Bizarre Porn Raid Underscores Wi-Fi Privacy Risks
alphadogg writes "Lying on his family room floor with assault weapons trained on him, shouts of 'pedophile!' and 'pornographer!' stinging like his fresh cuts and bruises, the Buffalo homeowner didn't need long to figure out the reason for the early morning wake-up call from a swarm of federal agents. That new wireless router. He'd gotten fed up trying to set a password. Someone must have used his Internet connection, he thought. Sure enough, that was the case. Law enforcement officials say the case is a cautionary tale. Their advice: Password-protect your wireless router."
Guilty until proven innocent.
So maybe... just maybe, this is a clue that it's not quite right to break down people's doors because of an ip address?
If someone is sitting outside my house, where there is no mobile phone service, and they really desperately need to make a quick Skype call or check their e-mail, it is a neighbourly thing to do to let them use my wifi, just as if their car broke down, it would be a nice thing to offer them a glass of water and a quick phone call to their car breakdown company.
Child pornography trading was not a strict liability offence last time I checked. You have to show some intent, damnit. And until that happens, I'm going to say fuck you to fear and be a good neighbour.
So rather than two Federal Marshalls in ties having a discussion with the gentleman, the Feds come in Police State style, tossing American citizens around like ragdolls and trampling the Constitution and the natural rights of man.
What is wrong with this country?
Hoist Number One and Number Six.
"Law enforcement officials say the case is a cautionary tale."
The summary is a perfectly accurate representation of how the police/statist spokespeople are spinning this, and of course the mass media just regurgitates it verbatim. But that is totally the wrong point to take from this. It's a cautionary tale, all right -- of the horrifying real-life consequences of our brain-addled priorities towards pornography. And the result is they'll want to make it illegal to share our Internet and information access with fellow citizens. Pretty outrageous.
We know where leadership by an anti-intellectual "strongman" who scapegoats minorities and likes boisterous rallies goes
...to set up a password?
If you run a business that offers WLAN Internet service to its guests, how do you reliably communicate the password to legitimate guests without also communicating it to those who deal in child pornography and unlicensed controlled substances?
... but it's the police who need to learn.
Maybe we don't need to send SWAT teams in to arrest people unless there is specific evidence that the person being arrested is armed and violent?
Maybe what passes for "probable cause" is a joke these days?
Law enforcement officials say the case is a cautionary tale
Indeed, this should be a cautionary tale: obtain better evidence before you make an arrest. Surely there is some kind of penalty in our well-designed system for such sloppiness on the part of law-enforcement. Surely our freedoms have built-in protections. Surely we do not need to respond to attempts by law-enforcement to try to scare us into using encryption if we don't want to ...right?
Just because it's easy for you, Mr. "I Compiled^W Gent^H^H^H^H Installed Ubuntu Last Weekend", doesn't mean that you represent the mean computer intelligence of your peers.
Big surprise, son! Not everyone has the patience for tech regardless of its ease of use.
Gov't: Hey we are planning a raid on your house next week what time would work for you for us to swing by?
You: I'm kinda busy this week. I have some computers I need to toss out. How bout you swing by next Thursday
Govt: Ok see you then
My advice would be "No one password protect your router"
Then all your concerns about the federal government snooping in on your internet traffic become moot.
Having everyone password protect their router gives the state more power over you.
Democrats or Republicans. They are both taking us to the same place and they are not afraid of us anymore.
Why don't you have a seat over there? ... What were you thinking?
fak3r.com
I'm more bothered about the fact that a screenshot and an IP address is enough to warrant (no pun intended) an armed unit (from Immigration and Customs, for some reason) smashing the door down and throwing the guy down the stairs. When the evidence is that slim, I'd suggest maybe turning up in the daytime and knocking on the door with a warrant to search/confiscate the computers would be a more measured response.
Remember when SWAT teams were only used on violent offenders in situations that were expected to get excessively violent?
Unfortunately, I don't, I was only born in the 80s. I know SWAT teams as being used for everyday arrests and serving warrants, most often by busting down doors of family homes in the dark and shooting people's pets (like the DC area mayor who's dog was shot in the back as it ran away from police during a raid for a crime police had strong evidence he didn't commit but set him up for anyway). No police force needs APCs. Nor should the first line of investigation involve Afghanistan-style street warfare. And where's the police force policing these out of control police forces?
.... and use assault weapons to arrest someone you have no reason to believe is armed and dangerous.
The police has become a domestic military force.
The Feds could readily determine that the router was unsecured. That means that anybody within a certain radius of the computer could have downloaded the picture.
Probable cause means facts and circumstances that would cause a person of reasonable prudence to believe that the computer in the house that was searched was used to download criminal material or used to store criminal material.
The router is evidence of a crime. It is the device used to get the criminal material. The feds had a legit reason for the search and seizure of the router.
The problem that I have is that the ICE agents behaved like pigs--complete pigs--with respect to the man whose home they invaded. They had facts sufficient to know that they had no probable cause to believe that the man they threw on the ground had done anything wrong. They were under no threat, yet they assaulted him for no good reason.
MAC addresses are easy to spoof.
Mike O'Donnell http://people.cs.uchicago.edu/~odonnell/
I have lived in my neighborhood for several years. Within my home detection range, I have access to nearly a dozen wireless hotspots. A few are open. A few use WEP. Two use WPA. A few use WPA2. In the course of my experimenting with wireless security and man in the middle attacks, I have gained access to all of them. The hardest one to crack forced me to set up a dedicated laptop for a week. Now, I'm just a computer guy with an interest in security. I tried just to see what could be done and to gain a better understanding. But the tools I used and the knowledge I have are available to virtually anyone. I'm far from some 'super-hacker'. My point is that if I were a pornographer, none of these would be secure enough to stop me. And yet the police are trying to spin this that somehow the homeowner who was wrongfully arrested was at fault for some security lack on his part. Ridiculous. It's obvious that the police didn't have enough information to justify the raid, and they are just covering that up. Can you imagine the police doing a major raid on your house, doing property damage, seizing your assets, etc. then being told "Hey, you have the same initials as the guy we're really after. We really didn't know enough to figure out if it was you or not, but we figured what the heck, we'd raid you anyway."
Downloading child pornography doesn't seem to be a violent crime to me. Why did they need to send a SWAT style raid rather than knocking on the door with a warrant? Did the guy have a history of violent crime?
Aggresive raids get people killed - both the people being raided (e.g. http://www.washingtonpost.com/wp-dyn/content/article/2006/01/26/AR2006012602136.html) and the police doing the raid (e.g. http://amarillo.com/stories/112201/tex_firedfor.shtml - note that was a raid of someone who owned a lot of guns, but the police did manage to fire 369 shots killing one of their own while the guy being raided did not touch a gun let alone fire a single shot).
For suspects of non-violent crimes (and downloading/viewing child pornography is not more violent than downloading/viewing videos of an assault - that the production of the pornography involves violence is irrelevant) and even for convicted non-violent criminals "kicck the door down and point guns at everyone" raids are only going to increase the risk of death and injury.
Bruce Schneier wrote an insightful essay explaining why he does not protect his wireless node. There are pointers to other essays agreeing and disagreeing with him. I personally agree with Schneier. I consider myself the steward of my Internet connection, more than owner.
Mike O'Donnell http://people.cs.uchicago.edu/~odonnell/
And yet these pussies won't go after the REAL threats. Trying going after MS 13 you cowards!
Life is not for the lazy.
Anyone with any sense agrees that a raid with a warning wouldn't be useful. The point is that there should not have been a raid in the first place. Send a couple officers out with a warrant and have them bring the guy in. Life is not an action movie, and wearing a badge does not change that.
Well, there was that time I changed ISPs. Couldn't be home for the changeover but the nontechnical roomie was. I left him with two instructions:
1) They DO NOT TOUCH my stuff. Not even to hook it to the ISP's router.
2) If they can't give me a router without wireless, they disable the wireless. Neither of us uses it.
The installation guy wanted to install their "home security suite" (a rebadged McAfee or something) on my PC. He got rebuffed, so instruction #1 went off without a hitch.
The roomie specifically requested the wireless be disabled. The ISP guy said he disabled it. When I got home, turned on my laptop's wireless and checked. And found a wide-open access point that wasn't there that morning. Its name? MY PHONE NUMBER.
And the router was passworded. I couldn't turn it off short of yanking it out. I had to go online (via my laptop because like hell I was plugging my LAN into an open access point), find a list of default passwords the ISP uses, and try them until I hit the right one. I changed the network name to gibberish and then disabled it.
I was later informed that they'd have been more than happy to tell me the password if I just phoned them. The next morning, when the phone lines were open, because I got home too late.
Oh, and wait an hour on hold.
And hope the call center monkey I got didn't think he wasn't allowed to give that info. And knew where to find it.
Sure, it's EASY to change a wireless setting!
Let me tell you a story about excessive force:
A few years ago in Atlanta, the police got a tip from an informant about drug dealers. They sent three undercover officers to serve a no-knock warrant. In other words, they sent three heavily-armed men who weren't dressed as police to kick in somebody's door without any warning. Guess what happened next.
That's right: the old lady who lived alone in the house (and who was not a drug dealer), scared out of her wits, fired a single shot at the armed thugs invading her home. She missed. The "officers" returning fire, on the other hand, used 39 bullets instead of one, and didn't miss five or six times.
Then, of course, they planted drugs on the old lady as she was dying, and it turned out that that the informant had lied (under pressure from police) in the first place.
For more information.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz