this post was submitted on 27 Mar 2024
181 points (88.8% liked)

News

32520 readers
2772 users here now

Welcome to the News community!

Rules:

1. Be civil


Attack the argument, not the person. No racism/sexism/bigotry. Good faith argumentation only. This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban. Do not respond to rule-breaking content; report it and move on.


2. All posts should contain a source (url) that is as reliable and unbiased as possible and must only contain one link.


Obvious right or left wing sources will be removed at the mods discretion. Supporting links can be added in comments or posted seperately but not to the post body.


3. No bots, spam or self-promotion.


Only approved bots, which follow the guidelines for bots set by the instance, are allowed.


4. Post titles should be the same as the article used as source.


Posts which titles don’t match the source won’t be removed, but the autoMod will notify you, and if your title misrepresents the original article, the post will be deleted. If the site changed their headline, the bot might still contact you, just ignore it, we won’t delete your post.


5. Only recent news is allowed.


Posts must be news from the most recent 30 days.


6. All posts must be news articles.


No opinion pieces, Listicles, editorials or celebrity gossip is allowed. All posts will be judged on a case-by-case basis.


7. No duplicate posts.


If a source you used was already posted by someone else, the autoMod will leave a message. Please remove your post if the autoMod is correct. If the post that matches your post is very old, we refer you to rule 5.


8. Misinformation is prohibited.


Misinformation / propaganda is strictly prohibited. Any comment or post containing or linking to misinformation will be removed. If you feel that your post has been removed in error, credible sources must be provided.


9. No link shorteners.


The auto mod will contact you if a link shortener is detected, please delete your post if they are right.


10. Don't copy entire article in your post body


For copyright reasons, you are not allowed to copy an entire article into your post body. This is an instance wide rule, that is strictly enforced in this community.

founded 2 years ago
MODERATORS
 

When President Joe Biden said “journalism is not a crime” last April, federal prosecutors in Tampa, Florida, apparently took that as a challenge. Not a crime yet.

The next month, FBI agents raided the home of journalist Tim Burke. He is scheduled to be arraigned in the coming weeks under the Computer Fraud and Abuse Act (CFAA) and wiretap laws for finding and disseminating unaired Fox News footage of Kanye West’s antisemitic rant to Tucker Carlson. The indictment doesn’t accuse Burke of hacking or deceit. Instead, its theory is that he didn’t have permission to access the video, even though it was at a public, unencrypted URL that he found using publicly posted demo credentials.

But finding things that the powerful don’t want found is essentially the definition of investigative journalism—which, as Biden said, is not criminal in this country.

A recent court filing heightens concerns about whether prosecutors hid from the judge who authorized the raid that Burke was a journalist. By doing so, they may have avoided scrutiny of whether their investigation—and eventual indictment—of Burke complied with the First Amendment, federal law, and the Department of Justice’s own policies.

Archived at https://web.archive.org/web/20240327115632/https://slate.com/news-and-politics/2024/03/joe-biden-doj-journalist-tim-burke-arraignment.html

all 35 comments
sorted by: hot top controversial new old
[–] mozz@mbin.grits.dev 41 points 2 years ago* (last edited 2 years ago) (5 children)

This article is weird. It spends a long long time hand-wringing over whether Tim Burke is a journalist, while not at all explaining whether he committed a crime.

Whether he did is slightly muddled -- it sounds like he used a username and password he didn't have permission to use, to log in to a web site, which sounds illegal (whether or not he's a journalist), which would make this whole article an exercise in creating a narrative that didn't happen to drive clicks. But, the credentials were sloppily exposed by a third party and were "demo credentials" in the first place, and the URLs that it gave him when he authenticated himself maybe weren't themselves password protected. So maybe there's some wiggle room. But I thought everyone prosecution and defense was in agreement that he used credentials that weren't his to log in to the web site to get the links to the videos in the first place (albeit in pursuit of a noble goal, embarrassing Fox News by airing something true about them.) I don't think being a journalist enters into it.

From a little bit better article:

According to Burke, the video of Carlson’s interview with Ye was streamed via a publicly available, unencrypted URL that anyone could access by typing the address into your browser. Those URLs were not listed in any search engine, but Burke says that a source pointed him to a website on the Internet Archive where a radio station had posted “demo credentials” that gave access to a page where the URLs were listed.

The credentials were for a webpage created by LiveU, a company that provides video streaming services to broadcasters. Using the demo username and password, Burke logged into the website, and, Burke’s lawyer claims, the list of URLs for video streams automatically downloaded to his computer.

And that, the government says, is a crime. It charges Burke with violating the CFAA’s prohibition on intentionally accessing a computer “without authorization” because he accessed the LiveU website and URLs without having been authorized by Fox or LiveU. In other words, because Burke didn’t ask Fox or LiveU for permission to use the demo account or view the URLs, the indictment alleges, he acted without authorization.

[–] CaptainSpaceman@lemmy.world 11 points 2 years ago (1 children)

Using a harvested demo account to log in to a service you dont have permission to access, WCGW?

[–] mozz@mbin.grits.dev 11 points 2 years ago* (last edited 2 years ago) (1 children)

Yeah. If we can say it's relevant when their videos got stolen that the video distribution site had very poor OPSEC, I think we can say it's relevant when he gets prosecuted that this guy had pretty poor journalistic OPSEC.

Use Tor. Download videos. Hey buddy where'd you get the videos? From a source, a journalistic source I'm not divulging, GFY, if you think something bad happened then prove it.

(I'm sitting in judgment when I don't really know; for all I know he did everything right and his lawyer decided that this would be the best tack to take to defend the case, just to lay out what happened and argue that it wasn't a crime.)

[–] Witchfire@lemmy.world 11 points 2 years ago* (last edited 2 years ago)

To me it sounds like they should be going after LiveU for not properly securing their videos, and going after the journalist is retribution. But that would also require the government to acknowledge that their own security isn't a joke.

(It would also require them to stop supporting fascists, which America is seemingly unable to do)

[–] ryathal@sh.itjust.works 6 points 2 years ago

There's no discussion about if it's a crime, because according to the law it's 100% a crime. The law is extremely broad and doesn't really take into account how computers work. It doesn't matter if there were access controls or not, if you access something that the owner hasn't given you explicit authorization to access, then it's a crime under the CFAA.

This is the same law Aaron Swartz was facing trial for before his suicide. In his case he had legitimate credentials, but used them in an unauthorized way. Also Andrew "weev" Auernheimer, who just changed a number in a url to access other people's information.

[–] Buelldozer@lemmy.today 4 points 2 years ago (2 children)

This law has been out there for decades now and It's never mattered HOW you came into possession of credentials, only whether or not you have permission to access the system that they unlock.

If he used those credentials to get into a system he wasn't authorized to use then its a crime. If the video's were publicly available, even unintentionally, then he should be clear on those charges but that doesn't change the first part.

Unauthorized access to computer and information systems is still a crime punishable under the law. Kevin Mitnick was being prosecuted for this clear back in the 1980s.

IF the guy accessed the system, irrespective of the videos, then this is another case of a Journalist either being ignorant of the law or ignoring it because they believe the law doesn't apply to them.

[–] ysjet@lemmy.world 4 points 2 years ago (1 children)

I think the key here is of they were truly a demo username/password. If they were, there's an expectation of use there.

[–] Buelldozer@lemmy.today 2 points 2 years ago (1 children)

I think the key here is of they were truly a demo username/password.

Again, it doesn't matter HOW you came into possession of the credentials. What matters is your authorization to access the system they unlock. It's really that simple.

[–] ysjet@lemmy.world 2 points 2 years ago

You misunderstand- om saying that depending on what kind of demo account is it, he might have been authorized to view the demo.

It depends on who the demo was intended for.

[–] tastysnacks@programming.dev 1 points 2 years ago

it's weird how computers have an expectation of privacy

And that, the government says, is a crime. It charges Burke with violating the CFAA’s prohibition on intentionally accessing a computer “without authorization” because he accessed the LiveU website and URLs without having been authorized by Fox or LiveU. In other words, because Burke didn’t ask Fox or LiveU for permission to use the demo account or view the URLs, the indictment alleges, he acted without authorization.

Yeah thats BS.

[–] OldWoodFrame@lemm.ee 3 points 2 years ago

Same thought I had. Journalism seems entirely unrelated to the situation. From my reading of the facts, I don't think criminal prosecution is warranted, but it's not some 1st amendment violation it's just a too-vague law.

[–] some_guy@lemmy.sdf.org 38 points 2 years ago (1 children)
[–] mozz@mbin.grits.dev 10 points 2 years ago (1 children)
[–] AngryishHumanoid@lemmy.world 6 points 2 years ago (5 children)

Honestly I'm all for freedom of the press bit there's a lot of nuance here as to whether what he did was legal... He didn't explicitly have permission to access what he accessed so it's definitely a gray area which is exactly what the courts are supposed to decide.

[–] forrgott@lemm.ee 15 points 2 years ago (1 children)

Nuance? Yeah, no. Fox published it to a publicly accessible URL. Permission is irrelevant. Nothing more than a large corporation manipulating the system to cover their ass.

[–] ryathal@sh.itjust.works 2 points 2 years ago

This is pretty standard for the government going after people with the CFAA. It doesn't matter if it was publicly accessible to the law, it only matters if he had actual permission, just because a computer allows it isn't a defense. It's a bit like if you take a laptop at Starbucks while the owner is in the bathroom.

[–] eskimofry@lemmy.world 10 points 2 years ago (2 children)

Even then, is it so bad compared to Kanye's antisemitic rant?

[–] AngryishHumanoid@lemmy.world 16 points 2 years ago (1 children)

Bad and illegal are 2 different things.

[–] AllonzeeLV@lemmy.world 11 points 2 years ago* (last edited 2 years ago)

Exactly, the people that conflate legality with morality have the poorest of moral compasses. It's sad how many people just stop at this stage of moral development.

In these times, with what is being made legal(child labor) and illegal(abortion) that should be more obvious than ever.

[–] andrewta@lemmy.world 4 points 2 years ago (1 children)
[–] andyburke@fedia.io 4 points 2 years ago* (last edited 2 years ago) (1 children)

Agree, but it says something about the world that one man, rich, can say awful things and have almost no apparent lasting consequences, while another man, not rich, doesn't seem to be afforded even the basic protections of the law in the pursuit of journalism.

[–] AngryishHumanoid@lemmy.world 4 points 2 years ago

I'm pretty sure he has a lawyer and will have a day in court, which is literally the basic protections of the law. Kanye is a piece of shit, we don't prosecute for that.

[–] Buelldozer@lemmy.today 5 points 2 years ago (1 children)

He didn’t explicitly have permission to access what he accessed so it’s definitely a gray area...

It's not "gray" at all. This has been a settled matter of Law since the 1980s. Accessing systems without permission, no matter how you acquired the credentials, is illegal.

This can be separate from the videos. If they were publicly available, intentionally or not, then he should be clear on those charges but that doesn't change the unauthorized access part.

[–] FuglyDuck@lemmy.world 3 points 2 years ago (1 children)

If they were behind any sort of credential, they’re not publicly available. It doesn’t matter that the website was poorly configured.

This would be like arguing a property is public because the maintenance key box still uses the default password.

[–] Buelldozer@lemmy.today 3 points 2 years ago* (last edited 2 years ago) (1 children)

If they were behind any sort of credential, they’re not publicly available. It doesn’t matter that the website was poorly configured.

It's a bit confusing but as I understand it this is how it worked.

The video files were publicly available BUT the URL's to them were unknown. You could get to them without signing into the system IF you knew the URLs...which nobody did.

This guy signed into the Content Management System, which he wasn't authorized to do, using default "demo" credentials he found elsewhere. After doing that he could see the URLs for the files and was then able to download them without logging in. He may also have distributed the URLs so that other people could download them, again without having to log in.

Him signing into the CMS without Authorization was likely a crime but the downloading of the videos likely wasn't since they were publicly available if you knew they existed and how to reach them.

[–] FuglyDuck@lemmy.world 3 points 2 years ago (1 children)

That is incorrect.

They were never actually aired or released to the public.

Fox News never released them. The service used by Fox (StreamCo) routinely has uploads that are never released, they upload them live so as to expedite streaming while people ax whatever doesn’t work for whatever reason.

Again, to use the luggage analogy, this would be like someone grabbing your luggage off the checked baggage carousel, plugging in the default password, copied addresses, whose doors were unlocked. It doesn’t matter that the doors are unlocked- those files are still private.

The files themselves were never intended to be publicly released. He bypassed security in the system by exploiting flaws and accessing data he was not authorized to access.

There is no gray area there. Is Kanye West a raging bigot? Yes. Did Burke break the law to reveal that? Also yes.

Freedom of the Press and first amendment protection doesn’t mean they can break the law. It’s unfortunate because he seems to be one of the good ones.

[–] Buelldozer@lemmy.today 1 points 2 years ago (1 children)

or released to the public.

They were publicly available, without credentials, if you knew how to get to them.

Again, to use the luggage analogy,

The luggage analogy sucks. A better analogy is someone taking a stack of paperwork and putting it behind a chair in a coffee shop. You can't see the papers and don't know they are there unless someone tells you about them. The papers aren't intended for public consumption but they're being stored in a publicly available space.

He bypassed security in the system by exploiting flaws and accessing data he was not authorized to access.

Why are you acting like I don't agree with you on this? You can read my other comments in here and see that I do.

He apparently accessed a system with credentials that he wasn't authorized to use and that's a crime. What may not be a crime is downloading the videos. If those were available to the public, no matter how obscured, without needing credentials to access them then they were in fact publicly available.

It's two separate actions and one is likely criminal while the other may not be.

I don't give a shit about Kanye and I addressed Burke in a previous comment.

[–] FuglyDuck@lemmy.world 1 points 2 years ago

In your example, the papers are probably mislaid property, not abandoned property. Taking them would still be a crime, but somebody stumbling on them, there probably wouldn’t be any crime in reading them (similar to opening a lost wallet to pull the driver’s license. Now, if they contacted the owner, and they said “keep it” or something, or if they couldn’t identify the owner, that’s different, but didn’t happen here)

Unlike the luggage, which wasn’t misslaid- the files were where they were supposed to be.

As for accessing the files, that becomes a crime because he had to use knowledge taken from the prior crime. It doesn’t matter if your car is parked in a public lot; I steal your proximity keys (the URLs), that’s a crime. The car letting me in doesn’t suddenly make driving the car off not a crime.

There was no reasonable means of getting those files without first figuring out what urls they were at, and he knew that. He’s not some kid plugging in random URLs and stumbling in.

[–] some_guy@lemmy.sdf.org 5 points 2 years ago

That's just as much bullshit as when that asshole racist white nationalist fuck weev (I'm not providing links because fuck him) accessed a bunch of ATT endpoint on their website that had customer information on them. As I recall (I won't research because fuck him), they were sequentially labeled. He made this public and got jailed for hacking. He did no hacking. Again, fuck him, but that asshole saw a bad security practice and took advantage.

And before you say this is like walking through an unlocked door, no it isn't. That'd be like being shown a credential window that accepted a null (empty) password and clicking through. This is more like having shit on your front lawn, but your address is unpublished so someone needed to know where to go to see your lawn.

Fuck weev. Fuck white nationalism. Fuck the DOJ. Fuck Israel.

[–] FuglyDuck@lemmy.world 3 points 2 years ago (1 children)

There’s not that much nuance, actually.

It’s equivalent to someone plugging in the default password to luggage locks knowing full well it’s not their luggage.

He wasn’t authorized to access those files, it really doesn’t matter how he came by the credentials.

It also really doesn’t matter that he’s a journalist. Journalists aren’t allowed to break the law, even if he’s going after a scumbag like West.

This differs from the Marion county raid in that they accessed public information (actual public information. That the server interacts with the public doesn’t make it public) and received files from people who were authorized to access it. No crimes were committed by the journalists.

This differs from Assange in that Assange merely received the files and published them. Assange didn’t steal the files himself.

[–] yournamehere@lemm.ee 4 points 2 years ago

free assange!