Anchor ads are not supported on this page.

4S Ranch Allied Gardens Alpine Baja Balboa Park Bankers Hill Barrio Logan Bay Ho Bay Park Black Mountain Ranch Blossom Valley Bonita Bonsall Borrego Springs Boulevard Campo Cardiff-by-the-Sea Carlsbad Carmel Mountain Carmel Valley Chollas View Chula Vista City College City Heights Clairemont College Area Coronado CSU San Marcos Cuyamaca College Del Cerro Del Mar Descanso Downtown San Diego Eastlake East Village El Cajon Emerald Hills Encanto Encinitas Escondido Fallbrook Fletcher Hills Golden Hill Grant Hill Grantville Grossmont College Guatay Harbor Island Hillcrest Imperial Beach Imperial Valley Jacumba Jamacha-Lomita Jamul Julian Kearny Mesa Kensington La Jolla Lakeside La Mesa Lemon Grove Leucadia Liberty Station Lincoln Acres Lincoln Park Linda Vista Little Italy Logan Heights Mesa College Midway District MiraCosta College Miramar Miramar College Mira Mesa Mission Beach Mission Hills Mission Valley Mountain View Mount Hope Mount Laguna National City Nestor Normal Heights North Park Oak Park Ocean Beach Oceanside Old Town Otay Mesa Pacific Beach Pala Palomar College Palomar Mountain Paradise Hills Pauma Valley Pine Valley Point Loma Point Loma Nazarene Potrero Poway Rainbow Ramona Rancho Bernardo Rancho Penasquitos Rancho San Diego Rancho Santa Fe Rolando San Carlos San Marcos San Onofre Santa Ysabel Santee San Ysidro Scripps Ranch SDSU Serra Mesa Shelltown Shelter Island Sherman Heights Skyline Solana Beach Sorrento Valley Southcrest South Park Southwestern College Spring Valley Stockton Talmadge Temecula Tierrasanta Tijuana UCSD University City University Heights USD Valencia Park Valley Center Vista Warner Springs

San Diego’s homegrown FBI hacking hit

Smartphone snooping kiosks subject to massive abuse by rogue cops

The Loose Media Kiosk setups "are vulnerable to potentially serious abuse," says a Justice Dept. audit.
The Loose Media Kiosk setups "are vulnerable to potentially serious abuse," says a Justice Dept. audit.

Mobile phone and computer snooping by police, long a staple in the war against crime, got a boost here 15 years ago with the opening of the nation's first FBI-run regional computer forensics laboratory.

Daphne Hearn

"The San Diego RCFL has been a pioneer in providing top-quality digital forensic services since the year 2000 when the laboratory was launched as a cooperative venture among federal, state, and local law enforcement agencies," noted San Diego Special Agent in Charge Daphne Hearn in an October 2013 news release.

During 2012, Hearn's statement continued, "Laboratory personnel trained 533 local investigators in various digital forensic tools and techniques and the San Diego RCFL's self-service kiosks were used more than 2,100 times by officers to examine cell phone and loose digital media."

The laboratories' annual report describes the kiosks as an easy way for local law enforcement to pry into computers and cell phones, unhindered by federal bureaucracy: "Self-service kiosks for cellular telephones and loose media allow investigators to review the contents of mobile telephones and most types of loose media on their own.”

Sponsored
Sponsored

Adds the report, “The process is simple: investigators make an appointment at [a regional computer forensics laboratory], bring their evidence, use the Loose Media Kiosk or Cell Phone Investigative Kiosk to view the contents, extract data of interest, save it to a report, and burn the report to a CD or DVD. All of this is accomplished without submitting the evidence to the RCFL."

Now, an audit released this month by the inspector general's office of the U.S. Justice Department has found that the kiosks, widely used by the FBI centers across the country, are too user-friendly, carrying the potential for massive misuse by rogue cops and prosecutors.

"Kiosks are vulnerable to potentially serious abuse," says the document.

"During our fieldwork, the FBI did not provide any information to show that...kiosk users were required to sign-in, identify the case related to the evidence being examined, or, as required by FBI policy, confirm that they possessed the proper legal authority to search for evidence on the cell phone."

Continues the audit, "In addition, the FBI did not provide us with any information regarding controls in place...to ensure that users do not use the kiosks for non-law enforcement matters."

Auditors found that "It was possible that a kiosk user could use this tool to view private cell phone information for non-law enforcement purposes," the report says.

"It was also possible for a user to use a kiosk without proper legal authority, thereby engaging in a Fourth Amendment violation."

The report notes that while "FBI policy requires kiosk users to confirm they possess the proper legal authority for the search of data on cell phones or loose media," enforcement has been lax.

A form "acknowledging that the user had the appropriate legal authority to use the kiosk for an official purpose" is supposed to be required, but "approximately 24 percent of the entries in the visitor’s log did not have a corresponding Acknowledgment Form and approximately 13 percent of the Acknowledgment Forms did not correspond with an entry in the...visitor’s log."

The findings of the audit were based on a review of the regional forensics lab in Philadelphia, but apply nationally, according to the document.

"We believe it is important that the FBI evaluate [regional computer forensics laboratory] implementation of FBI policy for kiosk usage at RCFLs nation-wide and, if necessary, promptly revise controls to ensure compliance with that policy and minimize the risk of inappropriate use of kiosks."

According to the report, San Diego's unit received 2525 service requests during fiscal years 2011 through 2013, the second largest of the network. Orange County — like San Diego, a center of drug trafficking — was first, with 2703.

Training of agents regarding use of the kiosks and keeping track of their usage became even more problematic when unidentified hackers attacked the national Training Registration System used by the forensic labs.

"According to the FBI," the audit says, "in early 2014, TRS was compromised after an intruder gained unauthorized access and it was taken out of service until a more secure website could be deployed."

"The FBI told us that the [forensics headquarters office] is in the process of building and deploying a new training website. FBI officials also told us that security is a top priority in developing the new system because it will contain the names of law enforcement officers."

The latest copy of the Reader

Please enjoy this clickable Reader flipbook. Linked text and ads are flash-highlighted in blue for your convenience. To enhance your viewing, please open full screen mode by clicking the icon on the far right of the black flipbook toolbar.

Here's something you might be interested in.
Submit a free classified
or view all
Previous article

Tijuana's Agua Caliente gets the Fountain of the Faun restored

Play It Again, Pan
The Loose Media Kiosk setups "are vulnerable to potentially serious abuse," says a Justice Dept. audit.
The Loose Media Kiosk setups "are vulnerable to potentially serious abuse," says a Justice Dept. audit.

Mobile phone and computer snooping by police, long a staple in the war against crime, got a boost here 15 years ago with the opening of the nation's first FBI-run regional computer forensics laboratory.

Daphne Hearn

"The San Diego RCFL has been a pioneer in providing top-quality digital forensic services since the year 2000 when the laboratory was launched as a cooperative venture among federal, state, and local law enforcement agencies," noted San Diego Special Agent in Charge Daphne Hearn in an October 2013 news release.

During 2012, Hearn's statement continued, "Laboratory personnel trained 533 local investigators in various digital forensic tools and techniques and the San Diego RCFL's self-service kiosks were used more than 2,100 times by officers to examine cell phone and loose digital media."

The laboratories' annual report describes the kiosks as an easy way for local law enforcement to pry into computers and cell phones, unhindered by federal bureaucracy: "Self-service kiosks for cellular telephones and loose media allow investigators to review the contents of mobile telephones and most types of loose media on their own.”

Sponsored
Sponsored

Adds the report, “The process is simple: investigators make an appointment at [a regional computer forensics laboratory], bring their evidence, use the Loose Media Kiosk or Cell Phone Investigative Kiosk to view the contents, extract data of interest, save it to a report, and burn the report to a CD or DVD. All of this is accomplished without submitting the evidence to the RCFL."

Now, an audit released this month by the inspector general's office of the U.S. Justice Department has found that the kiosks, widely used by the FBI centers across the country, are too user-friendly, carrying the potential for massive misuse by rogue cops and prosecutors.

"Kiosks are vulnerable to potentially serious abuse," says the document.

"During our fieldwork, the FBI did not provide any information to show that...kiosk users were required to sign-in, identify the case related to the evidence being examined, or, as required by FBI policy, confirm that they possessed the proper legal authority to search for evidence on the cell phone."

Continues the audit, "In addition, the FBI did not provide us with any information regarding controls in place...to ensure that users do not use the kiosks for non-law enforcement matters."

Auditors found that "It was possible that a kiosk user could use this tool to view private cell phone information for non-law enforcement purposes," the report says.

"It was also possible for a user to use a kiosk without proper legal authority, thereby engaging in a Fourth Amendment violation."

The report notes that while "FBI policy requires kiosk users to confirm they possess the proper legal authority for the search of data on cell phones or loose media," enforcement has been lax.

A form "acknowledging that the user had the appropriate legal authority to use the kiosk for an official purpose" is supposed to be required, but "approximately 24 percent of the entries in the visitor’s log did not have a corresponding Acknowledgment Form and approximately 13 percent of the Acknowledgment Forms did not correspond with an entry in the...visitor’s log."

The findings of the audit were based on a review of the regional forensics lab in Philadelphia, but apply nationally, according to the document.

"We believe it is important that the FBI evaluate [regional computer forensics laboratory] implementation of FBI policy for kiosk usage at RCFLs nation-wide and, if necessary, promptly revise controls to ensure compliance with that policy and minimize the risk of inappropriate use of kiosks."

According to the report, San Diego's unit received 2525 service requests during fiscal years 2011 through 2013, the second largest of the network. Orange County — like San Diego, a center of drug trafficking — was first, with 2703.

Training of agents regarding use of the kiosks and keeping track of their usage became even more problematic when unidentified hackers attacked the national Training Registration System used by the forensic labs.

"According to the FBI," the audit says, "in early 2014, TRS was compromised after an intruder gained unauthorized access and it was taken out of service until a more secure website could be deployed."

"The FBI told us that the [forensics headquarters office] is in the process of building and deploying a new training website. FBI officials also told us that security is a top priority in developing the new system because it will contain the names of law enforcement officers."

Comments
Sponsored

The latest copy of the Reader

Please enjoy this clickable Reader flipbook. Linked text and ads are flash-highlighted in blue for your convenience. To enhance your viewing, please open full screen mode by clicking the icon on the far right of the black flipbook toolbar.

Here's something you might be interested in.
Submit a free classified
or view all
Previous article

German Cultural Minister tried to cancel Wagner

Wagner doesn't appeal to the young because he makes too many demands
Next Article

BattleMage makes EverQuest Corpse Run

Corpse Run is a 6.3% dry-hopped ABV West Coast IPA brewed with Nectaron, Mosaic, and Motueka hops
Comments
Ask a Hipster — Advice you didn't know you needed Big Screen — Movie commentary Blurt — Music's inside track Booze News — San Diego spirits Classical Music — Immortal beauty Classifieds — Free and easy Cover Stories — Front-page features Drinks All Around — Bartenders' drink recipes Excerpts — Literary and spiritual excerpts Feast! — Food & drink reviews Feature Stories — Local news & stories Fishing Report — What’s getting hooked from ship and shore From the Archives — Spotlight on the past Golden Dreams — Talk of the town The Gonzo Report — Making the musical scene, or at least reporting from it Letters — Our inbox Movies@Home — Local movie buffs share favorites Movie Reviews — Our critics' picks and pans Musician Interviews — Up close with local artists Neighborhood News from Stringers — Hyperlocal news News Ticker — News & politics Obermeyer — San Diego politics illustrated Outdoors — Weekly changes in flora and fauna Overheard in San Diego — Eavesdropping illustrated Poetry — The old and the new Reader Travel — Travel section built by travelers Reading — The hunt for intellectuals Roam-O-Rama — SoCal's best hiking/biking trails San Diego Beer — Inside San Diego suds SD on the QT — Almost factual news Sheep and Goats — Places of worship Special Issues — The best of Street Style — San Diego streets have style Surf Diego — Real stories from those braving the waves Theater — On stage in San Diego this week Tin Fork — Silver spoon alternative Under the Radar — Matt Potter's undercover work Unforgettable — Long-ago San Diego Unreal Estate — San Diego's priciest pads Your Week — Daily event picks
4S Ranch Allied Gardens Alpine Baja Balboa Park Bankers Hill Barrio Logan Bay Ho Bay Park Black Mountain Ranch Blossom Valley Bonita Bonsall Borrego Springs Boulevard Campo Cardiff-by-the-Sea Carlsbad Carmel Mountain Carmel Valley Chollas View Chula Vista City College City Heights Clairemont College Area Coronado CSU San Marcos Cuyamaca College Del Cerro Del Mar Descanso Downtown San Diego Eastlake East Village El Cajon Emerald Hills Encanto Encinitas Escondido Fallbrook Fletcher Hills Golden Hill Grant Hill Grantville Grossmont College Guatay Harbor Island Hillcrest Imperial Beach Imperial Valley Jacumba Jamacha-Lomita Jamul Julian Kearny Mesa Kensington La Jolla Lakeside La Mesa Lemon Grove Leucadia Liberty Station Lincoln Acres Lincoln Park Linda Vista Little Italy Logan Heights Mesa College Midway District MiraCosta College Miramar Miramar College Mira Mesa Mission Beach Mission Hills Mission Valley Mountain View Mount Hope Mount Laguna National City Nestor Normal Heights North Park Oak Park Ocean Beach Oceanside Old Town Otay Mesa Pacific Beach Pala Palomar College Palomar Mountain Paradise Hills Pauma Valley Pine Valley Point Loma Point Loma Nazarene Potrero Poway Rainbow Ramona Rancho Bernardo Rancho Penasquitos Rancho San Diego Rancho Santa Fe Rolando San Carlos San Marcos San Onofre Santa Ysabel Santee San Ysidro Scripps Ranch SDSU Serra Mesa Shelltown Shelter Island Sherman Heights Skyline Solana Beach Sorrento Valley Southcrest South Park Southwestern College Spring Valley Stockton Talmadge Temecula Tierrasanta Tijuana UCSD University City University Heights USD Valencia Park Valley Center Vista Warner Springs
Close

Anchor ads are not supported on this page.

This Week’s Reader This Week’s Reader