"Can I have your badge number and the source code to your breathalyzer?"
"Can I have your badge number and the source code to your breathalyzer?": A Minnesota man accused of drunk driving has sued to see the source code of the Intoxilyzer 5000EN machine that busted him, and the state Supreme Court is allowing the request to go forward.
The St. Paul Pioneer Press is reporting that Dale Lee Underdahl has challenged the effectiveness of the breath analyzer used by police to arrest him for drunk driving, and he's demanding to see the source code in order to make sure the machine works as advertised.
His attorney told the paper, "The problem is, the manufacturer of the thing thinks they can hold it back and not tell anybody how it works. For all we know, it's a random number generator."
That seems... unlikely, but it is interesting that the state does not want to reveal the information that would show whether its law enforcement tools are truly accurate. The company that makes the Intoxilyzer, CMI Inc. of Owensboro, Kentucky, also has no desire to turn over the code. The state isn't sure that it has the rights to the source code, though the agreement between CMI and the state does appear to give the state the necessary control of the source code. A succession of Minnesota courts have now ruled that the defendant has a legitimate right to make sure the device is accurate, and with the recent Supreme Court decision, the matter appears to be settled.
The "source code defense" has become more popular in recent years and has occasionally resulted in the code being disclosed. In 2005, a group of Florida defendants also won the right to examine the source code of a machine.
It only seems legitimate for the accused to know if the tests are accurate and if the software in the machines works as advertised. Security researcher Ed Felten made this point back in 2005 after the Florida case hit the headlines. The issue, he said, is about "fairness for the accused. If they’re going to be accused based on what some machine says, then they ought to be allowed to challenge the accuracy of the machine. And they can't do that unless they’re allowed to know how the machine works."
As a bonus, if a company proves unwilling to turn over the code, the case is often thrown out without any need to prove that the source code is in fact flawed.
(Read Original Article - Via Law & Disorder Section - Ars Technica.)
Recent blog posts
- EFF Experts Address Security, Openness, and Privacy at United Nations' Internet Governance Forum
- Could Iris Scanners Replace Our Wallets?
- Advertisers get hands stuck inside HTML5 database cookie jar
- Exposed student data leaves prying eyes wide open
- New lawsuit to challenge laptop searches at U.S. border (WaPo)
- With Great Power Comes Great Responsibility: A Facebook Bill Of Rights
- Phone-hacking scandal: Theresa May defends police investigation
- Would you pay for a cooler, less creepy Facebook?
- Republican Senate candidate Sharron Angle Sued By Copyright Troll
- Free Press, Lauren Weinstein, Google, and Net Neutrality