Online Safety Bill: Whatsapp, Signal issue stark final warning against mass snooping of messages

Spread the love
Image of GCHQ donught building. Doesn't look like a doughnut. Look. Oh c'mon, can't you see - open your eye.
Image of GCHQ donught building

https://www.standard.co.uk/tech/online-safety-bill-whatsapp-signal-element-breaking-encryption-mass-surveillance-messaging-apps-b1091873.html

The heads of three major messaging apps have exclusively told The Standard that the Online Safety Bill, which is facing one of it’s final votes this week, will lead to the mass surveillance of every private online message and London’s reputation as a place to do business will be destroyed if the bill passes into law.

They also say Prime Minister Rishi Sunak can forget about the UK becoming a technology superpower if that happens, as tech firms will leave London and no one will want to start a business here.

“If the Online Safety Bill does not amend the vague language that currently opens the door for mass surveillance and the nullification of end-to-end encryption, then it will not only create a significant vulnerability that will be exploited by hackers, hostile nation states, and those wishing to do harm, but effectively salt the earth for any tech development in London and the UK at large,” Meredith Whittaker, president of not-for-profit secure messaging app Signal told The Standard.

“Passing the bill as-is sends the clear message that the UK government would rather make law based on magical thinking, than honor longstanding expert consensus when it comes to issues of complex technology.”

https://www.standard.co.uk/tech/online-safety-bill-whatsapp-signal-element-breaking-encryption-mass-surveillance-messaging-apps-b1091873.html

Continue ReadingOnline Safety Bill: Whatsapp, Signal issue stark final warning against mass snooping of messages

The Home Office says you don’t need to know about its ‘spying’ on lawyers

Spread the love
Image of GCHQ donught building. Doesn't look like a doughnut. Look. Oh c'mon, can't you see - open your eye.

Original article republished from Open Democracy under a Creative Commons Attribution-NonCommercial 4.0 International licence.

Exclusive: Government refuses to answer questions about its surveillance of immigration lawyers

Jenna Corderoy 24 April 2023, 10.00pm

The government has refused to answer questions about its “monitoring” of human rights lawyers – saying revealing the extent of its surveillance is not in the public interest.

In February, immigration minister Robert Jenrick admitted during a parliamentary debate that the Home Office is “monitoring the activities” of “a small number of legal practitioners”, after claiming that “human rights lawyers abuse and exploit our laws”.

Using Freedom of Information (FOI) laws, openDemocracy asked the Home Office how many legal practitioners it is monitoring, the nature of the monitoring and when it began. We also asked which unit within the department is carrying out the surveillance or if it has been outsourced to private firms.

The Home Office has now rejected the request, saying it is not in the public interest to disclose any of the information. openDemocracy has appealed against this decision.

Paul Heron, senior solicitor at the Public Interest Law Centre, told openDemocracy: “Government ministers spying on lawyers sounds like something from an authoritarian state. It is a direct threat to the rule of law and undermines the principles of justice and fairness.

“State surveillance of lawyers, and indeed any worker, is a clear violation of human rights and civil liberties and undermines the very foundation of a free and democratic society.”

Heron added: “The Home Office’s refusal to respond openly, adequately and indeed at all to the FOI request from openDemocracy regarding the monitoring strategy of lawyers by the Home Office should be a real concern, indicating not only a fundamental lack of transparency but a fundamental lack of accountability.”

State surveillance of lawyers, and indeed any worker, is a clear violation of human rights and civil liberties

Jon Baines, a senior data protection specialist at law firm Mishcon de Reya, shared Heron’s concerns.

Speaking to openDemocracy, Baines said: “The secrecy shown by the Home Office is regrettable, particularly as there is a distinct lack of any meaningful analysis of the public interest factors weighing in favour of disclosure.

“Secret monitoring of lawyers by the state has very serious connotations, and if the information really is exempt from disclosure, it is incumbent on the Home Office to give more detail and more justification for what is an inherently oppressive activity.”

The Home Office’s silence comes ahead of the return of the Illegal Migration Bill to the Commons this week, for its third and final reading before moving to the Lords. On Monday, the Equality and Human Rights Commission warned that the bill “risks breaching international obligations to protect human rights and exposing individuals to serious harm”.

The government claims the legislation will deter people from crossing the English Channel in small boats.

In February, Tory MP Bill Wiggin used a parliamentary session about a violent incident outside a hotel used to temporarily house asylum seekers in Knowsley, Liverpool to ask about legislating to stop such crossings.

Jenrick replied: “This is one of the most litigious areas of public life. It is an area where, I am afraid, human rights lawyers abuse and exploit our laws.”

The Home Office must give more detail and more justification for what is an inherently oppressive activity

Later in the debate, Liberal Democrat MP Alistair Carmichael asked: “The minister told us a few minutes ago that part of the problem here is human rights lawyers who abuse and exploit our laws… could the minister tell the House how many solicitors, advocates and barristers have been reported by the Home Office in the last 12 months to the regulatory authorities?”

Jenrick did not answer the question or provide figures. Instead, he said: “We are monitoring the activities, as it so happens, of a small number of legal practitioners, but it is not appropriate for me to discuss that here.”

At the time, Jenrick’s comments prompted dismay and concern among lawyers.

In its FOI refusal, the Home Office stated that a disclosure would “inhibit free and frank analysis in the future, and the loss of frankness and candour would damage the quality of risk assessments and deliberation and lead to poorer decision-making”.

Explaining its decision to withhold the information, the department said: “The Home Office has a process that allows caseworkers to check companies and individuals are qualified to provide immigration advice and reporting mechanisms that allows us to escalate any issues to regulatory bodies.”

Original article republished from Open Democracy under a Creative Commons Attribution-NonCommercial 4.0 International licence.

Continue ReadingThe Home Office says you don’t need to know about its ‘spying’ on lawyers

The **unofficial** Android update didn’t go well

Spread the love

Thanks for making my heightened surveillance status so obvious – you couldn’t have made it more obvious really. A dodgy unannounced Android update that refuses to install smoothly, browsers on my lappy refusing to work as before – so that I can’t make purchases from shops that I use regularly. Surely I wouldn’t notice that?

If anyone is overseeing Sue-Ellen Braverman, please ask her why she is putting a political opponent under intrusive surveillance for me.

15/3/23: political opponent is probably the wrong term. The point I’m making is that these actions are for political rather than any legitimate purpose.

Continue ReadingThe **unofficial** Android update didn’t go well

Computer Security: Why Yahoo email surveillance is a big deal

Spread the love

Reuters reported yesterday that Yahoo had actioned a secret dictate by a US security agency to search all it’s customers’ incoming emails.

A small excerpt of Reuters report

“…

Yahoo in 2007 had fought a FISA demand that it conduct searches on specific email accounts without a court-approved warrant. Details of the case remain sealed, but a partially redacted published opinion showed Yahoo’s challenge was unsuccessful.

Some Yahoo employees were upset about the decision not to contest the more recent edict and thought the company could have prevailed, the sources said.

They were also upset that Mayer and Yahoo General Counsel Ron Bell did not involve the company’s security team in the process, instead asking Yahoo’s email engineers to write a program to siphon off messages containing the character string the spies sought and store them for remote retrieval, according to the sources.

The sources said the program was discovered by Yahoo’s security team in May 2015, within weeks of its installation. The security team initially thought hackers had broken in.

When Stamos found out that Mayer had authorized the program, he resigned as chief information security officer and told his subordinates that he had been left out of a decision that hurt users’ security, the sources said. Due to a programming flaw, he told them hackers could have accessed the stored emails.

…”

A program was written to search emails “for character strings”.

Yahoo facilitated remote retrieval.

Yahoo’s security team were excluded from the process.

Yahoo’s security team discovered the program in May 2015.

“within weeks of it’s installation”.

Chief Information Security Officer Alex Stamos resigns claiming that he was excluded from a decision that hurts client security.

Stamos says that hackers could have accessed the stored emails due to a programming flaw.

Why it’s a big deal

I’m not at all surprised that Stamos was pissed off. His security team would have their systems watching their networks for the slightest hint that anyone was thinking about hacking them. They would be watching which processes were running and be continually confirming the integrity of their programs. And then his boss allowed the government to root (rootkit) his systems.

In simple terms, the backdoor (remote retrieval) and it’s traffic was hidden, the running process was hidden and file system integrity checking was bypassed to hide the new program. That’s serious shit needing changes to the running system. It needs a rootkit to make a system hide all those things and behave as normal while hiding the rootkit itself. It was Stamos’s job to prevent some evil hackers from installing rootkits and therefore owning his systems and his boss has gone and installed one behind his back – and it may have been an insecure one at that.

There is a problem that the security team can’t really know how long they were pwned once the system is controlled by a rootkit. A competent rootkiter would certainly be able to fix the security archive as it was written to hide it’s existence and activity. This raises further questions: How long were they owned? Was the earlier security breach of late 2014 related in some way? The earlier security breach is attributed to state-sponsored actors.

[Even more: Take for example file integrity checking. The classic example is tripwire. At intervals it will check the integrity of system files. It’s basically enumerating system files checking that there are not more or less without reason and checking the integrity of important files e.g. program that run, to make sure that they haven’t changed.

To list files on Unix, the command ‘ls’ is used. ‘ls -al’ also shows hidden files and their lengths. The action of the ‘ls’ and similar commands are changed so that rootkit files and the new spying program is hidden – everything needs to appear normal and unchanged. The new program and the rootkit hides from everything by altering the running system.]

6/10/16 8am update:

Later reports suggest that the spying / scanning program was integrated with a pre-existing programme scanning for child pornography, malware and spam. This presents a reasonable explanation so that the new program changes and consequent process (running programme) were part of normal development / evolution of systems.

It still leaves the issue of the backdoor (remote access). It appears that a choice is presented: either there is a rootkit hiding the backdoor and it’s traffic or the string being searched for is the security agency’s string allowing remote access. It’s difficult to hide that backdoor and overall I’d go with a rootkit.

A rootkit tends to support Yahoo’s useless security over the past few years and the fact that it took so long to realise i.e. their systems were owned.

Continue ReadingComputer Security: Why Yahoo email surveillance is a big deal

Message from the new head of GCHQ. Be afraid and embrace the new bullshitism

Spread the love

http://www.bbc.com/news/uk-29891285

So the new head of GCHQ says tech

Oh this is all so much bolox

The new Head of GCHQ is in charge of ~ of how does this work? ~ we’re not criminals listening to absolutely all communications into and out of the UK. We can’t be criminals invading the privacy of all you criminal bastards – WE’VE GOT IT ALL. Oh and that criminal Angela Merkel.

Look you’re all criminals, we’re listening to all of it so we can scare you senseless to do as you’re told. Aren’t you afraid of terrrists. I’ll see what I can do.

[ed: These tech companies are bastards too. They’re not playing the game. Why aren’t they totally afraid of these imaginary terrrists too? They’re not playing the game. They’re not playing the be afraid of terrrists game. Bo Woo Woo Woo Hu!

These tech companies who have techies and intelligent people are not playing the game. Oh dear, I wonder why that is. Not.

Praps they realise that it’s all bullshit by Neo-Con scum. I would at least appreciate them that much. You know, they’re not stupid or not as stupid as you presume.

I’m not that clever but I’m not that stupid.

The new GCHQ boss. Is that the best you could do?

I’d better address that bullshit that the new GCHQ boss is spouting. It’s just that there was much crap that he’s overwhelmed me. So much total nonsense coming from the new twat in charge of GCHQ. So much shit.

There’s so much shit you’ll have to give me a day or two. I’ve got to swim through it and reach for air.

ed: It seems quite easy really. GCHQ boss says you have no right to privacy cos he’s got to chase terrrists. Terrrists are imaginary to make you afraid and accept repression. GCHQ boss watches you skudding.

How long till they insist on watching? No, it’s OK they probably got it bugged anyway in this ‘free’ society. They are only protecting your ‘freedom’ after all.

Do be terribly afraid of terrrists. Don’t be afraid of dying when you cross the road which is far more likely.

The main point about about this new GCHQ boss is that he’s pushing the discredited bullshit terrrism agenda. Oh FO. The USians may have swallowed that. The rest of the world didn’t or at least they don’t now.

FO GCHQ boss YFOS(hit).

Some tech company is gonna employ me as head of tech-terrrism relations soon. I can do that. Gizza, gizza, I can do that.

The dominant belief system is depending on imaginary terrrists. Fear. It’s nonsense and it has been demonstrated repeatedly that these b’stards engage in false flag operations to manufacture that fake fear.

It is very likely that tech companies are fully aware of your BS. Tech companies are not required or expected to follow your false prospectus.

Your false prospectus of imaginary terrrists scring the hebbegebbe out of us. That’s Bolux and I would expect that  that is accepted in not only tech companies. I would expect that  that is accepted in all big companies – that  that is total BS.

People believing in that ridiculous BS is diminishing quickly …

later: Why should tech companies comply with the BS nonsense of terrrism?

Why should tech companies allow political BS method of control  – in this paticular instance, the imaginary threat of terrrism  – exploit and disempower people? Should they? Why should they?

Politicians and GCHQ do the fear. Tech companies do the tech.

Looka like this new GCHQ boss gonna scare you senseless. There’s a Woolaf!

Be afraid. Be afraid. GCHQ boss says BE AFRAID!

Continue ReadingMessage from the new head of GCHQ. Be afraid and embrace the new bullshitism