{"id":7105,"date":"2018-08-20T14:17:15","date_gmt":"2018-08-20T18:17:15","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=7105"},"modified":"2023-04-10T12:14:13","modified_gmt":"2023-04-10T16:14:13","slug":"facebook-encryption-doj-wiretap","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/facebook-encryption-doj-wiretap\/","title":{"rendered":"The odds are stacked against Facebook in the latest encryption fight"},"content":{"rendered":"

Unlike with Apple, the DOJ has a very good chance in its case against Facebook<\/h2>\n

The US Department of Justice wants to wiretap Facebook messenger. That would involve the social media giant breaking the encryption on its messenger application so that the feds could listen to the voice conversations of an MS-13 suspect. MS-13 is a Mexican and Republican boogey-man.<\/p>\n

Currently, in California, a case between the DOJ and Facebook is proceeding under seal, reports Reuters<\/a>.<\/span><\/p>\n

The judge\u00a0in the Messenger case heard arguments [last] Tuesday on a government motion to hold Facebook in contempt of court for refusing to carry out the surveillance request, according to the sources, who spoke on condition of anonymity.<\/p><\/blockquote>\n

While both the DOJ and Facebook refused to give Reuters a comment, the issue originally arose in Fresno, California as a result of an investigation in the MS-13 gang. If this smacks of a similar case that occurred several hours south in San Bernardino, that\u2019s because it was the catalyst for a heated dispute between Apple and the feds over encryption on iPhones<\/a>. That case was later vacated after a third-party company was able to crack the shooter\u2019s phone.<\/p>\n

But while there are some superficial similarities between the two cases, there are some pretty big differences between the two situations, too. While Apple had a strong case not to decrypt the shooter\u2019s device, Facebook\u2019s legal standing in this case is much more tenuous.<\/p>\n

Why is the Facebook case not like the Apple case?<\/h2>\n

Well, to begin with, (and please, dear reader, forgive me for this pun) you\u2019re kind of comparing apples to oranges. Apple\u2019s encryption secured the device itself. And while Apple had already handed over the contents of the shooter\u2019s iCloud, it was never in control of the device\u2019s data. Nor could it access the device on account of not having the shooter\u2019s password, nor his private key. The FBI\u2019s answer was for Apple to design a workaround that would have created far more risk than was warranted<\/a> to unlock a single iPhone. From a utilitarian standpoint, it was a really bad ask<\/a>. There were other legal distinctions, too. The FBI was trying to derive its authority from the All Writs act, which authorizes federal courts to “issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law.”<\/p>\n

\"FacebookHere\u2019s all you need to know about why that was silly. The All Writs act was passed in 1789, literally in the very first session of the very first congress. The updated version we use today was passed in 1911. Computers were not a thing when this was conceived of. It doesn\u2019t apply well to modern cases about encryption.<\/p>\n

Facebook is not so lucky because in its case the DOJ are going with the Wiretap Act. And unlike the nearly 250 year old law the FBI decided to try and argue, the Wiretap Act does apply to this case and there is even some precedent on the feds\u2019 side. The Wiretap Act is actually Title I of the Electronics Communications Privacy Act and it’s pretty clear about phone companies\u2019 obligation to comply with wiretap orders given by law enforcement. Further complicating matters is that Microsoft started providing access to Skype in 2012, though at the time providing access to voice calling was not technically feasible.<\/p>\n

There are technical differences, too. While Apple\u2019s case was in relation to a locked physical hard drive, in the Facebook case the feds want a wiretap on all Facebook messenger calls sent and received by one suspect. And unlike with device encryption, you\u2019re attempting to encrypt this data in transit, which means that you\u2019re going to be generating less secure symmetric session keys to communicate to avoid degradation of performance.<\/p>\n

These session keys are generated by the devices, locally, and security is not as emphasized as with Apple\u2019s passcodes. In fact, in 2015 Philipp Hancke discovered that the session keys were being shared with Facebook\u2019s servers. And while Facebook is typically tight-lipped about its configurations and could have changed things in the past few years, that still doesn\u2019t bode well.<\/p>\n

Will Facebook have to comply with the DOJ?<\/h2>\n

The question is probably less, \u201cwill they have to\u201d and more \u201ccan they?\u201d<\/p>\n

Former Facebook engineer Alec Muffet told The Verge<\/a> he believes Facebook \u201cprobably does not currently have the necessary keys and means to comply with a wiretap order.\u201d That\u2019s owing to the fact the holding on to other people\u2019s keys is not a good decision (eh, Mr. Trustico?).<\/p>\n

The most challenging part of the order has nothing to do with encryption at all. Even with the session key, wiretappers would still need to collect a full copy of the encrypted call, which can be a significant challenge. Most online calling services send data directly from client to client for simple performance reasons, which has given the services a troubled history with wiretap requests.<\/p><\/blockquote>\n

Apparently, the NSA has found a workaround for this (of course they have), but whether or not it would work for the Facebook situation is another story.<\/p>\n

There\u2019s frankly a lot we don\u2019t know, and likely won\u2019t know about this case until more news leaks about it or a resolution is reached.<\/p>\n

As we\u2019ve done with the encryption debate up until this point, we will keep you posted.<\/p>\n

Feel free to leave any comments or questions below.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Unlike with Apple, the DOJ has a very good chance in its case against Facebook The US Department of Justice wants to wiretap Facebook messenger. That would involve the social…<\/p>\n","protected":false},"author":6,"featured_media":7108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[130],"tags":[182,301],"class_list":["post-7105","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-everything-encryption","tag-encryption","tag-facebook","post-with-tags"],"views":7724,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2018\/08\/bigstock-Sankt-petersburg-Russia-May-239984263.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/7105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=7105"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/7105\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/7108"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=7105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=7105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=7105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}