Compliance Management, Malware, Privacy

FBI agent: NIT in Playpen case not malware because it didn’t act maliciously

Alfin testimony USA v Matish

An FBI special agent deposed in federal court said the network investigative technique (NIT) used to identify members of child pornography site Playpen should not be defined as malware because its behavior was not malicious.

“The NIT utilized in this investigation was court-authorized and made no changes to the security settings of the target computers to which it was deployed. As such, I do not believe it is appropriate to describe its operation as ‘malicious,'” special agent Daniel Alfin wrote earlier this month in a declaration to the U.S. District Court of Eastern Virginia. Later in the case, Judge Henry Coke Morgan, Jr., rejected defendant Edward Matish's motion to dismiss the case on account of an allegedly involuntary incriminating statement, according to an Ars Technica report.

Alfin also refuted the defense's contention that it needed access to the FBI's exploit, to determine if the government exceeded its warrant's scope. Alfin stated the exploit's disclosure would only "explain how the NIT was deployed to Matish's computer, not what it did once deployed."

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.