Slashdot Mirror


Justice Department: Default Encryption Has Created a 'Zone of Lawlessness'

Jason Koebler writes: Leslie Caldwell, an assistant attorney general at the Justice Department, said Tuesday that the department is "very concerned" by the Google's and Apple's decision to automatically encrypt all data on Android and iOS devices.

"We understand the value of encryption and the importance of security," she said. "But we're very concerned they not lead to the creation of what I would call a 'zone of lawlessness,' where there's evidence that we could have lawful access through a court order that we're prohibited from getting because of a company's technological choices.

42 of 431 comments (clear)

  1. Fifth amendment zone of lawlessness by Anonymous Coward · · Score: 5, Insightful

    Just like that zone of lawlessness inside of peoples minds that the pesky 5th amendment creates, think of all the criminals going free because we can't force them to incriminate themselves! This is a situation that the DOJ and other alphabet agencies have brought upon themselves by thinking they are above the law in the first place.

    1. Re:Fifth amendment zone of lawlessness by ColdWetDog · · Score: 5, Insightful

      Just like that zone of lawlessness inside of peoples minds that the pesky 5th amendment creates, think of all the criminals going free because we can't force them to incriminate themselves! This is a situation that the DOJ and other alphabet agencies have brought upon themselves by thinking they are above the law in the first place.

      Or the Fourth Amendment. Or the Second. Or the First.

      The situation is clear. We must take care to ban this subversive document now. For the children! For the Feds! For great justice!

      --
      Faster! Faster! Faster would be better!
    2. Re:Fifth amendment zone of lawlessness by pr0t0 · · Score: 5, Insightful

      The DOJ made their bed.

      They continue to hoover-up massive amounts of data on everything from telecommunications to, as recently reported, vehicle movements, on everyone within and outside US borders. We are meant to trust that this data will not be abused by those who collect it, and that it cannot be hacked/modified/stolen by anyone else.

      We have no choice but to encrypt our data. We seemingly have no way to stop it's collection, and those who collect it have repeatedly shown themselves to be poor stewards of that data (lack of protection, accessed without warrant, etc.). They've transitioned their methodologies based on that data being available and unencrypted, and failed to prepare for the inevitable fact that data encryption would eventually become commonplace...with or without Snowden...because there are lots of bad actors in the world.

      --
      I'm sorry, but your opinion seems to be wrong.
    3. Re:Fifth amendment zone of lawlessness by Anonymous Coward · · Score: 2, Insightful

      Once you put information into anything except your own head, it's fair game for a subpoena or search warrant. Period. Encryption doesn't matter. You can be compelled to provide keys or passwords, because the keys and passwords themselves aren't evidence against you. They just unlock the evidence that already exists.

      100% wrong. If I have a physical, paper notebook, and inside it I wrote using a completely made-up language known only to me, it is not my fucking job to teach the police how to read that language. And that fact does not change just because the notebook is composed of spinning metal disks and was written to using magnets.

    4. Re:Fifth amendment zone of lawlessness by Githaron · · Score: 4, Insightful

      Once you put information into anything except your own head, it's fair game for a subpoena or search warrant. Period. Encryption doesn't matter. You can be compelled to provide keys or passwords, because the keys and passwords themselves aren't evidence against you. They just unlock the evidence that already exists.

      Providing the password to potential evidence that is encrypted is self-incrimination.

      Let's say the justice system believes you are a drug trafficker. They believe you have drugs stashed somewhere in your house. With a warrant, they try and try but they just can't find your stash. Under the Fifth Amendment, they cannot force you to tell them where the stash is.

      Encryption is the same way. The encrypted container is the house; the evidence within that container is the drugs; and providing the password is the equivalent to telling them where the drugs are.

      If we pretend the self-incrimination part of the Fifth Amendment didn't exist, there are a lot of other issues.

      What if the evidence doesn't actually exist? What if what they believe is a encrypted container is actually a corrupt file or random noise? If the evidence does exist, what if the accused does not remember the details either by amnesia or simple forgetfulness? What if the acccused never had the password to begin with or use encrypted keys that no longer exist? Yes, the accused could be lying but how are you going to prove they are?

  2. A quote by TWX · · Score: 5, Insightful

    Rumsfeld [said], "Stuff happens... and it's untidy and freedom's untidy, and free people are free to make mistakes and commit crimes and do bad things. They're also free to live their lives and do wonderful things. And that's what's going to happen here."

    This was in the context of the Iraq war, when the United States kicked over the anthill that was Saddam's government and suddenly all the factions started tearing each other and their civilization apart.

    I do not normally agree with Donald Rumsfeld, and in the context of the Iraq war I definitely disagree with his decision to allow Iraq to destroy itself so thoroughly, but on the other hand if we're extending that freedom to people that we're actively in-confrontation with, then shouldn't we extend that freedom to ourselves?

    --
    Do not look into laser with remaining eye.
    1. Re:A quote by Bob9113 · · Score: 4, Insightful

      I have mod points, but you're going to make it to +5 anyway, so I'd rather be more explicit: Thank you for such a poignant juxtaposition of our ideals with our weakness and susceptibility to fear.

  3. FUD by Lunix+Nutcase · · Score: 4, Insightful

    OMG!!! The pedophiles and terrorists are going to run rampant!! It's not like they used encryption before or anything!

    Gotta love the flailing FUD as of late about encryption, reporting police officers on Waze, etc. The police state is definitely in full swing at this point.

    1. Re:FUD by Lunix+Nutcase · · Score: 3, Insightful

      Using Waze to enable reckless driving is nowhere even near the same thing as protecting privacy with encryption.

      Wow, it's almost like you completely missed the point of my post. *golf clap*

      I never report police on Waze and flag them as "Not there" whenever possible.

      Awww, what a good little bootlicker. Good thing all the other people will undo your action.

  4. Lawful Access by UconnGuy · · Score: 5, Insightful

    I am not so concerned about the lawful access (i.e. not a secret court warrant). It's the abuse of power that continues with the executive agencies (NSA, CIA, FBI, DEA, local police, etc...) that I am concerned about. Until they are willing to stop the abuses, I have no problem making their jobs harder. Don't blame the tech companies for making your jobs more difficult. If you do it the right way, an encrypted phone won't be a problem during an investigation. A phone should not be the start and end of your case and investigation - it should only be an additional tool.

  5. 'Zone of Lawlessness' by fustakrakich · · Score: 5, Insightful

    That would be all the corporate boardrooms, capitol buildings, and city halls, right?

    --
    “He’s not deformed, he’s just drunk!”
  6. Pfffff, morons in the justice department... by Anonymous Coward · · Score: 5, Insightful

    Guess what, the criminals you were trying to catch were already "flicking the switch" on the encryption before this became the "default" setting.

    The default setting came about because of your constitutional terrorism, wielding your Weapons of Constitutional Destruction to the detriment of the common man.

    You only have yourselves to blame for this effect.

  7. Dear DOJ by Virtucon · · Score: 5, Insightful

    Too Fucking Bad! Your entire administration and the one before it has demonstrated that you have absolutely no intent of defending the constitution especially where privacy and due process are concerned. To make this kind of statement while new stories of how you're tracking people's everyday movements even more you still complain that you don't get access because people and companies are defending themselves. Lawlessness? Fuck! Where have you been? There's already instances where evidence has been forged in cases to keep secrets of how information was obtained illegally and the DOJ has sanctioned it! Ms Cadwell, you're not the person who should be in the DOJ and you should resign immediately because you have your head right up your ass.

    --
    Harrison's Postulate - "For every action there is an equal and opposite criticism"
  8. They shot first by Anrego · · Score: 5, Insightful

    They shot first, they eroded the trust to a point where people, not criminals or terrorists or pedophiles but ordinary law abiding people have stood up and said "we don't trust the government any more, nor the systems in place to protect our privacy, and so we have to take it into our own hands."

    The proliferation of wide spread encryption is almost a direct result of actions by the NSA, FBI, and friends. They brought this on themselves. If they want people to once again accept them as partners in protecting their rights rather than adversaries, they need to regain the trust they've lost.

    1. Re:They shot first by Kazoo+the+Clown · · Score: 4, Insightful

      Yes, we're trying to address the "zone of lawlessness" inside the NSA...

  9. Isn't freedom itself a potential lawless zone? by popo · · Score: 5, Insightful

    The notion that liberties could be misused and potentially give way to lawbreaking behavior is never a justification for the repeal of liberty.

    We are always and everywhere free to break the law. That our social contract with government grants government the ability to prosecute law breakers ex post facto, does not equate to a wholesale license to restrict a liberty prior to its potential abuse.

    To jump to such a conclusion would equally justify a national curfew. After all, who knows what we might get up to after dark?

    Liberty by definition, always carries with it the potential for individual abuse.

    --
    ------ The best brain training is now totally free : )
  10. Sucks to be law enforcement in a Republic by WCMI92 · · Score: 5, Insightful

    Because it's SUPPOSED to suck. If the Founders intended government to be able to rifle through our affairs AT WILL they wouldn't have put the 4th Amendment into the Bill of Rights would they?

    --
    Corporatism != Free Market
  11. A zone by any other name... by Kazoo+the+Clown · · Score: 5, Insightful

    I hear there are zones of lawlessness in people's homes and in various public spaces such as parks, parking lots, street corners and alleys, where people actually TALK to each other without being surveilled! And bad guys who talk in code so that even if they are being surveilled, it's as if their conversation is encrypted by their brains! Horrors, whatever shall we do! Think of the children!

  12. Non sequitor by hawguy · · Score: 3, Insightful

    "We understand the value of encryption and the importance of security,"

    I do not think that phrase means what he thinks that means when the government's position is that all encryption needs a back door - NSA analysts have already shown that they'll use their access to data to invade privacy (i.e. looking up data of ex- girlfriends).

    Though I'm pretty sure this is just posturing by the government to give everyone a false sense of security, and that Google, Apple and others have provided secret back doors that they aren't allowed to talk about.

  13. Orwell Translation Matrix v1.2 by DoktorMidnight · · Score: 5, Insightful

    "We are concerned that there are minuscule gaps in our nearly universal panopticon. Therefore we will require that all devices be accessible by duly appointed authorities. We promise that this power will never be abused."

  14. worry about the other "Zone of Lawlessness"! by silfen · · Score: 5, Insightful

    The reason we are using encryption more widely is because the US government has been spying on US citizens without lawful court orders. That is, Leslie Caldwell should be concerned about the "Zone of Lawlessness" at the FBI, the CIA, the NSA, and the Justice Department. Fix that, and then the American people might consider not using encryption anymore.

    1. Re:worry about the other "Zone of Lawlessness"! by dbc · · Score: 3, Insightful

      And where are my mod points today. Yes. This. The Zone of Lawlessness is mostly inside the DC beltway.

  15. It is not just a company's choice by nomad63 · · Score: 3, Insightful

    In order to ride everyone's asses, law enforcement wants things that they do not understand, to be served them on a silver platter. The point they are missing is, if the things are so easy that your donut eating run-of-the-mill cop can figure it out at any time they wish, the crooks, who are leaps and bounds ahead of them, as far as computer literacy goes, will do victory dances around those devices and rape the average Joe's privacy. Of course, where there is a choice between the public's privacy and ease of police operation, guess what trumps ? Or in other words, who has the big guns ? The people who have no idea what they are talking about, keep their pie holes shut, in my opinion, and from what I read so far, Leslie Caldwell is one of those people.

    --

    __________
    The more I know people, the more I love animals
  16. Lawful access is uneffected. by jythie · · Score: 4, Insightful

    Encryption does not prevent lawful access to data. If law enforcement gets a court order they can always go the person and require them to decrypt something for search. What it does prevent is LEO going to 3rd parties and secretly getting unencrypted data, which is only 'lawful' because they have twisted things to do so. But search where the subject is aware and can examine the order? No change there.

    All common encryption does is prevent law enforcement from creating all sorts of new abilities and powers it did not have before, which is a very different thing.

  17. Re:poor cops have it so hard by jythie · · Score: 4, Insightful

    It is kinda sad how it has, in many ways, crossed that bridge,.. and the only thing that seems to stop it from going down a really dark path is the amount of infighting between the various institutions who want to be the winner in such a situation. Our government's own self destructiveness partisanship might be the only thing preventing a dictatorship at this point.

  18. Security is a yes/no question by Anonymous+Brave+Guy · · Score: 5, Insightful

    Your position seems reasonable enough from an ethical/moral standpoint. Unfortunately, in reality, a device or communication channel is either secure against a certain attack or it isn't. There is not and never can be a middle ground of being secure against a certain attack unless that attack has been lawfully authorised by a competent court.

    In short, if the government wants access to your encrypted information, even with appropriate oversight, then it must require your information to be insecure and therefore vulnerable to other parties accessing it as well. If the government wants to encourage security in communications, then it must accept that covert interception of those communications will no longer be possible. You can't eat your cake and have it.

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  19. When everyone is guilty... by Anonymous+Brave+Guy · · Score: 5, Insightful

    There used to be a saying, something about it being better to let ten guilty men go free than to imprison one innocent one.

    Tragically, in today's culture of politics dominated by fear, it almost seems like everyone is presumed to be guilty of something. That means the idea that it might be necessary to protect someone who might actually be innocent, or simply to leave them alone to live their lives without interference, is not given a lot of thought.

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    1. Re:When everyone is guilty... by RabidReindeer · · Score: 5, Insightful

      It's referring to killing one innocent, not imprison.

      Imprison sounds like "whoops, we fucked your life", but at least isn't taking one away. Killing an innocent refers to what happens in Texas regularly.

      If you'd been unable to see your children grow up or grow old with your wife or even miss that once-in-a-lifetime travel vacation, then most people would consider their life to have been "taken away". The part that's worth living, anyway.

    2. Re:When everyone is guilty... by tombeard · · Score: 4, Insightful

      It always amazes me "Ignorance of the law is no excuse" but a lawyer has to study years just to understand small subset of them. There are even special courts and judges for specific legal areas.

      --
      The reason we subjugate ourselves to law is to better procure justice. If law does not accomplish this purpose then it m
    3. Re:When everyone is guilty... by Jason+Levine · · Score: 3, Insightful

      If you're locked up for years, despite having done nothing wrong, I'm not sure I see much difference.

      And that doesn't even get into how your life could be ruined after the "oops, sorry about the imprisonment. You're free to go." Your old job definitely won't be available and new job opportunities might be skittish about hiring someone who went to prison. Even if they've expunged your record, people might still know you went to prison, might still think of you as guilty, and treat you as such. In short, your suffering might not end once you get out of jail.

      There's a good reason that our justice system is supposed to be stacked in favor of the defendant.

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    4. Re:When everyone is guilty... by bmajik · · Score: 3, Insightful

      A funny idea I had once was that after the revolution, the new government gets a 100 page blank notebook to write the laws in.

      Once they fill up the last page, all of them are executed.

      The next group of guys gets a 100 page blank book.

      --
      My opinions are my own, and do not necessarily represent those of my employer.
  20. Boo fucking hoo by gstoddart · · Score: 3, Insightful

    "But we're very concerned they not lead to the creation of what I would call a 'zone of lawlessness,' where there's evidence that we could have lawful access through a court order that we're prohibited from getting because of a company's technological choices.

    You've demonstrated you can't be trusted. The CIA has proven they're willing to lie to Congress.

    So the reality is, you're all lying, thieving bastards who ignore the law and our rights.

    You got fucking probable cause and a warrant, show it. But you don't get blanket fishing expeditions just in case.

    Sorry, but you're asking for back doors to all forms of security ... which defeats the purpose of those forms of security in the first place.

    Go piss up a rope.

    --
    Lost at C:>. Found at C.
  21. Re:Wait... by Anna+Merikin · · Score: 4, Insightful

    In the BC (Before Computers) era, if one wanted perfect privacy, they would remember things and not write them down. They would talk to each other in their own homes with security from government eavesdropping about ideas, politics, anything they felt like. The fifth amendment gave them the right to keep such things from government "oversight."

    Now, there is more to remember and machines to help us do so. Should these modern aids help the individual or make the jobs of surveillance agencies easier?

    Put another way, would anyone want their careless/drunk/drugged/lusty words used against them in a courtroom?

  22. Pot meet kettle by augustz · · Score: 4, Insightful

    Pot meet kettle!

    What's happened is the government has changed lawful access to mean secret courts with secret warrants, mass hacking and surveillance of systems we use every day for commerce etc with zero or token oversight. This is the real zone of lawlessness.

    These systems can then be used for cyberstalking some ex, data sold to an investigator for profit, used politically to smear opponents etc, and result in innocent people blocked from flying, subject to extraordinary rendition, special measures interrogation techniques (ie, torture) etc without due process. If this happened in another country we'd call it extra-judicial lawlessness and condemn it.

    I think many people are supportive of lawful access. This means due process, within the court system, etc etc. Suspected of x, probable cause, warrant issued but briefly sealed, warrant executed and unsealed, ability to contest basis for warrant, knowledge of its execution and existence etc, etc. This system of due process exists for a reason - and is well articulated and well developed going back to our constitution and subsequent amendments etc.

    Our economy and society wins if we can rely on these systems to handle our searches for medical conditions, our emails to loved ones, confidential business information etc etc without massive invasions of privacy. Our economy and society win if we can count on the rule of law.

    Small wonder Google and Apple are resisting the secret "National Security Letter" no due process system the government has invented, or the direct hacking of their systems.

  23. When everyone is guilty... by Rhys · · Score: 5, Insightful

    The goal, if you had missed it, is to pass enough laws you're guilty of *something*. Then, if you get to be a problem, there's sure to be *something* to nail you to the wall with.

    --
    Slashdot Patriotism: We Support our Dupes!
  24. Re:poor cops have it so hard by rickb928 · · Score: 3, Insightful

    A. The Internet permits people to organize faster than the oppressors can react to prevent it.

    B. The Internet permits people to discover like-minded others. They will find each other offline if necessary, putting to death the lie that 'everyone is happy'.

    C. Encryption will at least complicate the oppressors' surveillance.

    So denying access at least serves the oppressors. And denying access is the foundation of efforts against child pr0n and other 'undesirable' activities.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  25. No, Ms Caldwell by Applehu+Akbar · · Score: 3, Insightful

    The zone of lawlessness is created when you attorneys general will not indict cops for even the most radical forms of misbehavior. This behavior of course includes offenses that the little people regularly get nailed for, such as choking people to death on the street not in self-defense, plowing into a cyclist because you were texting, or (just this morning!) stealing nude images off women's cellphones and spreading them around for the lulz on social media.

  26. Re:poor cops have it so hard by Anonymous Coward · · Score: 2, Insightful

    Warantless is a problem. It's an explicit violation of the Fourth Amendment- out of box (I don't give a damn about it's the Supreme Court's role...show me where they get to interpret the Constitution or Amendments in the same... I won't wait...you'll take until the heat death of the Universe trying to find that... Quite simply their job is to deal with that which is at-controversy. There is NOTHING at-controversy about the Constitution or the Amendments. That's bedrock. Absolute. Meaning of what is required is in the terms of when it was enacted- if it needs to be adjusted because of changed meaning or intent, AMEND IT.)

    As such, most of this crap goes bye-bye if you apply the proper intent and meaning of the Constitution as Amended by the Amendments- and do it precisely and explicitly. Want to get a search/seizure of something- get a fucking warrant the right way. None of this "no-knock" bullshit. None of this "warrantless" crap.

    Either you have something that you can minimally convince a Judge you've got probable cause or you don't DO it. PERIOD. You can't be a fucking criminal in the process of "enforcing" the law.

  27. DoJ zone of lawlessness by TiggertheMad · · Score: 5, Insightful

    TiggertheMad, a nobody from the Internet, said Tuesday that the he is "very concerned" by the most of the Internet's decision to not automatically encrypt all data. "We understand the value of legal discovery and the importance of enforcing laws," he said. "But we're very concerned they not lead to the creation of what I would call a 'zone of lawlessness,' where the government violates some of our most basic principles in some quixotic hunt to ferret out terrorists and other boogie men. They might actually have to do some actual police work, you know like they did for the last few centuries."

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
    1. Re:DoJ zone of lawlessness by boristdog · · Score: 5, Insightful

      I swear you could just go back to the old school spy tradecraft (dead drops, one time code pads, etc.) and keep your illegal organization out of the eyes of the law as long as you weren't stupid and kept all confidential communications offline. I'll bet not more than 5% of law enforcement agency personnel even know what they used to do.

      It's how I run my terroist organization these days, and the terror business is good.

  28. Re:poor cops have it so hard by Lunix+Nutcase · · Score: 3, Insightful

    Either you have something that you can minimally convince a Judge you've got probable cause or you don't DO it. PERIOD. You can't be a fucking criminal in the process of "enforcing" the law.

    What's even worse is when they bypass the FISA court rubber stamp to do things warrantless. The FISA court even lets you backdate things by like a couple of days. If the government can't even convince the FISA court then you know they are doing something they definitely should not be doing (not as if the stuff FISA does approve is always above board).

  29. But power corrupts (even if unintentionally) by Anonymous+Brave+Guy · · Score: 3, Insightful

    I agree with your basic point about the need for balance. Of course there are bad people in the world and of course we need police and courts and the like.

    I think the problem today is that many in our current political class don't recognise that need for balance so much as they see "them and us" and even start to forget whose side they are supposed to be on. The truly evil part of the situation is that this result seems almost inevitable. The people calling the shots are exactly the people who necessarily deal with the worst of humanity as part of their job. How could this not affect their perspective? They naturally want to trust their allies, who are the people who would be empowered under all these proposed security measures and aided by restrictions on the privacy and security of others. And of course being influential figures within the government, it is highly unlikely that they will personally ever find themselves on the wrong side of a government screw-up and unable to get the problem fixed very quickly.

    I don't think these people are evil. On the contrary, I suspect most people in government, including their agents in the police and security services, are probably just normal people who have a job to do and who genuinely want to do the right thing. As with any large group, there will eventually be a few bad actors included as well and it is necessary to identify and contain them, but that isn't usually the main problem.

    However, I do think we're talking about people who are heavily biased, even paranoid, because it would take a superhuman level of detachment not to be when you look at the kind of people they have to deal with at times. I also think in most cases they are ignorant about the technologies they are dealing with, and therefore unable to make rational, objective judgements about the likely effects of the technical measures they propose as policy. Finally, I think that the more senior these figures get within the government and its agencies, the more detached they tend to be from reality for average citizens and the more ignorant or dismissive they can become of how things tend to play out for innocent people in less privileged positions who are nevertheless caught up by the measures the politicians propose.

    As the saying goes, power corrupts. It doesn't necessarily have to be malicious or intentional. Obviously in some cases it has been, but often I think the corruption is more of a slow but almost inevitable change in perspective caused by the situations you find yourself in when you have power to wield.

    And so it is necessary for those who are looking from outside, those who don't spend disproportionate amounts of their time dealing with a particularly nasty minority of the human race, those who understand the technical issues, to speak out about what is happening and where it could lead. As with any issue of civilised government, in the long run you're going to get much further by educating people about relevant issues and promoting intelligent discourse than you are with wildly exaggerated rhetoric and extreme positions backed by intimidation and ultimately violence. The latter are seductive, and often appear quite effective in the short term, but I doubt they've ever truly solved much.

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.