Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Judge Rules Man Cannot Be Forced To Decrypt HD

Posted by kdawson on Tue Aug 19, 2008 05:21 PM
from the cold-dead-fingers dept.
I Don't Believe in Imaginary Property writes "In Vermont, US Magistrate Judge Jerome Niedermeier has ruled that forcing someone to divulge the password to decrypt their hard drive violates the 5th Amendment. Border guards testify that they saw child pornography on the defendant's laptop when the PC was on, but they made the mistake of turning it off and were unable to access it again because the drive was protected by PGP. Although prosecutors offered many ways to get around the 5th Amendment protections, the Judge would have none of that and quashed the grand jury subpoena requesting the defendant's PGP passphrase. A conviction is still likely because prosecutors have the testimony of the two border guards who saw the drive while it was open." The article stresses the potential importance of this ruling (which was issued last November but went unnoticed until now): "Especially if this ruling is appealed, US v. Boucher could become a landmark case. The question of whether a criminal defendant can be legally compelled to cough up his encryption passphrase remains an unsettled one, with law review articles for the last decade arguing the merits of either approach."

Update: 08/19 23:49 GMT by KD : Several readers have pointed out that this story in fact did not go unnoticed.
+ -
story

Related Stories

[+] Your Rights Online: Encryption Passphrase Protected by the 5th Amendment 537 comments
Takichi writes "A federal judge in Vermont has ruled that prosecutors can't force the defendant to divulge his PGP passphrase. The ruling was given on the basis that the passphrase is protected under the 5th amendment to the United States Constitution (protection against self-incrimination)." The question comes down to, is your password the contents of your brain, or the keys to a safe.
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Ethanol-fueled (1125189) * on Tuesday August 19 2008, @05:28PM (#24665437) Homepage
    From TFA:

    "thousands of images of adult pornography and animation depicting adult and child pornography."

    I know that TFA is about encryption and the rights to passwords but I think the phrase above is far more interesting. That quote could be misleading, but what if the Border Enforcers didn't find any photographs or videos(hell, any evidence at all)of real human child exploitation?

    If they are able to legally get the key and crack the drive, and all they found was animation, then maybe they should just give him a warning and and call him a "perv"...especially if he has "thousands" of files and not a single one is "real".

    By the way, those of you who fantasize about your wife or girlfriend in a schoolgirl outfit are also pervs :)

    • by hkgroove (791170) on Tuesday August 19 2008, @05:30PM (#24665477) Homepage
      What does that make us who may have a girlfriend who dress in school girl outfits for us?
    • by Anonymous Coward on Tuesday August 19 2008, @05:45PM (#24665683)

      http://en.wikipedia.org/wiki/PROTECT_Act_of_2003 [wikipedia.org]

      I knew that I read this somewhere... Prohibits computer-generated child pornography when "(B) such visual depiction is a computer image or computer-generated image that is, or appears virtually indistinguishable from that of a minor engaging in sexually explicit conduct; (as amended by 1466A for Section 2256(8)(B) of title 18, United States Code).

    • by Aaron England (681534) on Tuesday August 19 2008, @05:49PM (#24665749)
      The prohibition of virtual child pornography was overturned in the United States with Ashcroft v. Free Speech Coalition (2002). It is still illegal in the European Union however.
    • by Anonymous Coward on Tuesday August 19 2008, @05:54PM (#24665841)

      By the way, those of you who fantasize about your wife or girlfriend in a schoolgirl outfit are also pervs

      What I wear while fantasizing about my wife is none of your concern.

      • by vonmeth (656965) * on Tuesday August 19 2008, @05:44PM (#24665657)
        This is incorrect if you are speaking of the United States.
        http://en.wikipedia.org/wiki/Ashcroft_v._Free_Speech_Coalition [wikipedia.org]
        • by davester666 (731373) on Tuesday August 19 2008, @06:13PM (#24666057) Journal

          Yes, the law is that the image must of of a 'real' child for it to be child-porn. But last year I was reading an article where prosecutors were switching from having experts go on the stand to 'prove' that the images are real, to just saying that the jury is competent to decide if the image is real or not [even though everyone knows that CG images can be so realistic that it can be difficult/impossible for an expert in digital imagery to determine if it's 'real' or not]. So, basically prosecutors are going for jury-sympathy, that the guy is a perv and should be locked away, whether or not the image is CG. Not that I have a problem with this, as this is the kind of distinction that makes the problem worse, but it can also wind up dragging in 'artistic' images as well.

          • by Anonymous Coward on Tuesday August 19 2008, @06:38PM (#24666265)
            -That is correct. I saw a real underage girl dressed in a school uniform being raped by a tentacle alien.

            -So your honor, this proves aliens do exist and the government is covering it up!
      • by Anonymous Coward on Tuesday August 19 2008, @05:46PM (#24665701)

        Naah. Society has lost it's mind when it comes to children, period. There's some sort of popular myth that started with the Baby Boomer generation that children need to be protected from everything. I'm not saying that sexual abuse of a child is ever right, but I'm saying that we have come to hold this purported "innocence" as sacrosanct, much to the detriment of society in general, as we have raised a generation of kids unable to deal with even getting a job on their own [msn.com]. The sooner we realize that kids don't need coddled, and need to be educated, this shit will go away by itself for a large part.

        I'd love to post this signed in, but I'm afraid that in the current climate, people will start hunting me down as some kind of pedophile (which is the new version of the word "witch", "commie", or "fag", depending on what era you're from). An unassailable accusation that you have no hope in hell of defending yourself against, even if there is no truth to it.

        • by Smauler (915644) on Tuesday August 19 2008, @06:13PM (#24666051)

          You're a true anonymous coward. I'm perfectly happy saying that the entire system is completely screwed, and I'll be damned if I'm going to become anonymous.

          An example of the absolutely screwed up laws in the UK : It is perfectly legal for anyone to screw a 16 year old girl, any way they want. However, if after they banged her every which way, they drew a picture of her naked and gave it to her, they can be done for distributing child pornography and put away for god knows how many years. I'm perfectly happy to say that this is fucked up legislation, and if you're not happy to come out and say that publically, then you're part of the problem.

          Before you say this could never happen, something like this did happen somewhere in the US (I don't remember any exact details). It was a state where the age of consent was 16, and two 17 year old partners got busted for sending naked images of _themselves_ to each other. They got community service and put on the sexual offenders register for life. This is a farce, and the more people who say it is a farce, the quicker it will get fixed.

      • by Gregg M (2076) <greggmc.optonline@net> on Tuesday August 19 2008, @05:54PM (#24665833) Homepage

        Actually, child pornography is such a witchhunt that even animated child pornography is illegal.

        Actually, It's not. Here's a quote from Wikipedia's listing under Child pornography [wikipedia.org].

        Child pornography may be simulated by the use of computers[13] or adults made to look like children.[14] For simulated child pornography that is produced without the involvement of children, there is some controversy regarding whether or not such simulated child pornography is abusive to children. The legal status of simulated or "virtual" child pornography varies around the world; for example, it is legal in the United States, it is illegal in the European Union, and in Australia its legal status is unclear and so far untested in the courts.

          • by ScrewMaster (602015) on Tuesday August 19 2008, @07:28PM (#24666825)
            Pedophiles fill in the gaps when the terrorists aren't doing anything. I mean, how many more buildings have fallen here in the U.S. since 9/11? Not many. So, given the absence of an active external threat, an internal one must be manufactured.
  • of course (Score:5, Funny)

    by hamburger lady (218108) on Tuesday August 19 2008, @05:29PM (#24665461)

    Border guards testify that they saw child pornography on the defendant's laptop when the PC was on

    wow, so cops testify that it's true? that's good enough for me!

    • Re:of course (Score:5, Interesting)

      by Gen-GNU (36980) on Tuesday August 19 2008, @05:44PM (#24665669)

      I also doubt that a "conviction is still likely", unless they have some other material to show. Convictions in these cases are almost always due to the shock value created by showing the dirty films and pictures to the jury. If they cannot recover the images and movies, they will actually have to cover their burden of proof a lot more than prosecutors are used to in this case, and the defense might actually have a shot.

      If the jury actually thinks about the fact that the only evidence is what some cops say they saw, but can't prove. If the prosecution somehow gets to show "similar images" or some such nonsense, the defense is hosed.

    • Re:of course (Score:5, Insightful)

      by moderatorrater (1095745) on Tuesday August 19 2008, @06:06PM (#24665983)
      If it's not true, then the defendant can just turn around and offer the keys to the volume and get the cops in trouble for perjury. I doubt he's innocent, but if he is this could be one of the most satisfying court cases in the history of geekdom. Defending your right to encryption and then catching two police in a blatant lie? Priceless!
      • Re:of course (Score:5, Insightful)

        by dougmc (70836) <dougmc+slashdot@frenzied.us> on Tuesday August 19 2008, @07:45PM (#24666991) Homepage

        Sounds good, but I think the estimate was that there's at least 10,000 federal laws -- and so no single person could possibly know them all.

        So while the police are combing through your hard drive, and while they don't find any child pornography, they DO find a picture of you holding a baby bird -- and it turns out that some 1856 law made illegal to handle this type of bird without a permit. And here's evidence of you violating the law.

        Or, perhaps they don't find any child pornography ... until they scan every sector on the disk and find some thumbnail of some picture of a naked 8 year old girl that was deleted 18 months ago. If they'd dug deeper, they might have learned that that was from getting redirected to a child pornography site in Romania by some typo-squatter, which you immediately closed and never visited again -- but the DA is up for re-election, and he doesn't want to give up this new feather in his cap, the child pornographer he just took off the street. He doesn't care that you're innocent, only that you're helping prove that he's tough on child pornography.

        No, cops and vampires are best not invited into your home, or your hard drives. Even if proving perjury is `priceless'. (And really, it wouldn't prove perjury. The cop would just say `I guess I was mistaken. My bad.' Though he probably wouldn't even say that.)

  • by QuantumG (50515) * <qg@biodome.org> on Tuesday August 19 2008, @05:31PM (#24665485) Homepage Journal

    Turn *off* your laptop before going through customs.
    Turn off the GRUB menu and change the default key combination to have it come up.
    Have a WinXP install to boot up into and set it as the default boot option.

    Strong cryptography is lovely but it is not for idiots.

      • by Anonymous Coward on Tuesday August 19 2008, @06:22PM (#24666127)
        recent? the fact you mention semesters suggests you're at university, probably no older than 24-25. the US has been semi-totalitarian for almost 8 years now, that's a third of your life.
  • by BlackCreek (1004083) on Tuesday August 19 2008, @05:33PM (#24665505)
    The problem with this case is that it is the textbook example of the think about the children argument to bypass regular civil rights. As such it could just as well end up being used to throw (more) smoke at the public understanding of the merits of being entitled to privacy.

    In any case, it is good to see judges in the US (or anywhere else) making into the news for taking the right stand regarding governmental search limits.

  • by clonehappy (655530) on Tuesday August 19 2008, @05:34PM (#24665515)
    Here, we have a story which is not only over 8 months old, but is also a dupe [slashdot.org]. That has to be some kind of a record.
  • Uh-Oh (Score:5, Insightful)

    by fuzzyfuzzyfungus (1223518) on Tuesday August 19 2008, @05:34PM (#24665527) Journal
    From TFA :"Orin Kerr, a former Justice Department prosecutor who's now a law professor at George Washington University, shares this view. Kerr acknowledges that it's a tough call, but says, "I tend to think Judge Niedermeier was wrong given the specific facts of this case." "

    The phrase "given the specific facts of this case" gives me chills in this context. As we all know, kiddie porn is, along with terrorism and drugs, one of the three Prime Evils of American jurisprudence and public opinion, the unholy trinity that justify any and all measures in their eradication.

    In short: Why, why does our potential landmark 5th amendment case have to be a kiddie porn case? I'm no fan of child pornography; but it would be an absolute disaster if, thanks to the vociferous moral condemnation that such a case always involved, we end up setting a dangerous precedent concerning the 5th amendment and crypto keys/passwords.

    I think it involves no hyperbole to say that the crypto key issue is probably the most important 5th amendment related question that technology has yet raised(mindreading tech will probably top it, when it becomes available). I'd hate to see this be yet another decision chiseling away at our constitution, just because some punk likes kiddie porn.
    • Re:Uh-Oh (Score:5, Insightful)

      by QuantumG (50515) * <qg@biodome.org> on Tuesday August 19 2008, @05:42PM (#24665629) Homepage Journal

      Because if your rights and freedoms do not stand up when applied to the worst of the worst then they most likely won't stand up when applied to you.

    • In short: Why, why does our potential landmark 5th amendment case have to be a kiddie porn case?

      Because the prosecutors ALWAYS go after the least-sympathetic scumbag they can find (or create the appearance of) when trying to establish a break-the-bill-of-rights precedent.

      In the case of trying to clamp down on new forms of speech, press, or association this is USUALLY a child pornography or child molestation case.

      Once they've got the precedent in place they can go after the real target: Anybody they don't like.

    • Re:Uh-Oh (Score:5, Insightful)

      by daoine_sidhe (619572) on Tuesday August 19 2008, @10:09PM (#24668103)

      Did you really think it would be about anything else? The "justice" machine has been looking for decades for precedent setting cases to overturn or sidestep the constitutional protections we have. One at a time, they fall like dominoes.

      Our nation's preoccupation with child pornography is greater, perhaps, then even our irrational fear of terrorists. Of course it's going to be child pornography. If not this guy, then someone else, truth of the matter not withstanding.

      Those of us who can think, who read, understand that most child sexual abuse comes from the people they know and trust (family, family friends, etc.), not kiddy porn rings or myspace predators. This is about power, pure unadulterated power, and nothing else.

      It's getting to the point, at least for me, where I automatically disbelieve and distrust every law enforcement official on every single statement they make. I view them all as worthless scum first, and leave it up to them to prove otherwise. Some of them even have.

      If any of you out there are or have been police officers, and feel insulted, let me ask you: How many people have you pulled over and issued tickets (sometimes in the hundreds of dollars)? And how many times have you let another police cruiser get away with speeding, reckless driving, rolling stops, failure to signal, etc.? I'm not talking about when they are going lights-and-sirens, I mean when they're out 'cruising'. Yeah, thought so. Until the legal system actually starts policing itself (hah!) we're just going to see them continue hand in hand, doing the government's dirty work and getting away with whatever the fuck they want to.

  • Strange (Score:5, Interesting)

    by PPH (736903) on Tuesday August 19 2008, @05:37PM (#24665557)

    IANAL, but if my memory serves me correctly, Customs and "border guards"aren't constrained by the same laws that other law enforcement is. That's why they can search your vehicle, personal effects, body cavities, etc. when you enter the country without a warrant.

    I have a constitutional protection against unreasonable searches and seizures once inside the United States, but not while entering it. The judges decision sounds nice, but I don't think it will stand.

    • Re:Strange (Score:5, Interesting)

      by Free the Cowards (1280296) on Tuesday August 19 2008, @05:42PM (#24665631)

      That's why they could look at it in the first place.

      But they failed to gather evidence when they had the chance. And now he's back in the country, subject to all the regular protections. If they had copied the unencrypted contents of his hard drive previously they would be able to use that evidence in court, but they can't force him to decrypt its contents now just because they happened to have access to it when he crossed.

      • I fail to understand how a court can't order the asshole to produce the data.

        Because the data is in his head, not on a physical document. If he had written it down the court could order him to hand over the hardcopy. But if they could order him to divulge the contents of his memory to be used as evidence against him they could do it, not just for passwords, but for anything else. (Like: "Did you kill Jane Doe?") The famous part of the 5th Amendment expressly prohibits that.

        What would "enforcing" such an order consist of? Torture. That's WHY it's prohibited.

        This case is going to come down to two sworn officers asserting they saw kiddie porn on exhibit A, the laptop. Almost any jury is going to be willing to accept that as proof beyond a reasonable doubt considering the defense could rebutt by simply unlocking the laptop and proving their innocence.

        It's not up to the defendant in a criminal case to prove his innocence. It's up to the prosecution to prove his guilt. Are the officers such experts in video synthesis and manipulation that they can determine, at a glance, that the images were of actual children? No? Tough luck. If that's all they have I'd expect the judge to direct the verdict or throw it out for lack of evidence.

          • Wrong (Score:5, Informative)

            by Jane Q. Public (1010737) on Tuesday August 19 2008, @08:46PM (#24667407)
            He is not the one being an idiot, you are. Do you know ANYTHING about the law?

            "Don't be an idiot. Enforcing would be done exactly as it is done in any other case of someone refusing to comply with an order issued by a court. You hold them in contempt of court and lock em up until they obey or they can get a higher court to reverse. No rubber hoses required."

            Not so. Physical compliance is one thing. Compelling someone to speak is something entirely different. They are different areas of the law, and covered by different parts of the Constitution. Further, once again: this has to do with the 5th, which prevents compelling someone to testify against himself. AND, as I mentioned elsewhere, there are MANY perfectly legitimate reasons why someone would not want -- very much not want -- the "authorities" to access their files, even if there is nothing illegal in them!

            ("Gee, let's see... I am a border guard, and I have this bogus "do not fly" list, consisting largely of people who are political activists... let's accuse him of child pornography and see what's in his secret files!")

            If you think that scenario is unrealistic, then you have not studied your history.

            "But since the testimony of two sworn peace officers will almost certainly convict beyond a reasonable doubt in the absence of any defense, going that route is a sure fire path to a "pound me in the ass" federal prison."

            Bullshit. In order to convict on "say-so" only, the two witnesses would have to be VERY credible. If I were a juror, it is unlikely I would vote to convict without physical evidence. And as for being credible witnesses, especially when it comes to identifying children on grainy video... heck, it's a stretch even calling most border guards "law enforcement"!

            By the way, I should mention that a couple of years ago, the Supreme Court ruled that in order for something to be judged "child pornography", it must be proven that (1) it is actual pornography, and (2) that the subjects are actual children. Good luck proving those with no videos. Do you think the guards recognized those particular children? Do you think that they names and addresses were flashed on the screen? I doubt it.

            "Basically this guy is saying "That laptop over there doesn't have anything illegal on it. Those pigs are just lying ignorant bastards who wouldn't know a playboy bunny shot from japanese tentacle porn. But you guys on the jury are just going to have to trust me on that..."

            Yep. And that is enough, legally and Constitutionally. As it should be. You don't seem to appreciate how horrifically "the system" could be abused, if we did not have such safeguards. History is full of such stories... are you going to be one of those people doomed to repeat history because you did not bother to learn it? I hope not.


            -- "That it is better 100 guilty Persons should escape than that one innocent Person should suffer, is a Maxim that has been long and generally approved." - Benjamin Franklin
  • Seriously, are the editors asleep?

    This story [slashdot.org] from last December had the exact same article. This was noted in the firehose entry [slashdot.org], and somehow this still got posted. I thought that kind of thing was a major purpose of the firehose?

    WTF

  • by Anonymous Coward on Tuesday August 19 2008, @05:42PM (#24665625)

    Period. End of discussion. They cannot compel your testimony. Not one word can they force you to utter. It is your choice to stand mute and that cannot be used against you.

    Anything more than this, compelling you to utter even a single syllable in order to prove your own innocence or guilt, and we don't live in the land of the free anymore.

  • by TheTempest (99802) on Tuesday August 19 2008, @06:30PM (#24666201)

    So what if I made my pass phrase the confession to some minor crime and then confessed the fact? Wouldn't that make it a more clear-cut fifth amendment issue as revealing my pass-phrase would be directly incriminating?

    • Re:Sweet! (Score:5, Insightful)

      by pcolaman (1208838) on Tuesday August 19 2008, @05:47PM (#24665721)
      Considering that the constitution provides that he shouldn't be forced to incriminate himself, it is definitely good news that the Judge didn't try to rewrite the constitution. It's high time that we start holding the judges who disagree with this concept accountable.
          • Re:Sweet! (Score:5, Insightful)

            by PopeRatzo (965947) * on Tuesday August 19 2008, @06:40PM (#24666289) Homepage Journal

            First of all, let's stop pretending that this has anything at all to do with "child pornography".

            The justice department was just trying to get some case law saying an individual could be forced to relinquish his password, and by using "child pornography" they thought they could bully some judge into betraying the Constitution. It's a good sign that those sons of bitches lost, too.

            And ultimately, torture doesn't work. Eventually, a society that violates basic human rights so blatantly will fall, and often (but not always) the perpetrators end up on the other end of the see-saw. Then, it becomes harder to find people who will obey orders to torture. We in America will eventually learn that it was a huge mistake to forsake our principles and become a torture regime. But, I can only hope that Bush, Cheney, Gonzalez and others will face the music. There's no guarantee that justice moves quickly enough to give that kind of satisfaction. But move it does - and inexorably.

            • Re:Sweet! (Score:5, Insightful)

              by lgw (121541) on Tuesday August 19 2008, @07:11PM (#24666627) Journal

              First of all, let's stop pretending that this has anything at all to do with "child pornography".

              Thank you Pope Ratzo!

              Any time the government wants to remove one more right from you, the test case will always be a charge of child pornography or terrorism. But it's not like the precdent will be "only for accused terrorists" - it will be used for anyone. Even if it were, accusing your political opponents of being pedophiles or terrorists in order to use the "special case" laws against them has been done throughout recorded history. It's not exactly hard to put encrypted child porn on a seized laptop after the fact, if you're willing to break a law to get a conviction!

    • Re:Backdoors? (Score:5, Insightful)

      by mrami (664567) on Tuesday August 19 2008, @05:50PM (#24665771) Homepage

      or that they aren't open to people at that level

      If someone like the NSA knew how, I doubt they would let that information leak without a really, really good reason. And "think of the children" doesn't count in that arena.

      which is nice.

      At least, it's good to know. :)

    • by moderatorrater (1095745) on Tuesday August 19 2008, @06:13PM (#24666053)
      Good things like this only happen to bad guys because that's where the infringement on rights starts. You don't infringe a soccer mom's right to privacy, you infringe the creepy mexican guy who likes to watch child pornography. Once his rights are infringed and the courts have set a precedence, then you can infringe the soccer mom's rights all you want, it's now legal! Defending society's rights requires defending them for every member, the scum included.
    • by gujo-odori (473191) on Tuesday August 19 2008, @06:37PM (#24666251)

      You'd probably get thrown in jail for that, and it'll probably stick. Refusing to divulge your passphrase is protected by the Fifth Amendment, but if you give them a self-destruct phrase and tell them it's the passphrase, you have just destroyed potential evidence that is in their possession, and I'd be surprised indeed if that is not against one or more laws.

    • by blitz487 (606553) on Tuesday August 19 2008, @10:20PM (#24668183)

      i hate it, i hate child pronographers...

      I find it sad that most everyone discussing this topic feels compelled to add in a condemnation the pornographers as if otherwise people would suspect them of being one. We can discuss murder and other heinous crimes without needing a disclaimer.

      Not that I'm defending child pornographers in any way.