Dan Guido

@mattblaze It sounds like the FBI Tor exploits are a lot more narrow than the situation contemplated in your paper.

@mattblaze Rather than perform a "search" they beacon a few bits of info and quit. IMHO little of your argument about specificity applies.

@mattblaze As far as I can tell, FBI is willing to share all post-exploit code that retrieves that info too. https://www.scribd.com/doc/306272980/Special-Agent-Daniel-Alfin-s-Declaration-in-Playpen-Case …

@dguido A defense could be that the beacon was installed more widely than permitted by the warrant, and thus invalidated the search.

@mattblaze If given the shellcode, I think you can make that argument? It does the search. I'm not sure what perspective the exploit adds.

@dguido The argument would be that the beacon was installed on more computers than authorized by the warrant.

@mattblaze How does a copy of the exploit source code indicate the # of times it was used (in potential violation of warrant terms)?

@dguido I don't know - since I've not seen the code, we have no idea what it does.