Archive for the ‘Cops’ Category

Bad boys, bad boys…

Friday, August 31st, 2012

Our first story is kind of strange.

Matthew Itkowitz was drinking tequila one fine night in March of 2008. Apparently, Mr. Itkowitz got into an argument with his wife; Mrs. Itkowitz ran up to several people, including a man named Ryan Gonzalez, who were standing nearby, and asked for help.

Mr. Itkowitz claims that Mr. Gonzalez brandished a handgun, threatened to kill him, then punched Mr. Itkowitz and knocked him to the ground. Mr. Itkowitz deployed his own weapon and shot Mr. Gonzalez five times, killing him.

…the Los Angeles district attorney’s office declined to prosecute Itkowitz in 2010, despite concluding that his account of the shooting was “patently inconsistent” with video footage captured by a wall-mounted security camera in the alley.

Mr. Itkowitz has now been indicted by a federal grand jury on charges of “deprivation of rights under color of law, using a firearm in relation to a crime of violence and obstruction of justice”.

The video footage in question appears to show Mr. Itkowitz pulling his gun and hiding it behind his right leg as Mr. Gonzalez walks away from him.

Still walking toward the tattoo parlor, Gonzalez turns back toward Itkowitz and motions for him to leave. When he doesn’t, Gonzalez turns and walks several steps back in Itkowitz’s direction. He is about 10 to 12 feet away when Itkowitz raises his gun and fires.

By the way, Mr. Itkowitz is a deputy US marshal.

Meanwhile, the LAPD is investigating five of their officers after a woman died in their custody.

And Lance White had his 2009 conviction for weapons possession overturned by a federal appeals court in Manhattan. Why?

…should have been able to tell the jury that the main witness against him, a New York City police detective, had been found to have testified untruthfully in proceedings involving an unrelated gun case.

Noted:

…the panel’s decision made it “far more likely that future juries will hear that an officer has previously lied or somehow been found untruthful. And it will make prosecutors think twice before they use him in future cases.”

21-50 to headquarters!

Wednesday, August 29th, 2012

Have you ever heard of the Texas Highway Patrol Association?

Did you know they had a museum in San Antonio? I did not. I might have gone down to see the museum, had I known it was there. But in retrospect, I’m kind of glad I didn’t make the trip: here are some photos of the museum from the Texas DPS website.

As you might have guessed from that link and the associated commentary (which I personally think is very unusual for Texas DPS), the THPA was one of those charities that does telemarketing calls, collects your money, and does very little to benefit anyone but the company that makes the calls.

In particular, the organization apparently promised to pay a $10,000 “death benefit” to families of troopers killed in the line of duty. The organization never paid, the families sued, and…

As part of a 39-page agreement, property belonging to the Texas Highway Patrol Association in Austin and a museum it operates in San Antonio will be liquidated…

Interestingly, the museum was founded by a former state legislator from Waco, Lane Denton. (Waco is also the home of the Texas Rangers Museum, which is actually well worth the drive from Austin to visit.)

In 1995, Denton was found guilty of theft and misapplying money belonging to a different organization, the Texas Department of Public Safety Officers Association, and sentenced to six years of probation.

And:

The lawsuit said state investigators found that few survivors received any financial assistance and that money from a scholarship fund went to children of board members. The suit also said officials used up to $10,000 in donations a day to buy tickets to amusement parks and movie theaters and to pay for airfare across the United States.

(Subject line hattip. I loved that show when I was a kid. No, I’m not that old: one of the local UHF stations showed syndicated reruns.)

Edited to add: In case you were wondering, here’s a Google Maps street view of the THPA headquarters. Note that this isn’t the large building on North Lamar, across from Texas DPS and right next to Dan’s Hamburgers, but another building.

Into the looking glass again.

Tuesday, August 28th, 2012

There’s a strange and noteworthy story in today’s LAT. Brian C. Mulligan is a high-ranking executive with Deutsche Bank (“a managing director and vice chairman”). Mr. Mulligan is also pursuing a $50 million damage claim against the city of Los Angeles.

According to Mr. Mulligan, he went to purchase “medical marijuana products” at a local dispensary on the night of May 15th. (Mr. Mulligan says they “help him sleep”. I was unaware that insomnia was a condition that you could prescribe marijuana for, but in retrospect I shouldn’t be surprised.)

Mr. Mulligan goes on to claim that law enforcement officers detained him, “walked him to a run-down apartment complex and told him to go to the fourth floor”. According to Mr. Mulligan, he panicked and fled from the police in the direction of Occidental College, which was nearby.

According to the LAPD, two officers responded to a report of a strange man trying to break into cars at a local Jack in the Box. While responding to that report, a second similar report came in. The two officers found Mr. Mulligan near Occidental. Their report says he matched the description of the man trying to break into the cars, he was “drenched in sweat and walked with an ‘unsteady gait'”, but he passed field sobriety tests.

The LAPD report goes on to state that Mr. Mulligan told the responding officers he had used both marijuana and “white lightning”, which the LAT claims is another name for “bath salts”. “He said he hadn’t slept in four days, was going through a divorce and felt depressed, the report said. Mulligan also said he was being chased, according to the report, which nonetheless described him as calm, lucid and cooperative.” Mr. Mulligan denies telling the LAPD officers any of this.

The officers drove Mulligan to his Toyota Prius, which they searched; Mulligan’s attorney said he had not given them permission.

Search incident to arrest?

They found his Irish passport and enough cash that they called in a supervisor, said the report, which did not specify an amount.

That seems odd. If I find enough cash to get a supervisor involved, I’m darn sure noting the exact amount (and counting at least twice) on my report.

Mulligan’s claim pegged the cash at about $5,000, a sum he said he normally carried for business travel. Then police took Mulligan — whose cellphone and passport remained in his car, his attorneys said — to the nearby Highland Park Motel, a low-rent building across from homes with barred windows.

That also seems odd. If they felt he couldn’t drive or otherwise take care of himself, shouldn’t they have taken him into formal supervised custody? Doesn’t dropping him at a “low-rent” motel set you up for exactly this kind of problem?

(The LAPD report claims Mulligan asked to be dropped off there. Mulligan denies this, and says “he was taken there against his will and told ‘he could not leave, under threat of death.'”)

At the front desk, Flanagan said, the officers took away Mulligan’s car keys and forced him to pay the roughly $40 room bill. They also gave him back the cash they’d found in his car, said another Mulligan attorney, Valerie Wass.

Since everyone seems to agree that Mulligan was dropped at the motel, I’m not exactly shocked they made him pay the bill up front. I’m not saying dropping him there was a good idea in the first place, but if they did drop him there, someone’s got to pay for the room…

…one officer escorted Mulligan to Room 208, which he said did not have a telephone. He eventually cajoled a clerk into returning his keys, his attorney said, and ran away from the motel. This week, a motel employee said he could not recall the incident.

I kind of think I’d remember something like this, if I were a clerk. Then again, I wonder if anyone actually talked to the clerk who worked that night (the LAT doesn’t specify that), or if that clerk is even still working at the motel.

In any case, the same two officers encountered Mr. Mulligan later on that night (actually, around 1 AM the following morning). Mr. Mulligan was allegedly “trying to open the passenger-side door of an occupied silver van”. The van drove off, the officers told Mr. Mulligan to get off the sidewalk, Mr. Mulligan cursed at them, and apparently ran off. (That’s the LAPD’s account: Mr. Mulligan’s lawyers apparently dispute that he was trying to open the van door, or that he cursed at the police.)

The officers soon gave chase, the report said. “At that point,” Mulligan’s claim said, “he was in such great fear that he believed the LAPD officers were not truly LAPD officers but may be impostors bent on robbing or killing.”

So he didn’t recognize these officers as the same ones who took him to the motel earlier? Or he did, but he thought the ones who took him to the motel were imposters? Do you often go to “low-rent” motels with people posing as police officers? What was the point of checking him in and making him pay the bill if they were imposters planning on “robbing and killing” him?

Anyway, the LAPD chased Mulligan down. They claim he went into a fighting stance and charged the officers, who took him down and arrested him. Mulligan’s attorney, of course, denies that his client charged the officers. And:

No charges have been filed against Mulligan, though a spokesman for the city attorney’s office, which handles misdemeanor crimes, said the incident was under review.

I’m not sure what to make of this, as I have a lot of trouble believing that either side is telling the whole truth about what went on that night. There doesn’t seem to be any dispute about the whole “checked him into the ‘low-rent’ motel” part of the story, though, and that strikes me as being a big deviation from what I’d expect to be proper procedure. Was the LAPD trying to cut a rich white guy a break? Or…?

Hondo Harrelson, call your office, please.

Monday, August 27th, 2012

The Los Angeles Police Department is investigating whether members of its elite SWAT unit took advantage of their assignments to purchase large numbers of specially-made handguns and resell the weapons for steep profits, according to a report released Friday by the independent watchdog overseeing the department.

The LAT suggests that this “could be a violation of federal firearm laws and city ethics regulations”. I am unfamiliar with ethics regulations in LA, so I will refrain from comment on that. I am not sure what federal firearm laws would have been violated, since private sales between individuals are not illegal under federal law. (They may be under California law; I am also not an expert on California gun laws.) The LAT is also apparently unclear on what regulations and federal firearms laws were violated:

Regardless of whether the LAPD has a policy governing gun sales by officers, [Inspector General Alex] Bustamante noted that “the purchase of firearms with the intent to immediately transfer the weapon to a third party may violate city ethics regulations and federal firearm laws.” The report did not specify which regulations and laws may have been violated.

But getting back to the story, this isn’t the first go-around at this particular rodeo.

Suspicion about the guns first arose in 2010, when the commanding officer of the LAPD’s Metropolitan Division, which includes SWAT, ordered an inventory of the division’s firearms, the report said. The officer responsible for conducting the count discovered that SWAT members had purchased between 51 and 324 pistols from the gun manufacturer Kimber and were “possibly reselling them to third parties for large profits,” according to the report.

“between 51 and 324”? Could you be a little more vague in your count? In any case, LAPD SWAT, according to the LAT, only had about 60 members.

Kimber sold the guns, which bore a special “LAPD SWAT” insignia, to members of the unit for about $600 each — a steep discount from their resale value of between $1,600 and $3,500, the report said. The unique SWAT gun branding was first made several years earlier, when the department contracted with Kimber for a one-time purchase of 144 of the pistols.

$600? Daymn! I know Kimber’s had issues in the past few years, but you offer me one for $600, and I’ll be on that biatch like an anaconda on blood orchid serum.

(We watched that over the weekend. Two word review: annoyingly competent.)

(Also: “between $1,600 and $3,500”? That’s a $1,900 difference there, Sparky. If the comments in the LAT and Kimber’s website are to be believed, the pistol in question is the Custom TLE II, which has an MSRP of $1,054 without the LAPD SWAT markings.)

Neither the officer relieved of duty, the others suspected of being involved, nor the person who conducted the inventory were interviewed for the investigation, and no attempt was made to determine how many guns had been purchased from Kimber, Bustamante wrote. In the end, the department concluded that it had no policy governing such activity, and so closed its investigation, according to the inspector general report.

So that’s the first investigation, which the LAT makes sound half-assed. Bustamante’s investigation is the second one:

Because the initial investigation was so lacking, little is known about the gun sales. Bustamante’s report, which will be presented to the L.A. Police Commission on Tuesday, was based on the initial, substandard inquiry and so could not answer basic questions about the allegations, including how many officers were involved, the number of guns sold and when the sales were carried out. 

And:

The department’s poor job investigating the alleged SWAT gun sales was all the more notable, Bustamante wrote, because of the way it treated the officer who uncovered the gun purchases during the inventory. When one of the SWAT team members under suspicion accused him of improperly discussing the investigation with others, the department opened a separate inquiry into the claim, producing a 257-page report that dwarfed the 39-page file on the gun sales. The officer was suspended for five days.

Random roundup: August 22, 2012.

Wednesday, August 22nd, 2012

40 years ago today, John Wojtowicz and Salvatore Natuarale tried to hold up a Chase Manhattan bank branch in Brooklyn. I believe this is what that location looks like today:

View Larger Map

Wojtowicz and Natuarale botched the robbery, and ended up in a 14 hour long standoff with police. The NYT has a retrospective.

And why does this matter, other than it being kind of a big deal at the time? Well, the robbery inspired a Sidney Lumet film:

Obit watch: Victor Poor, an influential early chip designer for Intel.

Noted:

Mr. Poor retired in 1984 and pursued a passion for sailing. Looking for a way to communicate while he was at sea, he developed a wireless data communications system, initially called Aplink, for Amtor packet link, and later Winlink. The system was widely adopted by radio amateurs, the United States military, and state and local emergency preparedness teams. It was credited with being one of the few communications systems that worked in the wake of Hurricane Katrina.

Edited to add: Thanks to Borepatch for reminding us it is also the 20th anniversary of the shooting of Vicki Weaver at Ruby Ridge.

The Butler’s Revenge.

Saturday, August 18th, 2012

I have written previously about the “dirty DUI” case, as the SFChron puts it. In brief, Christopher Butler and his PI agency were taking money from women involved in divorce/custody cases to set up their husbands on DUI charges.

One of the people who provided evidence against Butler and his cohorts (including former Contra Costa County Deputy Sheriff Stephen Tanabe) was a reserve officer named William Howard. Howard has been a reserve officer with the sheriff’s department for 19 years.

He was fired on Tuesday.

A department spokesman, Jimmy Lee, described Howard’s release as an internal matter and declined to discuss it.

Banana republicans watch: August 17, 2012.

Friday, August 17th, 2012

Haven’t had one of these in a while now. Let’s open up the bag and see what’s inside.

Caltrans, the state transportation agency, owns “hundreds of houses spanning a corridor through Pasadena, South Pasadena and Los Angeles”. These homes were purchased as part of a plan to extend the 710 freeway, and are supposed to be bulldozed when the extension is built. At this point, it looks like the extension is on indefinite hold.

So?

The agency has spent $22.5 million since 2008 to maintain the homes, but transportation officials are “unable to demonstrate that the repairs were necessary, reasonable or cost-effective,” according to the report by the California State Auditor, which was sparked by a Times investigation.

In one case, the agency spent $103,443 on a new roof. That leaked.

“Bees were also coming in,” Jones said. “It was like a plague.”
The shoddy work sparked a fight with state officials that eventually led to Jones’ eviction from the home he and his wife had lived in for about two decades.

But wait, there’s more!

The state is also losing $22 million per year because tenants, including 15 state employees, are paying far below market rates for rent. Other homes, some of which have been recognized as historical landmarks, have been boarded up and empty for years.

And more!

For one of those vacant houses, state officials recently estimated it should have cost $56,000 to repair a roof and replace the garage. But the cost soared to more than $184,000 after it was expended to include “miscellaneous interior repairs” — a coat of paint and upgrades to two bathrooms. “Caltrans could provide no evidence of the need for additional work,” the investigators said.

And even more: auditors traced the money to the Direct Construction Unit of the Department of General Services. The “Direct Construction Unit” apparently does the general repair work for state owned buildings. So basically, this was one branch of the state government taking money out of the pocket of the other branch. Which is fine; even if you’re just taking money from one pocket and putting it in another, you’ve got to account for it, right?

Except that the Direct Construction Unit was tacking on a 20% “management fee”. And they were hiring subcontractors “for minor chores as a kind of window dressing to ‘achieve the appearance’ of meeting goals to include small businesses in state work. ” It looks like the subcontractors may have known people inside the DCU: one particular subcontractor “repeatedly bought the exact items it would sell to the unit days before the jobs were put out to bid”.

And the punchline: this contractor was buying items at Home Depot and selling them to the DCU at an average markup of 35%.

And a by the way: “Four of the state employees found living in the houses worked for the Department of General Services.”

But, hey, LA isn’t the only city in California, right? Right. There’s also San Francisco. San Francisco has a sheriff, Ross Mirkarimi. Sheriff Mirkarimi has a domestic violence conviction on his record; based on my understanding of federal law, that bars him from possessing a firearm. Which is kind of a problem, if you’re the chief law enforcement officer of a major city.

Yesterday, the San Francisco Ethics Commission found, on a 4-1 vote, that Sheriff Mirkarimi had engaged in “official misconduct”.

Apparently, this doesn’t mean that he’s actually fired: the Board of Supervisors needs at least 9 out of 11 votes to terminate him.

Obit watch: August 13, 2012.

Monday, August 13th, 2012

Gregory Powell, one of the two Onion Field killers, is dead.

Officer Ian Campbell was unavailable for comment.

Edited to add: Longer obit in the LAT. Karl Hettinger was also unavailable for comment. But Big Joe Wambaugh did have something to say.

Banana republicans watch: August 7, 2012, special “blood in the streets” edition

Tuesday, August 7th, 2012

The “Blue Line” runs from Long Beach to downtown Los Angeles. That’s about 22 miles. (The Houston METRORail is 7.5 miles long, just for comparison.)

With 22 accidents and six fatalities so far this year, officials say the Blue Line — one of the busiest light rails in the nation — is on pace to have more deaths in 2012 than any other year in its 22-year history — a considerable feat given the line’s checkered safety record of striking passing cars or pedestrians, or as a place where some go to commit suicide. Four of the fatalities this year were ruled suicides.

It would be nice to know what the accidents per mile traveled figure is, and how that compares to other systems. There’s no miles traveled figure in the LAT article. And finding information on METRORail crashes is nearly impossible these days; the transit authority doesn’t release that information, and the Houston-area bloggers who were maintaining counts have all moved on to other things.

In other news, the California city of Fullerton is considering shutting down the Fullerton PD and contracting out police services to the Orange County Sheriff’s Department. You may remember the Fullerton PD from the beating death of Kelly Thomas (graphic image at that link):

Two officers have been charged in his death, the police chief has left, three officers quit the force in the face of termination proceedings and three of the five council members were recalled in a June election.

But folks say it isn’t about Kelly Thomas, it is about the money:

Fullerton Councilman Bruce Whitaker, a sharp critic of how the police handled the violent encounter with Thomas, said that although the department needs to be examined, the driving force behind potentially contracting out police services is the $37 million required to operate the 144-officer department.

Another reason not to use Facebook.

Friday, August 3rd, 2012

Alberto Gutierrez was married to Mayela Gutierrez Gil. The relationship was somewhat rocky, and Mr. and Mrs. Gutierrez decided to divorce.

The divorce itself was somewhat unpleasant. Mr. Gutierrez was charged with “making criminal threats, stalking and two counts of disobeying a domestic relations court order”. The stalking charge was dismissed by a judge, who also threw out one of the two counts of disobeying a court order. Mr. Gutierrez was acquitted by a jury on the other counts.

So what? Well, it seems that Mrs. Gutierrez was romantically involved with Detective Phillip Solano of the Los Angeles County Sheriff’s Department.

…during Gutierrez’s criminal trial, information surfaced that the man’s wife, Mayela Gutierrez Gil, and the detective were Facebook friends who had exchanged messages and calls. “How are you precious? I miss you a lot,” read one from the detective, according to Gutierrez’s attorney, Arnoldo Casillas.

Mr. Gutierrez sued LACSO, detective Solano, and another LACSO deputy, Russell Verduzco. Verduzco was accused of “conspiring with Solano to cover up evidence that showed Gutierrez’s wife was in fact the one making threats against him.”

The jury awarded Mr. Gutierrez $457,500.

Sheriff’s Department spokesman Steve Whitmore said Solano will now face an internal affairs investigation. Although, he said, sheriff’s officials “believe we have very strong grounds for an appeal, so that’s going to be carefully considered.”

Random roundup, August 3, 2012.

Friday, August 3rd, 2012

We’ve got wrongful convictions, we’ve got banana republicans, and we’ve got pizza. Something for everyone: a comedy tonight. (Dammit, I miss Zero Mostel.)

In 2004, Omar Bradley, then mayor of Compton, was convicted of misappropriation of public funds. Also convicted with Mr. Bradley were Amen Rahh, a former council member, and John D. Johnson II, the former city manager.

Prosecutors said the men had used their city-issued credit cards for personal items and “double dipped” by taking cash advances for city business expenses and then charging the items to their city credit cards. Bradley was accused of misusing about $7,500 for purchases that included golf balls and shoes, cigars, a three-day stay in a penthouse hotel room and in-room movies.

Bradley’s conviction was on a felony charge: he served three years, could not hold public office, and lost his teaching credentials.

However, in another case last year, the California Supreme Court held:

…that officials must know or be “criminally negligent” for not knowing that they are doing something illegal in order to be guilty of misappropriation of funds.

The punchline?

Based on that case, the appeals court reversed its previous decision in Bradley’s case and overturned his conviction Wednesday.

(Rahh’s and Johnson’s convictions were not overturned.)

I’ve previously alluded to the police shootings in Anaheim, and observed that I don’t have a clear grasp of what’s going on. The NYT ran this story while I was on vacation, which I think gives a decent overview, and follows-up today with this story, which is more about the political and cultural divisions in Anaheim. (Note the correction at the bottom.)

As long as we’re on the NYT site, there’s another interesting story to talk about. Baithe Diop was a cab driver who was killed in 1995. Five men were convicted of his murder as part of  “an elaborate plot to distract the police from the intended crime: the theft of $50,000 worth of cocaine from a passenger in Mr. Diop’s car”.

But now, 15 years after the criminal trials, federal authorities have concluded that all five of those now imprisoned for the murder were innocent of the crime.

More:

The new findings suggest that there was a colossal breakdown in the criminal justice system. Robert T. Johnson, the Bronx district attorney since 1989, said through a spokesman on Thursday that his office had been notified of the new evidence discovered by federal prosecutors but had not yet been able “to resolve all of the questions that have been raised by this evidence.”

It now appears that the murder was actually committed by members of the “Sex Money Murder” gang.

So. Pizza. Mangia Pizza. As we have previously noted, Mangia went into Chapter 11 bankruptcy in 2010. Mangia’s founder has proposed a plan to get them out of Chapter 11. However, another creditor has proposed a counter plan. The founder’s plan would (in theory) pay back unsecured creditors 100% of what they’re owed over the next ten years; the competing plan would give that creditor control of the company, and pay back the unsecured creditors 22 cents on the dollar. The founders have since modified their plan so that the unsecured creditors will get 22 cents on the dollar immediately,”with assurances to pay the remainder of the amount owed in coming years”.

(If I was a creditor, given the situation, I wouldn’t count on getting 100% of my money back in ten years, or ever. I’d take my 22 cents on the dollar and consider anything after that found money.)

What makes this even more interesting is that the competing creditor, “Cloud Cap LLC,  a subsidiary of Austin-based management and investment firm Pileus Group LLC” became a creditor by buying a claim from a place called Knife Sharpist, which (duh) sells knives and does knife sharpening. (I’ve been there a couple of times. They do good work.) The total amount of Knife Sharpist’s claim was $244.66.

Cloud Cap’s plan calls for changes to Mangia’s menu, a revamp of the restaurant’s décor and additional locations.

(For Austin residents who might be confused, the Mangia at Gracy Farms (which the Statesman constantly calls The Domain: it isn’t) and the one on Lake Austin are owned by another company and aren’t involved in the Chapter 11 proceeding. The Chapter 11 proceedings only involve the location on Mesa and the one at the airport. But it does make me wonder: if Cloud Cap takes control, will they force those two locations to change the name?)

[Michelle] Musick [Mangia’s bookeeper] said Mangia’s management has already taken steps to get the company back on stable footing, including closing stores in Round Rock and on Guadalupe Street near the University of Texas campus.
“The Guadalupe store was actually breaking even, but the rent was so astronomically high,” she said. “The Round Rock store was bleeding money.”

Mangia, according to the article, owes “more than $750,000”. (How much more?)

Records show that the Internal Revenue Service is owed the most, about $190,000. Other creditors include the state comptroller’s office, Travis County and the Round Rock school district, as well as several businesses.

Banana republicans watch: August 2, 2012.

Thursday, August 2nd, 2012

Randy Adams wants severance pay.

That’s Randy Adams, former police chief for the city of Bell.

That’s Randy Adams, former police chief for the city of Bell, who was making $457,000 a year and cut a deal with the city of Bell to approve his disability pension at the same time the city was hiring him.

While I was on vacation, another story broke that I didn’t have time to cover. Last year, the state of California announced that they couldn’t keep all the parks in the park system open. Citizens and municipalities in California responded by donating money and coordinating fund raising events.

It turns out that the park system actually had $54 million stashed in various accounts. And folks are peeved.

In Ventura County, supervisors Tuesday sent a letter to state officials demanding the immediate return of $50,000 earmarked to repair a crucial sewer line at McGrath State Beach near Oxnard. Last year, the state said the popular beach would close because it lacked $500,000 for the fix. Officials even urged McGrath fans to vote early and often in a Coca-Cola contest that would award $100,000 to America’s “favorite” park.

Pity the poor Stockton PD. (Well, and the Stockton Fire Department, too.)

Stockton police officers and firefighters said they haven’t been able to fill the gas tanks of their emergency vehicles because the pumps at their stations are empty.

Since the city has filed for bankruptcy, the company that was providing gas has terminated the contract.

By the way, former Stockton Police Chief Tom Morris, who served as the chief for eight months and retired at 52, is getting an annual pension from the city of $204,000.

(Hattip for that last link to Instapundit.)

You’re doing it WRONG!

Wednesday, August 1st, 2012

A suspect in a Smart Car led authorities on a high-speed chase from west Houston to northwest Houston Wednesday afternoon.

(Video of the “high-speed chase” at the link.)

Hold me closer, tiny dancer. Count the headlights on the highway…

Tuesday, July 31st, 2012

Police say an officer had to swerve to avoid a woman who was dancing in the middle of the road overnight.

DEFCON 20 notes: day 3, part 1.

Monday, July 30th, 2012

The secret word for the day, boys and girls, is “routers”.

But first, a couple of pictures for my great and good friend Borepatch:

The Matt Blaze Security Bingo Card. (I hope folks can read it: I took that with a cell phone camera from the front row, so I didn’t have a great angle on it.)

And:

A gentleman in the hallway was kind enough to let me take a photo of his DEFCON Shoot shirt.

Speaking of Matt Blaze…

“SIGINT and Traffic Analysis for the Rest of Us” presented by Matt Blaze and Sandy Clark, and crediting a host of other folks.

For the past few years, Blaze and company have been working on APCO Project 25, or P25 for short. P25 is planned to be the next generation of public safety radio, and is intended to be a “drop-in” replacement for analog FM systems. Cryptographic security is built into P25: it uses symmetric algorithms and supports standard cryptographic protocols. All of this sounds great.

But there are a whole bunch of problems with this.

Encryption in P25 doesn’t work very well a significant portion of the time. There are user interface issues; on some radios, the “crypto” switch is in an obscure location, and the display doesn’t make it clear if encryption is on or off. Keys can’t be changed in the field; changing keys requires loading the radio in advance using a special device, or sending keys over the air (“Over The Air Rekeying”, or “OTAR”, which sometimes doesn’t work).

One important point is that the “sender” makes all the decisions: whether the traffic is encrypted, what encryption mode is used, what key is used, etc. The “receiver” doesn’t get to decide anything. If the “sender” sends in cleartext, either deliberately or by mistake, the “receiver” decodes it, automatically and transparently to the user. If the “sender” sends an encrypted message, the “receiver” first checks to make sure it has the proper key, then either decrypts the message or ignores it (if the “receiver” doesn’t have the key).

I feel like I am cheating a little here, but even Matt Blaze at this point in his talk recommended going and reading the group’s paper from last year, “Why (Special Agent) Johnny (Still) Can’t Encrypt: A Security Analysis of the APCO Project 25 Two-Way Radio System” for additional background.

But wait, there’s more! We have encryption, but do we have authentication? Do we know that the radios on our network are actually valid radios? Heck no! The radios transmit a “Unit ID” which is not authenticated, and which is never encrypted, even if the radio has encryption turned on. Just knowing the unit IDs lets you do some interesting stuff: you could, for example, set up two radios, do some direction finding on the received signals with the user IDs, and build a map of where the users are.

Even better: if you send a malformed OTAR request, the radios treat it like a UNIX “ping” and respond back with their Unit ID, even if they’re idle, and without the user ever knowing.

More: P25 uses aggressive error correction. But there’s a hole in the scheme; you can jam what’s called the “NID”, which is part of the P25 transmission, and render the transmissions unreadable. The Blaze group actually built a working jammer by flashing custom firmware onto the “GirlTech IM-Me”. (That was the cheapest way to get the TI radio chip they wanted to use.) You could use this to jam the NID in encrypted P25 traffic only, thus forcing cleartext on the users…

And even more: the basic problem with P25 and cryptographic security is usability. Every time an agency rekeys, someone is without keys for a period of time. Blaze mentioned the classic paper, ““Why Johnny Can’t Encrypt: A Usability Evaluation of PGP 5.0” and pointed out that many of the mistakes mentioned in that paper were repeated in designing P25.

How bad is the keying problem? Bad enough that agencies frequently transmit in cleartext, due to key management issues. (“NSA Rule Number 1: Look for cleartext.”) How frequently? Blaze and his group, for the past several years, have been running a monitoring network in several (unnamed) cites, recording cleartext P25 traffic and measuring how often this happens. About 20-30 minutes per day, by their estimate, of radio traffic is transmitted in unintended cleartext. And that traffic can contain sensitive information, like the names of informants.

Even if most of the traffic is encrypted, remember that the Unit IDs aren’t. So you’re getting some clear metadata traffic, which at the very least is useful for making inferences about what might be going on. (Zendian Problem, anyone?)

(If you’re monitoring P25 traffic, according to Blaze, the phrase you want to look for is “Okay, everyone, here’s the plan.”)

And what is the P25 community response to this? According to Blaze, the Feds have been very responsive and appreciate him pointing out the problem. The P25 standards people, on the other hand, claim Blaze is totally wrong, and that the problem is with the stupid users who can’t work crypto properly.

(This entry on Matt Blaze’s blog covers, as best I can tell, almost everything that was in his presentation. I haven’t found a copy of the actual presentation yet, but this should do to ride the river with.)

So it is getting late here, and I have to catch a plane early-ish in the morning. I think what I’m going to do is stop here for now, and try to get summaries of the three router panels up tomorrow while I’m waiting for my flight.