Hacker News new | ask | show | jobs
by Hupriene 2565 days ago
While I generally agree with you, a court order to provide a password does bring with it a few problems.

1. Sometimes knowledge of the password itself could be considered testimonial. If there is doubt as to whether or not the an individual owns a particular computer, then being forced to provide the password is tantamount to being forced to concede ownership, which would violate protections against self incrimination.

2. People do legitimately forget passwords, and the courts have no way of distinguishing between people who have genuinely forgotten and those who falsely claim to have forgotten. Being subjected to indefinite detention for forgetting a password would violate due process, while keeping someone in jail until they comply with a legal warrant is legitimate. Since the court cannot distinguish between these two cases, any penalty the court may impose for contempt runs a variable (depending on the facts of the case) but non-zero risk of being a miscarriage of justice.

2 comments

That second scenario has always fascinated me. What's the burden of proof for contempt of court? Forgetting a password seems plausible to me. Anyway, reminds me of this reddit post: https://www.reddit.com/r/IAmA/comments/afib1/truecrypt_and_t...
That's probably a made up story or at least not accurately told. That's not how the legal system operates.
Which part of the legal system isn't expressed accurately there? I'm asking out of my own ignorance, not as an accusation, I've only been a juror once.
It would be extremely unusual for an investigator to continue an interrogation after a direct request for an attorney.

The FBI wouldn't execute a search warrant and miss a bunch of drugs and drug paraphernalia.

You don't get jailed for obstruction on the say so of the FBI.

The Judge doesn't interrogate the defendant ever.

Like the guy in the OP you don't get to just refuse to provide the PW. The Judge would hold in contempt.

A Federal judge wouldn't order property held by the local PD returned. And why would they have it if the FBI conducted the raid and was doing the forensics?

Excellent explanation, thanks. The story was definitely suspect, but I entirely missed the FBI involvement at all. Why couldn't a federal judge order the return of property in a case? Is it a jurisdictional issue, i.e. if for some reason the local police had it, that would require a municipal judge?
What if the software on the phone, hypothetically was able to detect you beeing in distress and would stop complying to even the correct password if you are clearly coerced?
"Alexa ! Im scared!" -would you like me to dial 911? "No Alexa,Hide!" -OK, they cant find me now.
A second self destruct password
This is why when raiding a "hacker" LEOs were[1997] supposed to take immediate physical control of the device and not believe anything said "hacker" tells them about the device. now that mobiles are more common than desktops, but not commonly controlled entirely by the user, heuristics have become sloppy.

"Assume That Every Computer Has Been Rigged To Destroy Evidence"

https://www.govtech.com/magazines/gt/Computer-Evidence-Proce... [1997]