Police Want Backdoor To Web Users' Private Data

Anyone with an e-mail account likely knows that police can peek inside it if they have a paper search warrant.

But cybercrime investigators are frustrated by the speed of traditional methods of faxing, mailing, or e-mailing companies these documents. They're pushing for the creation of a national Web interface linking police computers with those of Internet and e-mail providers so requests can be sent and received electronically.

CNET has reviewed a survey scheduled to be released at a federal task force meeting on Thursday, which says that law enforcement agencies are virtually unanimous in calling for such an interface to be created. Eighty-nine percent of police surveyed, it says, want to be able to "exchange legal process requests and responses to legal process" through an encrypted, police-only "nationwide computer network." (See one excerpt and another.)



The survey, according to two people with knowledge of the situation, is part of a broader push from law enforcement agencies to alter the ground rules of online investigations. Other components include renewed calls for laws requiring Internet companies to store data about their users for up to five years and increased pressure on companies to respond to police inquiries in hours instead of days.

But the most controversial element is probably the private Web interface, which raises novel security and privacy concerns, especially in the wake of a recent inspector general's report (PDF) from the Justice Department. The 289-page report detailed how the FBI obtained Americans' telephone records by citing nonexistent emergencies and simply asking for the data or writing phone numbers on a sticky note rather than following procedures required by law.

Some companies already have police-only Web interfaces. Sprint Nextel operates what it calls the L-Site, also known as the "legal compliance secure Web portal." The company even has offered a course that "will teach you how to create and track legal demands through L-site. Learn to navigate and securely download requested records." Cox Communications makes its price list for complying with police requests public; a 30-day wiretap is $3,500.

The police survey is not exactly unbiased: its author is Frank Kardasz, who is scheduled to present it at a meeting (PDF) of the Online Safety and Technology Working Group, organized by the U.S. Department of Commerce. Kardasz, a sergeant in the Phoenix police department and a project director of Arizona's Internet Crimes Against Children task force, said in an e-mail exchange on Tuesday that he is still revising the document and was unable to discuss it.


In an incendiary October 2009 essay, however, Kardasz wrote that Internet service providers that do not keep records long enough "are the unwitting facilitators of Internet crimes against children" and called for new laws to "mandate data preservation and reporting." He predicts that those companies will begin to face civil lawsuits because of their "lethargic investigative process."

"It sounds very dangerous," says Lee Tien, an attorney with the Electronic Frontier Foundation, referring to the police-only Web interface. "Let's assume you set this sort of thing up. What does that mean in terms of what the law enforcement officer be able to do? Would they be able to fish through transactional information for anyone? I don't understand how you create a system like this without it."

What police see in ISPs
Kardasz's survey, based on questionnaires completed by 100 police investigators, says that 61 percent of them had their investigations harmed "because data was not retained" and only 40 percent were satisfied with the timeliness of responses from Internet providers.

It also says: "89 percent of investigators agreed that a nationwide computer network should be established for the purpose of linking ISPs with law enforcement agencies so that they may exchange legal process requests and responses to legal process. Authorized users would communicate through encrypted virtual private networks in order to maintain the security of the data."

Some of the responses to other questions: "AT&T is very prompt." "Cox Communications seems to be the worst." "Places like Yahoo can take a month for basic subscriber info which is also a problem." "AT&T Mobility does not keep a log at all." "MySpace give (sic) me the quickest response and they have been very pro-police."
Hemanshu (Hemu) Nigam, MySpace's chief security officer, said in an interview with CNET on Tuesday that: "You can be very supportive of law enforcement investigations and at the same time be very cognizant and supportive of the privacy rights of our users. Every time a legal process comes in, whether it's a subpoena or a search order, we do a legal review to make sure it's appropriate."

Nigam said that MySpace accepts law enforcement requests through e-mail, fax, and postal mail, and that it has a 24-hour operations center that tries to respond to requests soon after they've been reviewed to make sure state and federal laws are being followed. MySpace does not have a police-only Web interface, he said.

Creating a national police-only network would be problematic, Nigam said. "I wish I knew the number of local police agencies in the country, or even police officers in the country," he said. "Right there that would tell you how difficult it would be to implement, even though ideally it would be a good thing."

Another obstacle to creating a nation-wide Web interface for cops--one wag has dubbed it "DragNet," and another "Porknet"--is that some of its thousands of users could be infected by viruses and other malware. Once an infected computer is hooked up to the national network, it could leak confidential information about ongoing investigations.

Jim Harper, a policy analyst at the free-market Cato Institute, says that he welcomes the idea of a police-only Web interface as long as it's designed carefully. "A system like this should have strong logins, should require that the request be documented fully, and should produce statistical information so there can be strong oversight," he says. "I think that's a good thing to have."

Declan McCullagh is a contributor to CNET News and a correspondent for CBSNews.com who has covered the intersection of politics and technology for over a decade. Declan writes a regular feature called Taking Liberties, focused on individual and economic rights; you can bookmark his CBS News Taking Liberties site, or subscribe to the RSS feed. You can e-mail Declan at declan@cbsnews.com.

Source: CNET.com, Feb 3 2010
By Declan McCullagh

Views: 39

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega commented on Burbia's video
Thumbnail

InfoWars reporter Jamie White ‘brutally murdered’ near Austin residential area, outlet says

"We're supposed to be conditioned to accept this kind of shit! That the government will have…"
11 hours ago
Doc Vega posted blog posts
13 hours ago
Doc Vega commented on Doc Vega's blog post Disturbing Aspect of the Patterson Gimlin Film
"Thanks for your support Les Prone!"
14 hours ago
Doc Vega commented on Doc Vega's blog post What Would Have Happened to the US Had Harris Been Elected?
"Les Prone-no shit Dude absolutely frightening! "
14 hours ago
Burbia commented on Burbia's video
Thumbnail

InfoWars reporter Jamie White ‘brutally murdered’ near Austin residential area, outlet says

"Yeah, when his company was being auctioned off, why wasn't the starting bid 100 million?"
15 hours ago
tjdavis's blog post was featured
17 hours ago
Doc Vega's 5 blog posts were featured
17 hours ago
cheeki kea's blog post was featured
17 hours ago
Less Prone commented on Doc Vega's blog post What Would Have Happened to the US Had Harris Been Elected?
"It's too terrible to even contemplate. Kamala the president of the USA."
17 hours ago
GeneralCarlosQ17's blog post was featured

Reuters was paid millions of dollars by the US government for “large scale social deception”

Reuters was paid millions of dollars by the US government for “large scale social deception”. That…See More
17 hours ago
Burbia's blog post was featured
17 hours ago
Less Prone commented on tjdavis's blog post The Strobe Method
"Sound like another CIA project."
17 hours ago
Less Prone favorited rlionhearted_3's photo
17 hours ago
Less Prone commented on rlionhearted_3's photo
Thumbnail

On the beach in Ireland!!!

"It kind of makes sense, on the beach. Maximizing the sun tan surface area. But is it worth it?"
17 hours ago
Less Prone favorited Doc Vega's blog post Disturbing Aspect of the Patterson Gimlin Film
17 hours ago
cheeki kea commented on tjdavis's video
Thumbnail

Route 91: Uncovering the Cover Up

"Video not always showing on you tube according to comment section. I can't see it anyways but…"
yesterday
tjdavis posted a blog post
Sunday
Doc Vega favorited Burbia's video
Sunday
Doc Vega commented on Burbia's video
Thumbnail

InfoWars reporter Jamie White ‘brutally murdered’ near Austin residential area, outlet says

"Gosh do you think the Deep State was sending Alex a message? These bastards!"
Sunday
Doc Vega commented on tjdavis's video
Thumbnail

Route 91: Uncovering the Cover Up

"The lying bastards never covered one aspect of the shooter who was in bad health and couldn't…"
Sunday

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted