DOJ Cracks Suspect's Hard Drives, Quickly Drops Request To Force Him To Decrypt
from the staying-far-away-from-a-precedent dept
We've been covering the DOJ's case against Jeffrey Feldman, in which they were trying to force him to decrypt some hard drives he had in order to get evidence to be used against him. This is a tricky area of law, because some courts have said that the 5th Amendment protects against being forced to decrypt evidence that can be used against you, while others have gone the other way. In this case, judges went back and forth, and the fight was still being fought.However, it appears the feds likely cracked Feldman's password for his hard drives, and wasted little time in asking the court to dismiss the application to compel Feldman to decrypt. Basically, they point out that they don't need it any more, because "the government has now successfully decrypted two of Feldman's hard drives," providing it with more than enough evidence to put him in jail for a long, long time. Of course, this undoubtedly makes the DOJ fairly happy, because the last thing it wants right now is a higher court precedent on the books saying that someone can't be compelled to decrypt such data. I'm sure another case will come along to take on this issue before too long, but for now, the government is able to just keep the decks clear of binding precedent.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: 5th amendment, doj, encryption, jeffrey feldman
Reader Comments
Subscribe: RSS
View by: Time | Thread
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
I'm not sure what they are trying to accuse him of, I don't believe it's relevant to the question being asked, but any sane person who has watched recent case law shouldn't put any modicum of trust in the DoJ or any prosecutor being employed by the state.
[ link to this | view in chronology ]
Re: Re: Re:
I doubt the DOJ would do as you say but, unfortunately, it wouldn't surprise me that much if they did.
[ link to this | view in chronology ]
Re: Re: Re: Re:
Because if under cross examination it came out that the suspect could not have possibly encrypted that drive, the prosecution would have been screwed and probably put in prison.
It's a factor of denial. Of course the suspect is going to deny illegal content being on the drive, however, if the prosecution can't prove that he encrypted the drive, their case falls apart.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re:
The day I see U.S. government officials get jailed for breaking the law is the day I'll believe it. Until then only seeing is believing.
[ link to this | view in chronology ]
Re:
It's difficult or suspicious to plant evidence on a hard drive that is fully encrypted. Because any evidence you plant will not belong to the encrypted partition or be decrypted using the master key used to encrypt it.
However, if only *some* of it is encrypted, then there is little anyone can do to prevent evidence planting.
My most likely answer is that the password used on his partition was just "computer" or "password". Which is where the encryption scheme fails most of the time, can't encrypt against shoddy passwords.
[ link to this | view in chronology ]
Decryption, NSA style
[ link to this | view in chronology ]
Am I the only one who..
(I suspect that they cracked it because the password wasn't strong enough.)
[ link to this | view in chronology ]
Re: Am I the only one who..
Modern civilization is getting so fucking worked right now. Authorities are abusing their authorities and our DOJ is a trustworthy as a fucking crack head. Actually, they are fucking crack heads, aren't they? Dog hunts.
[ link to this | view in chronology ]
decryption or description?
This surveillance state will end very badly for everyone. And the worst part, it's like a runaway train that nobody wants except a handful of bureaucrats and government contractors. It's that last that's most worrisome, because remember, the companies that get contracts from the government to spy on us, also have other private parties for clients. If they find something while working for the government that can really help their private clients, how long you think that "firewall" is going to last? Maybe on their way to looking for terrorists, they happen to come across the fact that approximately 2 million women are doing internet searches on "breast cancer treatments". How long before that information ends up in the hands of prospective employers looking to make sure future employees don't make a lot of claims on health insurance?
I'm optimistic, though, at the number of people from all over the political spectrum who are outraged and furious about this immoral spying. There are going to be some interesting crises when the people running the Surveillance State come up against voters who don't want to live under their noses. How long do you think your "Constitution" is going to keep our society intact when they decide elections aren't convenient. Or good for business.
[ link to this | view in chronology ]
Good dreams gone wrong.
[ link to this | view in chronology ]
Re: Good dreams gone wrong.
[ link to this | view in chronology ]
All bootable OS encryption software I've seen requires a user generated password, before the operating system will boot. So chances are he used a weak password, short on length and with a low entropy.
Perhaps he was using some propriety encryption software, such as Microsoft's Bitlocker OS encryption software. I'd wager he used a weak password though.
Which ever agency broke his password, they probably profiled his online and work passwords for password patterns. Which can significantly increase a password guessing algorithm's success rate.
This is why 'key stretching' is so important for passwords. Key stretching requires a password be hashed hundreds or thousands of times, before storing the final hash value as the key which performs encryption/decryption.
So if someone tries to guess your password, and your password is stretched uses a 10,000 round PBKDF2 hashing algorithm. Then the cracker's computer will have to hash each guess, 10,000 times before being able to submit the 10,000th hash value for each single password guess. Which slows their guess rates way down.
I go all out with dmcrypt/LUKS on GNU/Linux. After entering my boot password into LUKS, it takes over a minute to verify if the password is correct. I think it's well over 100,000 hash rounds before it can verify the password.
Just because you're using key stretching, that doesn't mean long passwords with good entropy aren't still important. Key stretching simply complements strong passwords and slows down the rate of guessing attempts per second.
Sadly, I haven't seen any options to increase key stretch hashing rounds in TrueCrypt. I'm sure it's possible to adjust, but may require a change to the source code and subsequent recompile.
[ link to this | view in chronology ]
They produce a 'cracked' drive with evidence that Feldman was a necrophiliac, stolen/abused/returned Abraham Lincoln's corpse then punched some babies in the face, stole their candy, infected it with Anthrax and fed the candy to orphans.
Feldmans choices:
Action:
decrypt the drive and show everyone the files PROVING he didn't do this stuff
Result- DOJ gets an unencrypted drive
Action:
Refuse to decrypt the drive and the judge then has only the DOJ's word to go on that it didn't entirely fake the drive
Result - Feldman goes to prison on potentially faked evidence.
Either way the DOJ wins.
What SHOULD have happened is a neutral third party should have taken control of the drive and given copies of the drive to both parties and would be able to verify or refute if the DOJs cracking key works.
To be honest the 'original' drive probably had its stickers removed and stuck onto a totally different drive unit by the DOJ by now (They've done worse in other cases).
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
They don't need it anymore?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
if it came out that they presented evidence that was incorrect then not only with their credibility be shot; but all of the cases they have worked on will be up for review.
No one here has any evidence to support their claims that the DOJ planted any evidence, or that the password was easy to crack.
If through examination, or brute-force, the password is found then the child abuse material can be viewed and tied back to the computer.
If the guy wanted to prove his innocence he could decrypt the drives for everyone. If through a repeatable process the DOJ could show how they decrypted the drives (which can be requested by defence) then what are you all complaining about.
[ link to this | view in chronology ]
forget it?
[ link to this | view in chronology ]
Re: forget it?
Which is a pretty nasty little trap to be in if you've actually forgotten the password.
[ link to this | view in chronology ]
Oh and on a side note: unlocking it will start the special purge of secret side that has a 32 random character password. Yeah it is a pain to automatic the process that load balances the two encrypted sides but paranoia and tin foil hats give me the strength to keep the crazy going.
The point is I have the right to act crazy even if it is all legit or not. And few people could really claim that you should automatically be able to recall a 32 random character password - hell most people around the office cannot remember the simple 8 character password after a weekend.
Finally it is not about me "proving I am innocence". I am innocence until proven guilty. How is all this not self-incrimination?
[ link to this | view in chronology ]
The first step the feds do is make a copy, the purge wont help much.
[ link to this | view in chronology ]