"Can I have your badge number and the source code to your breathalyzer?"
"Can I have your badge number and the source code to your breathalyzer?": A Minnesota man accused of drunk driving has sued to see the source code of the Intoxilyzer 5000EN machine that busted him, and the state Supreme Court is allowing the request to go forward.
The St. Paul Pioneer Press is reporting that Dale Lee Underdahl has challenged the effectiveness of the breath analyzer used by police to arrest him for drunk driving, and he's demanding to see the source code in order to make sure the machine works as advertised.
His attorney told the paper, "The problem is, the manufacturer of the thing thinks they can hold it back and not tell anybody how it works. For all we know, it's a random number generator."
That seems... unlikely, but it is interesting that the state does not want to reveal the information that would show whether its law enforcement tools are truly accurate. The company that makes the Intoxilyzer, CMI Inc. of Owensboro, Kentucky, also has no desire to turn over the code. The state isn't sure that it has the rights to the source code, though the agreement between CMI and the state does appear to give the state the necessary control of the source code. A succession of Minnesota courts have now ruled that the defendant has a legitimate right to make sure the device is accurate, and with the recent Supreme Court decision, the matter appears to be settled.
The "source code defense" has become more popular in recent years and has occasionally resulted in the code being disclosed. In 2005, a group of Florida defendants also won the right to examine the source code of a machine.
It only seems legitimate for the accused to know if the tests are accurate and if the software in the machines works as advertised. Security researcher Ed Felten made this point back in 2005 after the Florida case hit the headlines. The issue, he said, is about "fairness for the accused. If they’re going to be accused based on what some machine says, then they ought to be allowed to challenge the accuracy of the machine. And they can't do that unless they’re allowed to know how the machine works."
As a bonus, if a company proves unwilling to turn over the code, the case is often thrown out without any need to prove that the source code is in fact flawed.
(Read Original Article - Via Law & Disorder Section - Ars Technica.)
Recent blog posts
- The Secrecy Double-Standard
- Fully-qualified Nonsense in the SSL Observatory
- Appeals Court Strengthens Warrantless Searches at Border
- Justice Dept. to Congress: Don’t Saddle 4th Amendment on Us
- Feds, RIAA Ask $22,500 in Damages Per Song
- Building a better Certificate Authority (CA) infrastructure
- Where’s EFF? Why EFF Is Sometimes Quiet About Important Cases
- Congressman Wants YouTube Video Covered Up
- Man Creates "Creepy" Stalking App
- Boston College Says Using WiFi Is a Sign of Infringement