Feeds

GCHQ: Mastering the Media

Spy agency in public equivocation shocker

The essential guide to IT transformation

GCHQ has been hard at work in the last two days spinning against our revelations on Sunday that it is spending more than £1bn on monitoring and analysis equipment under a secret project called Mastering the Internet.

Mastering the Internet has been underway for over a year and contracts worth hundreds of millions of pounds have been awarded, our sources confirmed. A network of remotely-configured deep packet inspection probes inside internet and phone providers will grant GCHQ complete visibility of UK internet traffic.

The folks at the concrete doughnut, apparently uncomfortable with such work becoming public knowledge, would however like you to think the resultant expansion of their power is no big deal.

Here's the substantive sentence in GCHQ's lengthy statement in response to the story: "GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK."

Uh-huh. Never said you were going to target everyone in the UK, chaps. But Mastering the Internet will allow the monitoring of any internet use and phone calls in Britain. It will allow IP communications data to be gathered and processed (no warrant required), and interception of communication content (with a warrant).

Journalists tacitly impressed at a "rare public statement" from GCHQ, have happily interpreted it as a denial of the story.

It's not, of course. Rather, the eavesdropping agency has produced a textbook non-denial denial. Bravo. ®

Bootnote

For the record, here's GCHQ's statement in full.

GCHQ has two important missions: Signals Intelligence and Information Assurance. Our Signals Intelligence work provides vital information to support Government in the fields of national security, military operations, law enforcement and economic well being. The intelligence we provide is at the heart of the struggle against terrorism and also contributes to the prevention and detection of serious crime. GCHQ supplies intelligence to the UK armed forces, wherever they may be deployed in the world. Information Assurance is about protecting Government data - communications and information systems - from hackers and other threats.

GCHQ is heavily dependent on technology in order to execute our global missions. An increasingly rapidly changing digital world demands speedy innovation in our technical systems, allowing us to operate at internet pace, as the information age allows our targets to. One of our greatest challenges is maintaining our capability in the face of the growth in internet-based communications and voice over internet telephony. We must reinvest continuously to keep up with the methods that are used by those who threaten the UK and its interests. Just as our predecessors at Bletchley Park mastered the use of the first computers, today, partnering with industry, we need to master the use of internet technologies and skills that will enable us to keep one step ahead of the threats. This is what mastering the internet is about. GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK. Similarly, GCHQ has no ambitions, expectations or plans for a database or databases to store centrally all communications data in Britain.

Because we rely upon maintaining an advantage over those that would damage UK interests, it is usually the case that we will not disclose information about our operations and methods. People sometimes assume that secrecy comes at the price of accountability but nothing could be further from the truth. In fact, GCHQ is subject to rigorous parliamentary and judicial oversight (the Intelligence and Security Committee of parliamentarians, and two senior members of the judiciary: the Intelligence Services Commissioner and the Interception of Communications Commissioner) and works entirely within a legal framework that complies with the European Convention on Human Rights.

The new technology that GCHQ is developing is designed to work under the existing legal framework. It is an evolution of current capability within current accountability and oversight arrangements The Intelligence Services Act 1994 and the Regulation of Investigatory Powers Act 2000 underpin activities at GCHQ - both existing systems and those we are planning and building at the moment. The purposes for which interception may be permitted are set out explicitly in the legislation: national security, safeguarding our economic well being and the prevention and detection of serious crime. Interception for other purposes is not lawful and we do not do it. GCHQ does not target anyone indiscriminately - all our activities are proportionate to the threats against which we seek to guard and are subject to tests on those grounds by the Commissioners. The legislation also sets out the procedures for Ministers to authorise interception; GCHQ follows these meticulously. GCHQ only acts when it is necessary and proportionate to do so; GCHQ does not spy at will.

5 things you didn’t know about cloud backup

More from The Register

next story
Munich considers dumping Linux for ... GULP ... Windows!
Give a penguinista a hug, the Outlook's not good for open source's poster child
UK fuzz want PINCODES on ALL mobile phones
Met Police calls for mandatory passwords on all new mobes
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Yes, but what are your plans if a DRAGON attacks?
Local UK gov outs most ridiculous FoI requests...
Detroit losing MILLIONS because it buys CHEAP BATTERIES – report
Man at hardware store was right: name brands DO last longer
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
UK government accused of hiding TRUTH about Universal Credit fiasco
'Reset rating keeps secrets on one-dole-to-rule-them-all plan', say MPs
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
EU justice chief blasts Google on 'right to be forgotten'
Don't pretend it's a freedom of speech issue – interim commish
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.