US DOJ drops child porn case to avoid disclosing Tor exploit

The FBI remains unwilling to disclose the technique it used to deanonymize Tor users in the Playpen case

The U.S. Department of Justice is asking a federal court to dismiss its indictment in a case that involves a child porn site known as Playpen after a judge asked the government to disclose the hacking technique it used to gather evidence.

"The government must now choose between disclosure of classified information and dismissal of its indictment," the DOJ said in a court filing Friday. "Disclosure is not currently an option."

The case involves Jay Michaud, a school administrator from Vancouver, Washington, who was arrested in July 2015 for allegedly viewing child porn images on Playpen. Michaud's case was one of at least 137 cases brought throughout the U.S. in relation to Playpen, a website that operated on the Tor anonymity network and which the FBI managed to seize in 2015.

Instead of shutting the website down immediately, the FBI let it operate for an additional 13 days during which time it deployed malware on its visitors' computers in order to obtain their real IP addresses and later identify them.

The Tor hidden service protocol, which Playpen used, is designed to hide the website's real IP address from users and the IP addresses of users from the website itself. It provides two-way anonymity.

Playpen visitors used the Tor Browser, a hardened and Tor-optimized version of Mozilla Firefox. It's not clear how the FBI managed to deploy malware on computers that visited Playpen, but security researchers believe that it was done through a yet unpatched vulnerability in Mozilla Firefox.

The FBI refers to the exploit as a Network Investigative Technique (NIT) and has refused to disclose details about it claiming that it's classified.

Michaud's lawyer previously asked the judge to force the DOJ to release the exploit as part of the discovery process between legal teams and Mozilla even filed a brief in the case asking for the government to share details of the vulnerability with the browser maker so it can be patched.

The judge agreed that there was a law enforcement need to keep details of the tool secret, but in May ruled that the government can't both keep the tool secret and use the information gathered with it as evidence at trial. It had to be one or the other.

"The suppression order entered by the Court in May 2016 has deprived the government of the evidence needed to establish Defendant Jay Michaud’s guilt beyond a reasonable doubt at Trial," the DOJ said in its latest motion to dismiss the indictment. "Because the government remains unwilling to disclose certain discovery related to the FBI’s deployment of a 'Network Investigative Technique' ('NIT') as part of its investigation into the Playpen child pornography site, the government has no choice but to seek dismissal of the indictment."

The DOJ is seeking a so-called dismissal without prejudice, which, if granted, would leave open the possibility that the government could bring new charges against the defendant in the future if the situation changes and it will be in a position to disclose the requested information about the exploit.

Join the PC World newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?