UK surveillance bill includes powers to limit end-to-end encryption
techcrunch.com
techcrunch.com
This, of course, would require microphones on all citizens as well as many more in the surrounding environment, to ensure communications of unwilling citizens can be monitored as well. And, of course, we'd need video as well to get those pesky sign language users[0].
These sort of bills always make me wonder if we'll ever see a moral stance taken by tech companies. There's a few skirmishes that happen every now and then but there doesn't seem to be any general consensus on what companies will tolerate in both themselves and their business partners. I'd love to see a "Fair Trade"-esque branding used as an indication that the product and its supply chain don't include actors who support government surveillance.
[0]: OT, but it makes me realize you can literally make illegal gestures due to https://en.wikipedia.org/wiki/Hate_speech_laws_in_the_United...
Admittedly it is a bit drastic, but low-tech and very effective.
you mean zombie phones? ;)
Seriously, what you're talking about is one of the reasons I've wanted to get a Blackphone... but I think I saw a blip on my radar that it may be compromised
It actually reminds of an episode of Star Trek the Next Generation where the ship was commandeered after the crew were "drugged" by a hypnotic game. I believe the episode was "The Game".
It's hilarious because it's true.
Ofcourse we all know the strong controls and safeguards there will be:
https://www.theguardian.com/uk-news/2016/jun/06/letters-lack...
So will this bill reduce, increase or have no effect on the attacks? If not, then what would reduce the attacks and why are the authorities not doing it already? If it will reduce the attacks, how much does it have to reduce them before we accept the intrusion on privacy as a necessary evil?
The methods needed to reduce attacks (geopolitical unrest resolved) is probably not within the capacity of the police forces we have, and even pretty good safety is so expensive no one is willing to pay for it (even if we did all agree to register every action we took with the government.)
There is no government action which can promise results when it comes to motivated attacks, so when you hear "oh if we allow this police action then terrorist attacks will stop." you are hearing purposeful naivete at the best, and power grabs at the worst.
Once someone decides to kill a lot of people, it's already too late. There is no, repeat, no way to prevent every mass murder. A determined killer will always find a way.
Nobody wants to soberly admit that the only way to prevent terrorist attacks are to keep people from wanting to do so in the first place, which is a long and imperfect process with absolutely no guarantee of success.
A lot of America's mass shooters are simply deranged and hungry for national infamy.
This sort of surveillance, on the other hand, is supposed to be all about effectiveness... But it ain't.
There do exist more reasonable compromises. For example, we as a society have already said that you can search someone's property if you get a court order. That's a smaller cost, because the authorities are forced to go through a supervised process before anyone's privacy is in jeopardy, and it's still sufficient to find the evidence in a huge proportion of cases.
But the proposal on the table is extreme. It affects everyone's privacy, before there's even a notion that a crime has been considered.
Burning down the house to kill a spider is stupid no matter how many people vote for it.
Why would anybody asks? But, your point stands: I've been absolutely amazed that nobody had blown up our (Parisian) metro at 8:30 in the morning already. If you want a maximum casualty count, just bring a bunch of stuff and shake it in a pressure cooker. Just synchronize payload over multiple lines, and boom, you got something around thousand of casualties, plus a massive panic mouvement, and a genuine fear of public transportation for a while.
That said, I would also like to see more discussion of alternatives instead of just saying "it'll never work".
Some hypothetical approaches for discussion:
- Convincing violent groups to be less violent; demonstrating that they can get more of what they want by participating in society than by attacking it (a multi-generational issue)
- Finding a place for the "lone wolf" types to feel like their needs and concerns are addressed, including mental health
- Getting first-world powers to stop purposely destabilizing other countries
- Accepting what remains of the problem as if it's a natural disaster (e.g. just as people accept or ignore the 1000x worse problem of traffic deaths)
I do think that this is going to be the correct path for us as a society, long term. There are a lot of obstacles though; convincing people their theological beliefs have been manipulated, fixing the havoc created around the world from globalization, and the profits gained by some (powerful) people.
- Finding a place for the "lone wolf" types to feel like their needs and concerns are addressed, including mental health
Mental health availability in the US needs to improve immediately.
- Getting first-world powers to stop purposely destabilizing other countries
Ha ;)
There is a difference between something like chemotherapy, which has drastic negative side effects but can save the body, and fake cancer drugs, which might have little to no side effects(or massive ones!) but you die either way, enriching the scam artist on your way out.
This is a very naive argument.
Of course it is possible. I can search all my Facebook messages now. We know the NSA can search a large proportion of the world's internet traffic.
Even if it's not a problem today (in your opinion), then either that trend has to be reversed or it will become a problem at some point.
See http://www.economist.com/blogs/graphicdetail/2015/11/daily-c...
Last year, that increased to around 100, this time based on 2 attacks (both in Paris, France).
So far this year, there have been nearly 300 fatalities over 9 separate incidents: http://www.latimes.com/world/europe/la-fg-europe-terror-2016...
Correction: there were around 170 fatalities in 2015, and there have been around 150 so far in 2016.
I have a couple of ideas why this may be so:
a) Back in the seventies/eighties when media reported on the Troubles in Northern Ireland, the ETA in Spain or the RAF in Germany / BR in Italy, reporting was much more low key (For anything but the most spectacular events, Norwegian papers would typically publish a small note to the effect that "Members of the Basque separatist organization ETA today killed a police officer and two bystanders in whatever Spanish place you've never heard of."
Today if someone for whatever reason kills a couple of people, it is a major story with photos, interviews, analysis and whatnot. Hence, events on a similar scale as was experienced in the past now appear much more significant.
b) Violence today seems a lot more arbitrary; in the seventies, the typical terrorism victim if my recollection of the news back then is anything to go by, was someone who was targeted for something they were; police officers, magistrates, cabinet members, Israelis, whatever.
Hence we'd just shrug it off, as we weren't targets, anyway.
Today, for a significant number of perpetrators, anyone is a target - and that makes it a lot harder to just shrug an attack off as something which does not affect you; three people get blown up in a bar in Elbonia? Could've been you; after all you went to the neighbourhood pub only yesterday!
c) Additionally, as much (if not all) terrorism today appears motivated by religion (or, more precisely, by some perverted interpretation of religion), it is a godsend to anyone of a xenophobic bent. Get rid of the people you do not like; get rid of the terrorism problem at the same time!
Militant islamism basically makes xenophobia legitimate, which in turn can be argued to foster militantism, which further fosters xenophobia and downwards we go.
Just because some number has increased, that doesn't say anything about whether it will increase further, and if so, at which rate. So: How do you know there is a trend in the first place?
In 1972, there were over 12,000 shooting and bombing attacks in Northern Ireland; by 1977, this was down to 2,800.[41] In 1976, there were 297 deaths in Northern Ireland; in the next three years the figures were 112, 81, and 113.
But seriously, no one is saying they don't want to "reverse" things. There are just many ways to do that that actually solve the issue (old fashioned going out and getting the bad guys?) that don't diminish our rights.
[0]: https://twitter.com/BaltimorePolice/status/75552242792132608...
I think that is the stage in the debate that convinces most normal people. Losing privacy of their gmail account to some faceless government entity is a theoretical problem that has no real impact on their lives. Terrorism on the other hand is a real world problem with easy to see consequences. I think most pragmatic non-techy people are willing to make that trade. If you want to change their mind, focus on showing how loss of privacy has real world effects.
No, it's not. Just as the risks of loss of privacy are much higher than generally perceived, the risks of terrorism are much lower than generally perceived. Terrorism is perceived as a problem, but it really isn't, in most parts of Europe. Car crashes are a real world problem. Terrorism isn't.
(Now, I am obviously not saying that governments should simply blindly ignore terrorism risks--but overall, it really isn't a big problem, and there almost certainly are risks where most of the money would be better spent trying to reduce fatalities.)
Perhaps that's because the security services are doing such a fantastic job. To make sure it's not a problem in all of Europe and make sure no more children die, they can't fight the war with hands behind their backs.
This is not what I believe, but it is how the argument gets phrased. How do you beat it? Not by extolling the virtues of end-to-end encryption and the importance of your civil liberties, that's for sure.
Not accepting this misleading framing is an important step in addressing the wishes of the population for totalitarianism.
Many of the recent attacks, particularly those in the past week in Germany and in Nice, France, don't appear to have involved extensive planning. If that's the case, then it would follow that there wasn't much communication to monitor. Therefore this bill would have no effect on the attacks or attackers.
However, the increased access to information by the spying services may result in many more false positives and either an increase in resources needed to sustain the service, or a drop in effectiveness, perhaps leading to an increase in the number of successful attacks. [1]
> If not, then what would reduce the attacks and why are the authorities not doing it already?
The Aarhus model [2] appears to be effective, but perhaps is difficult to "sell" politically? Maybe bulk data collection and machine learning are being presented as a "silver bullet", and quicker than training up many police officers and giving the time for them to regain the trust of the communities they serve.
[1] https://techcrunch.com/2016/06/07/new-snowden-document-revea...
[2] https://www.theguardian.com/world/2015/feb/23/home-jihadi-de...
You're probably right about the other stuff as well. Personally, I'm as worried about the links between the recent attacks, mental illness and poverty as I am about radical Islam. The governments are probably being oversold on what's possible with the technology, as well as how secure it will all be.
However, I do think there needs to be some kind of quicker fix. These attacks are playing into the hands of the extreme right (and left), so something needs to be done quickly if only to prevent us electing Donald Trump and his ilk.
That being said, let me explain how ineffective they are: Your law-abiding citizen will give up their encryption, but this doesn't raise the bar much for a criminal to get it. It's still just a matter of minutes until you have an encryption-implementation which is not compromised. You might get the occasional idiot-criminal who doesn't think of getting proper encryption which you therefore might be able to stop, but that's about it.
And on the other side, you expose your entire population to criminals who might steal their not-properly-encrypted information, as well as putting the country at risk of devolving into Totalitarianism. And even if none of that happens, you still have the Panopticon-effect which can have severe negative effects on mental health.
There are two common fallacies I see here. The first happens a lot with interpreting carcinogenicity or toxicity studies, where an X% increase/decrease is quoted without an absolute value. The second happens in the stereotypical startup pitch of "if only we could get just 20% of that market" -- it's a made-up number with no basis for why that is the right number.
Not necessarily. Someone could be try to persuade by offering an argument that he thinks will be appeal to some, but does not represent his full thinking on the subject (e.g. he could also have moral reasons for opposing increased surveillance).
There is no magic solution but there are plenty of solutions proposed in fear and panic that would destroy the very things they purport to defend.
Even if it would work, is it worth living under tyranny to defeat terrorism?
France has the most draconian laws of any Western country atm and there is no evidence attacks in France have been reduced.
They currently hold the false belief that the reason attacks succeed is because they are handled primarily via encryption.
https://www.techdirt.com/articles/20151118/08474732854/after...
> The reports note that Abdelhamid Abaaoud, the "mastermind" of both the Paris attacks and a thwarted Belgium attack ten months ago, failed to use any encryption whatsoever (read: existing capabilities stopped the Belgium attacks and could have stopped the Paris attacks, but didn't). That's of course not to say batshit religious cults like ISIS don't use encryption, and won't do so going forward. Everybody uses encryption. But the point remains that to use a tragedy to vilify encryption, push for surveillance expansion, and pass backdoor laws that will make everybody less safe -- is nearly as gruesome as the attacks themselves.
http://www.nytimes.com/2016/07/16/world/europe/attack-in-nic...
> For all the years of worry that terrorists would develop more sophisticated methods, Thursday’s attack in Nice realized a fear that turned out to be far worse: a form of violence so crude that it renders many of our usual defenses useless.
These aren't sophisticated people and they've correctly determined the government isn't capable of stopping attacks via communication mechanisms they actively monitor.
"There's a security problem in Europe at the moment". What are you talking about? The number of people harmed in terrorism-related events in Europe in any given year is dwarfed by the number of people who harm themselves by accident or stupidity in those same countries. And dwarfed to an even greater extent by the number of people killed by police in the USA, or killed in mass shootings that don't get attributed to terrorism in the USA. It is the media attention given to the situation, not the situation itself, that is terrifying. Europe is extremely safe and does not have a security problem.
The entire western world has a problem with xenophobia. It can't control its own politicians who lead military assaults on middle eastern or north african nations for purportedly moralistic reasons. Assaults that are guaranteed to alienate entire generations of people and incite preditable retaliatory violence.
Nothing about the proposed privacy intrusions helps protect people from 'terrorism'. It feeds a cycle of ineffectual security theatre and provocation of western-produced radical activism that makes us all less safe. With one hand we create and promote terrorism, and with the other we strip ourselves of our freedoms and march toward technological totalitarianism.
So those who do pander to those concerns end up winning the vote, and then they can trash our civil liberties. This is precisely how we British have ended up voting to leave the EU.
There has been a significant increase in the frequency and effectiveness of terrorist attacks in Europe. People are growing more worried about it. We need to make those people feel safe again, and we're not going to do that by saying "my privacy is more important than reducing terrorism".
The argument you make at the end is the strongest point: on the one hand we are nurturing terrorism by not dealing with the fallout of globalisation, and our governments have been sold an expensive algorithm that they believe can handle the problem, when in reality it will make us even less secure. Meanwhile, the media can sell more advertising with the increased attention, so they're quite happy to add fuel to the fire.
However, all these arguments end up being lost in whether it will work or not, and the Donald Trumps will always win that argument because they go to a lower denominator. If we want to win it, we need to show more genuine empathy.
In addition, when people say "solutions" what they mean is "something that doesn't inconvenience me or require me to do anything".
However if you want "real" solutions, here are some:
1) Start denouncing ALL religion as the force for stupidity that it actually is. "I believe in an imaginary sky being with no evidence and you can't convince me otherwise" should be LAUGHED AT as the absurdity it is.
2) Get everybody off of petroleum so that there isn't any money for people to fight about over in the middle east.
3) Quit supporting dictators and bombing countries for geopolitical reasons.
4) Start fixing double digit unemployment rates instead of making them worse with "free trade" agreements that only allow companies to use open borders while preventing workers from doing the same.
5) Make mental health care a much bigger priority than it currently is.
Unfortunately, these solutions don't feed into people's preconceived biases and xenophobia and don't put more money into rich people's pockets. So they are all non-starters.
1) Religion is not really the problem. There are a over a billion muslims in the world, and a little more than that who are Christians. The percentage of each that are involved in violence, even major wars, is so small to be statistically insignificant (definitely less than 1% or even 0.1% (or even 0.00001% if you just consider terrorists)). When religion does come into play its typically in a more ethnocentric way - e.g. religion-as-race.
2) most of the current problems, including those coming out of iraq, were not due to 'petroleum', but rather internal rebellions and foreign interference that is probably more political/ideological than financial in nature. A certain mindset might attribute a lot of the problems in the middle east to politicians a decade earlier seeking to win elections by looking tough on dictators, but not having the willpower to deal with the aftermath of their intervention.
The other points are good, though blaming 'freetrade' as the cause for unemployment and/or other financial troubles is probably a bit simplistic.
Taking responsibility can put an end to a lot of bad things happening in todays society. Doing whatever without having to face its consequences is the root cause of such behavior that causes harm to people.
You could have constitutional measures controlling the way that wars were funded. A simple example: simple outlaw any kind of deficit spending by the national government. Another: a mechanism by which the release of funds could be tied up under legislation supervised by a third party such as the judiciary. [You could have a war chest, but encode it in a law such that the money could only be released if a senior court ruled that the release satisfied self-defense criteria.]
One of the reasons that the original United States constitution (Articles of Confederation) was replaced by the current one was related to military funding. In the old system, it was difficult to raise an army for shared purpose (e.g. fighting the revolutionary war) and there was potential for states to go to war with one another. The issues raised by that period will be familiar to anyone following European integration projects. Some hard-line libertarians in the US remember the Articles of Confederation fondly, because of the limits it imposed on government power.
It very much is.
Most religions promote "us vs them" attitudes that make people think that anything can be done to the "them". The religions in the US also give birth to our "domestic terrorists" but they don't get called that because 1) they are white and 2) "Well, they just kill baby killers, fags, etc. so they kinda deserve it."
I don't see calls to deport Baptists, thank you very much.
Religion needs to finally get terminated. Period.
> but rather internal rebellions and foreign interference that is probably more political/ideological than financial in nature.
Nobody would care about most of those dictators if there wasn't enough money involved to make them important. See: Africa. Nobody really cares one iota about genocide or terrorism in Africa as it has no importance.
> though blaming 'freetrade' as the cause for unemployment and/or other financial troubles is probably a bit simplistic.
The issue isn't "freetrade" per se. It's the fact that the corporations get to be transnational while the workers don't get to cross national borders anywhere near as easily. So, the corporations get the benefits while the workers get shafted.
I'd argue for example that Christianity is only peaceful these days because the states that are predominantly Christian are also the most prosperous. And, if you want an example of what atheists do during times of hardship, look to soviet Russia or even Nazi Germany.
As for why middle eastern dictators matter more than African dictators to the west (basically the US), it's possibly because, on the international stage, your partially right: the middle east was initially interfered with because of its oil, but also because of its proximity to Russia. And today's conflicts are not about those reasons but the legacy of those reasons, I would say.
There's nothing about being an atheist that promotes hatred. There isn't a holy text for Atheism that tells people to believe or do things.
Besides, it's a tired argument without merit: https://michaelsherlockauthor.wordpress.com/2014/10/21/the-a...
Hitler had his ideology, Stalin his manifestos etc - they all had their own, unique 'holy book' or similar that justified their crimes and it would be a mistake as you've said to somehow link them all as being from a common position.
And yet Hitchens and possibly you do the same thing in the opposite direction: despite the average ISIS member having as much in common as your, say, average US muslim as a nazi might have to a 1917-era russian communist (next to nothing) - you are arguing that their religion, not their idealogy is at fault.
You might argue that the various holy books of faiths cause a problem: for as much as the bible and the (far better written) quran espouse love and joy etc etc they both also include a fair amount of violence. But these books have been rewritten, multiple times, and are constantly being reinterpreted. Blaming the text for the actions of the reader seems harsh.
I guess ultimately the problem I have is that people who say religion is the problem and it should be banned seem to me to be worryingly similar to those that said computer games should be banned in the 90s. A very small amount of people committed atrocities, and all of a sudden it was the games 'promoting violence and hatred' that needed to be stopped, rather than people confronting the more nebulous and difficult issue of culture surrounding the criminals that made them more susceptible to hate and sociopathy.
I did NOT say banned. That way lies madness. Freedom of religion
However, it should be treated with disdain and scorn by the majority. It should not be a safe refuge for the unthinking.
On the other hand, there is nothing in atheism that can possibly say that anything is wrong. If the material universe is all that exists, humans are fundamentally no different from mosquitos or rocks. Killing a handicapped person because they inconvenience you cannot be seen as essentially worse than burning a leaf. In short, atheism provides no reason to do or not do anything other than "because I want to".
By contrast, if someone claiming to be a Christian wants to commit murder, they can only do so in opposition to the explicit commands and teachings of Jesus and of the moral laws they claim to believe.
By no means does this imply that "Christians" will always behave better than atheists. But at least there is ground for defining what it means to behave "better" and to argue for such behavior.
That is right, but I suspect, that if it weren't for religion, people would find another narrative, to create a "us vs them" attitude. Nationalism is an example that comes without religion, racism is another, and I suspect a plentitude of isms, that can be used for that.
I think, religion is mereley a vector for marginalization, not the problem in itself.
Treat terrorism as just another crime, nothing special, nothing existentially critical. Nothing to fight a war against the entire world over. Governments already have the tools they need to fight terrorists without limiting encryption, they simply choose not to use the tools they have, because they would rather use terrorism as a pretext for grabbing power.
With regards to "Treat terrorism as just another crime, nothing special," I feel that the problem with terrorism, as it is called is the fact that it is coordinated and targeted. It is more like "organised crime" but it has the specific goal literally of creating terror, whereas the interests of organised crime are purely commercial and if you don't get in their way they won't get in yours.
The issue is with people going around creating terror in a coordinated way, which undermines the authority of the state, and many people's feeling of safety.
Of course that still leaves the question of how do you respond to it, but simply "accepting that the potential for crime, even mass murder, is a necessity for a free society" is similar to me to accepting that a waterfall software development model is a natural emergent phenomenon, inevitable and should thus be embraced. It's a mode of thought that never has a happy ending.
Just to yank myself back on topic again, terrorism is thought to be similar to a child who wants his way and keeps escalating negative attention seeking tactics to the point where you either acquiesce (thus reinforcing the negative behaviour), or you smack the child (at best only a temporary solution, that could lead to further escalations if not sooner, then later in life - could even put you in front of a judge).
"Smacking the child" is what the west has been trying so far.
My personal opinion is that there is no universal generalised "third option", though intricate behavioural theories abound. I would take the opinion that every child is an individual and must be dealt with, and respected as such. It may be as simple as giving them something else to occupy themselves.
Should people have the right to communicate with one another without government interference? Does encryption undermine the state in a similar way as terrorism, or is it merely an extension of the existing right of people to be (to quote the US Constitution) "secure in their persons, houses, papers, and effects from unreasonable search and seizure" ?
I concede that reasonable people can disagree with where the line should be drawn (given different states and different philosophies about the proper nature of government) but I don't think it's that absurd to insist there should be limits on what any government can know about its citizens.
Unfortunately, there have been too many demonstrated cases of governments abusing the legal limits given to them, so I have no reason to expect that greater surveillance powers would be used responsibly. When it comes to weakening encryption, they're not "smacking the child," they're smacking every child and hoping they'll hit the right one sooner or later.
But that is "using" technology. Not "crippling" it. I am sympathetic to the needs of the state, and I believe there should be some attempt to meet these needs, but with oversight, and with proper procedures and protections.
It's one thing to say James Bond doesn't have time to call back to 'M' to get permission to plant a bug but James isn't a massively industrialised automated spying operation. I'd give him sole dispensation on national security grounds but that doesn't scale up to the level that GCHQ and NSA were doing. The more actors involved the greater the possibilities for systematic abuse and that has to be acknowledged, and those questions answered.
But law enforcement already has ways of doing its job without getting new surveillance powers. They can find people on Tor, they can pay for exploits to get into cellphones, and there always seems to be obvious (in hindsight) dots that could or should have been connected, leading to a terrorist plot, which rarely seem to involve encrypted communications.
I want terrorists stopped, but i'm not convinced that governments can't stop terrorists even with the existence of encryption.
I know it sounds cliché to say that, but I'd rather see my gvt taking actions on things that could easily be improved. For instance, many teenagers smoke in front of every high school in my country. I see that as a much bigger threat than terrorism, and one that is much easier to address.
This is important to understand.
Also it is important to understand that right now Europeans are losing security for no good reason:
We could help a lot more refugees in surrounding countries than we can integrate here. It is really that simple IMO.
Seens we are allowing this stream of immigrants not because we are good-harted but because we are stupid.
This means we could be more secure and help more refugees if we stopped playing for cheap political correctness points and started to think about how we could help as many as possible.
We are squeamish because we do not want to send young men and women to die in some godforsaken country, doing god know what for god knows how long.
Remember the last time that happened? Oh yes, the Iraqi occupation that seem to go on forever and forever, draining the blood and treasure of the United States.
Either we pay it now, or we pay it later.
Wait, what?!
The Iraq occupation is what caused this madness. The solution is certainly not doing another one.
To the extent the recent actions (or inaction) of the West can be blamed, you can blame it on getting rid of Saddam, or you can blame it on leaving Iraq too early, or you can blame it on policy in Syria. You can't blame it on sticking around in Iraq. Iraq was getting objectively better after the surge -- a (flawed) democracy was emerging, the economy was taking off, violent deaths were way down from their peak.
You can argue that Maliki forced the US out and let the country go to hell (in which case "deposing Saddam" is the Western sin), or argue that the US could have stayed if it wanted (in which case if you're a Democrat you can blame it on "deposing Saddam, because we couldn't stick around forever," and if you're a Republican you can blame it on Obama wanting to get out before the job was done to score political points.)
Other than that, though, you're left with earlier Western actions (Bush I, Sykes Picot...) or Assad or Maliki or every crazy Wahhabi cleric in the region of you want to give Arabs some credit and capacity for self-determination too.
All this while propping up despots in Saudi Arabia who run the most backward extremist regime in the world by far and make the former 3 look teadybearish in comparison.
These upstanding 'allies' are principally responsible for the global spread of wahhabism, extremism and terrorism in both financing and ideology over the last 30 years.
By a strange coincidence SA is also the west's best friend in the region. Ergo since the foreign policy division of the US and EU cannot be in any way or form characterised as naive they are in effect promoting terrorism on one hand and expending billions building the infrastructure for totalitarian surveillance security states on the other.
Millions of lives are being destroyed because of greed. The more things change the more they remain the same.
The people who come on boats to Europe are mostly not Syrians. They are from the vast lands stretching from Senegal to Morocco to Congo to Egypt to Syria to Iraq to Pakistan to India to Bangladesh, and they are not travelling to Europe because one particular place is very bad; they are travelling right now because they realize that it's about the last time to get a foothold Europe before the gates close, i.e. the current asylum process changes.
(I've met dozens and dozens of underage asylum seeker boys when arranging football trainings for them; they started to hang around in the neighbourhood and I realized it's better if they have something to do, so set up some games every week. Only a couple of them were from Syria. Many more were from Afghanistan and Iraq, but the list of source countries is very long. Mostly these boys are from middle-class families in countries that have some war but mostly just a very corrupt government, and the families have selected those who are able-bodied and have better language skills to seek for a future for themselves and possibly for the whole family, through the well-advertised family reunification programs.
The poor don't get to travel; the cost paid to people smugglers is somewhere in $5000-10000 range but the cost has been decreasing as the people-smuggling business commoditizes.)
I wasn't aware of that fact.
For instance, in Britain, the largest numbers of asylum seekers came from Eritrea, Iran, Pakistan, Sudan and Syria as fifth. In Ireland, the largest groups were from Pakistan, Bangladesh, Albania, Nigeria and India. In Italy, the largest source countries were Nigeria, Pakistan, Senegal and Bangladesh. In France: Sudan, Syria, Kosovo, Dem. Rep. of Congo, Bangladesh.
http://ec.europa.eu/eurostat/statistics-explained/index.php/...
At the moment, we are creating incentives for more migrants to travel, and more of the source countries and communities to send their most active members to get a foothold in the perceived lands of opportunity - when in reality, there are no jobs for them here. We are not helping refugees, we are making a great disservice to the communities where the migrants come from.
A simple way to change this would be to discourage the pattern where people smugglers send a rubber boat to the Mediterranean and instruct the people in it to puncture it on sight of an EU rescue vessel because then they have to be transported to Europe. Change this so that the people are rescued and returned to the port of departure. You don't have to kill anyone, or hurt anyone, just disincentivize the people smugglers who are currently making a lot of money (and likely are contributors to political decision-makers who's come up with the current rules of engagement).
You are absolutely right. That is the wrong dichotomy to make.
The message should be "you cannot reduce terrorism by taking my privacy; you maybe can reduce terrorism by acting on the terrorists".
A lot of this has to do with the fact that people in general are very tired of a situation where criminals and illegal immigrants cannot be deported. For instance, in my country, an asylum seeker was convicted of violence and firearms offences but couldn't be deported nor detained; eventually he went on to a shooting rampage to murder his former girlfriend and kill four of her colleagues shooting around at a mall, using a pistol he obtained illegally from the Balkans.
Action by politicians? Make it more difficult to get a legal permit for a firearm.
If we look historically, people do feel safer if people dressed like military are walking around with fake/unloaded guns. It worked very effectively after 9/11 to make people feel safe in airports, and the lack of any "real" weapons helped in eliminating the risk of having people with guns around large group of people. However that only worked as long you can keep up the illusion and keep people in the dark.
It might simply not be possible to create security that is effective, cheap, and make people feel safe.
And yes, that is more important than a vague attempt at reducing terrorism because your privacy is your liberty and without it democracy and free society crumbles.
Which ironically, is pretty much what islamic extremists want.
In a very real sense, the media is causing the demoralization / fear in the US / West. Given we will spend trillions(?) of dollars fighting the terrorism that we ostensibly believe is causing that demoralization (due to its real harm on the country), why aren't we spending any trillions against the media? Not to censor the media directly, but, say, giving news outlets millions of dollars for every happy or accurate story they write, if we're going to spend that money anyway.
Aside from the fact that zero people have thus far been killed by Islamist terrorists in Germany (since...I'm not sure when), every single incident was perpetrated by one person acting entirely on his own. And the thing in Reutlingen which keeps getting lumped in was a "normal" murder.
No amount of domestic "anti-terrorism" law enforcement would have the slightest impact on any of this, not until you crank it to the level of a genuine police state with zero freedom.
Also remember that Allied resistance in occupied Europe during WW2 was able to bomb military targets, produce submachine guns from scratch and distribute propaganda, while under heavy physical surveillance by the Nazis. Thus we know that practically any police state will not be able to stop determined fighters.
No need to steam open letters and read them physically, phone taps which can automatically surveil entire cities making connections between people, cameras able to follow people's vehicles without carefully coordinated follow teams. Who knows how the resistance would have faired under those conditions.
How about media abuse of the word "terrorism". I can imagine any decent professor at any decent university of politics to choke a little when he hears about "another terror attack".
While the definition is not agreed upon globally, in order for it to be a terrorism, the attacker needs to be sending or demanding a political message to be heard or implemented by a country he or she used violence against.
https://en.wikipedia.org/wiki/Definitions_of_terrorism
But they are pushing envelope for a well known reasons. The government has different set of rules and tools to fight "terrorism" than for example, a domestic abuse case. If things will continue the way they do, pretty soon your drunk neighbor that hit his wife will be called a "terrorist".
And if his views were genuine, would you then be rude? I find this implication troubling and corrosive to open discussion.
>It is the media attention given to the situation, not the situation itself, that is terrifying. Europe is extremely safe and does not have a security problem.
I couldn't disagree more. If such incidents were rare two decades ago and increasingly common today, then clearly something is going wrong. In fact, you try to make that same argument later in your post, saying that we creating the terrorism through our actions and making ourselves less safe. Which one is it?
There's a difference between self-inflicted harm and violence inflicted on strangers. Terrorist attacks in France over the last year are almost 50% on top of the normal murder rate. And while most murder victims are killed by people they were in personal conflict with, the victims of terrorism are random. There is good reason to fear them more.
Be it Ireland, Spain or Germany - the 70s, 80s and 90s had a way higher death toll from terror in any given year.
We had the RAF in Germany, ETA in Spain, IRA in Ireland/Britain and so on. Not to talk about Securitate in Romania and so on.
So statistically speaking we non the less have to fear less then our parents had to fear.
I am not saying, that we should just ignore it. No - on the contrary - but first we shouldn't give in to the media crazed panic and throw our freedoms in front of this Angst-Train.
We should identify the problems, look for valid solutions and then fight the causes, not the symptoms. In my eyes having our nations (living in Germany) export war and terror into the world, then take in the refugees without helping them cope with what they went through is a recipe for disaster.
We should take in refugees, as this is just basic humanity calling, but we also have the obligation to help these people with more then "just" shelter.
We also have the obligation to elect leaders wo are not trying every day to set the world on fire. Maybe in the long run this would help a "little bit" as well.
And yes - one might call me a naive idealist.
No, I would have been more extensive and detailed in my answer. Instead I went for a few short points in rhetorical language.
The other reply to your comment has addressed the other points.
That is just plainly wrong. In the 70ies, 80ies and early 90ies we had more terrorists and more terrorist attacks, that killed people. There was the (P)IRA in Northern Ireland, the ETA in Spain, the FLNC in France and the RAF in Germany, and these were only the most notorious groups. All of them laid down their arms and integrated into civil political groups in the past 40 years.
The fact that you're having to "hold back" is sadly indicative of why debates on sensitive topics like this are turning into echo chambers. I suspect that many who hold the minority view keep quiet to avoid being yelled at.
I don't intend to take sides here. I've only ever come here to read and understand other's opinions on topics that seem too complex to tackle on my own. I have a lot of respect for this community, but sadly its becoming harder and harder to keep reading.
For example, you make some good points here but it takes tremendous effort to consider them on merit because the language in which they're expressed sounds condescending and attacking (even though you say you're holding back).
I do hope that you, and anyone else reading this, will not take this personally and instead reflect upon the virtues of more open and tolerant dialogue. And very sorry for singling you out; it's not just you.
I didn't mean I was holding back from something sinister, but from making detailed and thorough arguments. Because I was only highlighting some issues with the Devil's advocate position, I used short points with rhetorical flourishes.
I agree none of this was conducive to a well-reasoned and objective debate. Often I don't consider I'm writing for an audience that comes here to learn - perhaps in future I should.
Established ones. There remains the fact that nascent tech companies need to get funded. By VCs.
For example, and only as an example, YCombinator could make a stand here. Have they?
These sort of bills always make me wonder if we'll ever see a moral stance taken by tech companies.
People that really care about privacy, people who need to hide what they do will not be majorly impacted.
* The main threat is metadata anyways, not the data itself. Locating where you are (e.g. with millions of cameras and facial recognition) is a much worse threat.
* They will still use full disk encryption, free software, PGP or AES, etc. outside of the affected apps. That software won't stop to exist, nor the mathematics that powers it will stop working.
The sad part is that the people who will be disproportionally affected will be the common people who have nothing to hide anyways, and do not have the technical means, or the will, to protect themselves.
TLDR: useless and damaging.
We must do something
This is something
Therefore, we must do this.
> (e.g. with millions of cameras and facial recognition)
The vast majority of CCTV in the UK is not networked, and owned by small private companies (e.g. your local corner store), and rarely store data long enough to be of use to anyone unless something sufficiently serious happens to cause a request to be made quickly.
While there are areas covered by networked, government operated cameras, they are not the norm.
They will be once they upgrade to the "Internet of Things".
Many of those camera should be private, I think it's our duty as technicians to protect the users of those devices.
EDIT: Curious how stating a fact is worth downvotes. What am I missing?
Look at any major incident in the UK recently and the police have CCTV footage from private businesses. Either voluntarily given or subpoenaed.
> UK is being watched by a
> network of 1.85m CCTV cameras.
> The vast majority of CCTV in the
> UK is not networked, and owned by
> small private companies ...
> UK is being watched by a network
> of 1.85m CCTV cameras.
Whether you are right or wrong, I suspect that's why you're being downvoted. If you flatly contradict someone without substantially adding to the discussion, that's what happens.
> A key finding of our research is that the proportion of cameras controlled by local government is around 1 in 70. [...] Without the help of businesses investing into their privately-owned systems, the Police would only have access to the one publically-owned camera per 1,000 head of population [population of UK/1000 ~= 64000]
[0] http://www.securitynewsdesk.com/bsia-attempts-to-clarify-que...
You are assuming security against terrorism etc. was the main goal. I think that's completely not the case. There are no facts that support that mass-surveillance or measures compromising encryption have ever been effective at saving lives.
And, of course, political insurgency, mass disobeyance, etc, etc — just as a side effect.
What the powers that be try to sell us is security without compromises. Security above all, no matter the price (as long as it makes the powers more powerful). I think there is a real value in lower security, when civil rights and mere privacy of millions of people are put above the police's ability so solve a particular crime. You see, keeping everyone in a max security prison would be most efficient in thwarting any crime at all, but we're not doing that, at least yet, at the expense of some crimes being committed. The society already demonstrates that this compromise is acceptable. But the power always tends to push the other way.
Governments will always wage war on law abiding citizens, taking away freedoms in exchange for securities until the citizens are secure but no longer free.
And even then, such a notion of "security" might seem dubious to those who are conscious of having lost said freedoms.
"Dangerous hacker arrested, found in possession of illegal hacking tools. An unnamed officer said 'we couldn't have done it without our metadata analysis'"
If the tools for encrypting your data are illegal, they dont need to decrypt your data anymore.
Yes, yes we must accept that, since it's reality. Queen Elizabeth can no more hold back encrypted communications than King Canute could hold back the tide.
It's considerably more difficult to conceal the fact of encryption on the wire than (say) a gun in your home.
As for asking why I would do such a thing? I think the law is wrong and want to make the court waste their time.
They do, in fact, have a paid service to deliver what appears to be random noise as a message, then store that noise in their archive for subsequent re-verification.
I recall seeing videos of lava lamps and handfuls of d6 dice on a vibrating table, broadcast live over the internet, purely for their utility as potential sources for truly random numbers.
I can easily see a case for sending randomness in a client-server game with protections against cheating and bandwidth restrictions. The randomness server sends the same chunk of noise to game client and game server, and the game client sends user commands to the game server. As long as the user isn't cheating, the official server copy of the game state and the client copy remain in sync.
At layer two, they begin digging into your life, tapping everything they can, following you, and most likely eventually getting a warrant or equivalent to enter your home and seize your property. There's no scenario under which you don't break some arbitrary law, given enough time, at which point you're done.
In a society were encryption is illegal or even seriously treated as "probable cause", then the authorities are likely to pick out anything in your day-to-day activities to use against you in an offensive legal process. So "not using encryption" is a fool's defense that makes literally zero rational sense - except from the perspective of a government psyops agent trying to spread FUD about encryption and discouraging its widespread adoption amongst the population.
It needn't be the security services, or even the police; cases can be brought by the taxman. This has been the case for the last 10 years or so, the new law will extend these powers.
https://wiki.openrightsgroup.org/wiki/Regulation_of_Investig...
It's a whack-a-mole problem, and the moles always have a pretty fair chance.
This, of course, keeps the encryption in the hands of the technically savvy and motivated few, while the majority will have to use security with backdoors, and possibly other holes, for the convenience of the snooping by the government and online thieves alike.
If the computer that you are using right now, like an Ipad, or a PC with intel inside, has the ability to be remotely controlled, like it has with Intel ME, or Apple(for use when someone steals an Iphone...), and the law mandates that they can access this service, then you can't keep ANYTHING encrypted.
It is worse than not encrypting it, because you believe it is encrypted, when it is not. Technically it is, but they can read the key transparently without you noticing.
Those services can access all the computer(the entire RAM and disk, all the processors) and have privileges over your applications and even the OS.
TL;DR No and no. But I respect the premise.
I guess it is not as futile as it may appear at first glance, though - after all, you don't need all the world's suppliers of communication software to adhere to be successful; just force the major ones to help you out, then simply assume that anyone using an insignificant (by user base) app is up to something nefarious.
Bah. Orwell was an optimist.
It seems that current governments can't seem to solve the drug war, the war on terror, gun crime, or the increasing number of terrorist attacks.
How much intrusion do they actually need and what is the cost of the technology before they can actually seem to make headway on solving issues.
Good luck with that.
Signed,
An open source software developer outside your jurisdiction
This is a political problem that must have a political solution.
For example, GCHQ came up with PKI before the people that "invented" PKI and published it.
Here's a brief thought to uncover why:
There are two countries. Country A has security capabilities equivalent to today's UK. Country B, equivalent to today's UK plus the proposed changes.
Could maniacs based in country B commit attacks of equivalent fatality to maniacs based in country A? Of course they could.
Could a criminal gang in country B get away with crimes of similar magnitude to a similar gang in country A? Of course they could.
Other threads here have pointed out the minimal extra effort that would be required by perpetrators, if any.
So why propose these changes, and why give the stated reasons?
Perhaps the government doesn't understand the negligible impact they'll have. This seems unlikely, although perhaps they "can't see the wood for the trees" and are getting carried away with the current xenophobic mood in the air.
Perhaps the government is showing its true colours and exercising the basic Conservative desire to deny societal evolution, by tightening control over anything new and complex.
Perhaps they've had a good hard think to the best of their abilities, and have genuinely decided this is The Best Thing To Do.
Whatever the reason, it's either founded on idiocy or couched in lies.
All the government does now is inconvenience to the majority of citizens who they have nothing to worry about anyway.
This kind of thing can only make the people of the UK less safe, more at risk, and more likely to be hacked and otherwise digitally abused.
If you wanna keep the people safe, you don't ban encryption. Better would be to mandate it.
They created terrorism in the first place by bombing and occupying other countries, removing dictators.
Meanwhile in the real world, criminals will resort to sending encrypted USB sticks via post, or carrier pigeons, or implanted in mules. There is always a way around these things for those that absolutely do not want their communications compromised. It is safe to say that any criminal enterprise knows that live electronic communication of any sort is likely to be compromised.
Also of concern, is that criminals will now have extra attack vectors to sensitive data, because if encryption has to be weakened for Government, it will be easier for other parties to exploit.
I'm sorry but between this and everything else lately...they seem pretty committed to "Security at any economic and/or personal cost! Security for everyone!"
In the real world, that never works.
That basically means that it's up to a small group of people who are informed (like ourselves) to do what we can to stop this stuff. If we sit back and do nothing they won't have any problem implementing these laws.
Not only that, but it seems to me that there's been far less coverage of these issues in mainstream media than in the tech press, and most mainstream coverage seems to take the governments' side. People who get most or all of their news from TV likely won't hear anything about all this; if they do, their eyes will glaze over as they don't have a clue how encryption works, or why it's important. Or, it will just vanish in the news cycle and they never think about it again.
Edit: It also seems to me that most people just aren't going to care unless it directly affects them, at which time it's already far too late.
In many ways we're seeing history play out all over again - new, disruptive thing shows up, governments wet themselves in terror, and try to control it. The difference is what happens now; in the US this tends (excluding drugs) to lead slowly towards a more nuanced position where the reigns are gradually loosened. In the UK that seems to never happen, the arrow of control and government intrusion only ever points in one direction. It's very puzzling; I'm not sure what the source of it is but I think it's going to be a serious issue in the future. Specifically as the rest of the world forges ahead, either through the evolving view of attempting to control of the uncontrollable, or through sheer lawlessness in other countries where the control is never in place. In the middle will be the UK, clinging desperately to the belief that (as someone else in the thread put it) they can hold back the tide.
Welcome to any debate RE: technology and privacy.
Got it.
Say I switch t and r in evetyrhing I rype, is that encryption? No? Then at what point of mixing does it all become encryption?
There are well-established and functional methods for extending law into areas that you can't see all the time. You don't need to ban encryption, in exactly the same way that you don't have to ban doors. Just because it's ooon the iiiinterneeettttt doesn't mean you need to break everything.
But when your bathroom door is protected by 256-bit encryption, the peace of your metaphorical deuce-dropping is (statistically) guaranteed until such time as the sun leaves the main sequence and devours the Earth.
The states conveniently ignore that kicking down a toilet door to pick through someone's poo and count the peanuts is not generally beneficial to anyone's security, especially when holding out a net under the appropriate sewer pipe could usually achieve the same results with less public outrage.
In any case, those with truly incriminating poo-peanuts will likely burn them, or head off into the woods with a trowel, and your toilet raids will only end up menacing those who linger too long in the stall, solving sudoku puzzles or practicing toilet-square origami, or whatnot.