

In the normal course of the operation of a web site, a user sends "request data" to the web site in order to access that site. Our original story follows.Īccording to an FBI affidavit among the unsealed documents: This is what led Christopher Soghoian, a technologist at the American Civil Liberties Union, to conclude, in an interview with Vice Motherboard: "while the warrant authorized hacking with a scalpel, the FBI delivered their malware to TorMail users with a grenade."Īrs regrets our misunderstanding of this case. The fact that this tactic was deployed seemingly against people seeking child porn and also against hundreds of TorMail users, who may not have committed any crimes, raises serious questions. As of August 4, all of the sites on Freedom Hosting began showing a fake error message to their users, but were actually deploying this NIT as a way to unmask users. Joseph Cox, a journalist, pointed out in a Medium post on Saturday that the “network investigative technique” (NIT) data was collected between August 3 and Augagainst the users of the child porn sites. (Marques has been ordered extradited from Ireland to the United States, but an appeal on that ruling is still pending.) American prosecutors say Freedom Hosting was run by Eric Eoin Marques, and Irish-American living in Ireland. This case, and the newly unsealed documents are part of an ongoing and still largely sealed case against users of Freedom Hosting, a Tor-hidden hosting company. UPDATE Sunday 12:41pm ET: We have clarified our original story and headline to more clearly and accurately reflect the fact that while the FBI did take over the 23 child porn sites in question, unlike the Playpen case, the agency does not appear to have actually operated them, or allowed them to continue to operate.
