Geo fence warrant

Case1 :18-mj-00 169-ML*SEALED*Document5(Courto nly)Filed0 3/14/18Page4o f20 I NTHEUNITEDSTATESD ISTRICTC OURT2018MAR1 4PH\ :33 FORT HEWESTERND ISTRICTOFT EXAS.UT AUSTINDIVISIONW estin.onoyc rTLAA S INT HEM ATT EROFT HES EARCHOF INFORMATIONR EGARDING A CC OUNTSASS OCIATEDW ITH CERTAINL OCATIONA NDD ATE CaseN o.Xn/ bG I NFORMATION,M AINTAINEDONFiledU nderSeal COMPUTERSERVERSCONTROLL ED B YGOO GLE,I NC. AFF IDAVIT 1,S cottKibb eyb eingfirstd ulysworn,herebyd eposeands tatea sf oll ows: INTRODUCTIONA NDAGENTBACKGROUND 1 .Imakethisa ff idavitins upp ortofa na pp licationforasearchw arr antfor i nformationthati sm aintainedoncomputers erverscontroll edb yG oo gle,Inc.( “Goo gle”),an emailp roviderheadquarteredat1600A mphitheatreParkway,M ountainView,California9 4043. Theinformationt ob esearchedisd escribedinthef oll owingparagraphsandi nAtt achmentAt o thep roposedwarr ant,w hichconsistso fGoo glel ocationdataa ss ociatedwithaparticular s pecifiedlocationatap articulart ime,ass pecifiedinAtt achmentA .Thisaff idaviti sm adein s upp ortofanapp licationf oras earchw arr antunder1 8U.S.C.'2 703(c)(1)(A)t orequireG oo gle

Case1:18-mj-00 169-ML*SEALED*D ocument5(Courtonly)Filed0 3/14/18Page5o f20 t odiscloset otheg overnmentcopieso ft heinformationf urtherdescribedi nA tt achmentB.! 3 .Ihaveb ee nemployeda saSpecialAgent(SA)oft heFederalBureauo f Investigation( FBI)s inceN ovembersince2 011 .Iamc urr entlydesignateda saCybera gent ass ignedt ot heAustinResidentA gencyo ftheS anAntonioF ieldOff ice.Ih aver eceivedformal a ndont hej obtrainingi nc ybercrimei nvestigationt echniques,computere videnceidentification, a ndc omputerevidences eizurea ndprocess ing.A saF ederalAgent,Ia mauthorizedtoinvestigate v iolationsofl awsoftheU nitedStatesa ndtoe xecutewarr antsiss uedundert hea uthorityo fthe UnitedStates.Ih aveparticipatedi ntheexecutiono fn umeroussearchw arr antsford ocuments a ndothere vidence,i ncludingcomputersa ndelectronicm edia,inc asesinvolvingcrimestheF BI i sauthorizedtoi nvestigate.Iama“federall awenforcementoff icer”withint hemeaningofR ule 41(a)(2)(C)oft heFederalR ulesofCriminalProcedure.Iamengagedi ne nforcingfederal c riminallawsa nda mauthorizedb ytheA tt orneyGeneralt orequestasearchwarr ant,a mongother things. 4 ,Ihaveparticipatedi nt heinvestigationo ftheo ff ense(s)l istedherein.T his aff idavitisb asedonmyp ersonalknowledgea swella sreportsm adebyo therl awenforcement off icers,i ncludingF BIS pecialAgents(SAs),A ustinPoliceD epartment( APD), Bureauof 1T heGovernmentm aintainsthatt heinformationsoughth ereinconsistse ntirelyof“record[s]” o therthanthe“ contentsofcomm unications,”s ubjecttoa norderu nder1 8U.S.C.§2 703(d), r equiringo nlyashowingthatt herearereasonablegroundst obelievet hatt hei nformationsought i sr elevantandm aterialtoa no ngoingcriminalinvestigation.S ee1 8U.S.C.§2703(c)(1)(A). G oo glehasindicatedthati tb elievesas earchwarr anti srequiredtoo btainthel ocationdata s oughti nthisapp lication.A lthought heGovernmentd isagree swithGoo gle’sposition,b ecause therei sprobablec ausetobelievet hatt heinformations oughthereinwillc ontaine videnceoft he federalcriminaloff ensesspecifiedinthisAff idavit,theGovernmentissee kingasearchwarr ant i n t hisi nstanceinordertos pee dcoll ectionofthedatad uet oitst imesensitivenature. 2

Case1:18-mj-00 169-ML* SEALED*Document5(Courto nly)Filed0 3/14/18Page6o f20 Alcohol,Tobacc o,Firearms,andExplosives(ATF),theU.S.PostalInspectionService(USPIS), a ndo therlawenforcement.B ecausethisa ff idaviti sbeings ubmitt edfort helimitedp urposeo f establishingprobablec auseforthei ss uanceo fasearchw arr ant,andi td oesn otc ontaineveryfact k nownt omeo ro theragentsoftheF ederalBureauofI nvestigation.Add itionall y,theincidents describedh ereinocc urr ed as horttimea go;theinvestigationi songoingandi nitsp reliminary stages. 5 .T heA PD,ATF,FBI,USPIS,a ndothera genciesare investigatingaseriesof bombingsthatocc urr edinAustin,Texas,whichiswithintheWesternDistrictofTexas,inMarch 2 018.P reliminaryanalysisofthebombingsr evealedthatthee xplosived eviceutilizedi na llthree incidentswasapipeb ombc oncealedinsideofac ardboardb ox.Thosed evicesareeachl egall y class ifieda saDestructiveDeviceasdefinedb yT itle2 6U nitedS tatesC ode§5845.T itle2 6 UnitedStatesC ode§5 861makesitu nlawfulforanyp ersontoposs essaf irearm(“firearm”is d efineda sincludingaDestructiveDevice)t hatisrequiredtober egisteredwiththeN ational F irearmsRegistrationa ndT ransferRecordandi sn otsoregistered.T itle26UnitedS tatesCode §5 861a lsomakesitunlawfult ot ransferafirearm( includingaDestructiveDevice)t oapersonto w homthef irearmi snotr egistered. 6.B asedont hefactss etf orthint hisa ff idavit,t hereisp robablec ausetob elievethat t heGoo glea cc ountsidentifiedinA tt achmentA,a ss ociatedwith ap articularspecifiedlocationa t ap articularspecifiedtime,c ontainevidence,fruitsandinstrumentalitieso fav iolationofTitle26 U nitedS tatesCode§5861( prohibitedposs ess ion/transfero fd estructived evicedefinedb yTitle 2 6U nitedStatesCode§5 845),amongo thers tatutes(the“ SubjectO ff enses”).Thisa ff idavitis

Case1:18-mj-00 169-ML* SEALED*Document5(Courto nly)Filed0 3/14/18Page7o f20 baseduponmyp ersonalknowledge,myreviewo fdocumentsa ndotherevidence,andm y conversationsw ithotherl awenforcementoff icers,a swella smytraininga nde xperience. J URISDICTION 3.T hisC ourthasj urisdictiont oiss uether equestedwarr antb ecauseitis“acourto f competentj urisdiction”a sdefinedby1 8U.S.C.§2711a nd1 8U .S.C.§§2703(a),( b)(1)(A),& (c)(1)(A).S pecificall y,t heC ourtis“ adistrictcourto ftheUnitedS tates. . .t hath asjurisdiction o vertheo ff ensebeinginvestigated.”1 8U .S.C.§2 711 (3)(A)(@). BACKGROUNDR ELATINGT OGOO GLE,G OO GLEL OCATIONSSERVICESAND RELEVANTT ECHNOLOGY 4.Ac ell ulartelephoneo rmobiletelephonei sah andheldwirelessd evicep rimarily usedforv oice,text,andd atacomm unicationthroughr adiosignals.Cell ulart elephonessend signalsthroughnetworksoftransmitt er/receiverscall ed“cell s,”enablingcomm unicationwith o thercell ulart elephonesort raditional“landline”telephones.C ell ulart elephonesrelyo nc ell ular towers,t helocationo fwhichmayp rovidei nformationont helocationo ft hes ubjecttelephone. Cell ulart elephonesmaya lsoincludeg lobalpositionings ystem( “GPS”)technologyfor determiningt helocationo fthedevice. 5 .Goo glei sac ompanywhich,a mongo thert hings,provideselectronic comm unicationservicestos ubscribers,i ncludingemailservices.Goo gleall owss ubscriberst o obtaine mailacc ountsatt hed omainnamegmail.coma nd/orgoo gle.com.Subscriberso btainan a cc ountbyregisteringw ithGoo gle.Asubscriberusingt heProvider’sservicesc ana cc esshiso r h eremailacc ountf roma nycomputerconn ectedt ot heInternet. 6.G oo gleh asdevelopeda noperatings ystemformobiled evices,includingcell ular 4

ns$$ } Case1 :18-mj-00 169-ML* SEALED*Document5(Courto nly)Filed03/14/18Page8o f20 phones,k nownasAndroid,thathasap roprietaryoperatingsystem.N earlyeveryc ell ularphone u singtheA ndroido peratingsystemhasa nass ociatedG oo gleacc ount,andu sersarep romptedto a ddaG oo gleacc ountw hent heyfirstturnonanewA ndroidd evice. 7.B asedo nmyt raininga nde xperience,IhavelearnedthatG oo glec oll ectsand retainslocationd ataf romA ndroid-enabledm obiledevicesw henaGoo glea cc ountuserh as e nabledGoo glelocationservices.Goo glec ana lsoc oll ectlocationd atafromnon-Android d evicesifthedeviceisr egisteredt oaGoo gleacc ountandt heu serhaslocationservicese nabled. T hecompanyu sesthisi nformationf orlocation-baseda dvertisingandl ocation-baseds earch results.ThislocationinformationisderivedfromGPSdata,cellsite/celltowerinformation,and W i-Fiacc essp oints. 8.L ocationdatac anass istinvestigatorsinu nderstandingafull erg eographicp icture andt imelineb yi dentifyingt hecell ulartelephonesint heareaduringt heoff ensesd escribedbelow. T his,inturn,w illall owlawe nforcementtoi dentifypotentialwitness es,a sw ellasposs ibly inculpatingo rexculpatingacc ounto wners.Add itionall y,locationinformationd igitall y integratedi ntoimage,video,o rothercomputerf ilessentv iaemailc anfurtheri ndicatethe geographicl ocationofthea cc ountsusera tap articulartime(e.g.,d igitalc ameras,includingon c ell ulartelephones,frequentlys toreGPScoo rdinatesi ndicatingwhereap hotowast akeni nt he metadatao fi magefile). F ACTS 9.OnMarch2,2018atapp roximately6:55am,at111 2HaverfordDrive,Austin, T exas78753int heWesternD istrictofTexas,a ne xplosionocc urr edo nthef rontporchofthe

Case1:18-mj-00 169-ML*SEALED*D ocument5(Courto nly)Filed03/14/18Page9o f20 singles torybrickr esidence,resultingi nthed eathofA nthonyS.H ouse. 10.OnMarch12,2018atapp roximately6:44amat4806OldfortHillDrive,Austin, T exas78723intheW esternD istrictofTexas,a nexplosiono cc urr edinsidet her esidence,r esulting inthed eatho fa1 7-yearoldv ictima ndi njuriestoa nadd itionalvictim. 11 .OnMarch12,2018atapp roximately11 :50amat6706GalindoStree t,Austin, T exas78741int heWesternD istrictofT exas,anexplosiono cc urr edoutsideofther esidence, sendingo nepersont othehospitalwithi njuries.Basedonc omm unicationsfromthev ictim,the p ackagecontainingt heexplosived evicemayh aveh adthea dd ress“6705Galindo”w ritt enoni t. 1 2.Lawe nforcementhasa ss ess edthatt heexplosived evicess haredcomm onalities, s ucha sthedeliverymethod,c ontentsoft hee xplosivedevice,andt hemann ero fd etonation.Law e nforcementbelievesallthreee xplosionsarelinked. 1 3.T heGovernmenthasn otfounda nyi nformationo far egisteredDestructiveDevice f ora nyofthevictimso fthesebombingso rresidenceo fthehomes,makingt hep oss ess ionor transfertot hemunlawful. 1 4.TheG overnmentisrequestingint hiswarr antt heGoo glei nformationfor a llGoo gle acc ountsi nthen earvicinityo ftheexplosionsd uringthet imeperiodIb elievethee xplosive d eviceswerep laceda ttheb ombingl ocations.Byidentifyingtheu serso ftheGoo glea cc ountso r IPadd ress esoft hedevicesi nthea readuringt hesep rescribedt imesa ndcross -referencingt hat datawitho theri nvestigatorystepss ucha sc ell ulartelephonec all ingr ecords,asuspect(s)o r witness (es)mayb eidentified.Therelevant l ocationp arametersandt imeperiodsa rea sfoll ows: Date/Time:F rom7:00p.m.onMarch1,2 018until7:00a.m.onMarch2,2 018

Case1:18-mj-00 169-ML*SEALED*D ocument5(Courto nly)Filed03/14/18P age1 0o f20 Geographicalb oxw iththef oll owing4(four)l atitudeandl ongitudecoo rdinateso f111 2 HaverfordD rive,Austin,Texas7 8753: 1)3 0.4055 11,-97.650988 2 )30.407107,- 97.64944 5 3)30.4055 90,- 97.646322 4)30.404329,-97.647983 Date/Time:From7:00p.m.onMarch11 ,2018until7:00a.m.onMarch12,2018 G eographicalb oxw iththef oll owing4( four)latitudeandlongitudec oo rdinatesof4806 OldfortH illD rive,Austin,T exas7 8723: 1)3 0.286282,- 97.676573 2)3 0.291056,- 97.673680 3 )30.290193,- 97.671700 4)30.286524,-97.673961 D ate/Time:F rom7 :00p.m.onM arch11 ,2018until1 2:00p .m.onMarch1 2,2 018 G eographicalboxwiththef oll owing4(four)l atitudeandlongitudec oo rdinateso f6706 GalindoS tree t,Austin,Texas7 8741: 1 )3 0.22 7865,- 97.698344 2)3 0.22 7730,- 97.694777 3)3 0.22 9598,-97.692699

Case1:18-mj-00 169-ML* SEALED*Document5( Courtonly)Filed0 3/14/18Page11o f20 4)30.22 9598,- 97.697054 EVIDENCE,F RUITSANDI NSTRUMENTALITIES 15.Basedo nthef oregoing,Irespectfull ysubmitthatt hereisprobablec ausetob elieve thati nformationstoredo ntheProviders’serversa ss ociatedw itht heG oo glea cc ountsa cc ess edat t hep articularspecifiedl ocationsatathep articularspecifiedtimes,asd etailedinA tt achmentAof t heproposedwarr ant,willcontainevidence,fruitsandinstrumentalitiesoftheSubjectOff enses. 16.Inp articular,theg eographicalregionsb oundedbythelatitudinala ndl ongitudinal coo rdinatesi ndicatedinA tt achmentAtot heproposedw arr antreflectst hes urr oundingregionof e achvictim’sadd ress(‘TargetA reas’).Thes pecificl ongitudeandl atitudeindicatedinA tt achment Aw asidentifiedthroughamapp ingsoftware,whichmatchedthelongitudeandlatitudeindicated inAtt achmentAa scorr espondingtoe achvictima dd ress .ThisAff idavits ee ksauthorityt ocoll ect c ertainl ocationinformationr elatedtoGoo glea cc ountst hatwerel ocatedwithint heTargetAreas d uringt heT argetTimePeriod( the“SubjectA cc ounts”). 17.T heinformations oughtfromGoo gler egardingtheS ubjectAcc ounts,specifiedin A tt achmentBtot hep roposedwarr ant,will i dentifyw hichc ell ulardevicesweren earthelocation w herethebombingstoo kplaceandmayass istlawenforcementinidentifyingpersonswerepresent orinvolvedwitht heb ombingsunderi nvestigation.T her equestedinformationincludes: a.L ocationinformation.A lllocationd ata,whetherd erivedf romGlobal P ositioningSystem( GPS)data,cells ite/cellt owertriangulation/trilateration,a ndp recision measurementinformationsucha st imingadvanceo rperc allmeasurementd ata,a ndW i-Fi l ocation,i ncludingtheG PSc oo rdinates,estimatedradius,a ndthed atesa ndtimeso fa lllocation

Case1:18-mj-00 169-ML*SEALED*D ocument5(Courto nly) recordings,duringtheT argetT imePeriod; b.E achdevicec orr espondingtothel ocationd atatob ep rovidedb yGoo gle willb einitiall yidentifiedb yG oo gleo nlybyan umericalidentifier,w ithouta nyfurthercontento r i nformationidentifyingtheu sero faparticulardevice.L awe nforcementwilla nalyzet hisi nitial datatoi dentifyuserswhom ayhavewitness edo rparticipatedintheS ubjectOff enseso rwhomay b epotentialwitness es. c.Fort hoseacc ountsi dentifiedasrelevantt otheo ngoinginvestigation throughananalysisofprovidedrecords,andupondemand,Goo gleshallprovideadd itional l ocationhistoryo utsideo fthepredefinedareaf ort hoserelevanta cc ountstodeterminepatho f t ravel.Thisa dd itionall ocationhistoryshallnotexcee d60minutesp luso rminusthef irsta ndlast timestampass ociatedw iththeacc ounti ntheinitialdataset.( Thepurposeofpatho f travel/contextuallocationp ointsist oe liminateoutlierp ointswhere,f romthes urr oundingdata, becomesc leart her eportedp oint(s)a ren otindicativeoft hed eviceactuall ybeingwithinthes cope ofthew arr ant.) d.F ort hoseacc ountsidentifieda srelevantt ot heongoingi nvestigation througha na nalysisofprovidedrecords,a ndupondemando ft heagents,t heG oo gles hallprovide thesubscriber'sinformationforthoserelevantacc ountstoinclude,subscriber'sname,email add ress es,servicessubscribedto,last6monthsofIPhistory,SMSacc ountnumber,and r egistrationI P. Filed03/14/18Page1 2o f20

Case1:18-mj-00 169-ML* SEALED*Document5( Courtonly)Filed03/14/18P age13o f20 R EQUESTFORSEALING 1 8.Ifurtherrequestthatt heCourtordersthata llp apersins upp orto fthisapp lication, i ncludingt hea ff idavitands earchw arr ant,b es ealedu ntilfurtherorderoftheC ourt.These d ocumentsdiscussa nongoingcriminali nvestigationt hatisn eitherp ublic,norknownt oallo f thetargetso fthei nvestigation.Acc ordingly,therei sgoo dcauset o sealt hesedocuments b ecausetheirp rematuredisclosuremays eriouslyj eopardizet hisi nvestigation. 10

Case1 :18-mj-00 169-ML* SEALED*Document5( Courto nly)Filed0 3/14/18P age14o f20 C ONCLUSION 19.Basedont heforegoing,Irespectfull yrequestthatthew arr antsoughth erein p ursuanttothea pp licableprovisionsoftheS toredComm unicationsAct,1 8U.S.C. §2703(b)(1)(A)(forcontents)a nd§2 703(c){1)(A)(forr ecordsando therinformation),andthe r elevantp rovisionsofF ederalRuleofC riminalP rocedure41.Becauset hisi nformationisstored a tGoo glea ndmayrequires earchesinv arioustimez ones,theG overnmentrequestsauthorityf or thiss earchtob ec onductedata nyt ime,d ayornight. Id eclareunderp enaltyofp erjurythatt heforegoingi st rueandcorr ecttot heb estofm y C osakMle SCOTTK IBB EY S pecialAgent FederalBureauofInvestigation Austin,Texas SubscribedandsworntobeforemeatAustin,Texas,onthis/J H ON.MARKL ANE UNITEDS TATESMA: k nowledgea ndbelief. 11

https://int.nyt.com/data/documenthelper/757-austinaffidavit1/d448fe5dbad9f5720cd3/optimized/full.pdf