back to article Child porn suspect ordered to decrypt own hard drive

In a move sure to stoke debates over constitutional protections against self-incrimination in the digital age, a federal judge has ordered a child porn suspect to decrypt his hard drive so prosecutors can inspect its contents. In a ruling issued last month, US District Judge William Sessions in Vermont ruled criminal defendant …


This topic is closed for new posts.
  1. Anonymous Coward
    Anonymous Coward

    This shouldn't be a surprise..

    It's the "computers don't count" argument.

    They don't count as telephones, therefore spying on your email, chat and browsing history doesn't require a warrant.

    They don't count as private property (cars, houses, letters) therefore a warrant is not required.

    They are a world unto themselves and because they're new things, annoyances like The Constitution or indeed the law itself doesn't count.

    The reason none of this should be a surprise is this is the same tactic prosecutors use every time a new technology becomes mainstream.

    When telephones became mainstream, the government said they could listen in because the Constitution only protected people from being searched, not things.

    It took a Supreme Court decision to change this. The same ruling could in theory be applied to computers, computer data and computer communications, but the government will say it doesn't count because computers weren't around when that ruling was passed, and deliberately ignore the intent.

    The fact is The Constitution and its protections were supposed to be updated to stay relevant. A system called "Amendments to the Constitution" was invented for this very purpose. That's because the people that devised these laws had the foresight to understand that things change, new things are invented, new circumstances occur and new beliefs as to what is acceptable become mainstream. It's quite progressive thinking really for a bunch of people who've been dead for centuries.

    Therefore regardless of whether we would like to see pedophiles self-incriminated to make our lives easier, the fact remains other laws state he is innocent until PROVEN guilty. The media doesn't count, neither does the government's promise that 'he is guilty, honest'. Whether showing the cops something is self-incrimination or not apparently requires a new Supreme Court ruling, preferably one that includes computers in general and whether conversations via modern communications that people want to be private, count as private.

    I wonder what corporations will think of that when people start taking copies of data stored on networks home with them, including things that used to be intellectual or private property.

  2. Animal

    Umm, shutdown not suspend?

    Would I be correct in assuming the laptop was suspended, the accused "resumed" it, the border control guys saw something they didn't like, they shut it down and then - when they re-booted it - they found they needed to re-enter a pass-phrase?

    Surely some amazing incompetence here?

  3. Anonymous Coward
    Anonymous Coward


    Do border agents have you turn on your laptop, log in and show them your porn when you enter the country now? I'm a little confused as to how this all went down. If not, then did they boot the laptop..... and it didn't have PGP or a password on it at that time? Then how did PGP get on there, don't tell me they gave it back to him and then took it again 9 days later. Maybe he was walking around the terminal showing people his porn? Then admitted it, but didn't care because he knew he had PGP on it? Tis wierd.

  4. Anonymous Coward
    Anonymous Coward


    "Sessions reached his decision after concluding the act of producing an unencrypted version of the hard drive wasn't necessary to authenticate its contents, presumably based on Boucher's statements to border agents."

    If it's not necessary to authenticate it's contents then why the fuck does he need to do it? Twat.

  5. Anonymous Coward
    Anonymous Coward

    I'm not surprised

    As much as I would like to think the privacy of that little box on my desk is inviolate just because I encrypt the drive, I find it hard to believe the government will allow that situation to stand.

    As long as information crimes exist, this situation will become increasingly grating on government officials who are used to getting their way, as more and more people use encryption.

    Whether the 5th amendment applies is debatable, it just depends on how broadly or narrowly you read it. That doesn't mean I agree with this ruling though. In my opinion it infringes on an even more fundamental right: the right to private thoughts. Unfortunately that one was never specifically mentioned in our constitution and nobody pays much attention to the 9th and 10th amendments.

  6. ZM

    Well, it stands to reason...

    If you have to surrender your keys, but not a safe combination, then if the password is in his memory, he shouldn't have to surrender it. If it's a physical object, then sure, surrender it. How hard is that?

  7. raving angry loony
    Thumb Down

    Archaeology of Law

    Be nice when the Supremes in the US get someone who actually understands computers. Last I checked, they were mostly still at the quill-and-ink stage of life, having just graduated from stone tablets. From software patents to this crap, it's obvious the US legal system just hasn't caught up.

  8. Anonymous Coward
    Thumb Down

    Simple password...

    The decryption key is "eff" "oh" "are" "emm" aye" "tee" "space" "sea" "colon". It'll give a bogus message about the hard drive, just hit "wye" and enter.

    Computers _are_ property, and therefore covered by the Fourth Amendment, no matter how bad the socialists hiding behind badges want otherwise.


  9. Neoc


    "innocent until PROVEN guilty"?

    Surely that should be "innocent *unless* PROVEN guilty".

    Your original statement assumes everyone is guilty, it's just a matter of time until they prove it.

  10. Chris C

    Stupid question time

    "Sessions reached his decision after concluding the act of producing an unencrypted version of the hard drive wasn't necessary to authenticate its contents, presumably based on Boucher's statements to border agents."

    So my stupid question would be -- if the act of producing an unencrypted version of the hard drive isn't necessary to authenticate its contents, then why is he being forced to produce an unencrypted version of the hard drive? Either it is necessary or it isn't. You can't have it both ways. You can't say that it IS necessary for the Grand Jury, but is NOT necessary for the Trial Jury.

    From the Fifth Amendment: "No person.. shall be compelled in any criminal case to be a witness against himself..." Seems pretty clear to me. By giving a passphrase, you are effectively a witness against yourself. Yes, it's ALSO an obstacle to the authorities, but that shouldn't come into play at all. Forcing a suspect to give the passphrase which will be used to decrypt his hard drive is analogous to forcing a suspect to say where he was at a specific time (because you think he committed a crime, and you need him to admit to it since you have no other evidence). Or, to offer another analogy, it would be the same as forcing a suspect to provide a list of every name (alias) he has ever used (in the hope that it will lead to evidence which will lead to a conviction). Yes, it will make it easier for the authorities to do their job. However, it also violates the Fifth Amendment and eliminates the presumption of innocence. Instead of the authorities proving a person guilty, it reverses the situation and makes it so that the person must prove themselves innocent.

    But hey, when we live in a world which has done away with the presumption of innocence (and where even well-meaning people now use the phrase "innocent UNTIL proven guilty" instead of "innocent UNLESS proven guilty"), should such behavior really come as a surprise? This is just another example of the US being jealous of the UK's Big Brother style laws and wanting to enact similar laws without having to go through that pesky legislative process. Why bother with the trouble of crafting a bill, bickering about it, and hoping it's voted into law, when you can have a judge make a precedent which will then (in all likelihood) be used by other judges to create a de factor / common law? It's so much easier without the "checks and balances".

  11. Herby

    What about Miranda rights don't they understand?

    Look, if you watch any crime TV show here in the USA, you surely must know the standard Miranda warning "...anything you DO or SAY can be used against you in a court of law...". Well, to me "entering a password" is something you DO, so you don't get me to do it.

    Of course, if you offer me immunity for all prosecutions related to my actions (like the stuff on my hard disk!) I might give it up. Until then, don't talk to me.

  12. Anonymous Coward
    Black Helicopters


    no one is innocent

  13. Jason Togneri


    I wonder what we are all going to do in countries without these blessed 'Amendments' and without, for that matter, a written constitution?

  14. al
    Paris Hilton

    So guys...

    If someone presumably hides a murder weapon in a safe; the court can't order that person to open the lock of the safe?

    [let's say it's it an unbreakable safe or think of any creative reason why breaking the safe it a worse idea than the person opening it itself].

    I believe it's analogous - and other lame-ass examples given here - I don't think so.

    Paris, coz she can decrypt any HARD drive.

  15. Anonymous Coward

    RE: Misconception

    - "innocent until PROVEN guilty"?

    - Surely that should be "innocent *unless* PROVEN guilty".

    - Your original statement assumes everyone is guilty, it's just a matter of time until they prove it. "

    Ah he was obviously referring to the UK - we are guilty here - just need a few more databases and ID cards to prove it.

  16. Ash


    Clearly, you are not a lawyer! That's not an insult.

    Unless the words are there, in black letter, it doesn't count. Conjecture doesn't get you very far in Law. You can argue that because safe combinations are in memory, and passwords are only in memory, that passwords are covered, but it's not clear cut.

  17. Steven Jones


    All this means is that people with serious stuff to hide will use Truecrypt. It uses a dual encryption technique with the ability to have hidden volumes which nobody can prove exist. You can have "legitimate" files in the main encrypted part should you be forced to reveal it. I haven't tried it myself, but you can guarantee that it's going to be headache for the authorities.

  18. Jimmy Floyd

    @Jason Togneri

    Beats me. Perhaps quaint little laws based on timeless principles rather than temporary strict dictum are actually the best option? Fancy that...

    Still, it wouldn't be the first time that I've considered the idea of a written constitution was just a fad and should now be considered out-of-date.

  19. Man Outraged

    Such a shame...

    Such a shame that such an important discussion about civil rights is marred by the fact that no-one, self included, wants to stand up for the rights of people who face allegations of child abuse (or terrorism, in other UK cases). But the fact remains that the legal framework must protect human rights even at the expense of a few cases slipping through the net, because the alternative - a police state where the population lives in fear - is worse.

    Strangely calm today

  20. dreadful scathe


    Surely that should be "innocent *unless* PROVEN guilty".

    No. You are innocent until proven otherwise, there is no implication that that has to happen. It is a general term, not specific to something you are accused of.

  21. Arclight

    Keys or password

    I fail to see the difference between handing over a password, and handing over the keys to a house/briefcase. The password itself is not incriminating, its the items its hiding that are.

    Working on this basis, if the police suspected someone of killing a dozen people, and hiding the bodies in a cellar, they wouldn't be able to touch him if he had a voice activated lock rather than a standard key lock. All the criminal fraternity need to do to protect themselves from prosecution is fit voice activated or combination locks on everything.

  22. John Smith Gold badge

    I'm confused

    He does have to de-crypt but the judge accepts the border agents statement that he "thought" he had kiddie p0rn on it?

    So in essence its what they he said that makes him guilty?

    This was a taped interview? If not we have a version of what used to be known in Britain as "Verbaling the suspect," where in during the ride into the police station suspect gets into casual conversion and "inadvertently" confesses.

    I gather this is less common than it used to be. The rules of evidence became more akward . And for some reasons juries don't trust the police as much as they used to.

    The fact the case is being fought suggests one of the 2 parties here disagrees with what is claimed to have happened. And IIRC US law officers are allowed to lie to suspects to get a confession. Witnesses who don't exist, magic forensics, co-defendants who have confessed already are all allowed.

    It would seem the quicker the question of what rights a defendant has regarding a computer in their possesion is sorted out the better. Of course this only applies to US citizens. Everyone else entering the land of the free can expect any hardware to be switched on and copied at will as part of the War on Tourism.

    Yes paedophillia is a nasty busienss which directly affects a very small percentage of the population. Living in a police state affects 100% of people living there.

  23. Danny


    If he was to forget his password due to all the stress then what could they throw at him?

  24. Rob Crawford

    I find it a bit rich

    hearing all this talk about how you are protected against self incrimination in the US when innocent people are forced to plead guilty to lesser charges.

    Wether it be due to over stretched public defenders telling innocents

    1: To take the deal cos they dont have the resources to mount a proper defence

    2: Stating you may be innocent but you will be found guilty and they will go harder on you becasue you fought the charges.

    This seems to apply to UK residents, if you fight extridition you will be found guilty (see the Nat West 3 or that prat Gary McKinnon)

    Seems the roghts only really apply if you are white and have money

  25. MarkP


    Surely the solution to all this is to place the passphrase on a disk inside a safe. You can't be forced to give up the combination to the safe under the 5th and you can't be expected to know a long pass phrase....


  26. Anonymous Coward
    Paris Hilton


    who cares about this Bill of rights rubbish - its happening in America, therefore who cares

    Paris, cos she is American, and seems to be about an average citizen

  27. Brian

    @Stupid question time

    "Forcing a suspect to give the passphrase which will be used to decrypt his hard drive is analogous to forcing a suspect to say where he was at a specific time"


    ", it would be the same as forcing a suspect to provide a list of every name (alias) he has ever used (in the hope that it will lead to evidence which will lead to a conviction)"...

    Those are a totally overblown, knee-jerk examples.

    It is analogous to forcing a self-confessed paedophile to provide a key to gain entry to their house because the battering rams are not working.

    The man has already admitted he had downloaded child porn. The judge has decreed that the statement he made at the border is enough to secure a conviction without the evidence encrypted on his hard disk. He has already implicated himself, the issue now is whether he should be forced to "open his house" so the investigation can check his basement.

    I totally agree with this ruling. The evidence locked in his computer may even lead to further convictions and save a few children.

  28. Trotsky

    Forgot password

    What happens when the accused forgets his password?

    Also, does anyone have an estimation of how long it will take for law enforcement to be able to crack PGP? Surely the authorities can use this as part of a plea bargain to release the password now; tell us the password and get 50% off your sentence, or else wait a few years until we can figure it out ourselves and we give you the full punishment?

  29. Neil

    I'm sorry

    I've completely forgotten my password! How silly of me!

  30. Anonymous Coward
    Anonymous Coward

    Three Strikes

    Not sure about PGP, but there is encryption sowtware out there which will wipe the data after an incorrect passphrase is entered a certain number of times. That would be kind of neat wouldn't it?

    "Now lets see, I think this is the passphrase. Oh, Maybe it's this this one. No? Well I'm sure it's this one. Ooops! What does it mean when it says formatting drive?"

  31. Anonymous Coward
    Thumb Up

    Show me

    Show me your Cabinet Minutes on Iraq so I can send you to the International Court.

  32. Anonymous Coward
    Anonymous Coward

    @What, @Stupid question Time

    You've misunderstood the meaning of "authenticate" in this piece, perhaps partly due to Dan snipping the quote from Sessions. The full quote is:

    "Sessions wrote: "Boucher's act of producing an unencrypted version of the Z drive likewise is not necessary to authenticate it. He has already admitted to possession of the computer, and provided the government with access to the Z drive. The government has submitted that it can link Boucher with the files on his computer without making use of his production of an unencrypted version of the Z drive, and that it will not use his act of production as evidence of authentication."

    So "authenticate" here does not have anything to do with the encryption process, rather to do with authenticating in a legal way that the laptop, and contents, belong to Boucher

  33. Eddie Edwards

    @ Neoc

    No, it's "innocent until proven guilty" and no assumption is inherent in this until hell freezes over.

  34. Matt Bryant Silver badge

    Building a stronger case.

    Remember, this is the good ol' US of A, and it all comes down to the picture the prosecutor can paint for the jury, whom are usually not computer or legal experts.

    Case before - "We think the accused has downloaded porn on this laptop."

    At this point the jury just think he's an unsavoury geek, but he has rights. After all, he could just have accidentally downloaded it or looked once out of stupid curiosity.

    Case after first statement admitting downloading - "The accused has admitted to federal agents that he downloaded porn and viewed it on this laptop."

    The jury probably think he still has rights, why decrypt the laptop?

    Case now that he has refused to decrypt the drive - "The accused has admitted to federal agents that he downloaded porn and viewed it on this laptop. He obviously intended to view this material repeatedly as he saved the material, and obviously knew what he was doing was illegal and immoral as he has encrypted the drive to stop further evidence of his wrongdoing being presented in court. Without unencrypting the drive it is hard to judge the scale of the accused's crime and just how many children have been the victims of the accused's unsavoury and illegal sexual tastes. It could be that the accused has encrypted the drive to hide evidence of his having taken part in sexual acts with underage children, probably against their will. Unfortunately, the accused is more concerned with protecting his liberty than helping federal agents with tracking down the people that abuse these children for profit."

    Now the jury think the accused is a monster that is just itching to kidnap, abuse and do God knows what to their own children, and he's using the Constitution to hide behind and protect his nasty, deviant buddies. At this point they're just about ready to lynch him.

    After all, the reason they probably nabbed him was due to peeking at his ISP records, they can probably already see exactly which sites and even which pics he downloaded, whom he paid for his kiddie porn, and whom he messaged about it. What they're after now is the longest conviction they can get out of it, so the creep is probably making things worse for himself by NOT decrypting the drive.

  35. Rick
    Black Helicopters

    what happens

    If he happen to have forgotten the password? Just to play devil's advocate what if I use a key/password generator and failed to write down what I set as the key/password then what?

    /that ruling is full of a whole lot of fail!!

  36. Anonymous Coward


    With the kind of laws being passed currently it's "until" - everyone WILL have broken a law at some point in the last 5 minutes, no matter how saintly they try to behave. Kinda like Stalin used to work, really...

  37. Anonymous Coward
    Paris Hilton

    RE: Simple Password

    AC wrote: "Computers _are_ property, and therefore covered by the Fourth Amendment, no matter how bad the socialists hiding behind badges want otherwise."

    Or indeed, the fascists hiding behind the badges. Even the left-most of US politics is far-right to the rest of the world!

    On a more serious note, why doesn't he just claim that the stress has made him forget the password. They can't prove that he *hasn't* forgotten it now, can they?

    Paris because those of more limited intelligence would forget the password without being told to...

  38. MGJ

    Written Constitution

    And there was me thinking a bill of rights and a written constitution as proposed by Liberty et al solved everything. The problem being that either they are written in stone, so can't take into account change (ie the right to belong to a militia and hence have arms) or they are so easy to change there is no point to them, since they remain the tyranny of the majority, or at least of the political class.

  39. David

    Possible next step

    "I'm sorry, I've forgotten my password"

    "Oh no you haven't"

    "Oh yes I have"


  40. Anonymous Coward

    Don't get me wrong....

    ....I'd like to fry all the kiddie fiddlers in 'olde sparky' the electric chair.

    But if the guy has encrypted his computer, good luck to him.

  41. Anonymous Coward
    Thumb Down

    Isn't the correct response... just give the court any bogus number or password you like? You can then claim as far as you recall this IS the correct password. You've fulfilled your obligation to provide some information and if forensics can't get your password to work that's no longer your problem. How are they going to prove to anyone that your password is bogus..?

  42. ShaggyDoggy


    ok whip him and his lappie off to morocco then stick a board in his gob and pour some wate......... oops sorry you can't do that

    wait ....

  43. Peter Kay

    Easy solution

    State password can't be remembered, but is on a piece of paper, inside a safe with a combination lock...

  44. Dan

    You want the passphrase?

    Was it?....Or maybe?....I forgot it...sorry.

    I'll be going home with my laptop now.


  45. Pete Silver badge

    proof of encryption?

    So, for the sake of argument, say someone found a 500MB block of random data on my hard drive. They then claim that this hides some encrypted data that I'm not supposed to have and they therefore demand that I decrypt it (as they can't). In response I say that it's not an encrypted file, it's just some random data and I don't know how it got there - or that it's a set of random numbers I use for some other purpose.

    How can some legal person/entity demand that one decrypt some arbitrary data, without first demonstrating that it does, in fact, contain decryptable data?

    Any encryption scheme worth a dam' would not have headers saying "this is an encrypted file, use the XXX algorithm to decode" It would merely sit there and at best say "maybe I am, maybe I'm not, you can't prove anything" when subjected to any sort of detection for encrypted data. Leading to the conclusion that the only way to demonstrate a block of numbers is encrypted is to actually decrypt it in the first place.

    If something like that ever made it to court, that would be a trial I'd follow closely!

  46. DPWDC

    @ac re:"huh"?

    No, you just have to turn it boot it up to show its an actual laptop and not a bomb disguised as a laptop.

    On the other hand, you could still have a bomb in there and a Fit-PC hidden in there too these days, so a bit of a waste of time.

  47. Ole Juul

    How to prove someone remembers

    I've got a computer beside me here which is bricked because I can't remember the password that I used some months back. I'll just reinstall, but surely this happens to others as well.

    It seems to me that you can't prove that someone can remember something. How do they prove that he can remember the password? I know I often forget passwords and no amount of pressure is going to bring them back - quite the opposite, in fact. Sometimes I remember something for a while and then, as time goes by, I forget. Perhaps I'm unusual in that respect.

    If this judge really does know if someone remembers something or not then I think he is a mind reader and should just inform the court what the password is without asking the accused.

  48. Anonymous Coward
    Anonymous Coward


    I forget my passwords when I am on holiday. This guy last used the laptop in 2006. What happens when he is told to enter it and he can't remember what it was?

    Does he get locked up for contempt just for forgetting something? How is it proven that he hasn't forgotten it?

    Anyway, stick the border guards in front of a jury and have them say they saw child porn. Have him in front of the jury saying he's taking the fifth and watch which way the Jury goes. I'll put real money on this guy going to pokey.

  49. Cameron Colley

    @Jason Togneri

    I don't know about other places, but in the UK he would probably be classed as a terrorist for using encryption, and would have to decrypt the drive or be imprisoned without appeal.

    Modern governments, it seems, own us.

  50. Frederick Karno

    Bit embarrassing

    well personally i dont believe anyone should have to give up passwords but there is something strange here.

    Because i dont believe that a hard disk only encrypted with pgp couldnt be broken and read i'm not saying it will be easy and i'm not saying it wont take time but i'm virtually sure they can break and read most hard disks but perhaps they just dont want to show they can.

  51. Anonymous Coward
    Anonymous Coward

    Why hasn't he wiped the drive?

    He had nine days from the first event. Anyone with any sense would have copied off anything important and then wiped the drive before re-installing the OS. He justification for doing this would be that his machine was infected with some virus or trojan (probably from downloading porn from dodgy sites).

    On the other hand, if he was downloading kiddie porn , maybe he hasn't got much common sense in the first place.

  52. Phil Koenig

    Miranda rights

    I was under the impression that there had been a number of judicial setbacks to Miranda rights in recent years, although the SCOTUS did reaffirm Miranda in the Dickerson decision back in 2000.

  53. George Speller

    What do we do in countries without a constitution?

    . . . what we're told.

    (ID card and self surveilance camera/tracking device in coat pocket)

  54. Anonymous Coward
    Anonymous Coward

    oh hum

    This is obviously missing the point but if he's innocent then why not just give 'them' access to the contents? However his behavior seems to indicate that he isn't, so how many parents want extra potential pedophiles in their street/district/town/country/universe? Just a thought....

  55. Apocalypse Later

    In the UK

    In Britain (and maybe Europe generally), you can be imprisoned for refusing to reveal your encryption keys. It is a separate charge, with a separate penalty, unrelated to whatever contraband data you are suspected of concealing. This is of course meant to be an anti-terrorist measure so will only be applied to the normal citizen whenever they feel like it.

    The British constitution is "unwritten", but we had a written bill of rights, perhaps the very first, called the Magna Carta. This is now completely ignored.

  56. Mike Kamermans

    The case is believed to be one of the first times?

    What the heck does that mean? Is it the first time, or is it going to reinforce or void a previous ruling in a similar case?

    I ask, because first times are kind of final - the first one's the first time, everything after that is not... and because belief doesn't factor into this at all. Either it is, and the records show this, or it's not, and then the records also show this...

    Where the "English?" icon when you need it.

  57. Mark McC
    Black Helicopters

    He didn't plan ahead

    He should have created an unreasonably long passphrase constructed from random characters and symbols that couldn't possibly be memorized, written it down on a piece of paper and locked it in a safe.

  58. Pete Silver badge

    UK law has never had a blanket presumption of innocence

    @Anonymous Coward post#1, @Neoc, @Chris C

    IANAL, but tn the UK there are long-standing laws where it is up to the accused to prove innocence. The example I was given (when I squawked up about innocent unless proven guilty) is the law regarding living off immoral earnings i.e. being a pimp. In this case, the onus of proof has always been on the accused to demonstrate that their earnings came from "moral" sources.

    So there is a precedent in UK law to assume an accused person is guilty, I guess this case of passwords and encryption is just one more in the long, creeping, erosion of what we thought were our freedoms.

  59. Matt Bryant Silver badge

    RE: In the UK

    "...The British constitution is "unwritten", but we had a written bill of rights, perhaps the very first, called the Magna Carta. This is now completely ignored." Apocalypse Later has repeated a myth. The Magna Carta has repeatedly been dressed up as some bill of rights for commoners, but it really was a tool for the fuedal lords to impose their will on the then King of England, King John, to little benefit for the common peasant. Whilst a lot of English law has come out of it, it was never intended to give rights to the peasants as the lords were dependant on keeping the peasants as poor farmers on the lords' rented land.

  60. Jimbo
    Black Helicopters

    @ Man Outraged (08:40)

    "Such a shame that such an important discussion about civil rights is marred by the fact that no-one, self included, wants to stand up for the rights of people who face allegations of child abuse"

    This is probably why the US law enforcement are using this as a test case - there's no sympathy for him. If they did the same against (for example) some anti-capitalism protesters they know the judge/jury would most likely give the defence the benefit of the doubt, and they wouldn't be able to get the thin end of this particular wedge into a very convenient hole.

    Paris because... oh no, got carried away there.

  61. Anonymous Coward
    Anonymous Coward


    My understanding is that PGP currently *can't* be broken - you could only brute-force it, by trying password after password which would probably take until the sun goes cold. Current encryption methods available to everyone are scarily secure - there are no skeleton keys to most of this stuff...

  62. Anonymous Coward

    Where did he perform the downloading?

    If he was arrested at the border, He hadn't officially entered into the US of States so do they actually have jurisdiction?

    I think not. So how can he be tried in the US for an offence allegedly committed outside the Holy Land? Like Gitmo and MacKinnon, the USians want to be the World Police.. Fuck Yeah!!

    US Constitution, rule of law and human rights is about as much use as a pork chop in a synagogue when they want to get you.

  63. Paul


    I alway thought, and it drives me mad every time I hear otherwise, that is was the missed word "presumed" which was important here.

    I believe that everyone is guilty of a crime the moment they commit it, but in a court of law they work on the principle that the defendent is "presumed innocent until proven guilty".

  64. Anonymous Coward
    Jobs Horns


    Remind me next time I go to USA. To pack 500GB of hardcore pr0ns on there for the border controls to watch as I pass through.

    Then give them some encrypted files to play with

  65. Anonymous Coward
    Thumb Down

    Yet again

    The need for EVERYONE to use truecrypt to secure their data is shown.

    If you get V& and they demand you decrypt the data, you decrypt the outer volume and show them that, they can't prove there is an inner volume unless they know the key.

    If it is for CP now, in a few years it will be for mp3s, then for opposing the 'government' dictatorship, then for thought crimes.

  66. Steve Brooks

    passwords? Who needs em!

    "If you have to surrender your keys, but not a safe combination, then if the password is in his memory, he shouldn't have to surrender it"

    The best option is to NOT have the password in your mind, then you can't be compelled to surrender it. For instance, I can't imagine it would take much effort to create an encryption system that encrypted the data using a completely random password if the computer wasn't shut down properly (ie: using the original password). So border guard spies some, erm, interesting stuff, immediately confiscates laptop and hard powers down, next time it starts up it randomly generates a password and encryptes the file system, and you can argue its just a standard security feature to prevent IP theft etc in case someone steals the laptop.

  67. ElFatbob

    @Jason Togneri

    Well, in the UK they enacted a part of RIPA (i think), that forces you to hand over the password or be charged under RIPA.

  68. Remy Redert


    I'd like to see the plod that can prove this machine has encrypted data, as opposed to blank space, in the first place.

    It's an NTFS file system, so any random data is obviously just left overs from when it 'deleted' things that I no longer needed.

  69. Edward Miles

    I wonder...

    How far does this order stretch? For example, if the accused ran several pieces of data together and hashed them, and used that hash for the password, would he be compelled to give up the pieces of data and the hashing algorithm? Otherwise he can quite legitimately claim he does not know the password!

  70. Anonymous Coward
    Anonymous Coward

    AC 9:49 that bit of information is about 1000% more useful than the quote in the article.

    The job theReg did leaves many questions. Read the above before you go any further, it helps clear up a bunch of stuff.

  71. Vendicar Decarian

    Torture the Bastard

    The standard operating procedure in America for getting information that the State Police want is to ship you off to Guantanimo, and beat and torture you.

    What's the problem?

    As long as they don't bursta ny of your organs it's all fair.. Right?

  72. cybersaur

    There is no crime here

    From the CNet article:

    "An officer opened the laptop, accessed the files without a password or passphrase, and allegedly discovered "thousands of images of adult pornography and >>>animation<<< depicting adult and child pornography." Boucher was read his Miranda rights, waived them, and allegedly told the customs agents that he >>>may have<<< downloaded child pornography."

    (emphasis mine)

    Based on the ICE officer's statement, he didn't even actually observe any *real* child pr0n.

    Boucher's "self incriminating" statement is vague enough that it hardly constitutes a confession.

    Here's what it boils down to as far as I'm concerned- under no circumstances should he give up that password. He must maintain his 5th amendment Constitutional rights. Since the incident took place in 2006 he can plausibly deny remembering the password. The laws against child pr0n are so draconian that he'd be better off ignoring the judge's ruling and continuing to fight. Once the case goes to trial the prosecutors have zero evidence to secure a conviction.

    Stop icon for the erosion of our rights.

  73. Chris
    Thumb Down

    RE: passwords, who needs em

    "create an encryption system that encrypted the data using a completely random password if the computer wasn't shut down properly"

    Oh, what a brilliant idea that is! Your battery runs down, so you plug it in, and then trip over the power cord, pulling out of the socket. Oopsy! there goes all your data into an encrypted file that you can't access.

  74. Anonymous Coward

    But there is no child porn there!

    Technically, he isn't even in possession of any illegal files. He is only in possession of one large file of random data. It is only if it is unscrambled back into the original files that anything would be illegal.

    If an encryption passphrase is supplied, then the person entering it would be technically manufacturing files containing child pornography. It is only at that point that the files would be created. Until that point they do not exist.

    Why doesn't anyone go after that argument?

  75. kain preacher


    I think not. So how can he be tried in the US for an offence allegedly committed outside the Holy Land? Like Gitmo and MacKinnon, the USians want to be the World Police.. Fuck Yeah!!

    Um Did you know Austrian citizen can be tried in their home country for crimes committed out side of Austria But hey don't let that stop a good rant .

  76. Steven Jones

    @Remy Redert

    In fact it is very easy to show to a very high degree of certainty that there is an encrypted file or device. They pretty well all leave a fingerprint of some sort, and it's easy to eliminated false positives. Even with TruCrypt, it's very easy to detect it - there is a program call TCHunt that is very effective at finding encrypted volumes and the few false positives it picks up are easily eliminated. Some changes TrueCrypt might make the approach taken less effective, but it's very unlikely that detection could be eliminated.

    However, what can't be done, is to prove the existence of a second, hidden volume within the TrueCrypt encrypted volume without knowing the second password. Decrypting the outer layer will not, in itself, reveal it. There might be suspicions - such a decrypted file system will have lots of unused space if there is a large hidden volume, but that's not proof.

    Probably of more concern is that accessing the hidden files using real-world programs could easily lead to detection by the leaving of "fingerprints" elsewhere in the system. Thumbnails, temporary files, paging space. Only programs that are resident only in physical memory and which do not commit data to disk offer a reasonable degree of protection, and for machines with persistent physical memory (such as some NetBooks and people putting machines into standby modes) then there could, theroretically at least, be evidence in the machine's memory.

  77. Steven Jones


    "If an encryption passphrase is supplied, then the person entering it would be technically manufacturing files containing child pornography"

    Good god - what nonsense. On the same basic argument a JPEG isn't an image until it is rendered on screen. This forum does have it's share of people incapable of applying common sense.

  78. Anonymous Coward
    Thumb Down

    he's screwed if he ever gives up the password

    Hopefully the supremes will drop this "unlock the door" business. if the government can't break in (and i'm sure they have already had the FBI and NSA all over this "just for fun" with each having their own copy of the harddrive)....he will never see the pc again...much less the original harddrive. The border agent testimony is at this point just hearsay with no evidence to back it up. The alleged pr0n owner is (more or less) innocent until proven guilty, but the climate of lunacy over kiddie pronz

    he will be readily convicted with "circumstantial" evidence. Unless his statements are recorded on tape and/or video (and even then), may be easily contested. he said...they said kind of thing.

    unless they get that drive unencrypted they will really have no real evidence against him and won't be able to use his failure to testify against himself to convict him. the court MIGHT be able to jail him for quite an extensive period of time for failure to comply with their questionable orders, but he's still better of that way than giving them possible evidence against him. any pronz will be used (especially with the porn haters out there....all can't find too many countries more afraid of a naked body). Of course, with the pc out of his hands and in the government's hands, the reliability of any data on it is questionable already (no, I really, really don't trust them).

  79. Anonymous Coward
    Anonymous Coward

    Umm - there is IMHO a procedural error here

    Let me get this right, if a mafia king has witnesses murdered he gets away because of the lack of evidence, but if officials screw up when preserving evidence you're still guilty.

    They made a mistake here by not preserving independent evidence in situ - even a mobile phone made picture of the screen would have sufficed. Now you have the problem that even when/if he gives them the password the evidence can be considered tainted.

    It's not yet proven that the chap's a child pxrn peddler but let's declare him guilty anyway because it looks good in the press - they need lots of stories to paper over the the fact that they are in principle violating the 4th at the border and have legalized industrial espionage.

    Evidence gathering was not done competently, and is thus possibly tainted. The guy collaborated in full, and if what was reported was correct he didn't state he had child porn, the officer saw something that COULD be questionable (but he may not be into manga) but presently has not been able to progress the examination which he should have made at the time.

    The idea of an arrest is to turn a suspicion into a proven fact, but they screwed up and are now in reality at a point where THEY have to prove the arrest was warranted. As THEY have failed to preserve their own independent evidence (I presume on the assumption they could get into that PC at any time), THEY have a problem, not the person arrested.

    Remember, it's still "beyond reasonable doubt", even if it's a terrorist, child porn peddler, communist or whatever other brand is used to scare people.

  80. Sceptical Bastard

    @ "AC 9:49 that bit of information..."

    I have read the story at:

    "If you admit something to the government, you give up the right against self-incrimination later on," said Kerr, a former federal prosecutor.

    Fuck me! Is that as Orwellian as it sounds?

    As others have said, chlid p0rn is the new Salem, the new McCarthyism, the new hysteria. Think about the children? Maybe - but not until you've thought about proportionality, liberty, and the right to keep your thoughts to yourself.

    In the end, it comes down to what you think more important - the sanctification of children (except when you want to sell them stuff) and the recent explosion of the 'child protection' racket or the right to freedom.

    I'm a father. I hate actual real-life child abuse as much as the next man. And, frankly, I find chlid-depicting manga repugnant too. But I'm not prepared to give up everyone's liberty to combat a largely imaginary (or, at best, greatly exagerated) threat. The rates for child stranger rape, child abduction and child murder have stayed more or less static for decades - the crime has not increased but the hysteria has multiplied a hundredfold, fuelled by the obsessional zealotry of the Esther Rancids of this world.

    I better go - Plod will be breaking my door down as soon as this appears.

This topic is closed for new posts.

Other stories you might like