United States v. Andrew Ewing

140 F.4th 1339
CourtCourt of Appeals for the Eleventh Circuit
DecidedJune 23, 2025
Docket24-11308
StatusPublished
Cited by1 cases

This text of 140 F.4th 1339 (United States v. Andrew Ewing) is published on Counsel Stack Legal Research, covering Court of Appeals for the Eleventh Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
United States v. Andrew Ewing, 140 F.4th 1339 (11th Cir. 2025).

Opinion

USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 1 of 22

[PUBLISH] In the United States Court of Appeals For the Eleventh Circuit

____________________

No. 24-11308 ____________________

UNITED STATES OF AMERICA, Plaintiff-Appellee, versus ANDREW EWING,

Defendant-Appellant.

Appeal from the United States District Court for the Northern District of Florida D.C. Docket No. 4:23-cr-00042-RH-MAF-1 ____________________ USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 2 of 22

2 Opinion of the Court 24-11308

Before NEWSOM, BRASHER, and WILSON, Circuit Judges. BRASHER, Circuit Judge: This appeal raises two issues that often arise in child pornog- raphy prosecutions. First, we must address the constitutionality of the government’s efforts to gather electronic evidence over a peer- to-peer network. Specifically, we must decide whether law en- forcement officers conducted a Fourth Amendment search when they used a special program—Torrential Downpour—to down- load pornographic images from a BitTorrent user. The Eighth Cir- cuit has held that the government did not conduct a search when it used Torrential Downpour under similar circumstances, see United States v. Hoeffener, 950 F.3d 1037 (8th Cir. 2020), and we agree. Second, we must address how a district court should decide whether to show child pornography to a jury during a trial. We again agree with our sister circuits that district courts should be wary about the prejudicial nature of child pornography and should ordinarily review any objected-to pornographic images before rul- ing on an objection. But, because there was no objection to any specific image in this case, we cannot say the district court abused its discretion when it allowed the government to show a subset of pornographic images to the jury without first viewing those im- ages. Because the district court committed no reversible error, we affirm. I.

A grand jury charged Andrew Ewing with a single count of knowing possession of child pornography that involved a USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 3 of 22

24-11308 Opinion of the Court 3

prepubescent minor and a minor who had not attained 12 years of age in violation of 18 U.S.C. § 2252A(a)(5)(B), (b)(2). Because this appeal requires an understanding of the technology that the gov- ernment used to determine that Ewing possessed child pornogra- phy, we start with an overview of that technology. Then we turn to the government’s specific use of the technology and Ewing’s motions to exclude evidence. A.

BitTorrent is a peer-to-peer file-sharing protocol. It consists of a “distributed network” that allows users to share files for down- load instead of downloading a file from a single, centralized source. Because the protocol does not rely on a single server, the system is “very efficient” and “adds speed.” The protocol is also open source, so numerous software programs use it to download files. BitTorrent’s end user license agreement lets users know that the software will allow other users to download files. To operate, BitTorrent requires, among other things, a torrent file or magnet link, which identifies other users with the sought-after file. After a user downloads a particular torrent file, BitTorrent’s tracker asso- ciates the device’s I.P. address with that file. The torrent file con- tains instructions to download one or more files. Using the torrent file and a “tracker” algorithm, the program sources and downloads pieces of files from multiple other users and then combines them into the desired content. Users have control over the files they share, but not who they share them with. Users who possess every piece of a torrent USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 4 of 22

4 Opinion of the Court 24-11308

file and provide access to that file are called “seeders.” When a user downloads the entire content of a file, BitTorrent automatically makes a user a “seeder,” but a user can opt out of that role. A “sharer” is a user who has some but not all pieces of a file. Even if a user opts out of “seeding,” he will still “share” data until he has downloaded the complete file. Users that acquire files, but opt not to provide that content to others, are called “leechers.” To distribute the load of network traffic, BitTorrent uses a “choking” algorithm to encourage downloads of a file from multi- ple users. As the government’s expert defines the term: “[t]o choke is to say my BitTorrent client is no longer going to share with you.” Simply put, the algorithm encourages downloading pieces of a file from multiple other computers instead of the entire file from a sin- gle computer. Ewing’s expert explained, with an analog example, how the choking algorithm affects a download. Suppose a user could down- load a bicycle from the BitTorrent network. The user would re- quest a particular bicycle model, and BitTorrent would find manu- facturers—“seeders” or “sharers”—of the various components for that desired bicycle model. Even if a single manufacturer could sup- ply both the wheels and frame of the bicycle, the choking algorithm would direct the application to find each part from a different man- ufacturer. The bicycle would then be pieced together from many different manufacturers, and there would be “no native way to se- lect who you got it from.” USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 5 of 22

24-11308 Opinion of the Court 5

Although the choking algorithm ordinarily sources a down- load from multiple different seeders or sharers, sometimes, a download occurs from a single source. For example, when a user is “the only person in the world” with a file because he “created the content,” then another user will download the entire file from that creator user. As the government’s expert puts it, despite Bit- Torrent’s choking algorithm, “[s]ingle source downloads happen naturally every day.” When officers want to ensure that a single-source download occurs, they use Torrential Downpour. The software alters the choking algorithm to force a single-source download. Torrential Downpour is not available to the public; it’s exclusive to law en- forcement. An officer inputs a “hash value”—the unique identifier of each video or photo associated with a child pornography file— into Torrential Downpour, then the software searches publicly available information on BitTorrent. That search returns I.P. ad- dresses that have pieces of the file available for download. Then, the officer inputs that I.P. address into Torrential Downpour to force a single-source download of the file from that I.P. address. The main reason police use Torrential Downpour is to con- nect pornographic material with a single I.P. address. This connec- tion allows law enforcement to establish probable cause for a search warrant more easily. But, in the end, the officer “get[s] no more information than” anyone else who was not using Torrential Downpour. USCA11 Case: 24-11308 Document: 44-1 Date Filed: 06/23/2025 Page: 6 of 22

6 Opinion of the Court 24-11308

B.

An officer used Torrential Downpour to download files, which contained child pornography, from Ewing’s I.P. address. Then the police obtained a warrant and seized Ewing’s computer. At the time of seizure, Ewing’s computer no longer had the BitTorrent client that he used when he downloaded the content. But computers store data anytime a user runs the application. So, even though Ewing deleted BitTorrent, “remnants” and “artifacts” from those applications remained on his devices.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

People v. Slusher
Colorado Court of Appeals, 2026
United States v. Ross
First Circuit, 2026

Cite This Page — Counsel Stack

Bluebook (online)
140 F.4th 1339, Counsel Stack Legal Research, https://law.counselstack.com/opinion/united-states-v-andrew-ewing-ca11-2025.