The Apple letter to customers couldn't happen under proposed UK law
privacyinternational.org
privacyinternational.org
Also, there's NSLs in the US as well.
rather than a company trying to embarrass the government for asking, it's the government trying to embarrass a company for not complying! -- the opposite situation from what's addressed by the UK Law.
There's a whole bunch of stuff like this. Turn up at a classified government site and ask to see the silos, and watch a press officer do impressive mental gymnastics.
The first section referenced in OP says:
>A relevant telecommunications provider who has been required under this Part to provide assistance in giving effect to a targeted equipment interference warrant, and any person employed for the purposes of the business of the relevant telecommunications provider, may not, without reasonable excuse, disclose to any person— (a) the existence and contents of the warrant
>(2) For the purposes of subsection (1), it is, in particular, a reasonable excuse if the disclosure is made with the permission of the person who imposed the requirement.
So the fact that the FBI made it public is a reasonable excuse to talk about it.
The second section says:
>A person to whom a relevant notice is given, or any person employed or engaged for the purposes of that person’s business, must not disclose the existence and contents of the notice to any other person.
We have
>In this section “relevant notice” means— (a) a national security notice under section 188, or (b) a technical capability notice under section 189
while
> But a national security notice may not require the taking of any steps the main purpose of which is to do something for which a warrant or authorisation is required under this Act.
So the first category couldn't have included this, which required a warrant. The second category seems like it could apply (although there's some ambiguity over whether it applies to entities outside the UK which I haven't dug through), but it's for general "maintain ability to comply".
>The only steps that may be specified in a technical capability notice given to a person are steps which the Secretary of State considers to be necessary for securing that the person has the practical capability of providing any assistance which the person may be required to provide in relation to any relevant authorisation
So a specific warrant would not fall under that.
I don't see how any section that the OP refers to would apply.
Do you have a link to the specific tests?
Yet disclosing its location would still have caused you to run foul of the Official Secrets Act for years.
The UK government and courts has very little sense of humour about these things and you most certainly can not in general assume that making information public even in the most blatant manner will mean that they won't still insist that the information is still legally restricted as if it is still a secret.
It remains to be seen if "reasonable excuse" as interpreted under UK law will be interpreted the way you assume it should, but assuming that making information public in one context means it should no longer be treated as secret has often been a bad bet in the UK, even when it gets totally ridiculous.
It did used to have US nuclear artillery under a dual-key arrangement, but admittedly those didn't have silos.
In 1993, an MP finally "revealed" the location to draw attention to the idiocy by exercising parliamentary privilege and mentioning the location in parliament.
For those of you who have not been to London, or isn't aware which tower I'm talking about, this is it (note the pictures showing it in the London skyline...):
https://en.wikipedia.org/wiki/BT_Tower
It is rather hard to miss, given that it rises 177 meters above street level in a part of London where the nearest other highrise is a 117m building about 1km away...
It also had a viewing platform and restaurant open to the public for 15 years while it was still an official secret...
The UK is quite fantastic at this. When you know about stuff like this, it puts UK comedy like Monthy Python's Dead Parrot Sketch[1] into very different perspective as a good illustration of behaviour that officialdom in the UK see as perfectly rational.
https://en.wikipedia.org/wiki/1993
1993 is the year bookmakers cut their odds on the monarchy being abolished by the year 2000 from 100/to 1 to 50/1
New Teletext service on ITV and Channel 4
Ford unveils its new Mondeo
Unemployment is still just short of the 3,000,000 (no real change there then?)
and
The Bank of England lowers interest rates to 6%
Not having a go, just interesting what was also going back then.
E.g. in 2004, a government source leaked a document purporting to show that Bush discussed plans with Blair to bomb Al Jazeera, and eventually it got into the hands of Daily Mirror who put it on their front page.
Government officials subsequently tried to threaten the other national papers with the Official Secrets Act if they republished the information (it didn't work; the papers ignored the threats).
I'm sure the overall level of idiocy in this respect has fallen as they've come to terms with a reality where trying to restrict information like this just makes things worse, but it's not because they wouldn't like to.
I am fairly certain I remember the BBC broadcasting the christmas morning special of the Multi Coloured Swap Shop[0] from the BT Tower at least once during the "secret" period.
What? There's no gymnastics. They just don't talk to you. "We don't confirm or deny that" is one standard answer.
Is that a typo, or is it "doublethink"?!
The opposite of "secret", meanwhile, is "unrestricted"—it's about whether people charged to act in the country's interests (public servants, politicians, members of the military, and corporate employees who have signed contracts granting them clearances) are required to avoid mentioning it in any document or speech that would be public-accessible.
A well-known example is the content of the Edward Snowden leaks. They're also "public secrets": things civilians are allowed to talk about, but which people with clearance—having more restricted rights than regular people—are prevented from talking about to civilians.
Do note that there are good reasons for this distinction, although it can seem absurd. Things are restricted or classified in large chunks. Because of this, a part of a secret can be public (e.g. the name and purpose of a secret project), without the entire secret becoming public.
If public awareness meant declassification, you'd see a lot more still-secret information leaking out, as various people would think—since there's no "here's exactly what was leaked and what wasn't" memos that go around—that some part of the secret was leaked which wasn't, and is therefore fine to talk about.
The simplest way to avoid leaking anything else is to just go on pretending that even the first part of the secret hasn't been leaked and preventing everyone from talking about even that—so that the rest of the secret can't be socially engineered out of them.
The one positive is that it's a huge mess, and many police departments have no idea how to use these laws. But I find it hard to believe that there aren't a few police departments that are actually capable and using these rules for personal gain.
PI are highlighting that in the US, Apple were at least able to publicly disclose what they believe is an egregious over-reach by a law enforcement body. In the UK, Apple execs would currently be facing significant jail time for what they have done.
[1] http://www.theguardian.com/world/2014/oct/12/police-ripa-pow...
[edit: grammar, sorry]
The reason is, I just don't know of any way that the British people can claw their way back up out of this hole - their tyrannical government seems to be 10 steps ahead of every effort to reign it in.
So I feel like I'm witnessing, helplessly, the decline of the UK as a power, and as a nation of free peoples, and the despair comes from knowing that as time goes on, the likelihood of non-violent solutions to the oppression of the British people are ever-more unlikely.
However, after giving it more than a seconds thought, I realised most of my life I've had no reason to pursue a second language so I am limited to the anglosphere. In addition, 5 of the 6 anglosphere countries form the Five Eyes alliance, so my data would probably go back to the UK government no matter what.
If you have the right to live & work in the EU, you're very lucky & years ahead of some of us. I've been learning German for 5 years & spent a lot of time looking into the EU Blue Card program.
This might not apply to UK citizens very much longer if the referendum vote goes the wrong way.
Everyone got English :)
It's the same here in Norway, we have multiple English speakers at work, and the working language is English in a lot of places.
Not speaking the local language would lock you out of certain types of jobs with language requirements, e.g. civil service jobs and customer facing roles typically, but depending on what you want to do they might not care at all.
But yes, leaving the UK to escape spying elsewhere in Europe wouldn't really achieve much.
In france they increased the emergency for 3 more months. I will bet it will be increased again.
You need cataclysm to revert things - revolution or badly lost war.
The US held as long because it had been created intentionally weak. It needed Civil War and a World War to be able to consolidate its powers. The cold and war on terror suited just fine the power creep.
That's why the constitutional framework on which a government was formed upon is very essential. And the strange thing is that America has the needed provisions in the constitution to prevent such tyrannical abuse in future. The Fourth Amendment[1] clearly states that:
> Amendment IV to the United States Constitution prohibits unreasonable searches and seizures and requires any warrant to be judicially sanctioned and supported by probable cause.
So you see, the government is blatantly violating the fourth amendment by invading its citizens' privacy, but the point is that the constitution doesn't allow it and nor is it common for governments to do this thing.
https://en.wikipedia.org/wiki/Fourth_Amendment_to_the_United...
I think a big problem with the UK is that its people are comfortable with their ignorance. Would you agree?
That's a human problem. At least the Brits are lucky enough to be ignorant about issues that rarely affect their daily lives.
When the majority of the world has government-induced issues like corrupt or racist judicial systems, conscription, violence, a lack of universal healthcare, the death penalty, a lack of food and water, disease, etc. it seems rather first world to talk about violent revolution in a country that's easily in the bottom quartile of countries that needs it.
Is this idealistic, positive talk? Certainly not, but do I feel "oppressed" by living in the UK rather than, say, Russia or the US? Heck no, I feel very lucky to live here and I know about the problems. Could it be better and should we always remain vigilant as voters? Definitely! :-)
That one sounds like a weird one out there. Especially if you consider that the UK has (re)instated (and probably would in future) draft if the situation warrants.
It would take an event of monumental proportions for conscription to be reinstated in modern British society.
Also most of this "tyranny" and "fascism" doesn't impact on the vast majority of the population, you probably care more than most of us do.
"Fine by me if the English people are okay with being governed by pedophiles, pimps, war-mongers and criminals."
Actually, it isn't fine by me.
The problem is most are apathetic or ignorant of what is actually happening.
http://www.chiark.greenend.org.uk/pipermail/ukcrypto/2016-Ja...
It's not exactly very useful if someone under active investigation finds out that they're being watched, and changes their communications behaviour as a result.
In this case, it wouldn't need to be applied as the suspect is dead.
So in practical terms, this will never be disclosed because everyone will be wiretapped, and disclosing it would mean "endangering the wiretap".
I think the only reason this wasn't done under a gag order is the FBI wants to use public response to win this case since it's about a terrorist attack (IIRC, they tried the exact same request about a Meth dealer and it was refused) so they can set a precedent. You can't set a precedent for open court and rally the public behind you if it's all secret.
A NSL gag order can be challenged.
In December 2008, the Second Circuit Court of Appeals ruled that some of the NSL gag provisions were unconstitutional, in part because they limited judicial review of the gag orders and forced courts to defer to the government’s assertions about the necessity of a gag order and also thwarted the ability of recipients to challenge a gag order.
[source:] http://www.wired.com/2010/08/nsl-gag-order-lifted/
And more gag provisions were overturned in 2013.
https://www.crowelldatalaw.com/2013/04/gagging-the-fbi-the-u...
I think the overturning of these provisions of the NSL gag order she the power of the 1st Amendment a show the US judiciary tend to be skeptical whenever the government attempts to limit free speech.
Those in favor of government power to compel Apple to commission software, laws to weaken encryption or safeguards such as rate limiting, and spending public funds to aid closed research to crack encryption have one thing in common. They are statists. They believe in the absolute authority of the state.
Guess again if you think it's a dysfunction of government when parties disagree. Extra scrutiny is required when they agree.
Really do they think the piper is not going to get paid?
Keep asking the government to do stuff for you, step on people you don't like, and it will one day do it to you.
I'm strongly opposed to government crypto backdoors. Cryptography is protected expression under the first amendment.
However, there's no participation award for weak crypto systems; you don't get immunity from lawful search under the fourth amendment because you tried (or claimed) to implement strong crypto.
If a legal search is possible because you intentionally backdoored your crypto system by giving yourself access to tamper-resistent key derivation hardware on the devices your customers own, then that legal search is ... still legal.
The All Writs Act, and this application of it, has been held up by the Supreme Court. Furthermore, much more demanding requirements have repeatedly been supported by the courts:
https://en.wikipedia.org/wiki/Communications_Assistance_for_...
The DoJ stated this quite clearly in their response to Apple's public efforts to obfuscate the issue:
"... iPhones will only run software cryptographically signed by Apple ... Just because Apple has sold the phone to a customer and that customer has created a passcode does not mean that the close software connection ceases to exist; Apple has designed the phone and software updates so that Apple's continued involvement and connection is required."
If Apple didn't hold keys that trump the owner of the device, Apple couldn't aid the government. They do hold those keys, however, and the fourth amendment still applies: they get to assist with a reasonable search.
So people will continue to have their accounts hacked more and more and everyone will keep quiet about it.
Apple is not a licensed telecoms provider as they would never of been able to provide iMessage in the UK as it lacks any ability for real-time intercept a requirement on telecoms providers.
@pjc50 Could you imagine a trade embargo between tech companies and the UK OR a ban on the sale of phones that do not adhere to the newly proposed laws?
I can't imagine the UK having a tech embargo that affected iPhones; that's the kind of stupidity that brings down governments. However, I should note that the ARM TrustZone technology that's critical to the iPhone security is developed in the UK...
That John Delorean is some weird business. Not sure how it pertains to extradition re: gag orders.
I think when it comes to laws around murder, drugs, and other organised crime it quickly becomes clear that cooperation is important and most countries would support a mutual extradition.
I believe that when it comes to laws surrounding political issues; freedom of speech, privacy, removal of encryption (for all phones without warrant or guilt) etc., some foreign companies may not feel obligated to partner up as it were. And rightly so.
You can say 10% of the phone is created in China with 30% of the R&D in Poland and 5% design in LA and so on. That division of labour doesn't really matter and it's not really the point. If the company that owns and sells the product remains outside of the UK then I very much doubt the gag order portion would be enforceable. In fact, you would just need to schedule technology to prevent the sale of none compliance. We do that in all other industries and it would be the easiest way to go.
You could argue that tech companies would still comply with warrants and you could even argue that the they could eventually add backdoors BUT you can't say the gag order would be enforceable. Companies like Samsung and Apple sell to countries other than the UK.
tldr; UK Gov demands a backdoor in the iPhone. Apple reject the gag order and backdoor. Why should the UK demand foreign companies weaken foreign technology sold domestically that would globally affect not only the sale of the product but the trust of consumers in other countries where privacy is paramount. And how or whom do they arrest when nobody complies? ;)
Why do some people seem to have the opinion that authoritarianism (anti-privacy) is a feature of one political party (or ideology) more than another. As far as I can tell, there are only a handful of congresspersons who are strong protectors of the fourth amendment. Amash - R, Wryden - D, Rand Paul - R, Ron Paul - R, Udall - D. and a few others. Most just follow whatever the party whip tells them to do, and then there are a handful of very authoritarian troublemakers: ie: Pete King - R and Dutch Ruppersberger - D, et al.
Identity politics.
The parties market themselves as anti-authoritarian to their own base, while (correctly) characterizing the other party as authoritarian. The marketing propaganda plays off peoples' varying desires for specific freedoms, and whips them into an aggressive fervor bent on taking away freedom from the other team. The politicians are then free to implement the authoritarian policies purchased by their respective sponsors.
https://en.wikipedia.org/wiki/Crypto_Wars
https://www.techdirt.com/articles/20151119/18032932868/hilla...
FYI, the primary political folks promoting encryption were small government, libertarian republicans. (These folks mostly don't exist anymore.) John Ashcroft was fairly prominent among them:
https://en.wikipedia.org/wiki/John_Ashcroft#As_U.S._Senator_...
Kids these days don't even remember the 90's.
John Kerry and John Ashcroft were two of the most prominent opponents of clipper. It is dishonest and inaccurate to claim that the Republicans were against it and the Democrats were for it, both sides were split.
Similarly, it's a bit of a reach to claim that "the Clinton dynasty" tried to mandate usage. The NSA offered the chip without royalties, and Bill Clinton endorsed it and proposed it be added to the NIST crypto standards. It was a strong nudge to make it available for free; but it never really approached the level of an attempted mandate.
Clipper was a horrible horrible idea; and there were (and still are) members of both parties who think that these sort of backdoored crypto schemes are a good idea. Clipper (and similarly flawed proposals) don't typically originate from a politician; they typically originate from the military-industrial complex and are expressed through a politician.
Partisans always have trouble remembering history though... they forget when "their side" does wrong, but they remember clearly the wrongs of the "other" side. And vice versa for good things.
Note that I'm not attempting to promote any particular party - note that I said the folks who promote encryption don't really exist anymore.
When people talked about the Dynasty candidate I assumed they were talking about Jeb! (please clap).
We exist.
More of us though are handing in our Republican membership cards. If Trump wins the nomination, I'm done with the Republican party.
I hear John McAfee is running for the Libertarian party ticket? That might be fun.
So just as we as individuals need to adjust to a world where our love affairs are known to our telcos and smartphones before our spouses, we need to require our governments to adjust to an open-by-default world where most of what they want to keep secret is just out there.
this is the idea that a city watched over by CCTV is a police state if only the police can view the cameras.
If everyone can view the cameras it's a free but different society
Wait, what? Why should we simply accept mass, indiscriminate surveillance that has an incredible potential for misuse now and in the future?!
My lifestyle, as a piece of anonymised health data, along with my genome can benefit medical research as well as my own health choices
who I meet or converse with, who is nearby, who is willing and able to purchase the same product as I locally to gain discounts, who is looking to hire someone with my skill sets, who is looking for sex.
So many options exist once We all place our digital life up on a publically readable board that it is hard to imagine we will refuse it.
But there are about four options
1. Police state. The only people with access to my digital life are the police. China is currently looking at a digital credit score, incorporating party loyalty amoungst other things.
2. Private walled gardens. AOL, Facebook, health insurers, driving insurers. All of these private companies collect my digital life right now. Some of not all can or are compelled to give the data secretly to 1. Above. Even if they were not, the total utility of the data is dramatically reduced in walled gardens plus why is trusting Facebook more sensible than trusting my government with the same data.
3. Anonymised and public. So no walled gardens but lots of open protocols for sharing data, and anonymising that data. This means my weight and most recent meal can be used by medical researchers. However, anonymising data sets sucks - there is little chance I will remain as anonymises as the idea of "privacy" indicates
4. Totally open. Just stick the raw data up and let cottage industries come tell me something interesting.
It's most probable that "good" societies will find a balance between 3 and 4. Some my even be the societies currently seen as developed democracies, but there is no guarantee.
The advantages of data are such that a society built around the right precepts for big data will win big time - like a society that wrote down its precepts 250 years ago, "we hold these rights ..."
The only protection against being blackmailed for being gay in the military is to not make homosexuality a criminal offence and then have all the gays in the military come out.
This is the same protection we have against all the mass surveillance - that we know everyone's business. Is it going to be really hard to manage? Yes, and that's why some Socities will make it and many won't. Most have not grasped modern democracy.
But we cannot avoid this. For example one suggestion is that paving stones will come embedded with "RPi-level" computing (IoT will be so cheap ...) and will in essence be used by my local council to assess wear and tear and potholes etc.
What this means is that my paving stone outside my house will be able to report every time I leave, and you can tell the difference from me stepping out or in and someone walking on the preceding flagstones.
Can we complain about the council improving how it handles potholes? But it is a total loss of privacy at my front door.
This stuff will be everywhere
1. How do you regulate that companies are actually giving things up? People will hide things if it's beneficial to them and there's very little you can do about it short of becoming the police state you said you didn't want.
2. How do you deal with the fact that some entities will have more resources than others to make use of that open data? It doesn't seem to level the playing field as you suggest. If you think that you can force them to level the playing field because their pursuits will be open as well, go to 1.
3. Innovation, competition, defense, dealing with other countries who won't act the same way and a long etc.
While I understand the abstract concept I'm not sure how much thought you've put into it with regards of the practicality.
1. Is very interesting 2. Well, need to think 3. I think the upsides to a strong data-ocracy is so great countries will copy you
But yeah worth thinking on