Wow! We keep pointing out how bills like Senator Amy Klobuchar's S.978 anti-streaming bill and Senator Patrick Leahy's PROTECT IP Act will be abused by US law enforcement, and we keep being told that those bills aren't "intended" to be used the way they could be. I think part of the problem is that people don't realize how the Justice Department and US Attorneys will sometimes stretch and twist the law just to go after someone.
Last month, we wrote about the absolutely ridiculous case by the US against former Cisco engineer Peter Adekeye. The details have to be read to be believed, but most of it only came to light because a Canadian judge absolutely blasted both Cisco and the US Attorneys for what clearly appeared to be an unnecessarily vindictive criminal prosecution against Adekeye because he filed an antitrust lawsuit against Cisco, after Cisco tried to block third party companies (such as one of Adekeye's) from accessing necessary patches to service certain Cisco equipment.
The whole story was horrifying, but we thought it ended in May when the judge let Adekeye go and gave the Justice Department a pretty big slap for its actions. But... no. Slashdot points us to the news that the Justice Department has just unveiled a new indictment against Adekeye over the same issue: basically someone at Cisco gave Adekeye a login to download patches, and he did exactly that. This is not, in any way, a matter that should involve the Justice Department. The judge in Canada made that clear. The story about Adekeye shows the Justice Department acting for bad reasons -- either incompetence, corruption or malice (pick any two!). And you would think that someone there might think twice before pushing ahead with bogus prosecution against Adekeye (who's finally back in Switzerland after being stuck in Canada for a year), but that's not how the US works.
And this is why we get very afraid when Congress looks to pass broad new legislation that may impact criminal statutes and the kinds of things that US Attorneys can charge people over. I'd like to believe that US Attorneys are good people trying to stop and punish crimes, but we've seen too many cases where it appears that their actions are incredibly questionable. I'm still hopeful that it's just a few bad seeds among the ranks of US Attorneys, but if we keep seeing stories like this...
Whenever we talk about the very serious risks and likely abuses of new laws favored by the entertainment industry -- such as PROTECT IP and the felony streaming bill, S.978, supporters of those bills insist that we're crazy for suggesting that the laws will be abused or that there will be any unintended consequences. We're told, over and over and over again that these laws are designed for and targeted only at the "worst of the worst." They're targeted at "rogue" actors, who must be stopped.
And yet, we've seen all too often how US officials have abused other such laws to attack and protect certain US companies from competition. A whole bunch of you have been sending over this incredibly frightening example of the Justice Department conspiring with Cisco to effectively try to destroy a former exec's life for daring to file an antitrust claim against Cisco, due to Cisco's desire to block competitors from servicing some of its products. Unfortunately, I actually found the version of the story at the Ars Technica link above a bit confusing (and it buries many of the key points). A much better way to understand just what Cisco and some federal prosecutors appear to have done is to read the ruling, embedded below, from a Canadian judge, who explains the whole thing clearly and bashes Cisco and the US Justice Department for its incredible overreach, for no reason other than to try to destroy the life of Peter Adekeye.
Adekeye, born in Nigeria, but a UK citizen, had apparently been a quite successful Cisco exec in both the UK and the US for many years. In 2005, he left Cisco and started a couple of companies himself, including one, Multiven, that offered to help provide maintenance services for various Cisco equipment. Apparently, Cisco tried to force customers into purchasing maintenance contracts only from them by denying third parties, such as Multiven, access to various bug reports and fixes. Because of this, Multiven sued Cisco, claiming antitrust violations. Cisco then countersued, including suing Adekeye directly, claiming that Adekeye had accessed Cisco's internal network illegally over 90 times. Adekeye does not appear to deny accessing Cisco's internal systems, but notes that he was given the login information from a Cisco employee, which he believed meant he was now authorized to use the system. It sounds like he used this access to get some of the info that Cisco had been denying Multiven. As part of its "hardball" litigation strategy, Cisco also sought to get the federal government to file criminal charges against Adekeye based on the exact same issue.
Separate from all of this, Adekeye had been dealing with attempts to get a work visa to be in the US for Multiven. The court ruling documents the incredibly ridiculous bureaucratic nightmare that Adekeye went through over the period of a few years in an attempt to seek proper visas to work in the US. At no time does it appear that Adekeye violated the various visas he did have. In fact, it sounds as though Adekeye bent over backwards (and then some) to always comply with US immigration and visa rules, even when it resulted in absolutely ridiculous circumstances, such as when he wasn't allowed back into the US, even though he'd been granted his H-1B visa. That story is crazy, but tangential to the point here -- though I suggest reading the ruling to get a sense of the ridiculousness of US immigration and visa policy.
In part because he was unable to get back into the US, Adekeye moved to Switzerland where a new Multiven office was opened, and continued his efforts to get his immigration status cleared up. As part of the ongoing legal dispute, Cisco wanted to depose Adekeye. Adekeye applied for permission to enter the US to do that... but was denied, and he was told if he went anyway, it could harm his chances of getting his visa status fixed. And Cisco used this to their advantage:
Notwithstanding this entirely reasonable explanation for his inability to attend a U.S. deposition, Cisco had the unmitigated gall to commence contempt proceedings for the applicant's "failure" to attend a U.S. deposition. It was, of course, unsuccessful, but it speaks volumes for Cisco's duplicity.
Eventually, all of the parties agreed to handle the deposition in Vancouver. It was outside the US, but close to Cisco's offices here in Silicon Valley. There was a separate (again tangential) issue involving the belief (which may not have been accurate, apparently) that a US deposition could happen in Canada without having to alert Canadian officials. It was at this deposition hearing in Vancouver on May 19th of last year that things got crazy. Cisco, knowing full well where Adekeye was and why he was in Vancouver -- and that he had tried and failed to get to the US -- apparently told the US Attorneys, who they'd been pushing to file criminal charges, about Adekeye's presence in Vancouver. The Justice Department then filed its criminal charges -- once again totally abusing the Computer Fraud & Abuse Act (CFAA) to make Adekeye's actions sound much worse than they actually were, and had a warrant issued for Adekeye's arrest.
They then sought rather extraordinary efforts from the Canadian government to arrest Adekeye immediately. Part of that, according to the Canadian judge who issued this ruling, appeared to involve a US Attorney leaving out key information, making blatantly false insinuations about other facts, and in some cases, what appears to just be lying:
The affidavit made no mention of the fact that United States immigration authorities had refused the applicant entry to the United States. No mention was made that the applicant had no criminal record. No mention was made that the United States Federal Court had ordered a deposition in Vancouver, presided over by a "special master" at which six or more United States lawyers would be present. No mention was made that the criminal complaint "mirrored" a counterclaim brought by Cisco in the main action in which the applicant was seeking large damages in an antitrust suit.
Sinister inferences were suggested, leading to an inference that the applicant would be a flight risk. The affidavit stated that the applicant "is a Nigerian citizen who claims to have citizenship from the United Kingdom", and that he possibly had British citizenship, and that he was in Canada on a Nigerian passport. The latter reference invited an inference he might flee to Nigeria, a country from which extradition was highly unlikely. In fact, U.S. authorities well knew and had a duty to disclose to the issuing judge that the applicant was a citizen of the United Kingdom and possessed a British passport, on which passport he had entered Canada. They also knew and had a duty to disclose that he had been a resident of England, but was currently residing with his wife and child in Switzerland, and that he had travelled from Switzerland to Canada for purposes of the deposition.
What happened then was somewhat astounding. In the middle of the deposition, RCMP officials walked into the room, interrupted the deposition in progress and arrested Adekeye in the middle of the proceedings. The beginning of this is on videotape. Adekeye, his lawyers, and the "special master" clearly have no idea what's going on, but what's notable is that, while people repeatedly ask for the recording to be turned off, Cisco's lawyers immediately say that the recording should be left on. It appears they knew exactly what was going on and wanted the humiliating arrest on the deposition tape. You can see the video below. As the judge in this ruling notes, the police's actions "could be compared to entering a courtroom and arresting a person during the course of his or her testimony. It is simply not done in a civilized jurisdiction that is bound by the rule of law."
Believe it or not, the situation then gets even worse and even more egregious. Adekeye was, in fact, arrested -- and the charges could have resulted in almost 500 years in jail, all for accessing a Cisco network with a password given to him by a Cisco employee. As you can see, he was removed from the deposition, much to the confusion of the special master appointed by the US court. After being arrested, he asked for bail, and Richard Cheng, an Assistant US Attorney for the Justice Department, sent a letter that was chock full of false and misleading information, which the judge in this case goes through step by step. It falsely implies that Adekeye did not really have British citizenship and that he did not really live in Switzerland. It stated that he used his Nigerian passport to enter the US under an E visa, which was not true. It claimed that the US had denied all of Adekeye's attempts to obtain a visa to visit the US since 2007, which as the ruling now notes "is simply not true." It also falsely stated that Adekeye had fled from law enforcement in the past. Again, the ruling noted "this statement was completely untrue."
And yet, federal officials continued to seek extradition. Even then, months after the arrest, the civil suit between Cisco and Multiven were settled, in a manner that everyone agrees was a "win" for Multiven, with Cisco changing its policy. So the key matter over which this highly questionable criminal charge was brought was settled. And yet, the feds continued to push forward. It was only in May of this year, a year after his arrest, that this new ruling came out and freed Adekeye to leave Canada and go back home.
Honestly, the whole story is really terrifying and makes me depressed to think that my government would do something like this. However, it should seriously call into question whether or not new laws like S.978 and the PROTECT IP Act should be allowed. It seems clear that the Justice Department has no problem using very questionable means to act as the private bullies of certain large companies. It should also call into question some of the recent efforts by other US Attorneys from the Justice Department, such as the efforts in coordination with Homeland Security/ICE to seize domains on questionable evidence, the attempt to extradite Richard O'Dwyer from the UK over very questionable charges and, of course, the recent charges against Aaron Swartz.
All of these cases have key factors in common. They involve what at best should be minor civil issues between private parties in court -- but in which, due to the presence of certain large industry interests, the Justice Department steps in and starts throwing its considerable weight around, including insane possible punishment, all because of dubious and often extremely misleading claims from these private interests. It's possible that the Justice Department officials here are simply incompetent (and honestly, that's an only slightly more comforting idea than the alternative) and unable to realize they're being manipulated by companies seeking to stamp out competition. But it's certainly demonstrating a really horrifying pattern of questionable behavior by the Justice Department and US Attorneys not to focus on real criminal behavior, but to abuse the criminal justice system to take vindictive action against potential competitors for big US industry players.
