Feeds

Blanket discovery for stolen laptops

Of John Doe and IP addresses

  • alert
  • submit to reddit

SANS - Survey on application security programs

On the civil side, things are even more difficult. As a general rule, in order for you and I to compel some third party (like an ISP) to produce information, we have to also get either a subpoena or a court order. Ah, there's the rub. To get the subpoena or court order, we have to have a lawsuit pending. To have a lawsuit pending, we have to have a "case or controversy" involving some violation or law or tort, which is capable of being heard in the court in which we have filed suit, which also has jurisdiction over the matter and the people involved. OK. End of law school class.

The legal discovery process, particularly for civil discovery, is slow, unwieldy and ungainly. Imagine having to file separate individual lawsuits for each piece of SPAM you receive, each Phishing attempt, each domain name hijacking, each pump-and-dump stock scam, each defamatory blog posting, each - well, you get the idea. What is worse is that you don't even know who you are suing. Just some "John Doe" who did the bad act. How do you show jurisdiction of John Doe? How do you get service of process to John Doe? Other than what is called "pre-filing discovery," the lawsuit has to be "pending" before you can get discovery. The lawsuit isn't "pending" until you have served the person you are suing - John Doe. I mean, it isn't fair to sue somebody without telling them they are being sued. Laws written in the 18th century allow you to give notice by publication, the printing in the newspapers for three consecutive weeks. Hardly a model for Internet discovery.

Discovery and blanket orders in other situations

Where else have we heard about the problem of quickly obtaining relevant information using antiquated tools and techniques? Oh yeah - getting wiretap or other orders for discovery related to national security, foreign intelligence and foreign terrorism under the Foreign Intelligence Surveillance Act (FISA.) The Bush administration has long argued that they were lawfully entitled to bypass the super-secret court set up under this law and demand records under what they later dubbed the "Terrorist Surveillance Network" because the FISA law was slow and cumbersome.

You see, FISA, like the pesky Constitution of the United States, requires that you get a court order based on "probable cause," specifying the place to be searched and the thing to be seized - or in the case of a wiretapped conversation, who you are tapping and what conversations you are looking for. We have always read this to mean that you need a separate warrant for each search, although you could theoretically apply for a single warrant for, for example, a series of telephone numbers used by a particular person, or to search a number of apartments for particular things.

On the eve of hearings about the Terrorist Surveillance Network to be held by the new Democratic majority in the U.S. Senate, the administration after arguing that there was no alternative to bypassing the FISA Court, suddenly found religion and in a letter from the Attorney General notified the Senators that "a [single] Judge of the Foreign Intelligence Surveillance Court issued orders authorizing the government to target for collection international communications into or out of the United States where there is probable cause to believe that one of the communicants is a member of al Qaeda or an associated terrorist organization." That's all we know, and we don't know any more, as the Attorney General was mum about any further details.

What it looks like is a blanket order. The Court (well, the judge) may have said, "Look, if you can meet certain thresholds of showing membership in some associated terrorist organizations, here's a general order mandating people to provide you the information you want." Perhaps the order requires the government to report back to the FISA court, perhaps not.

Now I am not going into a discussion of whether this constitutes an improper delegation of judicial power to the executive branch (well, yeah) or violates the particularity requirements of the Fourth Amendment (that too). However, this may provide a model for civil discovery.

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.