FBI Documents Show More Evidence Of Agency's Sketchy Relationship With Best Buy's Geek Squad

from the squadders-installing-FBI-bloatware dept

Thanks to an FOIA lawsuit, the FBI has finally started handing over documents to the EFF detailing the federal agency's "partnership" with Best Buy Geek Squad employees. The too-cozy-to-be-Fourth-Amendment-compliant relationship was uncovered during discovery in a child porn prosecution. Produced documents showed the FBI not only paid Geek Squad members to search for child porn, but it actively engaged in recruiting efforts at Best Buy locations.

The problem with this relationship is the relationship. And the money. While tech repair personnel are expected to turn over discovered child porn to authorities, the active efforts of the FBI alter the incentives, pushing Geek Squad members towards digging through customers' computers for illicit material, rather than simply reporting what they come across during the course of their work.

The FBI wants to keep this relationship with Best Buy intact. It also wants to keep the evidence provided by Geek Squad members. While private searches can be used to predicate investigations, paying people to look for illegal material when their job is to repair devices turns this into a proxy search for federal law enforcement. That's not permitted under the Fourth Amendment and the FBI certainly knows it. The files central to this prosecution were discovered in unallocated space, making it unlikely they were discovered during routine repairs. It would imply a Geek Squad member went digging for illicit material, motivated by a possible payout from the FBI if anything was found.

The documents obtained by the EFF provide further evidence the FBI paid Geek Squad members to perform searches for it. They also show this relationship dates back at least a decade, with Best Buy doing its best to become an unofficial branch of the FBI.

The documents released to EFF show that Best Buy officials have enjoyed a particularly close relationship with the agency for at least 10 years. For example, an FBI memo from September 2008 details how Best Buy hosted a meeting of the agency’s “Cyber Working Group” at the company’s Kentucky repair facility.

The memo and a related email show that Geek Squad employees also gave FBI officials a tour of the facility before their meeting and makes clear that the law enforcement agency’s Louisville Division “has maintained close liaison with the Geek Squad’s management in an effort to glean case initiations and to support the division’s Computer Intrusion and Cyber Crime programs.”

This relationship has been the basis for several FBI investigations -- all predicated on actions that stray close to the edge of the Fourth Amendment, if not going past its boundaries completely.

Other documents show that over the years of working with Geek Squad employees, FBI agents developed a process for investigating and prosecuting people who sent their devices to the Geek Squad for repairs. The documents detail a series of FBI investigations in which a Geek Squad employee would call the FBI’s Louisville field office after finding what they believed was child pornography.

[...]

Some of these reports indicate that the FBI treated Geek Squad employees as informants, identifying them as “CHS,” which is shorthand for confidential human sources. In other cases, the FBI identifies the initial calls as coming from Best Buy employees, raising questions as to whether certain employees had different relationships with the FBI.

More information about this misuse of private searches will likely find its way into open court and the public domain in the next several years. The FBI is still withholding several files, which probably further corroborate the agency's incentivizing of invasive device searches. And Best Buy is likely not the only company offering both computer repairs and FBI-prompted "private searches" The EFF notes the FBI refuses to confirm or deny it has a similar relationship with other retailers.

The EFF is headed back to court to challenge the FBI's withholding of these documents, so additional documents may be produced sooner than later. But if the FBI can convince the court its payouts to tech repair staff are investigative methods that would be compromised if discussed publicly, we may see nothing at all. But it also has to convince another court its use of Best Buy employees as informants is kosher under the Fourth Amendment. And it has yet to do that.

Filed Under: geek squad, private law enforcement, surveillance
Companies: best buy, fbi

EFF Sues FBI For Refusing To Turn Over Documents About Its Geek Squad Informants

from the best-buys,-best-friends dept

A child porn indictment in California has led to a full-fledged examination of the FBI's use of "private searches." Private searches, performed by citizens, can be used to instigate investigations and obtain warrants. In this case, the private searches were performed by Best Buy Geek Squad members, who came across alleged child porn images while fixing the defendant's computer.

Private searches during computer repairs are normal. But they're not roughly analogous to searches performed with a warrant. Companies that repair electronic devices are legally required to report discovered child porn to law enforcement. What they're not supposed to do, however, is dig through devices they're repairing in hopes of finding something illegal.

Most techs don't go looking for child porn. But the FBI's close relationship with Best Buy turned private searches into searches performed by paid informants. Once government money is introduced into the equation, the search can no longer be considered "private." The introduction of cash rewards also skews the incentives, possibly encouraging Geek Squad members to spend more time looking for illicit images than focusing on the repair job at hand.

Documents uncovered in this case strongly suggest the FBI has been using Best Buy repair center techs as confidential informants, paying them for their discoveries while claiming these warrantless, secondhand searches are nothing more than completely legal "private searches."

The EFF wants to know what the FBI knows about its long-running Best Buy partnership. The FBI isn't nearly as interested in making this information public. It sent a FOIA request to the FBI in early February. The FBI's first response was a Glomar. From the EFF's FOIA lawsuit [PDF]:

By letter to Plaintiff dated April 18, 2017, the FBI denied EFF’s request for agency records. The FBI stated, inter alia, that “it is the FBI’s policy to neither confirm nor deny the existence of any records which would tend to indicate or reveal whether an individual or organization is of investigatory interest to the FBI.”

The EFF immediately appealed this determination. Since then, the FBI has yet to respond. The EFF's lawsuit seeks a better response to its FOIA request, as well as a ruling finding in favor of its requested fee waiver. The EFF's decision to move forward with a FOIA lawsuit is the unfortunate result of the government's disinterest in fulfilling its FOIA obligations. There's hardly any action a citizen can take to speed up this process. Lawsuits are only marginally better than firing off reminder emails. Unfortunately, they're also a lot more expensive.

There's a good chance these documents -- should they ever be released by the FBI -- will show this sort of thing isn't limited to Best Buy repair centers.

We think that the FBI's use of Geek Squad informants is not an isolated event. Rather, it is a regular investigative tactic law enforcement employ to obtain digital evidence without first getting a warrant as the Fourth Amendment generally requires.

This bears watching. The FBI loves parallel construction and law enforcement in general loves anything that allows it to bypass obtaining warrants. Turning repair crews into informants serves these interests well.

Filed Under: 4th amendment, fbi, foia, geek squad, informants, private searches
Companies: best buy, eff

Court Documents Appear To Confirm The FBI Is Using Best Buy Techs To Perform Warrantless Searches For It

from the private-search-loophole dept

As we covered last week, the FBI has apparently been paying Best Buy Geek Squad members in exchange for tips about illegal material discovered on customers' computers. This is problematic for a couple of reasons.

First, adding a financial incentive could lead to Best Buy employees digging around in users' computers in hopes of finding something to turn in, rather than limiting themselves to the job at hand: repairing the device.

Second, while companies are legally obligated to report the discovery of child porn to law enforcement, this occurs as a "private search." As such, it's perfectly legal and can result in the probable cause needed to perform a forensic search of the computer, as well as (possibly) any other electronic devices the customer owns. But when the FBI turns Best Buy employees into confidential informants -- paid or not --it's no longer a private search. It's a third-party search at the government's request. The government can't task private individuals with performing warrantless searches on its behalf -- at least not if it wants to hold onto the evidence.

The government is arguing that there was nothing wrong with the FBI's relationship with Best Buy. This is being argued despite the growing amount of evidence showing the FBI's role in Best Buy searches of computers is anything but passive.

One former agent confirms [PDF] in her declaration that the employee who alerted the FBI to alleged child pornography found on the computer of the defendant in this case, had been signed up by the agency as a “confidential human source” (CHS) in 2009 — two years before the offending content was discovered in this case — but contends that this worker was “never asked” to “search for child pornography or evidence of any other crime on behalf of the FBI.”

However, in a Dec. 19 order [PDF] in this case, the judge notes that emailed communications may hint at a deeper connection between the agency and the Geek Squadder.

For instance, in Oct. 2009, this agent emailed the Best Buy staffer to set up a meeting “to discuss some other ideas for collaboration.” The since-retired agent now says she has no “independent recollection of what ‘collaboration'” refers to in that email, blaming her memory lapse on brain damage caused by Lyme disease.

Whatever the case may be, the documents do seem to show what Mark Rettenmaier, the defendant at the center of this case, alleges they do: a close partnership between the FBI and Best Buy that has gone on for years.

Judge Cormac Carney's ruling on Rettenmaier's demand for document production from the FBI indicates that what he's seen so far (many of the documents handed over by the FBI to date are under seal) points in this direction.

According to the FBI, [Best Buy employee] Meade was a CHS [confidential human source] for two periods of time—October 2008 to January 2009 and November 2009 to November 2012. During the first CHS period, Meade worked with FBI Agent Richard T. Boswell. (See Bates 1123; Dkt. 152 at 6.) Before the second CHS period, Agent Jennifer Cardwell took over for Agent Boswell (Agent Riley took over for Agent Cardwell in July 2010 (Bates 1028)). (Bates 1122–23.) Meade estimates that he contacted the FBI reporting child pornography approximately six to nine times per year. (Bates 544–45.) Though the FBI has had eight different CHS at Best Buy’s Kentucky facility, at the time when Best Buy had Rettenmaier’s hard drive, only Meade and Ratliff were connected to the FBI. (Dkt. 152 at 6.) Both Ratliff and Meade received payment from the FBI; every CHS prior to February 2012 received payment.

The government is refusing to hand over any more information that may shed more light on this relationship, but Judge Carney isn't going to let it get away with it. The government claims any such evidence, if produced, would only "undermine" Rettenmaier's "unsupported argument" about the FBI/Best Buy BFF situation. Judge Carney basically says we won't know until we see it, will we?

The Court cannot determine whether Rettenmaier’s “unsupported” argument has merit as long as the Government refuses to produce the evidence that may support it; the Government’s hope that the evidence will undermine Rettenmaier’s motion does not exempt its production.

The ruling almost completely denies the government's motion to quash, which means that the documents demanded -- if they exist -- will have to be turned over to the defendant. Most will probably be filed under seal, but some are bound to escape the FBI's desire for complete secrecy. What leaks out around the edges will be interesting, and mostly sussed out through defense motions and judicial orders. If the FBI is treating private companies' employees as confidential informants, then it's basically utilizing the private sector to perform warrantless searches for it.

Filed Under: 4th amendment, computer repair, fbi, geek squad, informants, warrantless surveillance
Companies: best buy

The FBI Is Apparently Paying Geek Squad Members To Dig Around In Computers For Evidence Of Criminal Activity

from the maybe-these-are-the-'smart-people'-who-can-fix-Comey's-encryption-&# dept

Law enforcement has a number of informants working for it and the companies that already pay their paychecks, like UPS, for example. It also has a number of government employees working for the TSA, keeping their eyes peeled for "suspicious" amounts of cash it can swoop in and seize.

Unsurprisingly, the FBI also has a number of paid informants. Some of these informants apparently work at Best Buy -- Geek Squad by day, government informants by… well, also by day.

According to court records, Geek Squad technician John "Trey" Westphal, an FBI informant, reported he accidentally located on Rettenmaier's computer an image of "a fully nude, white prepubescent female on her hands and knees on a bed, with a brown choker-type collar around her neck." Westphal notified his boss, Justin Meade, also an FBI informant, who alerted colleague Randall Ratliff, another FBI informant at Best Buy, as well as the FBI. Claiming the image met the definition of child pornography and was tied to a series of illicit pictures known as the "Jenny" shots, agent Tracey Riley seized the hard drive.

Not necessarily a problem, considering companies performing computer/electronic device repair are legally required to report discovered child porn to law enforcement. The difference here is the paycheck. This Geek Squad member had been paid $500 for digging around in customers' computers and reporting his findings to the FBI. That changes the motivation from legal obligation to a chance to earn extra cash by digging around in files not essential to the repair work at hand.

More of a problem is the FBI's tactics. While it possibly could have simply pointed to the legal obligation Best Buy has to report discovered child porn, it proactively destroyed this argument by apparently trying to cover up the origin of its investigation, as well as a couple of warrantless searches.

Setting aside the issue of whether the search of Rettenmaier's computer constituted an illegal search by private individuals acting as government agents, the FBI undertook a series of dishonest measures in hopes of building a case, according to James D. Riddet, Rettenmaier's San Clemente-based defense attorney. Riddet says agents conducted two additional searches of the computer without obtaining necessary warrants, lied to trick a federal magistrate judge into authorizing a search warrant, then tried to cover up their misdeeds by initially hiding records.

The "private search" issue is mentioned briefly in OC Weekly's report, but should be examined more closely. Private searches are acceptable, but the introduction of cash payments, as well as the FBI having an official liaison with Best Buy suggests the searches aren't really "private." Instead, the FBI appears to be using private searches to route around warrant requirements. That's not permissible and even the FBI's belief that going after the "worst of worst" isn't going to be enough to salvage these warrantless searches.

As Andrew Fleischman points out at Fault Lines, the government's spin on the paid "private search" issue -- that it's "wild speculation" the Best Buy employee was acting as a paid informant when he discovered the child porn -- doesn't hold up if the situation is reversed. AUSA Anthony Brown's defensive statement is nothing more than the noise of a double standard being erected.

Flipping the script for a minute, would an AUSA say it was “wild speculation” that a man was a drug dealer when phone records showed he regularly contacted a distributor, he was listed as a drug dealer in a special book of drug dealers, and he had received $500.00 for drugs? Sorry to break it to you, Mr. Brown, but once you start getting paid for something, it’s tough to argue you’re just doing it for the love of the game.

In addition to these problems, the file discovered by the Best Buy tech was in unallocated space… something that points to almost nothing, legally-speaking.

[I]n Rettenmaier's case, the alleged "Jenny" image was found on unallocated "trash" space, meaning it could only be retrieved by "carving" with costly, highly sophisticated forensics tools. In other words, it's arguable a computer's owner wouldn't know of its existence. (For example, malware can secretly implant files.) Worse for the FBI, a federal appellate court unequivocally declared in February 2011 (USA v. Andrew Flyer) that pictures found on unallocated space did not constitute knowing possession because it is impossible to determine when, why or who downloaded them.

This important detail was apparently glossed over in the FBI's warrant application to search Rettenmaier's home and personal devices.

In hopes of overcoming this obstacle, they performed a sleight-of-hand maneuver, according to Riddet. The agents simply didn't alert Judge Marc Goldman that the image in question had been buried in unallocated space and, thus, secured deceitful authorization for a February 2012 raid on Rettenmaier's Laguna Niguel residence.

Courts have shown an often-excessive amount of empathy for the government's "outrageous" behavior when pursuing criminals. The fact that there's child porn involved budges the needle in the government's direction, but the obstacles the FBI has placed in its own way through its deceptive behavior may prevent it from salvaging this case.

The case is already on very shaky ground, with the presiding judge questioning agents' "odd memory losses," noting several discrepancies between the FBI's reports and its testimony, and its "perplexing" opposition to turning over documents the defense has requested.

In any event, it appears the FBI has a vast network of informants -- paid or otherwise -- working for both private companies and the federal government. Considering the FBI is already the beneficiary of legal reporting requirements, this move seems ill-advised. It jeopardizes the legitimacy of the evidence, even before the FBI engages in the sort of self-sabotaging acts it appears to have done here.

Underneath it all is the perplexing and disturbing aversion to adhering to the Fourth Amendment we've seen time and time again from law enforcement agencies, both at local and federal levels. Anything that can be done to avoid seeking a warrant, and anything that creates an obfuscatory paper trail, is deployed to make sure the accused faces an even more uphill battle once they arrive in court.

Filed Under: fbi, geek squad, informants, searches, warrants
Companies: best buy

'Geek Power': Best Buy Sends C&D To Newegg Over Marketing Campaign

from the oh-come-on dept

Ah, Best Buy. It's apparently decided to get into the trademark bullying business. The company sent well known online electronics retailer Newegg a cease & desist (shown below) because Newegg is running a marketing campaign called "Geek On" with the "O" in "On" made to look like a "power on" button. Best Buy claims that this is biting off its own Geek Squad logo, which similarly uses a power on button (though, with a tie): The shirt is Newegg. The callout is Best Buy. And, yes, they look nothing alike. No moron in a hurry is going to be confused here. To make it even more crazy, Best Buy, in true conspiracy theory mode, decides that Newegg is also violating its trademarks because of the following commercial, which pokes fun at Best Buy: Best Buy takes offense at all this and claims that it's trademark infringement:

The fake Best Buy employee is depicted as being slovenly and uninformed about computer products, in contrast to your employees who are portrayed as "experts."

Your misuse of our valuable trademarks and your negative portrayal of our employees violate our trademark rights and misleads consumers about our services, in violation of federal and state law. While we welcome fair competition, we cannot tolerate unfair competition that disparages our employees, confuses customers and damages our valuable trademarks and the goodwill associated with those marks. We take great pride in our employees and the high quality of customer service they offer and find your company's focus on our employees in this advertising campaign to be particularly offensive.

Of course, there are all sorts of problems with these claims. The logos looking nothing alike, as we've already discussed, but the whole thing about the TV ad is just ridiculous. There's clearly no trademark issue there, as competitors are absolutely allowed to poke fun at each other. No one is going to think that Best Buy "sponsored" the Newegg commercial. There's no consumer confusion at all. More amusingly, the fact that Best Buy thinks that Newegg is portraying Best Buy employees says a lot about how Best Buy views its own employees.

Of course, as many are pointing out, this whole thing has done the exact opposite of what Best Buy probably wanted. First, it's driven a ton of attention to Newegg's commercial, but more importantly, it's made Newegg supporters -- who are generally quite tech savvy -- really dislike Best Buy even more than they may have already. Newegg had posted the C&D letter on its Facebook page, and the response are almost universally anti-Best Buy: Perhaps next time Best Buy will think about the consequences of sending out such a bogus C&D before all of this happens.

Filed Under: cease & desist, geek squad, trademark
Companies: best buy, newegg

Best Buy Threatens Priest Over His God Squad Parody; How Does God Feel About Trademark Law?

from the god-vs.-the-moron-in-a-hurry dept

Whoo boy. Apparently Best Buy, owners of the "Geek Squad" brand has prodded God by sending a cease-and-desist letter to a priest who has set up a "God Squad" car that does, in fact, look remarkably similar to the infamous Geek Squad VW Beetles: Obviously, the God Squad logo -- including the use on the same sort of car -- was used to build off of the brand reputation (which, um, isn't that good) of the Geek Squad. The priest could argue parody fair use, but it doesn't seem that the effort is commentary on the Geek Squad so much as it's just designed to get attention. It's worth noting, of course, that there are other "God Squads" out there as well, including a long running TV show, so at the very least, it does look like Best Buy has focused on this case due to the more direct similarities beyond the name.

Still, it does make you wonder if there's any actual likelihood of confusion. While this may get some attention, is anyone actually going to think that the priest is somehow associated with Best Buy? Does Best Buy's trademark even cover religious services (beyond the ever popular religious debates on operating systems?). In a legal battle between God and a moron in a hurry, who wins? And, most importantly, does it even make sense to antagonize someone obviously doing something like this for the fun of it? I recognize the traditional trademark lawyer response that a company "has to protect its trademarks," but that always ignores that there are other, much more friendly options.

In the meantime, if we're talking about God and intellectual property, it seems worth re-running the Mimi & Eunice cartoon on the topic:

Filed Under: geek squad, god squad, trademark
Companies: best buy