United States v. Eldred

933 F.3d 110
CourtCourt of Appeals for the Second Circuit
DecidedAugust 5, 2019
Docket17-3367-cv; August Term 2018
StatusPublished
Cited by18 cases

This text of 933 F.3d 110 (United States v. Eldred) is published on Counsel Stack Legal Research, covering Court of Appeals for the Second Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
United States v. Eldred, 933 F.3d 110 (2d Cir. 2019).

Opinion

Debra Ann Livingston, Circuit Judge:

This case arises from one of the many prosecutions following the investigation by the Federal Bureau of Investigation ("FBI") into Playpen, a child pornography site located on the dark web. The FBI infiltrated the website and discovered the identities of many registered users by deploying a search program, the Network Investigative Technique ("NIT"), which allowed the FBI to circumvent the anonymizing features of the dark web and collect computer-related identifying information, including internet protocol ("IP") addresses, from the computers of these Playpen users. Defendant-Appellant Robert Clay Eldred ("Eldred"), whose information was collected by the NIT, moved to suppress evidence gathered by the program, arguing that the warrant authorizing it was invalid. This motion was denied. Like the nine other circuits to have *112 considered the question thus far, we conclude that Eldred's claim is without merit: even assuming, arguendo , that the NIT warrant violated the Fourth Amendment, law enforcement officers acted in good faith and suppression is not warranted. We therefore AFFIRM the judgment of the district court.

BACKGROUND

I. Factual Background 1

Playpen operated on the "The Onion Router" (better known as "Tor"), an "anonymizing network" that allows users who have downloaded the Tor software to access websites without revealing their IP addresses or other identifying information by routing their internet traffic through numerous relay computers located around the world before such traffic arrives at a desired web location. These relay computers, which are owned by volunteers who donate their bandwidth to Tor, are known as "nodes." Because of this indirect routing, when someone-for example, a law enforcement officer-attempts to view a Tor user's IP address in order to identify the user's computer and ascertain its whereabouts, the IP address displayed is actually that of the Tor "exit node," i.e. , the last computer through which the user's traffic was relayed, rather than the actual address of the Tor user. Tor was originally developed and deployed by the U.S. Naval Research Laboratory to protect government communications, but it is now used by the public at large.

Certain websites on Tor, called "hidden services," are available only to Tor users on the Tor network. Instead of a typical web address, these hidden services are assigned a randomly generated list of characters ending with the suffix ".onion." Law enforcement cannot determine the location of computers hosting these hidden services using traditional IP lookup techniques. As these websites are not indexed on the traditional Internet, they also don't appear in searches run using traditional search engines-a Tor user must know the web address in order to access a hidden service. Playpen was one such website.

When a Tor user typed Playpen's ".onion" address into Tor and arrived at the site's homepage for the first time, he was required to register with a username and password in order to enter the site. By clicking on the "register an account" hyperlink, new users accessed a Playpen message instructing them that: (1) while "[t]he software we use for this forum requires that new users enter an email address ... the forum operators do NOT want you to enter a real address"; (2) users should refrain from posting any information that could be used to identify them; and (3) that "it is impossible for the staff or the owners of this forum to confirm the true identity of users ...." Joint Appendix ("J.A.") 47. After successfully registering, users could access a variety of child pornography, including images and videos indexed according to victim age, gender, and type of sexual activity depicted, as well as content related to child pornography. Although several of the site's forums involved general information and rules regarding the site, Playpen as a whole was "dedicated to the advertisement and distribution of child pornography," id. at 43, and included forums in which users exchanged information about obtaining child pornography and engaging in child sexual abuse. In addition to images and discussions, Playpen also contained a private *113 message feature. Available historical data suggests that Playpen had over 1,500 unique users a day and over 150,000 registered users.

The FBI began investigating Playpen in September 2014. In January 2015, FBI agents obtained a search warrant allowing the FBI to seize a copy of the server hosting Playpen, which it installed on a server at a government facility in Virginia. On February 19, 2015, the FBI executed a court-authorized search on the Naples, Florida home of the suspected administrator of the Playpen site. At that point the FBI was able to assume administrative control of Playpen. However, because of the anonymizing features of the Tor network, even with control of the website, the FBI could not identify other administrators or site users.

For this reason, the FBI had developed the NIT, computer code which was added to the digital content of the copy of the Playpen website residing on the government server in Virginia. Once the NIT was deployed, whenever Tor users accessed Playpen and downloaded content so as to display it on their computers, that content was augmented with a set of computer instructions that traveled with it, through Tor's network of relay computers, until coming to rest on the computer of the Playpen user. When the NIT reached the Playpen user's computer, the attached instructions executed, causing the user's computer to transmit identifying information back to the government server in Virginia, including, inter alia , an IP address, the type of operating system employed by the computer and an active operating system username, and information regarding whether the NIT had previously been delivered.

On February 20, 2015, in the Eastern District of Virginia, where the government server then hosting Playpen was located, Magistrate Judge Theresa Carroll Buchanan issued a warrant to deploy the NIT (the "NIT warrant"). An attachment to the warrant listed the "[p]lace to be [s]earched" as "activating computers," i.e. , "those of any user or administrator who logs into the [Playpen website] by entering a username and password." J.A. 32. The NIT would collect from all "activating computers," wherever located, their actual IP addresses, as well as other specified pieces of information. While doing so, the NIT would not deny the users any functionality on their computers, or collect any additional, unrelated information. The listed information could then be used to identify the Playpen user's true identity and location. Acting under authority of the NIT warrant, the FBI operated Playpen for about two weeks, from February 20 until March 4, 2015, from the server in the Eastern District of Virginia.

On March 4, 2015, a Playpen user identified only by the username "robertecach" entered the site and thereafter spent over an hour accessing three separate posts that contained images of prepubescent girls involved in genital exposure, oral sex, and penetration by what appeared to be an adult male penis.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

United States v. Donald Dorosheff
110 F.4th 999 (Seventh Circuit, 2024)
United States v. Delaney
Second Circuit, 2023
Frame-Wilson v. Amazon.com Inc
W.D. Washington, 2023
Barnes v. United States
M.D. Florida, 2022
United States v. Jones
43 F.4th 94 (Second Circuit, 2022)
Keith v. United States
S.D. New York, 2022
United States v. Thorne
District of Columbia, 2021
United States v. Caraher
973 F.3d 57 (Second Circuit, 2020)
United States v. Safford
Second Circuit, 2020
United States v. Palaniappan
Second Circuit, 2020
United States v. Wagner
951 F.3d 1232 (Tenth Circuit, 2020)
United States v. Kyle Bateman
945 F.3d 997 (Sixth Circuit, 2019)
United States v. Steven Vincent Smith
935 F.3d 1279 (Eleventh Circuit, 2019)
Holland v. Massanari
152 F. Supp. 2d 929 (W.D. Tennessee, 2001)

Cite This Page — Counsel Stack

Bluebook (online)
933 F.3d 110, Counsel Stack Legal Research, https://law.counselstack.com/opinion/united-states-v-eldred-ca2-2019.