GCHQ: Mastering the Media
Spy agency in public equivocation shocker
GCHQ has been hard at work in the last two days spinning against our revelations on Sunday that it is spending more than £1bn on monitoring and analysis equipment under a secret project called Mastering the Internet.
Mastering the Internet has been underway for over a year and contracts worth hundreds of millions of pounds have been awarded, our sources confirmed. A network of remotely-configured deep packet inspection probes inside internet and phone providers will grant GCHQ complete visibility of UK internet traffic.
The folks at the concrete doughnut, apparently uncomfortable with such work becoming public knowledge, would however like you to think the resultant expansion of their power is no big deal.
Here's the substantive sentence in GCHQ's lengthy statement in response to the story: "GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK."
Uh-huh. Never said you were going to target everyone in the UK, chaps. But Mastering the Internet will allow the monitoring of any internet use and phone calls in Britain. It will allow IP communications data to be gathered and processed (no warrant required), and interception of communication content (with a warrant).
It's not, of course. Rather, the eavesdropping agency has produced a textbook non-denial denial. Bravo. ®
For the record, here's GCHQ's statement in full.
GCHQ has two important missions: Signals Intelligence and Information Assurance. Our Signals Intelligence work provides vital information to support Government in the fields of national security, military operations, law enforcement and economic well being. The intelligence we provide is at the heart of the struggle against terrorism and also contributes to the prevention and detection of serious crime. GCHQ supplies intelligence to the UK armed forces, wherever they may be deployed in the world. Information Assurance is about protecting Government data - communications and information systems - from hackers and other threats.
GCHQ is heavily dependent on technology in order to execute our global missions. An increasingly rapidly changing digital world demands speedy innovation in our technical systems, allowing us to operate at internet pace, as the information age allows our targets to. One of our greatest challenges is maintaining our capability in the face of the growth in internet-based communications and voice over internet telephony. We must reinvest continuously to keep up with the methods that are used by those who threaten the UK and its interests. Just as our predecessors at Bletchley Park mastered the use of the first computers, today, partnering with industry, we need to master the use of internet technologies and skills that will enable us to keep one step ahead of the threats. This is what mastering the internet is about. GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK. Similarly, GCHQ has no ambitions, expectations or plans for a database or databases to store centrally all communications data in Britain.
Because we rely upon maintaining an advantage over those that would damage UK interests, it is usually the case that we will not disclose information about our operations and methods. People sometimes assume that secrecy comes at the price of accountability but nothing could be further from the truth. In fact, GCHQ is subject to rigorous parliamentary and judicial oversight (the Intelligence and Security Committee of parliamentarians, and two senior members of the judiciary: the Intelligence Services Commissioner and the Interception of Communications Commissioner) and works entirely within a legal framework that complies with the European Convention on Human Rights.
The new technology that GCHQ is developing is designed to work under the existing legal framework. It is an evolution of current capability within current accountability and oversight arrangements The Intelligence Services Act 1994 and the Regulation of Investigatory Powers Act 2000 underpin activities at GCHQ - both existing systems and those we are planning and building at the moment. The purposes for which interception may be permitted are set out explicitly in the legislation: national security, safeguarding our economic well being and the prevention and detection of serious crime. Interception for other purposes is not lawful and we do not do it. GCHQ does not target anyone indiscriminately - all our activities are proportionate to the threats against which we seek to guard and are subject to tests on those grounds by the Commissioners. The legislation also sets out the procedures for Ministers to authorise interception; GCHQ follows these meticulously. GCHQ only acts when it is necessary and proportionate to do so; GCHQ does not spy at will.
If they are going to do this...
and now everyone knows about it. Doesn't it rather defeat the object? I think this is all a blind. What are they really upto?
It might help you to know that an intelligence sharing agreement exists between the UK,USA, Canada, Australia and (IIRC) New Zealand. IIRC it dates from sometime in the late 40s or early 50s. It may be a cold ware era document but AFAIK it is still in effect. Remember it is already known to Reg readers that they will *not* be storing all call records themselves, it will be on demand at the service providers.
“but it's possible they'd be a lot of false positives as well.“
Unless you believe that a *very* substantial portion of the UK population are terrorist suspects that "possible" should read "near certain" The US national Science Foundation concluded this find-a-terrorist-through-their-comms-pattern idea is *highly* suspect. It was Claud Shannon who pointed out all information is a subset of noise. But then we have seen a Govt. Minister talking of "something leading to something else" and therefor we should ban sexually suggestive drawings of children because of this. So maybe they are not that bothered about little things like evidence.
"Maybe I'm wrong but I believe that's the sort of system they want to set-up. "
You have fallen for the deliberate mixing of 2 different things. Let me seperate them. Interception Improvement *is* exactly about listening in on people's conversations and reading the *contents* of their emails, texts, instant messages etc. It's UK specific and should (given what it is) come under RIPA. IE specific warrants for specific people. NB HMG has had such ability since the GPO days. And yes that is what the computers are likely to be doing.
The wholesale collection of call records (who from, who to, header lines, time, date, duration) is the EU Data Retention Directive. Note it was introduced by the UK when it had the presidency. So watch out for the "The EU made us do it" line. IIRC the Directive states this info is for National Security purposes only. And I think analysis of the data is forbidden as well on privacy grounds.
Some numbers for you to think about. The Interception Commissioner's annual report said last year there were about 500k requests for call records (which could not include internet pages then, but will soon if not already) a year. IIRC he did not break out how many were for actual phone taps. The head of MI5 in a speech to newspaper editors said there are c4k terrorist suspects in the UK. That's 1 in 15000.
So how much of the UK's telephone and IP infrastructure's back capcity *should* be set aside (or can be pre-empted by the government on demand)?
So how many simultaneous telephone conversations should GCHQ be able to monitor? With enough capacity (money) it could monitor everyone.