[ConcernedCitizen]

Google Maps for Cops and Feds

A new system called Fog Reveal has been uncovered by the EFF. This is essentially a pay-per-query subscription service used by law enforcement at both federal and state levels, and it allows to query device information in a given range or "geofenced" area. This system is unlawful and intrusive and needs to be discussed. Technologies such as this can be very dangerous in many ways.

But don't take it from me, read it for yourself

I. Foreword. The FOG Data Science Portal, FOG REVEAL, uses (opt-in) unstructured geo-spatial data to correlate devices to dates, times and locations. FOG REVEAL is a highly effective forensics tool that assists Law Enforcement and Security Agencies in their efforts to develop leads that can result in the identification of known and unknown suspects, persons of interest, associates, witnesses and locations. Information that was previously “unknown” or knowable only through the investment of significant time in efforts such as witness interviews, reviewing surveillance video and travel records can now be revealed in minutes via a desktop or laptop computer. The base line for this capability is the passive collection of (opt-in) signals emitting from personal electronic devices such as smart phones, tablets and laptops that result in the daily collection of more than 15 billion signals globally.

This system is very efficient in identifying and displaying devices and signals. However, caution must be given that, when applying this analysis, users remain cognizant of the fact that even with known dates, times, places and device ID numbers there is no guarantee that every query will result in all the devices and/or signals germane to that geographical location or range of time being identified. While our signals’ processing efforts will cleanse and normalize the data to provide the best possible results, there are several reasons why all signals are not captured and understanding why will help in investigatory efforts.

A. In some cases, the magnitude of the daily and global collection and storage of these billions of signals can lead to computer processing limitations. One example might be a single query that asks for identification of signals and devices from a large number of geographical locations stretched over a considerable range of time. In this case, the system’s data retrieval and processing capabilities juxtaposed to the rapid response times (seconds) required to reply to the analyst’s request may result in some devices and signals not being processed and displayed. These drops are decisions made by the computer to complete its response timeline.

B. Another case may be an analyst initiating a query too soon after an occurrence. It takes approximately 24 hours to process and store a daily collection of signals. With that in mind, users must be cognizant of the fact that queries made within that processing period can result in searches reduced in terms of the numbers of devices and signals identified. However, the daily updating and refresh of signals data will allow a user to continuously update queries to obtain new results. Better results occur after 48 hours, best results after 72 hours. The emphasis is this is not capable of analyzing real time crimes (Crimes occurring that day or the day after).

C. Unrelated to the processing capability, other reasons for a lack of identification of devices that might have been present but not displayed can be explained as simply as devices being present but the open apps on their devices not reaching out to other apps and transmitting at that particular time and location.

D. Other variables, such as the analyst’s selection of the physical dimensions of an electronic fence resulting in signals being offset and displayed outside of the geo fence may also have an impact on not being able to identify each and every signal and/or device. Many of these later cases can be mitigated and lead to previously unidentified devices and signals by simply re-running the query again several days later if an initial query was close to the processing wait out time; by extending or reducing the size of a geo fence; or by making even minimal changes to the dates and/or times. When compared to current investigatory procedures, the benefits of this analytical tool far outweigh any of the aforementioned shortcomings, particularly in terms of savings in money and in work hours. Analysts and investigators are now empowered with the capability to sit at a desk and, in a relatively short period of time, identify potential suspects, witnesses, associates, locations and routes previously unknown.