Cop warrant orders Ring to cough up footage from inside this guy's home
(2023/03/09)
- Reference: 1678318209
- News link: https://www.theregister.co.uk/2023/03/08/police_ring_privacy/
- Source link:
Last year, around the Thanksgiving holiday, Ohio businessman Michael Larkin received a request for video from his Amazon Ring security system from Hamilton city police.
He complied, providing video from his doorbell camera that was stored on Ring's servers. After balking at further demands, he subsequently learned that authorities had bypassed the need to get his consent by presenting Ring with a search warrant for video from several of his Ring cameras, including one that covered an indoor area of his home.
According to [1]Politico , Larkin received a notice from Ring that the tech biz had received a warrant and was required to turn over video from numerous cameras, without giving the owner with any say in the matter.
[2]
The police reportedly sought neighborhood surveillance as part of a drug investigation in the US city. Larkin's video-enabled Ring doorbell and other recording devices, they believed, might have captured information that would be helpful with their investigation.
[3]
[4]
The City of Hamilton Police Department did not respond to requests seeking comment about the scope of its search warrant.
Larkin evidently did not end up providing any video from inside his home because that particular camera was disconnected during the period covered under the warrant.
[5]
But the incident has renewed concern among privacy advocates and lawmakers that Ring allows police to outsource surveillance in a way that evades oversight, diminishes the public's privacy protections, and deprives product owners of the ability to make decisions about the video their devices have captured.
[6]Amazon gave Ring video to cops without consent or warrant 11 times so far in 2022
[7]Amazon expands end-to-end video encryption to battery-powered Ring devices
[8]Judge in UK rules Amazon Ring doorbell audio recordings breach data protection laws
[9]Amazon has repackaged surveillance capitalism as reality TV
Many of these concerns were articulated in a New York University School of Law research [10]paper [PDF] published last May. The paper explains, "Ring is one part of a growing, largely unregulated, market for 'lateral surveillance' – private individuals surveilling one another. Police increasingly are leveraging privately-owned surveillance devices, from internet-connected cameras to automated license plate readers. Lateral surveillance may at times have security benefits, but it also has real costs, as this report endeavors to make clear."
Ring makes several home security products that record video and store the files remotely on corporate servers. For the past several years, privacy groups and lawmakers have challenged how the company handles customers' surveillance video, which gets stored up to [11]60 days by default in the US , or up to 180 days at most, absent legal orders to the contrary.
According to Ring's most recent [12]transparency report [PDF], the company received 1,939 search warrants during the second half of 2022, along with 281 subpoenas, six court orders, 18 non-US information requests, and 2,031 requests to preserve data. The company says it notified users in response to 691 information requests, stating that it does so unless prohibited or presented with a clear indication of illegal conduct.
Ring also may skip notifications to owners when there's an emergency. In [13]response [PDF] to an inquiry last year from Sen. Ed Markey (D-MA), Ring revealed that it shared user recordings without any notice to customers 11 times in 2022, per its policy on exigent or emergency requests.
[14]
A Ring spokesperson told The Register , "Ring carefully reviews every search warrant and other legal process we receive when determining how to respond. We do not disclose customer information in response to government demands, such as a search warrant, unless we’re legally required to comply."
"Our response depends on the information requested and whether we have that information. We review all legal documents served on us, and if we have reason to believe that a demand is overbroad, we question the request and may ask law enforcement to suggest a more limited production of information."
Ring's spokesperson also said that the company implemented end-to-end encryption on nearly all of its devices in January 2021. So in theory Larkin could have denied Ring's ability to hand his video to police if he activated encryption.
However, as the Electronic Frontier Foundation [15]has observed , customers have to choose to encrypt their stored surveillance footage because encryption is not enabled by default.
The Register asked Ring whether anyone could cite any example of being unable to respond to a warrant because a customer had encrypted the data, and what percentage of customers activate encryption. Ring's spokesperson said, "I don't have that for you." ®
Get our [16]Tech Resources
[1] https://www.politico.com/news/2023/03/07/privacy-loophole-ring-doorbell-00084979
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/07/14/amazon_gave_police_unauthorized_doorbell/
[7] https://www.theregister.com/2022/09/07/amazon_video_e2ee_ring/
[8] https://www.theregister.com/2021/10/13/amazon_ring_audio_recording_data_protection/
[9] https://www.theregister.com/2022/08/24/amazon_ring_surveillance/
[10] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4115066
[11] https://support.ring.com/hc/en-us/articles/360047871752-Understanding-and-Adjusting-Your-Video-Storage-Time-
[12] https://assets.ctfassets.net/a3peezndovsu/2vTt1EO8SG5rM7eMRyZVn7/defd91d59f95904f075294fea731d61c/Ring_Information_Request_Report_H2_2022.pdf
[13] https://www.markey.senate.gov/imo/media/doc/amazon_response_to_senator_markey-july_13_2022.pdf
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.eff.org/deeplinks/2021/02/amazon-rings-end-end-encryption-what-it-means
[16] https://whitepapers.theregister.com/
He complied, providing video from his doorbell camera that was stored on Ring's servers. After balking at further demands, he subsequently learned that authorities had bypassed the need to get his consent by presenting Ring with a search warrant for video from several of his Ring cameras, including one that covered an indoor area of his home.
According to [1]Politico , Larkin received a notice from Ring that the tech biz had received a warrant and was required to turn over video from numerous cameras, without giving the owner with any say in the matter.
[2]
The police reportedly sought neighborhood surveillance as part of a drug investigation in the US city. Larkin's video-enabled Ring doorbell and other recording devices, they believed, might have captured information that would be helpful with their investigation.
[3]
[4]
The City of Hamilton Police Department did not respond to requests seeking comment about the scope of its search warrant.
Larkin evidently did not end up providing any video from inside his home because that particular camera was disconnected during the period covered under the warrant.
[5]
But the incident has renewed concern among privacy advocates and lawmakers that Ring allows police to outsource surveillance in a way that evades oversight, diminishes the public's privacy protections, and deprives product owners of the ability to make decisions about the video their devices have captured.
[6]Amazon gave Ring video to cops without consent or warrant 11 times so far in 2022
[7]Amazon expands end-to-end video encryption to battery-powered Ring devices
[8]Judge in UK rules Amazon Ring doorbell audio recordings breach data protection laws
[9]Amazon has repackaged surveillance capitalism as reality TV
Many of these concerns were articulated in a New York University School of Law research [10]paper [PDF] published last May. The paper explains, "Ring is one part of a growing, largely unregulated, market for 'lateral surveillance' – private individuals surveilling one another. Police increasingly are leveraging privately-owned surveillance devices, from internet-connected cameras to automated license plate readers. Lateral surveillance may at times have security benefits, but it also has real costs, as this report endeavors to make clear."
Ring makes several home security products that record video and store the files remotely on corporate servers. For the past several years, privacy groups and lawmakers have challenged how the company handles customers' surveillance video, which gets stored up to [11]60 days by default in the US , or up to 180 days at most, absent legal orders to the contrary.
According to Ring's most recent [12]transparency report [PDF], the company received 1,939 search warrants during the second half of 2022, along with 281 subpoenas, six court orders, 18 non-US information requests, and 2,031 requests to preserve data. The company says it notified users in response to 691 information requests, stating that it does so unless prohibited or presented with a clear indication of illegal conduct.
Ring also may skip notifications to owners when there's an emergency. In [13]response [PDF] to an inquiry last year from Sen. Ed Markey (D-MA), Ring revealed that it shared user recordings without any notice to customers 11 times in 2022, per its policy on exigent or emergency requests.
[14]
A Ring spokesperson told The Register , "Ring carefully reviews every search warrant and other legal process we receive when determining how to respond. We do not disclose customer information in response to government demands, such as a search warrant, unless we’re legally required to comply."
"Our response depends on the information requested and whether we have that information. We review all legal documents served on us, and if we have reason to believe that a demand is overbroad, we question the request and may ask law enforcement to suggest a more limited production of information."
Ring's spokesperson also said that the company implemented end-to-end encryption on nearly all of its devices in January 2021. So in theory Larkin could have denied Ring's ability to hand his video to police if he activated encryption.
However, as the Electronic Frontier Foundation [15]has observed , customers have to choose to encrypt their stored surveillance footage because encryption is not enabled by default.
The Register asked Ring whether anyone could cite any example of being unable to respond to a warrant because a customer had encrypted the data, and what percentage of customers activate encryption. Ring's spokesperson said, "I don't have that for you." ®
Get our [16]Tech Resources
[1] https://www.politico.com/news/2023/03/07/privacy-loophole-ring-doorbell-00084979
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/07/14/amazon_gave_police_unauthorized_doorbell/
[7] https://www.theregister.com/2022/09/07/amazon_video_e2ee_ring/
[8] https://www.theregister.com/2021/10/13/amazon_ring_audio_recording_data_protection/
[9] https://www.theregister.com/2022/08/24/amazon_ring_surveillance/
[10] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4115066
[11] https://support.ring.com/hc/en-us/articles/360047871752-Understanding-and-Adjusting-Your-Video-Storage-Time-
[12] https://assets.ctfassets.net/a3peezndovsu/2vTt1EO8SG5rM7eMRyZVn7/defd91d59f95904f075294fea731d61c/Ring_Information_Request_Report_H2_2022.pdf
[13] https://www.markey.senate.gov/imo/media/doc/amazon_response_to_senator_markey-july_13_2022.pdf
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZAln@M6dACbAZ7ffUfuO8AAAANQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.eff.org/deeplinks/2021/02/amazon-rings-end-end-encryption-what-it-means
[16] https://whitepapers.theregister.com/
Re: Meanwhile in London
b0llchit
It doesn't surprise me that people are actually this stupid. They bug themselves, have less privacy and as a result less security.
Nobody remembers the Stasi any more, sigh.
What an absolute shocker
sev.monster
Next you'll tell me that pigs fly.
[1]Oh dear.
[1] https://i1.wp.com/australianaviation.com.au/wp-content/uploads/2014/12/POLAIR7_30_NOV_2014_NSWPOLICE.jpg
Home-brew to the rescue?
Shooter
https://www.vice.com/en/article/bvm5p8/users-are-building-their-own-ai-powered-alternatives-to-amazons-ring-cameras
And not just watching you.
Dimmer
Honeywell
“ Earn rewards. Protect the energy grid. All in one sign up.”
“
When you connect your smart thermostat with your utility's Demand Response program, you could receive incentives like a gift card or an annual credit on your bill. In return, your utility may make minor adjustments during times of peak energy use. You likely won't notice the difference, while your neighborhood benefits from a stronger energy grid.”
For those that signed up, “ You likely won't notice the difference”
translates to “Freeze your a$$ off” and regardless of promises, you cannot override it.
All for:
“
Save with Re###
With your Total Connect Comfort App
Get a $25 bill credit for joining Degrees of Difference, a free and easy way to help reduce energy demand in your neighborhood.”
Suspect behavior
yetanotheraoc
"that particular camera was disconnected during the period covered under the warrant."
Guilty right there! I wish I were joking. Now he is under perpetual surveillance until they have enough evidence to charge him with whatever. Enabled encryption? Only guilty people would do that. Never bought a Ring camera? Definitely on the suspect list.
Meanwhile in London
In a trial project in collaboration with University College London, the Metropolitan Police are offering free video doorbells.