Thursday, October 16, 2008

The British Government plans to step in to the abyss with massive telecom database

The Independent is reporting that the British government is planning to announce a 1 BILLION POUND project that would involve the creation of a database to log every e-mail, telephone call and website click and retain the information for one year.

The project seems to be universally panned: the independent reviewer of UK anti-terrorism laws says "as a raw idea it is awful". The Information Commissioner calls it a "step too far".

If anyone had asked me (which they didn't, but I have constitutional rights here in Canada and get to say what I want), I would have said the idea is not surprising given the way things are going in England, but it is a clear step into the abyss of giving up any sense of private life in the country. See: Exclusive: Storm over Big Brother database - Home News, UK - The Independent. Big thanks to DP thinker: Proposed Database for pointing to the story.

Wednesday, October 15, 2008

Web 2.0 and online evidence

Chris Pierre of the Evince Blog and I recently had an interesting discussion about privacy and investigations that garner evidence from the internet. You can check it out here: The Evince Blog » Blog Archive » Picture and Video Evidence Found on the Web.

Monday, October 13, 2008

British Columbia bridge implements plate-based tolling

The Golen Ears Bridge in British Columbia is the first toll highway/bridge in Western Canada to follow the lead of Toronto's 407 ETR to implement electronic tolling using plate identification.

Spokespeople are attempting to soothe privacy fears, but I'm not sure it goes far enough:

Vehicles crossing Golden Ears Bridge will be tracked, TransLink says

...

But TransLink spokesman Ken Hardie said people shouldn't worry about their privacy being invaded.

He said billing agents who send toll bills by mail will be the only ones who usually have access to who crosses the bridge.

Police conducting criminal investigations will also have access, he said, just as they are able to access digital video recorded at SkyTrain stations.

Private individuals will be out of luck.

"If a jealous husband comes along and says, 'I want to know if my wife went across the bridge at a certain time', he won't be able to. That information is protected," he said.

Hardie said TransLink conducted a privacy impact assessment on Golden Ears bridge tolling, and had it approved by the Freedom of Information and Privacy office in Victoria.

"We've taken all the steps to satisfy them [privacy officials] that the records will be kept and managed in an appropriate way," he said.

"The key issues are what kind of record is being created, how long do you keep it, how do you store it and who has access to it," said Hardie.

If you ask me, police shouldn't get any of the information unless they show a warrant and spouses should know that an ordinary civil subpoena will probably pry that info loose from TransLink without too much hassle.

Saturday, October 11, 2008

Take Pittsburgh off Google Street View. Think of the children!

This blog is familiar with previous privacy issues raised by Google's street view (see: posts tagged "google street view"), but this seems a little over the top. A group is calling for the removal of Pittsburgh from Google street view because predators could use it to locate schools, playgrounds and other places where children might congregate. Hmm. I guess there's no other way of getting that information.

See: Children's safety group wants city off of Google's Street View

TSA Wants to Screen Passengers of Private Jets

I don't often get to flit around on corporate jets (ok, never), but this still caught my eye. The Transportation Security Agency has issued proposal for the screening of pilots, crews and passengers of private aircraft. Critics say it's a waste of money and an invasion of privacy. The closest I've come to this is a handful of flights on a client's helicopter, two flights on HeliJet airways and a charter flight to the US and I have to say it was very, very nice to not have to go through the hassle of pre-boarding screening. See: TSA wants to Screen Passengers of Private Jets - Gadling travel blog news, stories, deals, and tips. Go there.

Friday, October 10, 2008

Missing hard-drive in the UK contains info on 100K military personnel

The Daily Express is reporting that a contractor has misplaced a portable hard drive containing the personal information on over 100,000 military personnel. See: MPS 'FURIOUS' AS MOD DATA MISSING.

Over-the-top (or under-the-foliage) surveillance leads to backlash in the UK

The ridiculous degree of surveillance in the UK, supported by the Regulation of Investigatory Powers Act, is finally leading to a significant backlash as surveillance powers are being used to catch people who don't scoop their poop. Thanks to Rob Hyndman for the link.

Orwellian U.K. Angers People With Tree Cameras, Snooping Kids

By Caroline Alexander and Howard Mustoe

Oct. 10 (Bloomberg) -- Hidden in foliage next to a path in the southeast England seaside town of Hastings are digital cameras. Their target: litterbugs and dog walkers.

The electronic eyes feed images to a monitoring unit, where they're scanned and stored as evidence to prosecute people who discard garbage or fail to clean up after pets, a spokeswoman for the town council said.

``It's becoming a bit Big Brother-like,'' said Sandra Roberts, 50, a Hastings kiosk manager, invoking George Orwell's 1949 book ``Nineteen Eighty-Four,'' about a Britain where authorities pry into all aspects of citizens' lives.

Local authorities are adopting phone-record logging, e-mail taps and camera surveillance to police such offenses as welfare fraud, unlawful dumping of waste and sick-day fakery. Telecommunications companies are about to join the list of crime monitors. Already, 4.5 million closed-circuit cameras watch public places across Britain, or about 1 camera for every 15 people, the highest ratio in the world.

``There's too much of it now, all this spying,'' said Ivor Quittention, 80, a retired owner of three hardware stores who lives in Hastings. The town's spokeswoman, who declined to be identified, said spying is the most effective way of dealing with something residents complain about most.

The Regulation of Investigatory Powers Act, dubbed ``the snoopers charter'' by London-based civil-rights group Liberty, was passed by the ruling Labour Party in 2000 to legislate methods of surveillance and information gathering. The purpose of the law, known also as Ripa, was to help prevent crime, including terrorism, according to the Home Office.

`Too Much Power'

Initially, only security and intelligence services could invoke the Act's provisions. In 2003, Parliament extended powers to the 474 local councils in England, Scotland and Wales, as well as to 318 other state bodies, including 11 Royal Parks, the Post Office and Chief Inspector of Schools.

Since then, local authorities have been expanding their use of the provisions to dozens of lesser offenses.

The law has loopholes and councils like Hastings aren't doing anything wrong when they invoke it for minor crimes, according to Gus Hosein, a professor from the London School of Economics specializing in technology and privacy.

``Ripa just gives too much power to any Tom, Dick or Harry related to government,'' he said.

The latest proposed expansion of the Act requires telecommunications providers to store the text of all e-mails and details of all phone calls transmitted over their lines.

The government is seeking the views of the public on the proposal until Oct. 31. The bill will then go to Parliament for consideration.

`Sleep-Walking'

Of the 163 U.K. councils that replied to calls and Freedom of Information requests from Bloomberg, 95 percent said they use Ripa. Nine said they don't, including Barnet, Basingstoke and Deane, Broadland, Halton, Harrogate, Shepway, West Devon, Slough and the Shetlands, a group of islands off Scotland where sheep outnumber people. Three declined to provide details without payment of an administrative fee.

East Hampshire, in south England, applied the law to catch vandals defacing tombstones. Derby, in northern England, invoked it to send children with recording gear into shops to see if they'd unlawfully be sold cigarettes and alcohol.

``It's unreal,'' said Dean Price, 24, a graphic designer in London. ``We've been sleep-walking into this. Everyone talks about Orwell and 1984 but no one ever does anything about it.''

A spokesman for the Home Office, which oversees Ripa, said the extension is vital to intelligence gathering and will help investigators identify suspects, track them and examine their contacts. He declined to be identified, in line with policy.

Petty Offenses

The Association of Local Government, which represents councils, said through a statement by outgoing Chairman Simon Milton that the ``crime-busting powers'' are an essential tool in gathering evidence needed to stop criminal activity.

At the same time, Milton said he wrote to all councils in June asking them not to invoke the law for petty offenses.

``It's ironic that a nation that was once a bastion of privacy, one in which `an Englishman's home is his castle' and that did away with National ID Cards in 1952, is now one of the most surveilled in the world,'' said Toby Stevens, founder of London's Enterprise Privacy Group.

The opposition Conservative Party is against Ripa in its current form and will amend it if it wins the next election, due by 2010, home affairs spokesman Dominic Grieve said.

Mark Jewell, a councilman for the U.K.'s third party, the Liberal Democrats, said more checks and balances are needed to ensure Ripa isn't abused. ``At the moment, you don't need to have done anything wrong to get snooped on,'' he said. No other European Union government has similar regulations.

`Hugely Disproportionate'

Among councils which responded to Bloomberg's questions, those in northern England, Wales and Scotland used the law more than those in the south. Durham, in northeast England, was the biggest user, invoking the provisions 144 times in the past year, as authorities cracked down on offenses including fraud.

In April, council workers spent two weeks tailing a couple in Poole, southeast England, they wrongly suspected were planning to send their daughter to a school outside their designated area. Tim Joyce and Jenny Paton called the intrusion into their lives ``hugely disproportionate.''

In August, Paul Griffiths was taken to court and fined 1,000 pounds for allowing his dog to foul grass outside his home in Bristol. Griffiths said he's innocent and his pet had only been urinating when she was spotted on camera.

Brian Clements, a 79-year-old retired teacher from Clacton- on-Sea, south England, said the measures are ``like using a sledge hammer to crack a nut.''

``Wouldn't the Gestapo have loved all those little cameras,'' he said.

To contact the reporter on this story: Caroline Alexander in London at calexander1@bloomberg.net.

Last Updated: October 9, 2008 19:01 EDT

Thursday, October 09, 2008

Inside the surveillance apparatus

ABC News is running an online piece about the National Security Agency's surveillance programs, particular focusing on the interception of calls of Americans traveling or working in the middle east. See: ABC News: Exclusive: Inside Account of U.S. Eavesdropping on Americans.

Senators introduce bill to curb border crossing laptop searches

Two senators have introduced a bill to curb controversial laptop searches and seizures, limiting them to when there is a reasonable suspicion of illegal activity:

Techworld - Privacy groups praise bill curbing warrantless laptop searches

Feingold's bill spells out standards for search and seizures of electronic equipment belonging to US travelers at airports and other borders. The biggest condition is that such searches may be initiated only if the customs agent has "reasonable suspicion" that the traveler is carrying contraband or items otherwise prohibited in the country, or because the traveler is prohibited from entering the US. The equipment may be seized only if the DHS secretary, or a relevant federal or state law enforcement agency, obtains a probable-cause warrant on the belief that the equipment contains information that either violates a law, provides evidence of illegal activity or is foreign intelligence material.

Calculating the cost of reading online privacy policies

First the bad news: reading online privacy policies would cost $365 billion a year in lost productivitiy and leisure.

Now the good news: it doesn't matter because nobody reads them.

What?

A recent study by researchers at Carnegie Mellon University estimated that if each web-surfer read the full privacy policy of each website they visit once a year, it would take far too much time. Gotta make them shorter, sweeter and easier to understand.

See: Study: Reading online privacy policies could cost $365 billion a year.