The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required

The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed an amicus brief, alongside the national ACLU, its Maryland, North Carolina, South Carolina, and Virginia affiliates, and the National Association of Criminal Defense Lawyers (NACDL).

We argued that electronic device searches at the border should require a warrant based on probable cause, but at minimum, regardless of whether an officer searches by hand or with forensic software that plugs into a device and downloads its entire contents for search, the same Fourth Amendment standard should apply to all device searches at the border.

Unfortunately, the court rejected that argument and ruled that a lower standard applies to manual searches, allowing the government to conduct extraordinarily invasive electronic device searches without any suspicion of wrongdoing, simply because the border officer chooses to search by hand rather than with a forensic tool.

The Border Search Exception Meets Your Phone

The Fourth Amendment requires that government searches of persons or property be reasonable, which usually means obtaining a warrant based on probable cause from a judge.

But a warrantless search can still be reasonable if it falls within an exception to the warrant requirement, including the exception that allows officers to search your belongings at the border. The border search exception allows warrantless searches of persons or property crossing the U.S. border, including the functional equivalent of the border such as international airports, given the government’s interests in controlling who and what may enter the country.

Historically, courts have categorized border searches of luggage, vehicles, and personal effects as “routine” and thus reasonable even if conducted without any suspicion that the traveler has engaged in wrongdoing; courts have also held that more invasive “nonroutine” searches, such as certain body searches and searches that damage property, require reasonable suspicion.

But a person’s privacy interests in the personal data on a phone or laptop are extraordinarily different than their limited privacy interests in the contents of their suitcase.

The Supreme Court addressed cell phone privacy in Riley v. California (2014), holding that the search-incident-to-arrest exception to the warrant requirement did not apply to cell phones, thereby generally requiring a warrant for phone searches, at least at the interior of the country. The court recognized the unprecedented privacy interests people have in their cell phones and how even brief manual searches can reveal the “sum of an individual’s private life,” including our political affiliations, religious beliefs, sexuality, and more. Accordingly, the Supreme Court held that because electronic device searches bear “little resemblance” to searches of bags or physical containers, they should be evaluated differently.

Following Riley, the Fourth Circuit considered two border device search cases involving forensic searches, in which border officers used external software to extract and analyze a device’s data.

In U.S. v. Kolsuz (2018), the Fourth Circuit held that a forensic search of a cell phone at the border “must be considered a nonroutine border search, requiring some measure of individualized suspicion” of a transnational offense, but the court declined to decide whether the standard is only reasonable suspicion or instead a probable cause warrant.

Then in U.S. v. Aigbekaen (2019), the Fourth Circuit held that a forensic device search at the border in support of a purely domestic law enforcement investigation requires a warrant. The court also reiterated the general Kolsuz rule for a forensic border-related device search: the “Government must have individualized suspicion of an offense that bears some nexus to the border search exception’s purposes of protecting national security, collecting duties, blocking the entry of unwanted persons, or disrupting efforts to export or import contraband.”

In Belmonte Cardozo, manual searches were finally before the court.

Keep reading

Comcast Turns Millions Of Routers Into Motion Sensors – The Same WiFi Signals Can ID You With 99.5% Accuracy

Dear Comcast customers: The internet gateway in your living room is now a motion sensor. It’s free of charge, and the data can go to law enforcement without further notice. What’s more, researchers have already shown that these same signals can identify exactly who is in the room.

On Tuesday, Comcast unveiled Xfinity Shield, a home security platform built entirely around the WiFi network. Its centerpiece, WiFi Motion, turns the leased gateway into a motion detector at no extra charge. According to Comcast, a typical customer has roughly 36 devices connected to their WiFi.

WiFi Motion works because a human body moving through a room disturbs the signal field between the gateway and stationary connected devices, like a printer or a game console. While the feature is opt-in and – according to Comcast’s rollout materials – does not track phones or reach through WiFi extenders, those limitations are choices Comcast made in software, not limitations of the technology itself.

Comcast says WiFi Motion works “without recording video, capturing images or identifying individuals.”

The company is not shy about identification as a product. The $15-a-month tier, Xfinity Shield Select, adds AI-powered cameras that identify people, pets, packages and vehicles. The free tier’s restraint is a line drawn one product SKU away.

Keep reading

Military Contractor’s Spy Aircraft Quietly Flying Southern Border On Mysterious Mission

The Pentagon says it does not discuss contractor support to particular missions. The gear aboard mimics cell towers.

Private military contractor Metrea has spent months quietly operating two surveillance-equipped aircraft along the U.S.-Mexico border, according to the Arizona Mirror.

The planes have traversed Arizona, New Mexico and Texas, circling at high altitude over border cities including Bisbee and Douglas in Arizona, and Laredo and El Paso in Texas.

Metrea holds multiple contracts with the U.S. military, including a $5.7 million award to support training for U.S. Special Operations Command. The company also conducts simulated training missions for the Marine Corps.

It performs comparable border work overseas, providing what it describes as advanced aerial surveillance to the Australian government for monitoring that country’s border regions.

Arizona Mirror reports:

One of the major pieces of equipment installed on the aircraft is a DRT 3300, also sometimes referred to as a “dirtbox.” A dirtbox is a piece of equipment that mimics a cell phone tower and acts in a similar manner to “stingray” devices that track cell phones and reportedly can even intercept messages.

It isn’t the only equipment on the aircraft meant for “signals intelligence” either. Signals intelligence refers to the collection of information that is transmitted through the airwaves such as radio, wifi or other electronic means. One of the aircraft lists a “Windjammer System” as a piece of equipment that has been installed.

The Trump administration declined to say what the aircraft are doing over the border, or which agency they are working for.

A DHS spokesperson told the Mirror that Immigration and Customs Enforcement, Homeland Security Investigations and Customs and Border Protection were not flying with Metrea along the southern border. The department did not answer whether the flights support a DHS or a Defense Department mission.

“The Department of War contracts with a number of companies, including Metrea, to provide capabilities in support of military operations across the globe. For operations security reasons, we do not discuss specific contractor support to particular missions or operations,” a Defense Department spokesperson wrote in a statement to the Arizona Mirror. “These activities are governed by Attorney General approved procedures that ensure the activities are conducted in a manner that protects the constitutional and legal rights and the privacy and civil liberties of U.S. citizens.”

Metrea did not respond to repeated requests for comment. Meanwhile, Metrea’s are not the only contractor aircraft working the border. The Mirror reports that a jet belonging to Tenax Aerospace, equipped with high-end mapping technology and previously spotted over the South China Sea and Nigeria, has flown the same route since July.

Civil liberties advocates contend that the secrecy itself is the problem.

“Whatever security rationales are used to justify mass surveillance, whether it is patrolling the border or pursuing the war on drugs, if you’re intent on pursuing those policies you have to do it in a way that respects the privacy and constitutional rights of Americans,” said Jay Stanley, a senior policy analyst with the American Civil Liberties Union’s Speech, Privacy and Technology Project, in a statement to the Arizona Mirror.

“Number one, you need policies that ensure transparency so we know what government agencies are doing with the brand new powers that technology is giving them that humans have never had in history,” Stanley added. “No matter what your position is, you should agree that it is done in the democratic process and not done by government officials behind closed doors.”

Keep reading

Are China’s Surveillance Exports Turning Nations Into Digital Dictatorships?

Is Beijing hoping to turn other authoritarian societies into digital Chinas?

China’s rise as the world’s leading exporter of surveillance technology is yielding some disturbing results. Beijing’s surveillance export packages comprise an entire technological architecture that can give governments an unprecedented ability to see, identify, and track their populations.

Those technologies include cameras, artificial intelligence, telecommunications networks, cloud computing, facial recognition, license-plate recognition, and centralized command systems. Many mid-sized countries are becoming or are already customers.

Turning Other Nations Into ‘Little Chinas’

Turkey is an important case study.

To be clear, Turkey has not yet become a Chinese-style surveillance state. Its political system and institutions remain different from China’s. That said, Chinese technology companies have established a significant presence in Turkey’s digital infrastructure, and they’re not shy about it. In fact, Huawei has explicitly marketed its AI-powered CCTV and “Safe City,” i.e. surveillance technologies, in the Turkish market.

It’s no mystery that China wants to sell as much merchandise to as many trading partners as possible. But is it also possible that China wants as many partners as possible to use and become dependent upon its surveillance technology so that their societies turn into “little Chinas” by deploying Smart City tech?

AI Camera Surveillance

The first building block is the camera.

Chinese companies such as Hikvision and Dahua have become global leaders in video-surveillance equipment. Meanwhile, Huawei has developed AI-powered cameras capable of performing sophisticated image recognition and analysis. CSIS notes that Chinese firms can provide technologies ranging from cameras to AI analytics and centralized deployment.

Huawei’s AI-enabled technology is in Turkey, using cameras with embedded AI chips and deep learning capabilities to perform recognition and identification while feeding information into cloud-based big-data systems. Such systems could operate across enormous numbers of cameras.

That represents a fundamental shift in surveillance capability for nations such as Turkey. A conventional camera records what happened. An AI camera can begin answering who, when, where, and what.

Keep reading

Report: SFPD Already Using Surveillance Video From Self-Driving Cars

An internal SFPD document obtained by VICE News shows that not only can the SF Police Department pull the camera video from autonomous Waymo and Cruise cars, but more chillingly, that they have “already done this several times.”

We all had a good laugh last month at the “Ain’t nobody in it!” video when SFPD pulled over a driverless car that had no human being inside. A sensible conclusion to draw was that law enforcement was having a hard time coming to terms with these strange new fleets of robot cars that are suddenly ubiquitously all over San Francisco streets. But a new report from VICE News suggests that the relationship between the SF Police Department, and Google-owned Waymo and GM-owned Cruise, is far more advanced than we’d realized.

“‘Autonomous vehicles are recording their surroundings continuously and have the potential to help with investigative leads,’” says a San Francisco Police department training document obtained by Motherboard via a public records request,” VICE News reports. “‘Investigations has already done this several times.”

VICE News has the goods in a three-page SFPD training document outlining policies and procedures for dealing  with autonomous vehicles when encountering issues with them on the road. A lot of it is perfunctory, nuts-and-bolts stuff, like where to send the citation if the self-driving car commits a traffic violation, or what to do if the car becomes disabled.

But the very chilling phrase that really jumps out is “Autonomous vehicles are recording their surroundings continuously and have the potential to help with investigative leads,” and “Information will be sent in how to access this potential evidence (Investigations has already done this several times).”

Privacy advocates are of course worried. “​​As companies continue to make public roadways their testing grounds for these vehicles, everyone should understand them for what they are—rolling surveillance devices that expand existing widespread spying technologies,” Chris Gilliard, Visiting Research Fellow at Harvard Kennedy School Shorenstein Center, told VICE News. “Law enforcement agencies already have access to automated license plate readers, geofence warrants, Ring Doorbell footage, as well as the ability to purchase location data. This practice will extend the reach of an already pervasive web of surveillance.”

For their part, Waymo said in a statement to VICE News that the company “requires law enforcement agencies who seek information and data from Waymo to follow valid legal processes in making such requests (e.g. secure and present a valid warrant, etc.). Our policy is to challenge, limit or reject requests that do not have a valid legal basis or are overly broad.”

Cruise took a similar line, saying, “ We share footage and other information when we are served with a valid warrant or subpoena, and we may voluntarily share information if public safety is at risk.”

Keep reading

British Royal Navy’s Spy Drones Have Cameras Suspected of Sending Back Data to China

Who are these drones spying for, in the end?

The Royal Navy is fighting a war with Britain, to have resources to modernize and expand the much-diminished forced, said to be the smallest-ever.

But even when modernization efforts do come, they are not without issues, as we’ve learned this week.

It’s been widely reported that the Royal Navy spy drones used by Britain’s elite special forces had cameras suspected to be secretly sending sent data to China, The Telegraph can reveal.

The Telegraph reported:

“The cameras on the K3 Scout surveillance drones had components made in China which were transmitting information to a device in the country.

The Royal Marines have been using the £12m fleet since March and the Ministry of Defence (MoD) was forced to remove all internet connectivity from the cameras after discovering the breach.

The revelation raises fears that Beijing has been attempting to spy on Britain’s military after years of security warnings about the threat from the country.”

Keep reading

Newsom’s Wife Wiretapped in Sprawling Corruption Probe

Investigators have extensive wiretap evidence and may soon charge several individuals in a sprawling corruption probe involving Gavin Newsom and his wife Jennifer Newsom.

It was reported earlier this month that the FBI used a Democrat insider as an informant to infiltrate Governor Gavin Newsom’s inner circle before the corruption probe expanded into the governor and his wife Jennifer Newsom.

Recall that Newsom’s former chief of staff, Dana Williamson, was indicted on federal wire fraud charges last year.

Last month, Newsom fumed as he announced the corruption probe had expanded, and he and his wife are now under investigation.

Newsom said federal agents have contacted people and organizations close to him and his wife, Jennifer Newsom.

“Today, my wife and I joined Donald Trump’s hit list. He has directed his Department of Justice to investigate us. They have not found a crime – they are simply trying to find one,” Newsom said in a video posted to X last month.

“If he can’t intimidate me, he’ll go after the mother of our children,” Newsom said.

People close to the Newsoms have been subpoenaed for records, according to the governor.

According to Semafor, there are several investigations related to Newsom and they are focused on Jennifer Newsom’s taxes (+ his chief of staff).

Contrary to Newsom’s claims, the investigations did not originate from main DOJ in DC, but are out of Sacramento and involve whistleblowers, Semafor reported.

Earlier this month, the New York Post reported that Democrat insider Alexis Podesta wore a wire and recorded conversations during the corruption probe into Dana Williamson.

The investigation is much bigger than previously reported.

According to award winning reporter Adam Housley, investigators have extensive wiretap evidence… and additional people are implicated beyond those publicly known.

Keep reading

The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required

The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed an amicus brief, alongside the national ACLU, its Maryland, North Carolina, South Carolina, and Virginia affiliates, and the National Association of Criminal Defense Lawyers (NACDL).

We argued that electronic device searches at the border should require a warrant based on probable cause, but at minimum, regardless of whether an officer searches by hand or with forensic software that plugs into a device and downloads its entire contents for search, the same Fourth Amendment standard should apply to all device searches at the border.

Unfortunately, the court rejected that argument and ruled that a lower standard applies to manual searches, allowing the government to conduct extraordinarily invasive electronic device searches without any suspicion of wrongdoing, simply because the border officer chooses to search by hand rather than with a forensic tool.

The Border Search Exception Meets Your Phone

The Fourth Amendment requires that government searches of persons or property be reasonable, which usually means obtaining a warrant based on probable cause from a judge.

But a warrantless search can still be reasonable if it falls within an exception to the warrant requirement, including the exception that allows officers to search your belongings at the border. The border search exception allows warrantless searches of persons or property crossing the U.S. border, including the functional equivalent of the border such as international airports, given the government’s interests in controlling who and what may enter the country.

Historically, courts have categorized border searches of luggage, vehicles, and personal effects as “routine” and thus reasonable even if conducted without any suspicion that the traveler has engaged in wrongdoing; courts have also held that more invasive “nonroutine” searches, such as certain body searches and searches that damage property, require reasonable suspicion.

But a person’s privacy interests in the personal data on a phone or laptop are extraordinarily different than their limited privacy interests in the contents of their suitcase.

Keep reading

‘Whoever came up with this is a massive idiot’: LG’s gaming monitors and TVs are facing a user revolt, due to seemingly installing adware on PCs — and telling you to warn guests they may be recorded by AI features, to comply with ‘wiretapping’ laws

How smart should a smart TV be? According to LG‘s latest TV terms and conditions, the answer is “not quite smart enough to comply with wiretapping laws”, because that’s now your responsibility if LG captures the voice of a guest in your house through its AI voice services. Though the situation with LG monitors appears to be even more dramatic.

As Gamers Nexus reports, some LG monitors appear to be installing adware on Windows PCs without asking for permission: in addition to the LG Monitor App Installer, they also install McAfee Scam Detector.

LG’s own app requires full access to all system resources, which potentially includes all your online activity, logins, hardware, location and more — while McAfee has a long history of being installed on devices as ‘bloatware’, and people are not reacting positively to suddenly finding it on their PC.

There may be a perfectly innocent explanation for all of this, but when big tech firms keep getting caught doing bad things because they thought they could get away with it, it’s no wonder people are assuming the worst.

The bit that’s causing consternation regarding smart TVs is part 6(d) of the new LG Electronics terms of service, headed Voice Recognition and Privacy Compliance.

As Notebookcheck‘s Hannes Brecher notes, the section states that it’s your responsibility “to obtain all necessary consents from any third parties whose voices may be captured by the Product and to notify household members and guests that their voices may be captured and processed, in compliance with applicable wiretapping, eavesdropping, and privacy laws.”

There are three ways around that. One, you can turn off all microphone-based features. Some people won’t mind that, but they can be useful — especially asking it for settings you don’t know how to find.

Keep reading

California Grocery Stores Use Facial Recognition Technology To Combat Theft

Faced with a shoplifting epidemic that has battered California retailers for years, Grocery Outlet is fighting back with technology.

Customers are not thrilled about it.

The Emeryville-based discount grocery chain has begun installing facial recognition software called SAFR at a handful of Bay Area stores, including its Pleasant Hill “Bargain Market” location, CBS News San Francisco reported.

Customers walking through the doors will find signs warning them the system is in use, a disclosure the company says is meant to keep shoppers informed.

The rollout comes as California tries to combat a shoplifting problem that has spiraled out of control.

FBI data cited by CBS shows theft in the state has jumped 50 percent since the COVID-19 pandemic, a surge that has forced retailers from big-box chains to neighborhood grocers to spend millions on security measures, or in some cases, shutter stores altogether.

For June Guerrero, who spent years managing a retail store, the new technology is a welcome and overdue response to a problem she saw firsthand.

“I worked for years as a manager of a store and the theft was just unbelievable,” Guerrero told CBS News. “I agree with it.”

Not every customer sees it that way. Barbara Jackson told the outlet she’s uneasy about having her face scanned every time she shops for groceries.

“I do understand, but invading my privacy with my picture, I don’t agree on that,” Jackson said. “You gotta find a better way.”

Shopper Steve Burdette raised a different concern: the risk of the system misidentifying innocent customers as thieves.

“It could lead to a lot of problems, I think for companies and businesses and people,” he said.

SAFR president Charisse Jacques pushed back on the notion that the technology amounts to mass surveillance. She said the company does not maintain a database of every customer who walks through the door, retains information on suspected shoplifters only for a limited window, and does not share data with outside agencies — including U.S. Immigration and Customs Enforcement, according to the New York Post.

Keep reading