United States v. Dodson, 960 F. Supp. 2d 689

Background

ICE/HSI agents using Child Protection System (CPS) software identified an eDonkey/eMule IP address in Presidio County as sharing files flagged as potential child pornography in Oct–Nov 2012.
AT&T provided subscriber records tying the IP to Julian Dodson (Defendant’s son); surveillance and execution of a warrant at the residence led to discovery that the files belonged to William Dodson.
CPS compares publicly available eMule MD4 hash values of files to a law‑enforcement database of known child‑pornography hashes and logs IP addresses sharing matching files; it only accesses files a user has elected to share publicly.
Defendant moved to suppress, arguing (a) CPS’s automated hash searches constituted an unlawful warrantless search of his computer, (b) the affidavit mischaracterized CPS capabilities and omitted material facts about hash accessibility and hidden files, and (c) a Title III order was required.
The magistrate issued a warrant; the district court found agents and state sergeant credible, denied the suppression motion, and alternatively held the Leon good‑faith exception would apply.

Issues

Issue	Plaintiff's Argument	Defendant's Argument	Held
Whether CPS’s use of hash searches on the eDonkey network constituted a Fourth Amendment search of Dodson’s computer	Government: CPS only accessed publicly shared files and used the same queries any eMule user could run, so no reasonable expectation of privacy	Dodson: CPS’s automated, law‑enforcement‑only probing and hash matching was a warrantless search of his computer	Held: Not a search — files were publicly shared; no reasonable expectation of privacy, so warrant not required
Whether the warrant affidavit mischaracterized CPS as merely automating public user searches	Government: Affidavit accurately described CPS’s operation and that it only used publicly available eMule functions and MD4 hashes	Dodson: Affidavit understated CPS’s capabilities and misled the magistrate	Held: Affidavit was accurate and not misleading; claim denied
Whether affidavit failed to explain hash availability and whether CPS accessed nonpublic/hidden files	Government: eMule uses MD4 (not SHA‑1), and MD4 hashes are viewable; CPS did not access hidden system files	Dodson: Hashes not readily displayable; CPS may have accessed nonpublic files	Held: Defendant offered no specific showing CPS accessed hidden files; MD4 hashes available and files were public — claim denied
Whether evidence should be excluded under Leon (good‑faith) even if warrant deficient	Government: Officers reasonably relied on a detailed affidavit and magistrate’s warrant	Dodson: Warrant was deficient, so good‑faith exception should not apply	Held: Good‑faith exception applies; none of the Leon exceptions are present

Key Cases Cited

Katz v. United States, 389 U.S. 347 (1967) (articulating reasonable expectation of privacy test)
United States v. Leon, 468 U.S. 897 (1984) (establishing good‑faith exception to exclusionary rule)
Smith v. Maryland, 442 U.S. 735 (1979) (no legitimate expectation of privacy in information voluntarily conveyed to third parties)
United States v. Wellman, 663 F.3d 224 (4th Cir. 2011) (hash‑value matching can support probable cause)
United States v. Perrine, 518 F.3d 1196 (10th Cir. 2008) (no expectation of privacy where P2P sharing exposes files and subscriber info to third parties)
United States v. Yang, 478 F.3d 832 (7th Cir. 2007) (subjective expectation of privacy requires demonstrable efforts to keep files private)
United States v. Borowy, 595 F.3d 1045 (9th Cir. 2010) (file‑sharing users lack objectively reasonable expectation of privacy in shared files)
United States v. Stults, 575 F.3d 834 (8th Cir. 2009) (FBI retrieval from P2P networks does not violate privacy for publicly shared files)
United States v. Chiaradio, 684 F.3d 265 (1st Cir. 2012) (discussing reliability of P2P hash analysis in affidavit)
United States v. Cherna, 184 F.3d 403 (5th Cir. 1999) (two‑step review when Leon and probable‑cause issues overlap)