News for hackers. Stuff that matters.
Re:Agents raid home of fired Florida data scientist who buil... by shakna on Monday December 07, 2020 @07:20PM (#25339711)
> All authorized users use the same user name and password.

Well, if you want to prevent unauthorised access to your custom-built messaging system, this is not the way to do it. Proving who accessed it has become a huge forensic investigation at that point.

Saying anyone hacked a system with such a clear and simple single-point-of-failure doesn't exactly ring true. It might be true on a technical level, but you left the door wide open.

Re:Agents raid home of fired Florida data scientist who buil... by codys on Monday December 07, 2020 @07:33PM (#25339839)
It's also unclear how one could know it wasn't an authorized user who sent the message. ie: could be any of folks who are authorized who sent it.

Of course, they may have just asked all the authorized users, and had each of them deny it.

Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Monday December 07, 2020 @08:19PM (#25340336)
> Of course, they may have just asked all the authorized users, and had each of them deny it.

Or they could... check the logs, pull the IP, get a warrant, and get the account/ address associated with that IP.

This is basic stuff.

They got a warrant. Judges aren't going to issue a warrant based on asking a bunch of people if they sent a message.

Re:Agents raid home of fired Florida data scientist who buil... by blake1 on Monday December 07, 2020 @08:40PM (#25340531)
Have you ever read a warrant application? I have read a few, and they love to use the phrase "information and belief" to persuade the judge.

That's just a fancy way of saying "speculate," and judges don't seem to object.

We should see when the warrant application becomes public.

Re:Agents raid home of fired Florida data scientist who buil... by bigiain on Monday December 07, 2020 @11:09PM (#25341663)
> they love to use the phrase "information and belief"

Yep, often followed with "based on my training and experience".

Which is just a fancy way of saying "this is what the other cops in the lunchroom reckoned", and judges don't seem to object.

Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Tuesday December 08, 2020 @01:33AM (#25342522)
> We should see when the warrant application becomes public.

Don't have to wait, they updated the linked article with more details.

As I figured, they got her IP address from the logs.

Re:Agents raid home of fired Florida data scientist who buil... by an_opabinia on Monday December 07, 2020 @10:09PM (#25341251)
Another way to interpret it is, law and order types have been co-opted by Republicans, rather than the other way around. It shouldn't take a Dave Chapelle colorfully telling you it doesn't fucking matter that some Florida data scientist broke a dumb law when she was disclosing information implicating Republicans of incompetence.
Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Monday December 07, 2020 @08:48PM (#25340604)
Have you even bothered researching the Breonna Taylor case? The judge issued a warrant in spite of evidence clearly saying she's not guilty, and she's dead now.

Judges routinely issue warrants just because the good ol police officer man says it's totally ok and he'll get a nice lollipop for doing it.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @10:08PM (#25341249)
As I understand it, the warrant for Taylor's house had nothing to do with Taylor herself, but with another person believed to be using her house. Her guilt or innocence were never at issue.
Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Monday December 07, 2020 @10:15PM (#25341303)
The issue is: the evidence they gathered was that her home was specifically NOT part of any drug rings. The judge went ahead and issued a warrant even though all actual evidence said her house was not involved. Cops lied and said it totally was, and the judge just said "sure thing bros, we're all such buds."

My point is just because a judge issues a warrant doesn't actually mean anything at all. It has the same factual basis as me saying the sky is actually made of M&M's and judge granting a decree that it must be true because I said it.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @10:18PM (#25341319)
Aren't magistrate judges supposed to take the police's word for this? You can't have an adversarial process for getting a search warrant. The remedy for broken warrants happens at trial, with motions to exclude evidence.

There was grave misconduct in the Taylor case! Police shouldn't routinely be assaulting homes with weapons drawn. My issue is just the process you're describing here.

Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Monday December 07, 2020 @10:21PM (#25341349)
I'm mainly commenting on the way up parent here:

"They got a warrant. Judges aren't going to issue a warrant based on asking a bunch of people if they sent a message."

Judges absolutely issue warrants all the time just for the hell of it. The very up parent seems to be indicating that some sort of due process was done because "oh, a judge issued a warrant" and I'm emphatically stating: a judge issuing a warrant means as much as me saying the sky is made of M&M's - just the ravings of irrelevant madmen in the face of actual facts.

Edit: I will say - the warrant process should absolutely be adversarial. Justice is to be blind. Which means if a crackhead and a cop come to a judge and requests the legal authority to break into a home with lethal force, the judge should weigh both requests the same. That's the intent of our legal system - the executive does what it thinks it's supposed to do in light of what the legislative has passed, while the judicial watches them to make sure they don't screw up.

Instead they all get together as buddies and stomp their collective boots into the skull of their fellow citizens.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:04PM (#25341634)
This isn't realistic. Warrants occur relatively early in the investigative process and are often the first indication a target has that they're under investigation. An adversarial warrant process would simply result in the destruction of most evidence.

A good way to prosecute your side of this argument would be to point out any country in the world that has an adversarial warrant system and how well it works. I'm unfamiliar with any. Much of Europe doesn't even have the exclusionary rule, meaning that evidence of crimes obtained under false or broken warrants remain admissible.

If your argument is simply that most police shouldn't be armed, you'll get no argument from me.

Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Monday December 07, 2020 @11:31PM (#25341821)
To my knowledge, much of the rest of the developed world doesn't have a problem with cops being able to lie under oath with no punishment. The non-adversarial systems you reference rely on the confidence that when a cop gets caught knowingly lying to get a warrant, that cop is fucked. Here in the US, it's just another Tuesday morning at the coffee shop with the boys.

On the destruction of evidence, this one has always baffled me - so is there evidence or not? Presumably when I go to a judge saying I need the legal authority to kill some babies at 3 AM because otherwise the evidence will be destroyed... I have enough evidence to justify killing those babies, right?

... So this begs the question... Why do I need authorization to kill babies at 3 AM? In case the suspects destroy more evidence? What was my evidence to kill babies to begin with? Just a hunch? Because a judge should absolutely shit on that, and it should be adversarial. A judge should laugh when evidence for a warrant request is "oh, I need the warrant because they'll destroy the evidence for me to request this warrant."

From my rough observation of the news for the past 20 or so years, the evidence of these crimes these babies died to protect has never been worth it. Maybe you know of a few where the death of a few babies were worth it because the crimes were so heinous. Every time I'm aware of - it's just been drugs, which could have been done in daylight hours, with no dead babies.

Now maybe this is your point about unarmed police. I'm not sure. But a warrant tends to be a fuck ton of latitude (as I've said in prior comments - judges just hand them out like candy), so just send in cops who want to kill with their bare hands and you'll get the same result, in my opinion.

I agree I'm being extreme, but that's where we are today. We tried the whole "let's just all get along and try to fight crime together" method, and it turns out cops will just lie to judges and go kill kids. This isn't me doing a slippery slope "what if" scenario. This has already happened. A bunch of times. Too many times in my opinion.

So now it's time for us to take away everyone's toys until they can show us they can all be good.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:35PM (#25341852)
I don't really understand how this is a response to what I said. I pointed out that much of Europe doesn't even have the exclusionary rule: that if the police obtain evidence through misconduct, prosecutors are allowed to use it at trial. You responded with 6 paragraphs about killing babies.

Be specific. What country has better rules regarding warrants than the US? This should be easy, because it seems hard to believe that we could be the best country in the world at this process. Then we can go look at how that country handles things, in specifics, and learn something.

Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Tuesday December 08, 2020 @12:46AM (#25342312)
Honestly, I've typed out a few replies, and I've got nothing.

Basically, I'm saying I don't trust cops because they kill 1,100 people a year. That's it. That's my whole argument. Just 1,100 lives. Every year.

You're saying that's not relevant to what we're talking about and let's look at how European countries seem fine with their more lax evidentiary protocols, legal systems, and trusting cops. Even though their cops only kill 50 people a year (at equivalent population rates).

I really don't have a "better" warrant system to propose other than an adversarial one because at the end of the day I don't trust cops, and you're advocating for a legal system that intrinsically does. This is me saying "hey, blue is actually yellow" and you saying "no, blue is blue." Our perceived realities are too far apart.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @12:52AM (#25342336)
You haven't proposed an adversarial system. That would involve details, or an example of some country or system that uses one, so we can get the details from there. It's not interesting to simply wish that the warrant process was adversarial, because it doesn't appear realistic to have such a system; you might just as well abolish investigations altogether.

I'm not interested in your feelings about the police killing people, because I share them, and there's nothing for us to discuss about it.

I am interested in the provenance of warrants, because they're central to the actual story we're commenting on.

Re:Agents raid home of fired Florida data scientist who buil... by aperrien on Tuesday December 08, 2020 @12:14PM (#25348204)
I think that you're both arguing a bit past each other. Fountainofage is stating that the situation as it stands is untenable and needs to change, and they've given several good reasons as to why. You are asking for examples of a direction for society's legal systems to change to, to fix the problem.

Basically you both are in violent agreement, I think.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @01:46PM (#25349645)
No, we're not. We agree that police barging into homes with guns drawn and shooting people is a problem. We violently disagree about the solution: I think we should disarm most police, eliminate qualified immunity, have states license police officers, and require police officers to carry insurance. 'Fountainofage wants to eliminate search warrants.
Re:Agents raid home of fired Florida data scientist who buil... by tatersolid on Tuesday December 08, 2020 @10:39PM (#25355043)
> have states license police officers

I’m pretty sure this is the case in most if not all US jurisdictions. You have to pass police Academy and annual or at least somewhat regular proficiency, physical, and written tests to ensure you are competent.

It not like you can just get hired as a cop because you have a cop friend.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Wednesday December 09, 2020 @12:41AM (#25355716)
It is absolutely not the case. You generally have to pass a competency test, and, having done that, your retention is a matter for your local police force and governed by its collective bargaining agreement. Some states can "decertify" police officers, mostly for committing a felony, which is a batshit standard.

The point of licensing is to bypass the CBA; the state can revoke a license --- for reasons other than "failed an exam" --- and having done so, the local department cannot retain the officer regardless of the results of labor arbitration.

This is something Illinois is working on right now, at the behest of the Lightfoot administration, though I haven't seen much news on progress. It's a big deal.

Re:Agents raid home of fired Florida data scientist who buil... by koolba on Monday December 07, 2020 @10:59PM (#25341604)
> Justice is to be blind. Which means if a crackhead and a cop come to a judge and requests the legal authority to break into a home with lethal force, the judge should weigh both requests the same.

A judge does not have the power to grant a random private citizen the right to break into someone else’s home, with or without legal force, under any circumstance. Even a court order to allow breaking into your own property, say to evict squatters or tenants, would involve law enforcement. The judge can’t just deputize you like it’s the Wild West.

Re:Agents raid home of fired Florida data scientist who buil... by fountainofage on Monday December 07, 2020 @11:08PM (#25341658)
That's my point - not that a judge should grant a warrant to a crackhead, but that they should act as if they're granting a warrant to a crackhead. So basically the opinions, social standing, and claims of the entity requesting the warrant are irrelevant. Only the actual evidence should be considered by a judge when granting a "right to wantonly kill" because that's exactly what a warrant is at the end of the day. It should be taken very seriously, and unfortunately, it's not.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Monday December 07, 2020 @11:13PM (#25341689)
> Aren't magistrate judges supposed to take the police's word for this?

No. They have to convince a judge who is neutral in the matter. They have to have probable cause the criminal activity has/is occurring at the stated location the warrant is requested to be issued for. And the officers are under oath for this process, yet we see very few repercussions for a breakdown in this process. The affiant is open to persecution for perjury. The officers in the Taylor case lied by listing her and two others on the warrant. [0]

It's not an adversarial process, it's one of fact based decision making. Why would the judge blindly trust or mistrust the officer? The judge should trust the facts being presented are true, but that doesn't constitute a rubber stamp. And, as stated, if said officer lies about that evidence they should be prosecuted appropriately. Facts are often questioned to ascertain validity, that clearly did not happen in her case.

[0] https://www.wave3.com/2020/05/12/breonna-taylor-shooting-war...

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:19PM (#25341724)
Right, the facts presented to the judge, taken as stated, have to add up to cause for a search. Judges shouldn't ignore a paucity of factual assertions. I don't doubt that many do. But short of an adversarial process, which I don't think can work with warrants, I don't know what you can do to mitigate a police officer fabricating evidence.
Re:Agents raid home of fired Florida data scientist who buil... by tremon on Tuesday December 08, 2020 @04:57AM (#25343572)
This is becoming nothing but a semantic problem. Where lies the line between "judges shouldn't ignore a paucity of factual assertions" and "judges should be adversarial towards a warrant application"?

But to me, the more important question is "what are the ramifications for subverting the intended warrant process"? It seems that both sides here are arguing that the warrant process should be based on veracity and proportionality, and it regularly isn't. So what process oversees and corrects the rubber-stamping of warrants?

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @09:54AM (#25345921)
In the US, the major ramification of exploiting misconduct to get warrants is that all the evidence stemming from that warrant is excluded from the trial, which is a rule we have that is not common in the rest of the world.
Re:Agents raid home of fired Florida data scientist who buil... by dragonwriter on Monday December 07, 2020 @11:16PM (#25341708)
> The remedy for broken warrants happens at trial, with motions to exclude evidence.

But merely broken (if not fraudulently obtained) warrants aren't a basis for excluding evidence, because of the good faith exception to the exclusionary rule.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:19PM (#25341730)
That's a good point.
Re:Agents raid home of fired Florida data scientist who buil... by ClumsyPilot on Tuesday December 08, 2020 @07:31AM (#25344340)
> "Aren't magistrate judges supposed to take the police's word for this?"

What do you imagine is the point of having one? It's to hold police accountable and Judge if what he/she being told is potentiality total BS.

Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Monday December 07, 2020 @11:21PM (#25341752)
This is untrue, Taylor was listed on the warrant no different than the other two persons. [0][1]

[0] https://www.wave3.com/2020/05/12/breonna-taylor-shooting-war... [1] https://www.wisconsinrightnow.com/wp-content/uploads/2020/09...

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:27PM (#25341788)
She's listed because it's her residence. Read the warrant, and compare the language in it about her to the language of the other people suspected of using the building.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Monday December 07, 2020 @11:38PM (#25341885)
She is listed as part of the "and/or on the person or persons of", I did.
Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:46PM (#25341945)
Note how there's no criminal history associated with her, and none of her behavior is a predicate to the warrant. Compare to what the warrant says about the other occupants of the building.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Monday December 07, 2020 @11:55PM (#25342011)
I'm not sure you read the warrant correctly. They clearly state they've seen Taylor's car in front of the 2424 Elliott address. That wasn't the address issued for the warrant. This is an implication being made. The warrant is issued for 3003 Springfield.

Maybe go reread it.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @12:01AM (#25342062)
You helpfully linked to it upthread. I'm comfortable that I've summarized it accurately.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Tuesday December 08, 2020 @12:11AM (#25342118)
You've summarized it inaccurately unfortunately. Taylor was part of the warrant, not simply because it was her address. This has been publicly put to bed:

"The connection with Glover is an important piece in this puzzle. The narcotics investigation was not just going after Glover, but several people believed to be involved in a drug trafficking ring. Police had reason to believe that Breonna Taylor had been involved because they believed that packages were being delivered to her apartment which Glover picked up and he said that she was in possession of several thousand dollars that belonged to him." [0]

This is readily apparent in the warrant.

And another, just to clarify. [1]

[0] https://clashdaily.com/2020/08/report-breonna-taylor-extensi... [1] https://www.usatoday.com/story/news/nation/2020/09/04/report...

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @12:13AM (#25342133)
Obviously she's "a part of the warrant". It's her house. I don't know what "Clash Daily" is; I read the original source, which you provided. It comported with what I'd already read about the case, which is that Taylor wasn't the target of the investigation. See also the NYT's coverage, asserting that Jamarcus Glover was the target.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Tuesday December 08, 2020 @12:17AM (#25342168)
They explicitly call out her car being at a different address, not her own, in the warrant. This implicates her with the other two. She is clearly a target of the warrant. You can find validation of this in the warrant and the follow on reports done by the police department. At this point you're pushing a false narrative pretty hard.
Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @12:21AM (#25342191)
She's a target of the warrant. It's her house. Glover was using her car. Of course she's a target of the warrant. Her guilt or innocence in drug trafficking had nothing to do with the warrant's issuance. She's not the target of the investigation. If I'd been renting a room in her house, I'd be a target of the warrant too.
Re:Agents raid home of fired Florida data scientist who buil... by windexh8er on Tuesday December 08, 2020 @07:35AM (#25344366)
Sorry, but she was the soft target of the investigation. As you (hopefully) know her house was only one of the warrants executed on that day.

From NPR: "The purpose of the raid on Taylor's home was to find evidence linking her to an ex-boyfriend, Jamarcus Glover, a convicted felon with a history of drug trafficking, according to court documents.

Police didn't find any.

Now it appears prosecutors attempted to tie Taylor to a life of crime after her death." [0]

Now color me sceptical, but that appears to be an interesting argument if she's not a target as you continue to incorrectly posit.

Please top spreading misinformation.

[0] https://www.npr.org/2020/09/02/908625259/prosecutors-plea-of...

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @09:55AM (#25345930)
Your own quote refutes the rest of your comment.
Re:Agents raid home of fired Florida data scientist who buil... by r00fus on Tuesday December 08, 2020 @07:24PM (#25353620)
That's even more worrisome.
Re:Agents raid home of fired Florida data scientist who buil... by olliej on Monday December 07, 2020 @11:15PM (#25341694)
What? the warrant had nothing to do with her house. The police broke into a home, and shot the occupants, and then arrested the one who survived for practicing his 2nd amendment right to use a gun to defend himself from criminals that were trying to murder him.
Re:Agents raid home of fired Florida data scientist who buil... by tfehring on Monday December 07, 2020 @09:36PM (#25340990)
Aren't the requirements for being a judge basically just (1) be a lawyer (2) get elected? I'd hazard a guess that the bar in terms of technical sophistication for a Tallahassee judge is not that high and that it wouldn't be inconceivable for police to sell them a story about a scary hacker stealing people's medical data.
Re:Agents raid home of fired Florida data scientist who buil... by zests on Monday December 07, 2020 @10:50PM (#25341547)
> I'd hazard a guess that the bar in terms of technical sophistication for a Tallahassee judge is not that high

I do wonder how much of the response to this post just begins with the assumption that red states are incompetent. If this had happened in a blue state no doubt the comments would be different. On the internet it's all ideology all the time.

Re:Agents raid home of fired Florida data scientist who buil... by tfehring on Monday December 07, 2020 @11:20PM (#25341735)
Florida is still a purple state and Wikipedia says Tallahassee is 2:1 Democrat:Republican. I'd have said the same about judges in most areas of the US that don't have a significant tech presence. I would not feel that way about a judge in, say, Austin.
Re:Agents raid home of fired Florida data scientist who buil... by runnr_az on Monday December 07, 2020 @09:49PM (#25341066)
You don’t even really need to be a lawyer in a lot of cases...
Re:Agents raid home of fired Florida data scientist who buil... by tedunangst on Monday December 07, 2020 @09:05PM (#25340750)
"The perpetrator used tor. Therefore it can only be this disgruntled employee."
Re:Agents raid home of fired Florida data scientist who buil... by neil_s on Monday December 07, 2020 @09:49PM (#25341071)
Per the article: "The FDLE investigator claims he determined through his "investigative resources" that an Internet Protocol, or IP, address associated with Jones's Comcast account was the source of the ESF-8 text message."
Re:Agents raid home of fired Florida data scientist who buil... by webmaven on Monday December 07, 2020 @10:07PM (#25341227)
> Per the article: "The FDLE investigator claims he determined through his "investigative resources" that an Internet Protocol, or IP, address associated with Jones's Comcast account was the source of the ESF-8 text message."

Comcast has this weird system that allows users to open their WiFi AP to other Comcast customers, in return for the ability to hop on to any other "open" Comcast AP.

AFAIK, Comcast made it opt-out.

So, someone could have driven by to use her AP specifically in order to implicate her.

Re:Agents raid home of fired Florida data scientist who buil... by jms703 on Monday December 07, 2020 @10:38PM (#25341470)
That is not how Comcast's wifi works. You'll find that when you connect to an Xfinity Wifi network in a subscriber's home, you're on a completely different network from their home network.
Re:Agents raid home of fired Florida data scientist who buil... by bigiain on Monday December 07, 2020 @11:14PM (#25341690)
How much would you bet against that when the cop 'determined through his "investigative resources"' the ip address of the guest Xfinity network still came back as 'associated with Jones's Comcast account' ???
Re:Agents raid home of fired Florida data scientist who buil... by jhayward on Tuesday December 08, 2020 @05:17AM (#25343647)
Are you claiming that the Comcast modem uses a different IP address for Comcast-network side of the NAT? That the modem has two routable addresses, one for the 'house', and one for the 'open' world?
Re:Agents raid home of fired Florida data scientist who buil... by tjohns on Tuesday December 08, 2020 @06:04AM (#25343855)
Yes, that is generally/approximately correct. I'm not sure precisely how it's implemented on the public side, but you're placed into a seperate VLAN that enforces the captive portal. Traffic from the public WiFi network is isolated from the subscriber's traffic.
Re:Agents raid home of fired Florida data scientist who buil... by ClumsyPilot on Tuesday December 08, 2020 @07:28AM (#25344314)
That does not mean it uses a different public IP address that communicate with the rest of the intermet, I have seen dozens of such public/private wifi systems, abd never seen one with a separate public IP
Re:Agents raid home of fired Florida data scientist who buil... by croon on Tuesday December 08, 2020 @07:27AM (#25344305)
That doesn't at all answer GPs question though. That they're isolated LANs doesn't at all answer what WAN address they use. If no other indication it probably uses the same.

I have multiple VLANs at home, and I only have one WAN IP.

Re:Agents raid home of fired Florida data scientist who buil... by compsciphd on Tuesday December 08, 2020 @12:06PM (#25348063)
https://www.reddit.com/r/Comcast/comments/67orc4/xfinity_wif...

for what its worth: claims to have tested and says they are different public IPs

Re:Agents raid home of fired Florida data scientist who buil... by webmaven on Wednesday December 09, 2020 @12:58AM (#25355787)
Okay, so what do you get if you lookup which customer is associated with the public IP?
Re:Agents raid home of fired Florida data scientist who buil... by tedunangst on Monday December 07, 2020 @10:12PM (#25341282)
Doesn't the open end of the wifi get a separate external IP?
Re:Agents raid home of fired Florida data scientist who buil... by jkhdigital on Tuesday December 08, 2020 @09:19PM (#25354569)
Yes, let’s start a new conspiracy theory with an unfalsifiable conjecture!
Re:Agents raid home of fired Florida data scientist who buil... by webmaven on Wednesday December 09, 2020 @01:00AM (#25355797)
It's falsifiable.
Re:Agents raid home of fired Florida data scientist who buil... by stainforth on Monday December 07, 2020 @09:48PM (#25341063)
It could be a false flag to result in this intimidation operation.
Re:Agents raid home of fired Florida data scientist who buil... by dariusj18 on Wednesday December 09, 2020 @10:27AM (#25359454)
Yeah, it would definitely be something I would think to do. It's not like Wi-Fi security is that tight either. I'm mostly baffled by the resources being put into this crime. There's no way that if this weren't politically motivated it would get this much effort.
Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Monday December 07, 2020 @07:37PM (#25339886)
> Proving who accessed it has become a huge forensic investigation at that point.

If you have some simple logging and a foolish "hacker", it's a pretty trivial investigation.

Re:Agents raid home of fired Florida data scientist who buil... by btilly on Monday December 07, 2020 @08:50PM (#25340622)
It can be a trivial investigation.

It is also a trivial piece of data to plant. Given the facts, I see no particular motivation for her to have sent the message. However I do see a motivation for the department to try to frame her. And they've already established a willingness to make stuff up.

And I'd also want to know more about the setup. What is the machine used for? What else is on it? How is the logging set up?

Given the general incompetence shown, I wouldn't be surprised if the machine needed to provide ingress is also one that is publicly accessible for downloading data from the public. With lots of stuff in unlogged POST requests. If so, they could indeed have a request from her close in time to when the message was sent. And it might be legitimately hard to figure out whether she was doing something authorized or not.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @10:11PM (#25341270)
Those sound like the kind of things you establish at a trial, right?
Re:Agents raid home of fired Florida data scientist who buil... by btilly on Monday December 07, 2020 @11:08PM (#25341654)
Not in the USA.

Our plea bargain system is so lopsided that 97% of criminal charges end with a guilty plea without a trial. Even if she is 90% sure of winning at trial, unless she has a million dollars lying around and a deathwish, it STILL isn't worth it to fight the system.

I first looked into this after Aaron Swartz's suicide. Every time I've looked since it has seemed even more broken.

This is bad news for anyone who cares about justice. And good news for any authorities who are trying to target someone that they don't like.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:17PM (#25341713)
That is not a remotely reasonable way of looking at the situation. Your odds in a criminal trial do not in fact reflect the likelihood that a random accused person will take a plea deal.

If we're discussing police charging into houses of people accused of nonviolent crimes armed to the teeth, we're on the same page. But otherwise, I'm not clear what your suggestion is here.

Re:Agents raid home of fired Florida data scientist who buil... by btilly on Monday December 07, 2020 @11:35PM (#25341856)
What is unreasonable about my way of looking at the situation?

Look at what happened to Aaron Swartz. If he lost at trial, he was facing a lifetime in jail. They were also seeking damages that he had no hope of paying because his finances had already been drained by the legal fight. A legal fight that was projected to cost over a million dollars more than already spent.

Or he could take a plea bargain. Which would have put him in serious debt, in jail for a few years, and made him a life-long felon.

Or he could commit suicide. Which, of course, he did.

In that surprisingly typical example, if his odds of winning were 90%, on average he spends as much time in jail if he chooses to fight. Which he couldn't afford to do. And you still have to accept that chance of losing your whole life in jail.

In that situation, I'd probably have accepted the plea bargain. No matter how much I believed myself to be in the right.

Given those incentives, it is somewhat surprising that 3% of people do choose to fight. But then again, that's down in the range of the portion of the population with serious mental illnesses.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @11:37PM (#25341874)
This is plainly false. Swartz's own lawyer believed, in writing, after Swartz's death, that had Swartz gone to trial and lost, he wouldn't even been given a custodial sentence, and you can look at the sentencing guidelines and see why he reached that conclusion. The prosecutors didn't demand a lifetime in jail; at their grimmest, most hardball state, they were suggesting (a laughable, given the guidelines, the fact that it was a first offense, and a non-remunerative crime) 7 years.

You wrote other things, and I'm sorry I didn't read them carefully, because I'm a nerd and a human and I can't get past "a lifetime in jail". I'll try to revisit later and respond to them, and wouldn't want to suggest my not responding to them is an indication that they aren't good points.

Re:Agents raid home of fired Florida data scientist who buil... by btilly on Tuesday December 08, 2020 @02:31AM (#25342828)
You can read https://web.archive.org/web/20120526080523/http://www.justic... to see that the prosecutor's press release in 2011 said, "If convicted on these charges, SWARTZ faces up to 35 years in prison, to be followed by three years of supervised release, restitution, forfeiture and a fine of up to $1 million."

That was before they added nine more felony counts on September 12, 2012. As techdirt said at the time in https://www.techdirt.com/articles/20120917/17393320412/us-go..., the theoretical amount that he could have been put away for was 50+ years with a fine of up to $4 million.

That's the lifetime that I was talking about.

The fact that they were seeking a far lesser conviction, didn't stop them from throwing around those figures. And I'm sure that Aaron Swartz had to think about those numbers.

Incidentally Aaron Swartz wasn't even the first programmer to commit suicide while being prosecuted by a team including Stephen Heymann. That dubious honor goes to Jonathan James in 2008.

All of this notwithstanding, the important point is this. For most of US history, plea bargains were illegal. The way that they now railroad people into pleading guilty en masse demonstrates that they should still be illegal. And the fact that our plea bargaining system is so lopsided means that the right to a fair trial is more theory than practice.

As a double check on that, consider https://innocenceproject.org/bad-drug-test-leads-to-wrongful.... Widely used roadside drug tests that are inadmissable in court have been found in practice to be wrong more than 1/3 of the time. And yet, 90% of people charged wind up accepting the plea bargain.

The state literally has no evidence that they can present in court. And knows that a lot of those people are actually innocent. But they all get railroaded.

Welcome to justice, American style.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @02:38AM (#25342877)
Yes, the DOJ lies in these press releases. Ken White, a former federal prosecutor, wrote a sort-of-famous blog post about this:

https://www.popehat.com/2013/02/05/crime-whale-sushi-sentenc...

35 years is a "whale sushi sentence". You have multiple ways of knowing it's false, if you dig in: again, Swartz's lawyer, the prosecutors own statements, and a straightforward reading of the sentencing guidelines (2B.1).

A particularly important detail of how sentencing works: charges group. The press releases often imply that you might serve time on every count, but in reality, in almost all circumstances, you serve the sentence associated with the most severe count.

The TechDirt article makes the same mistake. TechDirt has gotten better over the last few years; Mike Masnick got tight with the Ken White / Popehat scene, and I assume they get feedback now on legal stuff. But that article is exactly the kind of thing what White is talking about when he says that the media bears some culpability in people's misunderstanding of how sentencing works.

To be clear: all I'm litigating is whether Swartz faced a "lifetime" in prison --- or, for that matter, any double-digit-years sentence whatsoever. I'm not qualified to evaluate the sentencing guidelines, but my layperson read of the guidelines results in Swartz facing 1-2 years if he'd been convicted on everything. You shouldn't take my word for it at all, but do note that my reading lines up with what Swartz's attorney said as well.

Re:Agents raid home of fired Florida data scientist who buil... by btilly on Tuesday December 08, 2020 @03:04PM (#25350606)
You are right. I was remembering the press releases and not paying attention to the more detailed guidelines. (Side note. I've personally eaten at the restaurant that got shut down for serving whale meat.)

Still, the fact that prosecutors seek to create this confusion in the general public makes it likely that they seek to create it in defendant. And stressed out people who should know better often wind up with bad conclusions because stressed out people under pressure don't think well.

That said, Swartz's attorney told Swarts that they would be seeking 7 years. Your lay reading may say that they wouldn't get it. But the gap between what you hear from different sources is extreme. And once you're in front of a judge, I don't trust courts to do the right thing.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @05:00PM (#25351961)
The press releases are a real problem, and I don't understand what the DOJ gains by lying to the public about this stuff, since they are not in fact going to win any of these lurid fake maximum sentences, but they're setting expectations that they will.

Swartz had excellent counsel, federal criminal defense attorneys understand the sentencing guidelines the way we understand singly-linked lists.

I agree, strongly, that there is a massive power disparity between ordinary defendants and prosecutors. But I'm going to gingerly venture that you can't gauge the magnitude of that disparity by the number of cases that plead out. Some component of that is power imbalance, but the greater component of it is that law enforcement generally prosecutes lay-up cases. Many years of reading and listening to Ken White, who is no friend of the DOJ, leads me to believe this is even more true with federal prosecutions.

Re:Agents raid home of fired Florida data scientist who buil... by btilly on Tuesday December 08, 2020 @07:11PM (#25353508)
By contrast the example of Harris County convinces me that law enforcement prosecutes a lot of shaky cases that they know wouldn't hold up.

See https://www.texastribune.org/2017/03/07/report/ for how there is only one county in the country that actually double checks drug tests after someone has plead guilty. The result is that the one county alone manages to exonerate more people each year than the next three states combined.

There is no reason that I know of to believe that Harris County has an abnormal number of people wrongfully convicted. They are only unusual in figuring that out and turning them free later.

Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Tuesday December 08, 2020 @08:01PM (#25353952)
You're not wrong and I feel roughly about prosecutors the way I assume you do. All I'm saying is that the plea deal rate is not an especially good metric; even in optimal circumstances, most charges would plea out.
Re:Agents raid home of fired Florida data scientist who buil... by wglb on Tuesday December 08, 2020 @06:40PM (#25353169)
>If he lost at trial, he was facing a lifetime in jail.

This is very likely not true according to his very good attorney. He felt that there would be no custodial sentence, and that losing the case was not likely.

Re:Agents raid home of fired Florida data scientist who buil... by WaxProlix on Monday December 07, 2020 @10:18PM (#25341325)
Right, a fair and honest trial that you hold after seizing her property and assaulting her family in front of her with the full legal backing of the state. Seems good.
Re:Agents raid home of fired Florida data scientist who buil... by tptacek on Monday December 07, 2020 @10:32PM (#25341417)
I don't see how you're connecting the dots between executing a search warrant and "unfair trial".
Re:Agents raid home of fired Florida data scientist who buil... by zests on Monday December 07, 2020 @10:35PM (#25341441)
You do not see any motivation here for a Covid activist to use a shared login to send an emergency message? The motivation was to save 17k lives.
Re:Agents raid home of fired Florida data scientist who buil... by unityByFreedom on Monday December 07, 2020 @09:02PM (#25340726)
I agree, looks like a setup. She had already gone viral and didn't need more attention. Nothing gained, tons risked means she had no motive.
Re:Agents raid home of fired Florida data scientist who buil... by seasoup on Monday December 07, 2020 @07:48PM (#25340006)
With everyone sharing a single user name and password for access, I don't have a high level of confidence they have simple logging.
Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Monday December 07, 2020 @08:07PM (#25340213)
The fact that they were able to get a search warrant suggests they have some evidence pointing to her. The most obvious evidence is server logs.

It doesn't take a ton of expertise to set logging, most web services log access by default.

Re:Agents raid home of fired Florida data scientist who buil... by tremon on Monday December 07, 2020 @08:19PM (#25340334)
I'd say the most obvious is an old e-mail sent to her containing the username and password. Do we know for certain that the judge who issued the warrant was aware that the same username/password was repeatedly issued to different persons?
Re:Agents raid home of fired Florida data scientist who buil... by rascul on Monday December 07, 2020 @09:04PM (#25340735)
> The fact that they were able to get a search warrant suggests they have some evidence pointing to her.

Warrants do not require evidence, just a signature.

Re:Agents raid home of fired Florida data scientist who buil... by shakna on Monday December 07, 2020 @07:45PM (#25339969)
> If you have some simple logging and a foolish "hacker", it's a pretty trivial investigation.

The system is Internet-exposed. Even proving the user is in the country that you think they are is nontrivial.

Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Monday December 07, 2020 @08:04PM (#25340181)
> The system is Internet-exposed. Even proving the user is in the country that you think they are is nontrivial.

If you run an internet exposed service and you log IP addresses and have the ability to issue a warrant, it is entirely trivial to trace a request back to a specific house.

There are a lot of ways to obfuscate your IP address, but if you don't know how to cover your tracks, it's easy to get caught.

Re:Agents raid home of fired Florida data scientist who buil... by shakna on Monday December 07, 2020 @08:13PM (#25340278)
> If you run an internet exposed service and you log IP addresses and have the ability to issue a warrant, it is entirely trivial to trace a request back to a specific house.

Having an IP address alone is not generally probable cause enough to get a warrant, because they are regularly rotated, and shared, across geographic areas. And that's assuming nothing proxying that connection at all.

Re:Agents raid home of fired Florida data scientist who buil... by ogre_codes on Monday December 07, 2020 @08:25PM (#25340396)
> Having an IP address alone is not generally probable cause enough to get a warrant, because they are regularly rotated, and shared, across geographic areas.

It might not be enough to convict her, it is enough to get a warrant. While they do rotate, ISPs do this with law enforcement a fair amount and I'm pretty sure they keep track of who owns which IP at any given moment.

> And that's assuming nothing proxying that connection at all.

A clever knowledgeable person would proxy, most people wouldn't know how. This is why I said it would be a foolish hacker. It's also possible someone else tapped into her wifi and did it. Or maybe there was no IP.

I'm just suggesting what is the most obvious piece of evidence which a judge would accept to grant a warrant here.

Re:Agents raid home of fired Florida data scientist who buil... by tzs on Monday December 07, 2020 @11:39PM (#25341891)
It might not be enough to get an arrest warrant, but it could be enough for a search warrant.

Find out the ISP that owns the address, ask the ISP what customer it was assigned to at the time in question, and while that doesn't tell you who was using it for the particular accesses you are investigating (it could be anyone in the house at the time, or someone outside using that house's WiFi, or someone from anywhere in the world using malware installed on a computer in the house), it does tell you that that house has a decent chance of having relevant evidence, and that will probably be enough to get a warrant to go look for that evidence.

Re:Agents raid home of fired Florida data scientist who buil... by mypalmike on Monday December 07, 2020 @09:59PM (#25341159)
Yes IP addrs are shared and rotated, etc.

That does not negate the fact that an ISP can trivially correlate a time-stamped IP addr with a specific user.

Re:Agents raid home of fired Florida data scientist who buil... by jonstewart on Monday December 07, 2020 @09:08PM (#25340772)
Is this merely an assertion or do you have evidence to back up that this isn’t enough for probable cause? I believe a whole lot of people have been served search warrants due to ISP logs.
Re:Agents raid home of fired Florida data scientist who buil... by shakna on Monday December 07, 2020 @09:21PM (#25340868)
An ISP log contains more than just an IP address, they contain customer information as well. And to obtain that log the ISP either has to cooperate, or the police have to get another warrant. The IP address by itself isn't enough to get the warrant to raid a house.
Re:Agents raid home of fired Florida data scientist who buil... by rorykoehler on Monday December 07, 2020 @11:32PM (#25341830)
If that is the case the people who green lit this design should be culpable for gross negligence.