News for hackers. Stuff that matters.
Re:Hackers gaining power of subpoena via fake “emergency dat... by stingraycharles on Tuesday March 29, 2022 @03:57PM (#30847585)
All of which makes me wonder, and this being HN, wouldn’t it make so much sense of law enforcement agencies start signing these kind of requests with verifiable public keys?

It seems like such a trivial problem from a technology point of view, it makes me believe it’s mostly an organizational problem.

Re:Hackers gaining power of subpoena via fake “emergency dat... by istjohn on Tuesday March 29, 2022 @04:21PM (#30847860)
At the very bottom of the article:

8<--------------------------------------------

The current situation with fraudulent EDRs illustrates the dangers of relying solely on email to process legal requests for highly sensitive subscriber data. In July 2021, a bipartisan group of U.S. senators introduced new legislation to combat the growing use of counterfeit court orders by scammers and criminals. The bill calls for funding for state and tribal courts to adopt widely available digital signature technology that meets standards developed by the National Institute of Standards and Technology.

“Forged court orders, usually involving copy-and-pasted signatures of judges, have been used to authorize illegal wiretaps and fraudulently take down legitimate reviews and websites by those seeking to conceal negative information and past crimes,” the lawmakers said in a statement introducing their bill.

The Digital Authenticity for Court Orders Act would require federal, state and tribal courts to use a digital signature for orders authorizing surveillance, domain seizures and removal of online content.

8<--------------------------------------------

Re:Hackers gaining power of subpoena via fake “emergency dat... by stingraycharles on Tuesday March 29, 2022 @05:05PM (#30848350)
I should have done a better job at reading the article, thanks for this.
Re:Hackers gaining power of subpoena via fake “emergency dat... by verve_rat on Tuesday March 29, 2022 @04:21PM (#30847861)
From the end of the article:

The current situation with fraudulent EDRs illustrates the dangers of relying solely on email to process legal requests for highly sensitive subscriber data. In July 2021, a bipartisan group of U.S. senators introduced new legislation to combat the growing use of counterfeit court orders by scammers and criminals. The bill calls for funding for state and tribal courts to adopt widely available digital signature technology that meets standards developed by the National Institute of Standards and Technology.

Re:Hackers gaining power of subpoena via fake “emergency dat... by mcbutterbunz on Tuesday March 29, 2022 @04:06PM (#30847692)
I agree that it does seem like a trivial problem that is mostly organizational. There are nearly 18,000 police departments in the US. Standardizing anything across a subset these and getting approval from the judicial system just seems like a nightmare.

This seems like one of those issues that is solved only when someone is murdered and a law is written after their name.

Re:Hackers gaining power of subpoena via fake “emergency dat... by ozfive on Tuesday March 29, 2022 @04:15PM (#30847796)
Let's add Blockchain to this so warrants are verifiable on a private Blockchain.
Re:Hackers gaining power of subpoena via fake “emergency dat... by ozfive on Sunday April 10, 2022 @04:28AM (#30975328)
/s