New York's Top Prosecutor Says We Need New Laws To Fight iPhone/Android Encryption
from the because-child-murdering-drug-dealers,-of-course dept
The greatest threat to law enforcement since the motocar continues to receive attention from entities aghast at the notion that peoples' communications and data might not be instantly accessible by law enforcement. Apple's decision (followed shortly thereafter by Google) to offer default encryption for phone users has kicked off an avalanche of paranoid hyperbole declaring this effort to be a boon for pedophiles, murders and drug dealers.
New laws have been called for and efforts are being made to modify existing laws to force Apple and Google into providing "law enforcement-only" backdoors, as if such a thing were actually possible. New York County's top prosecutor, Manhattan DA Cyrus Vance -- speaking at an FBI-hosted cybersecurity conference -- is the latest to offer up a version of "there ought to be a law."
Federal and state governments should consider passing laws that forbid smartphones, tablets and other such devices from being “sealed off from law enforcement,” Manhattan District Attorney Cyrus Vance said today in an interview at a cybersecurity conference in New York.Sure. These entities could "consider" this. And then swiftly discard the idea. There's no good reason why millions of people's data and communications should be made less secure just to make capturing criminals -- a small minority of the population -- easier. There are only law enforcement reasons. And those reasons are specious, at best. Cops have been catching criminals since long before the rise of the cellphone and they'll continue to do so long after default encryption becomes standard operating procedure.
But to hear opponents of Apple's move tell it, encryption-by-default is an unfair impediment to investigative and law enforcement agencies.
“It’s developed into a sort of high-stakes game,” Vance said. “They’ve eliminated accessibility in order to market the product. Now that means we have to figure out how to solve a problem that we didn’t create.”Vance's portrayal of this decision is dishonest and self-serving, but it's his last sentence that is the most skewed. Law enforcement (along with investigative and national security agencies) did create this problem. They abused their powers to obtain warrantless access to metadata, data, communications, and anything stored locally on the phone. Cops routinely searched phones of those they detained without a warrant, something that was finally curbed by a Supreme Court decison. The NSA, FBI and law enforcement agencies all use the Third Party Doctrine to access call records, cell site location data and anything else that can be easily had without ever approaching a judge. So, they did bring this on themselves. And that's why (as the oft-used quote goes) the "pendulum" has "swung the other way."
It's not marketing. It's a very specific reaction to years of unchecked government power. It's obvious the government can't restrain itself. So, these companies have made it "easier" for the government to refrain from abusing its power by making this decision for them. Sure, there's a limited market for more security, but making it default going forward gains these companies nothing in terms of new customers. It's not an option that's only available to people who buy certain phones or certain service contracts. It's for everyone who buys a phone. Vance echoes the statements of others in his attempt to portray this as a purely mercenary decision but the only thing this does is make him look stupider.
After ticking the mandatory "crimes against children/murderers" emotional-plea checkbox, Vance goes on to cross "public safety" off the list of talking points.
“This is an issue of public safety,” Vance said. “The companies made a conscious decision -- which they marketed -- to make these devices inaccessible. Now it’s our job to figure out how we can do our job in that environment.”Incredibly, Vance portrays his deployment of every anti-encryption cliche as special and unique, claiming he's "going rogue" by speaking up on the subject. (Because everyone else has been oh so silent...) But there's nothing new being said here. Again, Vance pushes the "greed" angle, but it's his last sentence that's the most ridiculous.
Vance -- and others like him -- aren't "figuring out" how to do their jobs in "this environment." They have no desire to do that. What they want is to change the environment. The new environment doesn't cater to their instant access desires, but rather than deal with the limitations and approach them intelligently, they've chosen to portray encryption-by-default as Google and Apple's new plan to make a ton of money selling smartphones to child molesters and murderers.
They want the laws to change, rather than law enforcement. And all they've offered in support are panic-button-mashing "arguments" and heated hyperbole. The problem is that panic buttons and hyperbole are effective legislative mobilizers. As bad as Vance's ideas are, there's a good chance he'll be able to find a number of politicians that agree with him. In all likelihood, the environment will be forced to adapt to law enforcement, rather than the other way around.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: cyrus vance, encryption, mobile encryption, privacy
Reader Comments
The First Word
“Far far worse
Many people have started to actually lock their doors! How can the police be expected to keep us all safe if they cannot walk in unannounced and check that we are being good citizens?There ought to be a law!
Subscribe: RSS
View by: Time | Thread
So he's advocating WEAKENING cybersecurity in a cybersecurity conference. Awesome.
“This is an issue of public safety,” Vance said.
Indeed, your efforts to undermine encryption are putting everybody at greater risk of being hacked.
Now it’s our job to figure out how we can do our job in that environment.
Yes, you should be the ones adapting to the times, not the contrary as it was noted. You know, go do your basic investigative work.
So let's recap: he advocates the weakening of security, puts everybody at risk and implies it's ok because they shouldn't be putting effort in their jobs. I feel oh so much safer now.
[ link to this | view in chronology ]
Re:
But, But But.. that means leaving the warm office and comfy chair and wearing out expensive shoe leather, not to mention getting wet when it rains.
/Sarc
[ link to this | view in chronology ]
Re: Re:
And they might from those desks send him warnings that he a Class 3 predator is living less than 1000' from a school in NYC. He needs to be warned that he is therefore breaking the law and must move out rather soon.
[ link to this | view in chronology ]
On a side note
The bad guys now know with 100% certainty there will be exploitable means to gain access systems, so in effect he is aiding and abetting the enemy.
[ link to this | view in chronology ]
Re: On a side note
IANAL but I'm pretty sure there has to be a specific enemy that a person is aiding with particular actions to rise to the level of treason. Actions that may at some indefinite time in the future be beneficial to an unspecified enemy would not qualify.
[ link to this | view in chronology ]
Tax Evasion
Wasn't Ms. Manning convicted of the espionage act and "aiding and abetting the enemy" without the consideration of a specific enemy, merely some terrorists or foreign adversaries somewhere?
[ link to this | view in chronology ]
Re: Tax Evasion
I don't know, but I don't think she was convicted of treason.
[ link to this | view in chronology ]
Re: Tax Evasion
[ link to this | view in chronology ]
Three, apparently obscene, words...
...
'... and other such devices from being “sealed off from law enforcement'
Add just three words to the above, and the argument becomes an honest one. The statements, honest. Just three, tiny, yet incredibly important words.
'Without a warrant'
Adding encryption to a phone or tablet does make it 'inaccessible' to law enforcement... without a warrant.
Making encryption mandatory on all new devices does 'seal them off' from law enforcement... without a warrant.
Nothing has changed if they get a warrant before browsing. What they are throwing fits about is not being unable to search phones and tablets and other electronic devices, because they can still do all of that. No, what they are throwing a tantrum about is the fact that encryption means they can no longer do it unsupervised. They can no longer look through someone's phone without their knowledge, and without having to provide solid evidence for why they should be allowed to do so to a judge.
If they want to start being honest, and admit that nothing has changed if they are willing to follow the law, then we might be able to have a reasonable conversation. It likely won't go in their favor, due to the reason encryption has entered the public eye, but we could at least have a reasonable discussion regarding the balance between personal privacy and public safety.
Until then though, until that happens, then they are doing nothing less than acting the part of spoiled children who, upon losing their favorite toy due to mis-using it, are now throwing childish tantrums in an attempt to get it back, lashing out and blaming everyone but themselves for the loss of their 'toy'.
[ link to this | view in chronology ]
Re: Three, apparently obscene, words...
[ link to this | view in chronology ]
Re: Re: Three, apparently obscene, words...
Being forced to hand over incriminating evidence by pretending that providing the 'key' to unlock it has no connection to said evidence is a problem, and one that needs to be dealt with, but at least if it reaches that point, then the police have found themselves in court. They've made their case as to why they believe they are justified in examining the contents of your device, and most importantly, their arguments can be challenged. It may be after the fact, after the hearing, and at the point where you are ordered to provide your password, but by going before a judge, they have presented their reasoning in a semi-public format, allowing those reasons to be challenged by the owner of the device.
If they don't have to go before a judge though? Then they can do pretty much whatever they want, and if you're lucky you'll know that they rooted through your electronic possessions. Technically there are laws against that sort of 'casual browsing', and the SC even ruled against it, but police... well, they don't really pay much attention to those 'law' things if they get in the way of what they want to do, which is where encryption comes into play, as they can't just 'ignore' that.
[ link to this | view in chronology ]
Re: Three, apparently obscene, words...
It seems law enforcement seeks to circumvent the law (or break it without penalty) while expecting us to uphold the law. Law enforcement should be held to a higher standard then the average citizen. We are not bound by oath while they are.
[ link to this | view in chronology ]
"There ought to be a law"
Well, guess what. There is a law, an actual constitutional right in the highest law of the land to safety in your assets including your communications, safety from being accessed by state authorities without warrant.
If the government did not constantly be in breach of this law, encryption would not be an issue.
If you don't want people to start taking care of their constitutional rights themselves, stop breaching them.
Or you leave law-heeding citizens no recourse but to revert to protecting themselves with technical measures from the crimes of their government.
[ link to this | view in chronology ]
Re: "There ought to be a law"
[ link to this | view in chronology ]
Re: "There ought to be a law"
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
New Law
[ link to this | view in chronology ]
Re: New Law
But too many people are shielding the very idiots you want to get rid of so the law of equilibrium takes effect instead.
The more stupid people allowed to survive... the more stupid people that can vote in stupid people. And when there is a whole lot of stupid... its really difficult for the non-stupid to improve things.
Now... guess who likes to protect the stupid the most?
[ link to this | view in chronology ]
Re: New Law
[ link to this | view in chronology ]
Far far worse
There ought to be a law!
[ link to this | view in chronology ]
Re: Far far worse
I know that the raging Libertarians at Techdirt have a problem with the militarization of police, but it is only a response to the tools and capabilities that criminals have. We wouldn't need armored cars if criminals didn't have access to guns. We wouldn't need to learn how to physically restrain people if they complied with out requests. We wouldn't need things like breaching rounds, crowbars, lock pick guns, or portable rams if doors could be accessable to law enforcement.
Stop thinking about how good people use door locks. That's not what worries and frustrates us. What keeps us up at night is the thought of the violence done to innocent people because bad people now have tools available to them that serve to enable their activites.
All it takes for evil to prevail is for good men to be unable to turn the knob.
[ link to this | view in chronology ]
Re: Re: Far far worse
because if you *are* serious, you are both sadly mistaken in your apprehensions, and seriously deficient in the ideals of a free society...
[ link to this | view in chronology ]
Re: Re: Re: Far far worse
I think it is a given that genuine freedom to do exactly what one wants whenever they want to do it is impractical and dangerous. That's the general point for laws and government.
In this scenario, we are discussing a convenient and effective deterrent from law enforcement doing their jobs (encryption). Worse than being a deterrent for law enforcement, it's an enabler for criminals. If people want to be safe, at some point there has to be trust with the people who are being tasked to help keep them safe.
Trust that when an officer or law enforcement in general needs something, its for everyone's safety and well being, and requires compliance.
Trust that success is based on more than free society, but also the freedom and discretion of those tasked to protect it.
There's this chesnut that freedom isn't free. That cost will only be higher when criminals have all of the advantages.
Let us do our jobs.
Trust us.
[ link to this | view in chronology ]
Re: Re: Re: Re: Far far worse
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Far far worse
The main reason I decided to write the posts could be chalked up to a moment of realization (aided by sleep deprivation).
When law enforcement opposes things like encryption, its because they're essentially thinking along the lines I typed. They're blind to the concept the evil in tools is how you use them, and that the world would be a better place if you would just shut up, let them do whatever they want, and trust them that they'll never make a mistake or act out malice.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Far far worse
[ link to this | view in chronology ]
Re: Far far worse
[ link to this | view in chronology ]
Re: Far far worse
[ link to this | view in chronology ]
"Are we going to allow a means of communications which it simply isn't possible to read?" Cameron said Monday while campaigning, in reference to apps such as WhatsApp, Snapchat, and other encrypted services. "My answer to that question is: 'No, we must not.'"
http://arstechnica.com/tech-policy/2015/01/uk-prime-minister-wants-backdoors-into-messaging-ap ps-or-hell-ban-them/
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
It is as far as they are concerned, because anonymity and private communication was central to the revolution that created the USA, and they know this.
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
Spanish authorities already said that. One wonders if the US will follow suit soon.
[ link to this | view in chronology ]
According to the NSA...
[ link to this | view in chronology ]
Re: Re: Re:
They aren't saying that. They're saying that strong encryption is a tool that only terrorists need. That's not only radically incorrect, it's only a half step from saying that if you use strong crypto, you must be a terrorist.
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Everybody chime in
[ link to this | view in chronology ]
Re: Everybody chime in
[ link to this | view in chronology ]
what needs to happen more than this is for a full scale assault on those who are trying to remove our freedom and privacy by means of terror and violence and that assault needs to come from all quarters of the free, democratic world!!
[ link to this | view in chronology ]
The nature of police work
Isn't that sort of the core of all law enforcement activity?
[ link to this | view in chronology ]
Re: The nature of police work
[ link to this | view in chronology ]
Re: The nature of police work
[ link to this | view in chronology ]
Re: The nature of police work
[ link to this | view in chronology ]
Re: Re: The nature of police work
They only set up people who would never have the ability to obtain actual weapons, probably for exactly that reason. If you recruit dangerous people, suddenly police work seems... well, dangerous. Much safer to just pick up someone who would never accomplish anything harmful on their own.
[ link to this | view in chronology ]
Same complaints as before
[ link to this | view in chronology ]
Re: Same complaints as before
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Hoisting on petards
[ link to this | view in chronology ]
No new law needed, older law prevails...
Gee - sorry folks, but your cries will have to go unanswered.
You see, we have this thing called the Constitution which prevents Congress from passing any law that attempts to circumvent the Constitutional right to privacy.
Any attempts by outsiders to push Congress to perform this illegal act is an action of treason to the citizens of the United States and will be dealt with accordingly.
So go ahead, yell at the top of your lungs. We'll be taking down your names, arresting you and trying you for the treason you are committing in attempting to circumvent the constitution.
Congress-critters beware, don't fall for these criminal delusions or your names will be added to the list of people to be arrested, tried and convicted of treason against the citizens of the United States.
Note that 90% of you are already on that list for your treasonous Patriot-Act which violates the constitution, and 95% of the Executive branch is there as well for their own illegal, treasonous acts against the citizenry of this country.
[ link to this | view in chronology ]
Re: No new law needed, older law prevails...
[ link to this | view in chronology ]
Re: No new law needed, older law prevails...
[ link to this | view in chronology ]
10 years ago
I mean do they have amnesia? How exactly did they even do their jobs before smart phones were invented?
[ link to this | view in chronology ]
Re: 10 years ago
And another factor in my opinion is that they started with a card deck of terrorists now they have what? over 1 million people on the list? So the received threat seems to have grown quite a bit, some might call it paranoia.
[ link to this | view in chronology ]
Just because he's a DA, doesn't mean he's gonna be immune to hackings like everyone else.
Live by the sword...
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Additional layer of disingenuous
While Tim is right that they did, in fact, create this problem that isn't the thing that I thought of first when I read this. What I thought of first is that this statement is disingenuous because it implies that some kind of societal or general problem was created and now the poor police are being called on to solve it. Which further implies that the police have some sort of right to have backdoor access.
That's untrue. There is no societal or general problem with the encryption. The police have no inherent right to have backdoor access. This is a "problem" for the police and the police alone, and the problem is one of entitlement. The police have simply become used to being able to access anything they want and have come to think of it as an inviolable right.
That is the problem, but it's a problem with law enforcement, not technology.
[ link to this | view in chronology ]
Re: Additional layer of disingenuous
Just because it is necessary does not mean it is not a threat and neither does it diminish its threat by any measure.
Government will be, and has ever been the single greatest threat to mankind for its beginning and end is... a group of people deciding who gets what, backed by LETHAL FORCE!
[ link to this | view in chronology ]
Re: Re: Additional layer of disingenuous
Interesting that you directed this question to me. I'm very curious as to what you think my stance on government is.
[ link to this | view in chronology ]
Re: Re: Re: Additional layer of disingenuous
Since I am an AC you are at a disadvantage as to which insane netizen you are dealing with, but I have already seen that techdirt has a system in place to mark and deal with keywords. This will encourage me to remain anon because the capacity for humankind and machines to take things way out of context is quite vast.
[ link to this | view in chronology ]
Re: Re: Re: Re: Additional layer of disingenuous
My stance is that government is inevitable. That's a bit different than necessary. Governmental systems are a part of human psychology. We are pack animals and will always gather into groups and act as a group. Once you start doing that, then you have a government.
Thus, my stance is not to determine if government as a concept is good or bad -- that's a purely academic argument, since we'll have government regardless. My stance is that since government is inevitable, the only reasonable thing to do is to make it the best government possible.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Additional layer of disingenuous
[ link to this | view in chronology ]
Not Marketing
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
Any attempts by ANYONE to abridge those rights is tantamount to treason (as in treason against the citizens of the United States because of the harm it does to the citizens) and as such those making these attempts should be arrested, tried, convicted and executed for their follies.
If the government won't do it, then we the citizens have to.
[ link to this | view in chronology ]
Re: Re:
Just be thankful their efforts to disarm americans is getting more resistance than people taking them to task for breaking constitutional amendments when it pleases them.
[ link to this | view in chronology ]
It takes a certain critical mass.
So long as it's just stuff that the average American has seen on the news and the representatives can quash discontent by passing nominal bills, it's not going to affect change.
People have to suffer. People have to be miserable. People have to have nothing left to lose.
That's when the guns and bombs come out.
[ link to this | view in chronology ]
As reported on Schneier's blog in 2006. Hurtt jumped the gun, now it's back to boil the frog slowly.
[ link to this | view in chronology ]
Re:
The more they try to spy on everyone, the worse the shortage of officers will get, as they will need more to look over all the data that they are gathering.
[ link to this | view in chronology ]
Re:
Holy crap.
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re:
Just once, just once, I want a reporter to hit back on that idea, and refuse to accept any dodges. Anyone who makes the 'if you've done nothing wrong...' argument should be immediately asked to provide their address, phone number, email address and password, and anything else the one asking the question can think of, in order to show that the one making the claim really believes in what they're saying.
Don't allow any dodges, don't let them ignore the question and move on, but demand that they either provide the personal information that they are demanding from others, or admit that their logic is heavily flawed.
Sadly, the press is too spineless and tamed these days to ever consider something like this, but just once, it would be nice to see it...
[ link to this | view in chronology ]
"and other such devices"....
We are increasingly surrounded by more and more of these "other such devices", pretty soon that's all we will have. Arguing that law enforcement has a right to snoop in every piece of technology I own without a warrant is abhorrent.
[ link to this | view in chronology ]
And the average person.....always seem to forget that bit
[ link to this | view in chronology ]
It IS'NT a problem, and you DID create it
[ link to this | view in chronology ]
As far as im concerned, encryption is a minimum, i still expect stuff like hardening of the os systems, detection of hacking attempts made, released on masse, os's seperating the security section of their os, so thats its easy to release and implement security patches on any version of OS........im looking out for that open source OS, built from the ground up with security and privacy in mind.........oh and a trustworthy hardware manufacture.........oh, and an open source phone modem chip that is'nt propriety and apparently gives any phone companies to bypass anything, if i remember rightly, i think encryption too........theres a long way too go.......if google/apple stops at encryption, then i know their not serious
[ link to this | view in chronology ]
Its not your job to SPY ON EVERYONE, its your godamn wet dream
[ link to this | view in chronology ]
[ link to this | view in chronology ]
While we're at it...
[ link to this | view in chronology ]
Re: While we're at it...
[ link to this | view in chronology ]
Make every bullet impact an automatic conviction?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
So do your job
Why would anyone but lazy cops see that as a problem that needs to be solved by banning encryption?
[ link to this | view in chronology ]
Yes, encryption is a public safety issue. That's precisely why we need more unbreakable encryption to keep us safe and secure, not backdoored encryption for foreign governments to exploit. Strong encryption with no backdoors is vital to America's national security and economic interests.
[ link to this | view in chronology ]
Re:
It is vital to the worlds interests, along with secure variants of TOR, as it is enables people to talk to each other regardless of what their governments want. Enabling the worlds population to converse with each other, without the interference of politicians is the best way of avoiding wars, and sharing the knowledge and information that enables people to solve their own problems without having to rely on big government and business.
[ link to this | view in chronology ]
Re: Re:
1. Encryption enables people to talk to each other regardless of what their governments want.
2. Encryption enables the worlds population to converse with each other, without the interference of politicians and thus avoid wars.
3. Encryption enables the sharing of knowledge and information that lets people solve their own problems without having to rely on big government and big business.
There is absolutely no upside in any of that for the greedy control freaks that inhabit the halls of power, or the billionaires who see the world as their own private feedstock for personal unlimited aggrandizement.
Encryption must not be allowed into public hands.
----
[ link to this | view in chronology ]
Better idea
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Ninteen Eighty-Four
1984 is quaint the age of terror.
[ link to this | view in chronology ]