Police and computers: incompetent or just unbalanced?

Written By: - Date published: 8:26 am, August 21st, 2019 - 23 comments
Categories: crime, Dirty Politics, police, Politics, Social issues - Tags: , , , , , ,

I’ve just been reading the decision by the IPCA on the botched and quite illegally obtained warrants for a search of Nicky Hager’s house and belongings, and the unwarranted searches of his accounts with various businesses.

The whole process in this investigation just stinks. It points not only to the lack of process that the IPCA, various courts and the police hierarchy say that they have identified. The police say that they have fixed or are trying to fix these in policy.

Now I think that the police have some pretty selective issues about enforcing laws. Essentially if you’re John Key or Cameron Slater or the FBI then they seem to go all out. If you aren’t so well connected, especially in technical areas of law or computers that they don’t understand so well then complaining to the police appears to be like pissing into the wind. It is probably more useful.

But to me what it clearly points to is that in many areas around technical systems and the legal structures surrounding them, the police and their 19th century structure are clearly completely out of their depth. Even worse, I suspect that they’re falling even further behind all the time

To someone who is a political blogger in the time I can spare from a long career of being a professional commercial computer programmer – this is completely unacceptable. If the acts regarded as being unlawful in legislation are either aren’t being enforced or are being enforced excessively or in a proforma way by the investigating agency – then why bother having the police doing the task? Especially when the IPCA report on the Nicky Hager case clearly shows that the police again acted in an unlawful manner.

The police simply don’t appear to be able to concentrate the skills and clear sense of purpose that are required for dealing with information, computer and network legal issues. Various NZ regional police areas seem to respond quite differently to the same crimes in this area.

It took many years after I was a student marvelling at the lack of legal protections on computer system, but eventually in New Zealand in 2002, explicit laws were put into force in our Crimes Act and Summary Offenses Acts making most ‘grey’ computer based crimes explicitly unlawful. That was nearly two decades ago, and the police appear to only get concerned about these crimes if preferred political connections make them concerning.

There are several points about this that are worth examining, if only because there are so many daft myths held dearly by some self-interested members of the the public and the strange lack of balance by the police.

  • Intrusions into computer systems, networks, and all computer storage media without permission are completely unlawful under the existing and current legislation regardless of the means.
  • If the material was clearly exposed in public by accident, then copying or accessing it is just as unlawful.
  • Conspiring to intrude into a computer system or to access networks or media by trying to encourage or pay someone to do the act is just as unlawful.
  • Receiving or using information obtained by such unlawful means is unlawful.
  • But there are a few exemptions to this. For instance :-
    • Parliament reserves the right for MPs inside the house to be able to present information for public debate regardless of source – subject only to Parliament’s standing orders and the members of parliament and the crown.
    • There are various exemptions for police and other investigative and legal bodies to use unlawfully obtained material in the investigation and prosecution of other crimes – subject to the approval of the courts as to it admissibility in court.
    • And there are various limited privileges for journalists about protecting sources and material to allow public debate and for the public good.

Now this isn’t exactly legal rocket science.

Copying information is no different legally than breaking into someone’s house and stealing documents, pictures, silverware or anything else of value. It used to be back in the dark ages of law that depriving someone of the use of an object was the the test. But over the last few hundred years, information has increasingly been seen as having value, the theft of copies effectively deprived the owner of its value.

The Police don’t appear to have caught up with the changes in the legislation over the subsequent decades. Just to take a few obvious and related examples.

A 2014 hack into Cameron Slater’s computer over the net is made as a complaint to Counties Manukau Police along with the use of the messages, documents and other information obtained by a investigative journalist Nicky Hager who wrote a book based on them. What is the response?

Suddenly there are search warrants obtained and houses raided in Wellington, requests made to banks and airlines. All chasing just one annoying hacker out of the innumerable thousands that infest our computer systems every day.

Almost all of this frantic police activity has been damned in the IPCA authority findings as simply not following what was lawful or proper for the police to do. From the way that the search warrants were requested, through to the way that they were executed, the obvious issues of handling journalistic privilege, and the insane way that police used production orders on banks, airlines, paypal and NZ Customs.

For me, the key bit of the IPCA report was this:-

  1. Mr Hager and his lawyers suggested to the Authority that the amount of resources put into the Rawshark investigation seemed disproportionate.
  2. Mr Hager noted that the Police’s investigation into Rawshark began after Mr Slater sent an email to Assistant Commissioner Malcom Burgess’ PA, complaining that he had been hacked. Mr Hager implied that this contact with a senior Police officer was designed to bring indirect political pressure to bear.
  3. On the other hand, Assistant Commissioner Burgess told the Authority he did not know why Mr Slater emailed his complaint directly to his PA. The Police have maintained that this was a serious offence and that the investigation was run like any other of this sort, apart from the fact that there was probably a bit more oversight because of the high-profile nature of it.
  4. The Authority does not have information about the competing demands upon investigative resources in the Counties Manukau District at the time and is therefore unable to make any real comparison between this and other similar cases.

The IPCA was “unable to reach any conclusion as to whether the resources devoted to the investigation were proportionate to the seriousness of the alleged offense.”

Perhaps they should have asked some of the people who’ve been of the receiving end of the Police’s responses to computer crimes, who weren’t quite so well connected to the National Party or the Police hierarchy. The police seem to be quite selective about who they perform this kind of service for. But a compare and contrast with actions against Cameron Slater’s criminal associations is enlightening.

For instance there is a remarkably similar complaint made to the Waitemata Police about the same time about a hack into Matthew Blomfield’s computer over the net that obtained emails and other material which was subsequently used in blog posts published by Cameron Slater on his commercial blog site. What is the response?

As detailed in the book Whale Oil (see http://whaleoil.co.nz ) – apparently nothing much happens. No search warrants, no production orders. At best there were just a few interviews or statements taken. To me, in a legal sense, there appears to be absolutely no difference between the facts in both of these incidents – apart from the political damage to National from their association with Cameron Slater and/or a plea directly to the Malcolm Burgess.

Sure, if you assume that Cameron Slater was a journalist or if he claims to be one, then there may be a question of privilege about using the material – just as there was for Hager. But as the IPCA report says, that isn’t something that the police need to or should decide. It is a matter for the courts about the level of qualified privilege should apply.

That is quite explicit in the legislation and is something that needs to be decided by the High Court. The police just need to do their duty. The possibility of privilege needs to be mentioned in requests for search warrants and production orders. It needs to be handled appropriately if it arises during the execution of granted search orders and production orders.

Which makes the question of quality control by the police in how they investigate computer crimes and the subsequent use of material wide open to political debate. Do the police play favourites or are they just incompetent with the legislation or how it covers computer systems?

Exactly the same questions seem to arise whenever the Police needed to look at Cameron Slater for criminal behaviour where ever you look. Every other branch of the legal system appear to be able to hold him to account. The courts pulled him up for his criminal offense in breaching court orders. The civil courts finally get him for defamation. The Privacy Commission and the Human Rights Commission eventually pull him up for breaking the Privacy Act.

For instance staying with Blomfield look at what had previously happened to Blomfield when he made a complaint in 2012 about the theft and misuse of private information stored on hard drives and documents for commercial advantage by Slater. The contents of these private documents were selectively misused and misquoted in a series of at least a hundred defamatory posts by Cameron Slater. A selection of these posts have been found to be defamatory by civil court. The use of the copied material has been deemed to be a Privacy Act violation by the Human Rights Commission.

However the actual criminal act of copying the material off computer disks has been passed over without charges by the police despite Cameron Slater stating multiple times that he’d copied from sources obtained unlawfully without their owners permission. Again there is no effective legal difference between copying material from USB drives or from live computer systems – both are unlawful criminal acts without the owners permission. Yet the police don’t appear to have made any serious commitment of resources to pursuing the equivalent of Rawshark who gave those materials to Slater.

In 2015, I made a complaint to the Counties Manukau Police about what appeared to be a conspiracy by Cameron Slater and others to pay a hacker for information obtained from my computers about this site. There were amounts mentioned and eventually enough corroborating information for me to take the step of laying a complaint.

If proved, then to conspire to or to pay someone to do an unlawful hack is a pretty serious offense. It simply doesn’t matter if the hack took place. There is a reason for that – even the threat that might have happened is very costly. It cost me most of a week of holiday time checking logs for evidence of access and looking for weak points in my systems. In other words several thousand dollars of my time. It deprived my employer of that time as well as I took an unexpected break in the crucial start of a project and was distracted for longer.

Yet despite this after the initial complaint when I made it clear that this had caused me considerable issues, the Counties Manukau Police appeared to think that this was something that I needed to know about. After a dearth of information, I got a lawyer to obtain information that charges would be laid. Yet somehow the Counties Manukau Police failed to inform me of court dates despite saying they would.

I was in Italy doing a task when I found that the Counties Manukau Police had offered both Cameron Slater and the hacker diversion, that it had already been approved by the court and that somehow it was a victimless crime. I had to fly back early to show up at court to find out what was happening and to try to prevent Cameron Slater for getting a free pass that he wasn’t eligible for because of previous convictions. I didn’t succeed. All I got was the judge telling the police that it obviously wasn’t a victimless crime.

Al I can say about Cameron Slater’s charmed life with the police is that it is a damn good thing that the legal fraternity are there. It eventually turned sour for the him. The level of protection that he had as he stomped all over the criminal law has just allowed the time for the civil and privacy laws to exert themselves. It has now created a hole big enough to be a prison.

If you’re around the computing or the activist communities, the stories are rife about how little the police are willing to do when it comes to computer crimes. They are viewed as being completely useless and extremely selective about when they do act. The only reason that anyone IT even bothers giving complaints about intrusions to the police is because it is required by insurance cover.

The police appear to be technically and legally incapable of enforcing our legislation about computer crimes. Bearing in mind just how important our computers and networks are to the economy – that is concerning. Perhaps the government should follow the example of the Serious Fraud Office and give the task of dealing with 2002 computer crimes to a specialist office who can garner the skills to deal with it – without political linkages being an issue.

23 comments on “Police and computers: incompetent or just unbalanced? ”

  • Comments are now closed

  1. Dukeofurl 1
    21 August 2019 at 9:03 am

    Who was the Police Minister at the time of Slaters email direct to the Assistant Commissioners PA ?

    Judith Collins was Minister of Police from Nov 2008 till Dec 2011. Does that time period overlap ?

    Also remember Slaters intrusion into the Labour party website , where he downloaded a backup version of database of small donors – which required technical assistance from someone [who I know the name] to reverse the formatting to make it readable

    https://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=11490084

    The details revealed in the book led to the Labour Party complaining it had been hacked, among other claims. The other matters were dismissed by police last year. The reason, in a letter from Mr Drew, was that the "only evidence being relied on was contents of Mr Hagar's (sic) book and the entities and persons named did not want to pursue any action".

    Mr Barnett – "Barnnet",[labour Party Secretary] according to police – said the police conclusions were "unbelievable". He said the party was considering further action.

    He said the effort being put into investigating Slater did not compare to the greater energy put into investigating Hager.

  2. Stuart Munro. 2
    21 August 2019 at 9:20 am

    The IPCA doesn't inspire much confidence frankly – the only thing independent about it appears to be its name. With respect to the Hager warrant, although there was clear wrongdoing in deceiving the warrant grantor, no-one has been censured or punished, from which we may take it that the IPCA is perfectly happy for the same abuse to recur.

    As with the free pass given to agencies employing Thompson & Clark, our freedoms are ignored, and our rights are not defended by the very agencies that are tasked to defend them.

    It won't do.

  3. Muttonbird 3
    21 August 2019 at 9:23 am

    I thought the take away lie line from the IPCA report, "an unwitting neglect of duty", reached a new level of cleansing absolution.

    https://www.rnz.co.nz/news/national/397070/nicky-hager-police-raid-in-2014-unwitting-neglect-of-duty-ipca

      • lprent 3.1.1
        21 August 2019 at 9:32 am

        1. When interviewing the officers involved in drafting and executing the search warrant, the Authority found they had no experience in dealing with journalistic privilege issues. The lead detective himself acknowledged he had never come across the issue of journalistic privilege before and did not know anything about it. It is therefore not surprising that he and others said that they simply acted on the legal advice they had received regarding the content of the search warrant application. The detective inspector overseeing the case told the Authority:

          “…the warrant that I did on another … address a couple of months prior, I did decide to put in the draft just two paragraphs saying we anticipated privilege would be claimed, and that’s how we would deal with it if it was claimed, and that went to legal section and the advice was to take that out. So I essentially used that as the yardstick around not putting those two paragraphs in this application.”

        2. There is no evidence that the officers prepared the warrant with the intent of deceiving the Judge about the fact that the subject was a journalist and there might be privilege issues. Although the court found they failed to fulfil their obligations, this failure in the circumstances was an unwitting neglect of duty.
        • lprent 3.1.1.1
          21 August 2019 at 9:37 am

          This is why I think that the police just ain't that good at certain areas of the law.

          Each case needs to be treated separately. But if it was probably a journo for the first one – I'd love to know why anyone legal would take the section out. Because the judge would want to know more? Or would restrict the use of the warrant?

          In the case of Hager or for that matter most computer crimes – Painting by numbers without understanding why is just a way to get a legal mess.

          • Muttonbird 3.1.1.1.1
            21 August 2019 at 11:38 am

            Yes, from your quoted section 10, the question then is why did the 'legal section' ask for reference to anticipated journalistic privilege issues to be removed.

            Seems clear this is deliberately withhold information from the judge. Although should a good judge be across who Nicky Hager is in a warrant put in front of him/her?

            I take it the 'legal section' is not within the terms of reference of the IPCA report, or even under the scope of the IPCA at all.

            • lprent 3.1.1.1.1.1
              21 August 2019 at 4:35 pm

              From what was in the report, that would appear to be correct. Certainly that was what the IPCA said without the 'deliberately' part. I think that the ex-judge was somewhat generous.

              Pretty much everything else spirals out of that. The police and support staff doing the searches appear to have been considerably under-trained. For instance from what I understand from material outside of this report, they were totally unprepared. As Nicky Hager wasn't present he couldn't claim privilege, but he could also not be forced to disclose access keys. So the police shutdown running computers were shutdown to their encrypted state.

              I mean, who doesn't naturally heavily encrypt sensitive systems these days? Usually with several layers of encryption.

              Why did the police think that they could seize computers for information without the keys? So ignorant… It sounds like the only thing that they were able to derive information from was the daughters computer and whatever was on paper.

  4. Anne 4
    21 August 2019 at 9:55 am

    If you’re around the computing or the activist communities, the stories are rife about how little the police are willing to do when it comes to computer crimes. They are viewed as being completely useless and extremely selective about when they do act.

    In doesn't just apply to computer crimes, but other crimes which have a political element to them. Years ago I reported a series of crimes committed against me over a long period of time. I approached the police on at least five occasions and they did not lift a finger to investigate. Consequently the main perpetrator (whose identity I was eventually able to establish but with no help from the police) got clean away with the crimes.

    Like Slater, this person had contacts in high places including National Party circles. I don't know if the bias towards National is still the case, but the poor police treatment of complainants who were perceived to belong to the Left side of the political equation has been a national disgrace for many decades.

    • Peter Christchurch NZ 4.1
      21 August 2019 at 10:30 am

      But I do wonder Anne if your experience is just a reflection of a wider Police unwillingness or even inability to do their job? For example, a year ago waiting at the lights, a drunken thug went down the line and kicked each car door in. It was caught on CCTV. We make a Police complaint (2 hours of teeth pulling), only to get a letter a month later saying they were too busy to investigate.

      Yesterdays Press headline has similar lack of interest by the Police in doing their job.

      https://www.stuff.co.nz/opinion/115100035/when-police-fail-to-act-over-a-nearby-drug-house

      My partner received the same disinterest regarding a house selling sin and P, blatently and openly so. So many articles, so many friends and work colleagues report similar. And when you combine that with their Keystone Cops antics in how many guns are stolen from Police Stations, their appalling record keeping, fudging of crime stats etc, I for one would never again waste my time reporting a crime.

      • Anne 4.1.1
        21 August 2019 at 10:46 am

        Yes, Peter. I agree with all you've said.

        It is definitely "a reflection of a wider police unwillingness or even inability to do their job." But when you add to that a prejudice against left leaning complainants (or at least those whom the police perceive as such) then you have a serious in-balance in police responses. Look at the way they went for Hagar after he published his book and yet left Slater completely alone. An example of a relatively recent national disgrace.

        I, too, would not bother wasting time reporting a crime.

        • Peter Christchurh nz 4.1.1.1
          21 August 2019 at 11:24 am

          Yes that slime ball Slater seemed to be untouchable. I wonder why?

          And the Police showed their true sympathies way back with the Springbok tour. A long time ago, but institutional culture tends to change slowly.

        • Anne 4.1.1.2
          21 August 2019 at 3:32 pm

          Oops… my comment at 4.1.1 should read serious imbalance – not in-balance. 🙄

    • New view 4.2
      22 August 2019 at 7:56 am

      I’m inclined to agree. Computers and police come to mind when I think of the proposed firearms register. Commercially computers came on the scene in the late 1970s. Around that time I attained my license so was interested when a discussion at the time dismissed the idea of registering the gun in favour the person. I couldn’t understand the decision then, as to me it was the perfect opportunity to deal with the problem while the problem was small. The rest is history and our police have come across as dopey and incompetent for a good part of it.

  5. cleangreen 5
    21 August 2019 at 1:53 pm

    Anne Tolley is known in Gisborne as "no show tolley"

    When she was a NCC deputy Mayor 1999 to 2002 she did nothing for our Napier People at all.

    Tolley;= useless as tits on a bull.

  6. Blazer 6
    21 August 2019 at 8:25 pm

    there is no corruption in NZ…even Transparency International will confirm that!

  7. SHG 7
    22 August 2019 at 1:57 am

    Minister of Police, this year: Stuart Nash, Labour

    Minister of Police, last year: Stuart Nash, Labour

    Minister of Police, year before that: Stuart Nash, Labour

    punchline not needed

  8. Jum 8
    22 August 2019 at 4:43 pm

    Suggesting Cameron Slater was a journalist is suggesting John Key enhanced the office of Prime Minister. Both would be an insult to New Zealanders' integrity.

The server will be getting hardware changes this evening starting at 10pm NZDT.
The site will be off line for some hours.