the hackers guide to search and arrest - def con · 2008. 3. 18. · all arrests must be based on...
TRANSCRIPT
![Page 1: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/1.jpg)
The Hackers Guide to The Hackers Guide to Search and ArrestSearch and Arrest
by Steve Dunker J.D.by Steve Dunker J.D.
![Page 2: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/2.jpg)
I. When Can an Officer Legally I. When Can an Officer Legally ““StopStop”” an individual?an individual?
A. Voluntary StopsA. Voluntary Stops
B. Investigative StopsB. Investigative Stops
C. Administrative StopsC. Administrative Stops
D. Road BlocksD. Road Blocks
![Page 3: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/3.jpg)
Voluntary StopsVoluntary Stops
It is legal for an Officer at any time to It is legal for an Officer at any time to ““AskAsk”” a person to stop and talk.a person to stop and talk.
A person has the right to say A person has the right to say ““yesyes”” or or ““nono””..
![Page 4: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/4.jpg)
Investigative StopsInvestigative Stops
Reasonable Suspicion required.Reasonable Suspicion required.
![Page 5: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/5.jpg)
Road BlocksRoad BlocksBorder CheckpointsBorder Checkpoints
Officers can check everything coming into the Officers can check everything coming into the country.country.
Routine searches no RS or PC needed.Routine searches no RS or PC needed.
Strip Search: Reasonable suspicion requiredStrip Search: Reasonable suspicion required
Body Cavity: Probable causeBody Cavity: Probable cause
![Page 6: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/6.jpg)
Drunk Driving CheckpointsDrunk Driving Checkpoints
Checkpoints are valid if procedure is Checkpoints are valid if procedure is followed.followed.
![Page 7: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/7.jpg)
Other RoadblocksOther Roadblocks
Drivers license, registration, and Insurance Drivers license, registration, and Insurance Checkpoints: ValidCheckpoints: ValidFleeing felon Checkpoints: ValidFleeing felon Checkpoints: ValidCrime Witness Checkpoints: Valid Crime Witness Checkpoints: Valid Security Checkpoints: ValidSecurity Checkpoints: ValidWeigh Stations for trucks: ValidWeigh Stations for trucks: ValidGame Warden: ValidGame Warden: ValidAgricultural Inspection: ValidAgricultural Inspection: Valid
![Page 8: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/8.jpg)
When Can an Officer When Can an Officer Legally Arrest an Legally Arrest an
individual?individual?
![Page 9: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/9.jpg)
All Arrests must be based on All Arrests must be based on Probable Cause.Probable Cause.
Probable Cause definedProbable Cause defined: PC exists : PC exists when there are enough facts and when there are enough facts and circumstances to lead police officers, in circumstances to lead police officers, in the light of their experience, to the the light of their experience, to the reasonable belief that a person has reasonable belief that a person has committed, is committing, or is about to committed, is committing, or is about to commit a crime.commit a crime.
![Page 10: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/10.jpg)
Arrests in Public PlacesArrests in Public Places
No warrant required.No warrant required.
![Page 11: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/11.jpg)
Arrests in a personArrests in a person’’s own home.s own home.
Arrest requires a warrant or emergency Arrest requires a warrant or emergency circumstances.circumstances.
![Page 12: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/12.jpg)
SearchesSearches
When does an Officer have the When does an Officer have the legal right to conduct a legal right to conduct a ““SearchSearch”” of a Person, Auto, of a Person, Auto, or Building?or Building?
![Page 13: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/13.jpg)
““ConsentConsent”” SearchSearch
Consent Search of a person.Consent Search of a person.
Can only give consent to the search of Can only give consent to the search of yourself or your minor child. yourself or your minor child.
![Page 14: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/14.jpg)
Consent to Search PropertyConsent to Search Property
If a person has legal control over an Auto If a person has legal control over an Auto or Building they can give consent.or Building they can give consent.
![Page 15: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/15.jpg)
Who Can Give Consent?Who Can Give Consent?
LandlordLandlord: Can Not give consent to search : Can Not give consent to search tenanttenant’’s property.s property.Hotel ManagerHotel Manager: Can Not give consent to search : Can Not give consent to search tenanttenant’’s room. s room. ParentsParents: Can Give consent to search all rooms : Can Give consent to search all rooms of their home they maintain control over.of their home they maintain control over.RoommatesRoommates: Can Give consent only to common : Can Give consent only to common areas and spaces under their control.areas and spaces under their control.
![Page 16: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/16.jpg)
WarrantsWarrants
If Law Enforcement Has a Warrant you If Law Enforcement Has a Warrant you must let them Search.must let them Search.
The Police will not wait while you call your The Police will not wait while you call your lawyer.lawyer.
![Page 17: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/17.jpg)
Warrant for HomeWarrant for Home
Usually a search of a home requires a Usually a search of a home requires a Warrant Warrant
Knock and Announce Requirement Knock and Announce Requirement
![Page 18: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/18.jpg)
Plain View, Plain Smell, Plain View, Plain Smell, Plain HearPlain Hear
Officer must have legal right to be there.Officer must have legal right to be there.
Officer must use normal senses.Officer must use normal senses.
Discovery is by chance. Discovery is by chance.
![Page 19: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/19.jpg)
Emergency CircumstancesEmergency Circumstances
AskAsk: Is the evidence going to be : Is the evidence going to be destroyed, is there some type of danger, destroyed, is there some type of danger, or will the suspect avoid capture unless or will the suspect avoid capture unless the officer acts quickly?the officer acts quickly?
An Emergency Search is limited to the An Emergency Search is limited to the circumstances.circumstances.
![Page 20: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/20.jpg)
The FriskThe Frisk
A Frisk is for Weapons only.A Frisk is for Weapons only.Officer must have reasonable suspicion a Officer must have reasonable suspicion a crime is crime is ““afootafoot””..Must have reasonable suspicion that suspect Must have reasonable suspicion that suspect is armed.is armed.A A ““friskfrisk”” is a patis a pat--down Only. down Only. Any item seized must be a weapon or Any item seized must be a weapon or ““immediately apparentimmediately apparent”” it is contraband.it is contraband.
![Page 21: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/21.jpg)
““Search Incident to an ArrestSearch Incident to an Arrest””
Requires:Requires:-- Lawful arrestLawful arrest-- Search is limited to person and immediate Search is limited to person and immediate
area in control of person.area in control of person.
Cars included.Cars included.
![Page 22: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/22.jpg)
““Protective SweepsProtective Sweeps””
Officers may perform a protective sweep Officers may perform a protective sweep for other people and weapons.for other people and weapons.
![Page 23: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/23.jpg)
Intimate body Searches Intimate body Searches (Stomach, Cavity, etc.)(Stomach, Cavity, etc.)
Non surgical searches require reasonable Non surgical searches require reasonable suspicion or probable cause depending on suspicion or probable cause depending on circumstances.circumstances.
Surgical searches require probable cause.Surgical searches require probable cause.
![Page 24: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/24.jpg)
Abandoned PropertyAbandoned Property
Any property that is Any property that is ““AbandonedAbandoned”” can be can be examined and taken by the police. examined and taken by the police.
Once your trash has been taken to the Once your trash has been taken to the edge of your property it can be taken by edge of your property it can be taken by anyone, including the police.anyone, including the police.
![Page 25: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/25.jpg)
Student SearchesStudent SearchesOn High School PropertyOn High School Property
No warrant or probable cause required No warrant or probable cause required to run dog.to run dog.
Only reasonable suspicion required to Only reasonable suspicion required to search students and lockers.search students and lockers.
![Page 26: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/26.jpg)
Student SearchesStudent Searches
On College PropertyOn College Property
Warrant required to search dorm rooms Warrant required to search dorm rooms unless for safety or health reasons.unless for safety or health reasons.
![Page 27: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/27.jpg)
When and How Can An Officer When and How Can An Officer Use a Use a ““ToolTool”” to aid in his to aid in his
Search?Search?
![Page 28: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/28.jpg)
Vision Enhancers: Binoculars, Vision Enhancers: Binoculars, Night VisionNight Vision
Can only use for area in the public view Can only use for area in the public view otherwise a warrant is needed. otherwise a warrant is needed.
CanCan’’t peep into windows.t peep into windows.
![Page 29: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/29.jpg)
HiHi--Tech DevicesTech Devices
Infra RedInfra Red: Need warrant: Need warrant
XX--RayRay: Need Warrant except in safety : Need Warrant except in safety related areas with advanced notice.related areas with advanced notice.
Metal DetectorMetal Detector: Usually Consent Search : Usually Consent Search that turns into a that turns into a ‘‘FriskFrisk’’. .
![Page 30: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/30.jpg)
DogsDogs
Ask does the officer have Ask does the officer have ““rightright”” to be to be there? there?
![Page 31: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/31.jpg)
Interception of Electronic DataInterception of Electronic Data
Wire TappingWire TappingPen RegistersPen RegistersCordless PhonesCordless PhonesEmail and other Internet Email and other Internet CommunicationsCommunications
![Page 32: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/32.jpg)
Wire TappingWire Tapping
No wire tap without a warrant.No wire tap without a warrant.
Warrant for Wire tap must show:Warrant for Wire tap must show:Crime has been, is being, or is about to be Crime has been, is being, or is about to be committed.committed.The communications to be intercepted will The communications to be intercepted will contain information about the offense.contain information about the offense.The place monitored is used in the offense.The place monitored is used in the offense.
![Page 33: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/33.jpg)
Pen RegistersPen Registers
Not A Search. NO Warrant Needed. Not A Search. NO Warrant Needed.
![Page 34: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/34.jpg)
Cordless PhonesCordless Phones
It Depends on the frequency.It Depends on the frequency.
No warrant needed to intercept No warrant needed to intercept conversations from older Cordless conversations from older Cordless telephones. telephones.
![Page 35: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/35.jpg)
Email and other Internet Email and other Internet CommunicationsCommunications
Easiest Interception is via Employers.Easiest Interception is via Employers.
Employer can access their own email Employer can access their own email system.system.
Email warrants.Email warrants.
![Page 36: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/36.jpg)
The Use of The Use of ““BugsBugs”” by by Law Enforcement.Law Enforcement.
![Page 37: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/37.jpg)
On agentOn agent
Legal as long as agent has the Legal as long as agent has the ““rightright”” to to be there.be there.
![Page 38: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/38.jpg)
Bug In suspectBug In suspect’’s home or s home or businessbusiness
Warrant required. Warrant required.
![Page 39: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/39.jpg)
Bug In Police Car or Jail Cell.Bug In Police Car or Jail Cell.
Is there an Expectation of Privacy?Is there an Expectation of Privacy?
![Page 40: The Hackers Guide to Search and Arrest - DEF CON · 2008. 3. 18. · All Arrests must be based on Probable Cause. Probable Cause defined: PC exists when there are enough facts and](https://reader035.vdocuments.us/reader035/viewer/2022071213/60308cf6764d976a5b363918/html5/thumbnails/40.jpg)
Fighting Back against Illegal Fighting Back against Illegal Searches and Arrests.Searches and Arrests.
Exclusionary Rule: Exclusionary Rule: Illegally obtain Illegally obtain evidence cannot be used in court.evidence cannot be used in court.Criminal LawCriminal Law: Prosecuting the officer.: Prosecuting the officer.Rodney KingRodney KingCivil LawCivil Law: Law Suits Section 1983: Law Suits Section 1983……. . Your attorney fees are paid if you win.Your attorney fees are paid if you win.Internal AffairsInternal Affairs: Police department : Police department discipline. Time off, reduction in rank, discipline. Time off, reduction in rank, fired.fired.