How could Judith Collins as Minister of Police oversee this case against her mate Cameron Slater?

Can Judith Collins be Police Minister? Seeing as the case against her favourite attack pet for paying Ben Rachinger to try and hack the Standard is now with the Police to decide on a prosecution, can she be the Police Minister?

Can she be Police Minister when reviewing the appalling way in which Police abused rights when raiding Nicky Hager?

Juha Saarinen: Hager, Whale Oil, Dirty Politics, Rawshark, and what the police should have done
The court file for Nicky Hager’s case against the police raid on his house, supposedly to ferret out the Dirty Politics book source “Rawshark”, has been released and it contains some real doozies from a tech perspective.

To recap, this is indeed interesting stuff, laden with hackers, information dumps online, and more. It’s very 2015, very techie and, by the looks of it, the authorities are pretty clueless on how to handle it.

At the centre of the complaint, which the police acted on by raiding Hager’s home to search for evidence, are one or more of Cameron “Whale Oil” Slater’s computers and servers which were supposedly hacked.

The hacking of Slater’s computers and servers constituted a criminal act, and formed the basis of the police raid on Hager’s house.

But the hacking itself wasn’t done by Hager. He said he received the leaked information on a memory stick.

A computer forensics expert who reviewed the police investigation into the hack confirmed as much:

The examination of Mr Hager’s electronic storage devices was to locate evidence of a crime. It was not suspected that these items had been used to commit the crime itself.

The same expert said there was no point in trying to investigate the virtual private server hosted at Linode that ran whaleoil.co.nz, or name registries and other hosting services which may have provided clues as to who, or where, Rawshark is.

That server is the scene of a crime, and as an IT security expert testifying for Hager made clear, it should’ve been the focus of the investigation. Rawshark accessed whaleoil.co.nz and most probably used information from that site to get into Google Gmail and Facebook accounts held by Slater and there may have been traces of that activity.

Likewise, Slater’s personal computer was cloned – a full copy of the data on it was taken – but did anyone search it for evidence that showed the Mac laptop had been compromised somehow?

Rawshark used the Tails (The Amnesic Incognito Live System) – a Linux-based operating system that starts up a computer, hides the user while on the internet and leaves no trace of activity on the device – to communicate with media.

Edward Snowden uses Tails precisely because it leaves no trace. Yet the police expert thought that Rawshark and Hager might have made some mistakes like typing text into a window that wasn’t protected by Tails, and suggested that as Windows uses temporary files, there could be some incriminating information left on the devices the police investigated.

Only problem is, Tails does not start up Windows, nor does it use temporary files. It was highly unlikely that police would find any evidence of Tails’ use on Hager’s computers, or data left on them that could’ve led them to Rawshark.

Police asked social network site Twitter to produce information as to who was behind the Whaledump account (now suspended); Twitter told the police to go through the official channels and make a Mutual Legal Assistance Treaty (MLAT) request, which the police didn’t do.

Likewise, Google wanted a US court order to release information and, again, the police seemed to not have gone through with that. Vodafone and Trade Me wanted production orders from the police to release information, but these were not produced.

There are some comic elements around the raid too. As part of cloning of one of Hager’s laptops, the police took a photo of it to record the information on the screen.

This was apparently because the police needed internet access because they didn’t have a 3G/4G mobile data connection with them. You’d think that a mobile data connection would be standard issue so that the police don’t have to obtain internet access via the systems they’re investigating.

I always thought it odd that a “denial-of-service attack” (my emphasis) was behind the hack. As the name implies, such an attack stops servers from serving, or responding, making them rather hard if not impossible to access. Somehow, gigabytes of data were copied while the whaleoil website was inaccessible. It’s hard to see how that even begins to make sense.

Other possibilities, such as seeing if the site was hacked through a flaw in the notoriously insecure WordPress publishing platform, appear not to have been considered either, nor the possibility it was an inside job.

Did an insider leak the information to Hager?

Did that person supply Rawshark with login details?

Those are surely questions that needed to be answered before the police raid on Hager.

Most curiously, the Prime Minister claimed to know who Rawshark is. If so, why didn’t he tell the police the name – and why didn’t the police ask him for it? That could’ve avoided the raid on Hager, which in any case turned up no evidence at all as to Rawshark’s identity, or the hack itself.

There seems to be something totally askew in how the investigation into how the material behind Dirty Politics came into Hager’s hands, with no plausible explanation as to why it was done in the manner it was.

I think we deserve an explanation as to why Hager was raided when any evidence was likely to be contained not on his computer systems, but on others.

…do any of us trust Collins to get to the bottom of these abuses of power by the Police? Especially as Collins was so deeply involved with Slater?

If it was the Left Wing appointing good friends of Left wing bloggers into the Police Minister position while an ongoing investigation into that blogger was occurring the NZ Herald and ZB would be spluttering in rage – because it’s the right wing doing it – not a murmur.