Comment by stickfigure
10 hours ago
Honest question: What does it mean to "raid" the offices of a tech company? It's not like they have file cabinets with paper records. Are they just seizing employee workstations?
Seems like you'd want to subpoena source code or gmail history or something like that. Not much interesting in an office these days.
Sadly the media calls the lawful use of a warrant a 'raid' but that's another issue.
The warrant will have detailed what it is they are looking for, French warrants (and legal system!) are quite a bit different than the US but in broad terms operate similarly. It suggests that an enforcement agency believes that there is evidence of a crime at the offices.
As a former IT/operations guy I'd guess they want on-prem servers with things like email and shared storage, stuff that would hold internal discussions about the thing they were interested in, but that is just my guess based on the article saying this is related to the earlier complaint that Grok was generating CSAM on demand.
> I'd guess they want on-prem servers with things like email and shared storage
For a net company in 2026? Fat chance.
Agreed its a stretch, my experience comes from Google when I worked there and they set up a Chinese office and they were very carefully trying to avoid anything on premises that could searched/exploited. It was a huge effort, one that wasn't done for the European and UK offices where the government was not an APT. So did X have the level of hygiene in France? Were there IT guys in the same vein as the folks that Elon recruited into DOGE? Was everyone in the office "loyal"?[1] I doubt X was paranoid "enough" in France not to have some leakage.
[1] This was also something Google did which was change access rights for people in the China office that were not 'vetted' (for some definition of vetted) feeling like they could be an exfiltration risk. Imagine a DGSE agent under cover as an X employee who carefully puts a bunch of stuff on a server in the office (doesn't trigger IT controls) and then lets the prosecutors know its ready and they serve the warrant.
Under GDPR if a company processes European user data they're obligated to make a "Record of Processing Activities" available on demand (umbrella term for a whole bunch of user-data / identity related stuff). They don't necessarily need to store them onsite but they need to be able to produce them. Saying you're an internet company doesn't mean you can just put the stuff on a server in the Caribbean and shrug when the regulators come knocking on your door
That's aside from the fact that they're a publicly traded company under obligation to keep a gazillion records anyway like in any other jurisdiction.
1 reply →
Gather evidence against employees, use that evidence to put them under pressure to testify against their employer or grant access to evidence.
Sabu was put under pressure by the FBI, they threatened to place his kids into foster care.
That was legal. Guess what, similar things would be legal in France.
We all forget that money is nice, but nation states have real power. Western liberal democracies just rarely use it.
The same way the president of the USA can order a Drone strike on a Taliban war lord, the president of France could order Musks plane to be escorted to Paris by 3 Fighter jets.
> We all forget that money is nice, but nation states have real power.
Interesting point. There's a top gangster who can buy anything in the prison commissary; and then there's the warden.
No, state decides on the rules of the game any business is playing by.
1 reply →
> We all forget that money is nice, but nation states have real power.
I remember something (probably linked from here), where the essayist was comparing Jack Ma, one of the richest men on earth, and Xi Jinping, a much lower-paid individual.
They indicated that Xi got Ma into a chokehold. I think he "disappeared" Ma for some time. Don't remember exactly how long, but it may have been over a year.
From what I hear, Ma made 1 speech critical of the government and Xi showed him his place. It was a few years, a year of total disappearance followed by slow rehab.
But China is different. Not sure most of western europe will go that far in most cases.
7 replies →
It's legal to just put kids in foster care for no reason but to ruin someone's life?
In France it's possible without legal consequences (though immoral), if you call 119, you can push to have a baby taken from a family for no reason except that you do not like someone.
Claim that you suspect there may be abuse, it will trigger a case for a "worrying situation".
Then it's a procedural lottery:
-> If you get lucky, they will investigate, meet the people, and dismiss the case.
-> If you get unlucky, they will take the baby, and it's only then after a long investigation and a "family assistant" (that will check you every day), that you can recover your baby.
Typically, ex-wife who doesn't like the ex-husband, but it can be a neighbor etc.
One worker explains that they don't really have time to investigate when processing reports: https://www.youtube.com/watch?v=VG9y_-4kGQA and they have to act very fast, and by default, it is safer to remove from family.
The boss of such agency doesn't even take the time to answer to the journalists there...
-> Example of such case (this man is innocent): https://www.lefigaro.fr/faits-divers/var-un-homme-se-mobilis...
but I can't blame them either, it's not easy to make the right calls.
9 replies →
I heard there's a country where they can even SWAT you out of existence with a simple phone call, but it sounds so outrageous this must be some evil communist dictatorship third-world place. I really don't remember.
> Gather evidence against employees
I'm sure they have much better and quieter ways to do that.
Whereas a raid is #1 choice for max volume...
Wait, Sabu's kids were foster kids. He was fostering them. Certainly if he went to jail, they'd go back to the system.
I mean, if you're a sole caretaker and you've been arrested for a crime, and the evidence looks like you'll go to prison, you're going to have to decide what to do with the care of your kids on your mind. I suppose that would pressure you to become an informant instead of taking a longer prison sentence, but there's pressure to do that anyway, like not wanting to be in prison for a long time.
Yes but using such power unscrupulously is a great way to lose it.
> We all forget that money is nice, but nation states have real power.
Elon has ICBMs, but France has warheads.
France has Ariane, which was good enough to send Jame Web Telescope to some Lagrange point with extra precision. It's all fun and and games until the French finish their cigarette, arms French Guyana and fire ze missiles.
1 reply →
> Western liberal democracies just rarely use it.
Also, they are restricted in how they use it, and defendents have rights and due process.
> Sabu was put under pressure by the FBI, they threatened to place his kids into foster care.
Though things like that can happen, which are very serious.
> defendents have rights and due process.
As they say: you can beat the rap but not the ride. If a state wants to make your life incredibly difficult for months or even years they can, the competent ones can even do it while staying (mostly) on the right side of the law.
2 replies →
>> they are restricted in how they use it, and defendents have rights and due process.
That due process only exists to the extent the branches of govt are independent, have co-equal power, and can hold and act upon different views of the situation.
When all branches of govt are corrupted or corrupted to serve the executive, as in autocracies, that due process exists only if the executive likes you, or accepts your bribes. That is why there is such a huge push by right-wing parties to take over the levers of power, so they can keep their power even after they would lose at the ballot box.
> Also, they are restricted in how they use it, and defendents have rights and due process.
As we're seeing with the current US President... the government doesn't (have to) care.
In any case, CSAM is the one thing other than Islamist terrorism that will bypass a lot of restrictions on how police are supposed to operate (see e.g. Encrochat, An0m) across virtually all civilized nations. Western nations also will take anything that remotely smells like Russia as a justification.
1 reply →
> Also, they are restricted in how they use it, and defendents have rights and due process.
It's a nice sentiment, if true. ICE is out there, right now today, ignoring both individual rights as well as due process.
1 reply →
> Sabu was put under pressure by the FBI, they threatened to place his kids into foster care.
This is pretty messed up btw.
Social work for children systems in the USA are very messed up. It is not uncommon for minority families to lose rights to parent their children for very innocuous things that would not happen to a non-oppressed class.
It is just another way for the justice/legal system to pressure families that have not been convicted / penalized under the supervision of a court.
And this isn't the only lever they use.
Every time I read crap like this I just think of Aaron Swartz.
One can also say we do too little for children who get mistreated. Taking care of other peoples children is never easy the decision needs to be fast and effective and no one wants to take the decision to end it. Because there are those rare cases were children dies because of a reunion with their parents.
[dead]
>Sabu was put under pressure by the FBI, they threatened to place his kids into foster care.
>That was legal. Guess what, similar things would be legal in France.
lawfare is... good now? Between Trump being hit with felony charges for falsifying business records (lawfare is good?) and Lisa Cook getting prosecuted for mortgage fraud (lawfare is bad?), I honestly lost track at this point.
>The same way the president of the USA can order a Drone strike on a Taliban war lord, the president of France could order Musks plane to be escorted to Paris by 3 Fighter jets.
What's even the implication here? That they're going to shoot his plane down? If there's no threat of violence, what does the French government even hope to achieve with this?
fighter jets ARE a threat of violence, and it is widely understood and acknowledged.
Again: the threat is so clear that you rarely have to execute on it.
8 replies →
> lawfare is... good now?
Well, when everything is lawfare it logically follows that it won't always be good or always be bad. It seems Al Capone being taken down for tax fraud would similarly be lawfare by these standards, or am I missing something? Perhaps lawfare (sometimes referred to as "prosecuting criminal charges", as far as I can tell, given this context) is just in some cases and unjust in others.
Offline syncing of outlook could reveal a lot of emails that would otherwise be on a foreign server. A lot of people save copies of documents locally as well.
Most enterprises have fully encrypted workstations, when they don't use VM where the desktop is just a thin client that doesn't store any data. So there should be really nothing of interest in the office itself.
Whether you are a tech company or not, there's a lot of data on computers that are physically in the office.
Except when they have encryption, which should be the standard? I mean how much data would authorities actually retrieve when most stuff is located on X servers anyways? I have my doubts.
The authorities will request the keys for local servers and will get them. As for remote ones (outside of France jurisdiction) it depends where they are and how much X wants to make their life difficult.
25 replies →
If you're a database administrator or similar working at X in France, are you going to going to go to jail to protect Musk from police with an appropriate warrant for access to company data? I doubt it.
It sounds better in the news when you do a raid. These things are generally not done for any purpose other than to communicate a message and score political points.
I had the same thought - not just about raids, but about raiding a satellite office. This sounds like theater begging for headlines like this one.
They do what they can. They obviously can't raid the American office.
These days many tech company offices have a "panic button" for raids that will erase data. Uber is perhaps the most notorious example.
>notorious
What happened to due process? Every major firm should have a "dawn raid" policy to comply while preserving rights.
Specific to the Uber case(s), if it were illegal, then why didn't Uber get criminal charges or fines?
At best there's an argument that it was "obstructing justice," but logging people off, encrypting, and deleting local copies isn't necessarily illegal.
> if it were illegal, then why didn't Uber get criminal charges or fines?
They had a sweet deal with Macron. Prosecution became hard to continue once he got involved.
1 reply →
It is aggressive compliance. The legality would be determined by the courts as usual.
3 replies →
It wasn't erasing as far I know, but locking all computers.
Covered here: https://www.theguardian.com/news/2022/jul/10/uber-bosses-tol...
This is a perfect way for the legal head of the company in-country to visit some jails.
They will explain that it was done remotely and whatnot but then the company will be closed in the country. Whether this matters for the mothership is another story.
> but then the company will be closed in the country. Whether this matters for the mothership is another story.
Elon would love it. So it won't happen.
Of course they will not lock the data but hide it, and put some redacted or otherwise innocent files in their place.
4 replies →
Or they just connect to a mothership with keys on the machine. The authorities can have the keys, but alas, they're useless now, because there is some employee watching the surveillance cameras in the US, and he pressed a red button revoking all of them. What part of this is illegal?
Obviously, the government can just threaten to fine you any amount, close operations or whatever, but your company can just decide to stop operating there, like Google after Russia imposed an absurd fine.
You know police are not all technically clueless, I hope. The French have plenty of experience dealing with terrorism, cybercrime, and other modern problems as well as the more historical experience of being conquered and occupied, I don't think it's beyond them to game out scenarios like this and preempt such measures.
As France discovered the hard way in WW2, you can put all sorts of rock-solid security around the front door only to be surprised when your opponent comes in by window.
It's sad to see this degree of incentives perverted, over adhering to local laws.
How do you know this?
From HN, of course! https://news.ycombinator.com/item?id=32057651
They do have some physical records, but it would be mostly investigators producing a warrant and forcing staff to hand over administrative credentials to allow forensic data collection.
> forcing staff to hand over administrative credentials to allow forensic data collection.
What, thinking HQ wouldn't cancel them?
I'm sure an intelligent person such as yourself can think of ways around that possibility.
1 reply →
> Are they just seizing employee workstations?
Yes.
Why don't you think they have file cabinets and paper records?
Gather evidence.
I assume that they have opened a formal investigation and are now going to the office to collect/perloin evidence before it's destroyed.
Most FAANG companies have training specifically for this. I assume X doesn't anymore, because they are cool and edgy, and staff training is for the woke.
If that training involves destroying evidence or withholding evidence from the prosecution, you are going to jail if you follow it.
What a strange assumption. The training is "summon the lawyers immediately", "ensure they're accompanied at all times while on company premises", etc.
2 replies →
>withholding evidence from the prosecution, you are going to jail if you follow.
Prosecution must present a valid search warrant for *specific* information. They don't get a carte blanche, so uber way is correct. lock computers and lets the courts to decide.
The training is very much the opposite.
mine had a scene where some bro tried to organise the resistance. A voice over told us that he was arrested for blocking a legal investigation and was liable for being fired due to reputational damage.
X's training might be like you described, but everywhere else that is vaguely beholden to law and order would be opposite.
> Seems like you'd want to subpoena source code or gmail history or something like that.
This would be done in parallel for key sources.
There is a lot of information on physical devices that is helpful, though. Even discovering additional apps and services used on the devices can lead to more discovery via those cloud services, if relevant.
Physical devices have a lot of additional information, though: Files people are actively working on, saved snippets and screenshots of important conversations, and synced data that might be easier to get offline than through legal means against the providers.
In outright criminal cases it's not uncommon for individuals to keep extra information on their laptop, phone, or a USB drive hidden in their office as an insurance policy.
This is yet another good reason to keep your work and personal devices separate, as hard as that can be at times. If there's a lawsuit you don't want your personal laptop and phone to disappear for a while.
Sure it might be on the device, but they would need a password to decrypt the laptop's storage to get any of the data. There's also the possibility of the MDM software making it impossible to decrypt if given a remote signal. Even if you image the drive, you can't image the secure enclave so if it is wiped it's impossible to retrieve.
> Sure it might be on the device, but they would need a password to decrypt the laptop's storage to get any of the data.
In these situations, refusing to provide those keys or passwords is an offense.
The employees who just want to do their job and collect a paycheck aren’t going to prison to protect their employer by refusing to give the password to their laptop.
The teams that do this know how to isolate devices to avoid remote kill switches. If someone did throw a remote kill switch, that’s destruction of evidence and a serious crime by itself. Again, the IT guy isn’t going to risk prison to wipe company secrets.
Why is this the most upvoted question? Obsessing over pedantry rather than the main thrust of what's being discussed
I read somewhere that Musk (or maybe Theil) companies have processes in place to quickly offload data from a location to other jurisdictions (and destroy the local data) when they detect a raid happening. Don't know how true it is though. The only insight I have into their operations was the amazing speed by which people are badged in and out of his various gigafactories. It "appears" that they developed custom badging systems when people drive into gigafactories to cut the time needed to begin work. If they are doing that kind of stuff then there has got to be something in place for a raid. (This is second hand so take with a grain of salt)
EDIT: It seems from other comments that it may have been Uber I was reading about. The badging system I have personally observed outside the Gigafactories. Apologies for the mixup.
That is very much illegal in the US
It wouldn't be the first time a Musk company knowingly does something illegal.
I think as far as Musk is concerned, laws only apply in the "don't get caught" sense.
2 replies →