Categories
Aside Links

2013.4.13

Attempts to strike a deal on pandas have been floated for more than a decade, but only began to progress quickly when Prime Minister Harper personally raised the matter with Wu Bangguo, Chairman of the National People’s Congress, in Beijing in December 2009, and former Minister Prentice signed a letter of support on behalf of the Government of Canada.

Hey so remember how ridiculous it seemed when Flaherty was calling up banks and haranguing them about mortgage rates? Turns out he’s got nothing on Harper and Prentice who called up the Chinese government and asked for pandas. And then the government tried to artfully redact the correspondence when the media asked for copies, in order to maximize the political impact of the pandas. but now the Information Commissioner has ruled that they can’t do that, so we get the whole story of what happened.

Anyway we’re now paying the Chinese government tens of millions of dollars and giving them photo ops with high-ranking Canadian elected officials for the privilege of taking care of some of their pandas for a couple years. Apologies to all that Canadian wildlife that isn’t getting protection due to chronic underfunding at Environment Canada, but you know how it is.

(via jakke)

I don’t have the time to do this – I just looked at a few, and got sick – but really: read the redacted/non-redacted documents against one another. Then, have open Canada’s Access to Information Act and see how various sections of the act are used to redact elements of the document.

And then get upset at how redaction-happy the government is, and how they justify the initial round of redactions. Also: realize what a big deal that so much goes through Cabinet and Ministers these days: It gives wide berth to using S. 21 of the Act, which often limits information associated with senior members of government (effectively) communicating with one another, or being mentioned as having communicated with one another.

Categories
Links

Lawful Access Was the Tip of an Already Existant Iceberg

From a National Post article, published in 2012, we get a taste of the governments’ existing surveillance capabilities and activities:

Medical

The intimate information in medical files might include: erectile dysfunction, anti-psychotic medication, HIV tests, addictions, body mass index, the times you sought help because of stress, depression or sexual trauma. Health records can include psychiatric counselling.

And it isn’t just information about the person named on the file. They contain concerns expressed about a spouse’s drinking or infidelity or drug use by their child; the times they vented about their unstable boss.

Aren’t these out of the hands of anyone other than health-care providers?

Ask Sean Bruyea. The Gulf War veteran found his health records, including psychiatric reports, had been passed around by bureaucrats and sent to a Cabinet Minister in an apparent bid to discredit the outspoken critic.

Financial

Financial records are similarly sensitive: how much you earn, how much you donate to charity, which charities you choose, bankruptcy declarations, who you owe money to.

Financial data in government hands include income tax records, pension information, child tax benefits and much more. Anyone who has received a cheque from the government for any reason or ever paid money to the government is now in a database.

Corporate and business registration, federally and provincially, also requires a lot of personal and financial information. Credit card records offer a detailed profile of spending habits. Although privately held, a court order sees them turned over.

“You can find almost anyone and learn an awful lot about them if you have their credit history,” said a former police officer who now works for a provincial government.

There are also the enormous databanks of the Financial Transactions and Reports Analysis Centre of Canada (FinTRAC), a government agency collecting and disclosing information on suspected money laundering and terrorist financing.

Banks, life insurance companies, securities dealers, accountants, casinos, real estate brokers and others who deal with cash are obligated to report the deals or attempted deals under certain circumstances.

“Behaviour is suspicious, not people,” is FinTRAC’s mantra.

Scholastic

Extensive student records exist on most Canadians, including government student loans.

Local school boards and provincial education ministries have recorded your marks, attendance, illnesses, notes from teachers to parents and notes from home to the school. Many jurisdictions are moving to creating a complete, portable account of each student that follows the person from class to class, school to school.

Like head lice in a shared toque, it never goes away.

Policing

Law-enforcement databanks allow officers anywhere to check if a person is dangerous or a fugitive. Databanks such as the Canadian Police Information Centre lists criminal convictions, warrants and other important interactions with police. Also flagged are “emotionally disturbed persons” and those who are HIV-positive.

But there is, increasingly, much more to police databanks, with almost anyone who has a police encounter being entered into one.

It is hard to muster worry that a convicted killer or child molester is flagged in a police computer, but what about you being embedded there for complaining about a noisy party or reporting stolen property?

The PRIME-BC police database contains the names of more than 85% of B.C. residents, according to the B.C. Civil Liberties Association, which warns citizens could be passed up for jobs and volunteer positions because of misleading red flags. In Alberta, TALON, a new, $65-million database, is also raising concerns.

Manitoba, under Mr. Toews when he was the province’s attorney-general, was a trailblazer in recording interaction with young men to note markers of gang activity to help identify and declare them as gang members.

The Toronto-area forces have an enormous, shared combined database.

Federally, also, those convicted of certain offences are ordered to submit their DNA to the DNA databanks, perhaps the ultimate baring of your identity.

Travel

Passport Canada, an agency of Foreign Affairs Canada, keeps a large repository on citizens, including facial-recognition biometrics, those who vouched for your passport application and all trips abroad as well as visa applications.

Canada Border Services Agency keeps track of who is crossing our borders, including where you go and who arrives to visit you.

Recall that thin slip of card for customs you filled out on the airplane when returning to Canada. You wrote your name, address, travelling companions, passport number, where you went, how long you stayed and what you bought.

Those cards — its catalogue of booze and tobacco and all — are kept and can be forwarded to police or other government agencies.

Immigration

The Field Operations Support Systems, used by border and immigration agents, track all immigration-related information.

The Computer Assisted Immigration Processing System tracks every immigration application being processed by overseas offices, including family history, assessment notes, appeals status and concerns raised by citizenship staff.

Both of these large databanks are being consolidated into the Global Case Management System. The consolidation is but one example of the government’s drive of integrating data.

Transportation

Provincial ministries regulating driver’s licences hold a bevy of information, including medical information, address, photograph and its biometric information for facial recognition, driving and vehicle records.

This summer, the Insurance Corporation of British Columbia caused an uproar by offering biometric data from its database to police to help identify participants in the Stanley Cup riot. Critics blasted the potential use of data collected for one purpose for a distinctly different one.

Automatic Licence Plate Recognition (ALPR) creates another powerful tool for surveillance.

Pitched as a way of finding stolen cars and kidnapped children, the technology has appeal, but the portable devices that read hundreds of passing licence plates every minute and runs them through registration databases to attach it to an owner is causing concern.

Scanned pictures can be stamped with GPS co-ordinates, date and time information and stored in a database. It can track cars coming and going from any destination.

In Britain, there have been wide complaints of police using ALPR to stop vehicles coming or going to political protests. Privacy watchdogs in B.C. uncovered that among those automatically targeted by the RCMP’s ALPR included everyone who has gone to court to establish legal custody of a child, all who had a mental health problem that received police attention, and those linked to others under investigation.

Corporate information

Information collected by private corporations also has a way of making it to government.

407 ETR, the privately run electronic toll highway north of Toronto, scans licence plates so the owner can be billed. Police have accessed the data to track vehicles entering and exiting the highway, cross-referencing it and linking it to their investigations.

More widely used is hydro-electricity data. Special legislation in some provinces sees hydro data turned over to government to help identify homes with unusually high usage.

Drawing a lot of power is a marker for running a marijuana grow operation. More than one hothouse cucumber farmer, hot tub or swimming pool owner has been on the wrong end of that information.

Needless to say, that’s a lot of surveillance in a lot of sectors. The range of activities also speaks to why privacy advocates are often jack-of-all-trades (there aren’t a lot of them, so they need to learn a little about a lot) and why there are persistant worries around ‘surveillance creep’, or the gradual expansion of state surveillance capabilities. Sure, a new program may not be all that significant on its own but when combined with everything else authorities can derive previously-impossible-to-realize insights into Canadians’ private lives.

And, let me tell you from experience: getting access to the personal information that is stored about you by various agencies is often an act in futility. Government can learn about you, but it’s often impossible to learn what government has recorded about yourself.

Link: Lawful Access Was the Tip of an Already Existant Iceberg

Categories
Links Writing

Senate Delivers a Devastating Blow to the Integrity of the Scientific Process at the National Science Foundation — WASHINGTON, March 20, 2013

jakke:

jhermann:

rhizombie:

The amendment places unprecedented restriction on the national research agenda by declaring the political science study of democracy and public policy out of bounds. The amendment allows only political science research that promotes “national security or the economic interests of the United States.”

holy shit, that’s disgusting

Practically speaking this will have almost no effect on political science research. The National Science Foundation (the US government agency that manages research funding) is advancing a slippery-slope argument to talk about why their independence has been threatened. But the NSF still ultimately decides where the grants go.

It’s very easy to argue that basically all research of “democracy and public policy” is useful for national security, economic interests, or both. Maybe funding applications will need to include a paragraph explaining why their research is useful for policy applications. But that’s hardly a bad thing, right? Even fundamental-level social science research generally presents a relatively straight line to policy application. And so the NSF can keep on approving whatever ivory-tower projects they like.

So yeah I mean obviously this change is massively suboptimal and deserves to be loudly frowned upon. But in terms of actual research projects losing funding? I’d be surprised if there were any at all.

I think that it’s going to matter how the Senate’s decision is actually implemented. Of course, you’ll see social scientists trying to figure out how their work ‘fits’ the new funding objectives. However, if NSF really gets on board and refuses to fund grants that only have ‘token’ statements for how research meets the new funding objectives then the Senate’s decision could hurt some political scientists.

The decision also establishes a kind of worry amongst some academics that the government could continue to aggressively direct academic study: sure, you can study whatever you want, so long as your work doesn’t depend on federal funds. Some of the Senate’s decision was the result of particular Senators being displeased with the academic work that had been funded; their modification to NSF granting effectively acts as a clear warning to other projects up for NSF funding: if ‘bad’ work that the political paymasters won’t approve of is funded then the paymasters will get very directly involved in matters.

Categories
Aside Links Quotations

2013.3.21

An oil spill recovery vessel ran aground en route to a federal announcement on oil tanker safety in Vancouver on Monday, officials have confirmed.

The vessel was making a 12-hour trip from its base in Esquimalt to Vancouver for a tanker safety announcement by Federal Transport Minister Denis Lebel and Natural Resources Minister Joe Oliver when it struck an uncharted sandbar near Sandheads at the mouth of the Fraser River near Steveston.

Wow okay I feel safer already and would gladly welcome more large oil tankers in an inlet or strait near me. (via jakke)

Just…wow. I can only picture delivering the news to the Minister, and watching his face twitch upon learning about this particular PR fubar.

Categories
Links

Police spy on web, phone usage with no warrants

Just so it remains clear just how much surveillance can happen in Commonwealth countries when authorities enjoy broad lawful access to communications data without needing warrants:

Law enforcement and government departments are accessing vast quantities of phone and internet usage data without warrants, prompting warnings from the Greens of a growing “surveillance state” and calls by privacy groups for tighter controls.

Figures released by the federal Attorney-General’s Department show that federal and state government agencies accessed telecommunications data and internet logs more than 250,000 times during criminal and revenue investigations in 2010-11.

(…)

Access is authorised by senior police officers or officials rather than by judicial warrant.

Federal agencies making use of telecommunications data include the Australian Federal Police, Australian Crime Commission and Australian Taxation Office, departments including Defence, Immigration and Citizenship, and Health and Ageing, and Medicare and Australia Post.

Data is also accessed by state police and anti-corruption bodies, government departments and revenue offices, and many other official bodies.

Needless to say, that’s an awful lot of parties accessing an awful lot of information about Australian citizens. Not included: statistics on telecommunications data access by the Australian Security Intelligence Organisation.

Categories
Links

FBI: Smart Meter Hacks Likely to Spread

Though a little over a year old, this post concerning the security of smartmeters is particularly valuable considering the rapid adoption of the technologies throughout Canada. Particularly pertinent:

Citing confidential sources, the FBI said it believes former employees of the meter manufacturer and employees of the utility were altering the meters in exchange for cash and training others to do so. “These individuals are charging $300 to $1,000 to reprogram residential meters, and about $3,000 to reprogram commercial meters,” the alert states.

The FBI believes that miscreants hacked into the smart meters using an optical converter device — such as an infrared light — connected to a laptop that allows the smart meter to communicate with the computer. After making that connection, the thieves changed the settings for recording power consumption using software that can be downloaded from the Internet.

“The optical converter used in this scheme can be obtained on the Internet for about $400,” the alert reads. “The optical port on each meter is intended to allow technicians to diagnose problems in the field. This method does not require removal, alteration, or disassembly of the meter, and leaves the meter physically intact.”

The bureau also said another method of attacking the meters involves placing a strong magnet on the devices, which causes it to stop measuring usage, while still providing electricity to the customer.

So, this suggests that insider threats and poor shielding enable significant fraud. Can’t say it’s surprising given how often these meters have been compromised when deployed in other jurisdictions.

Categories
Aside Links

Um no? Was he not facing 13 felony charges and up to 35 years in prison? That is what I have read and what just came up when I searched it. Perhaps I am wrong.

No. Orin Kerr did a good analysis of this (see: http://www.volokh.com/2013/01/16/the-criminal-charges-against-aaron-swartz-part-2-prosecutorial-discretion/) which would have had significantly reduced time in jail, if any. Also, prospective millions in harm was similarly overwrought. This is normal for prosecutors to announce, and the media usually fails to dig into the press release to tease reality from PR.

Categories
Links

This is not surveillance as we know it: the anatomy of Facebook messages

There are a lot of issues related to ‘wiretapping the Internet.’ A post from Privacy International, from 2012, nicely details the amount of metadata and data fields linked with just a Facebook message and the challenges in ‘just’ picking out certain fields from large lists.

As the organization notes:

Fundamentally, the whole of the request to the Facebook page must be read, at which point the type of message is known, and only then can the technology pretend it didn’t see the earlier parts. Whether this information is kept is often dismissed as “technical detail”, but in fact it is the fundamental point.

We should be vary of government harvesting large amounts of data and then promising to dispose of it; while such actions could be performed, initially, once the data is potentially accessible the laws to legitimize its capture, retention, storage, and processing will almost certainly follow.

Categories
Links Writing

Big data: the greater good or invasion of privacy?

Chatterjee has a good, quick, article on the significance of ‘big data.’. Note experts warning that, as a result of massive data aggregation, almost all individuals will have secret or sensitive information about themselves stored, traded, or used in the course of companies’ daily activities. This information isn’t necessarily about anything illegal, but legality is not the sole benchmark for whether humans want others to know things about them: embarrassing, shameful, or similar information that may not break the law could be financially, personally, or emotionally damaging should it be provided to third-parties.

Also, take note of Ohm’s warning that we should slow down and think about what is happening with regard to massive data aggregation and mining; we shouldn’t just commit ourselves to pushing the ‘privacy envelope.’ Headlong rushes and acceptance of novel technical structures that invisibly affect billions, with little clear accountability for corporate data mining practices, is a recipe for constructing futural harms.

Categories
Links

Internet Census 2012

yostivanich:

While playing around with the Nmap Scripting Engine (NSE) we discovered an amazing number of open embedded devices on the Internet. Many of them are based on Linux and allow login to standard BusyBox with empty or default credentials. We used these devices to build a distributed port scanner to scan all IPv4 addresses. These scans include service probes for the most common ports, ICMP ping, reverse DNS and SYN scans. We analyzed some of the data to get an estimation of the IP address usage.

Super interesting research, though incredibly illegal and borderline ethical (at absolute best, and most charitable).