Slashdot Mirror


Tech Firms Say FBI Wants Browsing History Without Warrant (engadget.com)

Aaron Souppouris, reporting for Engadget: Tech companies and privacy advocates are warning against new legislation that would give the FBI the ability to access "electronic communication transactional records" (ECTRs) without a warrant in spy and terrorism cases. ECTRs include high-level information on what sites a person visited, the time spent on those sites, email metadata, location information and IP addresses. To gain access to this data, a special agent in charge of a bureau field office need only write a "national security letter" (NSL) that doesn't require a judge's approval. It's worth noting that ECTRs don't amount to a full browsing history. If a suspected terrorist were reading this article, the FBI would only see they read "engadget.com" and how long for, rather than the specific page links. Additionally, the ECTRs won't include the content of emails, search queries, or form content, but will feature metadata, so the FBI would know who someone is messaging and when.

25 of 145 comments (clear)

  1. Why doesn't law enforcement get it? by Anonymous Coward · · Score: 5, Interesting

    If they walk up to my house and look in a window from the street and see something fine. If the blinds are drawn and they want to see what is behind that window, they need to convince a judge (either before the fact via a warrant, or after the fact with probably cause). Why is it that so many people, especially in government, lose their minds when computers are involved? If I can visit engadget.com and see who is on the site and from where, then fine. If I want them to open up their access logs, I ought to need a judge's approval. Seriously, in this day and age a Judge's approval is never more than 15 or 20 minutes away. It's not like two centuries ago where judges rode circuit and you might have to wait a month until the next time you saw one. Aside from that, if the matters are sensitive, there is an entire court of judges (FISA) with top secret clearances and plenty of federal and even state court judges who have litigated or presided over sensitive cases and also have security clearances. If law enforcement complains that "it's hard" then that is how it should be. Infringing on someone's rights (and that's exactly what a search by the government is) shouldn't be easy.

    1. Re: Why doesn't law enforcement get it? by Anonymous Coward · · Score: 5, Informative

      This is based on a ridiculous ruling that phone numbers dialed are not private information because they're voluntarily shared with a third party (the phone company) and therefore don't have am expectation of privacy. The case is Smith v. Maryland (1979). Basically they ruled that because phone companies keep records of the numbers dialed that users shouldn't expect any privacy and therefore no warrant is required. This ruling could easily be extended to content with that same logic. For example, Facebook has to keep a record of the messages you send in Messenger because they show your conversation history. You've voluntarily shared that content with them. Phone companies now back up SMS messages in the cloud that can be restored to a new phone or after a factory data reset. In either case, you've voluntarily shared the content with a third party and therefore the same logic could be used to argue no expectation of privacy exists there, either. It is, of course, an awful ruling with ludicrous logic applied. It is one of the most shameful rulings ever issued by SCOTUS.

    2. Re:Why doesn't law enforcement get it? by Anonymous Coward · · Score: 2, Informative

      If they walk up to my house and look in a window from the street and see something fine.

      No, not fine. Not always anyway. IANAL, so I am overly simplifying here, but cops need a reason to be in the area. Which could be as simple as "I just so happened to be in the area, and just so happened to glance in the direction of the open window". If a cop is routinely going up and down a street, looking in every open window, and the best excuse they can come up with is "well, I might see something", that is illegal.

    3. Re: Why doesn't law enforcement get it? by johannesg · · Score: 3, Insightful

      So sharing with one particular third party for a technical purpose also implies consent for sharing with every other third party in the known universe, in particular law enforcement agencies? Does the simple fact that more than two parties are involved complete erase the right to privacy?

      Gee, you can take this pretty far, can't you? "No, we were perfectly in our rights to spy on them, because there were three of them"...

    4. Re:Why doesn't law enforcement get it? by ShanghaiBill · · Score: 3, Informative

      If they walk on to my property with the intent to look in my window, they better already have that warrant in hand otherwise none of what they see will be admissible in court.

      Unless you don't know they were on your property, and they use parallel construction to fabricate a different chain of evidence.

      DEA official: "Parallel construction is a law enforcement technique we use every day. It's decades old, a bedrock concept."

    5. Re: Why doesn't law enforcement get it? by mrchaotica · · Score: 2

      Exactly. The asinine thing about Smith v. Maryland is that even if the call records are shared with the phone company, the phone company is private too! AT&T has the same right to not be searched without a warrant as its customers do.

      Now, if AT&T voluntarily decided to hand over records based on a non-warrant request from the FBI, that's allowed (albeit idiotic from a don't-piss-off-your-customers perspective). But it should not be possible to compel them to do so without a warrant.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    6. Re: Why doesn't law enforcement get it? by Kjella · · Score: 2

      So sharing with one particular third party for a technical purpose also implies consent for sharing with every other third party in the known universe, in particular law enforcement agencies? Does the simple fact that more than two parties are involved complete erase the right to privacy?

      Well they've drawn an imaginary line in the sand and said content is protected, metadata is not. For example with phone numbers they can get the number you dialed without a warrant, but if you dial a menu after connecting they do. So for IP traffic that means to and from address, email it's from and to address and so on. The reason I said imaginary line is that the full URL string is considered specific content, but the site is just metadata on who you connected to. So if you visit "news.bbc.co.uk" that's up for grabs, but "bbc.co.uk/news" and they only get "bbc.co.uk" while "/news" is content.

      --
      Live today, because you never know what tomorrow brings
    7. Re: Why doesn't law enforcement get it? by Munchr · · Score: 2

      What we really need are for the tech companies to band together like the libraries did, and protect the confidentiality of their clients. Demand warrants, and stop allowing easy access to our records. If the books I borrow are privileged information that requires a lawful warrant or subpoena (by law in most states), then so are the websites I visit, and the email I send and receive.

    8. Re: Why doesn't law enforcement get it? by whoever57 · · Score: 4, Insightful

      This is based on a ridiculous ruling that phone numbers dialed are not private information because they're voluntarily shared with a third party (the phone company) and therefore don't have am expectation of privacy. The case is Smith v. Maryland (1979). Basically they ruled that because phone companies keep records of the numbers dialed that users shouldn't expect any privacy and therefore no warrant is required. This ruling could easily be extended to content with that same logic

      Even if you accept that ruling, the data that is collected and handed over should be limited to IP addresses that I connect to. DNS names should not be included, since they are content, not metadata. If I am using Google nameservers, all the ISP should hand over was that I connected to 8.8.8.8 on port 53, then I connected to an IP address on port 80.

      --
      The real "Libtards" are the Libertarians!
    9. Re: Why doesn't law enforcement get it? by mrchaotica · · Score: 2

      Please provide a "plain reading" where this is wrong.

      You already did! Note how it says "the right... shall not be violated." It doesn't say "except when the government feels like it." It doesn't say "except when the offense being investigated is [insert hot-button issue here]." And most of all, it doesn't say "except when you're a witness instead of a subject of investigation!"

      The reason for the search is completely irrelevant. The right shall not be violated, unless they've got a warrant. Period.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    10. Re: Why doesn't law enforcement get it? by mccrew · · Score: 2

      Why doesn't law enforcement get it? I think the question assumes that a tiger wants to change his stripes. Law enforcement, like all organizations, always wants to expand its power and reach, especially if it's free for the asking. It is up to you and me to hold our elected leaders to task. Law enforcement has always been happy to use extra-constitutional methods to these ends until they get called to the carpet for it, and you can't expect that they will ever stop trying.

      --
      Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
  2. Re:First Post! by Tablizer · · Score: 2

    FBI are getting too big for their britches, between lobbying efforts for more power, and pressure tactics on both commercial and other government agencies.

  3. Incorrect assumption by JustNiz · · Score: 5, Interesting

    I can see where this is going.
    You might hate terrorism and be looking at isis.com or whataver for legitmate academinc or other reasons, yet the FBI will now just put you on the no fly list anyway.

  4. Get a f*&^ing warrant! by Bugler412 · · Score: 4, Insightful

    It's apparently not difficult to get an essentially rubber stamp warrant from a judge. At least that has a modicum of accountability in the process. Why the hell don't they simply get a warrant?!?!

  5. for the tech user by nimbius · · Score: 5, Informative

    ECTR's arent a formal technical definition, its a smoke-and-mirrors piece of jargon invented by the FBI to conceal the meaning and definition of what it really wants and to prevent overstepping the "metadata" line.

    ECTRs are apache, postfix, nginx, and php logs from transactions. they are asking for your system logs.

    --
    Good people go to bed earlier.
  6. Obama admits they already do it without a warrant by schwit1 · · Score: 4, Informative
    http://www.zerohedge.com/news/...

    "I just came from a meeting, today, in the situation room, in which I’ve got people who we know have been on ISIL websites living here in the United States — US citizens. And we’re allowed to put them on the no fly list when it comes to airlines, ..."

    Based on browser history - pardon? What the president just confirmed is that someone from the government is noting everyone's browsing history, determining which websites are not to be visited, and furthermore, if someone does visit the website for whatever reason they get put on a no fly list.

  7. Re:Why Government want to see browsing history by arth1 · · Score: 2

    Personally, I find http://backslashdot.org/ rather boring. This site is more fun.

  8. Re:Duration Tracking by jsm300 · · Score: 2

    Agreed. There is no information available to tell how long someone spent browsing a page. Sure, if there is a record of a page retrieved, and then a record of another page retrieved that was linked on the initial page, and the time between those two retrievals was relatively short you can probably infer that the time on the first page was probably the time spent looking at the page. But in general people have a variety of browsing methods, may have taken a break to do something else (or their web browsing is the "break" while do some other task), etc. Any long time between page retrievals does not allow a conclusion that the time between those two retrievals indicates that the entire time was spent on that page.

  9. Re:Obama admits they already do it without a warra by Anonymous Coward · · Score: 2, Interesting

    This will be a great troll tactic. Way better than rick rolling.
    Trick people into visiting terrorist websites and they'll be on the no fly list forever.
    trolololo

  10. Re:What I don't understand is... by jafiwam · · Score: 5, Insightful

    Why the fuck does the FBI have a problem with getting a warrant? This isn't Apple's ridiculous refusal to decrypt data when the owner of the phone had consented. This is actually private data and should be protected accordingly. If there's a legitimate reason to access the data, then there shouldn't be any difficulty in obtaining a warrant to obtain access.

    They don't have a problem getting warrants.

    They want to not be observed to, or have any trace of, who and what they watch.

    The goal is "Watching with NO RECORDS OF IT."

  11. Why do you HAVE that data? by Anonymous Coward · · Score: 2, Insightful

    You should not be recording the browsing history of your users. Don't log the shit out of everything. Carry the data, don't keep it. WHY IS THAT SO HARD TO UNDERSTAND?

  12. Re:First Post! by ShanghaiBill · · Score: 2

    FBI are getting too big for their britches

    Who's going to rein them in? Donald? Hillary? I don't think so. The only candidates that want to fix this are Gary Johnson and Jill Stein. Combined, they are polling at about 1%. Americans don't care about privacy, at least not when it matters.

  13. Because society tacitly asks for it by Pollux · · Score: 2

    We as a society want crime off our streets. So, we want officers to do their job as effectively and efficiently as possible. If someone's in the process of committing a crime, we want it stopped. Waiting for a warrant to get processed is time the perps have to get away and for the crime to go unpunished, and nobody wants that except the criminal.

    As I've said repeatedly before, Law Comic is your friend. Borrowing from this page: "Rules are respectable. They're how things are supposed to work. But police officers sometimes see the rules as obstacles that get in the way of justice. And some criminals see the rules as handicaps they can take advantage of, to get away with it. And so, in real life, the rules are often ignored in favor of a kind of rough "street justice"." Besides, as this comic notes in a later section, most arrests get plea bargained anyways, making illegally obtained evidence a moot point.

    To put it another way, ask yourself this question: What would upset you more, allowing a criminal to go free because evidence cannot be obtained legally, or arresting a criminal using evidence that was obtained illegally? (For the purpose of the question, assume the person has indeed committed a crime.)

    1. Re:Because society tacitly asks for it by Bugler412 · · Score: 4, Insightful

      RE: What would upset you more Arresting someone using evidence obtained illegally is definitely more heinous. Any system that encourages or allows law enforcers to break or bypass the law inherently reduces respect for and compliance with that institution and ultimately leads to more and greater crime, from both enforcers and criminals.

  14. Re:Different from any other investigation?.. by Anubis350 · · Score: 2

    Tech Firms Say FBI Wants Browsing History Without Warrant

    Just how is this different — in principle — from the normal and old-fashioned investigation, where the investigator would talk to the suspect's friends, business-partners, grocery-suppliers, neighbors, and landlords? And, if the folks had any relevant records, ask to see them?

    Sherlock Holmes would do that, Perry Mason would do that, Hercule Poirot would do that, Miss Marple would do that. Why can't the FBI — which law are they violating by the mere asking? There is no allegation in TFA of any illegal threats the agents have made against the companies for non-compliance or for demanding a warrant or some other approval from the Judiciary... What is the there there?

    I'll bite - because this is compelled, not asked. An NSL *compels* information, and it also comes with a gag order. Neither of that is true of a cop asking. Now, in the case of a standard investigation, if they wanted to compel testimony or info they could get a warrant or a subpoena, as they can now for these records, but that requires a judge, not just a senior FBI agent, and typically never came with gag orders.

    --
    "goodbye and hello, as always" ~Prince Corwin, from Zelazny's Amber series