Slashdot Mirror
FBI Repeatedly Overstated Encryption Threat Figures To Congress, Public (techcrunch.com)
mi shares a report from The Washington Post (Warning: source may be paywalled; alternative source): The FBI has repeatedly provided grossly inflated statistics to Congress and the public about the extent of problems posed by encrypted cellphones, claiming investigators were locked out of nearly 7,800 devices connected to crimes last year when the correct number was much smaller, probably between 1,000 and 2,000.
Over a period of seven months, FBI Director Christopher A. Wray cited the inflated figure as the most compelling evidence for the need to address what the FBI calls "Going Dark" -- the spread of encrypted software that can block investigators' access to digital data even with a court order. "The FBI's initial assessment is that programming errors resulted in significant over-counting of mobile devices reported,'' the FBI said in a statement Tuesday. The bureau said the problem stemmed from the use of three distinct databases that led to repeated counting of phones. Tests of the methodology conducted in April 2016 failed to detect the flaw, according to people familiar with the work.
Over a period of seven months, FBI Director Christopher A. Wray cited the inflated figure as the most compelling evidence for the need to address what the FBI calls "Going Dark" -- the spread of encrypted software that can block investigators' access to digital data even with a court order. "The FBI's initial assessment is that programming errors resulted in significant over-counting of mobile devices reported,'' the FBI said in a statement Tuesday. The bureau said the problem stemmed from the use of three distinct databases that led to repeated counting of phones. Tests of the methodology conducted in April 2016 failed to detect the flaw, according to people familiar with the work.
Sherlock reportedly overstated the threat of No Shit to Congress, Public. Also, Cop Math doesn't have a Wikipedia page. I'm genuinely surprised.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
I am hardly shocked. Law enforcement suffers from continuous mission creep. They always have and always will.
How did law enforcement solve crimes before smartphones were a thing?
#DeleteChrome
The FBI doesn't do a very good job. They have a long history of corruption, of lies, and being untrustworthy. They don't catch criminals very often. The only good they do is provide support for local law enforcement, for example the national finger-print data base.
I therefore suggest the FBI be dissolved, or modified to the "National Police Support Unit." They can provide services to local police forces, but they don't need to be out harassing people on their own.
"First they came for the slanderers and i said nothing."
Even if their numbers were true, it wouldn't change the fact that government mandated backdoors to encryption is a remarkably stupid and short sighted concept.
Hell, all investigations could grind to a halt tomorrow because of encryption, and it wouldn't change that equation. The quantity is irrelevant.
Mod me down with all of your hatred and your journey towards the dark side will be complete!
The Infamous Cop Math:
A number of years ago I had a heroin case in Hayward. They had a warrant where the snitch, known, in polite terms, as a “confidential informant” with the obligatory history of reliability in past snitchings and who was a good citizen and such said there were two packages of heroin in a cereal box in my client’s kitchen. One weighed one pound and the other a half pound. Cops came in with a warrant and sure enough easily found the heroin and that’s what the packages weighed.
Me: So officer did you wait until you got to the station to do the weighing or did you use the scale that was there and which is now in evidence.
Cop: I used the scale there
Me: but that’s an Ohaus scale isn’t it
Cop: yes
Me: and it is graded in grams isn’t it
Cop: yes
Me: so you did the math in your head right
Cop: yes
Me: so how many grams are in a half pound
Cop: [absolute silence]
me: let me help you out here. Let’s say there are about 28 grams in an ounce. So how many grams in a half pound
Cop: [silence continues]
Me: ok. Let’s make it easier. Let’s say there are 16 ounces in a pound. So how many grams in a half pound [more silence – but now the jury is laughing]
Me: ok let me help you out a little more here. If a pound has 16 ounces how many ounces are in a half pound [more silence – juror yells out “8”. Jury laughs].
Me: look if there are 28 grams in an ounce and juror number 3 helped you out by telling you there were 8 ounces in a half pound, how many grams were in what you tell us was a half pound. Now I walk up to the bench and snatch a yellow pad and pencil. “May I, your honor.” Here officer. Here is a pad and pencil. Now write down 28. Remember that’s one gram. Now you learned from juror number 3 that there are 8 oz in a half pound so you simply take 28 and multiply by 8. OK, what’s the number. [very long painful silence]. DA, who is now a judge and was an especially vicious DA, asks for a recess. He comes over to me but trips over his big box of files [now jury is in hysterics].
By the way, my guy is on trial with his much younger cousin. Cousin is about to go to trial on a dead bang 4+ pound cocaine case. The DA says if they both take a year in county jail he’ll dump the cocaine case.
An inability to access the phone means nothing if prosecution was successful for other reasons. A more useful statistic would be how many phones do they have that couldn't be opened that were evidence in crimes that have not been successfully prosecuted. But, that is probably far, far beyond their math skills.
"We screwed up our program that simply counts the number of devices, but you can trust us to make super secure software to access the back doors, it would never have a problem that allowed improper access!"
After the NSA exploit leaks I don't know how these Constitution-stomping tools don't get laughed out of the room when trying to claim their back door would be good-guys-only.
"The 21st century version would be a rule forbidding government regulation of encryption. A government that has no way of knowing what who is saying to whom lacks the most powerful weapons for winning an information war. " http://bit.ly/2IRKIZZ
"Tempers are wearing thin. Let's just hope some robot doesn't kill everybody." --Bender
Even one is too much. Do what it takes to keep us safe!
They consider that their job.
I believe it is possible with current technology to "read a mind" - perhaps not reliably, but enough of the time to make it useful. This would involve something like placing an individual in an fMRI machine, projecting images of people, things, symbols, etc. and observing the mind's reaction to them. I bet you could involuntarily extract a password this way - one symbol at a time. The opening of whatever vault the password protects would be your proof of its correctness so you wouldn't need to worry about misinterpretation.
However, I think it should be obvious that this would represent a violation of a person's 5th amendment rights.
A future scenario we need to start preparing for though is accessing an implanted memory device other than the individual's "brain". We are already interfacing chips to brains. I'd be surprised if some of those devices don't have memories, though perhaps they are all still external to the person with the interface chip. Regardless of whether they are internal or external, I believe those memories contained in a personal extension are also deserving of 5th amendment protection. You shouldn't be able to access my pacemaker to see if I had an elevated heart rate during the time of a crime without my explicit consent regardless of warrant.
If we don't take this route of protecting personal electronic memories by the 5th amendment, a day will come when the 5th amendment is worthless.
If we do protect them, we need to consider that, initially, implanted personal augmentations are going to be more available to the rich than the poor. Those that don't have the money will "continue" to augment their capabilities using external devices. They should not have lesser rights just because their augmentation is external.
I say "continue" because that is exactly what my smartphone is to me today. It is a personal augmentation. I have an atrocious memory. Instead of trying to keep my calendar, appointments, reminders, personal communications, etc. in my head, they are in my phone's store which in many cases is extended to the cloud.
Regardless of where those memories physically reside, they are my memories and nowhere near as "readable" as a piece of paper in a filing cabinet. In fact, the tech necessary to read and access the memories from the chips is much closer to that of the tech necessary to read my biological memory without my permission than the tech necessary to read a piece of paper.
In short, I believe the law has erred in comparing smartphone memories to filing cabinets to find precedent. They should have compared them to the memory in our brains and considered their contents to be under 5th amendment protection. They should not be legally accessible, much less admissible, without my permission - even if unencrypted - unless I say so, not some judge. We need to do some backtracking and fix it now or face a future where users of augmentation tech - eventually everyone - give up their 5th amendment rights.
The FBI is vexing 45 ever so badly. I'm sure that this story has nothing to do with our local Trumpster trolls trying to discredit the organization.
They are doing Trump's work for him by discrediting themselves. Every time another incident comes to light where the FBI comes across looking like a bunch of partisan political enforcers, lying assholes, or authoritarian storm troopers Trump gets a little closer to re-election. I'll bet that gets your panties all in a wad.
Problem is not the numbers, it's the narrative itself.
They are effectively saying that they can't do anything, like say regular investigation jobs, if they don't have encryption to backdoors, which would effectively ease up their work on one end while exponentially raising the potential for other types of crimes like identity theft, blackmail, exploitation, stealing of corporate secrets, hacking, and whatnot.
The numbers don't matter. The stupidity of breaking encryption for an entire country does.
How many criminals were unable to be caught/prosecuted/charged as a result of law enforcement not having access to an encrypted device? (I suspect the 1000-2000 figure quoted includes a bunch of investigations where they weren't able to get into the encrypted device but were able to find another way to secure an arrest or conviction)
Do I remotely believe the FBI narrative with respect to encryption? No.
Do I think that the current administration will seize on this reporting [despite the current President's absolute loathing for the Post and its owner] and use it as another weapon to undermine the credibility of the FBI in the eyes of the public? Yes, absolutely.
Whether we're willing to acknowledge it or not, we need the FBI. The FBI was, when it was introuduced, [IIUC] the only agency with the authority to pursue a crime [and criminals] across state borders. Unfortunately, what has happened since then has been the gradual "bloating" of all government agencies, with departments fighting each-other for larger budgets and more status. When the DHS was introduced, the Executive started a turf war that continues to this day - and in one sense this whole "unbreakable encryption" debacle is just a part of that - because the best thing that the FBI can do to underscore it's value is to actually solve crimes, so within the FBI there will inevitably be a narrative which says, "anything which prevents us or delays us from solving crimes will make us look bad and must therefore be destroyed..."
So the thing which is pushing the FBI to wage their war on encryption likely has far less to do with "organised crime, paedophiles and terrorists" and everything to do with, "making us look like a better agency than the DHS thanks to our conviction rates."
I should caution us here, however, from thinking that, "Well, stuff them, this clearly isn't our problem..." It is. There are lots of reasons for this, but the most important one to me is that the concept of "demonstrating ability via some grade-school metrics", which has permeated every workplace, now drives people [including FBI Agents and Directors] to make questionable decisions. One of the most horrific examples of this was U.S. Attorney Carmen Ortiz, who insists to this day that her office acted "appropriately and reasonably" when bringing charges against Aaron Swartz. In that case, even though Aaron had a legal right to the documents he was obtaining, even though the owner of the documents looked at the facts and withdrew their complaint, Ortiz pressed ahead. The ruthless pressure that drove Ortiz to get a conviction cost Aaron his life. That is NOT ok.
Ortiz has continued to spin a narrative that Aaron was offered a plea deal (which he rejected because it would have prevented him for running for public office, which he most dearly wanted to do) whilst conveniently forgetting the mandacious way they went about building their case, the way that they destroyed not just Aaron but Quinn Norton too.
This is the problem.
We need the FBI.
But we need them to act with honesty, integrity and candor at all times. By failing to do this, they undermine not just their credibility, but the support of the public at the time when they most desperately need it, in the face of an Executive that is clearly determined to either destroy them, or bend them to his will...
The FBI lies about everything, but about Trump they're right?
The FBI has repeatedly provided grossly inflated statistics to Congress and the public about the extent of problems posed by encrypted cellphones...
But damn, when the FBI says Trump colluded with Russia based on evidence paid for by the DNC, we're supposed to believe them?
Its been known for millennia that power corrupts.
And concentrating power over the world in DC corrupts. Pretty much anywhere that has no competition and ultimate power is corrupt. And the biggest monopoly in the world are the governments.
Face it, they don't represent you, and don't represent "the people" when you have career people there fighting over how to spend your money. They are out for themselves and power (and the money that represents), and it is stunning that people are duped into believing that the authoritarians are really out to help them.
It's possible one phone could be in the DB multiple times for multiple crimes committed by one person.
Think of in the way the USA and GCHQ view encryption in the media.
The GCHQ wants to collect it all and without having to do much decryption in real time. So all trusted big brand encryption sold has to be junk and weak.
Make sure nobody ever finds out and thats decades of effortless collection on every network and device.
No reports to the police, not one story in the media, no politicians able to get told methods, no lawyers reading about methods.
Just the clandestine and security services who use information the GCHQ collects.
The USA needs good news and something to get more funding and to win political support for more budget growth.
That needs good crypto news,
That the US political leadership understands than no crypto is beyond the USA if a budget exists to buy more super computers.
That places a lot of news in the wild about junk crypto and how police have the keys to all consumer crypto.
Interesting people slowly stop trusting their live mic and gps collecting cell phones.
Interesting people slowly understand methods like voice prints.
The FBI understands the UK method and likes that hidden side to total collection and later direct action.
But a budget has to be protected and that needs good winning news to present.
Winning news often has pointers to methods and thats not good.
A big brand US cell phone network its all private and too difficult to uncrypto. Its just too difficult.
PRISM showed just how safe...
The approved and allowed news stories show the need for collect it all and that no crypto is beyond the newest and most advanced US super computers.
Please buy law enforcement more super computers so they can get extract more data out of the new cell phones.
Wont someone think of the contractors... Just one new super computer cyber task force can work on 10000 cell phones.
What state like to be HQ to a new cyber task force? Think of the votes and the well paying new jobs.
Domestic spying is now "Benign Information Gathering"
The unique voice print gets counted as one user every time they buy a new cell phone?
Domestic spying is now "Benign Information Gathering"
It's not going to happen because the incentives are wrong. DAs care about convictions, not justice, so they are happy for cops to lie as long as they don't get caught at it. They are going to see them as allies and not want to prosecute them unless there is going to be a lot of bad PR if they don't.
However letting people who are likely guilty, go free, makes DAs look bad and suppressing evidence will give them incentives to keep law enforcement in line.
Why does anybody believe the FBI ever? The FBI has been a crooked organization since the beginning. Does no one learn history anymore? Look up J. Edgar Hoover. First FBI director. He abused his power from the very beginning. There is no reason to believe the FBI has ever moved beyond the secret police force that Hoover created. Only the fact that subsequent FBI directors have been less competent criminals has prevented greater abuse. If things keep going the way they have all of the FBI's present day abuses may actually come out, a testament to their increasing incompetence.
If the cop collected the evidence by kicking down doors without a warrant, then the cop is a burglar and gets tried as such in a separate case. (And if he get convicted, he can't be a cop anymore either. Can't have burgling cops.)
You fucking idiot. So the cops conveniently have a patsy on hand that regularly burgles whomever the cops are unhappy with and phones in a tip. Maybe he even gets caught. If he's caught, maybe he even gets charged. If he's charged, maybe he even spends time in jail. The potential for abuse there is so laughably obvious that you have to be either monumentally naive or an authoritarian jack-booted thug chomping at the bit to "get the bad guy" no matter the cost.
I think we should give the guys that can't count back doors to encryption what ever could go wrong.