Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Communications Encryption Government Privacy United States

18th Century Law Dredged Up To Force Decryption of Devices 446

Cognitive Dissident writes The Register has a story about federal prosecutors using a law signed by George Washington to force manufacturers to help law enforcement access encrypted data on devices they manufacture. The All Writs Act is a broad statute simply authorizing courts to issue any order necessary to obtain information within their jurisdiction. Quoting the Register article: "Last month, New York prosecutors successfully persuaded a judge that the ancient law could be used to force an unnamed smartphone manufacturer to help unlock a phone allegedly used in a credit card fraud case. The judge ordered the manufacturer to offer 'reasonable technical assistance' to make the phone's contents available." What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?
This discussion has been archived. No new comments can be posted.

18th Century Law Dredged Up To Force Decryption of Devices

Comments Filter:
  • 5th Admendment? (Score:5, Interesting)

    by JustNiz ( 692889 ) on Tuesday December 02, 2014 @12:39PM (#48507979)

    >> authorizing courts to issue any order necessary to obtain information within their jurisdiction.

    Isn't this actually contradictory to the 5th admendment?

    • by koan ( 80826 ) on Tuesday December 02, 2014 @12:41PM (#48508007)

      Which came first? The chicken or the egg?

      Answer: The rooster.

      • Somebody downloaded Predestination over the weekend.

      • Re:5th Admendment? (Score:5, Insightful)

        by kruach aum ( 1934852 ) on Tuesday December 02, 2014 @01:10PM (#48508411)

        The egg. Eggs had existed for millions of years before the first dinosaurs, let alone before the first birds, let alone before the first chickens.

        • Re:5th Admendment? (Score:5, Informative)

          by Chris Mattern ( 191822 ) on Tuesday December 02, 2014 @01:27PM (#48508607)

          And even if you specify chicken eggs, it's *still* the egg. By the process of evolution, the first chicken would have been a mutation from parents that were almost, but not quite, chickens. The almost-but-not-quite-chicken mother would have laid an egg, out of which hatched the first chicken. So the egg came first.

          • by mythosaz ( 572040 ) on Tuesday December 02, 2014 @01:38PM (#48508729)

            The nice man on Sunday told me all the animals were created in one fell swoop, so it's the chicken.

          • Re:5th Admendment? (Score:5, Insightful)

            by nedlohs ( 1335013 ) on Tuesday December 02, 2014 @01:50PM (#48508851)

            Is a "chicken egg" an egg that could hatch a chicken? Or an egg laid by a chicken? Is an unfertilized egg laid by a chicken a "chicken egg" - that would seem to favor the second case, in which the chicken came first....

          • Re:5th Admendment? (Score:5, Insightful)

            by kruach aum ( 1934852 ) on Tuesday December 02, 2014 @01:53PM (#48508881)

            This, interestingly, runs into the paradox of the heap. 10 grains of rice are not a heap. 11 grains of rice are not a heap. 12 grains of rice are not a heap... and adding grains of rice one by one is never going to end up in a case where X grains of rice are not a heap but X+1 grains of rice are. But now we have a problem, because 1000 grains of rice clearly are a heap! There must have been a switch somewhere from not-heap to heap, but it's somehow untraceable to any particular instance of rice adding.

            The chicken is similar. The archaeopteryx clearly is not a chicken. Slowly, over the millennia, mutation by mutation, we eventually ended up with creatures that clearly are chickens. But when was the first time a non-chicken gave birth to a chicken? Just like in the case of the heap, we can't tell. What's more, not only can't we tell, there may not even be a fact of the matter; that is, it may be fundamentally unknowable.

          • And even if you specify chicken eggs, it's *still* the egg. By the process of evolution, the first chicken would have been a mutation from parents that were almost, but not quite, chickens. The almost-but-not-quite-chicken mother would have laid an egg, out of which hatched the first chicken. So the egg came first.

            Your logic is slightly flawed. An egg laid by a not-quite-chicken is still NOT a chicken egg. The embryo inside that egg was a chicken, so the chicken came first.

    • Re: (Score:2, Insightful)

      by Anonymous Coward

      >> authorizing courts to issue any order necessary to obtain information within their jurisdiction.
      Isn't this actually contradictory to the 5th admendment?

      Not when the Feds say it isn't.

      You seem to be under the illusion that we are a nation of laws, not a nation of men. We haven't been a nation of laws since the PATRIOT Act was signed, and many would argue that we've been a nation of men since a long time before that.

    • Re:5th Admendment? (Score:5, Informative)

      by Anonymous Coward on Tuesday December 02, 2014 @12:53PM (#48508173)

      Assumming that you're talking about the Fifth Amendment's prohibition on compelled self-incriminaton, no. If you're suspected of a crime, *you* can't be compelled to incriminate yourself. But third parties that aren't protected by a privilege (spousal, attorney-client, doctor-patient, etc.) can be compelled to produce evidence, testify against you, and definitely to provide technical manuals and expertise. Third parties can be compensated for the cost of complying with subpoenas in cases that they are not party to.

      The protection against self-incrimination isn't well-defined either. There's conflicting case-law as to whether you can be compelled to hand over encryption keys.

    • Re: 5th Admendment? (Score:4, Informative)

      by Anonymous Coward on Tuesday December 02, 2014 @12:55PM (#48508203)

      Nope. The 5th Amendment only means you can't be compelled to be a witness against yourself. Well, some other stuff too, but that is the relevant part.

      You're really looking for the 4th Amendment anyway. It provides for protection from unreasonable search and seizure, not prohibiting all search and seizure.

      • issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law

        The words necessary, appropriate, agreeable are supposed to limit the law to reasonable search and seizure.

    • Re:5th Admendment? (Score:4, Informative)

      by Anonymous Coward on Tuesday December 02, 2014 @12:58PM (#48508237)

      I would say no. They aren't forcing anyone to incriminate themselves. It is forcing a 3rd party (the phone manufacturer) to help extract the information. Unless the phone manufacturer was the suspect of the crime, then its not a 5th amendment issue.

    • Re:5th Admendment? (Score:5, Insightful)

      by jedidiah ( 1196 ) on Tuesday December 02, 2014 @01:04PM (#48508337) Homepage

      This just goes to show that "shredding the Constitution" has been going on for a very long time. The feds pretty much started as soon as they possibly could.

      There's always some idiot that thinks a small dose of tyranny will be OK.

      • Re:5th Admendment? (Score:4, Insightful)

        by amicusNYCL ( 1538833 ) on Tuesday December 02, 2014 @01:19PM (#48508521)

        There's always some idiot that thinks a small dose of tyranny will be OK.

        And you're thinking that George Washington was one of those idiots who thought a little tyranny would work out well? I don't see how this law contradicts the Constitution. It doesn't say what jurisdiction a court has, just that a court is allowed to issue orders to obtain information that is already within its jurisdiction.

        ...which authorizes the United States federal courts to "issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law."

        Which part of that is "the feds" "shredding the Constitution"?

      • by Yakasha ( 42321 )

        This just goes to show that "shredding the Constitution" has been going on for a very long time. The feds pretty much started as soon as they possibly could.

        There's always some idiot that thinks a small dose of tyranny will be OK.

        Except the OP & article misquoted the law (for click bait? Maybe, IANAL). But I have a feeling the rest of the sentence people are misquoting is relevant as well:

        The Supreme Court and all courts established by Act of Congress may issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law.

        Emphasis mine.
        If another law or the Constitution does not allow the action, it cannot be granted via this law. The court order being discussed even specifically states the obvious and adjudicated limitations of the law:

        t]he All Writs Act is a residual source of authority to issue writs that are not otherwise covered by statute

        You cannot be forced to testify against yourself. Apple and every other phone manufacturer however, is not you, and can be

    • Re: (Score:2, Informative)

      by Anonymous Coward

      No. The 5th Amendment applies to the Accused. The court can't order the accused to crack the encryption on a device, but they sure can request the manufacturer (or an expert) to try to do so. People are over-thinking this. This is is like getting a handwriting expert to analyze handwriting, getting a tire manufacturer to testify about your tires, or getting a code-breaker to decipher the mob's coded cooked books. Just because this is "tech" doesn't mean it somehow gets a free pass on the law.

    • Re:5th Admendment? (Score:5, Informative)

      by jbolden ( 176878 ) on Tuesday December 02, 2014 @01:16PM (#48508491) Homepage

      The 5th says that you can't be compelled to be a witness against yourself. It doesn't say the courts can't drag 3rd parties into being witnesses against you even if they don't want to. There is no conflict.

    • by sjames ( 1099 )

      The 5th amendment would naturally limit the law to orders issued to others. You still can't be compelled to testify against yourself.

      Due process would need to be followed in order to comply with the 4th amendment.

    • Quote: "within their jurisdiction". That means that the court has ordered (in compliance with your rights) that certain data be discovered or turned over. Seriously, folks: the police do get to investigate crimes. If they need to look at your car (or, in 18th century terms, your horse), they get to.

  • by gweihir ( 88907 ) on Tuesday December 02, 2014 @12:40PM (#48507991)

    Really, as long as only "reasonable technical assistance" is required, there is no danger. Good encryption is designed to be (practically) unbreakable unless the key is known, hence expecting somebody to break it without the key is not "reasonable" at all.

    • Re: (Score:2, Insightful)

      by Anonymous Coward

      Is it reasonable for Google to push an update to the phone in question that decrypts the phone the next time the password is entered?

    • Really, as long as only "reasonable technical assistance" is required, there is no danger. Good encryption is designed to be (practically) unbreakable unless the key is known, hence expecting somebody to break it without the key is not "reasonable" at all.

      From a legal standpoint, the moment you assume to understand how the definition of "reasonable" will be upheld in court now or in the future is the moment you find yourself dead wrong.

      Reasonable all depends on the people and money involved.

      • by gweihir ( 88907 )

        Actually, it does not matter, because whatever perversions the legal profession has created here, Apple or Google cannot help them. Of course, most people in that field are disconnected from reality, but even they have to bow to hard facts eventually.

        • Actually, it does not matter, because whatever perversions the legal profession has created here, Apple or Google cannot help them. Of course, most people in that field are disconnected from reality, but even they have to bow to hard facts eventually.

          I fully expect whatever illusions Google and Apple have about creating this "perfect" secrecy to protect the consumer will be overridden by the "need" for governments to combat terrorism.

          We've certainly had plenty of our privacy and rights overridden for this "need" in the past, and continue so today.

          Speaking of bowing, remember that both Apple and Google are companies that operate and do business within the United States. Like I said, I fully expect.

        • Google and Apple can help them by making the encryption breakable.

          • Google and Apple can help them by making the encryption breakable.

            Nope, that battle has already been fought. That would constitute compelled speech.

            They can compel the company to provide information (such as source code) for their current data. Subpoenas have been doing that for decades.

            They can compel the company to help them perform certain research.

            They can even use NSLs to compel the company to intercept certain communications.

            But at least so far, they cannot compel the company to modify their product to become defective.They still need to do that themselves, comm

      • by sjames ( 1099 )

        While the courts can be quite silly, they cannot order you to sweep back the tide. If something is technically impossible within a relevant timeframe, the court will be SOL. There are plenty of cryptographers who can testify as to the practicality of breaking a good encryption scheme. Just make sure to use a good one so that a cryptographer can fairly testify to a timeframe in the hundreds of years. Even the craziest court will have to admit that there's little point in decrypting the data after all relevan

    • by bill_mcgonigle ( 4333 ) * on Tuesday December 02, 2014 @01:57PM (#48508911) Homepage Journal

      Really, as long as only "reasonable technical assistance" is required, there is no danger. Good encryption

      The Justice Department feels that having an embedded back door into the devices' crypto is very "reasonable" and has been pushing for just that. Now they need a judge to rule on their version of the word and the corporations will fall in line.

      Throw in a Patriot Act gag order and some import/export barriers vis-a-vis patent wars, and let's make a bet about how many 2015 backdoors will be discovered in 2018.

      This is the kind of government the voters support.

  • Well, obviously (Score:5, Insightful)

    by bondsbw ( 888959 ) on Tuesday December 02, 2014 @12:41PM (#48507997)

    What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

    That is answered by the former quote:

    The judge ordered the manufacturer to offer 'reasonable technical assistance' to make the phone's contents available.

    Breaking encryption that is not breakable does not fall under any sense of the word "reasonable".

    • Re:Well, obviously (Score:5, Interesting)

      by Opportunist ( 166417 ) on Tuesday December 02, 2014 @01:11PM (#48508421)

      And now try to word that in a way that a judge can understand that doesn't make him feel stupid (because judges don't like to feel stupid and will side with the other guy if they do) and doesn't make him think you're trying to bullshit him (which is actually not that far away from the other limitation).

      Good luck.

      • by jbolden ( 176878 )

        How about this, "Encryption relies on knowing the solution to a math problem that cannot be solved. We, Apple, can't solve it, the FBI can't solve it, the NSA can't solve it. You cannot order us to solve it anymore than you can order us to change the speed of light. It is not a question of law it is a question of math."

        • That makes you look like you're lecturing the judge. He won't side with you.

          • by jbolden ( 176878 )

            OK then what does he do? That's now part of the record. The person he is about to sanction has argued they cannot comply. He now has to give reason why they can comply. He has to prove willful failure to comply, that's his burden now. There are laws / policies even for judges.

      • And now try to word that in a way that a judge can understand

        OK, start with an analogy of a company that manufactures locks without keys.

      • by sjames ( 1099 )

        First tell him it will take hundreds of years as far as anyone can guess (not at all a lie if you did it right) without outright refusing. If he demands it sooner, suggest that with help from the NSA you may be able to speed it up. Then it's on the NSA for refusing to cooperate.

    • They should just write a program that checks all possible passwords. Getting the hardware that can support that is the state's obligation. Hopefully it will find the password before the sun explodes.

  • The law is valid (Score:5, Insightful)

    by aepervius ( 535155 ) on Tuesday December 02, 2014 @12:42PM (#48508011)
    "New York prosecutors successfully persuaded a judge that the ancient law could be used"

    The law was not sunset-ed, the law was not stricken down by another law, the law itself was not repelled on its own, the law was not stricken down by the supreme court.

    So what is the problem ? Until a repell/strick down , ALL those law are still valid. Cue the shooting down welsh with a bow, but this is the basis of our judiciary process. just because a law is old does not make it invalid.
    • Re:The law is valid (Score:5, Interesting)

      by Registered Coward v2 ( 447531 ) on Tuesday December 02, 2014 @12:47PM (#48508105)

      "New York prosecutors successfully persuaded a judge that the ancient law could be used" The law was not sunset-ed, the law was not stricken down by another law, the law itself was not repelled on its own, the law was not stricken down by the supreme court. So what is the problem ? Until a repell/strick down , ALL those law are still valid. Cue the shooting down welsh with a bow, but this is the basis of our judiciary process. just because a law is old does not make it invalid.

      Correct, until it is repealed (unlikely) or struck down by the Supreme Court it is still the law. This could be a good case to take to the Supreme Court since it highlights the impact of changing technology on the law and could clarify what is required when presented with such a writ.

    • >Cue the shooting down welsh with a bow

      What?

      • Re:The law is valid (Score:4, Informative)

        by N1AK ( 864906 ) on Tuesday December 02, 2014 @03:10PM (#48509655) Homepage
        Laws have existed for various odd things in the UK in the past, and certain examples like that and being allowed to kill Scots within York's walls at night were claimed to still be technically valid in widely spread urban legends. IIRC there isn't any law allowing the murder of someone in the UK that is still valid.
    • by jbengt ( 874751 )
      Actually, TFS is misleading, as the law has been modified several times since originally written.
  • by cfalcon ( 779563 ) on Tuesday December 02, 2014 @12:46PM (#48508073)

    If the encryption is real (aka, a third party isn't holding the key,or a copy of YOUR key), then they may as well deliver the order to a donkey.

    So there's no threat about Apple and Google "deliberately creating encryption that they themselves cannot break", because that just means they can't help the government when they ask, much as, for instance, my dog could not help them out.

    But there's a lot wrong with that sentence. They aren't creating encryption, they are writing crypto code using existing crypto algos- arguably the same thing, but still. Also, YOU, the user, will be the one encrypting it, much like you can't sue a knife manufacturer for making a sharp knife. And encryption that is "breakable" isn't really encryption by any decent standard.

    The real concern isn't some ancient law trying to force the hand of companies- this will only force them further along the path of making sure that it's not THEIR data, because they lack keys, it's the USER data, go bug him. That's the logical place for them to be anyway- no one spends hundreds of dollars for a phone and then encrypts it without expecting that the encryption is actually a thing- while it's wise to supposed that government level attackers have ways to get keys, it is obviously NOT WHAT YOU WANT WHEN YOU BOUGHT IT. I mean, so there's that.

    Anyway, the real concern will be NEW laws that force the companies to do this. And they wouldn't have to be federal laws- if California made some law about how you can't blah blah offer real encryption unless X, and Washington was like no real encryption unless Y, and New York was like no real encryption unless Z, then you would be pushing the companies out of too many markets, and then all the federal courts have to do is drag their feet and the feds get another full decade of Total Access To Your Own Papers And Possessions.

  • by mi ( 197448 ) <slashdot-2017q4@virtual-estates.net> on Tuesday December 02, 2014 @12:46PM (#48508087) Homepage Journal

    that the ancient law

    The Bill of Rights is comparably ancient. So what? Old does not mean "wrong" (unless you are a teenager in the rebellious phase)...

    The All Writs Act is a broad statute simply authorizing courts to issue any order necessary to obtain information within their jurisdiction.

    Makes sense to me. In fact, seems like a good — forward-compatible — law indeed...

    • by xxxJonBoyxxx ( 565205 ) on Tuesday December 02, 2014 @01:02PM (#48508303)

      America's modern left often argues that portions of the US Constitution can be safely ignored because it's old and was written by white dudes. Here's a (fairly calm) piece that explores that argument. (Also look up "constitution living document".)

      "Is the Constitution Still Relevant?"
      http://consortiumnews.com/2013... [consortiumnews.com]

      Unfortunately, this isn't just a fringe belief: in 2010 a USA Today poll showed that 1 in 4 people no longer though the Constitution was "relevant"
      http://usatoday30.usatoday.com... [usatoday.com]

      • all that tells me is (at least) 1 in 4 americans are fucking stupid (the truth is probably more like 2/3rds)
      • by MobyDisk ( 75490 )

        people no longer though the Constitution was "relevant"

        I find this belief correlates with people who have no idea what the constitution says or does. They don't even realize that it says basic things like that there will be a president, or that senators serve 6 year terms, or that the president is commander-in-chief of the military. These are simple concrete things people can understand, and they can then realize how relevant it is.

      • I believe that the Constitution is literally true and still relevant today. Even though it was written by many different authors, it is all inspired by one nation. Yes, there are some groups that try to push their own interpretation of the Constitution, but they are not true believers. Still others believe that the latter Acts supercede the Bill of Rights, while I believe that the Bill of Rights is never invalidated. Even among the believers, many still do not vote more than maybe once every 4 years.

        The

      • Jefferson (Score:5, Insightful)

        by mx+b ( 2078162 ) on Tuesday December 02, 2014 @02:49PM (#48509441)

        America's modern left often argues that portions of the US Constitution can be safely ignored because it's old and was written by white dudes. Here's a (fairly calm) piece that explores that argument. (Also look up "constitution living document".)

        Thomas Jefferson was concerned greatly about the "Tyranny of the Dead" -- that the laws and debts of dead elder generations will inhibit progress in younger generations that are facing entirely new types of problems not envisioned by the older generations. He wanted the Constitution (or at least federal law) to be effectively completely rewritten every generation -- every 18-20 years or so. You can read about it in his letters.

        I would say that probably the results of that poll are not people being "stupid" and "forgetting" that the Constitution is important, but rather, evidence of a yearning that the current system is not entirely working and it needs modification. Just like we have done so 27 times in the history of the US (i.e., the Amendments). It's not relevant today, but we Amend it to be more relevant. For example, the move to get a 28th amendment that strikes down the Citizens United ruling and makes more free and fair elections (see any number of organizations: Move to Amend, WolfPAC, etc.). We know there's money in politics, and here's one proposed solution to it. Not by ignoring the constitution or laws, but actually, working the way the constitution is supposed to work! The people can call for an amendment if our national leaders do not.

        I don't think I've heard anyone make the argument that they can ignore laws because old white dudes wrote them. I *have* heard that we need to change laws because they are stupid and we want to make a more perfect union, though. Don't let people like the ones that wrote the article in your link trick you into think their opinion is public opinion (its easy to spot because of the use of words like "The Left thinks blah" and "The Right does blah" -- there is no Left and Right as one huge bloc, but a spectrum of smaller groups with differing opinions, and even if it was one big bloc, who is this author to be able to speak for half the country? I've never heard of him.).

        I'm not that worried. I think when our current leaders that have been in office for 30+ years finally retire or are voted out as the younger generation comes up, we will see laws and constitutional amendments that fix problems. Not ignored, fixed.

  • "1st century cipher used by Caesar dredged up to force decryption of devices."

  • by fahrbot-bot ( 874524 ) on Tuesday December 02, 2014 @01:02PM (#48508301)

    The judge ordered the manufacturer to offer 'reasonable technical assistance' to make the phone's contents available." What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

    Then the vendors won't be able to offer "reasonable technical assistance". What's so hard to understand able that? The existence of the law doesn't prevent them from creating said, unbreakable, encryption.

    • Wrong. The vendors WILL be able to offer reasonable technical assistance. Whether that reasonable technical assistance will lead to the prosecutors getting the data that they want is the question.
    • Sure they can provide reasonable technical assistance.

      1. How to use the decryption key when discovered
      2. How to craft a brute-force attack
      3. Wish them luck.

  • Great news (Score:5, Insightful)

    by GameboyRMH ( 1153867 ) <gameboyrmh@@@gmail...com> on Tuesday December 02, 2014 @01:06PM (#48508363) Journal

    This tells us that the cryptography is working and that they're only able to access data with legal power rather than some unknown height of technical prowess.

  • by jader3rd ( 2222716 ) on Tuesday December 02, 2014 @01:13PM (#48508449)
    I like the idea that well written laws will apply to anytime.
  • What will happen (Score:4, Insightful)

    by jbolden ( 176878 ) on Tuesday December 02, 2014 @01:13PM (#48508455) Homepage

    What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

    Nothing. The law requires people to give reasonable assistance to law enforcement. It does not require them to architect systems so that such reasonable assistance is fruitful. Safe manufacturers are not required to know the combinations to their devices.

  • authorizing courts to issue any order necessary to obtain information within their jurisdiction.
    ...

    What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

    They can just write an order demanding the NSA help them break the encryption or provide them a dump of the in-transit data they've collected. In the words of Bart Simpson, 'The system works.'

  • The State has the right to compel the company to break its evil spell.

  • I mean once they have the encrypted data... it has everything they need. It's not the Apple or Google's fault that the police can't comprehend encrypted data.
  • by roc97007 ( 608802 ) on Tuesday December 02, 2014 @01:35PM (#48508697) Journal

    I'm watching this carefully, because the hardware vendors and carriers who actively resist are going to be the ones I do business with.

  • When did 238 years ago became "ancient" in regards to time? Anything past 2,000 years is ancient, 228 years is more recent.
  • One thing I learned with going through the federal process (see my bio at The Market is not Random [tminr.com]), is that the constitution is irrelevant and that the use of it becomes pure interpretation and loophole. I doubt that the current legal structure was anything close to the forefathers imagined, but never doubt that the governmental employees will utilize any and every loophole at its disposal to justify its actions. The oxymoron of united states government.

  • What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

    Nothing much. They'll provide as much assistance as they can: they'll instruct the judge that the extent of assistance available is "Sorry, it can't be done. By anyone."

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (10) Sorry, but that's too useful.

Working...