Oct 162020

With Harris Corporation no longer selling its cell site simulators to local law enforcement, Anaheim has joined a growing list of police departments replacing them with cell site simulators manufactured by Nyxcell and KeyW.

Nyxcell high power base station for its CSS
Nyxcell base station for its CSS

At a meeting of the Anaheim City Council on June 9, 2020, the Anaheim City Council approved the $755,000 purchase of a Nyxcell cell site simulator (CSS) from Tactical Support Equipment by a vote of 6-0-1, with Councilmember Jose Moreno abstaining because he felt he needed to learn more about how the CSS was used in the past. Although the name of the cell site simulator is redacted in documents, we were able to confirm that it is manufactured by Nyxcell.

Cell site simulators are used by law enforcement to track the location of cellular phones. They work by pretending to be a cell phone tower to which nearby cell phones will connect. Once connected to the CSS, the CSS obtains information unique to the cellular phone that allows it to be tracked. In order to connect to a target cell phone, the CSS is typically installed in a vehicle and once the cell phone is tracked to a general location, a handheld device is used to track the cell phone to a specific room or person. A CSS can also be used to eavesdrop on phone calls and text messages. The EFF has more information about how cell site simulators work.

This item was on the consent portion of the agenda, meaning that it was expected to be passed with a much larger group of items without any discussion at all by the Anaheim City Council. However, Councilmember Denise Barnes asked for the agenda item to be pulled from consent for a staff report. Barnes wanted more information so she could get her “mind around spending this money….on a cell phone site simulator.”

Police Chief Cisneros stated that the cell phone tracking equipment “has been in existence with the Anaheim Police Department since 2008. This will be the third vendor we have used since we began tracking cell phones.” [The other two were DRT and Harris.] According to Cisneros, the equipment was used “for search and rescue, critical missing people, locating injured or suicidal people who are unable to call for help, kidnap or ransom victims, hostage rescues, mass casualty threats, credible hostile threats against churches and religious groups throughout our community, human trafficking, mass murder fugitives… serial rapist investigations, etc.” Cisneros went on to say that the CSS has been used 1200 times in the last four years. However, the staff report stated, “The simulator is utilized an average of 150 times per year.” CSS logs provided in response to a public records request show that the CSS was used 86 times in 2018 and 196 times in 2019.

The reason for the purchase, Cisneros stated, is that “Our current generation of cell phone tracking equipment that we currently have… it is no longer going to be supported after July 2020.” According to the staff report, “The service contract with the existing manufacturer [Harris Corporation] ends in June 2020 and at that time the manufacturer will no longer support the existing equipment, rendering it obsolete.”

Councilmember Barnes asked how many time the equipment had been effective for locating at-risk persons or missing children, Cisneros said he didn’t have that information available. Barnes said that “if we’ve been using this [the CSS] since ’08, I take it that it’s been extremely effective for your department,” although no data was provided to the City Council about its effectiveness. Cisneros notes that Anaheim had to use the existing CSS for the county because of funding it received for the CSS from the Urban Areas Security Initiative (UASI), but now the CSS will be used mainly for Anaheim.

After Barnes moved to pass the item, Councilmember Moreno noted that he had express concerns about the technology that predated Cisneros. Moreno stated that the ACLU raised surveillance, privacy, and civil liberties concerns about CSS devices in 2016. Moreno also noted that the ACLU had to sue Anaheim to obtain public records pertaining to its CSS. Cisneros was happy to note that the policy required obtaining a search warrant before the CSS was used, but failed to note that the requirement for a search warrant was because of the California Electronic Communications Privacy Act, which was signed into law in 2015.

The equipment purchase includes all the tools needed to locate a cellular phone, cellular device, or wi-fi device. It includes an 8-channel base station unit designed to be installed in a vehicle for $518,600, a vehicular location system (which includes software and likely an antenna for the vehicle) for $60,000, a handheld Covert Hostile Emitter Angle Tracker Revised (C-HEATR), “rugged, portable, direction finding (DF) system used to locate RF emitters” for $40,716, and a 3-channel wi-fi direction finder for $60,000.

Supporting documents and audio:

Aug 162020
Low Crime San Ramon Approves Massive Surveillance Increase

San Ramon, a small city in Contra Costa County with a very low crime rate, approved spending more than $1.2 million to blanket the city in automated license plate readers (ALPRs) and surveillance cameras at its April 28, 2020, meeting. The amount includes 12 stationary ALPRs at five locations from Vigilant Solutions, 35 ALPRs from Flock Safety and 46 Avigilon surveillance cameras. Eight police vehicles are already equipped with Vigilant ALPRs and Flock Safety cameras are already installed at the intersection of Camino Ramon and Crow Canyon and the northeast intersection of Crow Canyon Boulevard and Crow Canyon Place. According […]

Jun 272020
The Surveillance Gear of Bay Area Law Enforcement Aircraft

Police aircraft are frequently spotted circling around peaceful protests around the country. These aircraft are typically equipped with high-powered cameras with equipment capable of recording and transmitting the video captured by the equipment. This article focuses on law enforcement aircraft used in the San Francisco Bay Area. At a protest one week after San Leandro Police shot and killed Steven Taylor on April 18, 2020, an Oakland Police helicopter with the tail number N220PD was observed circling protesters as they drove to the Walmart where Taylor was killed. N220PD has a FLIR 8500 camera that installed in Jan. 2016. According […]

May 162020

According to a $60,000 grant the Novato Police Department recently received from the Bay Area Urban Areas Security Initiative, new automated license plate readers (ALPRs) will be installed on Highway 37 to track terrorists. However, no suspected terrorists have been tracked or identified with Novato’s existing ALPRs, which have been in use since 2012. We asked Novato City Manager Adam McGill for information on how many suspected terrorists had been detected or tracked with Novato’s existing ALPRs. McGill forwarded the request to Novato Police Lieutenant Christopher Jacob, who responded, “According to our records, we have not detected any hot plates […]

Apr 232020
San Leandro Punts on Plan for More Surveillance Cameras - for now

On April 21, 2020, the San Leandro City Council was scheduled to consider installing 10 surveillance cameras in areas recommended by the police department. However, the agenda item came the day after San Leandro police shot and killed Steve Taylor at a local Walmart. Publicity surrounding the shooting, including cell phone video from a bystander, led to outrage that may have caused city staff to pull the item off of the agenda. There are already 12 surveillance cameras installed around the city that were originally used for traffic monitoring, but were converted to surveillance cameras and have been used since […]

Mar 302020
Vallejo Cites Ferry Terrorism to Get $30,000 Grant for License Plate Readers

The Vallejo Police Department cited ferry terrorism as part of its $30,000 grant application for license plate readers, calling the ferry “a viable threat for a terrorist act.” According to the grant application, the “Grant Funds will be utilized to establish an ALPR [Automated License Plate Reader] camera system for eastbound and westbound traffic lanes approaching the Ferry Terminal, Ferry Terminal Parking Structure and waterfront.” The Vallejo Police Department already has a network of license plate readers in locations around the city. Two of Vallejo’s ALPRs can be found on a pole on the west side of Glen Cove Road, […]

Mar 212020
Vallejo to Spend $766,018 for Cell Site Simulator

On the consent agenda for the March 24, 2020, Vallejo City Council meeting is $766,018 to purchase a KeyW cell site simulator. If approved, Vallejo Police would become the fourth local Bay Area law enforcement agency with this device, after the San Francisco Police Department, San Jose Police Department, and the Alameda County District Attorney (which shares its device with the Oakland Police Department and Fremont Police Department). These other agencies own cell site simulators manufactured by Harris Corporation. The agenda item includes implementation of a usage and privacy policy, but no policy was provided as part of the background […]

Aug 142019
Alameda County Sheriff to Get New Cell Phone Unlocking Tool

Although the Alameda County Sheriff already had a Cellebrite cell phone extraction device it purchased in 2018 for more than $200,000, the Sheriff was recently awarded $30,000 to acquire GrayKey, which has similar functionality. The Paul Coverdell Forensic Science Improvement Program grant is funded by the National Institute of Justice, the research, development and evaluation agency of the U.S. Department of Justice. The grant requires that the money be spent by December 31, 2019. Acceptance of the grant was approved by the Alameda County Board of Supervisors on July 9, 2019. The grant lists $30,000 for the “GrayKey Forensic Encryption […]

Jun 112019
Local Fusion Center Collecting 80 Million License Plate Records Annually

According to information released in response to a public records request, the Northern California Regional Intelligence Center collected more than 79.2 million license plate reader records from 32 local law enforcement agencies from June 2018 to May 2019. Piedmont, a city with about 11,000 people, sent the most data to NCRIC, with more than 22.4 million license plate reader records, which include license plate numbers and photographs of vehicles and their surroundings. Piedmont has more than 30 stationary license plate readers that capture nearly all traffic coming into and out of Piedmont. In calendar year 2018, Piedmont collected 21.6 million […]

Mar 172019
California Police Training Videos

The California Commission on Peace Officer Standards and Training (POST) produces training materials for law enforcement agencies in California. Videos are available in DVD format to law enforcement agencies for $99. Through the beauty of the California Public Records Act, below are some of the POST training videos and other police training videos. Twenty-one training videos from the California Highway Patrol were withheld under California Government Code ยง 6254 (f) because they were “for Department and/or law enforcement viewing only.” Body Worn Cameras, January 2016 – Description Bias Based Policing: Remaining Fair & Impartial, September 2014 – Description Homelessness and […]