Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Ontario Court Wrong About IP Addresses, Too

Posted by kdawson on Fri Feb 13, 2009 10:30 AM
from the reasoning-by-bad-analogy dept.
Frequent Slashdot contributor Bennett Haselton comments on a breaking news story out of the Canadian courts: "An Ontario Superior Court Justice has ruled that Canadian police can obtain the identities of Internet users without a warrant, writing that there is 'no reasonable expectation of privacy' for a user's online identity, and drawing the analogy that 'One's name and address or the name and address of your spouse are not biographical information one expects would be kept private from the state.' But why in the world is it valid to compare an IP address with a street address in the phone book?" Read on for Bennett's analysis.

Last October I wrote about a the Virginia Supreme court's ruling that forged IP addresses in spam headers were constitutionally protected, because they were necessary to protect anonymous speech. I said that misconstrued facts about IP addresses for two main reasons: (a) there are protocols for secure anonymous speech on the Internet, so it's not true that forged IP addresses are "necessary"; (b) forging your IP in mail headers doesn't actually hide the sender's real IP anyway. Now an Ontario Superior Court Justice has ruled that IP addresses are no more private than "[o]ne's name and address or the name and address of your spouse", suggesting another instance where a court may not have realized the implications of how IP addresses work.

In the current case, Canadian police had determined the IP address of a user allegedly accessing child pornography, and faxed the ISP a request for the user's identifying information, which the ISP provided, without a warrant. The defendant had argued that the evidence should be in admissible because the police should have been required to obtain a warrant first, but Justice Lynne Leitch rejected that argument, drawing an analogy to the public listings in a phone book and writing, "One's name and address or the name and address of your spouse are not biographical information one expects would be kept private from the state."

Even if the court had ruled that the evidence were inadmissible, that doesn't mean the police couldn't have caught this defendant if they'd followed the warrant procedure from the beginning — if the police had evidence that the user was accessing child pornography, presumably they could have gotten a warrant if they'd asked for one. So excluding this evidence probably would have only set a precedent that defendants would occasionally get off because of procedural screw-ups (similar to police forgetting to read a defendant his Miranda rights), not that huge numbers of child pornographers would have now been able to evade police, because the police could usually get a warrant in cases where they had evidence against them. What is troubling is the analogy that the court drew between IP addresses and "one's name and address".

Unlike the statements made by the Virginia Supreme Court, this may not be a case of getting technical facts wrong about IP addresses, but logical errors in the analogy, namely: (a) concluding that two things are similar when they are perceived differently, when perceptions are what the case is about, and (b) not following the premise through to its logical conclusion, which would be absurd, showing the premise is wrong in the first place.

Consider that the court drew the analogy to name and address information that can be found in the phone book, and wrote, "One's name and address or the name and address of your spouse are not biographical information one expects would be kept private from the state." But then why would one draw any link between that, and information about the user's identity behind their IP address? The only similarity is that both pieces of information are "information about someone". But if you're trying to determine whether a user has a "reasonable expectation of privacy" for their identity online, the whole point is that it's not like a street address in the phone book — users do expect that their identity cannot be discovered by someone who knows their IP address, at least not without subpoenaing their ISP. When asking whether users have a "reasonable expectation of privacy" for a given type of information, if you parse that sentence literally, there are only two questions: (1) Do users have an expectation of privacy for that information, and (2) Is it reasonable? To determine if users have an expectation of privacy for something, you just ask them: Do you? You don't need to draw analogies to anything else — either users expect privacy (because of the analogies or the reasoning going on their own heads) or they don't. The remaining question is whether their expectation is reasonable, and it seems absurd to say that a user's expectation of privacy for their identity online (at least until a court issues a warrant) is "unreasonable".

Suppose a security company were to discover an exploit in Internet Explorer that could reveal your real name (as entered in your personal computer's Control Panel settings at setup time) to any Web site that you visited. This would be big news and would warrant Microsoft issuing a critical patch to fix the problem — because users expect that this information should not be available to a remote Web site, even though the Web site that they're visiting can of course see their IP address. And most would agree that this is a "reasonable" expectation.

On the other hand, try following the judges' ruling through to the end — if information about the user's real identity behind their IP address is not considered private, than what is? Justice Leitch stated that an address in the phone book and an IP address are both "biographical information" and hence that the analogy was proper. But by the same logic, virtually any fact that a company has on file about you would constitute "biographical information" just by virtue of the tautology that it's a fact about you, and so this would become meaningless as a standard by which to determine what facts should be kept secret from police without a warrant.

This line of argument raises two larger issues. First, this will have already provoked the ire of people with legally training, who are asking, "Who are you to disagree with a Superior Court Justice? Did you go to law school? Did you clerk with a judge?" The proper response to this is: If you're invoking your credentials to support a statement, then if I were to randomly poll 10 people with the same credentials, would at least 8 of them agree with you? If the answer to that question is No, then there's no point in bringing up credentials, because there is no strong majority of people with those credentials who agree on any particular to answer to that question, so it cannot be true that a strong majority agree on the "correct" answer to the question. The story about this case quotes Professor James Stribopoulos at the Osgoode Hall Law School in Toronto, as disagreeing with the judges' conclusion, for example: "It is not just your name, it is your whole Internet surfing history. Up until now, there was privacy. An IP address is not your name, it is a 10-digit number. A lot more people would be apprehensive if they knew their name was being left everywhere they went." If credentialed users are randomly divided on what the answer is, then that cannot be used as a guide to what the rest of us laypeople should think, because how do we know which group to side with? We have to rely on generic reasoning — looking for logical mis-steps in a judge's argument, or looking for premises that would be absurd if they were carried to their logical conclusion. If you're going to tell me that my reasoning is wrong, then mentioning a degree in mathematics or the hard sciences is just as relevant, if not more so, than mentioning a law degree — but in either case the logical argument should be evaluated on its merits, regardless of a person's "credentials". People who do well on those Martin Gardner brainteasers should be encouraged to take part in these debates.

Second, there is the question of whether such logical errors (if you accept the premise that the court made a logical error in drawing an analogy between IP addresses and street addresses in the phone book) could be avoided if the courts took a different approach to answering these questions. In the October article about the Virginia Supreme Court's ruling on IP addresses, I suggested that a judge could have avoided the technical mis-statement in the ruling if they had just convened some Internet technology experts in their courtroom and said, "Here's my reasoning so far. Is any part of it wrong on the technical facts? I'm not promising to change my mind in response to anyone's objections. But just tell me if you think some part of it is wrong." A large number of people e-mailed me objections that all boiled down to, "That's not how judges do things", or suggesting that I didn't know that because I'd ventured outside my own area of expertise.

Hello! I know that's not how judges do things, that was my point: that they might avoid certain types of errors if they did try it. On the other hand, just because a particular practice by a judge might have avoided one type of error, that doesn't mean it's a good idea. If the judge had tested their theory about IP addresses and street addresses by posting it on a message board somewhere and asking for feedback, that might have helped to avoid the particular mis-statements that they made about IP addresses in that case, but would that be a good idea generally? Almost certainly not — because users responding to the judge's request for help would not be under oath, so they'd be free to try and confuse the issue with lies to support whatever outcome they wanted for the case. That would be bad enough if it were a one-time case where a judge solicited feedback for their reasoning on a message board. If it became a regular practice by judges, and people knew in advance that judges were likely to solicit public feedback on their arguments before making their rulings official, then all parties with an agenda would have misinformation campaigns gearing up in advance to fool judges whenever possible.

That's why I suggested that you'd have the best of both worlds if the judges presented their argument first to experts in court, who were testifying under oath. This would present a opportunity for experts to spot any factual errors or what they consider to be logical mis-steps that the judge can then take into consideration. At the same time, because the experts are testifying under oath, they can't lie outright to try and trick the judge into basing their ruling on wrong information. (Of course, this depends on the court system's willingness to prosecute experts and other witnesses if they lie under oath. If the courts don't bother, then there's not much point in swearing in the experts before they testify anyway.)

So: an interesting counterargument would be: What is an example of a problem (a situation where a judge could be led to the wrong conclusion, or where a third party would have new incentives to spread false information) that would be created by judges running their opinions past experts who are assembled in their courtroom, that does not already exist under the current system? I can't immediately think of any, but some more imaginative people might be able to. I don't think it would be valid to say, for example, that this creates an incentive for biased experts to try and mislead the judge without technically lying — because biased experts in court already try and mislead the judge anyway, even without a "final round" where the judge asks what they think. But that's the form that an interesting argument would take. Not "I went to law school and that's not how we do stuff."

Meanwhile, regular users can use Tor and similar programs if they want their anonymity to be securely protected online. Tor can securely protect your identity from anyone, with or without a warrant. At least 8 out of 10 computer experts would agree; otherwise I wouldn't say that.
+ -
story

Related Stories

[+] Virginia High Court Wrong About IP Addresses 174 comments
Frequent Slashdot contributor Bennett Haselton writes "The Virginia Supreme Court has ruled that the state's anti-spam law, which prohibits the sending of bulk e-mail using falsified or forged headers, violates the First Amendment because it also applies to non-commercial political or religious speech. I agree that an anti-spam law should not outlaw anonymous non-commercial speech. But the decision contains statements about IP addresses, domain names, and anonymity that are rather basically wrong, and which may enable the state to win on appeal. The two basic errors are: concluding that anonymous speech on the Internet requires forged headers or other falsified information (and therefore that a ban on forged headers is an unconstitutional ban on anonymous speech), and assuming that use of forged headers actually does conceal the IP address that the message was sent from, which it does not." Click that magical little link below to read the rest of his story.
[+] IT: Spammer Perjury is Worth Prosecuting 161 comments
Slashdot regular Bennett Haselton summarizes his essay by saying "Spammers really do lie more often under oath than other parties in court (surprise). Judges and prosecutors could promote respect for the law by cracking down on it, and maybe make a dent in spam in the process." Read on to learn of his experiences with (shocking!) spammers who lie in court.
[+] Your Rights Online: Swedish ISP Deletes Customer ID Info 177 comments
NewYorkCountryLawyer writes "A Swedish internet service provider, Bahnhof, has begun deleting customer identification information in order to prevent it from being used as evidence against its customers under Sweden's new legislation against copyright infringement via peer-to-peer file sharing. According to this report on 'The Local,' it is entirely legal for it to do so. The company's CEO, Jon Karlung, is identified as 'a vociferous opponent of the measures that came into force on April 1st,' and is quoted saying that he is determined to protect the company's clients, and that 'It's about the freedom to choose, and the law makes it possible to retain details. We're not acting in breach of IPRED; we're following the law and choosing to destroy the details.'"
[+] Your Rights Online: Unmasking Blog Commenters Not a Huge Threat To Freedom 105 comments
Frequent Slashdot contributor Bennett Haselton writes with his take on a recent court decision about the rights of online commenters. "Although a court has ruled that the police can subpoena the identities of users who posted comments in a newspaper's blog, I think this is not as big of a threat to journalistic integrity as it might seem. And in any case when the judge ruled against the privacy rights of 'bloggers,' he didn't actually mean 'bloggers." Read on for the rest of Bennett's thoughts.
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Justice is blind (Score:3, Insightful)

    by Pig Hogger (10379) <pig.hogger@BOHRgmail.com minus physicist> on Friday February 13 2009, @10:35AM (#26844205) Homepage Journal
    Justice is blind, and even more so when technological cases are heard in an anglo-saxon setting, where customary law (precedents) is king.
    • Re:Justice is blind (Score:5, Interesting)

      by debrain (29228) on Friday February 13 2009, @10:59AM (#26844597) Journal

      Justice is blind, and even more so when technological cases are heard in an anglo-saxon setting, where customary law (precedents) is king.

      I think you're mixing a number of references, there. Justice is blind is a reference to the notion that justice ought to be objective, a concept going back to (at least) the Babylons. I don't think objective (versus subjective) reasoning in any takes away from "justice", which seems to be what you are implying.

      "Customary law (precedents)" is presumably a reference to stare decisis [wikipedia.org], a concept of binding precedents which dates back to the Normans invading Britain around the 1100's I believe. Stare decisis generally occurs only when a "higher" Court (i.e. an appellate level Court) makes a decision. The lower Courts are bound to the decision of higher Courts, subject to law and fact that distinguishes the case at hand from the case of the higher Court. Courts of the same level are generally not bound (though it is generally considered polite not to change the law the same Court had previously made - case made law is in principle, after all, not creating law, but illuminating an already-existing truth).

      In terms of facts, though, appellate Courts generally defer to the Court of first instance (i.e. the trier of fact, or trial court), because the judge at the first instance will have heard the facts from experts first-hand. However, there is generally a discretion in appellate Courts to overturn rulings of the Court of first instance on the basis that the trier of fact made errors that were incorrect, unreasonable or patently unreasonable (depending on the nature of the appeal and the Court in question).

      In the Ontario case in question, I haven't read the reasons of Justice Leitch, but if she took "judicial notice" of the analogy between an IP and an address (i.e. no experts were called), a higher Court may alter that. However, if an expert posited that analogy, then it is very unlikely that the decision will be overturned by a higher Court (i.e. the Ontario Court of Appeal). In both scenarios, it's possible that subsequent decisions would be made on different facts, and this wayward analogy would be debunked.

      • This is a subtle misunderstanding of the purpose of a warrant. There are large swathes of information that police don't need search warrants to obtain. The purpose of a search warrant is to give police the power to search a particular thing by force - that is, over the objection of someone who wants the information to remain secret. Cops don't need search warrants in any other instance. They don't need a warrant for stuff that happens right in front of them, and cops don't need a warrant to ask witnesse
  • by BadAnalogyGuy (945258) <BadAnalogyGuy@gmail.com> on Friday February 13 2009, @10:37AM (#26844225)

    "I think judges should get expert opinion outside the courtroom."

    There, that wasn't so hard, was it?

    May I suggest the following link [slashdot.org]

    • Re: (Score:3, Insightful)

      by lgw (121541)

      Responing to this well-worded summary:

      We use an adversarial system. No one (except the judge) is expected, or can be expected, to be neutral or disinterested. It's not the judge's job to be a technical expert, but for each side to bring technical experts who will testify under oath. The defense here erred in not bringing in an expert witness to testify about how IP addresses work.

      The solution to prevent this problem in future cases is exactly for the concerned party to hire an expert witness to explain t

      • Re: (Score:3, Funny)

        by KevinKnSC (744603)

        According to Wikipedia, he has a graduate degree in math but no law degree. This is too bad, because a name like "Bennett Haselton" seems like it was made for a law office door.

  • by commodore64_love (1445365) on Friday February 13 2009, @10:40AM (#26844283)

    The police using an IP Number to locate my address is no different than if they did a Reverse Phone Number lookup. If the latter does not violate my rights, then the former does not violate my rights either.

    • by compro01 (777531) on Friday February 13 2009, @10:53AM (#26844493)

      How about if the phone number is unlisted?

      Consider that if you do a WHOIS search on a non-business IP, you're likely going to get the ISP's info, not the info of the person using that IP, so I would consider that to be more like an unlisted number than a number in the phone book.

      Though I'm not able to find any precedents regarding whether a warrant is required to request unlisted phone numbers either, so this may be a moot argument.

    • by phorm (591458) on Friday February 13 2009, @10:53AM (#26844495) Homepage Journal

      When I look up my phone # in a reverse directory, I get the a result like the following:

      Type: Cell Phone

      Provider: Someprovider

      Location: Somecity, SomeProvince

      There are plenty of reasons *NOT* to have your personal information linked to your phone #. The same should apply to your IP.

    • Re: (Score:2, Insightful)

      No, it is different because users don't expect their identity to be revealed by their ip address. The whole point of a phone book is to link people with numbers and you can opt out if you don't want to be listed.
      • Re: (Score:3, Interesting)

        by whoever57 (658626)

        The whole point of a phone book is to link people with numbers and you can opt out if you don't want to be listed.

        Yes, but not to provide a way to look up a number and find the owner (reverse lookup). This is a relatively recent innovation and one that I doubt people considered twenty years ago when allowing their numbers to be listed. In other words, twenty years ago, people had a reasonable expecation that their number would not give away their identity even if they were listed in the phone book

    • by Anonymous Coward on Friday February 13 2009, @11:19AM (#26844937)

      If I, as a private citizen, cannot call up the ISP and get the same information; then that information should not be considered public by reasonable expectation; and should require a warrant.

    • It sure does have a difference. People already know their phone numbers are publicly listed information and act accordingly. People should routinely expect others to have Caller-ID or access to reverse directories.

      IP addresses are not published in a big white book that is handed out to every home in North America, and your IP identity is not something you assume will be public knowledge without good reason. As a result, people do expect privacy even though the data is obviously available to their ISP, us

    • by bcwright (871193) on Friday February 13 2009, @12:11PM (#26845779)

      The problem is that an IP address is NOT a unique identifier for an individual. In most cases, it's going to be a dynamically-allocated address that may map to many subscriber locations within your neighborhood or your city or even the entire country, depending on how your ISP allocates addresses. At any given moment in time, it will only map to one subscriber location, but the only one who has access to that information will be your ISP, possibly in conjunction with the telephone company if you're connected by modem.

      But even apart from that, an IP address can be multiplexed between many individuals or even other locations once the traffic for it reaches the subscriber location.

      So it's not like a phone number at all - there's not even approximately a one-to-one mapping between IP addresses and individuals, nor is the mapping that does exist stable over even fairly short spans of time.

      I'm not sure whether I think that the police should have the authority to do a reverse IP lookup without a warrant (though from a civil liberties standpoint it does make me distinctly uneasy, since this is in no sense "public" information and has serious potential for abuse), but the analogy with the phone system is badly flawed.

      • Re: (Score:3, Interesting)

        by azadrozny (576352)

        I recognize your point that an IP address is not always fixed to one user or machine, but I think the analogy works for this situation. If the police found a phone number logged on a caller ID near the scene of a crime, I would expect them to request the owner's name from the phone company. The same goes for an IP address discovered. I would expect them to follow the evidence. Now if the police attempted to prosecute using this IP evidence, then all of your other arguments apply.

        The question before the

  • tl; dr (Score:3, Interesting)

    by Eevee (535658) on Friday February 13 2009, @10:41AM (#26844311)
    I did a quick search on "phone" and found no references to Canadian case law dealing with warrents and phone numbers--the obvious precedent for warrents and IP addresses. Why is this even posted if the most basic of research hasn't been done?
  • by Anonymous Coward on Friday February 13 2009, @10:46AM (#26844383)

    A better analogy is: If police find a repair receipt with an order number, can the police go to the shop and ask for the name of the customer?

    A receipt number is neither public nor private, it is merely obscure. Can a business owner not voluntarily give information to the police? If the business has a privacy contract with the customer, a violation is a contract law issue between the customer and the business, and not a constitutional issue.

    If the business won't voluntarily provide the information, the police can use a search warrant to search the business. But that is a situation between the business and the police, not the customer. And if the business voluntarily gives the information the police haven't conducted a search.

    • Mod parent up!!! (Score:5, Interesting)

      by multimediavt (965608) on Friday February 13 2009, @11:02AM (#26844651)

      This guy has it right, along with the reverse lookup comment for a phone number there was no violation of criminal law or established procedures for enforcement with what was done. Now, the ISP may have violated their privacy agreement, but privacy agreements usually contain verbiage that denies privacy if you are suspected of a crime, depending on the nature of information being divulged.

      Data that was traveling over the wire to and from the IP address was not obtained and would require a warrant to view, but simple subscriber information will-9 times out of 10-be given to law enforcement upon request. Now, if that information was somehow "unlisted at the user's request", like an unlisted phone number, then a warrant would be needed to obtain the information. I do not know of an ISP that provides "unlisted" Internet service.

  • by DoofusOfDeath (636671) on Friday February 13 2009, @10:51AM (#26844447)

    It strikes me that "reasonable expectation" would mean, "reasonable by those in the community in question".

    Was this judge a regular Internet user? If not, is his opinion about what's a "reasonable expectation" relevant, or should he poll, for example, 1000 high-school and college kids regarding whether or not they expect their IP#'s to be tied back to them as people?

    • Re: (Score:3, Funny)

      by droopycom (470921)

      Yeah right... he was not a pedophile suspect either ....

      Should the judge ask 1000 pedophiles suspect what their expectation of privacy be...

  • by number17 (952777) on Friday February 13 2009, @10:54AM (#26844499)
    Lets take a different analogy. A credit card number.

    Like an IP address, that number is handed out by a company and is linked to my name at a particular point in time. I am responsible for it during that period of time.

    Both credit card number and name are kept in a database, just like the MAC address of my modem and subscriber information. How does this make it public information that can be published?
  • by dmomo (256005) on Friday February 13 2009, @10:54AM (#26844515) Homepage

    Your phone number and address specify where you live. Your IP address in an apache log specifies:

    Where you were at what time and what you were doing.

    Big difference.

    Yes, my home address might be public info (arguably).. but what I am doing inside is NOT!

    • by BadAnalogyGuy (945258) <BadAnalogyGuy@gmail.com> on Friday February 13 2009, @10:57AM (#26844561)

      We all know what you're doing, pervert.

    • Exactly.. It's like asking someone to enable GPS and walk around with a camera strapped to their foreheads and recording their actions 24/7. The recordings get put on tape for as long as the medium is backed up (so technically indefinitely). There's little to no chance that websites will start anonymizing log files - it just doesn't happen very often. So what's to stop police from going back 5+ years and saying "Well, you visited X and Y on these days... Because you KNOW about X and Y, we suspect you are gu

    • Well, your IP address doesn't tell the police what you were doing INSIDE either. A second piece of information is needed: the servers you were connecting to OUTSIDE of your home. Probably not owned by you. If you were doing anything entirely inside of your home, then your IP is irrelevant.

      Which gets to the root of the issue. On one side there are those who believe that because you are sitting in the privacy of your home, your online activities should be private.

      On the other side are those who point out you'

    • If you use your OMG PRIVATE PHONENUMBER to call in a bomb threat against your place of work, they don't need a warrant to perform a reverse phone lookup and find the name of the account holder. Explain how your phone number only specifies where you live, where the calledID at the business you called with a bomb threat specifies "where you were at what time and what you were doing." Nobody is saying that they don't need a warrant for server logs. They already have the server logs that they obtained with a
      • But how do you know the server logs needed a search warrant to obtain? Some sites are resistant at giving out logs, while others will blatantly give them out if there is ANY indication at legal action. RIAA lawsuits anyone?

        While I can partially see where you're coming from, I just don't see how this can be justified. If there is enough of a reason to care, a search warrant should be required IMHO.

        This could also just be a baby step to "security". Next year we could be seeing a similar article, but the polic

  • by redelm (54142) on Friday February 13 2009, @10:56AM (#26844551) Homepage
    There are no exact Miranda Rights in Canada, nor "fruit of the poisoned vine" doctrine nor 9th Amendment "expectation of privacy". There is a Candian constitution, and it says different things, mostly with "reasonable" exemptions.

    Canadian Courts and police operate differently from the US. The individuals are generally more professional and competant, and less ambitious for higher office.

    A Canadian court might will find (and even presume) police are acting reasonably, so evidence is admissible.

    Exactly how is a Reverse IP lookup is different from using a Criss-Cross telephone directory?

    Chill!

  • by MisterSquirrel (1023517) on Friday February 13 2009, @11:01AM (#26844639)

    Several people use my computer at home. Plus, I use computers at several different IP addresses, some of which are in turn used by other people. So how can any IP address, by itself, be biographical information about me in particular?

    More importantly, how can an IP address be identified with me directly? If "my" IP address is used to download porn, how do they know whether I did it, or someone else at my computer did it? How do they know it wasn't some Russian Mafia's botnet that took over my computer and did it?

    • "Several people use my computer at home. Plus, I use computers at several different IP addresses, some of which are in turn used by other people. So how can any IP address, by itself, be biographical information about me in particular? "

      Probably in the same way that a physical address is. For most people, they live at an address with one or more other people (spouse, kids, parents, etc.). Some people also have a country home (second address) which may be shared with additional other people (brothers, pare
    • First, I want to start by stating that I agree with the basic premise of the original Op-Ed piece that these comments are attached to - namely that there is no good reason why police/prosecutors shouldn't get a warrant or subpoena for this information - users should have a reasonable expectation of privacy when using the Internet.

      That said, with regards to your questions about an IP address not proving that any particular person is responsible for traffic, while you are correct, it is still necessary for th

  • That's why I suggested that you'd have the best of both worlds if the judges presented their argument first to experts in court, who were testifying under oath. This would present a opportunity for experts to spot any factual errors or what they consider to be logical mis-steps that the judge can then take into consideration. At the same time, because the experts are testifying under oath, they can't lie outright to try and trick the judge into basing their ruling on wrong information.

    Expert evidence is often used in many different trials, for many different issues. However, the law in Canada requires that judges do not abdicate their decision-making authority to the experts. The proper role of the expert is to provide information to the judge that is outside of the judge's own area of expertise. On any given trial, there will usually be two experts (one for each side) who have completely contradictory opinions. It is the judge's job to weigh each expert's opinion against the rest o

  • If there's a more hidebound, out-of-touch, bunch of rich old white men on the continent than a meeting of Ontario judges, I'd be surprised. Even the few who happen to have vaginas fit the profile.

  • But if you're trying to determine whether a user has a "reasonable expectation of privacy" for their identity online, the whole point is that it's not like a street address in the phone book -- users do expect that their identity cannot be discovered by someone who knows their IP address, at least not without subpoenaing their ISP.

    i don't know about you, but i have no expectation of privacy for my identity online, and frankly, i don't know why anyone, especially the technically astute on slashdot, would hav

              • got it (Score:3, Insightful)

                you think the internet is like a telephone conversation

                he said in a wide open thread

                that anyone navigating to slashdot can read

                on the internet

                seriously, wtf is wrong with you?

                    • Re: (Score:3, Insightful)

                      There you go again. No, that is NOT what I mean by "anonymous". Your definition of anonymous here does not even make sense. Go look it up in the dictionary.

                      "Anonymous" means that you do not know the identity of the speaker (writer, communicator). Your description of "anonymous" is not even close. You could not take someone into another room, close the door, and speak into their ear anonymously, because they know who you are! That directly contradicts the very definition of the word.

                      But in fact my writ
  • by segedunum (883035) on Friday February 13 2009, @11:21AM (#26844977) Homepage
    As a previous Slashdot article claimed, us technology people are not lawyers. What would we know about this stuff? Of course you can identify one person via one IP address in a one-to-one mapping. Everyone knows that. I got modded down for suggesting this kind of idiocy, because this is internet and networking 101. If you can't present the facts of what an IP address actually is then you have a real problem.

    Child pornography is serious (OK, it's used as a politically correct example sometimes) and I'm not suggesting for a second people should get off on technicalities, but if courts are going to gather evidence and convict then they need to get some clue about the facts and understand what it is that they're talking about. Unless they do I can see massive claims for damages at some point in the future. This happens all over the world as well.
  • ..like 127.0.0.1

  • An IP address is not like a street address (which is fairly permanent). It's more like a hotel room number (transitory). The identity of the occupants of room 128 are not public knowledge like in a phone book, but must be obtained through a 3rd party (the hotel's front desk).

    Do police need a warrant to look at the front desk's guest log?

    The hotel room analogy also explains why IP addresses are insufficient evidence of criminal activity. If they know that criminal activity took place in room 128 last week

    • Re:tl;dr (Score:5, Insightful)

      by CarpetShark (865376) on Friday February 13 2009, @10:48AM (#26844423)

      tl;dr...can someone please summarize?

      What is it with people today? You want to know stuff, but can't be bothered reading something that IS a summary, of a lengthy court proceeding involving lots of debate on principles, history, etc.?

      You want summaries of summaries? OK, we're all screwed. Feel informed now?

    • Summary: (Score:5, Funny)

      by Alwin Henseler (640539) on Friday February 13 2009, @10:59AM (#26844603) Homepage

      can someone please summarize?

      Court: intertubes = phonebook

    • Summary (Score:5, Informative)

      by SpeedyDX (1014595) <.speedyphoenix. .at. .gmail.com.> on Friday February 13 2009, @11:06AM (#26844711)

      Bennett Hasleton thinks that education and legal training have no impact on how legitimate a person's opinion on legal matters is. His style of writing is very flawed in that it contains fallacies, appeals to emotion, and numerous grammatical errors. He doesn't link to the actual case file, so I can only assume that all of his commentary is based solely on the National Post article. This type of second-hand analysis is unreliable, as it relies on the interpretation of the journalist in question. He also does not recognize how the legal system views expert evidence - that is, it treats it as "opinion evidence" as opposed to "real evidence", the differences between which I will not delve into here.

      I'm not going to go further, as I think it would be unnecessary and a complete waste of time. This is basically a very long rant on a subject in which he is nowhere near qualified to provide an in-depth analysis. I am not a lawyer, but I am a Criminology student at the University of Toronto, studying under one of the more prominent defence lawyers in the country (one of Maher Arar's lawyers) on legal procedure. Of course, if you're Bennett Hasleton though, that doesn't mean anything.

      • Re: (Score:3, Funny)

        by dubbreak (623656)

        .. and numerous grammatical errors...

        I stopped reading at, "than what is?". I can stand the occasional than/then mistake, but then/than? No way.

    • Sure: An IP address is a ten digit number that contains your entire internet surfing history. That IP address was used at one point to access child porn. Therefore we don't need a warrant to get your name and address from whatever ISP is serving up that address.
    • by cdrguru (88047)

      Police generally do not need such a warrant. They can get one, everyone knows they can get one, so the actual necessity of getting one is usually waived.

      This is pretty much identical to the situation of a cop standing on your doorstep wanting to search your home. They have probably cause, you know they have probable cause, they know they have probable cause. The cop says if you want them to get a warrant it will just be a hassle and if you put them through that extra step it will certainly happen and eve

    • Re: (Score:3, Insightful)

      by josepha48 (13953)
      So what if some spammer or someone sends you porn or child porn in this case in your email?

      Anyway, it's not like anyone can spoof an IP address anyway, right? (j/k we know better) so then what if someone does, and the cops don't figure it out and they go after the wrong guy? Suddenly someone could be accused of being a child pedophile and then his neighbors find out. Even AFTER he is found innocent because the police could screw up ( AND THEY DO ), his life will NEVER be the same. Once someone is tagged