Every criminal defense lawyer has sat before a client in stunned bemusement listening to the client explain his understanding of the law. Usually, the explanations are amazingly wrong, showing such a fundamental lack of comprehension that one wonders how they’ve managed to elude prison this long. But sometimes, a client will present an understanding that is sophisticated, supported, well-reasoned and utterly wrong. Still, it’s such a well-grounded argument that the lawyer has to shake his head and think about it for a few minutes to figure out why such a fine sounding argument is inherently flawed. Some lawyers can’t figure it out until it’s too late. Uh oh.
Via Ambrogi at Legal Blog Watch, Paul Ohm at Freedom to Tinker has taken on the task of cleaning up the brilliant but wrong mess created and spread by geeks, who have decided that they have figured out how to game the system. Paul calls them YANALs, standing for “you are not a lawyer.”
With this post, I’m launching a new, (very) occasional series I’m calling YANAL, for “You Are Not A Lawyer.” In this series, I will try to disabuse computer scientists and other technically minded people of some commonly held misconceptions about the law (and the legal system).
I start with something from criminal law. As you probably already know, in the American criminal law system, as in most others, a jury must find a defendant guilty “beyond a reasonable doubt” to convict. “Beyond a reasonable doubt” is a famously high standard, and many guilty people are free today only because the evidence against them does not meet this standard.
The geek YANALs have apparently developed a series of theories and even technologies which they believe will insulate them from prosecution.
When techies think about criminal law, and in particular crimes committed online, they tend to fixate on this legal standard, dreaming up ways people can use technology to inject doubt into the evidence to avoid being convicted. I can’t count how many conversations I have had with techies about things like the “open wireless access point defense,” the “trojaned computer defense,” the “NAT-ted firewall defense,” and the “dynamic IP address defense.” Many people have talked excitedly to me about tools like TrackMeNot or more exotic methods which promise, at least in part, to inject jail-springing reasonable doubt onto a hard drive or into a network.
People who place stock in these theories and tools are neglecting an important drawback. There are another set of legal standards–the legal standards governing search and seizure–you should worry about long before you ever get to “beyond a reasonable doubt”.
While I have no issue with this “advice”, it does suggest that their ideas are otherwise valid from the perspective of beating ultimate conviction. I’m not so sure. In fact, I have some serious doubts that life through the eyes of a computer geek will either comport with the reality of a courtroom, from evidenciary problems to “saleability” to a jury. This is a hard thing to explain to people who are binary thinkers. Their tolerance for ambiguity may be a bit limited.
Much as I admire Paul’s efforts to take on geekdom, his effort seems to suffer from some of the same misconceptions as his intended audience:
In addition, you will have been assigned an overworked public defender who has no time for far-fetched technological defenses and prefers you take a plea bargain, or you will have paid thousands of dollars to a private attorney who knows less than the public defender about technology, but who is “excited to learn” on your dime. Maybe, maybe, maybe after all of this, your lawyer convinces the judge or the jury. You’re free! Congratulations?
This is the depth of understanding one would expect from a client, not a lawyer, and certainly not a criminal defense lawyer. But the blog is hosted by Princeton University’s Center for Information Technology Policy, and offers nothing to confirm that Paul Ohm is a lawyer (Ambrogi’s post says that he’s an associate professor at University of Colorado Law School, but that doesn’t exactly answer the question, now does it?), or if so, what type of law he practiced or how long he’s practiced. Or if he’s practiced law at all. Based upon the quote above, my guess is that he’s either never really practiced law, or he’s was a prosecutor. What he is not is a lawyer who knows what he’s talking about when it comes to criminal defense lawyers.
My experience is that YANALs view the law as a series of hypertechnicalities, anyone of which will trip up the cops and prosecution. They harbor a bizarre belief that the nice words appearing regularly in court decisions actually mean something, rather than present black letter law which is then torn to shreds by the thousand exception and the functional refusal to apply it in the trenches. How does one explain to a binary thinker that a judge waves his arm and the law mysteriously disappears? “They can’t do that!” Oh yes. They can. They do. Every single day. Welcome to the real world.
We all have this problem with YANALs, many of whom post comments here that reflect pure unadulterated silliness based upon their lack of understanding of the law coupled with their belief that they have a better idea. They often bring much to the discussion, challenging our preconceptions with their misconceptions, and every once in a while come up with a truly great idea. It doesn’t happen often, but it does happen. So we take the good, ignore the bad, and go on with our lives. Sometimes we correct the YANALs and other time we let them rant. Everyone needs a catharsis now and then.
While Paul Ohm’s effort to disabuse the YANALs is admirable, I hope that he’s got the background to make the right points from the right perspective. I have serious doubts that he does, based upon this inaugural post. It’s one thing to spread misinformation amongst a bunch of geek YANALs. It’s another to correct them with information that’s only marginally better, but still far off the mark.
Discover more from Simple Justice
Subscribe to get the latest posts sent to your email.

As a guy with both some geek points and nothing resembling a law degree, I couldn’t agree with both of you more, even where you disagree with each other. I think it’s very, very difficult for somebody who hasn’t been around such things to understand how stressful, for the guest of honor, even such relatively minor things as an “interview” can be under the best of such circumstances.
Your humility masks your wisdom. I don’t disagree with Paul on his main point, but more on the periphery. But then, I’m not a lawprof so I can afford to base my views on experience rather than commonly held academic misperceptions.
It bugs me when people, (Not you Scott) toss all us geeks into the same bucket.
As someone who spends a lot of time with criminal defense lawyers, I competely realize that my understanding of the law needs to me limited to my understanding of my role in a legal proceeding. However, that does not preclude me from learning from sage attorneys who have been tremendous teachers in correcting my misconceptions.
On the other hand, my repsonse to attorneys is YANAG either.
Sadly, I have spoken to attorneys who believe that their client is such an expert in computers that they already have the answers they need to proceed with a case.
That is when I get to explain the difference between a real super-geek and the average, off the street geek that thinks he knows something about computer forensics.
Also, while attorneys may be experts in analysing search warrants, I am an expert in analysing search warrants involving digital evidence and catch many things that attorneys miss simply because they don’t have the awareness of the technology involved.
The best team is one that plays on each other’s strenghts.
And if you happen to get a geek for a client, your best move is to call me! lol
🙂
You’re absolutely right, and this goes on the long list of things lawyers are not. The other day I added scientist (for about the 27th time) to the list, and today we add computer geek. When lawyers play the same game in reverse, assuming that we’re so damn smart that we don’t need the help of someone who truly possesses expertise, we have failed as both “expert” and lawyer.
And as you personally know, Larry, I appreciate the expertise you bring to digital forensics.
I believe he’s calling me out. (I was a geek but am more involved in sales and management today.)
You’ll have to forgive the analogy here but it is like this, even if you don’t know how a car works, you need to have a working knowledge of of the parts and how to operate it. Even if you know how to operate a car, don’t pretend you know how to drive a bus. Even if you know how to drive a bus, don’t do it without a license.
I’m one of his YANALs but am not so arrogant to say that my technie understanding is enough to ignore or even think less of my lawyers’ legal advice.
Everyone should be technical enough to know that how something works on paper doesn’t mean it works that way in reality.
Man oh man oh man…as a serious IANAL just knew this was going to hit close to home. I’ve had technicians come into my house and image my hard drives as part of civil discovery. It really, really SUCKS to have strangers looking through everything on your computer, even with a protective order.
In a criminal case, they could actually have taken my computers, not only giving them all my data, but delivering a cripling blow to my business and my life.
Thanks, Scott, for linking to Ohm’s post and for your commentary. It’s all great stuff.
Whenever Bennett writes about “there but for the grace of God go I,” he’s not kidding. It can, and does, happen to anybody. Not everybody, but anybody, and no one knows when it’s going to be their turn.