Author Archives: rhoffa

Warrant Canary December 2017

As of December 1, 2017 attorney Joseph Welch has not been the subject of
any search warrants, subpoenas, retention notices, national security
letters or any other legal process that might compromise client
confidentiality or otherwise seek information regarding client
representation, including client identities.

It’s been awhile since we’ve updated the warrant canary – it’s been a busy year!

Get 30 days free at Express VPN

Using a VPN is crucial when protecting your data from your ISP, cell phone provider, or when using public Wifi networks. A VPN establishes a secure encrypted connection from your phone or computer to the VPN provider, who then forwards your connection to its final destination, hiding your data and your location.

There are many VPN providers out there with new ones popping up all the time. The one I prefer to use is ExpressVPN – it’s fast and secure. If you sign up using this link we both get 30 days for free – I suggest you give it a try.

Get a Free 30 days from ExpressVPN

Marijuana use being used to deport legal immigrants

The new administration has started denying visas and removing non-citizens for even legal marijuana use. If you are not a citizen, whether you’re in the country legally or not, any evidence of marijuana use can be grounds for removal.

According to Leafly.com immigrants, visitors, and any non-citizens should:

– Refrain from all cannabis use, including for state-legal medical purposes
– Not seek employment in the cannabis industry
– Remain silent when asked about past cannabis use
– Scrub mobile phones and social media accounts of any mention of cannabis

Read more at www.leafly.com/news/politics/under-trump-legal-cannabis-is-a-deportable-offense

Warrant Canary March 2017

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

As of March 29, 2017 attorney Joseph Welch has not been the subject of
any search warrants, subpoenas, retention notices, national security
letters or any other legal process that might compromise client
confidentiality or otherwise seek information regarding client
representation, including client identities. Today’s stories –

Stltoday dot com – Four St. Louis police officers have been suspended
without pay amid investigations into allegedly falsified overtime pay
requests, the department said Tuesday.

Riverfronttimes dot com – Magic Citys New EP Bids Farewell to Anne Tkach

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=tvgH
—–END PGP SIGNATURE—–

WikiLeaks CIA dump suggests Signal’s encryption safe

There’s been a lot of concern in the past few days about Signal being compromised in light of the WikiLeaps CIA dump, but the bottom line is that any compromise is likely within your phone itself and has nothing to do with your secure messaging app, the encryption it uses, or the messaging company’s servers.

From the New York Times:

Neither Signal nor WhatsApp, for example, appears by name in any of the alleged C.I.A. files in the cache. (Using automated tools to search the whole database, as security researchers subsequently did, turned up no hits.) More important, the hacking methods described in the documents do not, in fact, include the ability to bypass such encrypted apps — at least not in the sense of “bypass” that had seemed so alarming. Indeed, if anything, the C.I.A. documents in the cache confirm the strength of encryption technologies…

In other words, the cache reminds us that if your phone is hacked, the Signal or WhatsApp messages on it are not secure. This should not come as a surprise. If an intelligence agency, or a nosy sibling, can get you to install, say, a “key logger” on your phone, either one can bypass the encrypted communication app. But so can someone looking over your shoulder while you use your phone. That is about the vulnerability of your device. It has nothing to do with the security of the apps.

New Yorks Times – The Truth About the WikiLeaks C.I.A. Cache

Warrant Canary Feb2017

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

As of February 7, 2017 attorney Joseph Welch has not been the subject of
any search warrants, subpoenas, retention notices, national security
letters or any other legal process that might compromise client
confidentiality or otherwise seek information regarding client
representation, including client identities. Today’s headlines:

Stltoday dot com – Human skull found in state park in Franklin County

Riverfronttimes dot com – Jason Kander Launches Let America Vote to
Fight Voter Suppression

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iQIcBAEBCAAGBQJYmi3nAAoJEIaudshjzkUgv6cP/1pXXgPvG7lMfEJQwjmASvo6
JfjPS/mmb1vMth75pSw8F2oWEAsVOZZo7VXtoA0NH4YJyIrksIn6Oy6owXMSLPOY
QEDQw8OUk6UW0vZjpnQiKGuJr0ZdI0OooTsCvdmfSe7qxMiAgi5sW6BP9unJHTjk
oH0l530lozE6lHve3Pc3Dy6ZCe+FXQpWJjUq+EE67h+pKrsDDuAeWPrw+wzT3DyV
9p74DpN1QBJwZxkdHUEhnOQ66rOG3YeyzzgvvnMeESawj1Peuuk1/JvmSuoFcUNU
sCMGfh8xSsi6m+U4KfOqa9j3PUnT9dJH8MoXuIPnSAUOEvhtGGJeZxVmkJatJZ6Z
EZ+bm+/9E3jylX0pY+nnDwsn3gp4e/jEgIo3Xe40zWA/X1n7ZR2k5dC+rpnPktbG
z8mO9vF7LKQdLZuTMaPzg6I1HN3b91XknJvULS52Xhv2t9LsmaSQYvhAHouUvkDB
Z61mBizqIBb843Tdno2bDbs/209sNbcNmpwBGDLdAUm76/X/huWcQPUcBPKj7joB
ki44CiCv+YfptKGfKeRaWBjMs1n7g44tF4dQImZBFD1m9QyWqwGaR5KPOtg1F76L
Br/ETRxB234w2BS95dAlW4aKca4MMEhj7BLjaut//8usdbGtwZf+L47RjYafIB/u
CylncBuR5T+Fkw2FLVvb
=M499
—–END PGP SIGNATURE—–

Jail Phone Recordings Hacked

One of the most important things to remember if you or a loved one is locked up in jail or prison is that every phone call is recorded and will be used against you.

Prosecuting attorneys and cops have carte blanche access to these recorded calls and prosecutors have been known to stay up late at night in the days before trial listening to every call a defendant has made in order to find incriminating statements.

Often people will try to talk in code or otherwise obscure what they’re saying, but the cops always figure out what you really mean, and the prosecutor can easily explain it to the jury.

Attorney client communications are supposed to be confidential and shouldn’t be recorded, but in 2015 a massive hack of Securus resulted in the discovery of thousands of supposedly-confidential attorney client calls in with all of the other ones:

Particularly notable within the vast trove of phone records are what appear to be at least 14,000 recorded conversations between inmates and attorneys, a strong indication that at least some of the recordings are likely confidential and privileged legal communications — calls that never should have been recorded in the first place. The recording of legally protected attorney-client communications — and the storage of those recordings — potentially offends constitutional protections, including the right to effective assistance of counsel and of access to the courts.

 

https://theintercept.com/2015/11/11/securus-hack-prison-phone-company-exposes-thousands-of-calls-lawyers-and-clients/

The ability to talk to your criminal defense lawyer without the fear of being eavesdropped on or recorded is one of your fundamental rights. Call or text Joe Welch securely using Signal.

Warrant Canary Jan2017

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256

As of January 16, 2017 attorney Joseph Welch has not been
the subject of any search warrants, subpoenas, retention
notices, national security letters or any other legal
process that might compromise client confidentiality or
otherwise seek information regarding client representation,
including client identities.

Today’s headlines:

East St. Louis fire destroys historic church, but not the
faith of the pastor – Stltoday dot com.

Congratulations – and advice – for Circuit Attorney Gardner
Kimberly Gardner was sworn in as St. Louis circuit attorney
on Friday, January 6, making history as the first African
American… – Stlamerican dot com.
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=1wza
—–END PGP SIGNATURE—–

Security hole in popular WhatsApp message app

There’s some controversy brewing about whether the security issue in the WhatsApp secure messaging app is a backdoor or what – the Electronic Frontier Foundation spells out exactly what that should mean to the end users:

If you are a high-risk user whose safety might be compromised by a single revealed message, you may want to consider alternative applications. As we mention in our Surveillance Self-Defense guides for Android and iOS, we don’t currently recommend WhatsApp for secure communications.

But if your threat model can tolerate being notified after a potential security incident, WhatsApp still does a laudable job of keeping your communications secure. And thanks to WhatsApp’s massive user base, using WhatsApp is not immediate evidence of secretive activity.

If you need to securely communicate with anyone (and we urge you to consider to secure your communications with all family, friends, co-workers, co-conspirators, and lawyers) then you should install Signal Private Messenger and use it for all sensitive and not-so-sensitive communications. confidentiality