News for hackers. Stuff that matters.
Re:Suspect can’t be compelled to reveal “64-character” passw... by syshum on Sunday November 24, 2019 @06:11AM (#21619674)
The problem for that is in the US, such laws would be unconstitutional under the 4th, 5th and 1st amendments

Just like Australia's Gun Ban is unconstitutional under the 2nd Amendment

Re:Suspect can’t be compelled to reveal “64-character” passw... by mehrdadn on Sunday November 24, 2019 @07:00AM (#21619879)
First, the 5th amendment protection against revealing a password seems completely wrong to me, i.e. I'd expect it to get overturned at some point. The point of the 5th amendment was to prevent forced confessions, not to somehow block access to evidence (which the justice system is otherwise entitled to).

Second, the protection doesn't apply if you're given immunity (because, again, it's not about blocking access to evidence). So if the court provides immunity and then orders you to reveal the password and you claim you can't because you don't know... the 5th amendment will not help you.

Re:Suspect can’t be compelled to reveal “64-character” passw... by LegitShady on Sunday November 24, 2019 @07:29AM (#21620001)
>First, the 5th amendment protection against revealing a password seems completely wrong to me, i.e. I'd expect it to get overturned at some point. The point of the 5th amendment was to prevent forced confessions, not to somehow block access to evidence (which the justice system is otherwise entitled to).

This slope is arbitrary and slippery. There's a reason to stand on the extreme principle here. There are very few violations into a person's right to remain silent that cannot be weaponized.

I'd rather not empower the next arbitrary group of political appointees to wield that kind of power just because you think "the justice system is entitled to" evidence.

That sort of short term thinking without long term consequences does massive damage. Think harder.

Re:Suspect can’t be compelled to reveal “64-character” passw... by pas on Sunday November 24, 2019 @08:02AM (#21620159)
Otherwise entitled in this context means that there's a warrant, court order, reasonable suspicion, etc. that establishes the existence of evidence and that the defendant is completely able even if not willing to produce it.

Of course, where the line is blurry, is as you rightfully note, beyond a point no justice system can be certain that the defendant really still has access to whatever evidence, be it some part of their mind's contents (so a memory, the location of a body, a password, a face), and even if somehow we know they had access but now they don't it'll be impossible to determine intent. (So destruction of evidence cannot really stand when it comes to forgetting things. Unless, maybe if the defendant caused brain damage to themselves intentionally.)

Re:Suspect can’t be compelled to reveal “64-character” passw... by jagged-chisel on Sunday November 24, 2019 @09:15AM (#21620551)
> ... establishes the existence of evidence ...

This phrase doesn't sit well with me. They cannot establish the existence of evidence without having found it. They can't find it without a proper search. They can't execute a proper search with a warrant or reasonable suspicion.

The existence of evidence is established once it's found and documented.

Edited to add: if they can arbitrarily establish the existence of evidence, and then don't find it, then "obviously" the suspect is a no good dirty rotten evidence destroyer.

Re:Suspect can’t be compelled to reveal “64-character” passw... by pas on Sunday November 24, 2019 @01:39PM (#21622335)
That's why I said it's always a matter of certainty. It's up to the judge, the (grand jury), the tribunal, etc.

It's not arbitrary. It depends on other pieces of legal proof, like statements from witnesses, other material evidence, etc. For example in case of hidden partitions people usually get busted because forensics find data directly referring to it (eg. in caches, metadata, logs, thumbnails).

Re:Suspect can’t be compelled to reveal “64-character” passw... by LegitShady on Sunday November 24, 2019 @08:55PM (#21624866)
>It's up to the judge, the (grand jury), the tribunal, etc.

The judge has the power to let them search your property.

Nobody has the power to let them search your mind, and they can only do so by imprisoning you or otherwise depriving you of your rights.

The distinction between a search warrant and self incrimination is a big one. You should always have the right to say nothing.

If forensics and data know for sure you did something, the stuff in your mind is unnecessary. Either they have the weapon or not, so to speak. You shouldnt be placed in a position where the justice department "is entitled to" the knowledge in your head.

Re:Suspect can’t be compelled to reveal “64-character” passw... by LegitShady on Sunday November 24, 2019 @09:55AM (#21620752)
>there's a warrant, court order, reasonable suspicion, etc. that establishes the existence of evidence

Warrants dont establish existence of evidence. they just authorize the state to override your rights, because they convinced a judge. All of this is weaponizable.

The way to establish evidence is to have evidence. If you dont have evidence you haven't established it. Forcing you to divulge something in your head is to force you to give up evidence against yourself, and the ultimate trespass.

I can't think of a situation I'd authorize someone else to do that.

Re:Suspect can’t be compelled to reveal “64-character” passw... by pas on Sunday November 24, 2019 @01:44PM (#21622368)
No, warrants authorize searches/seizures.

I'm not agreeing with the practice, I just explained it, how pieces of evidence (and testimony) can legally establish that there's evidence that the defendant has ways to produce.

Re:Suspect can’t be compelled to reveal “64-character” passw... by LegitShady on Sunday November 24, 2019 @08:56PM (#21624872)
what you're suggesting is even worse - a court order to force someone to divulge some information under threat of jail. Unauthorized searches are an violation of rights but what you're suggesting is another level and on the same authority.

I dont want to live in your society. I don't want to empower anyone to do that to me, even if they claim they're only going to do it to criminals and bad guys.

The terms of service change.

Re:Suspect can’t be compelled to reveal “64-character” passw... by pas on Tuesday November 26, 2019 @03:11AM (#21636431)
I'm not "suggesting". It's the current reality. Numerous articles over the past years demonstrated it. (This was already linked here https://en.wikipedia.org/wiki/H._Beatty_Chadwick )
Re:Suspect can’t be compelled to reveal “64-character” passw... by lmm on Sunday November 24, 2019 @08:28AM (#21620276)
> First, the 5th amendment protection against revealing a password seems completely wrong to me, i.e. I'd expect it to get overturned at some point. The point of the 5th amendment was to prevent forced confessions, not to somehow block access to evidence (which the justice system is otherwise entitled to).

There's already established case law that the 5th protects case combinations; this is the reason why American safes use combinations while those everywhere else in the world use physical keys. Encryption keys are very similar on the face.

Re:Suspect can’t be compelled to reveal “64-character” passw... by nerdponx on Sunday November 24, 2019 @09:07AM (#21620498)
What happens if important evidence is inside a safe, and the combination was written on a piece of paper that is now lost or destroyed? I imagine eventually the safe would be destroyed in order to access the evidence, but is the owner of the safe liable for withholding the evidence even if they don't know the combination?
Re:Suspect can’t be compelled to reveal “64-character” passw... by feanaro on Sunday November 24, 2019 @10:02AM (#21620798)
This is on to something as encryption is basically a practically unbreakable safe (which can only store information).

I find it completely natural that cannot put people in jail just for possessing something which may possibly be an unbreakable safe just because unbreakable safes happen to exist.

Re:Suspect can’t be compelled to reveal “64-character” passw... by syshum on Sunday November 24, 2019 @09:26AM (#21620603)
the Police can employ people to "crack" or other wise physically open the safe if they have a warrant.

The owner is not liable for withholding evidence, even if they know the combination as they are under zero legal requirement to tell the police the combination

Re:Suspect can’t be compelled to reveal “64-character” passw... by AnthonyMouse on Sunday November 24, 2019 @12:16PM (#21621771)
> The point of the 5th amendment was to prevent forced confessions, not to somehow block access to evidence (which the justice system is otherwise entitled to).

It's not just about forced confessions. It's about not putting people -- including innocent people -- into a situation where they have a powerful incentive to lie because silence is prohibited. Even innocent people may have secrets they don't want in the public record, and allowing them to say nothing is better for all parties than dishonesty. Revealing a password is no different. It saves everybody a lot of trouble and crime and immorality to be able to say nothing than to make up some nonsense about how the device belongs to some fictional person that law enforcement would then have to waste resources trying to track down, or worse yet some real innocent person who the person being compelled to testify would then have the incentive to divert blame to.

Moreover, the 5th amendment regularly does block access to evidence which the justice system is otherwise entitled to. If you're accused of committing a murder then the body of the murder victim is evidence which the justice system is otherwise entitled to. They can get a warrant to search your property and seize it if they find it. But the 5th amendment still doesn't allow them to compel you to tell them where it is.

> Second, the protection doesn't apply if you're given immunity (because, again, it's not about blocking access to evidence). So if the court provides immunity and then orders you to reveal the password and you claim you can't because you don't know... the 5th amendment will not help you.

Immunity has very little to do with not knowing. It makes no logical sense that providing immunity could allow you to tell them something you don't actually know. Consequently it makes no sense that providing immunity should allow them to punish you for not knowing. It could allow them to require you to tell them that you don't know, but what then? How do you expect them to prove that you didn't actually forget?

Re:Suspect can’t be compelled to reveal “64-character” passw... by syshum on Sunday November 24, 2019 @08:27AM (#21620270)
>the point of the 5th amendment was to prevent forced confessions

No the purpose of the 5th amendment was to prevent people from being forced to be a witness against themselves, that is why the 5th amendment says

"nor shall be compelled in any criminal case to be a witness against himself"

Forcing to revel what is in your mind (aka a password) is a clear and obvious violation of the 5th amendment, and I do not expect it to be over turned

>Second, the protection doesn't apply if you're given immunity

If they give you immunity then is no longer a case for which they can compel you to give up anything in the first place. Unless they are going after someone else in which case the 5th amendment did not apply in the first place.

I fail to see while this relevant to the discussion.

Re:Suspect can’t be compelled to reveal “64-character” passw... by ceejayoz on Sunday November 24, 2019 @09:35AM (#21620639)
> to prevent people from being forced to be a witness against themselves

Also known as a "forced confession"?

> If they give you immunity then is no longer a case for which they can compel you to give up anything in the first place. Unless they are going after someone else in which case the 5th amendment did not apply in the first place.

Two people committing a crime together.

Honestly and fully testifying against one's partner in a jointly commissioned crime would constitute a confession. Immunity allows that testimony.

Re:Suspect can’t be compelled to reveal “64-character” passw... by UncleEntity on Sunday November 24, 2019 @12:58PM (#21622069)
> Also known as a "forced confession"?

Not really -- you could be compelled to testify against yourself and not confess to a specific crime, the very fact there is even a trial presupposes one plead "not guilty".

Re:Suspect can’t be compelled to reveal “64-character” passw... by jtbayly on Sunday November 24, 2019 @11:07AM (#21621218)
This is why the whole debate is whether being forced to reveal a piece of information in your mind (aka the pass phrase) is testimonial in nature. Yes, the court may well be able to demand the evidence, but they cannot require you to testify against yourself.
Re:Suspect can’t be compelled to reveal “64-character” passw... by Zak on Sunday November 24, 2019 @05:38PM (#21623968)
There are situations the fifth amendment protects against other than forced confessions.

Here's a hypothetical example: you are accused of murdering your ex-lover. You witnessed the crime and know that the real killer is the chief of police. While disclosing those details could potentially implicate him, they will certainly prove that you know details of the crime, which implicates you. You don't think anyone will believe you, and the other evidence against you is weak (you didn't do it, after all), so you don't want to say anything until you're acquitted.

Re:Suspect can’t be compelled to reveal “64-character” passw... by dependenttypes on Sunday November 24, 2019 @11:02AM (#21621180)
Forced confessions... like providing the key to an OTP that makes it seem like your whole drive was filled with CP.

Even then, most encrypted data is indistinguishable from random data. Doing dd bs=1024 count=12345678 < /dev/urandom > childporn.aes on your own machine should not be an one-way ticket to jail. (and not to mention the cases where you have forgotten the password)