Police push legal boundaries to get into cellphones(nbcnews.com)
nbcnews.com
Police push legal boundaries to get into cellphones
https://www.nbcnews.com/news/us-news/give-your-password-or-go-jail-police-push-legal-boundaries-n1014266
94 comments
Legal yes, right no.
In many situations you cannot be forced to provide evidence that would be used against you or information which would lead to such evidence. I would go further and say that in all cases you shouldn't be required to provide such information.
It should be recognized as a basic right that you do not have to aid those who are trying to convict you of a crime. Our system of justice is adversarial for good reason and it is explicit in forcing those with the most power to limit the use of that power for the benefit of the accused. Without those checks and balances (and frequently even with them) abuse of that power, under the auspices of a greater good, would be common.
In many situations you cannot be forced to provide evidence that would be used against you or information which would lead to such evidence. I would go further and say that in all cases you shouldn't be required to provide such information.
It should be recognized as a basic right that you do not have to aid those who are trying to convict you of a crime. Our system of justice is adversarial for good reason and it is explicit in forcing those with the most power to limit the use of that power for the benefit of the accused. Without those checks and balances (and frequently even with them) abuse of that power, under the auspices of a greater good, would be common.
Legal not so solid...courts have previously held that private free speech is protected see encryption battles during the invention of RSA for the court cases...also noted in many of Lessig's books...if device has private info force them to get the warrant as than you have legal rights to have your case argued before a judge..cops are INVESTIGATORS and not trained to know the law..
>In many situations you cannot be forced to provide evidence that would be used against you or information which would lead to such evidence. I would go further and say that in all cases you shouldn't be required to provide such information.
If you have illegal materials in your home, and the cops present a warrant to search your house, should you have the right to shut the door and not let them in?
If you have illegal materials in your home, and the cops present a warrant to search your house, should you have the right to shut the door and not let them in?
I mean, you've got the right to not answer the door. They just have the right to break the door down because of the lawful warrant. You don't have to help with your own incarceration, i.e. point out evidence they were unable to find, why would you be expected to do the same thing on their phone? Police can't force people to testify either. If your only evidence of a crime rests on the defendent's compliance you've got a poor case. If you can't tie an IP to a device on a specific date and time without forcing someone to open their own device and admit guilt and ownership, then you're really not trying hard enough. The only way that the police can prove who committed a crime on a cell phone that is encrypted is either admission of ownership or compulsion. Neither of which is evidence of a crime in and of itself. They would still have to prove that the person who owned the phone committed the crime, otherwise why have the burden of proof on the prosecutor? These aren't civil cases we're generally talking about where the evidence requirement is lighter these are criminal cases where, as far as I understand anyways, the burdens are much higher. Add to that a cell phone is essentially a tracking device. While your position is certainly a reasonable one to take, I don't think it truly encapsulates the intent of our court system as designed and in fact expressly works against innocent until proven guilty.
You should not be required to assist them. If they can get in on their own with a warrant, that's fair game.
An online persona soliciting child pornography has their IP traced to an individual with a criminal history, registered on a sexual offender database. The police have probable cause to believe this individual has and distributes child pornography.
A judge signs a warrant to perform a forensic search of the individual's hard drive. The individual refuses.
So then, it's just tough shit for the police right? Given that they can't get in on their own with a warrant.
A judge signs a warrant to perform a forensic search of the individual's hard drive. The individual refuses.
So then, it's just tough shit for the police right? Given that they can't get in on their own with a warrant.
The law draws a distinction between being forced to testify against yourself (which essentially has you creating evidence to be used against you), and being forced to turn over evidence in your possession which may be used against you. The latter isn’t indicative of an abuse of of power. The pre-existing physical evidence is what it is, and proves what it proves.
Your proposal is also unworkable. Should companies not be required to hand over corporate records, because those might implicate them in a crime? Should a murder suspect be allowed to deny police access to his shed, where the murder weapon might be hiding? A bedrock principle of law is that “the law is entitled to every man’s evidence.” The whole point of warrants is to reconcile that principle with private property—to create a structured way for police to access private property to get access to evidence. Your proposal isn’t a “check” or “balance”—it obliterates that principle. It allows wrongdoers to hide evidence of their crimes even against a valid warrant.
Your proposal is also unworkable. Should companies not be required to hand over corporate records, because those might implicate them in a crime? Should a murder suspect be allowed to deny police access to his shed, where the murder weapon might be hiding? A bedrock principle of law is that “the law is entitled to every man’s evidence.” The whole point of warrants is to reconcile that principle with private property—to create a structured way for police to access private property to get access to evidence. Your proposal isn’t a “check” or “balance”—it obliterates that principle. It allows wrongdoers to hide evidence of their crimes even against a valid warrant.
While I generally agree with you, a court order to provide a password does bring with it a few problems.
1. Sometimes knowledge of the password itself could be considered testimonial. If there is doubt as to whether or not the an individual owns a particular computer, then being forced to provide the password is tantamount to being forced to concede ownership, which would violate protections against self incrimination.
2. People do legitimately forget passwords, and the courts have no way of distinguishing between people who have genuinely forgotten and those who falsely claim to have forgotten. Being subjected to indefinite detention for forgetting a password would violate due process, while keeping someone in jail until they comply with a legal warrant is legitimate. Since the court cannot distinguish between these two cases, any penalty the court may impose for contempt runs a variable (depending on the facts of the case) but non-zero risk of being a miscarriage of justice.
1. Sometimes knowledge of the password itself could be considered testimonial. If there is doubt as to whether or not the an individual owns a particular computer, then being forced to provide the password is tantamount to being forced to concede ownership, which would violate protections against self incrimination.
2. People do legitimately forget passwords, and the courts have no way of distinguishing between people who have genuinely forgotten and those who falsely claim to have forgotten. Being subjected to indefinite detention for forgetting a password would violate due process, while keeping someone in jail until they comply with a legal warrant is legitimate. Since the court cannot distinguish between these two cases, any penalty the court may impose for contempt runs a variable (depending on the facts of the case) but non-zero risk of being a miscarriage of justice.
That second scenario has always fascinated me. What's the burden of proof for contempt of court? Forgetting a password seems plausible to me. Anyway, reminds me of this reddit post: https://www.reddit.com/r/IAmA/comments/afib1/truecrypt_and_t...
That's probably a made up story or at least not accurately told. That's not how the legal system operates.
Which part of the legal system isn't expressed accurately there? I'm asking out of my own ignorance, not as an accusation, I've only been a juror once.
It would be extremely unusual for an investigator to continue an interrogation after a direct request for an attorney.
The FBI wouldn't execute a search warrant and miss a bunch of drugs and drug paraphernalia.
You don't get jailed for obstruction on the say so of the FBI.
The Judge doesn't interrogate the defendant ever.
Like the guy in the OP you don't get to just refuse to provide the PW. The Judge would hold in contempt.
A Federal judge wouldn't order property held by the local PD returned. And why would they have it if the FBI conducted the raid and was doing the forensics?
The FBI wouldn't execute a search warrant and miss a bunch of drugs and drug paraphernalia.
You don't get jailed for obstruction on the say so of the FBI.
The Judge doesn't interrogate the defendant ever.
Like the guy in the OP you don't get to just refuse to provide the PW. The Judge would hold in contempt.
A Federal judge wouldn't order property held by the local PD returned. And why would they have it if the FBI conducted the raid and was doing the forensics?
Excellent explanation, thanks. The story was definitely suspect, but I entirely missed the FBI involvement at all. Why couldn't a federal judge order the return of property in a case? Is it a jurisdictional issue, i.e. if for some reason the local police had it, that would require a municipal judge?
What if the software on the phone, hypothetically was able to detect you beeing in distress and would stop complying to even the correct password if you are clearly coerced?
"Alexa ! Im scared!"
-would you like me to dial 911?
"No Alexa,Hide!"
-OK, they cant find me now.
A second self destruct password
This is why when raiding a "hacker" LEOs were[1997] supposed to take immediate physical control of the device and not believe anything said "hacker" tells them about the device.
now that mobiles are more common than desktops, but not commonly controlled entirely by the user, heuristics have become sloppy.
"Assume That Every Computer Has Been Rigged To Destroy Evidence"
https://www.govtech.com/magazines/gt/Computer-Evidence-Proce... [1997]
"Assume That Every Computer Has Been Rigged To Destroy Evidence"
https://www.govtech.com/magazines/gt/Computer-Evidence-Proce... [1997]
But a password isn't evidence, it's testimony. The Supreme Court has held that you don't need to turn over "contents of the mind". The example of Wikipedia uses a bank password as an example [1]. In fact even the act of turning over the password demonstrates that the defendant had control of the device and could easily be argued to be self-incriminating.
Also, think about the implications of this. What if the person being ordered to hand over the password says "I forgot"? How do we know if they have genuinely forgotten the password?
1. https://en.wikipedia.org/wiki/Fifth_Amendment_to_the_United_...
Also, think about the implications of this. What if the person being ordered to hand over the password says "I forgot"? How do we know if they have genuinely forgotten the password?
1. https://en.wikipedia.org/wiki/Fifth_Amendment_to_the_United_...
It may or may not be testimony. The Wikipedia example you’re referencing turns on the fact that knowing the password to the account proves ownership or control of the account, which itself may be a fact relevant to the charges. For example, if the account is connected to know money laundering. Turning over the password to a phone may or may not reveal similar information. If the phone was found at a drug stash house, knowledge of the password reveals a connection to the crime. If it’s just your phone, and there is no doubt it’s your phone, knowledge of the password doesn’t in and of itself reveal anything.
Testimony is stuff you’d tell a jury. In the bank account example, you’d tell the jury: this account was used by the criminal, and the accused knew the password, it must be his account. You wouldn’t tell the jury “the accused knew the password to what was undisputedly his own phone.”
Testimony is stuff you’d tell a jury. In the bank account example, you’d tell the jury: this account was used by the criminal, and the accused knew the password, it must be his account. You wouldn’t tell the jury “the accused knew the password to what was undisputedly his own phone.”
> What if the person being ordered to hand over the password says "I forgot"? How do we know if they have genuinely forgotten the password?
I'm curious what case law there is there for this situation.
I change my passwords fairly frequently using a password generator, so if I don't use the password regularly, I forget it quickly. If someone brought me an old laptop of mine, it's more likely than not I genuinely wouldn't remember the password for it.
Also, there's the situation where someone isn't sure if the order to give their password is legal, so a court battle ensues for a year, but then even if they lose at the Supreme Court, what if in that year they forgot their password simply because they hadn't used it in so long?
I'm curious what case law there is there for this situation.
I change my passwords fairly frequently using a password generator, so if I don't use the password regularly, I forget it quickly. If someone brought me an old laptop of mine, it's more likely than not I genuinely wouldn't remember the password for it.
Also, there's the situation where someone isn't sure if the order to give their password is legal, so a court battle ensues for a year, but then even if they lose at the Supreme Court, what if in that year they forgot their password simply because they hadn't used it in so long?
The same thing that happens when you make any excuse for not complying with a court order: a judge or jury decides whether or not they believe you. There is occasionally a gray area, but most of the time lies are obvious.
If you attend a trial, you'll hear a lot of things you either do or don't believe, and not many will be gray.
If an otherwise normal person claims to have forgotten the passcode to their phone that they used every day, few judges would buy it.
If you attend a trial, you'll hear a lot of things you either do or don't believe, and not many will be gray.
If an otherwise normal person claims to have forgotten the passcode to their phone that they used every day, few judges would buy it.
> Should a murder suspect be allowed to deny police access to his shed
A more accurate analogy is forcing the suspect to help the police in accessing his shed.
A more accurate analogy is forcing the suspect to help the police in accessing his shed.
I would argue that the privacy of the state of your mind (including knowledge of any passwords) is very far removed from the privacy of the state of your non-person property, and deserving of complete protection in all cases.
With regards to "state of mind" evidence, the general distinction that has been applied to other things, and one which I think makes total sense, is that state of mind evidence is protected when the existence of the knowledge itself is incriminating. If someone left a phone at a murder scene, the fact that you know the password to the phone is itself incriminating. On the other hand, if it's undisputedly your phone, and police are just looking for what's inside, then ordering you to provide the password is no different than ordering you to provide the key to your desk drawer.
They are clearly "fishing" for other charges or suspects, if it where a more serious crime be sure they will find evidence, we know access to the device it's not completely necessary, they can get location, call registers, social media info and so on.
I thought the only way you could use contempt citations to compel testimony was to immunize the subject. Has this guy been immunize for any crimes that may be revealed by the testimony, ie telling his password, that he may give?
There isn't a supreme court precedent yet for whether forcing someone to disclose a password is equivalent to compelling testimony. The 11th circuit court of appeals says it is, which should be binding in Florida. They're apparently using a district court ruling that says something else, so there's probably some subtlety at work.
Possible subtleties include:
* Is requiring someone to enter a password into a computer equivalent to compelling them to disclose it?
* Is compelling someone to confirm or deny knowledge of a password forced testimony because it implies the person has control over the data that password protects (assuming that's not established by other evidence).
* Is compelling someone to produce the unencrypted contents of a storage device equivalent to compelling them to disclose the password or key?
Possible subtleties include:
* Is requiring someone to enter a password into a computer equivalent to compelling them to disclose it?
* Is compelling someone to confirm or deny knowledge of a password forced testimony because it implies the person has control over the data that password protects (assuming that's not established by other evidence).
* Is compelling someone to produce the unencrypted contents of a storage device equivalent to compelling them to disclose the password or key?
All true, but there are many downsides to the adversarial approach so we should consider exploring other types. The most obvious downside is an adversarial system police and the state will default to intimidation because that's the most effective tactic on most people. This manifests most perniciously in the case of plea bargains. Economic analysis of criminal justice has led to an approach of deliberately threatening people with wildly disproportionate sentences because it's a powerful incentive to plead guilty to lesser crimes and keep the costs of running a prosecutor's office down. It also promotes an unhealthy zero-sum approach to justice where in order for me to win you must lose. We're seeing now how things work out when that attitude shapes the cognition of national leaders.
Most people think they can make a better adversarial system by tweaking this or that rule, but the unwanted outcomes are baked into the adversarial approach. What works between individual humans (more or less) doesn't translate well to conflicts between individual humans and collective entities which constitute facets of the state, bth because of the yawning asymmetries involved and because the state is necessarily and unavoidably schizoid due to the distributed nature of its consciousness and that of those who comprise its cellular elements.
Most people think they can make a better adversarial system by tweaking this or that rule, but the unwanted outcomes are baked into the adversarial approach. What works between individual humans (more or less) doesn't translate well to conflicts between individual humans and collective entities which constitute facets of the state, bth because of the yawning asymmetries involved and because the state is necessarily and unavoidably schizoid due to the distributed nature of its consciousness and that of those who comprise its cellular elements.
I agree with you, however...
> spending 44 days behind bars before the THC and gun charges were dropped, the contempt order got tossed and he pleaded guilty to a misdemeanor pot charge. And yet he regrets nothing, because he now sees his defiance as taking a stand against the abuse of his rights.
However failing to comply with the police and then a court order seemed to work in his favor. I imagine the consequences of him committing felonies and allowing the police to get even more evidence would have been worse than just 44 days and a misdemeanor and whatever he paid his attorneys.
> spending 44 days behind bars before the THC and gun charges were dropped, the contempt order got tossed and he pleaded guilty to a misdemeanor pot charge. And yet he regrets nothing, because he now sees his defiance as taking a stand against the abuse of his rights.
However failing to comply with the police and then a court order seemed to work in his favor. I imagine the consequences of him committing felonies and allowing the police to get even more evidence would have been worse than just 44 days and a misdemeanor and whatever he paid his attorneys.
He served time for being secure in his persons and effects. He served in order to not testify against himself. The police and that judge don't respect his constitutional rights, but he is standing up for them.
The warrant that required his passcode seems like a clear Fifth Amendment violation.
The Fifth Amendment says:
> No person shall be held to answer for a capital, or otherwise infamous crime, unless on a presentment or indictment of a Grand Jury, except in cases arising in the land or naval forces, or in the Militia, when in actual service in time of War or public danger; nor shall any person be subject for the same offence to be twice put in jeopardy of life or limb; nor shall be compelled in any criminal case to be a witness against himself, nor be deprived of life, liberty, or property, without due process of law; nor shall private property be taken for public use, without just compensation.
He’s not being asked to testify against himself at trial, which is literally what “being a witness” means. The Fifth Amendment has already been stretched far beyond its text, to encompass lots of scenarios where a person is ordered to reveal potentially incriminating information. It’s being turned into something very different from what it was written as—a general purpose right not to be compelled to aid in your own prosecution.
> No person shall be held to answer for a capital, or otherwise infamous crime, unless on a presentment or indictment of a Grand Jury, except in cases arising in the land or naval forces, or in the Militia, when in actual service in time of War or public danger; nor shall any person be subject for the same offence to be twice put in jeopardy of life or limb; nor shall be compelled in any criminal case to be a witness against himself, nor be deprived of life, liberty, or property, without due process of law; nor shall private property be taken for public use, without just compensation.
He’s not being asked to testify against himself at trial, which is literally what “being a witness” means. The Fifth Amendment has already been stretched far beyond its text, to encompass lots of scenarios where a person is ordered to reveal potentially incriminating information. It’s being turned into something very different from what it was written as—a general purpose right not to be compelled to aid in your own prosecution.
There's no mention of what, specifically the warrant was a search for. In general, a warrant for search should include specifically what is being searched for. And generally only evidence of that or a major crime are punishable under the warrant or should be.
For example, they're searching for child porn, and they find you're pirating TV shows... they can't prosecute for the pirate shows. The exception is usually only for something like murder/manslaughter.
IANAL, and this is only my understanding. The warrant itself may have been excessively broad or generic though.
For example, they're searching for child porn, and they find you're pirating TV shows... they can't prosecute for the pirate shows. The exception is usually only for something like murder/manslaughter.
IANAL, and this is only my understanding. The warrant itself may have been excessively broad or generic though.
Yes but couldn't they just use plain view to claim that in searching your phone the pirated videos became plain view? In that case you would literally be aiding your own prosecution of something even if you didn't intend to by giving up your password. The only real requirement is that the officer be legally allowed on the device, which a warrant allows and belief that the item is illegal, which is all but impossible to disprove. You literally open the door to further prosecution, even if the first accusation is thrown out. The laws were not written in such a way as to cover technology.
https://en.wikipedia.org/wiki/Plain_view_doctrine
https://en.wikipedia.org/wiki/Plain_view_doctrine
No he's just being asked to forced to provide speech in a legal context. Just because they can demand it outside of a trial doesn't magically make it acceptable. It is why it includes compelled speech against yourself outside of the courtroom.
"I forgot the password".
What is the court going to do? Lock him up indefinitely?
What is the court going to do? Lock him up indefinitely?
The Fifth only applies during a trial? So the police can coerce a confession and it’s all above-board?
"Being a witness" doesn't only apply during trial. Witnesses might participate in pre-trial proceedings and give testimony that may or may not be used later at trial. The Fifth Amendment protects that. But the act of granting access to a location where evidence might be found is not "being a witness."
If it was a corporate phone, and the company IT guy gave the police the password, would you call the IT guy a "witness?" Generally, you wouldn't. The password is not evidence--it doesn't matter to the case whether it's "123" or "ABC." Neither does knowledge of the password tend to prove innocence or guilt. For the same reason, forcing someone to disclose their password is not compelling them to be a witness.
Now, the IT guy might be a witness if, for example, there is a dispute about who owns a phone (say it was found at the scene of the crime), and the IT guy testifies that the company issued the accused that phone. That goes to the substance of the case--it links the crime scene to the accused. That is being a witness. In that circumstance, the Fifth Amendment should protect an accused from having to disclose that same information.
If it was a corporate phone, and the company IT guy gave the police the password, would you call the IT guy a "witness?" Generally, you wouldn't. The password is not evidence--it doesn't matter to the case whether it's "123" or "ABC." Neither does knowledge of the password tend to prove innocence or guilt. For the same reason, forcing someone to disclose their password is not compelling them to be a witness.
Now, the IT guy might be a witness if, for example, there is a dispute about who owns a phone (say it was found at the scene of the crime), and the IT guy testifies that the company issued the accused that phone. That goes to the substance of the case--it links the crime scene to the accused. That is being a witness. In that circumstance, the Fifth Amendment should protect an accused from having to disclose that same information.
You said that “being a witness” means testifying at trial. Now you’re saying it’s not? Very confusing.
Why wouldn’t I call the IT guy a witness if he’s providing access to information relevant to your prosecution?
Why wouldn’t I call the IT guy a witness if he’s providing access to information relevant to your prosecution?
The word is not perfectly precise, but it’s meaning is anchored in trial testimony. A witness is someone who testifies at trial, based on their first hand knowledge of the facts of the case. Because there is generally an extended pre-trial phase, where prospective witnesses may be interviewed or deposed, those folks are generally also called witnesses in that context, and the Fifth Amendment extends to such pre-trial proceedings. But all of that is in connection with their possible testimony at trial.
You would not call the IT guy a witness, because “providing access to information” is not “testifying.” A witness is someone who has facts relevant to the charges, and who testifies those facts to the jury based on her personal knowledge. The IT guy has no personal knowledge of the crime and won’t be called to tell the jury about it.
A good litmus test is: would you possibly tell this information to the jury? You may need to know the accused’s office number to search it. But that office number isn’t relevant information to the case in and of itself. It wouldn’t be a point you’d tell the jury. And the receptionist that tells you it isn’t a witness.
You would not call the IT guy a witness, because “providing access to information” is not “testifying.” A witness is someone who has facts relevant to the charges, and who testifies those facts to the jury based on her personal knowledge. The IT guy has no personal knowledge of the crime and won’t be called to tell the jury about it.
A good litmus test is: would you possibly tell this information to the jury? You may need to know the accused’s office number to search it. But that office number isn’t relevant information to the case in and of itself. It wouldn’t be a point you’d tell the jury. And the receptionist that tells you it isn’t a witness.
Do I understand this correctly that information about the crime is protected, but information about information about the crime is not?
This doesn’t sound right. For example, what’s the difference between being compelled to give up your password and being compelled to reveal where you buried a murder victim?
This doesn’t sound right. For example, what’s the difference between being compelled to give up your password and being compelled to reveal where you buried a murder victim?
Coerced confessions will be inadmissible during the trial phase
But the police can still force you to confess and tell them where all the bodies are buried?
I'm not entirely sure I understand the question. No, they can't legally do that - but yes, a bad cop can put a gun to your head off-camera and coerce a confession.
The comment I replied to claimed that the Fifth only protects you from testifying at trial. You said a coerced confession would be inadmissible, implying it’s still legal to do so, it just couldn’t be used as evidence.
The 5th amendment does not create any crimes, but every state has criminal laws that would apply to a police officer coercing a confession by threat, force, torture, etc....
Yeah. That's not what means. If you want to define the fifth amendment as that you'll need to overturn Miranda v Arizona.
What if his password is, "I sell weed for a living"?
To further expound on this, the state cannot compel a person to testify against themselves.
Is forcing the revelation of a passcode more akin to speech, or is it more akin to providing a physical key?
The former is currently illegal, but being challenged in many jurisdictions. The latter is legal.
Is forcing the revelation of a passcode more akin to speech, or is it more akin to providing a physical key?
The former is currently illegal, but being challenged in many jurisdictions. The latter is legal.
Can you be forced to provide a physical key? They’ll break the door down if they have to.
Yes. Generally the delineation if its something you could have on you is allowed, but what is in your head is not. Biometrics are generally seen as something you have on you, so fingerprints are generally seen as less secure than passcodes.
Jaepa covered it. The state is allowed to brute-force entry into phone or other device.
Thus the simultaneous push for Apple and others to provide back-doors. And large sums of money paid by the FBI to Israeli(?) IT firms to crack phones.
Thus the simultaneous push for Apple and others to provide back-doors. And large sums of money paid by the FBI to Israeli(?) IT firms to crack phones.
If the cops present a warrant to search your house, and you know you have incriminating evidence in your home and you refuse to let the cops in, is the warrant a violation of your Fifth Amendment rights?
If you have a coded book, do you have to read it to them?
Obviously you will be detained if you try and prevent lawful execution of a search warrant. But its kind of a false equivalency saw that not providing a passcode is the same.
From the Justice John Paul Stevens dissent from Justice John Paul Stevens (487 U.S. 201)
https://www.law.cornell.edu/supremecourt/text/487/201 https://caselaw.findlaw.com/us-supreme-court/530/27.html
Obviously you will be detained if you try and prevent lawful execution of a search warrant. But its kind of a false equivalency saw that not providing a passcode is the same.
From the Justice John Paul Stevens dissent from Justice John Paul Stevens (487 U.S. 201)
A defendant can be compelled to produce material evidence
that is incriminating. Fingerprints, blood samples, voice
exemplars, handwriting specimens, or other items of
physical evidence may be extracted from a defendant
against his will. But can he be compelled to use his
mind to assist the prosecution in convicting him of a
crime? I think not. He may in some cases be forced to
surrender a key to a strongbox containing incriminating
documents, but I do not believe he can be compelled to
reveal the combination to his wall safe — by word or
deed.
https://www.law.cornell.edu/supremecourt/text/487/201 https://caselaw.findlaw.com/us-supreme-court/530/27.html
No, but as far as I know you won’t be prosecuted for refusing entry. The police will just force their way in.
Strong crypto means the police can’t force their way in. But that doesn’t mean they should sprout new rights to force people to help.
Strong crypto means the police can’t force their way in. But that doesn’t mean they should sprout new rights to force people to help.
> * The police acquired a warrant and presented the warrant legally. The man refused, committing the crime of contempt of court*
The article also mentions that the law is not settled as to whether, and under what circumstances a court may compel the disclosure of a password. In the 11th circuit, courts are generally not empowered to compel decryption[0]. Being forced to disclose a password or key is treated as equivalent to being forced to testify against one's self, which is expressly prohibited by the fifth amendment. Florida is in the 11th circuit, and Montanez might have grounds for a lawsuit here.
[0] https://www.eff.org/press/releases/appeals-court-upholds-con...
The article also mentions that the law is not settled as to whether, and under what circumstances a court may compel the disclosure of a password. In the 11th circuit, courts are generally not empowered to compel decryption[0]. Being forced to disclose a password or key is treated as equivalent to being forced to testify against one's self, which is expressly prohibited by the fifth amendment. Florida is in the 11th circuit, and Montanez might have grounds for a lawsuit here.
[0] https://www.eff.org/press/releases/appeals-court-upholds-con...
not really, they had no probable cause. an eerie text message is not probable cause - it didn't specify the whom or the what. his gun was legal, hence the charges dropped. so basically, he was arrested for having a tiny bit of weed. That's not fair, that's obnoxious and a waste of tax payers money in every obvious regard, and a further waste of taxpayers money for the consequence of police officers pushing too hard.
Plausible deniability. Encryption systems that are designed for countering a hostile threat that can force you to divulge the key have two passwords. One opens your real data, one opens a decoy. It would be nice is phones had that feature.
Hello Irene Adler
He went to jail for contempt of court for ignoring a court order, not just disobeying police to unlock his phone. This would be true for any court order. In the article, it appears the police had probable cause for the warrant to search the phone by the text popup that appeared on the locked phone.
If a court order said he had to confess, and arrested him for not doing so, would you say that is a lawful order?
And if not, what is the difference between being ordered to confess and being ordered to produce evidence harmful to yourself?
Courts should have the right to seek evidence, no one is disputing that, nor is anyone disputing the rights of the court to seek that evidence unmolested, but there is a difference between seeking evidence and mandating compliance.
As far as I am concerned courts should not have any right to compel any action, particularly specific action. They should only have a right to compel inaction. In short, the court can issue warrants that permit their officers to conduct actions that would otherwise be illegal, for example entering my house without my permission, and they may even compel me to stand outside and not interfere while they do so, but they should never be able to compel me to open the door for them.
And if not, what is the difference between being ordered to confess and being ordered to produce evidence harmful to yourself?
Courts should have the right to seek evidence, no one is disputing that, nor is anyone disputing the rights of the court to seek that evidence unmolested, but there is a difference between seeking evidence and mandating compliance.
As far as I am concerned courts should not have any right to compel any action, particularly specific action. They should only have a right to compel inaction. In short, the court can issue warrants that permit their officers to conduct actions that would otherwise be illegal, for example entering my house without my permission, and they may even compel me to stand outside and not interfere while they do so, but they should never be able to compel me to open the door for them.
> but they should never be able to compel me to open the door for them.
If they have a warrant and don’t open the door, they will break it down with a sledge hammer.
If they have a warrant and don’t open the door, they will break it down with a sledge hammer.
> And if not, what is the difference between being ordered to confess and being ordered to produce evidence harmful to yourself?
One has constitutional protection from the fifth amendment and the other doesn't.
One has constitutional protection from the fifth amendment and the other doesn't.
There is a process to quash an unlawful warrant. You can't just refuse to obey.
You and I read the same article and yet reached vastly different conclusions. Is the passcode speech? Is the passcode protected under the 5th amendment. Because they can't compel you to testify.
Remember, it's up to the prosecutor to build on the evidence they have. If they don't have your phone they don't have much evidence. And it is my belief your passcode is your thoughts.
What if he gave them the codes? They would have noodled around his phone until they found something else. That traffic stop could have become felony possession and that felony possession could have been upgraded to felony distribution if someone had sent him a message to pick up something on the way back.
Remember, it's up to the prosecutor to build on the evidence they have. If they don't have your phone they don't have much evidence. And it is my belief your passcode is your thoughts.
What if he gave them the codes? They would have noodled around his phone until they found something else. That traffic stop could have become felony possession and that felony possession could have been upgraded to felony distribution if someone had sent him a message to pick up something on the way back.
That's a great argument, but he didn't make it. As I said above, if you feel the warrant would violate your First or Fifth Amendment rights, there is a process for that. You can't just ignore a court order, or you will end up in jail.
This seems to me like a technical problem. Assuming one must really store sensitive things on smart phones, there should be a way to do this AND allowing one to share the phone unlocked with an adversary without risk of leaking data. Multiple unlock codes maybe?
Maybe a tertiary duress code that starts a timer and performs predefined actions after {n} minutes. i.e. send control code to a server, notify friends, family, lawyer you are under duress with GPS coordinates, wipe phone at the risk of destroying evidence, start sending audio to youtube, transfer / delegate data to a different predefined device, etc... Might be useful if you are being mugged.
Maybe a tertiary duress code that starts a timer and performs predefined actions after {n} minutes. i.e. send control code to a server, notify friends, family, lawyer you are under duress with GPS coordinates, wipe phone at the risk of destroying evidence, start sending audio to youtube, transfer / delegate data to a different predefined device, etc... Might be useful if you are being mugged.
Well, in my opinion, the closest analogue would be mail. Can the police search through your mail?
https://www.legalmatch.com/law-library/article/can-the-polic...
The answer is yes, with a search warrant. Therefore, I see no reason that a phone should be treated differently.
https://www.legalmatch.com/law-library/article/can-the-polic...
The answer is yes, with a search warrant. Therefore, I see no reason that a phone should be treated differently.
If the police want to open my phone I will supply them with the pentalobe driver to do so.
This comparison is ridiculous, the amount of private information you can gather from my mail is incomparable to the amount of information you can gather from my phone. My phone remembers more about me than I do. Conversations I don't recall having, places I don't recall going to. Open up your Google timeline and scroll through it, you'll see plenty of things that make you go "Huh I wonder what I was doing that day."
Do people normally mail their pictures to themselves? Mail is typically limited to sender -> receiver. The closest analogue to me would be a diary and unfortunately not so clear-cut: https://blogs.findlaw.com/law_and_life/2017/06/legally-is-my...
Phone OSes should allow the user to exercise plausible deniability by having dual or multiple passwords or other physical means of telling the phone to unlock only in a safe mode that will reveal innocuous documents or photos, job, relatives and friends contacts, and possibly let the inbox and outbox contain only conversations from clean numbers. If a cop signals to pull over, a short bossa nova tap on the phone case might get detected by the accelerometer and trigger that safe mode, until the user tells the phone the emergency is over by tapping a pataflafla followed by a paradiddle diddle (just kidding, but you get the point:^)
Not that I condone any illegal use of cellphones, but often a wrong assumption by a police officer paired by his perceived omnipotence can easily escalate to a level much worse than the "crimes" they intended to prevent.
Phone maker Xiaomi's Miui version of Android has a feature much like this called Second Space where you can create a clean copy of the OS and only import what data you choose from your primary account. Call and SMS history is shared but not contacts, but SMS being insecure an App like telegram used in first/primary space would be more secure anyway.
I haven't really used the feature yet but thought it was a really cool idea. https://www.pcsteps.com/18454-second-android-user-account-xi...
I haven't really used the feature yet but thought it was a really cool idea. https://www.pcsteps.com/18454-second-android-user-account-xi...
Blackphone2 as well: https://www.silentcircle.com/products-and-solutions/blackpho...
IMO, the legal landscape here hasn't kept up with changing social conditions. A huge amount of social and personal activity is now getting mediated through technology, and legal protections have not been correspondingly extended.
Cell phones routinely keep a log of who you've been talking to, when, and a big chunk of the actual contents. They also will often collect location history, or broadcast the location to third parties as part of their normal operation.
Cell phones routinely keep a log of who you've been talking to, when, and a big chunk of the actual contents. They also will often collect location history, or broadcast the location to third parties as part of their normal operation.
What if i programmed a phone to no reveal data, even with the correct passphrase, as long as the user is seen under pressure by law enforcement or society to reveal data?
I am having a hard time imagining how the system can be made to understand whether a user is under pressure to reveal data.
Perhaps a spoken phrase from the user that initiates the lock within the lock?
Perhaps a spoken phrase from the user that initiates the lock within the lock?
An easy mechanism is have two passwords. The real password that displays unredacted data, and a contingency password that only reveals benign information.
... or a contingency password that causes the phone to immediately be wiped clean and then unlocks? Still doesn't address the notion of a system that "knows" the user is under duress without some sort of overt signal or action by the user.
BlackBerry had a duress password feature to secure erase the device in the event of said password being used, and it would brick the device in the event of being aborted (battery pull). Wouldn't that be considered destruction of evidence though?
not if the police used the password themselves, especially if there is no specifier for what password is requested.
alternatively live dangerously and default wakeup mode is to trigger the self destruct, unless the trigger is deactivated [by a password of course.] if the cops dont know how to use your phone and they brick your phone they have caused damage.
im not sure how well it would work if they plugged your "phone" usb port into thier equipment, only to realize your "phone" is actually a super capacitor device, with a charge level display. It could be sabotage, but we are developers and engineers after all so all sorts of prototypes could end up in the hands of someone ignorant of the device function. Im sure a warning "you dont want to plug that in there!" would fall on deaf ears but is a point in your own defence.
alternatively live dangerously and default wakeup mode is to trigger the self destruct, unless the trigger is deactivated [by a password of course.] if the cops dont know how to use your phone and they brick your phone they have caused damage.
im not sure how well it would work if they plugged your "phone" usb port into thier equipment, only to realize your "phone" is actually a super capacitor device, with a charge level display. It could be sabotage, but we are developers and engineers after all so all sorts of prototypes could end up in the hands of someone ignorant of the device function. Im sure a warning "you dont want to plug that in there!" would fall on deaf ears but is a point in your own defence.
and how would you program that?
alexa, hide !
-ok ill let you know how to find me when i hear the safe word
-ok ill let you know how to find me when i hear the safe word
Patternmatch on daily habbits? if daily habbits do not resume, and normal social interaction does not happen for n days, no phone acces for 2*n days for you.
alexa im scared, hide !
or alexa play hide n seek.
or alexa play hide n seek.
jail is not that bad.
Maybe not, but please don't post unsubstantive comments here.
Depends on which jail ;)
The police have a right to attempt you trick you into giving up information you shouldn't. Plead the fifth/don't talk to the police.
>So he refused, and was locked up on the drug and firearms charges.
This is fair.
>Five days later, after Montanez was bailed out of jail, a deputy from the Hillsborough County Sheriff’s Office tracked him down, handed him the warrants and demanded the phone passcodes. Again, Montanez refused. Prosecutors went to a judge, who ordered him locked up again for contempt of court.
This is also fair. The police acquired a warrant and presented the warrant legally. The man refused, committing the crime of contempt of court, which is a fair and just punishment for refusing to heed a court-issued warrant. It's also within his right to decide to serve the time for contempt of court rather than providing the password.
Yes, there are lots of bigger issues touched upon in this story, but the headline seems sensationalist. Didn't the police do the right thing by obtaining a warrant for the password?