SoylentNews is people
SoylentNews
Police in a small suburban town of 50,000 people just outside Minneapolis, Minnesota, have won a court order requiring Google to determine who has used its search engine to look up the name of a local financial fraud victim.
The court order demanding such a massive search is perhaps the most expansive one we've seen unconnected to the US national security apparatus and, if carried out, could set an Orwellian precedent in a bid by the Edina Police Department to solve a wire-fraud crime worth less than $30,000.
Investigators are focusing their probe on an online photo of someone with the same name of a local financial fraud victim. The image turned up on a fake passport used to trick a credit union to fraudulently transfer $28,500 out of an Edina man's account, police said. The bogus passport was faxed to the credit union using a spoofed phone number to mimic the victim's phone, according to the warrant application. (To protect the victim's privacy, Ars is not publishing his name that was listed throughout the warrant signed February 1 by Hennepin County Senior Judge Gary Larson.)
The warrant demands Google to help police determine who searched for variations of the victim's name between December 1 of last year through January 7, 2017. A Google search, the warrant application says, reveals the photo used on the bogus passport. The image was not rendered on Yahoo or Bing, according to the documents. The warrant commands Google to divulge "any/all user or subscriber information"—including e-mail addresses, payment information, MAC addresses, social security numbers, dates of birth, and IP addresses—of anybody who conducted a search for the victim's name.
Source: ArsTechnica
(Score: 2) by urza9814 on Wednesday March 22 2017, @06:44PM (2 children)
No, they're asking ONE photo processor (Google) who they ALREADY KNOW is in possession of the photo they're looking for (or at least one that's very similar).
Google is not a fucking public utility. It is not public infrastructure. It is not a city. It is ONE BUSINESS. One made of almost pure distilled evil, but a single business nonetheless.
People like you are why the Internet as we know it is dying. People who don't see the difference between building a website and building a Facebook or Google page. THIS is the difference. If it's just a page on someone else's platform, YOU DON'T OWN IT. You don't own your profile, you don't own your searches, you don't own your inbox, you don't own anything. Google does. And they can do damn near anything they want with it.
(Score: 2) by hemocyanin on Thursday March 23 2017, @02:54AM (1 child)
The question you aren't asking, is should the be able to do anything they damn well want? This is a matter of law, not technology. Anyway, if you had read my posts, you would know that I'm keenly aware of the third party doctrine, and, you may not realize it, but if you are building your website on a shared host, VPS, some cloud service, whatever, that too probably falls prey to the third party doctrine because you don't actually own the hardware.
(Score: 2) by urza9814 on Thursday March 23 2017, @02:39PM
I did ask that question, the answer is absolutely not, but this isn't "anything they damn well want." They certainly should be able to hand over their own information about their own servers in response to a lawfully approved request as part of a legitimate investigation.
They perhaps shouldn't be able to sell that information to anyone who wants it...but they already do that. I don't see why police officers with a warrant should be more restricted than Snakeoil & Scumbag LTD.
Yeah, that's why my servers are in my living room. My hardware on my property using my connectivity.
But I'm not sure you're *entirely* correct either -- A VPS I would actually expect could be treated the same as hardware that you own. You pay for exclusive access to that "machine", much like how your apartment is considered your property when it comes to police searches, even though it's technically owned by your landlord. Might depend on the details of the contract though.