Federal Prosecutors Use All Writs Order To Compel Suspect To Unlock Phone With His Fingerprint

from the but-it-still-may-not-have-worked dept

Law enforcement is still trying to break into iPhones and still using the All Writs Act to do so. A sex trafficking prosecution involving the ATF has resulted in a suspect being ordered to cough up his, um, fingerprint, in order to allow investigators to access the contents of his phone. Matt Drange of Forbes has more details [caution: here there be ad-blocker blocking]:

Prosecutors hoped that the search, conducted on an iPhone 5s by special agent Jennifer McCarty of the Federal Bureau of Alcohol, Tobacco, Firearms and Explosives, would help them piece together evidence in an alleged sex trafficking case involving a man named Martavious Keys. Keys had the iPhone with him when he was arrested on May 19, according to recently unsealed court filings. A week later, on May 26, prosecutors asked the judge in the case to force Keys to open the device with his fingerprint, unlocking a potential trove of information including emails, text messages, contacts and photos stored on the device that could be used as evidence.

While courts generally agree that a fingerprint is non-testimonial — despite its ability to unlock all sorts of testimonial stuff — there aren’t too many courts willing to extend that coverage to passwords. There are exceptions, of course, but items held in someone’s mind are given a bit more deference than those at their literal fingertips.

And that’s likely why the All Writs-compelled fingerprint access hasn’t allowed the ATF inside Keys’ phone. The feds can force Keys to place his finger on the iPhone screen all they want, but it likely won’t unlock the device. Apple’s security requires a passcode as well as a fingerprint if it’s been more than 48 hours since the phone was last unlocked. The time elapsed between when the phone was seized and the order obtained for Keys’ fingerprint added another layer of security to the phone — one not so easily defeated with All Writs orders.

Keys is no one’s idea of a sympathetic party. He allegedly forced two teen girls, aged 14 and 15, to have sex with men for several hours a day by drugging them into submission. Whether or not his phone contained more evidence is unknown. It’s unclear from the recently unsealed documents whether federal investigators found another way into the device after the application of Keys’ fingerprint failed to unlock the phone.

And that’s sort of a problem. The government is using All Writs orders for a great many things these days, often during sealed cases and with little to no transparency. The fact that Congress apparently authorized this as a fill-in for things warrants couldn’t necessarily reach has made the use of All Writs requests both indispensable and easily-abused. The fact that Congress authorized this in 1789 — with no conceivable idea of the form “papers” would take over the next 200+ years — usually seems to work in the government’s favor.

A bit more transparency would go a long way to assuage concerns about abuse, but overuse/abuse of the 1789 Act is likely the reason there isn’t more transparency. If the court decides it’s going to compel Keys to turn over his passcode as well (assuming the phone hasn’t already been cracked), at least it won’t have to toss him in jail if he doesn’t. Keys is already behind bars awaiting trial for his sex trafficking indictment. On one hand, that lowers the coercive value of imprisonment. On the other hand — if he refuses and is hit with a contempt order — he’ll remain in jail indefinitely, even without having been found guilty of anything more than contempt of court.

Filed Under: , , , ,

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Federal Prosecutors Use All Writs Order To Compel Suspect To Unlock Phone With His Fingerprint”

Subscribe: RSS Leave a comment
27 Comments
Anonymoussays:

?Keys is no one’s idea of a sympathetic party.?

Much like the whole ?free speech? issue, you might find yourself defending some horrible people when you stake out a position on a subject like this. But in the same vein as ?defending odious speech?, defending horrible people from abuses of law is important. The law should (in theory) treat its worst offenders no differently than innocent people. If we can?t expect the law to protect the rights of criminals, how can we trust the law to protect the rights of innocents?

Keys might not be sympathetic, but he deserves the same protections of law as anyone else.

Anonymoussays:

Wouldn’t knowing which finger will unlock the phone be “in his mind” like a passcode? Shouldn’t his lawyer be asking for clarification as to which finger(s) he is being compelled to use so he’s not hit with more charges for using the wrong one(s)? I’m assuming there’s a limit to the number of failed attempts at this.

Rapnelsays:

I understand the argument but I think it’s quite a stretch.

When asked to point to the person in the room that I saw commit the crime I speak with my finger.

I can sign.

A fingerprint in this application is speaking. You telling your phone to unlock is no different speaking your mind – with your voice, your finger, your face, your pin or any other mechanism requiring your person or parts thereof.

The act of unlocking the thing is speaking. In this case, or others like it, this is potentially self-incriminating speech by any reasonable standard, imo.

Anonymoussays:

Re: Stop using fingerprints

Depends on your adversary.
If they can force your finger into the scanner then yes that’s a bad form of authentication.

For me I’m mostly worried about losing my phone and some crook finding it, in that case fingerprint auth works well.

I would like to see additional ways to authenticate such as finger print combinations like index, middle, pinky, pinky.

John Fendersonsays:

Re: Re: Stop using fingerprints

“For me I’m mostly worried about losing my phone and some crook finding it, in that case fingerprint auth works well.”

I suppose so, but it’s pretty easy to lift a print and reproduce such that the scanner is fooled. Your print might be on the touch screen of the phone itself.

Personally, I find this an inadequate amount of security, considering the sensitive nature of the data that phones tend to accumulate. The odds may be low of a breach, but the consequences could be high. I’d prefer a slightly less convenient, but much more secure, method such as a long PIN.

But I do believe that the answer to “how secure should I be” is a very individual one, and so my preference isn’t relevant to you.

I just worry that, particularly with fingerprint scanners, people tend to overestimate their security and might make different choices if they understood.

Anonymoussays:

The All-Writs act is older than the Bill of Rights

The All Writs Act (1789) was passed during that time that predates the Bill of Rights (1792), and may be held up as an example of the time of tyranny that the Bill of Rights was intended to curb. It is hard to understand how an old, ordinary law, older than the Bill of Rights, could be interpreted as having a higher priority an amendment to the consitution that was passed after it.

Anonymoussays:

ad blocking

Hrm. Via NoScript and Firefox, I permitted forbes.com and forbesimg.com (and nothing else) and had no problem.

Still, if you don’t permit those two, the site is nonfunctional. Still poor (IMO) design, requiring Javascript to allow any functionality. It’s as if they created a site using a Flash engine….

Rekrulsays:

Re: Re: ad blocking

If a site requires people to allow Flash and javascript, the coding for ads and trackers will get through almost by default.

I don’t know about trackers, but I have most advertising blocked with a large Hosts file that directs all connections to advertising servers to 0.0.0.0. I also have Flash blocked unless I allow it. I was able to read the Forbes story without any problem. I have encountered other sites though, which won’t allow me to see the site as long as Firefox can’t connect to the advertising servers.

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...
Older Stuff
13:40 It's Great That Winnie The Pooh Is In The Public Domain; But He Should Have Been Free In 1982 (Or Earlier) (35)
12:06 Norton 360 Now Comes With Crypto Mining Capabilities And Sketchy Removal Process (28)
10:45 Chinese Government Dragnet Now Folding In American Social Media Platforms To Silence Dissent (14)
10:40 Daily Deal: The 2022 Ultimate Cybersecurity Analyst Preparation Bundle (0)
09:29 A Fight Between Facebook And The British Medical Journal Highlights The Difficulty Of Moderating 'Medical Misinformation' (9)
06:29 Court Ruling Paves The Way For Better, More Reliable Wi-Fi (4)
20:12 Eighth Circuit (Again) Says There's Nothing Wrong With Detaining Innocent Minors At Gunpoint (15)
15:48 China's Regulatory War On Its Gaming Industry Racks Up 14k Casualties (10)
13:31 Chinese Government Fines Local Car Dealerships For Surveilling While Not Being The Government (5)
12:08 Eric Clapton Pretends To Regret The Decision To Sue Random German Woman Who Listed A Bootleg Of One Of His CDs On Ebay (29)
10:44 ICE Is So Toxic That The DHS's Investigative Wing Is Asking To Be Completely Separated From It (29)
10:39 Daily Deal: The 2022 Complete Raspberry Pi And Arduino Developer Bundle (0)
09:31 Google Blocked An Article About Police From The Intercept... Because The Title Included A Phrase That Was Also A Movie Title (24)
06:22 Wireless Carriers Balk At FAA Demand For 5G Deployment Delays Amid Shaky Safety Concerns (16)
19:53 Tenth Circuit Denies Qualified Immunity To Social Worker Who Fabricated A Mother's Confession Of Child Abuse (35)
15:39 Sci-Hub's Creator Thinks Academic Publishers, Not Her Site, Are The Real Threat To Science, And Says: 'Any Law Against Knowledge Is Fundamentally Unjust' (34)
13:32 Federal Court Tells Proud Boys Defendants That Raiding The Capitol Building Isn't Covered By The First Amendment (25)
12:14 US Courts Realizing They Have A Judge Alan Albright Sized Problem In Waco (17)
10:44 Boston Police Department Used Forfeiture Funds To Hide Purchase Of Surveillance Tech From City Reps (16)
10:39 Daily Deal: The Ultimate Microsoft Excel Training Bundle (0)
09:20 NY Senator Proposes Ridiculously Unconstitutional Social Media Law That Is The Mirror Opposite Of Equally Unconstitutional Laws In Florida & Texas (25)
06:12 Telecom Monopolies Are Exploiting Crappy U.S. Broadband Maps To Block Community Broadband Grant Requests (7)
12:00 Funniest/Most Insightful Comments Of 2021 At Techdirt (17)
10:00 Gaming Like It's 1926: Join The Fourth Annual Public Domain Game Jam (6)
09:00 New Year's Message: The Arc Of The Moral Universe Is A Twisty Path (33)
19:39 DHS, ICE Begin Body Camera Pilot Program With Surprisingly Good Policies In Place (7)
15:29 Remembering Techdirt Contributors Sherwin And Elliot (1)
13:32 DC Metro PD's Powerful Review Panel Keeps Giving Bad Cops Their Jobs Back (6)
12:11 Missouri Governor Still Expects Journalists To Be Prosecuted For Showing How His Admin Leaked Teacher Social Security Numbers (39)
10:48 Oversight Board Overturning Instagram Takedown Of Ayahuasca Post Demonstrates The Impossibility Of Content Moderation (10)
More arrow
This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it