Harris Corp. Misled The FCC To Receive Approval For Stingray Use

[Mike]

Harris Corporation's Stingray cell tower spoofers are swiftly becoming synonymous with government lying. The FBI has specifically instructed law enforcement agencies to lie about the use of these products, which basically puts the agencies in the position of lying to courts when producing evidence or securing warrants.

Law enforcement agencies would probably lie anyway, even without the federal government's nudge. Many chose to read the restrictive non-disclosure agreements Harris includes as meaning they should withhold this information from local courts -- rather than simply seal the documents or redact them.

So, it comes as no surprise that the web of lies also includes lying to other federal agencies. The lies originate from Harris itself.

New documents obtained by the ACLU of Northern California appear to show the Florida-based Harris Corporation misleading the Federal Communications Commission while seeking authorization to sell its line of Stingray cell phone surveillance gear to state and local police. The documents raise the possibility that federal regulatory approval of the technology was based on bad information.

Harris says its devices are FCC-approved, but what it doesn't specify is the very limited approval it has actually received. An email from a Harris representative to FCC employees [pdf link] contains the following paragraph.

Just want to make you aware of the question below we received regarding the application for the Sting Fish. I know many of these questions are generated automatically but it sounds as if there is some confusion about the purpose of the equipment authorization application. As you may recall, the purpose is only to provide state/local law enforcement officials with authority to utilize this equipment in emergency situations.

As the ACLU points out, Stingray (or "Sting Fish") usage had long since surpassed the "emergency use only" restriction -- if that ever existed at all. Routine investigations utilize these devices all the time. Just one of several examples: when the Tallahassee police department's use of Stingrays came to light, the court noted that it had deployed the technology (without a warrant) more than 200 times, with less than 30% of the deployments being for department-labelled "emergencies."

Law enforcement agencies are secretly acquiring and deploying these devices in violation of the limited FCC approval, and have been doing so for years -- well ahead of this 2010 statement. And Harris is telling them that it's OK. The ACLU has written a letter to FCC chairman Tom Wheeler [pdf link] asking him open an investigation into the use of Stingray devices. If Wheeler obliges, the FCC is going to face a united front of zipped lips. The FBI already locks the Dept. of Justice out of its investigations. There's no chance it's going to be more obliging of a tangentially-related federal agency.

Originally Published: Tue, 23 Sep 2014 10:57:00 GMT
source

[Mike]

We know the FBI doesn't want anyone talking about Stingray cellphone snooping systems. Local law enforcement officials aren't exactly forthcoming about this information either, citing either non-disclosure agreements or the US government itself as justifications for extensive cover-ups. Now, the FCC -- which has been sort of on the sideline during these non-discussions -- has waded into it, releasing a statement that directly contradicts a document released by the Tacoma Police regarding its use of Stingray devices.

Last month, Muckrock posted a heavily-redacted (everything but the two opening paragraphs) document it obtained from the Tacoma Police Department. In it, FBI Special Agent Laura Laughlin justified all the black ink that followed by name-dropping the FCC (the same agency Harris misled in order to have its devices approved). [pdf link]

We have been advised by Harris Corporation of the Tacoma Police Department's request for acquisition of certain wireless collection equipment/technology manufactured by Harris Corporation. Consistent with the conditions on the equipment authorization granted to Harris Corporation by the Federal Communications Commission (FCC), state and local law enforcement agencies must coordinate with the Federal Bureau of Investigation (FBI) to complete this non-disclosure agreement prior to the acquisition and use of the equipment/technology authorized by the FCC authorization.

The FCC is now saying that this is the first it's heard of being part of the Stingray secrecy process.

We do not require that state and local law enforcement agencies have to complete one or more non-disclosure agreements with the Federal Bureau of Investigation prior to acquisition and/or use of the authorized equipment. We have no documents responsive to your request.

But that's not entirely true. There is a requirement that almost exactly matches up with Agent Laughlin's claims -- one that Harris specifically requested and that the FCC granted.

As early as May 2010, Harris Corporation asked that the FCC put restrictions on law enforcement acquisition of its StingRay trackers, documents released to MuckRock by the FCC in response to another FOIA request show. Emails obtained by the ACLU of Northern California indicate that Harris made its request for licensing restrictions based on concerns from the FBI “over the proliferation of surreptitious law enforcement surveillance equipment.”

Here's the request:

To further support its request for confidentiality, Harris underscores the need for confidentiality by requesting that the Commission condition the Harris license applications as outlined below to prevent and address concerns regarding the proliferation of surreptitious law enforcement surveillance equipment:

(1) The marketing and sale of these devices shall be limited to federal/state/local public safety and law enforcement officials only; and,
(2) State and local law enforcement agencies must advance coordinate with the FBI the acquisition and use of the equipment authorized under this authorization.

This request was granted by the FCC in 2012.

There are only slight differences in what's being said by Laughlin and what was actually granted. The FCC requires (at Harris' request) that local law enforcement coordinate with the FBI before purchase and use of Stingray devices. Laughlin's statement appears to indicate that the FCC requires the signing of an NDA, but that appears to be the FBI's own inserted stipulation. Nothing explicitly states that the lack of an NDA means no Stingray purchase, at least not as far as the FCC is concerned. But it may keep law enforcement agencies from getting the FBI's go-ahead.

So, is the FCC the "good guy" in this Stingray mess? Probably not, or at least not as blameless as it would first appear. Chris Soghoian, the ACLU's principal technologist, points out that the FCC has actively pushed surveillance policies. Even if it hasn't in this case, it's quite obviously deferring to the FBI in this matter, basically stating (when you add the denial and subtract the granted stipulation), "Go ask your father the FBI." The FCC can't necessarily demand an NDA be signed before obtaining a cell tower spoofer, but it can make law enforcement route their requests through another government agency.

Originally Published: Fri, 10 Oct 2014 20:33:48 GMT
source