Free Future

Federal Judge: Only Powered-Off Cell Phones Deserve Privacy Protections

By Chris Soghoian, Principal Technologist and Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 11:27am

A federal magistrate judge in New York recently ruled that cell phone location data deserves no protection under the Fourth Amendment and that accordingly, the government can engage in real-time location surveillance without a search warrant. In an opinion straight from the Twilight Zone, magistrate judge Gary Brown ruled two weeks ago that “cell phone users who fail to turn off their cell phones do not exhibit an expectation of privacy.”

The case in question involved a physician who the DEA believed had issued thousands of prescriptions for pain killers in exchange for cash. In March of this year, the DEA had obtained a warrant for his arrest, and,

The Asymmetry Between Past and Future, and Why it Means Mass Surveillance Won’t Work

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 11:39am

Former Senator Joseph Lieberman recently charged that mistakes by U.S. security agencies were responsible for failing to stop the Boston Marathon bombing. I recently wrote about how mass surveillance makes this kind of recrimination inevitable, because once a government agency spies on a person, they become in a sense responsible for any actions that that person takes. To paraphrase Colin Powell, we might sum it up as “You surveil him, you own him.”

I recently came across a good analogy for why it’s deceptively hard for security agencies to detect and stop out-of-nowhere terrorist attacks like the Boston bombing—and why mass surveillance isn’t likely to help. It comes from the book The Drunkard’s Walk: How Randomness Rules Our Lives, by the physicist and writer Leonard Mlodinow, in a discussion of Brownian motion.

Brownian motion, you may recall, is the random jiggling of molecules in a liquid or other substance. A dye molecule floating in a seemingly still glass of water will randomly move about, covering about an inch in three hours, buffeted by random collisions with the smaller water molecules that surround it.

What would it take to actually explain the motion of that molecule? This is where the parallel to anti-terrorism efforts comes in. Mlodinow points out, “In any complex string of events in which each event unfolds with some element of

Court Ruling Gives FBI Too Much Leeway on Surveillance Technology

By Linda Lye, Staff Attorney, ACLU of Northern California at 5:09pm

Today, a federal district judge in Arizona issued a very disappointing decision concerning the government’s obligations to be candid with courts about new technologies they are seeking a warrant to use.

The case involves Daniel Rigmaiden, who is being criminally prosecuted for an alleged electronic tax fraud scheme. The government used a surveillance device known as a stingray to locate Mr. Rigmaiden. A stingray operates by simulating a cell tower and tricking all wireless devices on the same network in the immediate vicinity to communicate with it, as though it were the carrier’s cell tower. In order to locate a suspect, a stingray scoops up information not only of the suspect, but all third parties on the same network in the area. This means that when the government uses a stingray to conduct a search, it is searching not only the suspect, but also tens or hundreds of third parties who have nothing to do with the matter. When the FBI sought court permission to use the device to locate Mr. Rigmaiden, it didn’t explain the full reach of stingrays to the court.

The ACLU and the Electronic Frontier Foundation filed an amicus brief arguing that when the government wants to use

FBI Documents Suggest Feds Read Emails Without a Warrant

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 10:31am

New documents from the FBI and U.S. Attorneys’ offices paint a troubling picture of the government’s email surveillance practices. Not only does the FBI claim it can read emails and other electronic communications without a warrant—even after a federal appeals court ruled that doing so violates the Fourth Amendment—but the documents strongly suggest that different U.S. Attorneys’ offices around the country are applying conflicting standards to access communications content (you can see the documents here).

Last month, in response to a Freedom of Information Act request, the ACLU received IRS documents indicating that the agency’s criminal investigative arm doesn’t always get a warrant to read Americans’ emails. Today we are releasing these additional documents from other federal law enforcement agencies, reinforcing the urgent need for Congress to protect our privacy by updating the laws that cover electronic communications.

The FBI and Electronic Communications: Where’s the Warrant?

The documents we received from the FBI don’t flat out tell us whether FBI agents always get warrants, but they strongly suggest that they don’t.

In 2010, the Sixth Circuit Court of Appeals decided in United States v. Warshak that the government must obtain a probable cause warrant before compelling email providers to turn over messages to law enforcement. But that decision only applies in the four states covered by the Sixth Circuit, so we filed our FOIA request to find out whether the FBI

The Privacy-Invading Potential of Eye Tracking Technology

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 9:42am

Eye tracking technology received new attention recently due to its inclusion in the Samsung Galaxy IV phone, where it can (with mixed results, according to reviewers) let users scroll the screen with their eyes or dim the screen when they look away. Clearly this is a technology that has the potential for a lot of clever applications. But what are the privacy implications?

Eye tracking for research was used for over a century before computers (see the quick history outlined in this article). The earliest research, in the 19th century, actually involved direct mechanical contact with the cornea. Already by 1898, researchers were discovering some really cool phenomena of the human brain. Motion pictures were applied to the problem as early as 1905, and the first head-mounted eye-tracker was developed in 1948, which freed study subjects from having to keep their heads still. In the mid-1970s the first remote trackers were developed that were truly unobtrusive to the subject. By then, research and writing based on eye tracking was booming, not only on the part of psychologists but also the military.

Chertoff on Google Glass

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 5:56pm

We’ve been doing a fair amount of thinking about the implications of consumer wearable cameras like Google Glass, and I’m sure we’ll have more to say in this space on the subject. But meanwhile, we’re pleasantly surprised to report a very trenchant analysis of the technology’s implications for our privacy by none other than Michael Chertoff. Writing on CNN’s web page, the former DHS chief writes,

So, who owns and what happens to the user's [video] data? Can the entire database be mined and analyzed for commercial purposes? What rules will apply when law enforcement seeks access to the data for a criminal or national security investigation? For how long will the data be retained? ….

Even those who might be willing to forgo some degree of privacy to enhance national security should be concerned about a corporate America that will have an unrestricted continuous video record of millions.

What is to prevent a corporation from targeting a particular individual, using face recognition technology to assemble all uploaded videos in which he appears, and effectively constructing a surveillance record that can be used to analyze his life?

Chertoff says he’s inclined to think that government regulation may be needed. I haven’t seen Chertoff say anything about the threat of pervasive government surveillance, which would make him a kind of anti-libertarian on privacy—in favor of restricting corporations, but not the government. For the average, relatively powerless person trying to live their life, the threat comes from both directions.

The Burdens of Total Surveillance

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:33pm

Last week’s Washington Post report that the CIA had requested that Boston bomber Tamerlan Tsarnaev be placed on a terrorist watch list raises an interesting point about total surveillance societies: in addition to all their negative implications for citizens, they actually bring some disadvantages for the authorities as well.

It’s not clear what information the CIA’s request was based upon, but reportedly it came from Russian authorities. It is also possible that Tsarnaev’s communications were flagged by US agencies such as the NSA. Either way, it seems as though there’s a real possibility that Tamerlan’s name came to the attention of the authorities through some dragnet-style surveillance technique.

If so, the conundrum for the authorities is this:

Newest Word to Take on Orwellian Overtones in Internet Age: “Trust”

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 5:44pm

What could be warmer and fuzzier than “trust”? Between two human beings, it’s a hard-won bond that binds them together. In society, it is a currency that helps create a prosperous and efficient economy and culture, as thinkers such as Francis Fukuyama and Bruce Schneier have argued. But recently the word has taken on a new cast of ambiguity, and seems to be fast becoming the newest entry in the lexicon of Orwellian formulations, along with such once purely warm and positive words such as “security,” “defense,” and “intelligence.”

IRS Says It Will Respect 4th Amendment With Regard to Email, But Questions Remain

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 4:07pm

With tax day behind us, taxpayers may soon have something else to celebrate from the IRS. In testimony before the Senate Finance Committee today, IRS Acting Commissioner Steven Miller was questioned aggressively about documents released by the ACLU last week that indicate that the IRS does not think it needs a warrant to read all emails and other electronic communications during criminal investigations. Under pressure from senators, Miller agreed to update IRS policy documents within 30 days to state that a warrant is required for access to all emails, regardless of their age.

The First State Laws on Drones

By Allie Bohm, Advocacy & Policy Strategist, ACLU at 3:13pm

On Thursday, Idaho Governor Butch Otter signed into law the first bill in the nation protecting individuals from unfettered surveillance by unmanned aerial vehicles.

Virginia enacted the very first drones bill nationwide on April 3. Their bill imposes a two-year moratorium on law enforcement drone use, except in emergencies, in order to give the VA legislature time to put in place legal protections for domestic drone use. On Thursday, Idaho put those legal protections in place.