9 ms·

Warrants don't work, that's the problem. There have been many instances now where a judge issued a legal warrant that was impossible to enforce, because of encr

by txru 7y ago

Warrants don't work, that's the problem. There have been many instances now where a judge issued a legal warrant that was impossible to enforce, because of encryption. Should that be the case? It's not a simple question.

camelNotation 7y ago
That isn't the failure of warrants, our rights, or any other aspect of the legal process. That's a failure of law enforcement. They can't break encryption, sure, but they also can't read the private thoughts of individuals - yet somehow they've figured out ways to get the information they need most of the time. A great solution in many of these cases would be to work alongside companies like Apple to implement more products like Face ID. With Face ID, they can take a few pictures of a person, 3D model their face, open the phone. It's an easy thing with the right resources. It's a technological equivalent of interrogation. The same can be done in other contexts, they just need better hackers, better investigators, and more resources on their side.
- txru 7y ago
  What you posit with interrogated Face ID is a method of hacking encryption. You've provided a backdoor, that is the person's face. Previously the suspect's phone was encrypted, now the encryption is broken against the suspect's intent. A warrant was used to break the encryption. Do you see what I'm getting at? You came up with warrant-breakable encryption, but didn't call it that. This is why it's not an easy question-- the solutions are nuanced, and some are a lot uglier than others.
  - soulofmischief 7y ago
    Furthermore, there was a falsehood of security to begin with. You shouldn't legally be able to say the data is safe when it isn't safe to anyone with a couple photographs.
  - sailfast 7y ago
    Maybe? There's a huge distinction between warrant-breakable encryption as a default (because it's easier) and enforcing that nobody can encrypt data unless it's encrypted using biometric data (or other information that is available outside the head of a user)
- saagarjha 7y ago
  > With Face ID, they can take a few pictures of a person, 3D model their face, open the phone. Note that Face ID is intended to be resistant to this kind of attack.
  - camelNotation 7y ago
    Sure, but the only way to build resistance to it is to expect more detail in the scan and they can't do that without making the system less convenient for people who grow a beard, wear sunglasses, etc. It can't go pore by pore on the person's face anyway, the infrared scanning process where it projects dots onto the face just isn't that advanced. It might be resistant, but it's hardly a challenge to someone with government levels of resources.
    - saagarjha 7y ago
      Again, as far as I am aware, Face ID is intended to be secure against concerted effort to break it. I have not heard of anyone coming up with a serious attack against it, though I'm curious to hear if you have.
ChristianBundy 7y ago
Of course it should be the case. There are plenty of ways to make information hard to recover, and if we're going to ban encryption I think we should take a hard look at fire as well.
- txru 7y ago
  Fire is irreversible. Once the original good is destroyed, it can't be read or written to by the burner or anyone else. After evidence is destroyed, it only exists in (human) memory. Encryption is reversible. The information encrypted can be retrieved, changed, shared, etc. It proves itself potentially continually useful to the person who would hide evidence.
  - saagarjha 7y ago
    Encryption is irreversible if I throw away the key, just as burning paper is irreversible once I light it on fire.
    - txru 7y ago
      Ok, so a suspect tells the judge under oath that they encrypted the evidence, and the key is gone, as if it had been burned. Just as in burning with a fire, that suspect can be charged with willful destruction of evidence or obstruction of justice, contingent on mens rea. The judge may be unlikely to believe that the data is irretrievably encrypted, just as they may be unlikely to believe all records were burned.
danShumway 7y ago
I think it is a simple question. There have also been cases where a judge issued a legal warrant that was impossible to enforce because the information was physically destroyed. Should it be illegal to burn a piece of paper? The FBI and our police forces have been complaining about the 'going dark' problem for years. But in reality, it is far easier today to spy on or collect data than it has ever been before. If the argument was that our data collection was substantially lessening, maybe we could have a discussion about that. But data collection is substantially expanding, and the FBI is essentially saying, "yeah, but it's not expanding fast enough." The FBI is phrasing this as a complicated question because they're saying it's a choice between the status quo and "the FBI can't listen in on anything." But in practice, if you look at the direction surveillance capabilities are heading, the real choice is between the status quo and "the FBI can listen in on everything." And that's a really easy question to answer. Of course we shouldn't give up all of our freedoms just so the police can always access everything they want, all the time. Of course people should be able to exercise personal freedom even if it occasionally means a police investigation is hampered. The FBI wants to phrase this as a choice between encryption and anarchy, but given the direction government surveillance is headed, encryption is the middle ground position. What the FBI wants is the ability to access anything they can get a warrant for, no matter what, for any reason. And I guarantee once they got that, the next "complicated question" would be whether or not warrants were hindering their investigations too much.
- txru 7y ago
  I addressed the fire metaphor below. Destruction is irreversible, encryption is reversible, in short. But to answer your question, yes, it can be illegal to destroy evidence. I agree with you, this is a problem. What I advocate for to anyone who'll listen is to encourage more use of warrants, and sharply curtail the use of subpoenas. Subpoenas allow for bulk collection, and much much much more violation of the 4th Amendment happens under bulk subpoenas than it does under warrants.
  - danShumway 7y ago
    Ignoring that encryption is also irreversible if you throw away or forget your key, is the distinction between fire and encryption that, "we could get at the encrypted data, so therefore it's different and we should be able to"? That doesn't make sense to me. If your argument is that every warrant should be executable, no matter what, then both fire and encryption block warrants. If anything, fire is worse, because at least encryption is reversible. If you burn something, we can never get it back -- that makes fire way more risky and dangerous to law enforcement investigations, so I would expect it to be much more highly regulated.
cgriswald 7y ago
Just because the ability to hide information has reached unprecedented levels does not suddenly make the principles hard to grasp. Warrants have never been a guarantee of getting evidence. They are only permission to look. Finding the answer to law enforcement being able to make these warrants useful while also maintaining rights is complex. Seeing a terrible solution as terrible is simple.
- txru 7y ago
  Ok, so warrants fail. There are cases where people are held in contempt of court, essentially for life. Is that a good resolution to warrants being broadly, commonly enforceable? Those people aren't convicted of the crime they were accused for, in some cases they may have even forgotten the encryption key.
  - sailfast 7y ago
    It's strange to me that this isn't somehow covered under the 5th amendment. How can you be compelled to provide something (say, an encryption key) that might incriminate you?
  - hedora 7y ago
    Indefinite contempt charges are why forcing someone to hand over a password, encryption key, submit to biometrics, etc. needs to be banned. The current state of affairs is a clear violation of one of the US’s founding principles: “innocent until proven guilty” (and also the 5th amendment).
    - txru 7y ago
      Remember, the Bill of Rights were tagged on after the Constitution. The Constitution establishes what powers the Government could and couldn't have, purely in its relationship with the constituent states. The Bill of Rights filter out what it doesn't. And in its vagueness, the Constitution claimed quite a lot. The ability, power, and right to investigate crimes is certainly reserved to both the states and the Fed. Government in the Constitution.
soulofmischief 7y ago
Yes, it should be the case. No one should be forced to testify. That's violating free speech. Giving up information that only exists in your head (location of keys, or a passphrase) is testifying. And the entire concept is backed by State violence. People are only compelled to testify under threat of violence in some form. This form used to be open torture, but we've found ways of outsourcing the torture to other criminals in order to wash the State's hands clean of blood. Sometimes we need to catch a bomber. If you ask me, that problem is only getting worse and "sometimes" may turn into "often". However, we can't risk a journalist or political activist being caught in the jaws of the system while attempting to expose the State's secret crimes. And less severely, the State doesn't have the right to know what your shopping list was last week. The entire crux of this argument revolves around the fact that at one time it was easier to do this stuff thanks to wiretapping laws and banned encryption, but now it's harder. However, the wild west of the 70-90's isn't the base line for sensible policies when it comes to digital intrusion of your life by the State without reasonable cause.
- txru 7y ago
  I agree, forcing people to testify to provide their keys is probably where our system will get stuck on this for good. That's a bad line to cross, and I don't think we'll cross it if we remain a lawful country. I say this below, though, when people refuse to serve access to a lawful warrant, there are now multiple cases where people will be held in contempt of court essentially indefinitely, likely for life. The court is certain that the information necessary to convict them exists, but is being vexatiously withdrawn by the suspect. I don't really think that's a good end. I think holding people in contempt that long is a system failure. What do we do about that? Just release people when they hide evidence that they can still have full access to once they're released? I think it's been easier to do this stuff since the founding of the government, but our government does have certain powers, lawfully enacted by the wills of all of the states for the betterment of society. If some of those powers can't reasonably be enforced, and other, less lawful, more coercive powers arise in their absence, I think everyone loses.
  - sailfast 7y ago
AJ007 7y ago
The question isn’t if warrants should work but whether or not anyone is able to have secure communication. This runs directly counter to all of the privacy law stuff being enacted and discussed. It means government officials and agencies get less or insecure communication too. It means clandestine intelligence agencies don’t get to mask their communication in a sea of other encrypted communications. People are acting as if unbreakable encryption and secure computing is a given. It isn’t. It is extraordinarily difficult and in nearly all use cases not foolproof. The warrant excuse is fairly ludicrous anyways. We now have vast information pools of where people have been and what they were doing. We have DNA evidence. Law enforcement has never been easier in the history of human civilization.
bobwaycott 7y ago
A warrant is nothing more than an authorization to conduct a search and/or arrest. It is not a guarantee of finding what you’re looking for. Warrants work fine.

by txru 7y ago

camelNotation 7y ago

That isn't the failure of warrants, our rights, or any other aspect of the legal process. That's a failure of law enforcement. They can't break encryption, sure, but they also can't read the private thoughts of individuals - yet somehow they've figured out ways to get the information they need most of the time. A great solution in many of these cases would be to work alongside companies like Apple to implement more products like Face ID. With Face ID, they can take a few pictures of a person, 3D model their face, open the phone. It's an easy thing with the right resources. It's a technological equivalent of interrogation. The same can be done in other contexts, they just need better hackers, better investigators, and more resources on their side.

txru 7y ago
What you posit with interrogated Face ID is a method of hacking encryption. You've provided a backdoor, that is the person's face. Previously the suspect's phone was encrypted, now the encryption is broken against the suspect's intent. A warrant was used to break the encryption. Do you see what I'm getting at? You came up with warrant-breakable encryption, but didn't call it that. This is why it's not an easy question-- the solutions are nuanced, and some are a lot uglier than others.
- soulofmischief 7y ago
  Furthermore, there was a falsehood of security to begin with. You shouldn't legally be able to say the data is safe when it isn't safe to anyone with a couple photographs.
- sailfast 7y ago
  Maybe? There's a huge distinction between warrant-breakable encryption as a default (because it's easier) and enforcing that nobody can encrypt data unless it's encrypted using biometric data (or other information that is available outside the head of a user)
saagarjha 7y ago
> With Face ID, they can take a few pictures of a person, 3D model their face, open the phone. Note that Face ID is intended to be resistant to this kind of attack.
- camelNotation 7y ago
  Sure, but the only way to build resistance to it is to expect more detail in the scan and they can't do that without making the system less convenient for people who grow a beard, wear sunglasses, etc. It can't go pore by pore on the person's face anyway, the infrared scanning process where it projects dots onto the face just isn't that advanced. It might be resistant, but it's hardly a challenge to someone with government levels of resources.
  - saagarjha 7y ago
    Again, as far as I am aware, Face ID is intended to be secure against concerted effort to break it. I have not heard of anyone coming up with a serious attack against it, though I'm curious to hear if you have.

ChristianBundy 7y ago

Of course it should be the case. There are plenty of ways to make information hard to recover, and if we're going to ban encryption I think we should take a hard look at fire as well.

txru 7y ago
Fire is irreversible. Once the original good is destroyed, it can't be read or written to by the burner or anyone else. After evidence is destroyed, it only exists in (human) memory. Encryption is reversible. The information encrypted can be retrieved, changed, shared, etc. It proves itself potentially continually useful to the person who would hide evidence.
- saagarjha 7y ago
  Encryption is irreversible if I throw away the key, just as burning paper is irreversible once I light it on fire.
  - txru 7y ago
    Ok, so a suspect tells the judge under oath that they encrypted the evidence, and the key is gone, as if it had been burned. Just as in burning with a fire, that suspect can be charged with willful destruction of evidence or obstruction of justice, contingent on mens rea. The judge may be unlikely to believe that the data is irretrievably encrypted, just as they may be unlikely to believe all records were burned.

danShumway 7y ago

I think it is a simple question. There have also been cases where a judge issued a legal warrant that was impossible to enforce because the information was physically destroyed. Should it be illegal to burn a piece of paper? The FBI and our police forces have been complaining about the 'going dark' problem for years. But in reality, it is far easier today to spy on or collect data than it has ever been before. If the argument was that our data collection was substantially lessening, maybe we could have a discussion about that. But data collection is substantially expanding, and the FBI is essentially saying, "yeah, but it's not expanding fast enough." The FBI is phrasing this as a complicated question because they're saying it's a choice between the status quo and "the FBI can't listen in on anything." But in practice, if you look at the direction surveillance capabilities are heading, the real choice is between the status quo and "the FBI can listen in on everything." And that's a really easy question to answer. Of course we shouldn't give up all of our freedoms just so the police can always access everything they want, all the time. Of course people should be able to exercise personal freedom even if it occasionally means a police investigation is hampered. The FBI wants to phrase this as a choice between encryption and anarchy, but given the direction government surveillance is headed, encryption is the middle ground position. What the FBI wants is the ability to access anything they can get a warrant for, no matter what, for any reason. And I guarantee once they got that, the next "complicated question" would be whether or not warrants were hindering their investigations too much.

txru 7y ago
I addressed the fire metaphor below. Destruction is irreversible, encryption is reversible, in short. But to answer your question, yes, it can be illegal to destroy evidence. I agree with you, this is a problem. What I advocate for to anyone who'll listen is to encourage more use of warrants, and sharply curtail the use of subpoenas. Subpoenas allow for bulk collection, and much much much more violation of the 4th Amendment happens under bulk subpoenas than it does under warrants.
- danShumway 7y ago
  Ignoring that encryption is also irreversible if you throw away or forget your key, is the distinction between fire and encryption that, "we could get at the encrypted data, so therefore it's different and we should be able to"? That doesn't make sense to me. If your argument is that every warrant should be executable, no matter what, then both fire and encryption block warrants. If anything, fire is worse, because at least encryption is reversible. If you burn something, we can never get it back -- that makes fire way more risky and dangerous to law enforcement investigations, so I would expect it to be much more highly regulated.

cgriswald 7y ago

Just because the ability to hide information has reached unprecedented levels does not suddenly make the principles hard to grasp. Warrants have never been a guarantee of getting evidence. They are only permission to look. Finding the answer to law enforcement being able to make these warrants useful while also maintaining rights is complex. Seeing a terrible solution as terrible is simple.

txru 7y ago
Ok, so warrants fail. There are cases where people are held in contempt of court, essentially for life. Is that a good resolution to warrants being broadly, commonly enforceable? Those people aren't convicted of the crime they were accused for, in some cases they may have even forgotten the encryption key.
- sailfast 7y ago
  It's strange to me that this isn't somehow covered under the 5th amendment. How can you be compelled to provide something (say, an encryption key) that might incriminate you?
- hedora 7y ago
  Indefinite contempt charges are why forcing someone to hand over a password, encryption key, submit to biometrics, etc. needs to be banned. The current state of affairs is a clear violation of one of the US’s founding principles: “innocent until proven guilty” (and also the 5th amendment).
  - txru 7y ago
    Remember, the Bill of Rights were tagged on after the Constitution. The Constitution establishes what powers the Government could and couldn't have, purely in its relationship with the constituent states. The Bill of Rights filter out what it doesn't. And in its vagueness, the Constitution claimed quite a lot. The ability, power, and right to investigate crimes is certainly reserved to both the states and the Fed. Government in the Constitution.

soulofmischief 7y ago

Yes, it should be the case. No one should be forced to testify. That's violating free speech. Giving up information that only exists in your head (location of keys, or a passphrase) is testifying. And the entire concept is backed by State violence. People are only compelled to testify under threat of violence in some form. This form used to be open torture, but we've found ways of outsourcing the torture to other criminals in order to wash the State's hands clean of blood. Sometimes we need to catch a bomber. If you ask me, that problem is only getting worse and "sometimes" may turn into "often". However, we can't risk a journalist or political activist being caught in the jaws of the system while attempting to expose the State's secret crimes. And less severely, the State doesn't have the right to know what your shopping list was last week. The entire crux of this argument revolves around the fact that at one time it was easier to do this stuff thanks to wiretapping laws and banned encryption, but now it's harder. However, the wild west of the 70-90's isn't the base line for sensible policies when it comes to digital intrusion of your life by the State without reasonable cause.

txru 7y ago
I agree, forcing people to testify to provide their keys is probably where our system will get stuck on this for good. That's a bad line to cross, and I don't think we'll cross it if we remain a lawful country. I say this below, though, when people refuse to serve access to a lawful warrant, there are now multiple cases where people will be held in contempt of court essentially indefinitely, likely for life. The court is certain that the information necessary to convict them exists, but is being vexatiously withdrawn by the suspect. I don't really think that's a good end. I think holding people in contempt that long is a system failure. What do we do about that? Just release people when they hide evidence that they can still have full access to once they're released? I think it's been easier to do this stuff since the founding of the government, but our government does have certain powers, lawfully enacted by the wills of all of the states for the betterment of society. If some of those powers can't reasonably be enforced, and other, less lawful, more coercive powers arise in their absence, I think everyone loses.
- sailfast 7y ago

AJ007 7y ago

The question isn’t if warrants should work but whether or not anyone is able to have secure communication. This runs directly counter to all of the privacy law stuff being enacted and discussed. It means government officials and agencies get less or insecure communication too. It means clandestine intelligence agencies don’t get to mask their communication in a sea of other encrypted communications. People are acting as if unbreakable encryption and secure computing is a given. It isn’t. It is extraordinarily difficult and in nearly all use cases not foolproof. The warrant excuse is fairly ludicrous anyways. We now have vast information pools of where people have been and what they were doing. We have DNA evidence. Law enforcement has never been easier in the history of human civilization.

bobwaycott 7y ago

A warrant is nothing more than an authorization to conduct a search and/or arrest. It is not a guarantee of finding what you’re looking for. Warrants work fine.