How can I protect myself from government snoopers?
theguardian.com
theguardian.com
"Why should people care about surveillance? Because even if you're not doing anything wrong, you're being recorded. You don't have to do anything wrong. You simply have to eventually fall under suspicion, even by a wrong call. They can use this system to go back in time and scrutinise everything, and derive suspicion from an innocent life and paint anyone in the context of a wrongdoer." -Edward Snowden
"If you give me six lines written by the hand of the most honest of men, I will find something in them which will hang him." -Cardinal Richelieu
You may not have anything to hide, but you should hide as much as you can anyway, because anything you say or write may be one day used against you in a court of law.
Although, a worrying possibility is that a tendency toward privacy marks you out as a dissenter. Guilty before proven innocent.
Even without total online surveillance, by the nature of computers you are leaving so many traces that full surveillance is not necessary to at least find something. And in countries without Big-Brother like surveillance, police often got good hints by searching the equipment of a real criminal. It is just not needed to include everyone. And even with encryption, you can often see who talked to who.
The "something" you are talking about is the following: good old police work. You have a reason to be suspicious? Search the guy. Just as police did the last hundred years. Just do not search everyone. Police work should be hard if we still care about citizen rights.
They sure are. But are you proposing to cut off internet access for politicians altogether?
It may, indeed, be more difficult than tracking what everybody does and incarcerating those that are suspected of plotting acts of violence. I think the payoffs may be significantly better, though.
I hate to compare these kinds of cultural issues on the internet, but I have lived in many places in the world. Culturally they are very different. How we act in our countries, states, cities and even houses is governed by our culture. Some cultures value peace greatly. Some prefer justice to peace.
When you look at the people around you, you may think, "There is nothing I can do. There are evil people and I can't change that. I can only fight them so that good will win." In my experience, this is not true. Many people have problems and it is only society and culture that can save them from those problems.
How do we extend a culture of peace and create a global society where we help people in need? That's what I would rather spend my money on. I'm willing to suffer from the attacks of those that need help in the mean time.
Another alternative is to have limited surveillance that requires a judge to sign off on it after seeing a good reason to suspect someone. Personally I have no issue with that - it's a model that has worked for decades and strikes a balance between public safety and personal liberty.
Terrorism and mass shootings are going to continue until we address the root causes and even then we will still have occasional incidents. The public need to have realistic expectations and stop with knee jerk reactions that result in security theatre like the TSA.
> Spying on everyone is just increasing the size of the
> haystack and making it harder for someone to follow up
> on actual hard intelligence.
Seriously, I think this ship has sailed; we can only find new ways to operate under our new circumstances, rather than preventing them from coming about as we could have done up until maybe 15 years ago.
The most charitable interpretation I can find for the nascent global surveillance state is that world governments are (quite reasonably, in my view) collectively anticipating great upheaval in the near to mid-term future, and recognise that they must do something to keep a hand on the rudder.
I do not believe that a unilateral panopticon (i.e. "we are watching you, but you may not watch us") is the right response, and I dislike that it is being presented as an anti-terror/anti-piracy/anti-{localized-name($bad-people)} measure, rather than described honestly. What worries me enormously is that the nationalist right is also on the rise at the same time.
If we are lucky, it may all lead to greater worldwide unity in the long term, but I am not hopeful that this will transpire within my lifetime.
In order to reach that point, we need to protect diversity in the middle of all this integration that is happening with the internet. "Integration in differentiation", and "differentiation in integration", are necessary principles for a healthy society.
Practically protecting diversity would mean protecting privacy, the right to express political views the right to be different. If we can't protect diversity we get to the regime of 1984.
There is a profound biological reason for this concept - neurons in the brain are differentiated by being differently connected, and are integrated by virtue of said connections. So they are both diverse and integrated, and the result is conscious mind - a system that can handle both highly complex dynamism and balance. The theory of integrated information is one of the most respected theories about consciousness. We should strive to be more like the brain.
Another practical point is that concentration of power is detrimental. It leads to a decrease of diversity.
If we want to become a happier society we need to protect both integration and diversity. These two principles have many other social and technological applications.
That's not a possibility that ever struck me before, so thanks, you've just fuelled my nightmares for months to come now :-s
Could you elaborate on what you mean here?
This isn't enough to judge the effectiveness of mass surveillance, because of course there would be misses - the question is how many - and of course we don't know.
But there's a natural "experiment" recently happening: lone wolf terrorism , which unlike terrorism before it , don't require communicating and planning together with others , all activities that can be detected by surveillance(see john rob's blog for more details), and even it's marketing is imprevious to surveillance.
And i get the general impression that this has led to a marked increase in terrorism , noticed strongly in Israel's latest lone wolf wave, for example[1] , and probably in france/Germany/US too.
[1]Israel lone wolf terrorism has mostly been done using cold weapons, so it's harm has been greatly decreased, but without mass surveillance, it's pretty reasonable guess that a lot of it would have been much more deadly.
I disagree, that's very doubtable. Modern law enforcement has access to an amount of information that exceeds that available in any other era in human history, by an order of magnitude, both in breadth and in depth. The surveillance programs revealed by Snowden and the remote sabotage of Iranian nuclear faclities are but two examples. Surveillance in the developed democratic countries we both (I assume) live in is broader and is done with less oversight than at any point in the 20th century, and not just on the Internet, either. In addition, while I don't want to go quite as far as to state that the trend is clearly upward, I'm also not convinced it's clearly downward; the recent law passed in the UK is evidence enough to discard that notion.
Even if we encrypted all our communication today, there are still weak points in our system that governments can and do exploit when a clear need arises. On the technical side, 0-day exploits are not cheap, but well within the budgets of the law enforcement agencies we depend on to protect us from real threats. And on the legal (and not so legal) side, Certificate authoritities can be compelled to hand over the keys required to compromise secure communications.
Finally, even if we're indeed "Going Dark", as the spokespeople of law enforcement agencies would have us believe, then that can only be true relative to the last decade. As far as I'm concerned, that's a return to the right balance, not a decline into an age of death and despair, where evildoers can commit crime at will, without fear of repercussion.
http://www.bbc.com/news/world-35961422
We begin therefore where they are determined not to end, with the question whether any form of democratic self-government, anywhere, is consistent with the kind of massive, pervasive, surveillance into which the Unites States government has led not only us but the world.
This should not actually be a complicated inquiry.
https://www.theguardian.com/technology/2014/may/27/-sp-priva...
Employee is held on suspicion of ‘extracting confidential information’ from law firm at centre of Panama Papers
https://www.theguardian.com/world/2016/jun/15/mossack-fonsec...
First, the threat imposed by privacy invasion is hypothetical to most people.
And now you're asking them to hypothetically send their pictures to the government?
Come on, if we want to raise awareness, we need better arguments, and especially better formulations to convince people.
Couldn't I now do a 60 minutes expose making people believe all sorts of things about you? That you're a closet <whatever people don't like>? Paint you as committing some crime that you had nothing to do with? It doesn't have to be very believable, just believable enough that people will always wonder. Humans are pattern matchers, surely if I give you pieces, you'll fill in the blanks yourself?
I mean you're basically going on the record, with the world all the time.
Yep.
Also: if you don't talk about something that can be veeeery suspicious too.
See recent discussion about forbidden spheres[0].
Full disclosure: I mostly (>90%) trust police where I live. I mostly trust government officials. I still don't want this data in the hands of anyone because 1.) than a year ago everybody knew Turkey was a stable democracy and until the night of the invasion my country were sure Germany wouldn't invade. 2.) everybody get hacked. These databases will be stolen.
People vent, people say things that are poorly thought out in frustration and other circumstances.
In the current climate of vilification, I'm not sure it's a good idea to take the worst that someone may say in a thoughtless moment and use that to label them.
Perhaps we can compare it with crime. Research has shown that crime rates are reduced not when punishment increases, but when the probability of getting caught increases.
This means (translated to our case) that you can scare people all you want with doom-scenarios, but if people perceive the probability of becoming the victim of privacy invasion is low (i.e., they see it as hypothetical), then they don't care about the issue.
In that sense you might be right, in terms of picking a concrete thing that has happened to a person, or someone they know to make this less abstract, this might not be the best approach.
Most cops in the US are fighting against the use of body cams. Why? They don't want to be recorded.
Most courts don't allow recording equipment in them. Why? They don't want to be recorded.
Most government workings are hidden behind bureaucrat walls. It requires other laws such as the FOIA to force government to be open. And FOIA requests are widely ignored, delayed, redacted, etc.
If the people enforcing the law refuse to be recorded, why in living hell should you let them record you?
You should have as many rights as they do. Including the right to privacy.
Imagine if the question was:
"can I watch you through your window ?"
- "no."
"why, what have you got to hide ?"
- "nothing, I just value my privacy like any normal human. It's my house, so mind your own business"
Now you could counter "yes but the web is a public space". But it's not entirely. Some of it is public, some of it is private. Our email conversations with our friends and family, our video chats etc should be private. (They're not of course, they're all intercepted and stored forever, but they should be private).
To keep the analogy don't we need to add two provisos though: you can't tell anyone about it or you lose your job and face prosecution (unless you can convince the CPS that there's a case against me, then you have your say in court); and you'll need to convince a judge that you have a legal need, that also serves the public interest, to observe me.
>Our email conversations with our friends and family, our video chats etc should be private. (They're not of course, they're all intercepted and stored forever, but they should be private). //
AIUI the UK Investigatory Powers Act is storing domains visited for a limited time and requires a warrant to enable access, access then only being granted to officers of a particular standing (so they can't pass the details around and the named officer is responsible if the info is leaked). Am I getting the wrong message? I've not had time to read the Act yet.
Security services are almost certainly able to access that data, but then that's been true for a long time and is covered by far more generic laws, the IPA isn't addressing that (is it?).
tl;dr - if I don't care if you sit and watch me watching Masterchef, or playing on Steam, or if you read my emails to customers, or see what I buy (just like you can if I go to a shop), then ... is there anything left that you can say to convince me I should be hiding what I do online. "I don't hide what I do IRL, why hide online"?
I doubt it.
And besides, though you might very well prefer not to have secrets, you should extend that to those watching you.
For example, in the US, most people are not afraid to share their political beliefs. This is because, in the US, it isn't common to be harmed or even killed for your beliefs. This is not true in every country or even for every part of the US. So being able to keep your political views a secret is important. In a world where this is not possible it can quickly become dangerous to hold the "wrong beliefs" publicly.
Do you believe you only uphold the "right beliefs"? And if so - are you 100% certain those beliefs will never turn into the "wrong beliefs" to have? If you answer "no" to either question then privacy should be important to you.
If I uphold "wrong belief", last thing I want to is to make it secret. The more people know about it, the more popular it is, the more people understand it, more chance for it to be not 'wrong' anymore.
>If I uphold "wrong belief", last thing I want to is to make it secret. The more people know about it, the more popular it is, the more people understand it, more chance for it to be not 'wrong' anymore.
Oh, I agree with this! But I also think it is a personal choice if someone wishes to strongly advocate for their beliefs - with all the repercussions that may follow - or if they would rather privately hold their beliefs without fear of repercussion. Not everyone wishes to be made a martyr.
I agree people who want to keep secret is free to pursue it.
For me keeping a secret is not without cost, its a burden, significant amount of work and inconvenience.
I'm personally fine with you not bothering with your own privacy if you feel it isn't worth the burden.
Privacy advocates see that sort of thinking as harmful though. If it becomes the 'standard' way of thinking it easier to pass laws that violate privacy. So "our" first step is trying to convince people that the right to privacy is important, even if they don't personally care about their own privacy.
It's a bit nonsensical to ask someone to fight for privacy rights when they don't care about their own privacy. It's easier to fight for something if they actually care about it, which is why you see so many privacy advocates (like myself) trying to convince you your privacy is important. I'm fine with you not caring about your own privacy due to the burden of keeping it, but I beg, not ask, that you care enough to defend the rights of people who find the burden worth carrying.
What do you think is the most convincing argument to this end that I can read in a tea break?
An appeal to historical abuses works for some - but others see that sort of abuse "not being possible in the modern day". In my opinion, that is naive since many countries are still actively oppressing minority views... it's literally happening in the modern day. Just perhaps not in their country yet. =\
As Adam D. Moore said: "Consider someone’s sexual or medical history. Imagine someone visiting a library to learn about alternative lifestyles not accepted by the majority." I use examples such as: Have you ever seen a therapist? Taken an anger management class? Have had an STD? Are you LGBT or supportive of LGBT rights?
Depending what country someone lives in - inquiring about their beliefs on "touchy subjects" can be a good one. If they refuse to tell, then they have something they wish to keep private. If they do tell - is there someone they wouldn't tell? If so, why not? (eg: Would they tell talk to their boss about politics?)
Those are the most TL;DR versions I could make for each of them. The goal is to get them to see privacy from the viewpoint of a minority - and especially from a minority group who are persecuted, ostracized, harmed, or killed for having their beliefs. Privacy is literally the difference between life and death for people across the globe and people who have no felt their life has ever been in danger due to the lack of privacy should be thankful.
In a world where people truly have "nothing to hide" then there would be no reason to look.
> I don't hide what I do IRL
The closest analogy I think that's reasonable on say your "have sex in full view of others" that's pertinent is that the government could overhear me talking to someone about sex and would record that I had talked to someone about sex. Now for an abuser that might be an issue, but for me it's not.
Take a step back. What's your best argument to convince me gov access [by warrant] to a list of domains I've visited - where I haven't used a VPN, or other obscuring method - means I'm giving up my civil liberties in a way that will have a damaging impact on me?
I can see it can for a small portion of society, a lot of [non-petty] criminals. I can see it might for political dissidents in a country lacking rule of law; UK isn't perfect in that regard but it's close to having a fully independent judiciary and a fully working rule of law.
[FWIW I wouldn't vote for such a law, but I'm yet to be convinced by the arguments I've seen, primarily because they are so outlandishly hyperbolic.]
This proves that the government is willing to selectively present out of context information from someone's browsing history in court in order to further their agenda. If you believe every employee at all 49 agencies who have access to this data will never misuse it, well, you're more trusting than me.
And I haven't even touched on any of those agencies being the conduit of leaked information, and the ramifications of that. If the NSA can't even keep a lid on confidential information when it's staffed with some of the most experienced and intelligent techs in the world, what hope does the Department for Work and Pensions have?
As an undesirable, I (as a bureaucrat hungry for power) might uninvite you and yours from my college, business, bank loan, job offer, or I might simply charge you more for goods or services. Given the power, I can make your life hell for reasons you'll never know and have no redress to challenge.
In 1870s to 1960s America these kinds of off-the-book practices were called 'Jim Crow', intended to repress minorities and especially blacks from the civil rights and protections that were theirs by law. If our 21st century government regresses to the same state the FBI did under Hoover -- not inconceivable under Trump, since it already has occurred under Obama as he allowed CIA and NSA to escape oversight from congress or the press and hide from their abuses of constitutional law -- the likelihood of history repeating itself using domestic espionage has become almost a certainty.
If you still have doubts about the threat to everyone from unlimited domestic surveillance to big and small, innocent and guilty, then reread Orwell's 1984. And never forget that EVERYONE is part of some minority that will become unpopular eventually.
At the end of the day, your employer probably already records your activity at work, and that's perfectly fine because they want to verify you are doing what you are being paid for.
The Jews didn't have anything to hide and lived in the open for many years prior to Hitler's rise to power... and then suddenly their innocent life was exactly what condemned them to their deaths...
So yeah, everyone has a responsibility to ensure their privacy. 99.9% of people aren't terrorists. Terrorists cause less death every year than heart disease. Why should the 99.9% of people give up privacy to fight a war caused only because of the "West"'s inability to negotiate fairly for access to foreign resources? Instead of raping and plundering other countries, installing puppet Governments and causing people to act with "an eye for an eye" or "I will rain what you rain down on us a thousandfold over."
It's a band-aid solution to a symptom of the underlying cancer that needs to be cured. They're using the war on terror as a land grab for more power and control. Realistically there should be no war on terror, for terrorism is only "an eye for an eye." If you want to stop it, someone has to be the bigger man and say "You know what, we're not doing this any more. This behaviour is bullshit and it ends now."
If you want peace, you've gotta live peacefully. You don't spread peace with bombs, guns, violence and invading everyone's privacy to maintain control. You spread peace and trust with acts of love and kindness.
This is neither true nor a classic example of the dangers of mass surveillance.
The Nazi's used census data of occupied territories to ascertain who to deport.
It's mandatory, you get in trouble for not doing it and it's a legal document, thus you can get in trouble for not filling it out properly.
How is that redefining anything? That is in itself mass surveillance... albeit manual and participatory mass surveillance, but still mass surveillance nevertheless.
The Nazi's took the census records and then used the excellent civil service to deport the overwhelming majority of Jews to the camps. The Netherlands had some of the lowest rates of survival of Jews amongst occupied territories. The Nazi's knew who they were, and where to find them.
Who knows what piece of information could be used to hound you to your death, years after you divulge it?
https://en.wikipedia.org/wiki/History_of_the_Jews_in_the_Net...
One day a distraught woman came to the door and asked to make a call to her husband. My mother consented, the woman made a very odd short call and left.
For months afterwards we had strange noises on our line, clicks and echoes. I suspect our line was monitored after that call had been traced back to us. I don't know who she called but it always stuck in mind that one mistake was enough to emd up on a list.
On
But I can imagine some scenario where I am in a court and the opposing side have had access to my internet history. It wouldn't be very hard to paint me in a pretty bad light if you were very selective - much like the quote above.
Eg. "The defendant has previously looked at gun videos on the internet, reads hacker message boards, and once even read how to make TNT."
If the court accept this argument as prove that someone is doing harm then thats the real issue.
http://www.nytimes.com/2010/01/14/nyregion/14watchlist.html
http://www.nytimes.com/2006/02/14/business/jumping-through-h...
I don't know if this actually happens in practice, but I have heard stories of bad actors using adverts to distribute malware - it doesn't take a stretch of the imagination to see the same bad actors using adverts to generate false positives to the authorities.
Ad blockers are going to become more important than ever.
If they aren't recording the pages, I'd doubt they've be recording the ads embedded on the page.
But who knows, I imagine it's down to how the ISPs implement the legislation.
So theoretically if you transfer data from insert bad orgs IP address here from within another innocent website you'd be logged for that.
That's pretty clear. It does depend of what level/technology is used in the Encryption, but broadly, against nation state actors with full virtual and physical hardware access, you are to put it bluntly, stuffed.
I imagine that MITM on a large scale is par for the course for GCHQ.
They'll just know that you visited the host.
Just publish some really divisive fake news about Brexit and that'll rack up the UK hits on Facebook.
Christ, it's even worse than I thought.
But I am going to try a few PoC ones later today. (On a private network, using all domains and computers I control.)
I... View a lot of use of digital records as the witchtrials of the modern era (eg, cases where people got charged for child porn because a coworker used their machine, but the logs say it was them!). The conclusions don't logically hold up, but reveal something about our reverance for technology (and assuming it worked right).
How did we get here? Many folks have surfed the web for 20 years, even more for 15, most for 10 --- now in 2016, surprise surprise, fake news abound! /s Almost as if coinciding with the calls for (or introductions of) related legislation..
We are talking about blatant spam sites in which the owners openly admitted to making up stories out of whole cloth.
Some background of why I believe this. I grew up in communist East Germany (GDR) and lived there for 27 years, until - yes - we changed the government. Trying to change politics beforehand was not so successful after all. As you may know or may not know, that state was based to a good extent on the soft terror of broad surveillance. In the 70s and 80s of the last century, to achieve this a lot of human power was needed. Nowadays, surveillance can mostly be based on technology. I'm much concerned - given my life experience - about the trend over the last years to undermine democracy in the name of saving it - all over the (yet) free world. At least I know how a society looks like, that is no longer democratic.
The technical solutions like VPN or whatever are similiar to what we called "inner emigration" back in the past. It was a widespread phenomenon in that society. But only once many people have stopped this kind of hiding, and have publicly stripped off their fear, the system began to tumble. In the end, all the surveillance could not save it. They did know what happened and they could not stop it, simply because the people did not play their game anymore.
That petition mentioned here elsewhere is the right way. Sign it if you are a UK citizen. I'm unfortunately not, but I would do it now.
East-German too, younger though. Yeah it's funny, all the time it seems impossible for "da people" to engender substantial change in governance. Then woopdidoo, some Gorbachev comes along, holds some talks with the Reagans of this world, eastern client states slowly learn they now can and should hold off a bit from total autocracy, and "the folk" get to exercise some agency for a brief time.
Beautiful. Where was this agency after Snowden, after other introductions or revelations of police/surveillance state measures? Looks like it wasn't quite as expedient to today's Reagans/Gorbachevs/etc of today. Sorry people, no illusion-of-agency for you when alignment with officious objectives is absent.
Maybe it'll come around somehow..
I am not from UK, but listen to me if any folks from UK are reading this.
This is one of the things that is harmful to your privacy. Should the list of websites that you visit be available for government unless you are under active investigation? Its not just the list of websites but every packet data that your devices send out, which means government could see your messages, data sent to dropbox, online spreadsheet like google docs etc. This is mass surveillance. You should be proud that your government have a website were you can start petitions. Now please use this feature and sign the petition so that this surveillance law can be repealed.
The petition against this bill is at: https://petition.parliament.uk/petitions/173199
You sign the petition and ask your close friends and family to do the same. What you do not need is an intrusive government. I am voicing this because even though I am not a UK citizen, I do not want law makers in my country thinking "Oh those chaps has a fine surveillance law and their citizens are okay with it. Lets adopt that law".
Now get to action. Sign the petition at https://petition.parliament.uk/petitions/173199
At least I become a +1 in the count of people who object.
Maybe I'm too cynical :)
People can already be manipulated into voting against their interests.
I have a script to automate setup [1], which I will be updating shortly to use Let's Encrypt and to generate an on-demand Mac/iOS configuration profile that keeps one constantly connected.
I have half a mind to set up some semi-commercial service on the basis of complete transparency and the motivation to avoid the Investigatory Powers Act (most existing VPN services seem to come across as very shady).
VPNIPPOOL="10.10.10.0/24"More specifically it says that the VPN IP's are over the range of 10.10.10.0 to 10.10.10.255. This can be calculated from taking the binary representation of the specified IP and 'fixing' the first 24 (in this case) bits, the range of possible addresses is the range over which the last 8 (in this case) bits can vary.
It is common to also see a broadcast address, gateway, and network mask specified.
[0] https://en.wikipedia.org/wiki/IPv4#Special-use_addresses
https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_d...
Much more comprehensive German version: https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermit...
Iceland.
I'm at the point where I actively think the current round of politicians is actively bad for the country.
This makes me so sad.
--Edward Snowden, my favorite thing he's ever said.
1. What exactly is being stored? I have seen stories/comments saying it is domain names visited from web browsing but does it also cover other internet activity? Or is it being left vague?
2. Does the requirement to keep data for one year come with a corresponding obligation to delete it after that? Are they allowed to keep it longer (perhaps summary/derived data for cost reduction) ?
3. Can the organisations with access make bulk requests for all the data or do they have to request records one ip addr/person at a time? (yes, I know an IP is not a person etc).
4. If the data does have to be destroyed at some point does that only include data collected by the isp or also include copies made by those with access?
5. Are there any published numbers on roughly how many people will have access to collected data?
It's currently discounted with the coupon code BlackFriday.
Setup on the iPhone took 2 minutes, setting it up on my OpenWRT router tonight will take longer I suspect...
I think you'll be disappointed: https://community.f-secure.com/t5/F-Secure/i-want-to-use-fre...
This is about protecting yourself from ISP logging now required by government. Using a VPN and to tunnel your connection via [another country] may not be sufficient to avoid the government snooping Snowden talked about, as referred to in the article.
http://www.dailymail.co.uk/sciencetech/article-3971214/The-4...
Edit: If that's a step too far . . . here it is.
Metropolitan police force, City of London police force, Police forces maintained under section 2 of the Police Act 1996, Police Service of Scotland, Police Service of Northern Ireland,British Transport Police, Ministry of Defence Police,Royal Navy Police, Royal Military Police,Royal Air Force Police, Security Service,Secret Intelligence Service, GCHQ,Ministry of Defence,Department of Health, Home Office,Ministry of Justice, National Crime Agency,HM Revenue & Customs, Department for Transport,Department for Work and Pensions, NHS trusts and foundation trusts in England that provide ambulance services,Common Services Agency for the Scottish Health Service,Competition and Markets Authority, Criminal Cases Review Commission,Department for Communities in Northern Ireland,Department for the Economy in Northern Ireland,Department of Justice in Northern Ireland, Financial Conduct Authority,Fire and rescue authorities under the Fire and Rescue Services Act 2004, Food Standards Agency,Food Standards Scotland, Gambling Commission,Gangmasters and Labour Abuse Authority, Health and Safety Executive,Independent Police Complaints Commissioner,Information Commissioner, NHS Business Services Authority,Northern Ireland Ambulance Service Health and Social Care Trust, Northern Ireland Fire and Rescue Service Board, Northern Ireland Health and Social Care Regional Business Services Organisation,Office of Communications, Office of the Police Ombudsman for Northern Ireland, Police Investigations and Review Commissioner, Scottish Ambulance Service Board, Scottish Criminal Cases Review Commission, Serious Fraud Office,Welsh Ambulance Services National Health Service Trust.
https://petition.parliament.uk/petitions/173199
60,000 so far, less than 100,000 means it will be ignored out of hand.
There is another HN discussion about it at https://news.ycombinator.com/item?id=13035996#13036348
The biggest practical near term threat could well be to the spouses of all the parties that can request the data. Other likely threats are employers, particularly public ones.
That being said, VPN will be always better and it doesn't cost very much to set one up on DO.
Using a laptop running a live Linux CD using public WI FI while leaving your smart phone at home. Using fake log ins online.