Slashdot Mirror


Federal Court: The Fourth Amendment Does Not Protect Your Home Computer (eff.org)

An anonymous reader writes: The EFF reports that a federal court in Virginia today ruled that a criminal defendant has no "reasonable expectation of privacy" in his personal computer (PDF), located inside his home. The court says the federal government does not need a warrant to hack into an individual's computer. EFF reports: "The implications for the decision, if upheld, are staggering: law enforcement would be free to remotely search and seize information from your computer, without a warrant, without probable cause, or without any suspicion at all. To say the least, the decision is bad news for privacy. But it's also incorrect as a matter of law, and we expect there is little chance it would hold up on appeal. (It also was not the central component of the judge's decision, which also diminishes the likelihood that it will become reliable precedent.) But the decision underscores a broader trend in these cases: courts across the country, faced with unfamiliar technology and unsympathetic defendants, are issuing decisions that threaten everyone's rights.

31 of 309 comments (clear)

  1. The message is clear: by Anonymous Coward · · Score: 4, Insightful

    Encrypt all the files!!!

    No exceptions.

    1. Re:The message is clear: by Anonymous Coward · · Score: 5, Insightful

      Encrypt all the files!!!

      No exceptions.

      They'll just lock you away until you tell them the passwords.

      USA! USA! USA!

    2. Re:The message is clear: by Anonymous Coward · · Score: 5, Funny

      Encrypt all the files!!!

      No exceptions.

      Now I can't read my own files! Thanks for nothing.

    3. Re:The message is clear: by bobbied · · Score: 4, Insightful

      Offline was the only safe place even before the government got cart blanch to hack you...

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    4. Re:The message is clear: by CaptQuark · · Score: 5, Informative

      The troubling section starts on page 47, where it states "Defendant Has No Reasonable Expectation of Privacy in His Computer".

      The judge states that because home computers can be hacked so easily, it becomes a common assumption that your home computer MIGHT be hacked, therefore your expectation of privacy is forfeit. Just like a broken window blind allows police to peek into your home, an easily exploited vulnerability on your home computer means you assume your data is not private. Even a password protected file is not immune to discovery because everyone knows passwords can be easily defeated. (pages 47 - 55)

      The judge's analysis is similar to saying we should not really expect any privacy in our homes because a skilled locksmith can unlock our front door at any time, and a locked safe in the home is not really private because a skilled safe cracker can open it easily. The judge is saying that because something MIGHT happen, we should assume it WILL happen, and thus give up our right to expectations of privacy.

      --

    5. Re:The message is clear: by bluefoxlucid · · Score: 4, Insightful

      The broken-window-blind analogy works if your computer is openly broadcasting data or accepting access: if you're running a P2P application or an HTTP server sharing all your files to the world, that's your fault. Computer services are passively providing service, same as if you put a sign out front that said "FREE WEED!"--or didn't, but the cops heard people go to your house for that sort of thing, and walked up and knocked on the door and said the rumored password, and got weed.

      All adversarial accesses (trojan downloader, remote exploit, password cracking) are akin to bypassing your windows or door locks. A trojan downloader is an undeclared search, like sneaking a cop into your house by posing as a horny bar girl and following you home. These aren't the same thing as finding an open port or active service.

      The judge's analysis is ridiculous.

  2. What Constitution? by Archangel+Michael · · Score: 4, Insightful

    Full Scale Assault on personal liberties.

    "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." - Franklin

    --
    Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    1. Re:What Constitution? by reboot246 · · Score: 5, Insightful

      Not hyperbole.

      It's just one more step in the wrong direction. The country will not fall overnight. It's going to be a long, drawn-out process, but the closer we get to the end, the faster events will happen. We already have a central government that is way too strong and is drunk on its power. Soon it will be impossible to stop the move to totalitarianism. We may already have passed the point of no return.

      I'm 63 years old. I remember what the country was just a few decades ago, and I've studied enough history to understand where we're headed. It's not going to be pretty and I guarantee that nobody will like it.

      Vote in November. It won't make any difference which way you vote.

    2. Re:What Constitution? by bill_mcgonigle · · Score: 4, Insightful

      To any sane person, if they need a warrant to come through your door to seize the data, they need a warrant to seize the data over the wire.

      But, whenever civil liberties and State power come into conflict, the House wins. Those "protections" are only there to keep you feeling like you're not at risk from the government, but don't push them.

      And please present your Internet License, Subject # 134-33-2219.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  3. We need a penalty for retarded judges by erapert · · Score: 4, Interesting

    Bringing frivilous lawsuits will get you slapped down hard.

    What we need is something to be applied to judges who make blatantly subversive rulings like this. They're literally ruining our government and our country.
    Anyone else want to see these judges spend twenty years in federal prison?

    1. Re:We need a penalty for retarded judges by Njorthbiatr · · Score: 4, Insightful

      We ransack all of their personal computers.

      We don't need a warrant.

    2. Re:We need a penalty for retarded judges by Firethorn · · Score: 5, Insightful

      It should be pretty simple: Would it be illegal for an ordinary citizen to do something? If the answer is yes, you need a warrant.

      So, if an investigation involves going to somebody's webpage, that doesn't require a warrant. If the investigation involves compromising a computer - brute force password crack, sneaking in and installing a keylogger, utilizing a zero day exploit - you need a warrant.

      --
      I don't read AC A human right
    3. Re:We need a penalty for retarded judges by Fire_Wraith · · Score: 4, Insightful

      Impeachment, probably.

      The real problem, I think, is that a lot of older judges just don't understand technology. Now, that doesn't mean it was the case here, certainly (I have no idea who the judge was), but judges like the one in the Oracle vs Google trial, who took the time to learn to code in Java just to understand what was going on, are few and far between. There's probably a lot more older ones who are about as computer savvy as your parents or grandparents, who think computers are for Facebook and cat pictures. They don't understand that when the Founding Fathers were talking about the privacy of one's personal letters and effects, those EXACT things are today stored on your computer and your phone. Almost nobody has a locked drawer full of paper documents anymore, it's all electronic, and on your computer (well, hopefully you store it locally, rather than in the cloud). It absolutely should be protected.

  4. I'd say my computer is an extended part of my brai by NotInHere · · Score: 4, Insightful

    and therefore, it needs super extra protection. Its forbidden to open someone's skull to look for info as well, as should be the analogon for computers.

  5. I'm seeing the bigger picture now by Sax+Russell+5449D29A · · Score: 5, Informative

    The invasion of privacy and constant violations of basic and human rights in the US, and around the rest of the Western world for that matter, are starting to have a lot in common with what George Orwell wrote in Animal Farm. The irony is of course that what he described in his book was Stalin-era Soviet Union.

    --
    -SR
  6. Does Windows 10 still seem safe to you? by ilsaloving · · Score: 5, Interesting

    Another slashdotter argued that I was being paranoia over the idea that Windows 10 grants Microsoft carte blanche access your computer without needing your permission or knowledge.

    Well well well, look at that other shoe that just dropped! Now all the gov't needs to do is give the word and Microsoft can/will hoover everything and anything they want off your machine. This brings dragnet spying to a whole new level.

    1. Re:Does Windows 10 still seem safe to you? by Anonymous Coward · · Score: 5, Funny

      Microsoft is an American company. They aren't going to "hoover" anything. Maybe they'll "vacuum it up", and they'll definitely "suck", but they will never "hoover". Because verbing proper nouns is still a line we don't cross in the USA. For now.

  7. It's called a Telescreen by flatulus · · Score: 4, Insightful

    Stop calling it a PC. George Orwell should get credit for naming this surveillance tool.

  8. No, that's not what the court ruled. by dgatwood · · Score: 5, Insightful

    This was an open-and-shut search with a warrant, arising out of the FBI running a kiddie porn site after taking control of it. The warrant authorized the deployment of malware disguised to look like kiddie porn that, when opened, would cause the target's machine to identify its IP address, operating system, etc. This was then followed by a search warrant for the residence, during which the computers were confiscated and their contents searched. That search was covered under the residential search warrant, so no additional warrant was needed to search the contents of the machine that was confiscated.

    The defendant has no prayer unless he can show reasonable cause for the jury to believe that someone else was using or controlling the computer in question at the time, or unless he can convince the judge to throw out the warrant based on the investigative technique itself being illegal in some way (fruit of the poisonous tree).

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

    1. Re:No, that's not what the court ruled. by Stormy+Dragon · · Score: 4, Informative

      Yes it is what the court ruled. If you read the ruling, it says what you say, but then after that has an additional section arguing that even if that doesn't hold up, it doesn't matter anyways because by a second line of reasoning, they didn't actually need the warrant to begin with.

  9. That's Not What The Decision Says by hondo77 · · Score: 4, Informative

    The part of the decision regarding a warrant not being necessary relates to the defendent's IP address, not searching his computer. The Court found that "one has no reasonable expectation of privacy in an IP address when using the Internet," therefore a warrant was not needed to obtain the defendent's IP address. The deploying of software on the defendent's computer was done with a warrant.

    --
    I live ze unknown. I love ze unknown. I am ze unknown.
    1. Re:That's Not What The Decision Says by freeze128 · · Score: 4, Informative

      That's why when I'm browsing the web, I only use IPX.

    2. Re:That's Not What The Decision Says by jratcliffe · · Score: 4, Informative

      Read the next section of the opinion, starting toward the bottom of page 47. After writing that there's no expectation of privacy for an IP address (which is a pretty reasonable point), the judge goes on to write that there's no reasonable expectation of privacy for the contents of an Internet-connected computer, because that computer "can - and eventually will - be hacked."

  10. EFF really fibbed on this one. There was a warrant by Timmy+D+Programmer · · Score: 4, Informative

    There was a warrant, the fight was whether or not the warrant was legit,and the ruling was 'Yes'. From the PDF on EFFs site: The Court held hearings to address these Motions on May 19, 2016, May 26, 2016, and June 14, 2016. The Court FINDS, for the reasons stated herein, that probable cause supported the warrant's issuance, that the warrant was sufficiently specific, that the triggering event occurred, that Defendant is not entitled to a Franks hearing, and that the magistrate judge did not exceed her jurisdiction or authority in issuing the warrant

    --


    (If at first you don't succeed, do it different next time!)
  11. Re:Fourth Amendment by dgatwood · · Score: 4, Informative

    They had a warrant to search the house, based on probable cause, and they confiscated the computer. The perp knowingly downloaded something that he thought was child porn and opened it (which turned out to be malware that reported his location). And even the distribution of that malware was authorized by a warrant.

    At no point was this a warantless search of a computer. At no point was due process violated. This is solid constitutional law. The summary is just a ridiculously alarmist, factually inaccurate analysis of the case in question.

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  12. Re:I'd say my computer is an extended part of my b by wisnoskij · · Score: 4, Interesting

    You can be sure that when they invent the scanner that can read your memories/thoughts, it will be legal to use.

    --
    Troll is not a replacement for I disagree.
  13. You missed a couple of sections by raymorris · · Score: 5, Informative

    You seem to have missed a couple of sections in the opinion.

    A key sentence is on page 3:

    "Furthermore, the Court FINDS suppression unwarranted because the Government did not need a warrant in this case. Thus, any potential defects in the issuance of the warrant or in the warrant itself could not result in constitutional violations".

    There's the court's ruling that the government does "not need a warrant" to hack your computer.

    Then on page 47 see the section headed "Defendant Has No Reasonable Expectation of Privacy in His Computer", which STARTS with a bit about IP address, but then goes on to cover other information retrieved from the computer. The reasoning (excuse) given is that because your computer could be hacked, you have no reasonable expectation that it won't be. Per well-established precedent, no "reasonable expectation of privacy" means no fourth amendment protection.

    On the other hand, the court ALSO pointed out that the hack did not occur until the defendant tried to download child porn. They didn't hack the machine as soon as it connected to the front page of the CP site; rather it was a trojan in the child porn download. The court says that when you download child porn from foreign countries, you should expect that you might get malware and your information might be exposed.

  14. Ahem... by bmo · · Score: 4, Insightful

    The court argues that since "computer hacking is more prevalent than it was even nine years ago" the defendant has no expectation of privacy to the contents of his own machine.

    This is like arguing the content of a person's wallet is not private because of the existence of pick-pockets.

    This is insanity.

    --
    BMO

  15. Re:No conspiracy--this would hurt companies. by Kjella · · Score: 5, Informative

    Microsoft has no obligation to follow the Fourth Amendment, which protects individuals against intrusion by the state. An exception arises if Microsoft is acting as an agent for the state. Some other laws may occasionally protect your privacy against companies; the Fourth Amendment does not.

    I don't think you understand how the third party doctrine works. Basically if you've shared information with a third party, you've shared it with the world as far as the law is concerned. Like in this case, your ISP knows your IP so you have no expectation of privacy so if the cops post some exploit code to reveal it to them that's all right. So if you've given Microsoft access to all your data, you've given the law warrantless access to all your data. Microsoft doesn't have to participate in it.

    --
    Live today, because you never know what tomorrow brings
  16. Re:EFF really fibbed on this one. There was a warr by Xtifr · · Score: 4, Informative

    Sounds like dicta. Not as big a deal as it could be then, since dicta are not binding.

    From the link I gave: "[dicta] therefore are individual views of the author of the opinion and not binding in subsequent cases as legal precedent."

  17. Re: appeal by LionMage · · Score: 4, Informative

    I wouldn't be so quick to assign sociopolitical labels to which group favors eroding privacy rights. There are plenty of so-called conservatives (judges, legislators, etc.) who would happily erode 4th amendment and other rights. I am reminded of Ronald Reagan arguing in favor of the admissibility of illegally-obtained evidence, and more recently of provisions in the PATRIOT Act that are objectionable to civil libertarians like ACLU members.

    It's worth noting that civil liberty groups like the ACLU are largely socially progressive. And they are generally the ones who say, "Get a goddamned warrant." They're also the ones who hold that the same rules are supposed to apply to everyone, regardless of socioeconomic status.