Hacker News new | past | comments | ask | show | jobs | submit login

Couldn’t you always claim that malware caused the offending clicks/placed the illegal files on your disk and is hiding/obfuscating itself so well that it’s not detectable by forensic methods? What’s the logic here to still get the criminal?



Yes, and it’s not an uncommon defence in child pornography cases. Similarly, you can always claim that the police framed you by lying about the device being found in your possession, or not being tampered with between seizure and forensic analysis. It is up to the jury to decide whether the defence gives rise to a reasonable doubt.

The standard is not as high as most technically-minded people think. Juries can convict defendants on the uncorroborated testimony of a single witness: https://newrepublic.com/article/152305/who-to-believe-sexual...


Yep, and society tends to view defendants as guilty from start.


It’s even worse now with social media handing verdicts before juries are even assembled.

Infamous cases were difficult in the age of newspapers when they got hold of a story, but now everyone can begin their own agendum.


Social media is way less influential than the local news media in this regard. That’s a long running problem – think about how many cases have been covered based on police statements which turned out to be completely fictitious — and social media tends to amplify those stories more than it contributes original coverage.


Especially in Japan.


There's a game, Judgment, which opened my eyes to this. Because a core part of the backstory of the game is that the main character won a case as the defense which is seen as a huge deal. He's like one of the few defense attorneys to have ever gotten to not guilty.

The game takes place in a slightly fictionalized version of Japan and is made by a Japanese game developer noted for making games steeped in contemporary Japanese culture. I guess that's important to note.


True. I was mostly talking about the "innocent until proven guilty" saying effectively being BS in the US.


Exactly, you are "guilty" if a prosecutor can convince 12 people who couldn't get out of jury duty to convict you.


Which is exactly why nobody should encourage trying to get out of jury duty: the legal system depends on everyone doing their civic duty so juries represent the community.

If you jokingly imply that jury duty is for suckers, you’re undercutting the system and supporting bad outcomes. For example, one of the few checks on the drug war or bad policing has been juries refusing to accept bad police work.


My experience is that you have to "play dumb" not to get kicked off. The last time I was impaneled, the prosecutor asked if I, as a juror, would be comfortable if the injured party (an assault case) did not testify. I said, sure, since the prosecution wasn't representing them.

I didn't mean to be glib, but it got me dismissed immediately. It seems to me that any knowledge of law or procedure will get you dismissed.

point is, if you want to be on a jury, work hard NOT to give away any knowledge of the legal system.


I would take it a step further -- if you want to serve on a jury, you need to pretend to have no education at all. The last time I was called up for jury duty, all I did was (truthfully) state that I was a PhD student during voir dire, and that was that, I was out.


I had the opposite experience for a sexual assault case. I demonstrated knowledge of legal procedure and general intelligence and was selected immediately.

I was asked about possible conflicts of interest and indicated that my father is an attorney who practiced in the same state. Asked for my profession, I replied that I am a bioinformaticist and was asked to explain the term. I said "I write computer code to help biologists analyze and use their data." This was in a university town. The prosecutor opined that I must be "pretty smart" and that she expected I came with an understanding of biology and biotechnology, all of which I affirmed. She asked if I would use that knowledge to assess DNA evidence that could be presented during the trial. I responded "No, I would limit my interpretation to only what was provided by testimony or otherwise affirmed during the trial." The prosecutor looked momentarily surprised at the precision with which my answer addressed the legal burdens required of a finder of fact, and then simply replied, "Ok, thank you." I was then immediately named to the jury.

Perhaps your attitude or delivery got you dismissed, or perhaps your choice of words suggested the opposite of what you imply here - a fundamentally flawed perception of the role of the prosecution? It's certainly technically correct that the prosecutor represents the state, not the victim, and that victim representation is its own ball of wax. Your reasoning, however, seems suspect. Paraphrasing: "Because the victim is not represented by the prosecutor, I have no problem with his not testifying." That's a non sequitur; the antecedent in no way implies the consequent. I could see the prosecutor rejecting you for appearing to be trying to impress (and failing) with your grasp of legal reasoning, fearing that you might not faithfully execute the court's instructions.

Then again, there are probably plenty of attorneys that just don't trust smart people.


Thank you. People who treat jury duty as a burden and a job for suckers are playing the game that they will never be in a trial where a jury will decide their fate.

And while that's likely a game you win, I also wear my seatbelt despite not betting on crashing my car.


...or maybe it is time to reconsider jury trials, especially as cases become more technically complex. The fact that lawyers reflexively kick highly educated jurors off during voir dire speaks volumes about a typical jury's ability to understand technical details. There is a good case to be made that a diverse panel of judges is better able to decide the facts of a case (and before anyone asks, it is trivial to have a separate judge or panel of judges determine sentencing).


It’s a bit moot though. Even if you’re ra-ra wild about jury duty, the chance that you actually get selected isn’t especially high.

I think most people know this and figure they’re just going to have to waste a few hours only to be sent home (or worse, get selected and then sent home after settlement).


From the link:

> “Those who say there’s no corroborating evidence are thinking very narrowly,” Victor Vieth, the founder of the Gundersen center, told me. “They’re thinking of hair, DNA, the things you see on television dramas. I’ve never worked on a case of child abuse where, if you look hard enough, you won’t find corroborating evidence.” Vieth invited me to imagine a child who describes that his or her assault occurred in a room painted blue. Police should obtain a warrant and visit the room. Were its walls blue? If so, that was corroborating evidence.

This is of course not corroborating evidence that a sexual assault was committed. But sure, it corroborates that the room exists, and why would a child know what color the walls inside a room were unless they had been the victim of a sexual assault there?


"Your honour, I think you'll find that someone broke into my house and planted drugs"

This type of logic has been used plenty in court, it being in your possession, digital or not, is sufficient.

The claim here is that due to the vulnerabilities Cellebrite has, the offending item may never have been on your device. This is more similar to saying that the images the police took in your house of drugs were kept on an unsecured server, there are recorded vulnerabilities for it, and therefore the images could have been digitally edited to show drugs where none were present.


Possesion is 9/10ths goes both ways


claiming that porn on your device isn't yours is not the problem. the theoretical problem is if you received porn via Signal on 04/01/2020 2:23AM but Cellebrite says you received it on 04/26/2020 5:34PM (while in custody). Or 12/23/2019 at 2:00PM (before you bought the phone). If the dates on the data in Cellebrite can't be aligned to the dates of the actual events AND the last modification of the device was AFTER you last had control of it, nothing can be trusted from it.


No, that is not the problem.

The problem is that a report about a phone scanned on 2020-02-01 can be altered by a phone scanned on 2020-05-01 to say that there was porn when there wasn't. Oh, and that scan left a running program which will cause 5% of the phones scanned after that to randomly also claim porn that is not on the device.

Therefore if a single phone with Signal was scanned at the kiosk, NOTHING from that kiosk can be trusted.


This is a problem, but I don't think Moxie would do this as it could make him liable for evidence tampering. If the protection mechanism applies to the device being scanned, its a defensive measure, if it is applied to unrelated devices, it looks like a malicious destructive action.

If the USER could select the action, for research purposes, that might a different story.


Moxie might or might not have done so. But he made it clear that he could have, and went out of his way to create reasonable doubt about whether he did.

If he winds up in court, I'd love it if he sticks to his, "the files are there for artistic effect".


Since after all, Cellebrite claims their device doesn't alter evidence on the way through. If that claim is true, Moxie's artistically-beautiful files obviously can't affect it.

Saying those decorative files tampered with evidence is equivalent to admitting that everything the Cellebrite claims to do, it doesn't do and never has done.


The vulnerabilities allow for code execution in the context of the Cellebrite application via the parsing of a video file. It doesn’t matter what the application was designed to do, you can now make it do anything you want just by getting it to scan a phone with a malicious video on it.


Yes. So Cellebrite should be writing the data to write-once storage prior to performing any analysis of the content.

In absence of write-once media, they are betting that the hashes they capture will be the same every time they image the device because they never modify the device.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: