"Can I have your badge number and the source code to your breathalyzer?"
"Can I have your badge number and the source code to your breathalyzer?": A Minnesota man accused of drunk driving has sued to see the source code of the Intoxilyzer 5000EN machine that busted him, and the state Supreme Court is allowing the request to go forward.
The St. Paul Pioneer Press is reporting that Dale Lee Underdahl has challenged the effectiveness of the breath analyzer used by police to arrest him for drunk driving, and he's demanding to see the source code in order to make sure the machine works as advertised.
His attorney told the paper, "The problem is, the manufacturer of the thing thinks they can hold it back and not tell anybody how it works. For all we know, it's a random number generator."
That seems... unlikely, but it is interesting that the state does not want to reveal the information that would show whether its law enforcement tools are truly accurate. The company that makes the Intoxilyzer, CMI Inc. of Owensboro, Kentucky, also has no desire to turn over the code. The state isn't sure that it has the rights to the source code, though the agreement between CMI and the state does appear to give the state the necessary control of the source code. A succession of Minnesota courts have now ruled that the defendant has a legitimate right to make sure the device is accurate, and with the recent Supreme Court decision, the matter appears to be settled.
The "source code defense" has become more popular in recent years and has occasionally resulted in the code being disclosed. In 2005, a group of Florida defendants also won the right to examine the source code of a machine.
It only seems legitimate for the accused to know if the tests are accurate and if the software in the machines works as advertised. Security researcher Ed Felten made this point back in 2005 after the Florida case hit the headlines. The issue, he said, is about "fairness for the accused. If they’re going to be accused based on what some machine says, then they ought to be allowed to challenge the accuracy of the machine. And they can't do that unless they’re allowed to know how the machine works."
As a bonus, if a company proves unwilling to turn over the code, the case is often thrown out without any need to prove that the source code is in fact flawed.
(Read Original Article - Via Law & Disorder Section - Ars Technica.)
Recent blog posts
- In Bid to Sway Sales, Cameras Track Shoppers
- Unprecedented 25-Year Sentence Sought for TJX Hacker
- EFF Appeals Dismissal of Warrantless Wiretapping Case
- Viacom Makes Its Case Against Yesterday's YouTube
- Obama supports Senators draft plan to rework U.S. immigration policy - Includes National Biometric ID card for all.
- Domain Names Can't Defend Themselves
- Hacker Disables More Than 100 Cars Remotely
- Judges Approves $9.5 Million Facebook ‘Beacon’ Accord
- Hooking Up The Big Brother Machine... And Fighting It
- Court: State Can Dump Non-Sex Offenders Into Registry