Feeds

GCHQ: Mastering the Media

Spy agency in public equivocation shocker

Reducing security risks from open source software

GCHQ has been hard at work in the last two days spinning against our revelations on Sunday that it is spending more than £1bn on monitoring and analysis equipment under a secret project called Mastering the Internet.

Mastering the Internet has been underway for over a year and contracts worth hundreds of millions of pounds have been awarded, our sources confirmed. A network of remotely-configured deep packet inspection probes inside internet and phone providers will grant GCHQ complete visibility of UK internet traffic.

The folks at the concrete doughnut, apparently uncomfortable with such work becoming public knowledge, would however like you to think the resultant expansion of their power is no big deal.

Here's the substantive sentence in GCHQ's lengthy statement in response to the story: "GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK."

Uh-huh. Never said you were going to target everyone in the UK, chaps. But Mastering the Internet will allow the monitoring of any internet use and phone calls in Britain. It will allow IP communications data to be gathered and processed (no warrant required), and interception of communication content (with a warrant).

Journalists tacitly impressed at a "rare public statement" from GCHQ, have happily interpreted it as a denial of the story.

It's not, of course. Rather, the eavesdropping agency has produced a textbook non-denial denial. Bravo. ®

Bootnote

For the record, here's GCHQ's statement in full.

GCHQ has two important missions: Signals Intelligence and Information Assurance. Our Signals Intelligence work provides vital information to support Government in the fields of national security, military operations, law enforcement and economic well being. The intelligence we provide is at the heart of the struggle against terrorism and also contributes to the prevention and detection of serious crime. GCHQ supplies intelligence to the UK armed forces, wherever they may be deployed in the world. Information Assurance is about protecting Government data - communications and information systems - from hackers and other threats.

GCHQ is heavily dependent on technology in order to execute our global missions. An increasingly rapidly changing digital world demands speedy innovation in our technical systems, allowing us to operate at internet pace, as the information age allows our targets to. One of our greatest challenges is maintaining our capability in the face of the growth in internet-based communications and voice over internet telephony. We must reinvest continuously to keep up with the methods that are used by those who threaten the UK and its interests. Just as our predecessors at Bletchley Park mastered the use of the first computers, today, partnering with industry, we need to master the use of internet technologies and skills that will enable us to keep one step ahead of the threats. This is what mastering the internet is about. GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK. Similarly, GCHQ has no ambitions, expectations or plans for a database or databases to store centrally all communications data in Britain.

Because we rely upon maintaining an advantage over those that would damage UK interests, it is usually the case that we will not disclose information about our operations and methods. People sometimes assume that secrecy comes at the price of accountability but nothing could be further from the truth. In fact, GCHQ is subject to rigorous parliamentary and judicial oversight (the Intelligence and Security Committee of parliamentarians, and two senior members of the judiciary: the Intelligence Services Commissioner and the Interception of Communications Commissioner) and works entirely within a legal framework that complies with the European Convention on Human Rights.

The new technology that GCHQ is developing is designed to work under the existing legal framework. It is an evolution of current capability within current accountability and oversight arrangements The Intelligence Services Act 1994 and the Regulation of Investigatory Powers Act 2000 underpin activities at GCHQ - both existing systems and those we are planning and building at the moment. The purposes for which interception may be permitted are set out explicitly in the legislation: national security, safeguarding our economic well being and the prevention and detection of serious crime. Interception for other purposes is not lawful and we do not do it. GCHQ does not target anyone indiscriminately - all our activities are proportionate to the threats against which we seek to guard and are subject to tests on those grounds by the Commissioners. The legislation also sets out the procedures for Ministers to authorise interception; GCHQ follows these meticulously. GCHQ only acts when it is necessary and proportionate to do so; GCHQ does not spy at will.

Maximizing your infrastructure through virtualization

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
UK government officially adopts Open Document Format
Microsoft insurgency fails, earns snarky remark from UK digital services head
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
MPs wave through Blighty's 'EMERGENCY' surveillance laws
Only 49 politcos voted against DRIP bill
EU's top data cops to meet Google, Microsoft et al over 'right to be forgotten'
Plan to hammer out 'coherent' guidelines. Good luck chaps!
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.