Slashdot Mirror


Police Increasingly Looking To Smartphones For Evidence

Barence writes "Your smartphone could place you at the scene of a crime, destroy an alibi or maybe even provide one – which is why one of the first things police now do at the scene of a crime is take away a suspect's cellphone. This look into smartphone forensics reveals how even wiping incriminating data from iPhones isn't enough to get criminals off the hook. 'If you're looking at your email messages and you rotate the phone, there's a snapshot of that message,' said Phil Ridley, a mobile phone analyst with CCL-Forensics. And what people leave on their phones is horrific. 'We were contacted by police who couldn't get a video to work on a handset – it turned out to be a bloke beheading someone in his garage,' claimed another forensics expert."

37 of 225 comments (clear)

  1. Location proves nothing by nurb432 · · Score: 3, Insightful

    it shows your phone was at the scene, it doesn't prove YOU were.

    --
    ---- Booth was a patriot ----
    1. Re:Location proves nothing by KingBenny · · Score: 2

      in communist belgium, guilty is what you are until proven otherwise ...

      --
      Free speech was meant to be free for all... how can anyone grow up in a nanny state ?
    2. Re:Location proves nothing by The+MAZZTer · · Score: 2

      Ah but if the phone is taken from the suspect, it would seem likely. Smartphones are fairly expensive in terms of both money and investment in a phone contract, so people tend to not leave them laying around I would think.

    3. Re:Location proves nothing by etymxris · · Score: 3, Insightful

      Just like having an unsecured wifi network doesn't prove that YOU sent that threat to the president. Except juries don't find that very convincing. And even where it is true that someone is committing crimes through your wifi network, such as in a recent case, you still get to have all your computers seized and combed through. If you actually had been doing something illegal, even if it wasn't what the search warrant was for, you'd still be prosecuted. Because the police had reasonable cause to search your possessions.

    4. Re:Location proves nothing by Opportunist · · Score: 3, Insightful

      No, but I'd gladly attach it to my dog when I plan to commit a crime.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    5. Re:Location proves nothing by VortexCortex · · Score: 3, Interesting
      Neither does DNA. DNA proves that your DNA was at the scene, not you, but try convincing an ignorant judge and jury of this...
      Think about this next time you toss a disposable coffee cup into the trash, or scratch your head in public... Is there someone in that room with you that matches your basic physical description?

      Might I not be collecting your DNA, and/or your wireless signatures (via my laptop -- Hint: GSM & CDMA are cracked) so that I can place you at the scene of my next crime?

      Sure: "What are the chances -- Tinfoil hat!"
      That's EXACTLY how I want you to think, and how much of the public does think -- Surely no-one would exploit this fact...

      Let's just hope all criminals are just dumb, and won't think to commit a crime when they know you won't have an alibi, and that when the cops "like you" as a prime suspect due to DNA and digital evidence that they take several other suspects to court as well-- Wait, what's that you say? They only try ONE person via trial? Oh, that's right, because if they prosecuted several at once, and the courts found TWO suspects guilty of the same crime... It would totally undermine the public's faith in the justice system!

      Bwa-Ha-HAHAHA... Hahahaha... Oh, oh--damn, Haha-ha--- ha, heh, heh, HAHAHA!

    6. Re:Location proves nothing by cdrguru · · Score: 2

      Just like having an unsecured wifi network doesn't prove that YOU sent that threat to the president. Except juries don't find that very convincing. And even where it is true that someone is committing crimes through your wifi network, such as in a recent case, you still get to have all your computers seized and combed through. If you actually had been doing something illegal, even if it wasn't what the search warrant was for, you'd still be prosecuted. Because the police had reasonable cause to search your possessions.

      Uh, that isn't exactly true. It depends on what they were looking for, what they found and where they found it.

      Let's say your computer gets examined because the little boy next door says you showed him some nasty videos of other little boys. So they dig around in your computer and find not videos of little boys but videos of little girls. Not in an Internet Explorer cache folder but in a folder named Suzy. Yup, I think you are going down for it.

      However, in the course of a full examination of the computer they find a file with 10,000 credit card numbers and the folder is buried seven levels down through hidden folders and such that nobody without a forensic tool would ever find it is probably meaningless. Not only would this be evidence of a completely different crime but it wasn't something that was in "plain sight" and was certainly clearly outside of the search warrant. Now if the file with 10,000 credit card numbers was on the desktop with a name like StolenCreditCards.txt that would be a different story entirely.

      This comes up all the time and for the most part it is addressed through on-site previewing of the computers today. If they don't find anything obvious they aren't even going to collect the computers because of the backlog in the computer forensic lab. The lab folks are just going to make a report to the prosecutor anyway and the prosecutor is the one that got the warrant in the first place. They know the limits of what they can do based on the original search warrant. That doesn't mean you are going to get away with it because whatever is found can then be used to justify further investigation, but not as evidence at trial.

    7. Re:Location proves nothing by Anonymous Coward · · Score: 2, Informative

      You can ask about 15 teenagers arrested for criminal trespass at a local park about this where I live. A couple months ago, the city DA got location records from the cell providers, found location logs of people's cells who were at a park after dusk, then did a mass arrest sweep.

      Just the fact their phones were in the park after dusk was good enough for a jury to convict and give them 3-6 months in jail each.

    8. Re:Location proves nothing by LibRT · · Score: 2

      The other problem with DNA (and fingerprints too) is that they don't come with a time stamp. All they can say is that you were there at one point in time.

    9. Re:Location proves nothing by Entropius · · Score: 3, Insightful

      The problem here isn't that the police used electronic forensics in a criminal investigation; the problem is that the "crime" in question shouldn't have been illegal in the first place.

      I, and probably you, have no problems with the police using such techniques to investigate real crimes, like robbery, theft, arson, etc. There's nothing wrong with this investigation technique -- the problem is that we are persecuting people for being in a public space after dark, which is absolutely ridiculous.

    10. Re:Location proves nothing by sobriquet.net · · Score: 2

      IANAL, but I do work in computer (and mobile phone) forensics.

      While no one piece of evidence "proves" an entire case (even fingerprints on a murder weapon), it's typically the collective mass of evidence which makes the case.

      The great thing about mobile phones is that they are, typically, personal devices. While people commonly share desktop (and to a slightly lesser degree, laptop) computers, it is much less common for people to share a mobile phone.

      That said, it's certainly not impossible, and if a suspect raised the "shared phone" defence, I would certainly go looking for any indication that another person had used it - internet history, logged in accounts and many other forensic artifacts could be used to either support or refute such a claim.

    11. Re:Location proves nothing by NiteShaed · · Score: 2

      Laura Kriho was convicted and fined $1200 for attempting jury nullification.

      You left out that she was ultimately aquitted. The judge and prosecutor who initially came after her were clearly very wrong, but in the end, the system corrected their actions, and reaffirmed the jurors right to be free from prosecution for decisions made during deliberations.

      --
      Some bring out the best in others, some the worst. Some bring out far more.
    12. Re:Location proves nothing by Gripp · · Score: 2

      no. you are basically saying that people should be locked away and lives ruined on something of a statistical hunch.

      chances are != guarantee. keep in mind that we are talking about real human lives here. possibly even yours! and while it is true that people in the west do frequently get convicted with nothing more than circumstantial evidence (mounting or not) this is simply an unfortunate side effect of poor legal representation and the general ignorance/fear/elitism of the public at large.

      further, the mere fact that police tracked these teens using cell phone records is disgusting to me. THAT is proof positive that we need to push back against all of this anti-privacy BS IMO.

  2. Turn off the fucking phone. by h4rr4r · · Score: 2

    If you are planning on committing a crime remove the battery from your phone. This goes for non-smartphones as well. Use a prepay for crime planning and ditch it as frequently as possible.

    1. Re:Turn off the fucking phone. by Yetihehe · · Score: 3, Insightful

      Or just leave it at home. Record saying that your phone was turned off before crime and turned on after, is worse than a record saying that your phone was all evening near your tv....

      --
      Extreme Programming - Redundant Array of Inexpensive Developers
    2. Re:Turn off the fucking phone. by ColdWetDog · · Score: 5, Funny

      I have an iPhone, you insensitive clod! I can't just "remove the battery"!.

      iPhone users aren't criminals. You'll want to get an Android phone to slum around with your wicked friends.

      Steve

      Sent from your iPhone

      --
      Faster! Faster! Faster would be better!
    3. Re:Turn off the fucking phone. by anagama · · Score: 3, Interesting

      In addition to leaving it at home, write an app that will make a text or two to your most frequently texted contacts and also perform a few innocuous internet searches. Automated outgoing phone calls might be more difficult because of the need for natural conversation. This way, not only is the phone on, you are actively using it, or so it seems. Problem is keeping the app hidden well enough that it won't be found on the phone.

      --
      What changed under Obama? Nothing Good
    4. Re:Turn off the fucking phone. by Zero__Kelvin · · Score: 2

      "Problem is keeping the app hidden well enough that it won't be found on the phone."

      Where is the problem? Just have the app delete itself at a specified time.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    5. Re:Turn off the fucking phone. by Kidbro · · Score: 2

      Sent from your iPhone

      Now there's a sigworthy phrase if ever I saw one.

  3. Re:Constitution in trouble by dave420 · · Score: 3, Insightful

    Don't commit crimes and you'll be OK.

  4. This seems a lot like self-incrimination by mysidia · · Score: 4, Insightful

    Your smartphone is your data.

    So it is extremely odious that police take away a person's cell phone, if the person is not being arrested or at least charged with a crime.

    This is a far more significant breach than mere 4th amendment stuff. Police are looking for information you have recorded, instead of evidence of a crime.

    The routine taking away of life-critical devices from 'suspects' is a menace to society. This does more harm to innocent people than criminals.

    For people who rely on their smart phones for all communications, this would be similar to police impounding the right arm or left foot of suspects, to attempt to 'analyze' if they held a weapon, and demanding DNA from random people at a scene who are 'suspects' (whether there is actual cause to suspect them or not beyond mere presence/appearance).

    This should be solved legally and technologically dealt with. Cell-phones should regularly purge latent/hidden data when charging AND resist attempts to gather data from them.

    If someone is a suspect, the police should have to get a special warrant to access cell phone data, and it should be served not by confiscating the physical device, but by the court granting the police 10 minutes to hold the suspect's phone, during which all "data capture" must be completed.

    If the physical phone is confiscated under a warrant for confiscation of the phone, then only physical aspects of the phone should be subject to analysis, not private data the user had stored, unless previously discovered

    1. Re:This seems a lot like self-incrimination by leonardluen · · Score: 3, Insightful

      10 minutes is by far not enough for several reasons. note: i have had computers and electronics seized by the DHS and kept for nearly 2 years (i was never charged and eventually everything was returned). my point is i have been on the receiving end of this, and even though having your stuff seized, especially if you have done nothing wrong, is really annoying, i will say that i understand why they keep it as long as they do.

      the problem is entirely 100% the lawyers. if the police were only to take 10 minutes to copy the data and then return the device the defense lawyers would throw a fit and would argue how can it be proved that data came from a phone that is no longer in their possession. this is why they need to keep the physical devices until the case is either closed/dropped or all appeals are exhausted, even if on initial inspection they don't find anything useful on it. who knows on latter inspection maybe more information will be found that was missed the first time that can help either the defense or prosecution.

    2. Re:This seems a lot like self-incrimination by fermion · · Score: 3, Insightful
      In the drug hysteria that hit the conservative and thoroughly corrupt administrations of Nixon(war on drugs 1971) and Reagan(1986 act to put minorities in jail for minor offenses and help cause the deficit to ballon) created a climate in which accused, not convicted, person would lose right to property and defense. Like the war on terror, an series of events were overblown to remove individual liberty.

      The expansion of the states rights to take from citizens without due process really escalated when Nixon caved into the hysterical parents who decided not to raise their own children and Reagan realized he had a cool way to transferring tax money to his buddies. The idea that one could take property that was not evidence was novel at the time, but now accepted.

      How does this relate? An office can search your car with no more probable cause than you are speeding. Now, in fact, the SCOTUS says that if you do not have access to the car a warrant must be gotten, but really why should a warrent every be provided because someone is speeding? It is the drug hysteria. Just like the terrorism hysteria.

      Even with this the phone is never going to be a private apparatus. Police can search notebooks. The phone is often just an interface and the data sits on facebook which will roll over to the mildest pressure, or text which can be tapped. It astounds me that people are still being caught by their lovers because they are texting their other lovers. Do people check into foursquare at establishments they plan to rob? Do they text how they are going out a date with someone they plan to attack? Some of this is corrupt government, but some of it is simply incompetence. A certain amount of criminal activity I can tolerate, but incompentant criminals I never can. It is like bringing drugs to school or leaving notes about your plan to blow up a building in your house. Some people just want to get caught.

      --
      "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
  5. Re:Constitution in trouble by rubycodez · · Score: 2

    haha, what a hoot, since we now allow the government to unilaterally declare someone a criminal, and then harm and/or incarcerate and/or kill them without trial and without warrant.

  6. This could be a good thing by fotbr · · Score: 2

    Once a phone's location is generally accepted as showing where you were at a given time, it's an instant alibi.

    Leave the damned thing turned on somewhere else, then go commit your crime.
    Or turn off the ringer and vibration, box it up and take it to a somewhat nearby kinko's, and then fedex it back to yourself. Now it's on, and will travel around the city, while you do whatever it is you want to do.

    If you get nicked, use that phone location and piles of court cases where phone records were admitted as proof of location.

    1. Re:This could be a good thing by folderol · · Score: 2

      No. The best possible alibi is no alibi - can't be disproved see. Go to location with no reception - switch off phone (and put in metal box) - do nastiness - go to new location with no reception - take phone out of box and switch on - go home. Prosecutor: Can you explain how your phone disappeared at X and reappeared at Y? You: Err, no. Sorry, I've no idea.

  7. Re:Constitution in trouble by BrokenHalo · · Score: 2

    So I'm guilty until proven innocent?

    Yes. Hadn't you noticed?

  8. Re:Simple... by Dyinobal · · Score: 2

    ah you'd think so but you'd be wrong. Evidence such as your phone being at home or some place else seems to be viewed with suspicion. That how ever doesn't apply to evidence that places your phone at the scene of a crime.

  9. Re:Constitution in trouble by Opportunist · · Score: 2

    Know what? The police could come into my home and squat here for as long as they like. They can have a key, if it wasn't asking too much I'd like to close the door when I'm taking a dump but if they really wanna watch me when I'm on the can, hey, to everyone what they really enjoy. But I wouldn't want them in my phone or computer, though.

    People define privacy, and which parts thereof are important to them, differently. I don't consider the place I park my cadaver in this important and sacred, but I can understand why other people might see it that way, so I guess I should be supportive since I, too, have places and things I hold dear that belong to my most private space.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  10. Re:Constitution in trouble by Zero__Kelvin · · Score: 2

    "Who the fuck cares?"

    Mostly people who passed elementary school civics.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
  11. Except .... by petes_PoV · · Score: 2

    That the phone records also show you taking it to the courier's office. Explain that one to the police.
    Better to tape it to your neighbour's car just before he/she/it goes out - providing they aren't similarly criminally minded!

    --
    politicians are like babies' nappies: they should both be changed regularly and for the same reasons
  12. They are computers, not phones by Zero__Kelvin · · Score: 5, Insightful

    The problem stems from the perception that it is a phone, when in fact it is a hand-held computer that happens to be able to place and receive phone calls. This is fundamentally no different than them seizing a laptop and rifling through it. It should obviously require a warrant unless the device was used in the commission of the crime and they can already prove that.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
  13. Re:Constitution in trouble by spire3661 · · Score: 2

    The only private space left is the one in your head. If I cant remember something important it just doesnt get stored. If you REALLY worry about privacy, keep it all in your head.

    --
    Good-bye
  14. At least TFS is half right by inviolet · · Score: 2

    "Your smartphone could place you at the scene of a crime, destroy an alibi or maybe even provide one – which is why one of the first things police now do at the scene of a crime is take away a suspect's cellphone.

    Well. It will be used to prove you guilty to whatever extent is possible. It will NOT be used to disprove your guilt.

    Humans respond to incentives, and police are humans. In our era the police are incented by the fact they are judged by their 'numbers' or 'stats'. So they do what is necessary to maximize those numbers. Other concerns are secondary.

    In a future era we will look back on this "management by the numbers" as an expensive way to reduce management headcount. You can easily have 20 direct reports if you are permitted to use an Excel spreadsheet to judge their quality.

    --
    FATMOUSE + YOU = FATMOUSE
  15. Security fail by syncrotic · · Score: 2

    Obviously there's no legal protection for the data on your phone - not that there shouldn't be, but your privacy rights only go one way in modern society, so don't hold your breath - but where are the technical measures? We've seen that police use forensics devices that attach the data port on the phone to give them immediate and complete access to the entire file system.

    There's always a tradeoff between convenience and security, and it's time cell phones at least gave you the option to choose a bit more of the latter. How about not allowing read access via the USB port when the phone is locked? That's just basic common sense, but phone manufacturers and OS vendors don't take physical security seriously yet. How about cutting power to the phone when the back cover is removed? How about having a power-on password in addition to a lock-screen password, so the phone can't simply be put into recovery mode?

    On a PC I can set a BIOS password, a hard drive password, and use full disk encryption of a sort that nobody will ever be able to break. If the machine is running but locked, suspended, or hibernating, even windows will ensure that there's no way to get at my data without actually having the proper credentials. There's no way to recover my passwords or encryption keys from memory, except for the rather technical, obscure, and time-sensitive technique of physically freezing the RAM and trying to read back its contents after a reboot. Compare this to joke that passes for file system encryption on the iphone.

    In a lot of ways, smartphones store more valuable data than PCs do, and yet the options for protecting that data are virtually nonexistent.

  16. Re:Constitution in trouble by unencode200x · · Score: 3, Interesting

    The "If you have nothing to hide, you have nothing to fear" is dangerous in a democracy.

    There is a great piece about it here: http://www.homelandstupidity.us/2006/05/14/if-you-have-nothing-to-hide-you-have-everything-to-fear/

    "The essence of Government is power; and power, lodged as it must be in human hands, will ever be liable to abuse." — James Madison

    --

    Chance favors the prepared mind.
    Perfect is the enemy of good.
  17. Re:'beyond a reasonable doubt' to 'likely' in 236 by LibRT · · Score: 2

    That's flat out incorrect. The difference between "beyond a reasonable doubt" and "likely" is the difference between a criminal trial and a civil trial: In a criminal trial, guilt must be proven "beyond a reasonable doubt"; in a civil trial, the winning party is based on a "preponderance of the evidence" (ie "likely"). One can have a reasonable doubt about one side's evidence in a civil trial and still conclude that particular side's argument is more "likely" than the other side - the "likelihood scale" simply needs to shift to 51% vs 49%. In a criminal trial, the jury cannot have any doubt whatsoever, except for "unreasonable" doubt (ie "the laws of physics do not apply and a person can, in fact, be two places at once" would by most definitions be considered "unreasonable" doubt). Would you be willing to risk a death sentence on the basis you "likely" committed the crime for which you are on trial?