Live data from Hacker News

Grand jury subpoena for Signal user data, Central District of California

signal.org

141–150 of 226 posts

Re: Grand jury subpoena for Signal user data, Central District of California

#141
post #135

It's probably unwise to think prosecutors and federal agents are stupid. They were in the 1990s crypto wars, but not now. What we tend to perceive as 'stupid' is in reality, 'powerful.' They don't need to explain themselves, because they put the onus of compliance on you. Gaming out the subpoena, Signal does not have this user information because it does not exist, but it does have server locations, 3rd party service…

This is one of those posts that sounds truthy because it makes a bunch of broad assertions. ;) Legal systems are peopled by people. Just like other systems. Unlike many other systems, the American legal system is in fact highly distributed—so it's hard to say things like "The System is out to destroy you"; individual agents of that "system" might have different, misaligned, or antagonistic goals. Much of this is by d…

Signal seems secure from the outside, but is it? A judge won't simply take their word for it that they don't have the data, they'll make the order and see if anything turns up.

What if there's a misconfigured logging server that has information that can be used to identify users? Well then that's now going to be given to the government and if Signal tries to turn it off they'll be liable for destruction of evidence.

The actual employees of Signal know internal details of if something is poorly implemented and leaks useful information or not. If the government rattles the cage hard enough, they think they might find someone within it that will give up that information.

Re: Grand jury subpoena for Signal user data, Central District of California

#143
post #127

Earlier quoted context omitted.

Having sat on a grand jury, the 95% is because it's a rigged system. The DA has to convinces 50% of the people that there is a 50% chance that their one sided story is possibly true. This is a lower bar than individuals are held to at cocktail parties.

So it may not be great, but what’s the alternative? The prosecutor decides independently when to bring charges? Is that better? It just seems to skip a step.

My understanding is that a panel of judges outperform grand juries, and petit juries in nearly every scenario. Sorry I don't have references on hand to support this.

I currently think the main benefit of juries is to educate the public on how screwed up the whole process is. It was a waste of time in terms of protecting anyone involved, but brought my trust in the criminal judicial system to an all time low.

Re: Grand jury subpoena for Signal user data, Central District of California

#144
post #135

It's probably unwise to think prosecutors and federal agents are stupid. They were in the 1990s crypto wars, but not now. What we tend to perceive as 'stupid' is in reality, 'powerful.' They don't need to explain themselves, because they put the onus of compliance on you. Gaming out the subpoena, Signal does not have this user information because it does not exist, but it does have server locations, 3rd party service…

This is one of those posts that sounds truthy because it makes a bunch of broad assertions. ;) Legal systems are peopled by people. Just like other systems. Unlike many other systems, the American legal system is in fact highly distributed—so it's hard to say things like "The System is out to destroy you"; individual agents of that "system" might have different, misaligned, or antagonistic goals. Much of this is by d…

A semantic argument about the scope of a synecdoche doesn't address the substance of whether Signal should underestimate the intent and consequences of a clumsy looking subpoena. Partisan and other exceedingly bad actors in a system necessarily have even better special protections than good ones, because they're the ones a system has to defend to defend the legitimacy of itself. Ask any union or profession that behaves like one. Signal has antagonized prosecutors as a class, and it's reasonable to expect some outwardly irrational behaviour from some individuals. They've hit the hornets nest.

Judging by how the the crypto wars played out the last few times, the "Four Horsemen of the Infocalypse" will be trotted out again soon, and probably with the addition of a new predictable character trope.

On a very macro level, tech humiliates intellectuals, politicians and other courtiers, or those who aspire to be them, and this motive is what makes forecasting a crackdown sparked by something like the Cellebrite pillorying seem reasonable.

Re: Grand jury subpoena for Signal user data, Central District of California

#145
post #115

Earlier quoted context omitted.

The subpoena is dated 29 march. That puts it before the celebrite blog. Hence, it cannot be a response to that blog.

Fair and astute observation, and it implies prosecutors have been rounding on Signal for months at least before the Cellebrite blog post as well. However, it also means there was already a snare set for them before the post. I would still not underestimate what these people are capable of. If they want to get you, they will find a way to get you.

This subpoena could not really be about signal at all. Maybe they just wanted to subpoena for chat logs? What if there is no grand conspiracy.

Re: Grand jury subpoena for Signal user data, Central District of California

#146

It's probably unwise to think prosecutors and federal agents are stupid. They were in the 1990s crypto wars, but not now. What we tend to perceive as 'stupid' is in reality, 'powerful.' They don't need to explain themselves, because they put the onus of compliance on you. Gaming out the subpoena, Signal does not have this user information because it does not exist, but it does have server locations, 3rd party service…

What if the legal system doesn’t want to destroy them and this was simply a request to gather chat logs in some other case?

What if there is no conspiracy and this is basically marketing for signal to say “look. We have no data to share. Take our word for it under threat of perjury

Re: Grand jury subpoena for Signal user data, Central District of California

#147
post #63

Earlier quoted context omitted.

But trial by jury continues to be used in several countries (maybe in more restricted ways but it still a thing) or is there something special about a "Grand Jury"?

To add to the other comment a Grand Jury is also often made up of jurors called in using the prosecutor's private phone contacts. A few ex-cops and former work buddies. People also go to jail because of misuse of power by grand juries. There's a great documentary on Netflix but I can't remember its name right now. Suffice to say there aren't grand juries in any well working and fair justice system. It's abuse and/or…

This is not accurate in the US. I was called in via the same system as the petit juries- my name was selected from voter rolls and I received a summons in the mail. Law enforcement and criminal law professionals are specifically filtered from the process.

Re: Grand jury subpoena for Signal user data, Central District of California

#148
post #85

Earlier quoted context omitted.

I don’t have any experience with Homeland Security investigations but I know when the SEC begins major investigations they’ll often request the subject of the investigation voluntarily waive attorney-client privilege. Who on earth would do that? Well, just about everyone. Of course they can’t force a waiver of privilege but the implication is that things will go much better for you if you do. The investigation (and s…

That doesn't seem fair or just - not just "very" but "at all"...

Investigators (from regular cops all the way on up) do this all the time, and courts have ruled that it's legal. Why people continue to fall for it though is beyond me.

Re: Grand jury subpoena for Signal user data, Central District of California

#149
post #23

The subpoena is from Homeland Security Investigations at LAX airport. They deal specifically with crimes that involve international transport. So this is human trafficking, drug smuggling, money mules, etc. To be honest the rest of it is just standard "we have some phone numbers" boilerplate. Same thing was probably sent to Facebook, Twitter, etc. with the hopes that someone was dumb enough to login and check their m…

> They deal specifically with crimes that involve international transport. So this is human trafficking, drug smuggling, money mules, etc. So Signal is being used for human trafficking? And they are deliberately making it easy to do that kind of activity on Signal without law enforcement knowing? Sounds like the app stores should ban them and AWS should kick them off. I disagree with the above sentiment, but I think…

Nah. Apple likes privacy and encryption (they claim) so it’s have a hard time justifying that.

Also the founder of signal is very well connected to the Silicon Valley who’s who.

Re: Grand jury subpoena for Signal user data, Central District of California

#150

OT and tinfoil hat on; there was a strange event last week with users of Signal on the Telia ISP.[1] For about 24 hours no messages could be sent, resulting in a 401 unauthorized error from the server side. Telia is the former state-owned Swedish ISP that is now only half state-owned I believe. They have a bad rep already for sending out extortion letters to torrent users and are almost assumed to be monitoring all u…

As one of the replies in that thread you linked explains, this is TLS encrypted traffic, so Telia can't really do anything to influence what happens here. They don't get to see what the traffic means, and if they change any of it then the connection aborts, which doesn't result in a 401 error it just hangs up abruptly - that's how TLS is designed to work. It is entirely possible that somebody at Signal fat-fingered a…

Yeah that makes a lot more sense, I was so wrapped up in tinfoil I didn't even think about the TLS. Thanks.
Post reply on HN