READ THIS NOW AND CHANGE YOUR AA PASSWORD! SELECT "Y" FROM THE MAIN MENU! About two years ago I helped a guy from Milpitas (just north of San Jose) deal with a BBS bust at what he described as a legal porn BBS. The San Jose police (who had gone out of district) and the DA realized shortly that they had really goofed by not considering the ECPA and related laws in their search & seizure. The result was that they gave his system back after five weeks, and stated in a written release that this guy's activities were within the scope of the law. The BBS is called Amateur Action, and the sysop's name is Robert Thomas (408-263-1079). Robert's lawyer, Richard Williams's phone number is 408-295-6336. Monday night about 8 pm, Robert called (at that time I had not met him in person). A search warrant was being served at that very moment by the US Postal Inspectors, who (with the help of San Jose cops) were packing up his equipment and carting it out--again. Robert managed to get the postal inspector on the phone with me. This inspector seemed to be rather knowledgeable of such things as the ECPA, 2000aa, and the Steve Jackson case. He stated he was completely unconcerned about their lack of warrants for email! He piously stated that, because it was their intent to bring the system back within a "few days" and, as a result of the short interruption of user access, and their good intent "not to look at private email," they were completely safe from the provisions of the ECPA. This postal inspector gave his name as David Dirmeyer, from Tennessee (does this sound like Bible Belt prosecution for pron?) and gave me the name of the US Attorney he was working under, one Dan Newsom with a phone of 901-544-4231 in TN (though he stated that the phone # would be of no use because Dan was at a conference for a week). For what it is worth, the postal inspector said they were using the San Jose cops on the bust because they did not have the expertise themselves to move the system and make copies. According to the investigator, they did not know that they could get a court order to have a backup of the system made on the spot. It may be that Robert is the target. (In spite of not meeting him, I suspect Richard may be the kind of smart alec who attracts the attention of cops.) Robert said there was a mystery package which came today in the mail (which his son and wife picked up and she opened). The package turned out to be real honest-to-gosh kiddy porn. Robert claims not to have ordered it, and considering that his wife picked the (unexpected) package up and opened it, I think this is the actual case. Robert was busy with system problems that afternoon and had not gotten around to doing anything about the stuff, though he did call his lawyer for advice. The guy who sent it is known as "Lance White," who Robert thinks is one of his BBS members. (As is postal inspector Dirmeyer.) They had Robert pull all postal correspondence with this guy (video porn orders) from his files and took it with them. Robert thinks the postal folks may be after this guy, and his BBS just got caught in the middle. An interesting side point is that while they asked for the package which came that day when they came in, they did not have a warrant for it, and said they would have to drive over to SF to get one unless he volunteered to give it up. Robert signed off that they could take it, and they did. He noted this morning that the original warrant he has was neither signed nor dated, though a judge's name was typed in. I don't know if this is something of marginal concern to those of us concerned with government abuse of people's computers and communications or a major concern. I intend to find out more, but if the ECPA is applicable, this guy had about 3500 users, over 2k pieces of protected email on his system, plus (I think) agreements with his users for him to represent them in an ECPA-related legal action--two million dollars if I am multiplying right. (My "Warning to Law Enforcement Agents" was part of his signup screens.) Question for Mike Godwin (of EFF). One aspect of this case gives me the shakes. *Anyone* with a grudge (and access to this kind of stuff) can send you a package in the mail and tip off the postal inspectors. Short of the obvious (don't make enemies!) how can you protect yourself from this kind of attack? My non-lawyer thoughts: Burn it at once! Call my lawyer. Call the cops. For a while this will be a very serious problem, because *any* of us with readily available morphing tools can make (what looks like) kiddy porn out of legal porn. [After finding out where this came from, I think burning it might get you charged with "Destruction of Government Property"!] Keith Henson 408-972-1132 hkhenson@cup.portal.com A Very Weird Turn of Events To recap: Last Monday (Jan 10) Robert Thomas, Sysop of Amateur Action, an erotic BBS, got a call to pick up a priority postal package. His wife picked it up and opened it. It turned out to have *real* child pornography in it, and was sent (unsolicited) by one Lance White. This was not the first odd thing sent in by some of the people on the BBS, but it was certainly of no use to Robert. He runs a scrupulous *business*. He is so careful that he will not permit gif uploads from the AA members at all. But Robert was busy with the computers and perhaps not paranoid enough. (He takes, scans in, and edits hundreds of erotic photos a week--there is always new stuff on AA!) Early that evening, a person by the name of David H. Dirmeyer and identifying himself as a postal inspector showed up with an unsigned and undated warrant, which says on the face of it that it was issued by Hon. Wayne D. Brazil, U.S. Magistrate-Judge at San Francisco, CA. (The case number is 3.94.3005 and what might be WDB.) By itself, a copy lacking date and signature may be ok, but both the local police and a newspaper reporter were quite surprised that they were missing. Attachment A is just a description of the house where the BBS was located. I may type in all of Attachment B at some point, but not now. Point A was for all the hardware, manual, etc. Point B was for a list of video tapes (which AA sells). Point C was for gif from these tapes. Point D was a list of gifs from a description file designed to generate maximum curiosity--if you want to see people making it with barnyard animals, or are into "water sports." Point E asked for records on the origin etc. of the tapes and gifs. Point F asked for ads or any other kind of pointer to these. [verbatim from here, modulo typos.] G. "Cardboard boxes, envelopes, and other shipping container bearing United Parcel Service (UPS) logo and or shipping numbers." H. Any and all records showing business transactions with Lance White, 1770 North Germantown Pkwy., Suite 166, Cordova, Tennessee 38018, including, but not limited to: books, records, receipts, bank statements, canceled checks, wire transfer records, passbooks, payment journals, and other documentation, whether stored in any of the storage devices listed in Paragraph A above. I. Any and all records showing or bearing indicia of the use, ownership, possession, or control of the abovesaid residential/business premises, of the obscene material, of the databases described above, or of such records, whether stored on paper, in files, invoices, bills, leases, deeds, permits, licenses, telephone bills, tax receipts, or other documentation, or on magnetic media such as tape, cassette, disk, diskettes, or on memory storage devices such as optical disks, or other storage media. [As you might note in passing, no mention about email in the warrant, and none that AA may be protected as a *publisher* under 2000aa.] Sounds like they are *really after this Lance White dude--right? Perhaps postal inspectors opened this package of kiddy porn on the way and got a search warrant to go after him? They ask something to the effect has AA received any packages today?. The package is lying where it was left when opened, they must know about it, so Robert shows it to them. The inspector wants it, but Robert will not give it up without something saying *he* sure as heck did not order it. After some argument about taking its taking two hours or more to get an added warrant from San Francisco, they come to an agreement. The inspector pulls out a PERMISSION TO SEARCH form and modifies it. It reads: "I, *Robert Thomas*, have been informed by *Postal Inspector Dirmeyer* and [blank] who made proper identification as (an) authorized law enforcement officers(s) of the *United States Postal Inspection Service* of my CONSTITUTIONAL RIGHT not to have a search made of the premises and property owned by me and/or under my care, custody and control, without a search warrant. "Knowing of my lawful right to refuse to consent to such a search, I willing give my permission to the above named officer(s) to conduct a compete search of [premises scratched out] property *namely priority mail package from Lance White addressed to Robert Thomas sent without his knowledge.* ^^^^^^^^^^^ [The rest is boilerplate, time (5:29), and date. Dirmeyer and one of the San Jose police sign as witnesses, and (strangely) a home phone (901-576-2077) for Dirmeyer, not an office phone like the SJPD officer used. The material between the *s is block printed by Dirmeyer.] Robert thought the name was familiar, but he has about 3500 members signed up. Robert runs the BBS from home but has an office as well. To turn over what the search warrant demands, he and the agents go there (after? before?) the computer setup is seized. They find some Lance White orders and such in the files and the officers take them, but White's original signup form is missing. Robert called me while the agents were carrying out the seizure, and (to my surprise, it is not usual practice) David Dirmeyer talked to me. He has a slightly nasal Tennessee accent--distinctive. I ask him about ECPA, Secret Service, 2000aa, Steve Jackson case, and proper warrants. He says none of these laws apply but promises to get the hardware back ASAP; when pressed he says a week. I am skeptical. As he is leaving, he tells Robert something to the effect that "it will go worse for you if you mention Lance White on the board when you gets it back." Tuesday I wrote the first report on AA for computer network distribution. Wednesday and Thursday I put in some time on bringing a lawyer up to speed on the ECPA, related laws, and such case law as came out of the Steve Jackson Games suit. Mid afternoon Friday I am about to go meet Robert (first time ever in person), and discuss filing a claim with San Jose in preparation for a 2000aa lawsuit. Robert calls me. His wife found the original "Lance White" signup. Bombshell. The sloppy block printing of "Lance White" on the "Membership and Registration form" dated 2/93 and the "Lance White" block printed on the PERMISSION TO SEARCH look *identical*. It is possible that a regular handwriting expert might find them different, but all seven people, including two cops, who have looked at them by now think they were written by the same person. The registration form has an address, 1770 Germantown Parkway, #166, Cordova, TN 38018. This is really close to the warrant, except someone is trying to make what I expect is a box look like an apartment. Perhaps a reader knows someone who lives near there and could check. There is also a phone number (901-685-2206) on it. Robert tries it, and asked me to try. Again, an expert might disagree, but to my ear, the answering machine's message which says it is Lance White's phone, and the person I talked to who said he was Dirmeyer are the same person. *If* I can believe my ear and eye, it looks like David H. Dirmeyer, Postal Inspector and Lance White "Sender of Unsolicited Child Pornography" are the same person. *If* this is the case, (not exactly impossible, because the postal inspectors have been in the news lately *for* sending child porn), then what the heck is going on here? When Robert figured out the strange connections, he called the local (Milpitas) police. They said he should talk to the San Jose Police, since they were the ones who came out and took the computer. Late this evening I talked to the San Jose Police who were on duty "down at the station." Just for the record, they are Lera and Morales. I mentioned that San Jose may be liable in this odd business, but they felt it was purely a post office problem. Not long after Robert called the Milpitas Police (coincidence I hope) Dirmeyer called and told Robert they were finished with his machines, that he had to get down to a postal facility in San Jose (1st and St John) at 8:30 am Saturday and pick them up or he couldn't get his system back till Tuesday, and that he (Dirmeyer) was leaving Saturday morning to go back to TN. Robert told Dirmeyer he wants the system back, but how about *they* bring it back, since Robert is sick, and not up to moving the hardware, and may not be able to round up enough friends to move it. I don't know what is going to happen, but I plan to be down there in a few hours to see what goes down, and get a look at the Dirmeyer. (*I* can't help, I am on crutches at the moment.) I made a few more calls myself this evening. Unfortunately the holiday has the US government shut down until Tuesday. The few people I could reach, a Postal Officer in SF named Bishop, and an FBI agent who only gave his shift and title, were of limited help. The FBI agent said that a Federal Agent should give a *local* contact when you ask who his supervisor is even if he is working out of his district. (He was kind of boggled by the idea of an out-of-area supervisor who couldn't be contacted anyway because he was at a conference. Where's his *deputy*?) The Postal Officer was originally quite concerned, but (in a call back to me after about 10 minutes) said he was unable to contact any agents at this hour of the night, and that I should take it up Tuesday. If Dirmeyer and White are distinct, I am going to be doing some heavy- duty apologizing. If they are not, it raises some really odd questions: What is an officer of the law doing asking a Federal Judge for a warrant for the seizure of records when (assuming he was making copies) he must *have* records of whatever correspondence he had with AA? Was "Lance White" included in the affidavit to cover another reason for the warrant? For example, could they have been trying to conduct an illegal sweep of email on the AA board? Was the Judge informed of how easy this would be? Did Inspector Dirmeyer *tell* Judge Brazil that he was also "Lance White"? Would a Judge sign a warrant this misleading? *Did* a Judge sign the warrant? For that matter, is "Dirmeyer" really a postal inspector? He gave me a number for his boss, but said his boss was out of contact for the week. I tried tonight, and the number I gave in a previous note does not answer, no voice mail or anything; not definite, but most Federal offices have *something*. I am distributing this at 5 am in kind of a rough form to the CP list and some other groups. Please let me update it before it goes too far. I will do my best to update by early afternoon. Keith Henson Update Saturday noon. Back from seeing Robert's sons and friend pick up his computer equipment, and a 10-minute chat with Postal Inspector Dirmeyer, and a San Jose Police officer by the name of Weidner. At least one point is clear, David Dirmeyer and Lance White are the same person: I simply asked him, and he admitted it. I also found out why he was willing to talk to me during the search. He figured that anybody who starts quoting chapter and section from the Federal Code must be his target's lawyer. [Dirmeyer reminds me somewhat of one of my cousins when he was about 18. My cousin was tall and gangly, and given to putting on a hick act.] Dirmeyer/White seemed completely unconcerned with having generated any liability for the government under the ECPA or the Newspaper Privacy Protection Act (2000aa). He backed this up by being very proud of getting the system (well, most of it anyway) back to the sysop in under a week. [The Electronic Frontier Foundation *has* had a positive effect: this is the first time I ever heard of any LEA's caring how long they take to return a computer.] He was very confident that a judge would dismiss any civil lawsuit brought by the users because of what he perceived as criminal obscenity activities by the sysop. How actions, criminal or not, of one person (the sysop) cancels the rights of others (email customers) to civil recovery from those who block access to their email is beyond me. If that did not get them off the hook, Dirmeyer figured they would get out of civil liability claims because they interrupted people's email access for such a short time, as opposed to the lengthy time the Secret Service kept Steve Jackson's BBS. I can almost quote from memory the relevant sections of the ECPA, and *I* don't remember any time limits under which the civil penalties of law do not apply ("But Judge, I only exceeded the speed limit for a *few* miles!"). I wonder how the Postal Service would react to someone locking *their* patrons out of a local office and away from their mail boxes for a week? I expressed my hope (as a San Jose resident and taxpayer) to Officer Weidner that the Post Office had agreed to take responsibility for any civil liability arising out of the case. He was close to uncivil in stating that I had no standing in the case, and it was none of my concern. He advised me to butt out of being involved in any way. He asked if I had ever *seen* the material on that BBS (my answer was no), and expressed the opinion that I would be smeared by it and greatly regret getting involved. Back to Dirmeyer, I asked him about the warrant. He said that what he did is ordinary investigation practice, including sending people unsolicited material and then picking it up under a warrant. I asked him if the Judge knew, and he assured me the Judge was fully aware that the person getting a warrant for "Lance White's" correspondence was also Lance White. He also said the Judge was aware of the 2000aa and ECPA issues, and that they were under orders not to look at anything labeled email. For some reason, this did not reassure me. I also asked them why they did not just get a court order and back the material up in the field? They said it would take far to long. I know this to be untrue. They certainly spent more time at Robert's house taking the system appart and moving it than a backup to tape would have taken. Robert's sons and a friend got the last pieces of the computer down to the lobby and we parted company with a few comments on my part about Postal Service agents legally sending kiddy porn through the mail, like the Nebraska case recently ruled entrapment by the Supreme Court. Just one minor thing to add. Because of a persistent back injury, I am on crutches most of the time. I was making my way across the lobby of the old Post office nearing the doors. Dirmeyer and Weidner passed me, opened the doors, went through and let them swing shut in my face. I guess scum like me is below their notice. Keith Henson  .