Spooks want to go fishing in Oyster database
Pearl-diving in London's smartcard beds
Posted in Policing, 17th March 2008 11:40 GMT
Free whitepaper – Systems management simplified
The UK's spooks have sought full automated access to Transport for London (TfL)'s "Oyster" smartcard network, further extending the amount of travel data available to the government.
The Observer said this weekend that the Information Commissioner's Office (ICO) has confirmed that the clandestine services have requested full Oyster access, and would target other cities' smartcard travel schemes as they come online.
At present they can request details of an Oyster user's transactions - and hence, time-slugged locations - on an individual basis only, rather than having free rein to search the system as they please. This could include mining the entire database to look for suspicious patterns, and tracking named individuals.
It isn't difficult to avoid Oyster monitoring, as one need merely pay cash when using public transport. The smartcard scheme is significantly cheaper than cash, however, and many righteous citizens might resent paying extra for privacy. Of course, there's always the option of registering an Oyster card under a false name and only ever topping up by cash. Or simply buying a pay as you go Oyster at a ticket window.
Driving in TfL's central area of responsibility offers no escape, since the congestion-charge numberplate-scan camera net was hooked up to the secret terror police following a series of "bomb" outrages in which no bombs were used and only terrorists were hurt. Other cities are also looking at their own electronic traffic management schemes, while the UK motorway system has a handy network of ANPR cameras.
The ICO apparently refused any further comment on the progress of the Whitehall debate regarding MI5/SS and MI6/SIS access to Oyster, citing "national security" concerns as the reason for conducting the discussion in secret.®
Free whitepaper – Guidelines for specification of data center power density

Analyst Keynote: The Register Agile Data Center Summit
Enabling the Agile Data Center

Google Spanner — instamatic redundancy for 10 million servers?
Early adopters bloodied by Ubuntu's Karmic Koala
Fedora 12 polishes Linux for netbooks
Sign up, sign up for The Register IT security newsletter