UK Cops Want "Breathalyzers" For PCs 545
An anonymous reader writes "One of the UK's top cyber cops, detective superintendent Charlie McMurdie, says the top brass want to develop the equivalent of a breathalyzer for computers, a simple tool that could be plugged into a machine during a raid and retrieve evidence of illegal activity. McMurdie said the device was needed because of a record number of PCs were being seized by police and because the majority of cops don't have the skills to forensically analyse a computer."
So they want GOV spyware? (Score:3, Interesting)
So they want GOV spyware? They will still need people to look at the data.
Re:So they want GOV spyware? (Score:4, Insightful)
Good job managing to misread the summary.
Re:So they want GOV spyware? (Score:5, Insightful)
What?
It's an apt post.
Spyware snoops around and grabs whatever it finds and deems to be unbecoming of a law abiding computer user.
They then hand that off (and the pc itself, likely) to a group of people who will do the analysis.
The post above you implies that this tool will not be of much actual help, and I agree. A "clean" report from the tool means nothing, and for any actual raids the computers will still be combed over by a forensic team. Any "dirty" report from the tool will result in the same outcome.
What this is really about is passing the buck and keeping face - the cops don't want to look incompetent, so they create this tool and publicize it.
Any failure of the cops will be blamed on the tool still being a work in progress, hackers actively working against the tool, etc.
Any responsibility on the part of the cops will be passed off immediately to the forensics teams. When the tool gives out a "dirty" report, the cops will fill out the green "Suspicion of Illegal Digital Bits on Electrical Personal Computing Device" form and hand over the report and the pc to the forensics team.
Once the tool is accepted as good and trustworthy, departments will find any excuse at all to use them to harass and extort money from the public.
Noise complaint?
Let's bang on the doors, give them shit, and check their computers for illegal activity. You just KNOW that music isn't paid for.
No, sir, since we heard music from the street, and we clearly can see you have a computer, and sound system, and a lack of physical CDs/tapes/records, in plain sight. We have reason to believe a crime has been committed. We don't need a warrant to perform a cursory search. If the search turns up anything, your equipment will be confiscated as evidence.
Re:So they want GOV spyware? (Score:5, Funny)
Re:So they want GOV spyware? (Score:5, Insightful)
Let me get this straight. McMurdie is basically saying, We need a pervasive technology solution to compensate for the fact that I have the wrong and/or incompetent personnel.
Yea....
Re: (Score:3, Insightful)
Conducting a search due to a crime in progress or evidence in plain sight is significantly more difficult -- at least in the US -- than you make it out to be. Never mind that copyright infringement is, except in a few cases, a civil matter and not criminal (meaning the police cannot investigate it, and could not possibly claim there was open evidence of a crime).
The problem with the original post is that it called the desired tool spyware. Spyware has a particular meaning: it is software that is installed s
Re:So they want GOV spyware? (Score:5, Insightful)
The cops can and will search and bust you with a reasonable suspicion / in plain sight excuse SO easily. Yes, in the USA.
Do you really think that such a tool, if created, would not be spyware?
Spyware has no particular meaning. Malware, Adware, Spyware, Greyware, Foistware, Crapware, Bloatware, etc. have all been coined in a feeble attempt to classify and categorize programs. There is no official designation or definition.
The term is a merging of the word "spy" and the word "software". Literally, spyware is software that spies. What is spying? Spying is looking for and collecting information, often secretly.
Do you honestly believe that, if such a tool were created, the police would have you a report of what information was obtained, and what information was looked for?
Do you believe that there won't be cases where they use the tool on your computers and simply don't tell you?
Do you believe that such a tool, if implemented, would respect your rights and remove all traces of itself from your machine?
You jumped at the chance to shoot someone down and farm some karma by accusing them of not reading the summary.
In doing so, you missed the point of the post entirely (that people will still need to look at the data).
I called you out on it.
You got pedantic, saying the problem with the original post was the use of the term "spyware".
I'm calling you out again.
Re: (Score:3, Informative)
Spying is often done in secret, not always.
And investigations aren't done openly, idiot, especially when you're in the gathering evidence phase, which is what the tool is wanted for. This is why we have stake outs and undercover cops.
TFA and TFS state that they want to use the tool to speed up the analysis of computers.
People will still have to look at any data found, so this will not speed things up any, if at all since they're going to be using the tool on machines seized in raids.
Re:So they want GOV spyware? (Score:5, Interesting)
You don't get the point. Currently all analysis of computers must be done by computer forensic specialists, who are relatively expensive and limited in number. So, say you are investigating Joe Smith, who has 3 computers, a PDA, and a cell phone. You deliver all these to the forensic analysts. At least half a year passes before you get any information from them. At that point, the information is only really useful in a trial, but not in the investigation.
They want something where cheaper people in greater supply (i.e., regular officers) can, in a forensically-valid manner, look for preliminary information so that they can take advantage of it in the investigation and so they can limit the evidence they send for forensic analysis (e.g., the one device out of those five that was used in the crime).
Re:So they want GOV spyware? (Score:5, Funny)
Good job managing to misread the summary.
Yeah! I didn't read the article or the summary and I can tell you I have the following strong opinion: There's no need for breathalizers for computers because if I pour alochol onto my computer it would short out. Therefore to determine if a computer has had alcohol just try and switch it on. If the power comes on and it boots, it hasn't had anything to drink.
Right (Score:5, Insightful)
That's pretty much like building a mind-reader to figure out if a person has ever committed a crime. Good luck with that.
Re:Right (Score:5, Insightful)
Hey asshole, aren't search warrants supposed to explicitly specify what you're looking for? You seized the computer, it should've been for a specific reason, not to conduct a fishing expedition.
Re:Right (Score:5, Interesting)
Well put.
But the governments of this world routinely ignore law (obtain warrant naming specific evidence desired) and instead do exactly what you described - go on a fishing expedition. "Well we came here to get marijuana, but instead we discovered porn on your PC, so you go to jail buddy."
They do this same ____ in the U.S. with random searches of cars. They are supposed to be looking for illegal immigrants, but instead they bring in the dogs and have them sniff for marijuana/cocaine. Then they arrest you.
This shouldn't be allowed.
Re:Right (Score:5, Interesting)
Doesn't this kinda depend? Just because you found something else while looking for your actual thought doesn't mean you have to IGNORE it. If you came looking for credit card fraud and found, say, illegal hacking activity, should they just ignore it? If you go into a house looking for marijuana and you find people being tortured, do you have to go back to the station, get a warrant for looking into that, and then come back?
Now, if they pull you over for "presumably" running a stop sign and sniff your car, that's different. On the other hand, since illegal immigrants and drugs seem to go together, since drug trafficking and immigrant trafficking is a similar thing (smuggling), I don't actually see a problem is searching for both at the same time.
I'm not saying they should be allowed to just randomly show up and search your house without giving a reason, by the way.
It's a fine line between hampering catching criminals by giving "too many rights" and stepping over the bounds of innocent until proven guilty...
"Reasonable suspicion" (Score:5, Informative)
"Reasonable suspicion" is the key phrase here.
If the cop stops you for running a red light and sees something suspicious then he can go further.
But stopping you for one thing does NOT give them the authority to check for everything they can think.
http://en.wikipedia.org/wiki/Reasonable_suspicion [wikipedia.org]
Re:"Reasonable suspicion" (Score:4, Insightful)
What you say is true, HOWEVER, the GPs post is on point.
On Law & Order, they call it the "Plain View Exception".
Apparently it exists IRL too: http://www.policelink.com/training/articles/2043-plain-view-doctrine- [policelink.com]
Re:"Reasonable suspicion" (Score:4, Informative)
I don't know why you're marked informative. I suspect you're telling us about what you think is the case for US law, completely oblivious to the fact that this article is about the UK. (You know, different country, different laws?).
Police in the UK have *far* broader powers to stop and search people on the streets and public roads. IANAL, so I won't go further.
Re:Right (Score:5, Interesting)
At least in the US, evidence found against you found in an illegal search* cannot be used against you. If the search was legal (warrant attained or reasonable suspicion of wrongdoing), then it's your fault for having done whatever other stuff you get hit with, regardless of why you/your home/vehicle was searched. Don't confuse this with secondary offenses, like not having your seat belt on in many states (they can't pull you over specifically for that, but can add it to the ticket).
* if they can see the bag of weed (or whatever) on your back seat through the window, not only is it legal for them to arrest you for it, but it also gives them reasonable suspicion to search the rest of the vehicle without attaining a warrant, even if you protest.
IANAL, YMMV, laws vary by state, etc. And all bets tend to be off at border stops, especially internationally. As far as I'm aware, they have the legal (USA PATRIOT act legal, anyways) right to search your vehicle entirely at any international border.
But back to the topic at hand, if your computer is legitimately siezed, I think you should at least be able to know what processes were used to search for X when Y was found. If they want to arrest you for possession of goat porn, and then they find CP, you should be able to find out that the latter came up when they did a general search for porn, rather than when they explicitly searched for it. Or if they find pirated media when searching for CP, which would be a lot harder to accidentally find by the same 'legit' search. It'll never happen, and good luck auditing the police's methods even if you had the right to do so. Just encrypt all of your crap, and don't have illegal stuff.
My 2c
Re: (Score:3, Insightful)
Just encrypt all of your crap, and don't have illegal stuff.
Amen. With all the practically unbreakable, freely available encryption solutions out there, I don't understand why any criminal who, even occasionally, touches a computer, doesn't use a generous amount of encryption. Encryption stymies any attempt at, after the fact, detection.
Anyway, I guess nobody complains when the dumb criminals make it easy.
Re: (Score:3, Insightful)
I don't understand why any criminal who, even occasionally, touches a computer, doesn't use a generous amount of encryption. Encryption stymies any attempt at, after the fact, detection.
Because most criminals are idiots to begin with. Seriously. Ask any cop how many criminals they've arrested whom would have gotten away with whatever crime they committed if they had kept their mouths shut. Combine that level of stupidity with the fact that the typical criminal isn't going to be very computer savvy and you can see why few of them use encryption.
Re:Right (Score:5, Funny)
Because most criminals are idiots to begin with.
Sigh... You're right. Which is probably why there are so few elaborate bank-jobs, cunning cons, and ridiculously over-the-top plots to blow up buses that fall below 55mph, in the news. I like movies better than real life. Sigh...
Re:Right (Score:4, Interesting)
Which is probably why there are so few elaborate bank-jobs
And I could actually understand the motivation for an elaborate bank-job. You disable the alarm, tunnel into the bank, break open the vault and walk away with a cool million or so. I could get behind that. A million bucks is worth the chance of going to prison......
What isn't worth the chance of going to prison is the dumbass who holds up the bank with a gun and walks away with a lousy $10,000. Even worse is the dumbass who holds up the gas station with a gun and walks away with less than $100. Clearly they didn't do a proper cost benefit analysis ;)
Re:Right (Score:5, Interesting)
I knew a bank robber. I didn't know he was knocking over banks at the time, but he later was in a long distance high speed chase ending in suicide by cop. Pretty surprising to everyone that knew him. I think he got ground down by his circumstances for too long. He spent so many years having to scrimp and do without it made him crazy. I remember him going out to eat a lot and buying little gifts for his friends and seeming happier than usual. I guess for him a lousy $60k (assuming he got $10k per bank) was worth dying for.
The truly weird thing was when he got away from the 5th bank it was very close. He was driving on medians and shoulders, through fields like a maniac during rush hour with dozens of cops on his tail. Somehow he got away and instead of ditching the car and going straight he laid low for a month and did it again.
Re:Right (Score:4, Insightful)
Since this is the UK you will hand over your encryption keys [linuxworld.com.au], have a nice day.
Re: (Score:3, Insightful)
Automated methods for finding hidden partitions could mean checking the bios report on the device against it's partitioned size, or just looking for large binary files that don't have known signatures.
FOREACH [file] in device
IF [file].size>MAX_SIZE && !hasKnownSignature([file])
ARREST_FOR_THOUGHTCRIME('Zekespeak')
IF isImage([file]) && fleshTones([file])>5.0
flagForAnalysis([file])
END FOREACH
Re: (Score:3, Informative)
As far as I'm aware, they have the legal (USA PATRIOT act legal, anyways) right to search your vehicle entirely at any international border.
No. The US Border agencies have had the authority to search you and your accompanying articles long long before the Patriot Act. You with mere suspicion, your articles with no suspicion. (They must still have probable cause to enact an arrest of you or seizure of your merchandise but may detain with reasonable suspicion.)
Re: (Score:3, Insightful)
Re: (Score:3, Interesting)
Sure, unless they decide to search anyway and claim you consented.
Re:Be careful though. (Score:4, Interesting)
I was watching cops (not a regular viewer but was being sociable) and saw a cop search a car claiming a "furtive gesture" as probable cause. I could hardly believe it, here was a guy who knew he was being filmed who apparently decided that showing his ability to get around the need for a warrant was going to be taken as a good thing by viewers. What sticks with me isn't the injustice of it all, it was that a potential jury of peers sitting around watching TV seemed to support the action.
Re: (Score:3, Insightful)
It's a fine line between hampering catching criminals by giving "too many rights" and stepping over the bounds of innocent until proven guilty...
Oh yes, it's so fine a line that it is in fact the same line approached from opposite sides.
Re:Right (Score:4, Informative)
If you go into a house looking for marijuana and you find people being tortured, do you have to go back to the station, get a warrant for looking into that, and then come back?
People being tortured? No, they stop it right then and there.
Evidence of people being tortured? Yeah, you have to get another warrant.
Re:Right (Score:5, Informative)
According to US law, at least (and not always followed by US cops, I might add), whether the evidence on the secondary offense is admissible or not depends on how it was found. If a cop pulls over a car for speeding and sees an open container of beer sitting on the seat next to the driver, the open container is typically admissible. If, on the other hand, the cops raid a house looking for a stolen 62" television and, as long as they're in the house, decide to check in the toilet tank and find a stash of cocaine, that typically is not, since searching the toilet wouldn't have been part of the search for the big TV. Likewise, the original warrant would probably not allow the cops to bring along drug-sniffing dogs on a search for a stolen TV. Of course, I'm generalizing here, and am not a lawyer, but you get the picture.
Thus far, the same principles apply to computer searches. If the warrant says that the cops are looking for evidence related to illegal gambling operations on the computer, the cops are typically not allowed to search for non-related keywords (i.e. "lolita", "cocaine", etc.) unless such terms show up in documents found by the warranted search. If, in reviewing a document named IllegalGamblingProfits.doc, they see a reference to cocaine sales, the cops may have just cause to perform another search looking for cocaine. Since they've already got the computer at that point, though, they'd be better off to go back to the judge and get a 2nd warrant that authorizes the cocaine search, but given the similarities between finding the information in an admissible piece of evidence and seeing the open container in plain sight, I can see how a judge would give the benefit of the doubt in court.
I can't quite tell what the cops in TFA are asking for, though. If, on the one side, they want to be able to bring along a device that's pre-configured with the search terms for the warrant (gambling terms, from the above example), such a device would theoretically be legal in the US, since it would simply be automating the search that would otherwise have been performed by the trained analyst. If, on the other side, they want a device that identifies any illegal activity, that should be unconstitutional for 4th Amendment reasons.
All of the legal discussion ignores the technical aspects. I am a professional forensic analyst, and with relatively good hardware (dual 64-bit CPUs, 10k RPM SATA drives, 4GB of RAM, etc.) it can take hours to perform even a simple search with a small list (i.e. fewer than 5) of static (i.e. non-regex) keywords. Adding complexity in, or adding keywords, can increase the search time to days. There's no way that untrained cops could simply plug a device into a suspect's 5 year old laptop and be able to get results back in less than an hour, and that's not counting the potential modifications to the evidence caused by booting without a write-blocker, doing deleted-file recovery, opening compound files (Outlook offline storage, ZIP files, etc.) or doing signature analysis to identify obfuscated data. Don't even think about it if the suspect thought enough to use encryption [truecrypt.org].
The cops may want something like this, but it will probably be the laws of physics that prevent it and not the Constitution.
Umm, not quite (Score:4, Informative)
Yes, generally anything that is encountered during the course of a lawful search (even if for something else) is admissable. Sure, cops can't go paw the drawer next to your bed looking for a stolen TV but the problem is how this is understood by the courts.
In particular this rule is understood to mean that if the police open your safe looking for a stolen laptop the papers inside would be admissible in court. In other words once the police have cause to look inside a container you own they can examine the contents at their leisure, they need not immediately cease looking the second it's apparent the subject of their warrant isn't present. Now if you had a locked jewelery box inside that safe they likely wouldn't be able to examine the contents if it was outside the scope of the original warrant but the problem is when you try to map this notion onto that of a computer.
In particular it turns out that case law so far has endorsed the idea that the computer is just one big container. Maybe things would be different if you had an encrypted volume on the computer but in general once they have reason to examine your computer for one thing they can examine everything.
In fact the standard practice in the US is to seize your computer and have their experts perform a low level clone of the disk the second they have any reason to search your computer. Moreover, since the 4th ammendment and past case law is grounded in the notions of physical searches and seizures there is no framework for restricting what they can use the HD clone for once it's been made (well privacy laws might prevent them from disclosing your cybersex logs but that's about it)
Re:Right (Score:4, Funny)
and with relatively good hardware (dual 64-bit CPUs, 10k RPM SATA drives, 4GB of RAM, etc.) it can take hours to perform even a simple search with a small list
I believe that's why Vista introduced Instant Search [microsoft.com]. Johnny Law just needs to call ahead and ask the suspect to ensure that it's enabled and properly configured. And that the suspect has at least 4GB of RAM installed, and dual 64-bit CPUs. Also, it would be helpful if the suspect left the computer on so the police don't have to wait around for Vista and Norton and HP to spin up. Hmm. I'm starting to see your point.
Re: (Score:3, Insightful)
The point is, that the original suspicion - the one they got the warrant for - is completely made up and fake. Our whole law system is set up in a way, that there always is something you did "wrong". Always. That's the basic idea of laws nowadays.
So the trick is, that they can put anyone to jail if he does not fit their agenda.
It's like a mafia you can bribe. They will go, make up some "suspicion", search your house, find some obscure thing that's in law book 5000, paragraph 9574 section v, subsection 385,
Re: (Score:3, Interesting)
Doesn't this kinda depend?
Kinda. But when in actual practice, things are routinely done such as pulling over cars going through sections of state and national forests by game wardens so that the local K9 unit can sniff the car for drugs you have to take notice. Why game wardens? Because they have broad powers to search a vehicle on any park land, even through roads, looking for game poaching. This is being used TODAY all the time to pull "suspicious looking" people over, search their cars, and end up making a drug or DUI arrest.
Sadly, yes (Score:4, Insightful)
A lot of "common sense" powers have had to be denied to police, because they've proven themselves incapable of not abusing them. Every counter-intuitive restriction placed on government officials can be traced to an incident of abuse so horrific, that society opted to "tie the hands" of everyone rather than entrust anyone with that power any longer. Really, it takes quite a lot for anyone in government to advocate a limit on governmental powers.
Re:Right (Score:5, Informative)
No, that's not what Mapp v. Ohio established. Mapp v. Ohio established that evidence found in searches *in violation of the 4th amendment* may not be used.
Mapp v. Ohio doesn't say anything about not being able to use evidence found during legal searches, such as those conducted with a warrant.
Re:Right (Score:5, Funny)
Isn't there a plain-sight provision with that rule? If the cops have a warrant to search your house for crack, and see a dead body laying on the kitchen floor, they can go ahead and arrest you for murder.
On advice of my lawyer, I can't really say anything else.
Re:Right (Score:4, Funny)
There's an object lesson here.
Don't hide your crack stash inside the dead body laying on the kitchen floor. It doesn't work, it provides no cover in court, and the necessity of the search really pisses off John Law.
Re: (Score:3, Informative)
That's for things laying around in your car when you get pulled over (or maybe on your front lawn). No warrant is required for something like that, period.
As to searches, any evidence obtained during a legal search can be used as evidence, or as the basis for additional and/or alternative charges. Just because they were looking for drugs doesn't mean they have to ignore the bodies they find under your floorboards, or vice versa.
Re: (Score:3, Informative)
http://en.wikipedia.org/wiki/Plain_view_doctrine [wikipedia.org]
Basically, anything found that isn't on the warrant needs to be in plain view and they can't move items looking for it unless moving items might yield what is specified in the warrant.
Having said that, those are some vague rules and I'm sure a cop could justify looking anywhere he damn well pleases.
I guess if they are looking for a dead body but they look inside the books on your bookshelf and find some drugs
Re:Right (Score:5, Insightful)
Re:Right (Score:5, Insightful)
Except we want cops to catch people with illegal drugs etc.. Why restrain the cops from doing what we all need them to do? Whether its illegal aliens or a bundle of dope I prefer that 100% be detected and punished.
They cannot even keep illegal drugs out of prison (don't take my word for it -- do the research yourself). How do you propose that we do this in a relatively free society? The way it has worked is that some amount of crime is tolerated in exchange for having a free society with things like legally recognized civil rights. With drugs and lately with terrorism the (dangerous) mentality has been that we need to stop $EVIL_THING no matter how high the cost is to the rest of society. This is tunnel vision at best, a step towards a totalitarian government at worst.
But I am curious. Once you see for yourself with your own research that they cannot even keep drugs out of prisons, I would like to know this: what environment even more restrictive than prison would you propose for the entire population in order to better meet your 100% detection/punishment rate? I'd also like to know whom you would entrust with the management of this environment.
Re:Right (Score:5, Insightful)
Except we want cops to catch people with illegal drugs etc..
What do you mean "we", white man?
Why restrain the cops from doing what we all need them to do?
So that they don't trample all over innocent people in their race to jail stoners? So that we can maintain some sort of privacy instead of throwing our doors open to anyone with a badge so that they can rifle through our homes in case we may have been doing something wrong? So that we can keep some kind of checks on the cops so that they might work to protect us while respecting our rights instead of just busting people and feeling like tough-guys on a power trip?
Pick which ever one speaks to you best.
Re: (Score:3, Informative)
"What do you mean "we", white man?"
Explanation for the yung'uns out there...
Lone Ranger: "Tonto! We have a problem! We're surrounded by Indians!" //Stupid, old, joke... //Not racist... //Well, maybe a little //Stole slashies from fark ;)
Tonto: "What do you mean "we" white man?"
Re:Right (Score:5, Informative)
No racism intended - I'm as white as they come. It's from an ancient joke. Basically, the Lone Ranger and Tonto have a horde of angry Indians bearing down on them. The Lone Ranger says, "It looks like we're in a lot of trouble this time, Tonto." Tonto replies, "What you mean 'we', white man?"
Basically, I was just trying to point out that b4upoo was making an assumption that we're all in the same camp here, when we're definitely not - I don't want to sacrifice my rights so that the cops can catch a few more pot smokers. That excludes me from his inclusive "we" in:
Except we want cops to catch people with illegal drugs etc.. Why restrain the cops from doing what we all need them to do?
The joke isn't remotely a perfect parallel, but I thought it would be amusing. Sorry if it came across racist (although feel free to nail me for calling Native Americans "Indians" when explaining the joke - At least I refrained from including the phrase "feathers, not dots".)
Re:Right (Score:5, Insightful)
Except we want cops to catch people with illegal drugs etc.. Why restrain the cops from doing what we all need them to do?
You seem to be excluding people with illegal drugs from this group you erroneously label as "all". Be careful you do not find yourself similarly excluded.
And sometimes they're not even caught with drugs but rather caught with "too much" cash on their person.
Whether its illegal aliens or a bundle of dope I prefer that 100% be detected and punished.
"Vote Fascist for a Third Glorious Decade of Total Law Enforcement."
If every law is enforced 100% of the time, you live in a police state and have no real freedom, where even the tiniest of harmless infractions will bring harsh penalties:
Re:Right (Score:5, Funny)
Re: (Score:3, Insightful)
To hell with that. The current classification for which drugs are legal and illegal is totally messed up in my opinion. We need to re-evaluate what we're banning before we go off on such tangents.
The problem is that there's not much political power to be had under this sort of reasoning. No new bureaus and departments to be created, no new positions to staff with your cronies, and no excuses to expand budgets and governmental power. It's such a good idea that it'll never happen without radical changes to the way things are done.
Re: (Score:3, Funny)
Hey asshole, aren't search warrants supposed to explicitly specify what you're looking for? You seized the computer, it should've been for a specific reason, not to conduct a fishing expedition.
Duh! They're looking for Illegal Activity, which is the specific reason they seized the computer!
Re: (Score:3, Interesting)
IMHO, searching a computer is akin to searching someone during questioning.
Questioning someone who has been Mirandized: fine.
Going through their belongings with a search warrant to find something specific: fine.
Going through a computer willy-nilly on a fishing expedition: not fine.
Re:Right (Score:5, Informative)
Actually, that's not the problem they're trying to solve. I don't know about in the UK, but in the US, any kind of searching (including hash comparisons and automated tools like this) require a search warrant that covers the computer.
What they're really interested in is not conducting fishing expeditions, but trying to find some useful information -- even just narrowing down which machine they actually need to fully analyze -- within the machines covered by a search warrant. Generally the procedure is to box these things up, hand them over to computer forensic experts, and wait 6-12 months for them to perform a full analysis. Cutting down the amount of work they have to do by giving them only the one computer out of ten that is actually interesting, or being able to pull some small amount of useful information to use in the investigation immediately, is of great value.
This is at least a big concern in the US -- computer forensic investigations are slow and costly, and there's a huge backlog.
Not that I think they'll be able to make software that magically tells them if a computer was involved in illegal activity -- but the majority of computer criminals are dumb as bricks and could probably be caught by doing a full-disk grep for files containing more than a couple of strings that look like credit card numbers.
Re: (Score:3, Insightful)
What statements? They're not going to be able to lie about whether or not they had a warrant.
Re: (Score:3, Insightful)
That's pretty much like building a mind-reader to figure out if a person has ever committed a crime. Good luck with that.
Or like exploiting three people capable of seeing into the future [imdb.com] in order to generate police reports and make arrests.
As we learned, nothing can possibly go wrong!
Re:Right (Score:4, Funny)
Re:Right (Score:4, Insightful)
Yeah, or they want remote access:
"McMurdie also discussed the possibility of setting up a "central forensic server", where digital forensic experts from across the UK could log in and analyse whatever systems were plugged into it."
Wow, are police in the UK really that dumb? They either want a magic wand that tells you if a computer has "illegal" content on it, or they want what has already existed since before the internet?
But... (Score:3, Funny)
Re:But... (Score:5, Funny)
Won't that only work with alcohol cooled systems?
Yeah, but unless the alcohol cooled computer is driving a car, I don't see how that's illegal.
But seriously, people, don't let your PC drive under the influence. Yeah, yeah, it says that it's "overclocked' and much more efficient than when it's just running on water, but then it'll kill a little old C64 crossing the street and wind up in "Pound Me In the USB Port" Prison.
Re: (Score:3, Funny)
I once had a bourbon cooled CPU. Then it overheated, because I drank it all.
Good luck with that (Score:5, Insightful)
Re:Good luck with that (Score:5, Informative)
I used to do a bit of work at the local police department. In my time I set them up a forensics station for PC's.
The most important part of the entire project was ensuring the data was not tampered with (or deleted on accident!) in order to actually use what was found for anything useful.
Wasn't a very hard project what we did was setup a PC with two removable bays and a write protect jumper and showed the officers which part needs to come out of PC brought in as evidence and how to put it into the removable caddy and launch the script that made an image of the drive. At no time while in police custody would the hard drive have power unless it was write protected, and was in an sealed evidence bag if not being used. Once the image was completed they would remove the original and do all the forensics on the copy, which got the same evidence bag treatment as the original.
Don't quit your day job, detective superintendent (Score:5, Insightful)
Re:Don't quit your day job, detective superintende (Score:4, Insightful)
Her day job is architect of the UK's Police Central E-crime Unit, so it might be a bit late for that.
Having said that, I get the distinct impression from RTFA that this is pie-in-the-sky "this is the sort of tool we'd like in an ideal world, not that it's even remotely practical" rather than something that's in active development:
said frontline police ideally need a digital forensic tool as easy to use as the breathalyser, to help them deal with growing numbers of computers being seized during raids on suspects' homes
Yep, and I bet they'd like a machine which they can just turn on, punch in details of an unsolved crime and bingo! it tells you the perpetrators name, address, telephone number, the car they drive, their plans for the next 48 hours and where sufficient evidence to obtain a conviction can be found. It's fairly obvious from the article that whatever qualification this woman has, none of them involve technology.
Outlaw encryption (Score:4, Insightful)
The next inevitable step for the UK gov't will be to outlaw using encryption on personal computers, because it's "too hard" to break.
This isn't a slippery slope for the UK anymore, it's a landslide, rushing down the mountain, annihilating everything in its way.
Sad.
Re:Outlaw encryption (Score:5, Insightful)
Too late - in Britain, it is a crime to refuse to turn-over your encryption key to the police when requested (no 5th amendment rights).
Re:Outlaw encryption (Score:5, Interesting)
Re: (Score:3, Informative)
That's when the "rubber-hose" encryption-breaking procedures start.
(England prevails.)
Re:Outlaw encryption THE OFFICIAL's HELP-U-OUT (Score:3, Funny)
Okay, Sir. We'll just help you out by deleting all those pesky empty files and perform a wipe of your free space afterwards. This will recover all that space that you assure us has nothing of value in it. And then we'll check up on you every week or three just to ensure, mind you, that you don't have any of that pesky encry
Re: (Score:3, Informative)
Re:Outlaw encryption (Score:4, Insightful)
That scheme falls apart when the investigators know what TrueCrypt does.
"Give me your password. No, the one for the hidden volume."
Re:Outlaw encryption (Score:5, Insightful)
They cannot prove that a hidden volume even exists, that is the whole point.
Re:Outlaw encryption (Score:4, Funny)
In that case, I guess it'd be a really bad idea to install TrueCrypt unless you really do have something to hide. Wait, you have TrueCrypt installed?
Now, a clever man would have known it'd be stupid to install it if you have nothing to hide, because only a great fool would install it without having anything to hide! However, I am not a great fool, so I can clearly know that you're hiding something! But you must have known that I was not a great fool, in fact, you would have counted on it, so you clearly must be hiding something! Now tell us the password!
Yeah, right... (Score:5, Insightful)
UK up in arms. (Score:3, Funny)
2) Write a script to automatically crawl 4chan's
3) Be somewhere else when the party van arrives
4) KABOOM!
5) Nelson from the Simpsons would then usually say "ha-ha!" but he's locked up on child porn charges because he posted his own nudes on the internet.
Re: (Score:3, Funny)
3) Be somewhere else when the party van arrives
I love it! You owe me a keyboard!
they also want (Score:5, Funny)
Top brass also wants a date with Scarlett Johansson. And a pony for each officer on the force.
I figure the odds are about the same for each.
I can see (Score:4, Interesting)
Dumbest. Idea. Ever. (Score:5, Insightful)
What next, a breathalyser for paedophiles? Murderers? Terrorists? Why does not the UK police use that money to train their people or hire new specialists instead of trying to build a perpetuum mobile? Any criminal worth spending this project's money on is savvy enough to fully encrypt his hard disk. If they are so dumb not to encrypt compromising data, any cop with a few hours of training could find it. So what is this project really aiming at?
Re: (Score:3, Insightful)
Why does not the UK police use that money to train their people or hire new specialists instead of trying to build a perpetuum mobile?
Because the "top brass"'s nephew only sells USB trinkets, not training for specialists.
Re: (Score:3, Insightful)
So what is this project really aiming at?
Do you really want to know? Think about what breathalyzers do. They are used by the cops to get a number off you. That number has been used by law makers and such that anything above a number is instant DWI, anything between some numbers is up to the cop, and anything below a certain number the cops just let you go because they know that they it's too low to make get through a court.
That's what this person wants. A black box that any idiot cop can use on a computer a
Interpretation (Score:4, Interesting)
It costs too much money for the Police to pay quality IT Forensics folks. The police want a simple green, yellow, or red light that the police can follow, that is closed source and has it's AI written by policy makers to decide what is legal or questionable.
The Truth (Score:5, Insightful)
Why do cops always want an easy job? (Score:5, Insightful)
I think this is another example of relatively well-meaning people who fail to comprehend how dangerous their intentions are because they don't think them through. Let's say there is a device that can be plugged into a PC (maybe the USB port?) and almost instantly tell you whether it has illegal content with no need for expert analysis. Yeah I know that I should also posit the existence of the tooth fairy but bear with me. Who makes this device? How trustworthy are they? Do competitors or other rivals oddly happen to have a higher percentage of "illegal" PCs? Is the device a black box or can the average person examine and scrutinize it? If the cops already don't have the staff or the expertise to perform forensic analysis on PCs, what's our guarantee that they will correctly use this device or that they can offer any sort of assurance that the way it is used won't violate anyone's civil rights? What's to prevent criminals from obtaining one (by whatever means) and making sure that their illegal data isn't where this thing is looking? If I can think of this in a few minutes, WTF are these people smoking that they consider this a serious proposal? Or do they simply not care about these concerns?
You know what you'll probably never see? The police "top brass" asking for a device to help make sure that their officers don't violate anyone's civil rights and that they follow all the laws concerning due process.
Perfect counter to that (Score:5, Funny)
I'll just use a hot glue gun to seal up all of my usb ports and use ps/2 connectors for mouse and keyboard.
fuzz: HOLY SHIT! THIS GUY MUST BE SOME SORT OF UBER_HACKER!!!
me: Too fucking right. Now you piggies hurry on back to the donut shop or I'll make your cruiser drive you down to the gay district on autopilot with YMCA blaring from the radio. (holds hands up over head, makes "whoooooooooing" scary sound, wiggles fingers menacingly)
fuzz: BETTER TAKE HIM SERIOUSLY! HE COULD DO IT!!
me: Heh. Wankers.
The Headline (Score:4, Insightful)
*hic* (Score:3, Funny)
well i *hic* thinkj tihs is a stipid idea, *hic* and sos ur mothar!1
Doesn't go far enough (Score:5, Funny)
Forget a tool for computers. We need a tool like this for physical crime scenes. You know: something that would, like, scan crime scenes and find, like, relevant DNA evidence and shit. It could even have an option where it would print out an arrest warrant with the name of the murderer on it.
Yes, and I want a Pony.... (Score:3, Interesting)
Seriously, wanting something does not make it appear or even possible to exist. Most people have learned that by age 5. My take is that today it is not even possible to determine what illegal contents is automatically, regardless of what amount of ressources you throw at it. I belive that the AI problem would need to be solved first, and that has been eluding humanity for several decades now, to the point that it is still unclear today whether it will be solved ever.
The solution is of course simple: Decide how important this really is, and then throw the appropriate amount of money at hiring experts. Chances are this turns out to be basically a non-issue. The hard stuff (children harmed in production) is identifiable for cops as well. The soft stuff (music, films, games) is not relevant to continued prosperity of the human race and only gets this much attention because some people turned it into a goldmine. It does not have to be at all. I would expect that broadband Internet and large HDDs make significantly more profit than Hollywood and the music industry combined. And the artists? I do not see any problem there either. Go to a donation-model and the ones that are creative and good will still live well. The others are not of any importance anyways.
Re: (Score:3, Funny)
The rest go into software project management.
Analyse? (Score:4, Funny)
the majority of cops don't have the skills to forensically analyse a computer
The majority of cops doesn't even have the skills to find my computer halfway up the old chimney;P However, I'm looking forward to the day they have to work their way through my massive computer-cemetery;->
why police like drug offenses (Score:5, Insightful)
As other posters have noted, cyber fraud is hard to prove, since the evidence it leaves behind (data, transactions, account numbers) looks so much like legal commerce. It takes a lot of smart work by educated professionals to prove the difference.
Now you know one of the reasons that the police like drug laws so much: The key facts can be understood and collected by an officer with an IQ of 80 and just a couple months of training.
easy to use -- easy to fool (Score:3, Insightful)
The first thing that occurs to me is that any appliance easy enough for a beat cop to use couldn't be very high-grade forensics. If there is a standard set of techniques used by the appliance, there will almost immediately (as soon as one is stolen) be a standard set of work-arounds. After which, only the profoundly stupid and/or set-up will ever be caught.
On the other hand, it occurs to me that the authorities only need the occasional high-profile arrest to keep funding going, so maybe it's a win-win for all -- the gov'ment gets credit for "cracking down on porn" and the hard cores have a known set of procedures to keep their stuff under cover.
The United Kingdom is now The Village (Score:3, Insightful)
And you're ALL Number 6.
Do you have the courage that Number 6 had? Will you fight back against Number 2?
Are you just "A number" or are you Free Men & Women?
The choice is yours.
Re: (Score:3, Insightful)
Three things:
1) Plain sight rule. If there is something incriminating on the screen, then the evidence is admissible.
2) A warrant can include a search of the computer.
3) If the person is suspected of using the computer to commit a crime, such as luring a child or sending threatening emails as harassment, then the police have probable cause.
Re: (Score:3, Interesting)
Seems to me this would bring up all problems about probable cause. Just because there is a computer doesn't necessarily mean it's been used for anything illegal, and can't be investigated because of that. It's kind of like, if the cops have a warrant to search for marijuana, and they find a gun, they can't take the gun in as evidence and run it and find that it's the murder weapon in something unrelated. Their warrant is for the marijuana, and just because they find a gun doesn't mean it's anything sinister.
Had you read the first word in the headline ("UK"), and had you a single iota of knowledge about the UK, you'd know that handguns are illegal and other guns are meant to be kept in a locked cabinet when not in use.
In which case, finding a gun almost certainly is evidence of something sinister.
Re: (Score:3, Insightful)
I think people misunderstand the nature of law enforcement in the UK (and elsewhere)
1) we have LOTS of laws
2) Every one is guilty of something
3) The police know that you are guilty
4) At the moment they have to specify what of.
The primary strategy is to try and remove requirement ( 4) but an automated identification of your special crime would be a big help.
Re: (Score:3, Insightful)
Usually, only the stupid ones get caught. Knowing to do what you have suggested, moves one out of the realm of stupid.
IT'S IN THE GODDAMN RFC! (Score:4, Insightful)
It's in the goddamn rfc, they HAVE to follow it. What are you, from Microsoft?
Re:Now, THIS would be entertaining... (Score:4, Interesting)
I'm just waiting for the day when a botnet herder decides to find out the answer to the question of "what will the government do when *everyone* is a criminal?"... and malware sends a "care package" to 1,000,000+ computers, consisting of illegal content {child porn / whatever) - then reports the IP addresses to the authorities.
If the sort of people who ran botnets were the sort of people who want better laws and police, that would happen. I rather think that is the last thing they want.
What is more likely (if it is not happening already) is that more targeted hacks are being used to plant material on computers, hidden where are non-knowledgeable user would not easily find it, and then blackmailing them. A few files could be placed in open view to prove that the threat was real - or perhaps a random illegal image could be popped up at intervals to keep the pressure up.
Most people would be too scared to get help, and would roll over.