U.S. District Judge: Forced Decryption of Hard Drives Violates Fifth Amendment
hansamurai writes with an update to a story we've been following for a while. Jeffrey Feldman is at the center of an ongoing case about whether or not crime suspects can be forced to decrypt their own hard drives. (Feldman is accused of having child pornography on his hard drives.) After initially having a federal judge say Feldman was protected by the Fifth Amendment, law enforcement officials were able to break the encyption on one of his many seized storage devices. The decrypted contents contained child pornography, so a different judge said the direct evidence of criminal activity meant Feldman was not protected anymore by the Fifth Amendment. Now, a third judge has granted the defense attorney's emergency motion to rescind that decision, saying Feldman is once again (still?) protected by the Fifth Amendment. Feldman's lawyer said,
"I will move heaven and earth to make sure that the war on the infinitesimal amount of child pornography that recirculates on the Internet does not eradicate the Fifth Amendment the way the war on drugs has eviscerated the Fourth Amendment. This case is going to go many rounds. Regardless of who wins the next round, the other side will appeal, invariably landing in the lap of the Seventh Circuit Court of Appeals and quite possibly the U.S. Supreme Court. The grim reality facing our country today is one where we currently have a percentage of our population behind bars that surpasses even the heights of the gulags in Stalinist Russia. On too many days criminal lawyers lose all rounds. But for today: The Shellow Group: 1, Government: 0."
An outbreak of common sense. I can scarcely believe my eyes.
Now to see if it holds.
You can never know everything, and part of what you do know will always be wrong. Perhaps even the most important part.
How much cash you got? :/
Yeah, I'm always thinking of the children... *drool*
...to extradite from the United States any pesky people who insist on their so-called rights to not decrypt their data and jail them for up to 2 years under section 3 of the Regulation of Investigatory Powers Act 2000 if they persist in pretending they're not guilty.
"I will move heaven and earth to make sure that the war on the infinitesimal amount of child pornography that recirculates on the Internet does not eradicate the Fifth Amendment the way the war on drugs has eviscerated the Fourth Amendment. [...] The grim reality facing our country today is one where we currently have a percentage of our population behind bars that surpasses even the heights of the gulags in Stalinist Russia. On too many days criminal lawyers lose all rounds. But for today: The Shellow Group: 1, Government: 0." — Robin Shellow
God damn right. I don't care what anyone says about lawyers — this woman speaks the truth, and she has my respect.
Thank you, Edward Snowden.
"Arguments from authority are worthless." —Carl Sagan
Imagine we had this: an accused, who has a safe made from unobtanium (which needless to say, is as hard as Minecraft bedrock) with an unpickable lock. Can the accused be ordered to turn over the key if a search warrant to search the safe is properly executed? If this is the case, then why can't someone be ordered to turn over encryption keys in the case of encrypted data where there is a properly issued search warrant?
Oolite: Elite-like game. For Mac, Linux and Windows
That judge didn't say "forced decryption of hard drive violates fifth amendment". The judge said "I'll look at the case and make a decision, and there will be no forced decryption until I make my decision".
Myself, I cannot see anything wrong with the original decision. "Fifth amendment" is about self incrimination in statements to police or to the court. This case is about being forced to give the police or court access to evidence.
If the police has a warrant to search your home, it isn't obviously clear whether you can be forced to open the door, and it doesn't matter in practice because the police is allowed to and will break your door, so the only practical difference is two minutes of work for the police, and a broken door for yourself. This situation is exactly the same, except that the door is unbreakable.
Imagine you stand in front of a house door, the police arrives with a warrant and ask you to open the door. You say "It's not my house, break the door if you like, but I don't have keys to let you in". There is no doubt that the police has the right to get in. But opening the door would prove that you have access to the house, so if the police doesn't know that, opening the door would be self incriminating. Not so if you are _inside_. The police would know that you have access, so opening the door is not self incriminating. Giving the police access to the evidence inside doesn't count as "self incriminating" and isn't protected by the fifth amendment.
And it's the same with an encrypted hard drive. You can't be forced to admit that you can decrypt the hard drive, if that knowledge, the knowledge that you _can_ decrypt, was incriminating. But once it is known that the hard drive is yours, then decrypting the hard drive is not self incriminating.
You can't force someone to hand over that key. Not now and not in the past. However, the police has the right to open the safe any way they find fit if there is a search warrant. If they open the safe and you get convicted based on evidence found in the safe, the damage to the safe is yours to pay for. If they find evidence inside the locked safe, it's found in a lawful way and is admissible as evidence.
If they opened the safe without a proper warrant, they would be liable for damages to the safe and anything found inside the safe would not be admissible as evidence in a court case. That is why there are warrants. They are not about forcing people to hand over keys.
I was promised a flying car. Where is my flying car?
If the police arrives with a warrant, you don't have to open the door for them. It is not a crime to not open that door. However, they have the right to knock it down and you can't claim damages that you may occur because of it. You don't have to actively assist the police in serving the warrant. As long as you are not actively obstructing them (putting up extra barricades, destroying evidence after they announced their warrant), you're not doing anything illegal.
If you know there is evidence against you on the encrypted device, you would be incriminating yourself by turning it over to the police. The police can presume there is evidence on the drive, but presumption is not proof. Once you hand over that evidence, it would be admissible and thus self incriminating.
I was promised a flying car. Where is my flying car?
Decrypting a hard drive is no different from letting the police into your house for a search: something the law has the power to order a person to do, provided that the proper warrants are legally obtained. It has long been understood that this is not self-incrimination, even if evidence is later found.
Obviously, decryption orders should be held to the same limits as any other search, with the same requirements for warrants and the same limits. It can be argued that, given the government's recent propensity for warrantless searches, people's fear is reasonable. But calling a properly-warranted and properly-limited decryption order "self-incrimination" is more than a bit of a stretch. Besides which, including it under the umbrella of searches provides new avenues through which to attack the unethical practice of warrantless searches, which must indeed be stopped.
Even the discovery of fingerprints on a smoking gun at a crime scene does not eliminate someone's right to remain silent; so I have no idea what that "different judge" was thinking. He certainly wasn't thinking of due process.
If they found CP on the decrypted drive as they claim, then why do they need the rest decrypted to get a case?
IMHO, the wording was telling:
"The storage device was found to contain 'an intricate electronic folder structure comprised of approximately 6,712 folders and subfolders,' approximately 707,307 files (among them numerous files which constitute child pornography)"
It sounds like a normal backup of a normal PC and 'up-skirts' shots of Hermione Granger he might be able to present as child porn in sound bits like this, but apparently he knows its not enough to get a conviction because he wants the other drives decoded.
Really defendant should not be punished for refusing to help in his conviction and if their claim his true, he wouldn't need to be punished for that, because they'd already have the evidence they seek. So they DON'T have the evidence and they're simply trying to pull the wool over the judges eyes.
If you let the Fifth go 'for the children', then they'll take it for everyone all the time. It will be an extra charge to be added to the sentence.
In cases like these, what's to stop the defendant from saying they don't know the password, or can't remember?
I would wager that the quantity of child pornography that he possesses could determine what extent his final charges are, yes? Therefore, wouldn't it make sense that he would further incriminate himself by giving up that information? So it makes sense to me that he should still retain that protection.
Further evidence is incriminating, absolutely. But it is not self-incriminating. If the police ask him "is there CP on that encrypted drive", answering "yes" would be self incriminating. To see the difference between "incriminating" and "self-incriminating", a very simple test: If he says "I am guilty", and a policeman says "he is guilty", is it the same thing? No. One is a confession, one is just an unproven statement. So if he said that, it would be self incriminating. If he decrypts the hard drive, or a policeman decrypts the hard drive, is it the same thing? As far as evidence on the hard drive is found, no. Therefore, giving the police access the the encrypted data is not self incriminating. But if the hard drive contains lots of CP, but no evidence whatsoever that it is his CP? In that case, the fact alone that he decrypted the hard drive shows he had access to it, while a policeman encrypting it (with the help of a huge computer, or a password given to him in an anonymous phone call) doesn't prove it. Therefore "self incriminating". But as the previous judge said, they _know_ it is his drive. Therefore, no self incrimination.
A judge that defends the constitution is not desirable to the Republicans or the Democrats. He is an enemy to both parties and will be replaced after this. I think the judge is a hero, but in the USA today, that is career suicide to not let the government trample any and all rights.
Do not look at laser with remaining good eye.
What if he's cheated on his taxes and his tax documents are on one of those other drives? Forcing him to decrypt the contents of the other drives could force him to incriminate himself for crimes unrelated to the original search.
I have mixed feelings on this. Is it analogous to requiring him to tell where the body is buried, or analogous to requiring him to let them enter his house with a search warrant?
But you can't require him to open the door for you. In fact, he has no obligation to do anything at all. He can go turn himself in at the police station, leaving all of the doors locked and sealed. As long as they're not booby-trapped, he's not committed a crime, nor can he be compelled to help unlock them.
There is ample case law regarding a safe, or hidden chamber in a house. The accused cannot be compelled to identify or assist in opening the safe or chamber, partially because doing so demonstrates that he knows how to open/find it, and also because it clearly demonstrates that it is his property, both of which are self-incriminating.
In the US, it was established early on that it was supposed to be difficult to prove these things to prevent judicial and law enforcement abuses and the use of powerful judicial tools with impunity. I support this concept.
They guessed his password. It clearly took several months, meaning they were probably using a hybrid dictionary attack.
Crackers can guess several hundred passwords per second on AES256 encrypted TrueCrypt containers. If his password was a bit dumb (or if it was similar to his Windows login, or some other cached login), it might be easier to guess.
A murder that is not related to child porn. For him to decrypt those drives, he would be incriminating himself for the murder.
As said before, that's tough. Same if the police comes to your house with a search warrant looking for stolen goods, you can't say "sorry, can't let you in, there's a dead body in the kitchen". If the police is in a place legally, then they can use anything they can see.