The Award Winning Place for Plain English Explanations of Internet Stuff
Google is providing law enforcement agencies with lists of devices it has identified as being in the area of a crime scene at the time of the crime. With the data from Google’s massive device location database called Sensorvault, law enforcement then creates lists of possible suspects and witnesses.
In a fairly stunning win for mobile phone privacy, the Supreme Court has ruled that law enforcement agencies must obtain a warrant before they can demand and receive from mobile carriers and mobile providers access to the cell phone location data (known as ‘cell site location information’, or CSLI for short) of a given cellular phone. In the case of Carpenter v. United States, the Supreme Court held that tracking a cell phone is barely different than putting an ankle bracelet on an individual and monitoring their movements, and so overturned related case law that has been around for (up to) decades.
Law enforcement agencies have come up with a new tactic for investigating crimes: location-based warrants, served on Google, demanding that Google disclose Google accounts in use on all mobile devices that were in a given area at a certain time, thus giving detectives and other LEOs a pool of potential suspects and persons of interest who may have committed or have information about whatever crime they are trying to solve.
For more than four years we have been telling you that law enforcement can get to any electronic communications you have stored for more than 180 days in the cloud (and that ‘cloud’ is just a fancy word for “somebody else’s computer”). This is because the Electronics Communication Privacy Act (ECPA) only requires a subpoena in order for a governmental agency to get at those communications records that you have stored on that third-party server – they do not need a warrant.
Both the Federal Senate Judiciary Committee and the Senate Intelligence Committee heard today from FBI Director James Comey, and from Deputy Attorney General Sally Quillian Yates, that they need a backdoor (or a “front door”, as Comey calls it) that allows them to decrypt encrypted email and messages in order to fight terrorism.
Today the Supreme Court unanimously held that a warrant is required to search a cell phone, in the case of Riley v. California. Warrentless searches of a cell phone are not ok.
Yesterday we told you about how Microsoft is one of several companies who are encrypting their services and hardening their systems against the prying of nosy agencies like the NSA. Now Microsoft is fighting a Federal court order that they turn over the data for a user’s email account whose email data resides on a server outside of the U.S. (in Ireland, to be specific).
Google is making clear how they will be handling warrants and subpoenas for users’ personal information. With January 28th being Data Privacy Day, Google Senior Vice President and Chief Legal Officer, David Drummond, shared three initiatives on the Google blog, which detail how Google plans to protect user privacy when faced with a warrant or subpena to hand over private user information.
Update: We have just learned that Senator Leahy has withdrawn his support for the amendments to the Electronic Communications Privacy Act (ECPA). He received resounding criticism from many groups and private citizens who felt that the revisions are unconstitutional and a gross invasion of privacy. In a series of tweets, below, Senator Leahy said that he did not support the bill amendments, and seems to deny that he ever did.
With the recent decision in the Fricosu case, ruling that one can be forced to provide the password to your encrypted hard drive, you may be thinking it is better to store things “in the cloud”. In fact, it can be worse, as cloud storage currently requires no warrant for law enforcement to access any of your data which has been stored in the cloud for at least 180 days.
From our “We told you so” department, San Mateo County sheriffs have executed a warrant, seizing computers and other items from Gizmodo editor Jason Chen’s residence, following the appearance of a lost secret iPhone 4G prototype both in Gizmodo’s possession, and on their blog, where they fully disclosed Apple’s proprietary prototype. Jason Chen was not arrested, although he was patted down.