Forum menu
Jailed for withhold...
 

[Closed] Jailed for withholding computer password

Posts: 0
Free Member
 

Complete reversal of the usual "innocent until proven guilty" burden of proof.

I don't think it will be. In order to bring this prosecution for failing to provide the password (and is it the only thing that was withheld - we don't know the whole case) then the police would have to have pretty compelling evidence that the person involved was withholding something he obviously knew. I don't know what that would be, but if, for example, there was one PC which you said was yours and no-one else used it but it was found it then needed a password to enter it (maybe the whole OS) and you refused to give it then you may then have the evidence.
What may, and I'm guessing from knowing how these people talk to you anyway, is that this guy probably bragged that the police would never get it so they knew full well he knew the password.


 
Posted : 06/10/2010 8:55 am
Posts: 621
Free Member
 

robdob - Member
If the householder had tried to prevent us from searching anything else in the house that was under the jurisdiction of the warrant then then could (and have been in the past) be charged with obstruction. And that's the same if I'm investigating something using the powers that I have with my personal warrant, as long as I am complying with the law as described by the Act under which my warrant is authorised.

Could you force him to tell you the combination to his safe and imprison him if he doesn't?


 
Posted : 06/10/2010 8:58 am
Posts: 6990
Full Member
 

Oooooh someone got out of bed the wrong way this morning!!! LOL!
oh, and you couldn't be more wrong. Didn't get bullied, its got nothing to do with "defending" myself (what's that about?), I just know how search warrants work and what you can and can't do under PACE (Police and Criminal Evidence Act). Just because someone knows their job does this mean they need counselling?
And I'm not even a policeman!

I did get out of bed on the wrong side this morning and being called a fool by someone who couldn't even answer my question didn't improve my mood. For the third time, how do you tell if data was downloaded intentionally or if it was downloaded by a virus?


 
Posted : 06/10/2010 8:58 am
Posts: 78467
Full Member
 

how do you distinguish between data that someone intentionally downloaded and data that was downloaded by a virus?

Can't comment on the Old Bill's L33T hacking skills, but I'd say that's fairly straightforward. "Is there a virus" for a start.

Stuff downloaded intentionally and saved, stuff browsed and then discarded, and stuff snagged by a virus will all be different behaviour, stored in different places at different times. All it'd take to clear a name would be a file creation date where he's got an alibi.


 
Posted : 06/10/2010 8:59 am
 hora
Posts: 0
Free Member
 

Cut his cock off with a rusty spoon. He looks guilty. Enough for me.


 
Posted : 06/10/2010 8:59 am
Posts: 5185
Full Member
 

But given that it's straightforward to hide this stuff away and have an otherwise working, normal PC ([url= http://www.truecrypt.org/docs/?s=plausible-deniability ]see here[/url]) - it would be perfectly possible for the police to suspect you of wrongdoing and demand an encryption key that you don't have.

How do you prove that something hidden isn't there? How do you prove that you don't know a password rather than refuse to disclose? If police turn up with a search warrant, you can let them into your house and give them as long as they want to look through and try to find things. With this, they'll stand over you requiring you to decrypt or you face jail for non-compliance.


 
Posted : 06/10/2010 9:05 am
Posts: 1012
Free Member
 

Has everyone forgotten their tinfoil hats today?


 
Posted : 06/10/2010 9:10 am
 br
Posts: 18125
Free Member
 

I was also surprised that this is an offence, but after reading the story, it seems reasonable (in this case)

A 50 character password (assuming a 50ish sized character set) would give you (approximately) 26,500,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000
possible combinations...,

So a fair bit of work to crack, especially if they are unable to automate the process.

And lets be frank here, most that any of us do are 'hide' files from the misses.


 
Posted : 06/10/2010 9:21 am
Posts: 17846
Full Member
 

What if you genuinely had forgotten the password?

How do you prove you have forgotten something, rather than are just refusing to disclose it?


 
Posted : 06/10/2010 9:25 am
 MS
Posts: 0
Free Member
 

Genius imo! Surely the police would be able to crack the password. If they cant crack into a computer what hope is there!!


 
Posted : 06/10/2010 9:25 am
Posts: 19914
Free Member
 

For the third time, how do you tell if data was downloaded intentionally or if it was downloaded by a virus?

Well, I know smeg-all about computers, but even I can think of a couple of ways you could tell, for a start!


 
Posted : 06/10/2010 9:30 am
 hora
Posts: 0
Free Member
 

A 50 character password for a start means hes overparanoid about something isn't he?

A virus would have to download a set of web url's into the browsers immediate history, into the hardrive, add in attached pics throughout the hardrive with various dates to show/simulate a viable viewing history no?


 
Posted : 06/10/2010 9:34 am
Posts: 6990
Full Member
 

OK, let's say the authorities can without a doubt prove that you intentionally downloaded child pornography (afterall, the justice system never makes mistakes).

Let's say instead that he did have something to hide but not pornography. Let's say he has Asperger's syndrome and there is evidence on your computer that you've been hacking into US government computers looking for evidence of UFOs a la Gary McKinnon

http://en.wikipedia.org/wiki/Gary_McKinnon

If it was a choice between giving them the password and being extradited to spend the next 70 years in a US prison then I think I'd be a bit hesitant about giving up the password. I'd take the 16 weeks and the risk of being strung up from the nearest lamp post by the torch and pitchfork brigade.

It's going off on a tangent I know but what can I say, I have absolutely no faith in the UK justice system in general and specifically when it comes to computer crime and I can understand anyone who wants to protect their privacy when it comes to computers.


 
Posted : 06/10/2010 9:37 am
Posts: 0
Free Member
 

wonder if it's possible to have a "bomb key"

i.e. a correct password will unlock the computer, whereas the bomb key will nuke the harddrive?


 
Posted : 06/10/2010 9:39 am
Posts: 0
Free Member
 

He should have just thrown his computer in the bath, that's what they usually do when plod comes a knockin'.


 
Posted : 06/10/2010 9:39 am
Posts: 6754
Free Member
 

Its not impossible for a virus to make it look like someones downloaded this stuff.

There was a case recently where someone had put indecent images on someones computer to get them into trouble. It was a rubbish attempt, and he got caught, but proves there could be a motive for doing so.

Not saying whats happened here though.


 
Posted : 06/10/2010 9:40 am
 br
Posts: 18125
Free Member
 

[i]wonder if it's possible to have a "bomb key"

i.e. a correct password will unlock the computer, whereas the bomb key will nuke the harddrive? [/i]

Since the police remove the hard drive before carrying out any investigation (as just starting up the machine alters so many files), they'd probably notice the 'bomb'...


 
Posted : 06/10/2010 9:41 am
Posts: 621
Free Member
 

hora - Member
A virus would have to download a set of web url's into the browsers immediate history, into the hardrive, add in attached pics throughout the hardrive with various dates to show/simulate a viable viewing history no?

No.

PeterPoddy - Member
Well, I know smeg-all about computers, but even I can think of a couple of ways you could tell, for a start!

Such as?

BruceWee - Member

OK, let's say the authorities can without a doubt prove that you intentionally downloaded child pornography (afterall, the justice system never makes mistakes).

Let's say instead that he did have something to hide but not pornography. Let's say he has Asperger's syndrome and there is evidence on your computer that you've been hacking into US government computers looking for evidence of UFOs a la Gary McKinnon

http://en.wikipedia.org/wiki/Gary_McKinnon

If it was a choice between giving them the password and being extradited to spend the next 70 years in a US prison then I think I'd be a bit hesitant about giving up the password. I'd take the 16 weeks and the risk of being strung up from the nearest lamp post by the torch and pitchfork brigade.

It's going off on a tangent I know but what can I say, I have absolutely no faith in the UK justice system in general and specifically when it comes to computer crime and I can understand anyone who wants to protect their privacy when it comes to computers.

Yep, spot on.


 
Posted : 06/10/2010 9:42 am
Posts: 0
Free Member
 

He didn't take it to PC World did he?


 
Posted : 06/10/2010 9:45 am
Posts: 0
Free Member
 hora
Posts: 0
Free Member
 

wonder if it's possible to have a "bomb key"

I imagine Paedo's have researched/visited forums under the guise of 'I've had my bank details phished countless times and want extra security' then shared this info with each other on their own forums to find the best security means.

Or..

They could just use the dodgy rockstar argument that they were researching a book.


 
Posted : 06/10/2010 9:46 am
Posts: 19914
Free Member
 

PeterPoddy - Member
Well, I know smeg-all about computers, but even I can think of a couple of ways you could tell, for a start!

Such as?

Well, the documnets I have on my PC here are linked back to me, if I created them (Sensitive material is not necessarily downloaded at all. In fact, I know of one person who runs 2 PCs, one of which is never connected to the internet, for security reasons)

Browser history

๐Ÿ™‚


 
Posted : 06/10/2010 9:53 am
Posts: 17395
Full Member
 

I must admit this concerns me.

I have a number of files on my computer for which I have forgotten the password. I keep them there in the hope I'll find the original key. They're database, not nasties ๐Ÿ™‚

Also, at one stage I was using a remote desktop system to control a computer in Oz. All files were downloaded on to it there and there was nothing on my computer.

Assuming some basic hacking skills, what was to stop me using a remote desktop to hide encrypted nasty pics on say a neighbour's computer, and enjoy browsing them from my computer. Wouldn't he get a lovely surprise when asked for the password? So the question is how can they prove he actually put those pics there?


 
Posted : 06/10/2010 9:54 am
Posts: 0
Free Member
 

Someone else didn't put them there, he refused to give the police the password as he had dodgy stuff on his PC. What's the issue?


 
Posted : 06/10/2010 9:56 am
 hora
Posts: 0
Free Member
 

I must say the Court wouldn't have sentanced him just for not revealing it.

They would have traced his IP address to a site(s)- possibly using a trojan/trick site themselves? Also, he might have used a credit card etc to access certain sites.

Otherwise one could say 'I really can't remember as stupidly I made it too complex'.


 
Posted : 06/10/2010 10:00 am
Posts: 0
Free Member
 

as he had dodgy stuff on his PC

This assumption - that's the problem


 
Posted : 06/10/2010 10:00 am
Posts: 621
Free Member
 

PeterPoddy - Member

PeterPoddy - Member
Well, I know smeg-all about computers, but even I can think of a couple of ways you could tell, for a start!

Such as?

Well, the documnets I have on my PC here are linked back to me, if I created them (Sensitive material is not necessarily downloaded at all. In fact, I know of one person who runs 2 PCs, one of which is never connected to the internet, for security reasons)

Browser history

๐Ÿ™‚ most browsers have 'private' or 'incognito' modes now where no cache or history is kept. But, that is assuming he used the web to download, equally could have been IRC, FTP, BitTorrent or any number of protocols.

Anyway, the real point here is that just having something on your computer is not proof that it was you who put it there, same as having something on your desk at work is not proof that you put it there.

IP addresses can easily be hidden with Tor or similar, bot-clients can easily download stuff on behalf of remote users etc etc.

It would be pretty trivial to create a script which run at 2 am, set the clock to a time when victim would have been at the computer, pop up the browser, download dodgypic.jpg, set the time back to being correct then erase itself. It would appear that the files had been downloaded when the original user was present.

They would have traced his IP address to a site(s)- possibly using a trojan/trick site themselves? Also, he might have used a credit card etc to access certain sites.

Or somebody else could be using his pc (and hence IP address) as a relay


 
Posted : 06/10/2010 10:08 am
Posts: 0
Free Member
 

God, there's some really silly schoolboy dog-ate-my-homework stuff on here.

It won't be a single factor (eg that he refused to give the password) that will have been used to convict the bloke but rather a whole series of facts/information, put together for the jury to make a decision that goes beyond reasonable doubt.


 
Posted : 06/10/2010 10:11 am
Posts: 0
Free Member
 

Anyway, the real point here is that just having something on your computer is not proof that it was you who put it there, same as having something on your desk at work is not proof that you put it there.

thats not the issue here - he is not saying that stuff on his computer was put there by others, he is refusing to give his password

I don't know this law in detail but for it to stand up alongside the rest of UK law they police will have to show that he knew the password and that he was wilfully withholding it

to get the warrant in the first place they must have had reasonable grounds for suspicion.


 
Posted : 06/10/2010 10:15 am
Posts: 0
Free Member
 

Ah, I see, it's a conspiracy. The Freemason lizards planted it on his PC.


 
Posted : 06/10/2010 10:16 am
Posts: 621
Free Member
 

TandemJeremy - Member
thats not the issue here - he is not saying that stuff on his computer was put there by others, he is refusing to give his password

Yes, I phrased that post badly, what I put there was in reply to Peter who said "Well, I know smeg-all about computers, but even I can think of a couple of ways you could tell, for a start! "

TandemJeremy - Member
I don't know this law in detail but for it to stand up alongside the rest of UK law they police will have to show that he knew the password and that he was wilfully withholding it

So this law has taken away the right to silence? I think that was my original point!


 
Posted : 06/10/2010 10:26 am
 hora
Posts: 0
Free Member
 

GlitterGary - Member

๐Ÿ˜†


 
Posted : 06/10/2010 10:29 am
Posts: 621
Free Member
 

GlitterGary - Member

Ah, I see, it's a conspiracy. The Freemason lizards planted it on his PC.

No, Illuminati. Derp.


 
Posted : 06/10/2010 10:31 am
Posts: 0
Free Member
 

I suggest he be held in custody until the password is cracked.


 
Posted : 06/10/2010 10:34 am
Posts: 0
Free Member
 

Rubbish. Don't write about things you obviously know nothing about.
Searching a house recently under the authorisation of a court search warrant meant the only things I couldn't read were letters to and from the householder's solicitors, as it could be private discussions between a defendant and his legal advisor.

So, how will you know what letters are of that type, without reading them?

You'd have to have a warrant stating specifically what you are in the house to search for. You would only be allowed, by law, to search for specific things; IE if you were searching for a stolen TV, then you'd have no legal power to search in someone's underwear drawer. Granted, a computer could have details of all sorts of crimes so could easily fall under a warrant's list of things to search/take.

I suppose if you were investigating a fraud, then all sorts of pieces of paper might contain relevant information. As might a personal diary. Certainly, information not relevant to any investigation can never be revealed. Trouble is, people can't be relied upon to keep their mouths shut. And these days, far too many others can get access to sensitive and private information, it seems. Under Right To Privacy Laws, you can prevent someone having access to your personal information if you can present a strong enough case that there is a significant risk of the private nature of that information being breached. Such as medical records, information relating to a person's sexuality, etc.

What do you do, Robdob? You're not a copper are you? ๐Ÿ˜ฏ

RE this particular case; it is correct that this bloke is done for obstruction under current UK Law. He has no defence on that one. But it does open up the whole right to privacy debate once more.

Meanwhile, data protection/security software companies are doing quite well I understand...


 
Posted : 06/10/2010 11:10 am
Posts: 0
Free Member
 

ยฃTandemJeremy - Member
I don't know this law in detail but for it to stand up alongside the rest of UK law they police will have to show that he knew the password and that he was wilfully withholding it

retro
So this law has taken away the right to silence? I think that was my original point!

No - its nothing to do with his right of silence - its about allowing police to search his computer without obstruction - same as he cannot stop them from entering his house when they have a valid search warrant

Virtual or physical search - its still a search


 
Posted : 06/10/2010 11:36 am
 hora
Posts: 0
Free Member
 

Aye. If you refuse to give a specimen at the roadside you can also be charged with drink driving remember.


 
Posted : 06/10/2010 11:37 am
Posts: 5559
Free Member
 

Let's say instead that he did have something to hide but not pornography. Let's say he has Asperger's syndrome and there is evidence on your computer that you've been hacking into US government computers looking for evidence of UFOs a la Gary McKinnon

Reads more like we are talking about someone who has a sexual interest in children rather than your fanciful account [any evidence of this being true here?] about another person and another case altogether. I would protect one [McKinnon]and not the other? You comfortable with protecting an alleged child sex offender andf giving them the right to hold images and we cant check to se eif they could

Imagine instead he had a book/diary with actual pictures and he just said we could not look at it would that be ok?

as he had dodgy stuff on his PC
This assumption - that's the problem

He could have removed the doubt - which arose from his computer IP address being linked to the downloading of child porn and having sufficient evidence to get a search warrant- by simply giving the password. Instead he choose to be smeared as child sex offender and do 16 weeks in prison. Why would he choose this instead? Guilt or some sort of protest about his civil liberties?


 
Posted : 06/10/2010 11:54 am
Posts: 0
Free Member
 

To apply for a RIPA, you have to show that the request is necessary, proportionate, and directly involved to a criminal investigation. You have to show that the request involves as little collateral intrusion to other people as possible, and that it is the only way to continue the investigation. The final decision is then made by a superintendant.

If it is granted for cases like this, the person in question has to give the password or go to jail. If it is proved that the request was made erroneously or was not justifiable, then anything recovered can be inadmissible in court, or a breach of the subjects human rights, in which case he can sue the police.

The lad in question has been targeted in an investigation into child abuse images. He has not fought the decision made by the police in obtaining the RIPA; he has decided to go to jail rather than reveal what is on his PC.

RIPAs are very powerful tools, and are used sparingly. I have used them myself to identify and prosecute people for similar offences - including grooming - when there was no other means to find out who they are. Yes, they involve some invasion of privacy, but I think that's an acceptable balance when compared to child safety.


 
Posted : 06/10/2010 12:02 pm
Posts: 0
Free Member
 

Aye. If you refuse to give a specimen at the roadside you can also be charged with drink driving remember.

No you can't. You can be done for 'Failing to provide a specimen for analysis', however.

Don't ever go into Law, Hora. Please.


 
Posted : 06/10/2010 12:08 pm
Posts: 0
Free Member
 

So when he gets out of jail in 16 weeks can they ask him for the password again and send him back if he refuses? This could go on for a while....


 
Posted : 06/10/2010 12:15 pm
Posts: 0
Free Member
 

No Hora, do please go into law. I for one would like to see your brand of justice on the streets.


 
Posted : 06/10/2010 12:16 pm
Posts: 0
Free Member
 

Trouble is, right; in Law, people have to make decisions.

Hora can't even work out what forks he wants for his bike ffs. ๐Ÿ˜†


 
Posted : 06/10/2010 12:21 pm
Posts: 0
Free Member
 

So when he gets out of jail in 16 weeks can they ask him for the password again and send him back if he refuses?

Double Jeopardy is no more of course, but the police would have to find 'new and compelling evidence' in order to bring about a new prosecution. Bit difficult if they can't access the computer.

Question for the Lawyers lurking on here watching this with interest (I know you're there; I can see you):

Once he's released, does he get his computer back?


 
Posted : 06/10/2010 12:24 pm
Posts: 0
Free Member
 

Simple answer - justice with a pair of Bombers. Both problems solved.


 
Posted : 06/10/2010 12:24 pm
Page 2 / 3