What you need to know about cloud backup

GCHQ has been hard at work in the last two days spinning against our revelations on Sunday that it is spending more than £1bn on monitoring and analysis equipment under a secret project called Mastering the Internet.

Mastering the Internet has been underway for over a year and contracts worth hundreds of millions of pounds have been awarded, our sources confirmed. A network of remotely-configured deep packet inspection probes inside internet and phone providers will grant GCHQ complete visibility of UK internet traffic.

Here's the substantive sentence in GCHQ's lengthy statement in response to the story: "GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK."

Uh-huh. Never said you were going to target everyone in the UK, chaps. But Mastering the Internet will allow the monitoring of any internet use and phone calls in Britain. It will allow IP communications data to be gathered and processed (no warrant required), and interception of communication content (with a warrant).

Journalists tacitly impressed at a "rare public statement" from GCHQ, have happily interpreted it as a denial of the story.

It's not, of course. Rather, the eavesdropping agency has produced a textbook non-denial denial. Bravo. ®

Bootnote

For the record, here's GCHQ's statement in full.

GCHQ has two important missions: Signals Intelligence and Information Assurance. Our Signals Intelligence work provides vital information to support Government in the fields of national security, military operations, law enforcement and economic well being. The intelligence we provide is at the heart of the struggle against terrorism and also contributes to the prevention and detection of serious crime. GCHQ supplies intelligence to the UK armed forces, wherever they may be deployed in the world. Information Assurance is about protecting Government data - communications and information systems - from hackers and other threats.

GCHQ is heavily dependent on technology in order to execute our global missions. An increasingly rapidly changing digital world demands speedy innovation in our technical systems, allowing us to operate at internet pace, as the information age allows our targets to. One of our greatest challenges is maintaining our capability in the face of the growth in internet-based communications and voice over internet telephony. We must reinvest continuously to keep up with the methods that are used by those who threaten the UK and its interests. Just as our predecessors at Bletchley Park mastered the use of the first computers, today, partnering with industry, we need to master the use of internet technologies and skills that will enable us to keep one step ahead of the threats. This is what mastering the internet is about. GCHQ is not developing technology to enable the monitoring of all internet use and phone calls in Britain, or to target everyone in the UK. Similarly, GCHQ has no ambitions, expectations or plans for a database or databases to store centrally all communications data in Britain.

Because we rely upon maintaining an advantage over those that would damage UK interests, it is usually the case that we will not disclose information about our operations and methods. People sometimes assume that secrecy comes at the price of accountability but nothing could be further from the truth. In fact, GCHQ is subject to rigorous parliamentary and judicial oversight (the Intelligence and Security Committee of parliamentarians, and two senior members of the judiciary: the Intelligence Services Commissioner and the Interception of Communications Commissioner) and works entirely within a legal framework that complies with the European Convention on Human Rights.

The new technology that GCHQ is developing is designed to work under the existing legal framework. It is an evolution of current capability within current accountability and oversight arrangements The Intelligence Services Act 1994 and the Regulation of Investigatory Powers Act 2000 underpin activities at GCHQ - both existing systems and those we are planning and building at the moment. The purposes for which interception may be permitted are set out explicitly in the legislation: national security, safeguarding our economic well being and the prevention and detection of serious crime. Interception for other purposes is not lawful and we do not do it. GCHQ does not target anyone indiscriminately - all our activities are proportionate to the threats against which we seek to guard and are subject to tests on those grounds by the Commissioners. The legislation also sets out the procedures for Ministers to authorise interception; GCHQ follows these meticulously. GCHQ only acts when it is necessary and proportionate to do so; GCHQ does not spy at will.

Agentless Backup is Not a Myth