how to gain power and influence over others.

    "Face the facts, there will always be corruption and abuse of power. But there will ALSO always be those who don't, or simply through checks and balances mitigate the abuse of power."
    Yes there will always be corruption and abuse of power. Thats why people need to defend democracy and stop these people undermining it for their own gain. Also who writes the laws? ... they do. The ones who seek power, generation after generation make the laws and decide what we consider right and wrong ... in law. They make the laws and choose which laws to change.

    "As a people it's our responsibility to speak out (wow amazing that you can even post like this in such a corrupt abusive country isn't it?)"
    We can post now, yes. But not in the future, the way its heading, not without repercussions. Freedom and democracy are getting undermined almost continously these days.

    "imaginary vast conspiracies"
    Be a fool, you'll only have yourself to blame, in the long run. Or try learning about Cluster B disorders and history before you stick your head in the sand and say nothings is happening. If nothing is happening, then what do you call this Slashdot news article?. If this was 50 years ago, people would have been utterly shocked at this news. Now we are suppose to just accept it? ... Past power seekers could never have dreamed of having this kind of power, yet we are suppose to just trust the current power seekers, when they have already shown they will abuse the law. They even used anti-terror laws against Iceland. Iceland are not terrorists. They have shown how they will abuse the law, even the laws they write! ... yet you want us to just keep trusting them, as they grab ever more power?!
  • by steelfood ( 895457 ) on Thursday October 16, 2008 @10:35AM (#25399705)

    So your solution to this is to force everyone use easy-to-remember passwords or it's go straight to jail.

    That's thoughtcrime.

  • by MikeBabcock ( 65886 ) <mtb-slashdot@mikebabcock.ca> on Thursday October 16, 2008 @11:01AM (#25400157) Homepage Journal

    Europe hates America because America is living proof that the "democrat-social" states of Western Europe are at best suboptimal, and probably doomed to succomb to the social part of their states, and America appears not to be. An essential part of the "social" ideology is that everybody is a socialist, and those that aren't are really criminals. Therefore America, and any war they're involved in, is criminal.

    I'd like you to consider that the UK and France both at one time in their history went around the world "fixing" problems with guns the way the Americans do now, and have a broader and more experienced historical view of the results. Think "Africa".

    Also, looking at American life from the outside, I don't believe jealousy really covers how I feel about the racism, segregation, social apathy and wealth disparity I see. If anything, looking at how America has turned out as a global experiment probably makes most countries want to be more socialist, not less.

  • by gnick ( 1211984 ) on Thursday October 16, 2008 @11:05AM (#25400197) Homepage

    Wasting all the money you have on going to war in Iraq and Afghanistan when in fact it was a terrorist organisation and not a single country that attacked you, is pretty dumb.

    That is blatantly unfair. We are not wasting all the money we have. We don't have nearly that much money - We're wasting money we don't have.

  • by zippthorne ( 748122 ) on Thursday October 16, 2008 @12:09PM (#25401195) Journal

    The free space (500MB) *may*, or may not, contain a second encrypted filesystem. There is no way to tell without knowing the second "inner"-key.

    How does the OS know which blocks are not okay to write to?

  • by Anonymous Coward on Thursday October 16, 2008 @01:25PM (#25402295)

    Unless they can compel blizzard to provide the full source to the program, they cant prove which files are or are not part of the program's resources.

    Ah, one of the few benefits of proprietary software lockdown.

    Obviously you've never heard of File Advisor [bit9.com] nor of the National Software Reference Library [nist.gov] They may not have it today, but check back tomorrow.

  • Really? Did they have access to the US counts if they wished to prove they were, in fact, citizens?

    The minute there exists a subclass of people who do not have the constitutional right of access to a court, all the government has to do is assert that you are a member of that subclass and you have no way to prove you're not, because, hey, no access to the courts.

    Are people really so stupid to let people be imprisoned without any sort of judicial oversight, just because of a government-claimed attribute?

    Of course, there's actually nothing in the bill of rights about it apply to citizens only. The bill of rights actually applies to the government and restricts it from doing things.

With your bare hands?!?

Working...