Slashdot Mirror
FBI Agent Posing As Journalist To Deliver Malware To Suspect Was Fine, Says DOJ (vice.com)
An anonymous reader quotes a report from Motherboard: In 2007, an FBI agent impersonated an Associated Press journalist in order to deliver malware to a criminal suspect and find out his location. According to a newly published report from the Department of Justice, the operation was in line with the FBI's undercover policies at the time. Journalistic organizations had expressed concern that the tactic could undermine reporters' and media institutions' credibility. The case concerned a Seattle teenager suspected of sending bomb threats against a local school. FBI Special Agent Mason Grant got in touch with the teen over email, pretending to be an AP journalist. After some back and forth, Grant sent the suspect a fake article which, when clicked, grabbed his real IP address. Armed with this information, the FBI identified and arrested the suspect. The Associated Press, the Reporters Committee for Freedom of the Press, and other journalistic organizations condemned the move. They pointed out that an FBI agent posing as a reporter could create distrust between legitimate journalists and sources, and also raised issues with the way the malware was distributed through a fake news story. The new Department of Justice report noted that, today, this activity would require greater authorization, under an interim policy on impersonating members of the media that was adopted by the FBI this June. Now, for the agency to pretend to be a journalist as part of an undercover operation, an application must be made by the head of an FBI field office to the agency's main headquarters, reviewed by the Undercover Review Committee, and then approved by the deputy director, after discussion with the deputy attorney general.
They pointed out that an FBI agent posing as a reporter could create distrust between legitimate journalists and sources...
This is a feature.
Why do I think that if he journalist impersonated an FBI agent, the DOJ's opinion would be very different?
That's not malware. That's basically any webserver ever made. There's even URL shorteners that can redirect somewhere while grabbing the IP address of someone who passes through. It's sneaky but not even remotely illegal for anyone.
Don't do that.
For the same reason why when the cops asked if they could 'borrow' our ambulance to serve a high-risk search warrant because they wanted to catch the suspect unaware...the suspects will start shooting real ambulances.
There's no place like