News for hackers. Stuff that matters.
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @01:21PM (#13886873)
This is exactly what is wrong with dragnet surveillance.

So say they get 1 name, and that name happens to be you. I'm sure you had a perfectly good reason to google that name, no matter how obscure it was, and it happens to be a day and a bit before the money was taken (which, btw according to TFA it wasn't).

No matter how you spin it, you will look suspicious. Maybe you'll even admit to doing it when you didn't, maybe you'll be offered a plea if you confess.

Case closed, crime solved, right?

Or rather not, because it is you and you'd never do such a thing?

A similar thing happened here in NL. A number of burglaries in a region that was only accessible via a single bridge, and that bridge had a camera on it.

Correlate the license plates crossing the bridge with the nights of the burglaries and only one car was left.

So that had to be the person that did it. Which, in fact it was! Still, the judge threw out the evidence because it was gathered without specific intent to confirm, not discover that such a person existed, and in theory anybody that crossed that bridge suddenly became a suspect in the case until they could be ruled out.

So +1 for clever thinking, -100 for botching a case where there might have been a legitimate way of obtaining this information.

Total surveillance means very little crime, but as a society we should push back against that because it also means that we are enabling an element of government that already has a lot of power over our lives.

It's worth the occasional $28K loss (presumably to insurance companies) in order to safeguard the rights of the rest of us.

Oh, and that's besides the potential for a Joe Job, where you would go to someone else's computer that you access in a coffee shop or some other place where you can get momentary access to someone's computer (co worker, whatever) and then google the name of the person you intend to hit causing them loss of their job and potentially much more.

This is just wrong, on many levels.

Re:Police ask for whole city's Google searches, and a judge ... by darpa_escapee on Thursday March 16, 2017 @01:59PM (#13887268)
This is the same problem encountered with genetic databases, government run or run by businesses like 23&Me[0].

> “Your relative’s DNA could turn you into a suspect,” warns Wired, writing about a case from earlier this year, in which New Orleans filmmaker Michael Usry became a suspect in an unsolved murder case after cops did a familial genetic search using semen collected in 1996. The cops searched an Ancestry.com database and got a familial match to a saliva sample Usry’s father had given years earlier. Usry was ultimately determined to be innocent and the Electronic Frontier Foundation called it a “wild goose chase” that demonstrated “the very real threats to privacy and civil liberties posed by law enforcement access to private genetic databases.”

[0] http://fusion.net/story/215204/law-enforcement-agencies-are-...

Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @02:01PM (#13887299)
I wrote about that five year ago.

https://jacquesmattheij.com/your-genetic-information-is-not-...

This problem will get larger and larger.

Re:Police ask for whole city's Google searches, and a judge ... by FilterSweep on Thursday March 16, 2017 @03:25PM (#13888262)
Good blog. it's not just law enforcement either.

Genetic testing reveals your father's line has the genes for severe alcoholism. You are now a "warm client" for advertisers.

And don't underestimate the social influence of targeted facebook/twitter ads.

Re:Police ask for whole city's Google searches, and a judge ... by manarth on Thursday March 16, 2017 @05:57PM (#13889579)

  "Detectives persuaded a magistrate judge to sign a search warrant ordering Usry to provide his DNA for comparison"
  "His DNA, Hoffman wrote, did not match the semen from the scene of Dodge’s murder."
This sounds a lot like he was forced to prove his innocence, rather than the judiciary being forced to prove his guilt.
Re:Police ask for whole city's Google searches, and a judge ... by rayiner on Thursday March 16, 2017 @07:58PM (#13890240)
The judiciary cannot force you to prove your innocence. But it can force you to provide evidence, which the state may then be able to use to prove your guilt.

Everybody has a duty to cooperate with litigation. Even third party witnesses who are not "on trial" can be compelled to take testify about what they saw or heard.

Re:Police ask for whole city's Google searches, and a judge ... by manarth on Thursday March 16, 2017 @08:34PM (#13890393)

  [The judiciary] can force you to provide evidence.
  Everybody has a duty to cooperate with litigation.
The 5th Amendment appears to explicitly contradict those examples.
Re:Police ask for whole city's Google searches, and a judge ... by rayiner on Thursday March 16, 2017 @10:14PM (#13890827)
Writs subpoena (court orders to testify or produce documents) had been part of the English legal system for almost 400 years at the time the Constitution was written. So when the Framers wrote that no one "shall be compelled in any [1] criminal case [2] to be a witness [3] against himself," that's what they meant. Had they intended to limit courts' subpoena power in civil cases, as to non-testimonial conduct, or as to testimony against other people, they would have said so.
Re:Police ask for whole city's Google searches, and a judge ... by mulmen on Thursday March 16, 2017 @01:26PM (#13886918)
You're making a lot of assumptions here though. Is wire fraud just an unsolvable crime? Is all crime on the internet unsolvable because the police cannot gather any evidence at all?

I agree that privacy is more important than security but I think you are going a little too far with this comment. Sure, the police should be careful with this evidence and it doesn't prove any wrongdoing but I don't see how it's unreasonable for police to ask who searched for a specific term at a specific time in a specific place.

Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @01:31PM (#13886965)
If the police had a tap in place at that time and they caught the data in flight (good luck with that btw) then good for them. If there was no suspect this is just another fishing operation and those should be very strongly discouraged.

Note that they do not even know for sure that the suspect googled the name of the victim, they are assuming that.

And that in a case where the fraud failed, so this is not even a crime that succeeded. I think this lowers the bar for dragnet style after-the-fact fishing expeditions to the point where you might as well hand over your search history in real time just in case you commit a crime at some point in the future.

I'm sure some LE would see that as the holy grail, but me, I prefer they actually do their digging with someone specific in mind rather than to declare us all suspects to a crime simply because we happen to live in a certain city and google a certain name.

Re:Police ask for whole city's Google searches, and a judge ... by mulmen on Thursday March 16, 2017 @01:40PM (#13887045)
The way I read the article the police are asking for people who searched for a name that they have found is associated with pictures that were used in the attempted fraud. It sounds to me like they have done their digging and want to know who searched these terms to do further investigation.
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @01:41PM (#13887065)
Where do you get the proof they knew the searches took place at all? What if someone used 'Bing' or 'Scroogle' or 'DuckDuckGo' (or in a bind: Yahoo!), or already knew the person?
Re:Police ask for whole city's Google searches, and a judge ... by mulmen on Thursday March 16, 2017 @01:51PM (#13887190)
I don't have any proof that they know or even that they suspect they happened. Do you have proof that the police didn't make these same requests to other search engines? If this information exists it may help the police find the scammer and they don't seem to be overreaching to me.
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @01:55PM (#13887226)
> Do you have proof that the police didn't make these same requests to other search engines?

That would make it worse not better.

> If this information exists it may help the police find the scammer and they don't seem to be overreaching to me.

Yes, that's clear. But I'd rather they found the scammer first and then petitioned google or whoever they feel might have relevant information with a targeted request. Instead they now will use this information to generate a suspect which is the wrong way around.

Re:Police ask for whole city's Google searches, and a judge ... by mulmen on Thursday March 16, 2017 @02:19PM (#13887458)
Ok, that's a great point. You're concerned with the effectiveness of the evidence in a later trial. You cited a good example of how this could backfire on the police.

Having said that I am concerned with the alarmist tone this article takes and the clickbait nature of the headline. The police are not doing what the article makes it sound like they are doing. This kind of thing undermines the fair criticism of police evidence collection and a productive conversation about privacy.

Re:Police ask for whole city's Google searches, and a judge ... by Steeeve on Thursday March 16, 2017 @03:35PM (#13888379)
Why not get a warrant for all people who have searched for the term "railway" in 2016 because they might be terrorists?

And then just add those people to a list of people who should be watched closely at transportation centers.

And then maybe make them wear a little orange circle on their jackets so they are easier to identify.

And then maybe put them all in a concentrated containment area so the rest of us were safe from all the would-be terrorists?

Or maybe at that point filter it down to just the orange-circles who happen to be from germany.

Re:Police ask for whole city's Google searches, and a judge ... by mulmen on Thursday March 16, 2017 @04:38PM (#13888957)
This is exactly the kind of alarmist hyperbole that concerns me in these conversations.
Re:Police ask for whole city's Google searches, and a judge ... by Steeeve on Thursday March 16, 2017 @06:08PM (#13889653)
This is exactly the kind of subpoena that people have been concerned about.

Everyone who searched for "Douglas". Please. There's nothing reasonable about that.

Re:Police ask for whole city's Google searches, and a judge ... by rhizome on Thursday March 16, 2017 @05:09PM (#13889210)
It's a personal value judgment whether you think the camel's nose is a problem. The facts remain, however, since once the police get this list, they're going to ask for more search queries from the people on the list, because it's easier to create a defendant that way.
Re:Police ask for whole city's Google searches, and a judge ... by harryh on Thursday March 16, 2017 @02:07PM (#13887350)
Wait a second. You can't look at camera footage that was taken near the vicinity of a crime in order to try to discover who the criminal was? I am highly suspicious of your story.

Citation?

Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @02:23PM (#13887507)
It wasn't in the vicinity, there was a 50 km or so distance between the two.

The bridge is one of very few points where you can cross from the Southern part of the Netherlands into the Northern part ( https://www.google.nl/maps/@52.6106721,5.6448216,16z?hl=en ), and has cameras on it making it an ideal choke point for ~30% of the North-South traffic in NL.

The burglaries were all in Friesland, quite a bit further North and the thieves iirc came from Amsterdam all the way to the North to hit wealthy looking solitary houses (of which there are quite a few in the North and almost none near Amsterdam where the population density is a lot higher).

So I can totally see why the police figured that this would work and it did.

Anyway, I can't readily find a citation but I recall the case clearly because there was a lot of uproar here that the thieves were set free when it was 100% clear that they were guilty based on how they were discovered.

But all my queries regarding 'ketelbrug, vrijspraak, inbrekers' do not return anything useful.

Re:Police ask for whole city's Google searches, and a judge ... by rayiner on Thursday March 16, 2017 @01:32PM (#13886968)
Think about the evidence in Bayesian terms. What does knowing that someone searched an unusual name (or crossed a particular bridge) do to the odds that that person committed the crime? Probably a lot!

So why does the intent of the investigator, to confirm versus discover, matter? If evidence is highly probative, and doesn't infringe on anyone's property rights, what's wrong with it? There's no right not to have the government find out you did something wrong...

Re:Police ask for whole city's Google searches, and a judge ... by HarryHirsch on Thursday March 16, 2017 @01:44PM (#13887093)
I am in drug discovery, and over the last few days I searched for an opiate that hasn't been scheduled yet. The class of compounds that this compound belongs to was investigated 30 - 40 years back, they never made it into the clinic, but you begin encountering them on the streets because the DOJ hasn't prohibited them yet. I am also in an academic environment, and it has happened before that researchers diverted university resources for their own profit. In a previous workplace they fired a grad student over this, in the lab next to mine. I am under no illusions that I have already attracted suspicion from NSA/FBI/CIA/whatnot.

The suspicion is something what I could do wholly without.

Re:Police ask for whole city's Google searches, and a judge ... by euyyn on Thursday March 16, 2017 @03:58PM (#13888599)
The thing is, suspicion is a function not of you being innocent or guilty, but of the knowledge and mental model law enforcement has, so far, of what happened. To prevent suspicion before they get to learn you're innocent, you probably have to eliminate their ability to catch the guilty whatsoever.
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @01:40PM (#13887053)
Oh, in that case we don't even need parallel construction anymore. Why bother, if it doesn't matter how you got your evidence then any evidence is good.

Just use whatever dragnet method you already have in place and phone it in. Subpoena google for all searches done in all cities and go round up the folks whose searches match the names of the victims.

I'm sure your going to get a fantastic conviction rate.

A society like that already existed: It was called East Germany and petty crime there was nearly non-existent. What crime there was was mostly corruption and went unpunished (who will watch the watchers).

Former East Germans seem to prefer the society they have right now.

Re:Police ask for whole city's Google searches, and a judge ... by pvg on Friday March 17, 2017 @01:39PM (#13896074)
The 'absence' of petty crime, such as it was, wasn't because due to mass surveillance.
Re:Police ask for whole city's Google searches, and a judge ... by gist on Thursday March 16, 2017 @02:08PM (#13887364)
> So why does the intent of the investigator, to confirm versus discover, matter?

Well you could argue then that they should be allowed to look at everything because if they do they could discover any number of crimes by looking at all communications.

Here's the thing. Lets' say hypothetically there is a crime committed at a high school. Are people generally ok with the police opening every single school locker to see who is a potential suspect for that one crime?

And what if while doing so they discover evidence of another crime? Is that ok and usable? If it is then we get to a point where it's conceivable that the police will then use any reason to say there is a crime to which they need to open school lockers knowing that they will almost certainly find evidence of some crime in one of them.

Re:Police ask for whole city's Google searches, and a judge ... by Floegipoky on Thursday March 16, 2017 @02:33PM (#13887613)
>> Are people generally ok with the police opening every single school locker...? >>And what if while doing so they discover evidence of another crime? Is that ok and usable?...

Yes, yes, and yes. Police can open any (or all) locker(s) they want for any purpose, though generally they ask for permission from the school administration first, and they can and do use any evidence discovered. Pick your favorite BS legal handwaving, I think it's usually "the lockers belong to the school, and by its good grace allows[/forces] the students to use them"

Re:Police ask for whole city's Google searches, and a judge ... by jlamberts on Thursday March 16, 2017 @03:05PM (#13888031)
Bayesian statistics says the opposite. By looking at the history of an entire city, you're giving yourself a highly uninformative prior. This means that it's very difficult to actually draw conclusions from the results. You have to reduce your population size first, and then perform your "test" (looking at search history) on the subset of the population who actually has a reasonable chance of committing the crime even without the search evidence.
Re:Police ask for whole city's Google searches, and a judge ... by rayiner on Thursday March 16, 2017 @04:27PM (#13888864)
It depends on how probative the specific evidence is. If you had a database of everyone's DNA, and wanted to figure out whose blood was on the murder weapon. Your prior is highly uninformative, but the DNA evidence is so highly probative that the resulting identification is probably quite reliable.
Re:Police ask for whole city's Google searches, and a judge ... by barrkel on Thursday March 16, 2017 @01:50PM (#13887170)
> There's no right not to have the government find out you did something wrong...

Did you think this one through? Law is a lagging indicator of what society thinks is acceptable. That works in both directions: sometimes things are legal that shouldn't be, but also things are illegal that should be. Beware a lopsided bias, or you get a ratchet to a totalitarian society.

Re:Police ask for whole city's Google searches, and a judge ... by paulddraper on Thursday March 16, 2017 @01:35PM (#13887001)
> No matter how you spin it, you will look suspicious Case closed, crime solved, right?

Oh, come on. The police are looking for a list of persons of interest to start with.

If someone disappears, their spouse gets put on the list of persons of interest. So do the last people seen with them. For each one, the police see if there is a case to be made, or if they know anything that could help, and then move on.

Re:Police ask for whole city's Google searches, and a judge ... by noobiemcfoob on Thursday March 16, 2017 @01:46PM (#13887135)
Right. They're fishing because they need leads. It's not a complaint about the police doing their job, but that the method in which it is being done automatically casts suspicion on the people found. Investigators feel clever for thinking "No one but the perp, within reason, could've ever searched for these terms in this time." But that just begs the question.

Because the natural consequence of this "experiment" is to cast all subjects in doubt, you must have a methodology that actually selects for the criminal instead of just correlating really strongly. It's the same problem as the social sciences. Except this one comes with legal consequences.

Re:Police ask for whole city's Google searches, and a judge ... by euyyn on Thursday March 16, 2017 @03:52PM (#13888553)
> Investigators feel clever for thinking "No one but the perp, within reason, could've ever searched for these terms in this time."

Luckily, people are convicted when a judge or jury is convinced that the evidence points at them being guilty beyond any reasonable doubt. Not when an investigator feels clever.

Re:Police ask for whole city's Google searches, and a judge ... by rhizome on Thursday March 16, 2017 @05:18PM (#13889271)
~95% of all convictions derive from plea bargains, and a not-insignificant portion (2-8%) of those are estimated to be innocent.[1]

So, we have a system where an investigator can indeed "feel clever," produce a defendant based on sketchy evidence, who then pleads out for any number of reasons. Neither judge nor jury ever hears what the evidence is in these cases. Ta da: the immaculate conviction.

1. https://www.themarshallproject.org/2014/12/26/plea-bargainin...

Re:Police ask for whole city's Google searches, and a judge ... by paulddraper on Thursday March 16, 2017 @06:56PM (#13889912)
And this is a problem that go away with less evidence collection?
Re:Police ask for whole city's Google searches, and a judge ... by rhizome on Friday March 17, 2017 @02:38AM (#13892020)
No, I'm saying that the plea system is the constant. The amount of evidence collected is often irrelevant.
Re:Police ask for whole city's Google searches, and a judge ... by noobiemcfoob on Thursday March 16, 2017 @04:32PM (#13888897)
If only.
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @02:04PM (#13887322)
> If someone disappears, their spouse gets put on the list of persons of interest.

That's because there is a relationship and historically the occasional spouse has been implicated in the murder of their other half.

> So do the last people seen with them.

Proximity means they might be witnesses, not immediately suspects.

> For each one, the police see if there is a case to be made, or if they known anything that could help, and then move on.

Yes. But they don't place everybody that was in a 10 mile radius around the crime scene on their list of suspects because they spoke the name of the victim out loud in the three weeks preceding the crime. And that's roughly the level this is at.

Re:Police ask for whole city's Google searches, and a judge ... by eh78ssxv2f on Thursday March 16, 2017 @02:39PM (#13887694)
> That's because there is a relationship and historically the occasional spouse has been implicated in the murder of their other half.

There is a relationship here too, although it is not exactly a marital relationship.

Re:Police ask for whole city's Google searches, and a judge ... by awinder on Thursday March 16, 2017 @01:59PM (#13887265)
> The police are looking for a list of persons of interest to start with.

Then maybe they should ask Google "of this list of people, did any of them search for this person?". Not "give us the list of the entire town's search history, we'll narrow it down to a few people and then totally just throw the rest of this very fascinating data out, pinky-swear".

[dead]
Re:Police ask for whole city's Google searches, and a judge ... by dang on Saturday March 18, 2017 @02:33AM (#13900199)
Comments like this will get your account banned, so please don't.
Re:Police ask for whole city's Google searches, and a judge ... by omginternets on Thursday March 16, 2017 @04:08PM (#13888686)
>No matter how you spin it, you will look suspicious.

>Case closed, crime solved, right?

No. Not by a long shot.

Your analysis omits the fact that the standard for investigating a person is different from the standard for convicting a person.

The remainder of your reasoning -- to borrow a turn-of-phrase from legal theory -- is fruit of the poisoned tree.

Re:Police ask for whole city's Google searches, and a judge ... by bdowling on Thursday March 16, 2017 @10:22PM (#13890863)
Do you happen to have a link to more info about the NL case where the judge excluded the camera evidence?
Re:Police ask for whole city's Google searches, and a judge ... by jacquesm on Thursday March 16, 2017 @10:41PM (#13890946)
I've been searching myself silly for the last couple of hours but can't find a thing. I will ask a lawyer friend of mine tomorrow who is much more adept at finding old cases than I am. Given the amount of hoopla over this I figured it should be trivial to dig up a news link but even the internet is not 'rot proof'.