Showing posts with label news. Show all posts
Showing posts with label news. Show all posts

29 October 2018

Pennsylvania child sex crimes law reform and statutes of limitations

Pennsylvania State Rep. Mark Rozzi (who graduated from Muhlenberg High School several years before I did) has spent much of his time since his election in November 2012 advocating for reform of the state's child sex crimes laws. Rozzi himself was the victim of child sexual abuse by a priest at the age of 13.

However, reform efforts have been blocked, as this article indicates, by groups representing the Catholic Church and its insurance companies. According to the article, "[v]ictims say it’s clear that money talked in the Capitol last week because Senate President Pro Tempore Joseph Scarnati’s words were too familiar to be coincidental." The article then quotes Scarnati, Matt Haverstick (a Philadelphia lawyer representing the Harrisburg diocese and Greensburg diocese), and Sam Marshall (CEO of the Insurance Federation of Pennsylvania), all who voice concerns about the constitutionality of the proposed reforms, specifically those involving retroactive changes that would re-open previously lapsed statutes of limitation for civil lawsuits and even criminal charges.

The article points to state campaign finance records and suggests that insurance industry contributions to Scarnati and Senate Majority Leader Jake Corman are part of a insurance industry effort to sway the votes of legislators. That's a fair concern.

But what is also true is that at least some of the contemplated measures in the proposed reforms of the state's child sex crimes laws are in fact likely to be unconstitutional. As this article explains:
The bill, which has moved to the state Senate for final consideration, would specifically reform the state's statute of limitations laws.

Currently, survivors of child sex crimes have until age 30 to file a civil claim and until age 50 to file criminal charges against their abusers. Legislation to reform the law, which has been pushed to the Senate for final consideration, would give victims until age 50 time to file lawsuits and eliminate the statute of limitation entirely for criminal prosecutions.

He has also included an amendment to the bill that would create a two-year "window to justice," during which those survivors for whom the civil window has already closed could file a retroactive civil claim.
Retroactive changes to statute of limitations laws should set off constitutional alarm bells. Depending upon how it is enacted, the elimination of the statute of limitations for criminal prosecutions would almost certainly run afoul of the Supreme Court's ruling in Stogner v. California, 539 U.S. 607 (2003), which held that "a law enacted after expiration of a previously applicable limitations period violates the Ex Post Facto Clause when it is applied to revive a previously time-barred prosecution."

And while the U.S. Constitution's Ex Post Facto Clause only applies to criminal laws, Pennsylvania's state constitution has a remedies clause that prevents retroactive changes to both civil and criminal statutes of limitations. Regarding this legislation, most experts agree the changes would be unconstitutional (although at least some would disagree). Some have suggested that in the face of uncertain constitutionality, the legislature should pass the law and let the courts decide:
Sen. John C. Rafferty...said it was incumbent on the committee to consider the legislation before it. He said should issues of constitutionality arise, it was best left up to "people in black robes."
But I'm not sure this is right, either. The legislature (and the governor) play important roles in determining the constitutionality of proposed legislation. Deferring constitutionally questionable legislation to the courts is an abdication of responsibility by elected officials.

Reform of the state's child sex crimes laws is an important issue. It is also a highly-charged, emotional one. Finding a solution requires compromise between those who seek justice for victims of child sexual abuse and the restrictions set forth by the U.S. Constitution and Pennsylvania state constitution.

02 September 2017

2017 Philadelphia Eagles 53-man roster (FINAL)


50/53 for the second year in a row.

QB (2): Wentz, Foles
RB (5): Sproles, Blount, Smallwood, Pumphrey, Clement
WR (6): Jeffrey, Smith, Agholor, Hollins, Johnson, Gibson
TE (3): Ertz, Celek, Burton
C (2): Kelce, Wisniewski
G (3): Seulamo, Brooks, Warmack
T (3): Peters, Johnson, Vaitai

DE (5): Graham, Curry, Barnett, Long, Means
DT (5): Cox, Jernigan, Allen, Qualls, Vaeao
LB (6): Hicks, Bradham, Kendricks, Goode, Walker, Grugier-Hill
CB (5): Darby, Mills, Douglas, McDougle, Robinson
S: (5) Jenkins, McLeod, Graham, Watkins, Maragos

P: Jones
PK: Sturgis 
LS: Lovato

01 September 2017

2017 Philadelphia Eagles projected 53-man roster (FINAL)


QB (2): Wentz, Foles
RB (4): Sproles, Blount, Smallwood, Pumphrey
WR (5): Jeffrey, Smith, Agholor, Hollins, Johnson
TE (3): Ertz, Celek, Burton
C (2): Kelce, Wisniewski
G (3): Seulamo, Brooks, Warmack
T (4): Peters, Johnson, Vaitai, Gordon

DE (5): Graham, Curry, Barnett, Long, Means
DT (6): Cox, Jernigan, Allen, Qualls, Vaeao, Hamilton
LB (6): Hicks, Bradham, Kendricks, Goode, Walker, Grugier-Hill
CB (5): Darby, Mills, Douglas, McDougle, Robinson
S: (5) Jenkins, McLeod, Graham, Watkins, Maragos

P: Jones
PK: Sturgis 
LS: Lovato

06 February 2017

Rethinking 84 Lumber's Super Bowl ad

If you've been alive over the last few days, you've undoubtedly heard about 84 Lumber's Super Bowl ad. The original ad was nixed by Fox for being too controversial. A lot of debate has surrounded around the politicization of Super Bowl ads; and this ad in particular has been discussed as anti-Trump. The conventional wisdom is that conservatives and Trump supporters would think poorly of this ad; and progressives and liberals would see the ad positively in opposition to the President's immigration policies (and specifically the wall).

 But let's dig a little deeper.

First, if you haven't seen the full ad, you owe it to yourself to watch it now:


The first part of ad, without the ending, seemed to glorify illegal immigration as a noble, if difficult journey. Absent from the ad are the reality of such journeys, including violence, drug trafficking, and human trafficking.

Yet as I watched the full ad, I have to admit: it was clever (undoubtedly, this was the ad-maker's intent in not explicitly showing what the workers were building). The workers were not building the wall, but a large door in the wall. And as 84 Lumber has said itself, the ad was about a symbolic journey. Interesting.

More (and this is where the ad really helps to come into focus): Maggie Hardy Magerko, 84 Lumber’s president and owner, voted for Trump; and the imagery of the door in the wall came explicitly from Trump himself:



In this light, it's difficult to see 84 Lumber's ad as anti-Trump. If anything, it's entirely consistent with Trump's campaign rhetoric, right down to a visual representation of the door in the wall as symbolic of legal, not illegal immigration. According to Steve Radick (a former colleague of mine at Booz Allen), vice president and director of public relations at Brunner, the agency that created the ad and provides support to 84 Lumber. “It was meant to be topical – it was not meant to take any political side.”


To be clear, what I am looking at here are the politics of the ad. Whether it is a good ad or not is an entirely different question. Sometimes ads are too clever for their own good. I think that is where this one may go.

Perhaps it's too late to prevent people from digging in to the convention wisdom about how one should see this ad. But if it's not, maybe this ad is instructive to us about meeting our rivals somewhere in the middle and having a real conversation, instead of sniping for political gain.

09 November 2016

2016 election in review

Well, perhaps I should stop making election predictions! I thought Hillary Clinton would win, but I'm not at all surprised that Donald Trump won. 

In the end, this election turned on the ability of Trump to break through Hillary's "blue wall" in Pennsylvania, Michigan, and Wisconsin. Along with Indiana and Ohio, the rust belt was the difference in this election.

It's worth taking one more look at Trump's closing ad. I think this ad will go down as the defining ad of the campaign. Take a look and see what you think.

05 November 2016

2016 election prediction

I misread the polls badly in 2012 and thought Romney would win a close election. It turned out it wasn't that close. For all of the reasons I discounted the polls in 2012, times 100, I really don't know what to think of the polls this time around. All of the convention wisdom has been busted this election cycle. Undoubtedly, the race has tightened considerably within the last two weeks. Is it enough to push Trump over the edge? Possible. Most of the prediction sites have given Trump something like a 35% chance, which is up from the teens just a few weeks ago. We're definitely in margin of error territory. A Brexit-like result is certainly not impossible here.

Still, though, despite all of the winds in Trump's favor, a few strands remain. First, Hillary Clinton has likely banked many millions of early votes. This is likely to preserve a small number of votes that might have left her within the last week. Second, the surge to Trump appears to have come not from undecided voters, but from Republican-leaning independents who are coming back to the base (from candidates like Gary Johnson). Third, the path to electoral victory is strategically easier for Hillary as compared to Trump. There are simply many more options. Trump has to basically run the table on all of the swing states.

I think Hillary Clinton will win this election. Here is my predicted electoral vote map:

The closest states on this map (in order of decreasing electoral votes) are: Florida (29), Nevada (6), New Hampshire (4). RCP's "no toss up" map has Nevada and New Hampshire currently leaning toward Trump, but I think they'll ultimately end up on the Clinton side.

Now, with that being said, here is Trump's best chance of winning. As you can see, it comes by the narrowest of margins, but isn't all that far-fetched--in fact, all I did was start with RCP's "no toss up" map on Saturday, November 5th (Clinton 297, Trump 241) and flip Florida's 29 electoral votes to Trump. Florida is so close that this single flip (which is entirely possible) would change the outcome of the election. These predictions show just how close the election might possibly be:


Again, I think Hillary Clinton is likely to win. But if Trump can pull it off, the map will likely look like this one above.

24 October 2016

A few collected thoughts on "If you see something, say something"

A few collected thoughts on "If you see something, say something."

Thesis: "If you see something, say something" leads to more interactions with law enforcement authorities than would otherwise occur; and may have the unintended consequence of increasing violent interactions with police.

Thesis: "If you see something, say something" allows authorities to plausibly investigate things that are the result of other people's prejudices (i.e., a man saying a prayer in Arabic on an airplane). Since the authorities did not initiate the investigation, but rather followed up on a tip, they're free and clear of such claims as profiling.

27 September 2016

Did Hillary Clinton win last night's debate?


If we were able to conjure up a completely objective standard by which to judge last night's debate, I don't think any reasonable person would conclude otherwise. But as I have said elsewhere, politics is about perception. Politics is not really about facts--it never really has been. The media, and the Clinton campaign, are obsessed with fact-checking. My timeline is filled with "gotcha" fact-checking of both candidates' statements.

Regardless, the obsessive fact-checking reflects a media that is (in my opinion), actually trying to be objective (even if they're failing at that, too). Nonetheless, it also shows that the media is also woefully out-of-touch with a significant portion of the electorate. The people telling you Hillary decisively won the debate are the same people who told you Trump was consistently losing the Republican debates. The people telling you Hillary decisively won the debate are the same people who told you Trump could never win the nomination. Politics is, in fact, highly subjective in a way that the media can probably never capture. What a Hillary supporter sees as her careful dismantling of Trump's previous statements comes off to a Trump supporter as a rehearsed talking point delivered with a fake, cringe-worthy smile. In some cases, what the candidates say matters less than how they say it. This is particularly true with Trump.

What this ultimately means is that the candidates have to be judged through a different lens. The standard by which each candidate needed to meet was and is different. Trump didn't need to "win" this debate. He is not a typical candidate (in this very not-typical 2016) and really, only needed to clear a series of relatively low hurdles: Don't make a major gaffe; don't say something patently offensive. No doubt, there are some among you who will argue that he couldn't even do this. Nonetheless, you're looking through the wrong glasses. If nothing Trump has done within the last year derailed his candidacy, surely nothing he did last night will do that, either. Anything he said or did last night was minor. Hillary Clinton is judged against the usual presidential debate standards, and in that regard, she too did nothing which would signal a significant change in the race. You may think that I'm setting the bar too low for Trump. I don't think I'm setting the bar at all, I'm just telling you where I think it is.

As someone who will not vote for either of these two candidates, but acknowledging that I'm not exactly unbiased (as none of us are), I thought Trump did as well as he could have expected for about the first 30 minutes. He came across as forceful and no-nonsense, and had Hillary on her heels. She was defensive, rehearsed, and wooden. During the second half, Hillary was much stronger, and Trump (quite ironically), lost his debate stamina and lost any focus he had. The blows he tried to land missed widely.

In the end, listening to the talking heads was hilarious. They've been wrong every time for the last year and they expect us to listen to their analysis now. Quite frankly, nothing last night will change the current state of the race. No amount of fact checking matters at this point. We're stuck in a very close race where Hillary likely has a small lead. To be continued...

03 September 2016

2016 Philadelphia Eagles 53-man roster (FINAL)


As compared to my final projections (as adjusted consistent with the Sam Bradford trade), I correctly predicted 50 of the 53 final roster spots (I was 49/53 the last two years).

QB (2): Wentz, Daniel
RB (4): Mathews, Sproles, Barner, Smallwood
WR (5): Matthews, Agholor, Green-Beckham, Huff, Turner
TE (3): Ertz, Celek, Burton
C (2): Kelce, Wisniewski
G (4): Barbre, Seulamo, Brooks, Andrews, Gordon
T (4): Peters, Johnson, Tobin, Vaitai

DE (6): Barwin, Curry, Graham, Smith, Means, Braman
DT (5): Cox, Logan, Allen, Hart, Vaeao
LB (4): Hicks, Kendricks, Bradham, Tulloch
CB (6): McKelvin, Brooks, Carroll, Mills, Rowe, Smith
S: (4) Jenkins, McLeod, Watkins, Maragos

P: Jones
PK: Sturgis 
LS: Dorenbos


02 September 2016

2016 Philadelphia Eagles projected 53-man roster (FINAL)


An update to my training camp versionNFL rosters have to be down to 53 by Saturday.

EDIT (9/3/2016): Sam Bradford traded to Vikings. Vaeao (DT) added to roster and Shittu (DT) moved from Longshot to Next Five.

QB (2): Bradford, Daniel, Wentz
RB (4): Mathews, Sproles, Barner, Smallwood
WR (5): Matthews, Agholor, Green-Beckham, Huff, Turner
TE (4): Ertz, Celek, Burton, Pantale
C (2): Kelce, Wisniewski
G (3): Barbre, Seulamo, Brooks
T (4): Peters, Johnson, Tobin, Vaitai

DE (6): Barwin, Curry, Graham, Smith, Means, Braman
DT (5): Cox, Logan, Allen, Hart, Vaeao
LB (5): Hicks, Kendricks, Bradham, Tulloch, Goode
CB (6): McKelvin, Brooks, Carroll, Mills, Rowe, Smith
S: (5) Jenkins, McLeod, Watkins, Maragos, Reynolds

P: Jones
PK: Sturgis 
LS: Dorenbos

Bold are last five guys.
Next Five: Greene (G), Shittu (DT), Tavarres (LB), Shepherd (CB). Countess (S)
Longshots: Gordon (G), Gause (LB)

Note: Lane Johnson (T)'s roster spot is predicated on the fact that he hasn't been suspended (yet). If and when that happens, I would assume Greene (G) or Gordon (G) might have a shot at the last roster spot.

02 August 2016

2016 Eagles projected 53-man roster (training camp version)


The last two seasons (2014, 2015), I made predictions on the projected 53-man roster for the Philadelphia Eagles. Both seasons I correctly predicted 49 of the 53 final roster spots. Now that I feel comfortable understanding Chip Kelly's selection process, we get to start over with Doug Pederson. This is Andy Reid, Part II.

As I said last year at this time, the Eagles roster will undoubtedly undergo a number of changes between now and September due to any number of factors. A half dozen or more names could change. But if the team had to pare its current roster to 53 right now, based on players that the team currently controls, what would that roster look like? Here's my look as training camp is underway. The five players in bold are my last five (bubble) players.

QB (3): Bradford, Daniel, Wentz
RB (3): Mathews, Sproles, Smallwood
WR (5): Matthews, Agholor, Randle, Givens, Huff
TE (4): Ertz, Celek, Burton, Pantale
C (2): Kelce, Wisniewski
G (4): Barbre, Gardner, Brooks, Seumalo
T (3): Peters, Johnson, Tobin

DE (5): Barwin, Curry, Graham, Smith, Braman
DT (4): Cox, Logan, Allen, Martin
LB (6): Hicks, Kendricks, Bradham, Walker, Goode,
CB (7): McKelvin, Carroll, Rowe, Brooks, Mills, Rice, Shepard
S: (4) Jenkins, McLeod, Reynolds, Maragos, Watkins

P: Jones
PK: Parkey
LS: Dorenbos

Next five: Barner (RB), Vaitai (T), Tavarres (LB), Evans (CB), Countess (S).

27 June 2016

Ten post-hoc rationalizations for holding a new EU referendum


1. Since turnout was 70%, the 52% that voted to Leave didn't actually represent a majority of voters. [This is not how this works. This is not how any of this has ever worked.]

2. 52% is in the margin of error. [Polls have margins of error. Elections and referendums count actual votes. There is no margin of error.] See also: people lied to the pollsters.

3. A woman was interviewed on TV and said she had regrets about voting to Leave! [So? Voter regret has never been a valid reason for having a new election or referendum. This is not how this works. This is not how any of this has ever worked.]

4. 106 people on Twitter said something mean or racist! They're no different than Trump voters! [So?]

5. The stock market went down! [Yes, it did. You also noticed, perhaps, that the market was steadily increasing before the vote in the expectation of a Remain win. In fact, the FTSE is 10% higher than it was in February and higher than it was when the referendum was announced.]

6. Old people voted to take away the rights of the younger generation! [Generally, votes are not weighted according to age. Did you know many of those older people were the same ones who voted in 1975 to join the EU? You probably weren't alive then, or if you were, you probably couldn't vote then. If you did, you're one of those old people. Exactly how much should your vote be worth?]

7. 2 million people signed a petition! [Yes, 2 million online people did. Most of those two million people were probably among the many millions who already voted to Remain the first time. Many more of those people weren't eligible to vote anyways, or were trolls. Even so, the petition is worthless and is now being investigated for fraud. Even if 100,000 actual voters sign it, Parliament will debate the EU relationship starting today, which should be plenty to satisfy you.]

8. But Nigel Farage promised money to the NHS! [Yes, he did make a vague promise of returning money pledged to the EU; and yes, the Leave camp took this and ran with it and plastered it on the side of a bus; and yes, Farage later said he couldn't guarantee it. For reference, Farage represents UKIP, which has exactly 1 MP. Either way, if elections and referendums could be invalidated because of broken promises by politicians...]

9. Technically, the referendum wasn't binding! [Yes, you're right. How willingly would you embrace this argument if you were on the other side? If the people had voted to Remain yet Parliament voted to Leave?]

10. The UK government should renegotiate a new deal with the EU and then put it up for another referendum! [Have you been following the news? This was the basis for the first referendum. Anyways, the EU has said it won't deal again.]

Unspoken 11th post-hoc rationalization for holding a new EU referendum: We are enlightened and know better than the (pick one or more of the following:) old/racist/uneducated/ people who voted to Leave. Therefore we will do whatever it takes to undermine the legitimacy of the vote and do whatever it takes to justify overriding the will of the people; see #'s 1 through 10.

14 June 2016

On civility in political discourse

Part of the header on my blog says "promoter of civility in political discourse." I take that seriously. It's the standard I set for myself and it's what I expect of the people I associate with. This means forgoing the friendly confines of the echo chamber and engaging with people of all political persuasions. My list of friends and followers reflects that choice. I believe respectful discussion of issues from all different sides, especially sides we don't necessarily agree with, makes us all better because it exposes us to different perspectives and allows us to hone our own arguments. Underlying this exchange, of course, is civility.

The recent tragedy in Orlando has brought this approach into sharp focus. While most have continued to be civil, others have been less so. In particular, I am disappointed with incoherent attempts at arguments based solely in emotion, ignorant of history, circular in reasoning, and accentuated by ad hominem attacks. This does nothing to advance your position; it's quite the opposite. This does nothing to promote civility; it's quite the opposite. This does nothing to promote healing. It encourages the very echo chambers we ought to be avoiding. It does nothing to bring us together; it does everything to push us apart.

I welcome well-reasoned arguments in opposition. But please do so civilly. If you can't, I have no time for you.

29 March 2016

An open letter to Hillary Clinton supporters

The Internet is filled with "advice" via open letters, like this, primarily to Trump voters, explaining why they are basically batshit crazy for supporting Trump. People love to link to these letters on Facebook and other social media, so that, instead of directly telling your friends that they're batshit crazy, you can use the advice letter as a proxy. You're sure to get lots of "likes" in your echo chamber as you pat each other on the back explaining how you "just don't understand how someone could vote for Trump."

I have similar thoughts about Hillary Clinton. In my opinion, she's a terrible candidate. She served in the Senate for eight years without as much as a single notable accomplishment. Can you name one? I can't. Her subsequent tenure as Secretary of State was marred by the Benghazi fiasco and, yes, those emails. Maybe you don't care about the emails, because "everyone did it" or some other lame excuse. The reality is that anyone who has held a security clearance and has a conscience knows what she did was wrong. They know anyone else would have, at a minimum, lost their job for what she did--and potentially much more. She has a serious problem with telling the truth and rails against hedge fund managers while accepting huge speaking fees from Goldman Sachs. I could go on, but there really is no need for overkill.

These reasons are more than enough for me to categorically state that I could not fathom a scenario in which I could ever consider voting for Hillary Clinton. It's off the table. It's a non-starter. I bet you have a similar laundry list of reasons why you won't vote for Donald Trump, or Ted Cruz, or maybe anyone with an R behind their name. I'm not particularly thrilled with Trump, and haven't committed my vote one way or another should he win the nomination.

The difference between me and many of the writers of these "advice" letters is that I don't think you're batshit crazy for voting for Hillary Clinton. I respect that you and I have differences of opinion, sometimes major differences in opinion, based on our values, circumstances, and what we consider important (or not).

This post isn't about the policy differences between Donald Trump and Hillary Clinton. It's not about 35% tariffs, or what someone did or said, or Benghazi, or those emails. It's about you and me realizing that we can have honest disagreements about the way forward for our country while maintaining civility and avoiding demonizing our opponents. It's about opening up our echo chambers and re-establishing dialogue so that we can actually accomplish something of value, no matter who wins the election. I know many of you agree with me. I know we're not all as polarizing as we sometimes come across.

If we can meet each other on an even playing field, respecting one another's views without disparaging them, maybe we can get something done. I think that's a good idea. Don't you?

19 February 2016

Choosing sides in the FBI-Apple dispute: who has the better argument?

Many people know my interests are at the intersection of the law and technology, and as a result, have asked my opinion on the merits of the FBI-Apple dispute. In large part because there was a lot of misinformation about the basic factual circumstances of the case, I wrote a short case summary here, but tried to remain neutral. Even as I wrote it, I really had no sense of which side had the better argument. I'll also add the obvious here, because sometimes it is not as obvious to others as it is to me: this is only my personal opinion and not work-related. It's worth what you've paid for it. I'll happily (ok, perhaps not happily) acknowledge I am wrong if the results come out contrary to my opinion.

On the other hand, most people in the tech and infosec communities chose sides in the FBI-Apple dispute pretty quickly. I was initially surprised that people's views were split as much as they were, even if it appeared (and still appears) that the split leans in favor of Apple (which is admittedly anecdotal evidence on my part). Upon further review, I am not surprised that views are as split as they are.

I took a lot longer to decide precisely because I am acutely aware of the nuances that often get lost in 140-character tweets or Facebook updates. In the end, from both my personal perspective and also what I think will actually happen, I think the FBI has the stronger argument. Apple is likely to draw out the process, but I think they will ultimately lose (although, speculating ahead, their best chance of winning may be at the Ninth Circuit if the case gets that far).

My decision is based upon the specific text of the Magistrate Judge's order, especially because it overcomes some of the more potent claims about what Apple is being asked to do. In an article entitled, "Why Lawyers Need to Stand By Apple" (which I cite because it was written by a lawyer addressed to other lawyers), we can see an example of what is being said about the case:
[Apple] is being ordered to create a master key to hack any iPhone on the planet.
Such an order is well beyond the scope of reason, and what the court is demanding Apple to do will ultimately undermine any hope of any of us ever having any privacy in the digital age.
This is not an exaggeration.
[Once Apple] creates the tool to break the encryption of any iPhone, that tool will be used again and again.
Emphases are mine. This is the core argument of the article. And it is disappointingly inaccurate. 

According to the court order, 
The court is requiring Apple to "provid[e] the FBI with a signed...Software Image File ("SIF") that can be loaded onto the SUBJECT DEVICE.... The SIF will be coded by Apple with a unique identifier of the phone so that the SIF would only load and execute on the SUBJECT DEVICE.
The court also gives Apple the option to do all of this at an Apple facility; meaning they could assist the FBI with this particular phone and then destroy the SIF without it ever being in the hands of the FBI or without ever leaving Apple's facility.

Could the FBI steal the SIF? Yes, but it wouldn't work on another phone without modification that it appears the FBI is not capable of doing. And if anyone ever found out that the FBI stole it, it is my belief no one would ever cooperate with the FBI again under similar circumstances, court order or not.

Neither would the SIF "break the encryption of any iPhone," or even this particular iPhone. This case doesn't really even have anything to do with encryption. The SIF would bypass or degrade software measures in place to prevent the auto-erase function from working, and from introducing delays after incorrect passcode attempts. It is true that even if and when Apple destroys the SIF, it will then still have actual knowledge of how to bypass these features--but do you really believe Apple doesn't already know? As others have pointed out, what they are being asked to do is already technically possible. They're not being asked here to do the impossible.

Using phrases like "this is not an exaggeration" does not grant your claims immunity from being exaggerated. In this case, it's worse than that: they're just not accurate. Moreover, words like "backdoor" are designed to elicit a certain response. The word has very negative connotations that , quite honestly, poisons the debate. Most infosec folks who hear the word "backdoor" will oppose it on its face.

I also recognize that this article doesn't represent everyone's views who is siding with Apple. I chose it partly because of it's outlandish claims and partly because I believe it captures a general perspective of how many people feel (even if not agreeing on the specific details).

You might also notice that I didn't discuss the Fourth Amendment in this blog post. There's a very specific reason why: the key issue in this case has nothing to do with the Fourth Amendment. The day after the shooting, the FBI sought and received a search warrant for a black Lexus. Pursuant to this search warrant, the FBI recovered an Apple iPhone 5C that was assigned to Farook but owned by his employer. The employer gave consent to the FBI to search the phone. So the FBI already has the consent of the phone's owner to search it. Likewise, Apple has no privacy interest in the phone. Anyone discussing this case as a Fourth Amendment issue should go back to law school or stop talking about it.

Let me last address the argument about "creating a dangerous precedent."  That may, or may not, be true. Generally speaking, decisions at the District Court level don't hold a lot of weight as legal precedent (and this is just a Magistrate Judge's decision--not even an Article III federal judge). Yes, if this case were to make it up to the Ninth Circuit (or even the Supreme Court), it would have precedential value. But that argument is circular. Any case that is not squarely on point with another previous case will quite possibly have some value one way or another. That may be a policy argument, but it's not a legal one.

What remains clear from a legal perspective is that Apple has complied (at least) 70 times with court orders for technical assistance (presumably under the All Writs Act, but not necessarily clear from this transcript). The red meat in this case is whether Apple's technical assistance under specific facts of this case are an unreasonable burden to Apple. In those 70 cases, Apple already had the technical ability to extract information from older iPhones even while they remained locked. In this case, the iPhone 5c has additional security measures that would prevent Apple from cooperating in the same way. In one sense, the additional hurdles to cooperation are self-generated on Apple's part (which is good for Apple's customers, of course--no one would argue otherwise). The difference between those 70 cases and this one is an existent technical capability to extract information from a locked phone (which no one has seriously argued against) versus the unrealized, but technically possible capability to reduce the security measures on this particular iPhone so that the FBI can brute force the passcode. It's clear to me that the burden on Apple is greater now than it was for any of those previous 70 cases. But is it unreasonably burdensome? I believe, given the situation I described above, that a court will find it to not be such a burden. As a result, from my personal perspective and also what I think will actually happen, I think the Government has the stronger argument. Apple will be forced to cooperate.

Whether you agree or disagree--and I know many of you will feel strongly one way or another--feel free to comment or tweet. If you have a question that you're curious about that I haven't addressed--ask it. Free and open debate in a wide-ranging marketplace of ideas makes us a better place--regardless of which side you come down on.

17 February 2016

Law in Plain English: Understanding the FBI-Apple dispute in 250 words or less

CaseIn the Matter of the Search of an Apple iPhone Seized During the Execution of a Search Warrant on a Black Lexis IS300, California License Plate 35KGD203, No. ED 15-0451M (February 16, 2016)

Summary: After Syed Farook and his wife Tashfeen Malik shot and killed 14 people in San Bernardino,California, on December 2, 2015, the FBI sought and received a search warrant for a black Lexus. Pursuant to this search warrant, the FBI recovered an Apple iPhone 5C that was assigned to Farook but owned by his employer. The employer gave consent to the FBI to search the phone, but the FBI could not affect the search because it did not know the passcode and did not want to auto-erase the phone after 10 erroneous attempts. The FBI sought a court order under the All Writs Act, a 1789 law which permits courts to issue orders compelling third parties (like Apple) to assist law enforcement in enabling a search--in this case, of the cell phone. The Magistrate Judge signed the order, which compels Apple to cooperate by providing the FBI with a signed iPhone software file that can be loaded into the phone's RAM with the ability to (1) bypass or disable the auto-erase function; (2) enable the FBI to submit passcodes to the device electronically (either through a physical device port or wireless protocol); and (3) eliminate time delays between erroneous attempts. The order gives Apple five business days to contest it if it believes it to be unreasonably burdensome. Apple's letter to its customers signified its intent to do so.

Origins of the Flint water crisis

The Wikipedia page (and similar timelines) for the Flint water crisis indicates that the problem "started in April 2014" when the city's emergency manager sought to "save about $5 million over less than two years" by "switch[ing] from purchasing treated Lake Huron water from Detroit, as it had done for 50 years, to treating water from the Flint River..." until the [under-construction]  Karegnondi system was completed in 2016.

Similarly, Professor Robert Percival explains that "[t]he Flint tragedy originated with the appointment by Michigan Governor Rick Snyder of Darnell Earley as emergency manager for Flint. To save money Earley decided in April 2014 to shift the source of the city's water supply to the polluted Flint River."

These are both true and accurate statements. But they leave the reader wondering: why did Flint (and Detroit) have an appointed emergency manager in the first place? Because those cities were run into the ground. They were essentially bankrupt. And under the provisions of Michigan law, the governor appointed emergency managers to help those cities clean up their mess. Flint continued to flounder, electing two convicted felons (including one for murder) and two others with bankruptcies to its city council in 2013.

One can argue over the scope of powers given to appointed emergency managers (and the subsequent authority stripped from those local governments in receivership), but there is not any suggestion (at least not that I am aware of) that these emergency managers did anything outside the scope of their mandate. Perhaps the Michigan law needs to be amended so that emergency managers cannot change "policy simply to save costs without considering the impact on public health." But that doesn't address the underlying issue of crime-ridden, debt-laden, corrupt cities that will give birth to more tragedies like the Flint water crisis. This New York Times article about the "anger" over appointed emergency managers likewise fails to even address why such managers were appointed in the first place.

There is plenty of blame to go around here in regards to this individual incident: the city's emergency managers, including Earley, as well as Governor Snyder and Michigan's Department of Environmental Quality (DEQ), and quite possibly the EPA. In a larger sense, the deeper blame for Flint's water crisis (and many of the ongoing problems in decaying urban cities) lies elsewhere: corrupt politicians, cronyism, disintegrating schools, and public-sector unions. The root cause for cities like Flint and Detroit is a failure of one-party government.

18 January 2016

Hacked casino sues Trustwave over security breach cleanup


A Las Vegas-based casino, Affinity Gaming, hired Chicago-based security firm Trustwave, to investigate a data breach. According to Affinity, Trustwave claimed to have identified the source of the data breach and contained it. Instead, however, further investigation by Mandiant found that Trustwave failed to contain the breach, which continued to occur even while Trustwave was investigating. According to the ZDNet article linked below, Trustwave denied the claims and plans to defend itself in court.

The complaint filed in federal court is available here.

Affinity's claims are:

1) Fraudulent Enducement
2) Fraud
3) Constructive/Equitable Fraud
4) Violations of NRS Chapter 598; Fraud Upon Purchasers; Misrepresentation
5) Gross Negligence
6) Negligent Misrepresentation
7) Breach of Contract
8) Declaratory Judgment under 28 U.S.C. §§ 2201-2202

Here are links to articles from arstechnica, ZDNet, and TheHill.

11 January 2016

RateMyProfessors.com data breach: Here's what is known so far

On Monday, the website RateMyProfessors.com sent an email notifying its registered users about a data breach. This is what we have so far:

1. A decommissioned website was still online and vulnerable to some exploit.
2. The passwords were apparently stored in the clear.
3. In addition to the notification email, the front page of the website has a tiny banner in the bottom left corner to notify its users of the breach.

Here's the text of the notification email:






Notice that the language of the notification refers to "passwords." Not encrypted passwords. Not password hashes. Just passwords. In the clear? Really? If true, this is not good for them.

Here's a screenshot of the front page of the website. This is how Rate My Professors is choosing to notify visitors about its data breach:


No red arrow, of course. Just cute cat pictures and a very small red banner notice that could very easily be overlooked.

How many affected users? No numbers yet. All registered users, potentially.