Policy wonk. Torontonian. Photographer. Not necessarily in that order.
Op-Ed: The circular, peculiar state of CSEC oversight (Includes interview):
Communications Security Establishment Canada (CSEC) is insulated from meaningful oversight. This article explains how the agency avoids scrutiny, and what you can do to encourage change.
One of the better articles in recent past on CSEC. Highly recommended.
Privacy watchdog calls for reforms but ministers stay silent:
The federal privacy watchdog’s concerns appear to be falling on deaf ears in the government, with three cabinet ministers yet to respond to her calls for reform.
(…)
While Clement has agreed to work with the commissioner, it’s not clear if her other recommendations will be entertained by the government. Chris Parsons, a privacy scholar with the Munk School of Global Affairs in Toronto, said the government has little incentive to change the current system or increase oversight.
“As revelations come out, that could be hurtful to government,” Parsons said. “There’s an understandable political value in not (enhancing) these audit powers. You can just imagine the first audit is performed and it reveals very high amounts of personal information being collected from various sources … . It could be politically unhelpful.”
My money is on the government quietly hoping the public and media just forget about this issues through the summer, given that they’ll be breaking from Parliament soon for BBQ season.
Four weeks on, huge swaths of the Internet remain vulnerable to Heartbleed:
Some 300,000 systems remain susceptible to catastrophic exploits, one scan shows.
With the media off (most) companies’ backs there’s just no way/reason that these remaining companies are going to patch the heartbleed vulnerability. One can only hope that civil suits are launched against these remaining companies to show via the market that patching is a requirement for contemporary digitally-enabled businesses.
Is social media info reliable?:
Christopher Parsons of Citizen Lab says the government’s use of social media to obtain information is filled with pitfalls.
I much preferred this interview over the one with CBC; in particular, the final discussion is helpful: Canadians want a responsible and transparent government, not one that is opaque and operates counter to Canadian values.
Government snooping on social media may breach Privacy Act:
Those are questions the government hasn’t answered, said Christopher Parsons, a post-doctoral fellow at the University of Toronto’s Citizen Lab, which focuses on human rights, IT and global security research.
“This is information that’s been collected without Canadians knowing, and as the privacy commissioner noted, without clear reason,” said Parsons, an expert on state surveillance tools.
“This government is saying they should be able to access public information just like anybody else, but that confuses how Canadian law works.”
Parsons said, once information is made public, Canadians maintain a “privacy interest” in the material.
Without a doubt, this is the most comprehensive piece to date on the federal government snooping on Canadians’ social media accounts.
The Canadian Government Is Creeping on Your Facebook:
Christopher Parsons, a cybersurveillance researcher at the Canadian nonprofit Citizen Lab, said the kind of social media surveillance used varied depending on the government agency. Law enforcement might use specialized and automated tools developed to monitor and react to events on social media, while political officials might be checking to see if citizens like new policies.
Parsons agreed that “some federal agencies are likely breaking the Privacy Act, because data is being collected without clear purpose,” he told me in an email. “Canadians don’t lose all their privacy rights just because data is made public and, unfortunately, the government doesn’t seem to realize this nuance of Canadian law. Hopefully they’ll come to their senses soon.“
U.S. tech firms routinely denying Canada’s requests for personal data:
Transparency reports from Twitter, Facebook, Microsoft, Yahoo! and Google suggest that the U.S. companies are being far more careful with Canadian data than even Canadian telecoms.
…
“The volume of (Canadian) requests, in the absence of the need for judicial warrants or other court oversight, illustrates the routine nature with which government and law enforcement can easily get (Canadian) telecoms to hand over personal information,” said Christopher Parsons, a post-doctoral fellow at the University of Toronto’s Citizen Lab.
The transparency report numbers remain suspicious, and we need to investigate how accurate they actually are in recording Canadian requests for data when our requests are being served by US law enforcement agencies.
Expert on Ottawa’s social media snooping:
State surveillance expert Christopher Parsons shares his concerns over the way Ottawa collects information from social media
I look like junk (it was a long day and other variables before the taping) but I think I made some pertinent points, at least.
Is Canada Stalking Me? A New Software Platform Aims To Find Out:
Do you think CSEC and the Mounties are spying on you? There’s an app on its way to help you find out.
According to Parsons, creating the request platform isn’t the hard part, it’s securing the content from the prying eyes of government or hostile users.
“The hard part is, we could pound this out probably pretty quick, but we want to make sure the way we’re doing it is in the most privacy protective way possible,“ he said. “Canadians don’t want to worry the Citizen Lab or anyone who picks up this tool are in any position to use or know anything about them. We want to do this right.”
It’s important that Canadians are better able to request information about themselves from the companies they engage in commercial relations with. But, as important as facilitating that access is, it needs to be done in the most privacy-protective way possible.
Data issue took 3 years to surface:
Documents made public for the first time this week show that government agencies requested customer data 1.2 million times per year from just nine Internet and telephone companies. But those documents are from December 2011. For three years they were not made public by the Office of the Privacy Commissioner of Canada.
“It would have been helpful, it would have advanced the debate several years ago had it come out,” said Christopher Parsons, a PhD candidate at University of Victoria’s political science department.
On his privacy issues blog, Parsons has developed a form to allow Canadians to find out how much of their personal information is stored and shared.
Canada’s privacy laws allow for Canadians to request this information from telecoms, which must respond. The form can be found at christopher-parsons.com.
Though they got my affiliation wrong (I’m currently a Postdoctoral Fellow in the Citizen Lab, Munk School of Global Affairs at the University of Toronto) I still do wish that these numbers had emerged earlier.
Excited Pixels