Feeds

Snooper's-charter plans are just misunderstood, sniffles tearful May

Reborn plan to tap entire UK internet catches cold

Top three mobile application threats

Home Secretary Theresa May appeared before peers and MPs in Westminster on Wednesday afternoon to face questions about her proposed communications data bill, which has been almost universally rejected by people outside the security services bubble.

Excellent Hallowe'en vampire makeup, Minister

Her Hallowe'en session was the final one to provide evidence on the supposed merits of the draft legislation that could see British citizens' web activity much more heavily spied upon by spooks and police. The agents of the state would, of course, be acting to protect the public from the threat of terrorism and other criminality.

The cabinet minister's appearance served as something of a bookend to her grilling by the Home Affairs select committee in April this year when May trotted out similar justifications for increasing the powers of security services and other government bodies on surveillance of the internet.

May, suffering from a heavy cold, was quizzed in a packed session. Politicos expressed clear concerns that the Home Secretary was providing far too much wriggle room within a number of clauses that could, in the Home Sec's language, "future proof" the government's powers as technology continues to adapt and develop.

That concept was largely pooh-poohed by the panel, however, who repeatedly asked the minister to provide clear assurances about the Home Office's intentions by effectively recognising the need to re-draft some aspects of the proposals.

As in April this year, May repeated her belief that some aspects of the planned legislative overhaul had been "misinterpreted" by civil liberties campaigners and reports in the press.

May said in relation to content and not communications data:

"We don't want to look at the content of these emails - this is sadly one of the myths that has appeared in public."

The Home Secretary went on to claim that her department had "had a number of discussions with a number of CSPs [communications service providers] about the who, where, when and how".

She further claimed: "There is limited scope for the data we want to have access to. The bill is not intended to take us any further than that."

May said that "flexibility" needed to be built into any such legislation to prevent the Home Office having "to constantly come back because of too tight a definition".

When pushed about the UK potentially becoming the first democracy to collect data via ISPs through Deep Packet Inspection (DPI) probes - colloquially dubbed black boxes - which have only been implemented on a national scale in China, Iran and Kazakhstan to date, the Home Sec was somewhat uncommunicative.

"There's been quite a lot of discussion about the technicalities ... I'm willing to go into more technical detail in writing or for another private session," she retorted.

The committee's chair Lord Blencathra agreed to this plan, but asked May to get her facts together "as urgently as possible".

The Secretary went on to insist that comms data could be separated out from content, though some experts have questioned how such sifting of information on such a large scale might be achieved without revealing some sensitive data to the CSPs who would be required under such a law to retain much more info on their subscribers.

May went on to admit, however, that "at some point in the future if it became the case that you couldn't divide comms data from content [because of the development of technology] then we'd need to look at that".

Sadly, at that point the committee failed to ask what this meant for those well-known websites such as Google, Facebook and Twitter that are now moving to encrypt their pages.

The minister was repeatedly pressed about the talks the Home Office has claimed already to have had with CSPs - many of whom have said there has been little or no consultation to date by May's department on the bill.

She said: "We have had good discussions with a number of CSPs in the run up to this bill being published. Going forward we would expect that to be much more detailed."

When asked about security concerns relating to the retention of data held by private companies to help police and spooks access information about alleged crims, May appeared relieved to note that such data would not be in the hands of public sector - which has an abysmal track record on data protection.

She added: "CSPs are holding significant amounts of data about people's communications as we speak. This is not a new concept."

May further asserted that the concept of corporations ring-fencing such data would "not be changed by the nature of this bill".

After a break in the session, the Home Sec returned to respond only briefly to questions about cost savings of £6bn over the next 10 years, which was described by the committee's chair as "fanciful".

Perhaps unsurprisingly, May struggled to explain how her department had calculated that the proposals would cost £1.8bn from the public purse over the next decade.

She told MPs and peers that the Home Office had not been sitting around "totting up" such figures, and that she would be able to justify the costs in due course.

The chair brought the session to an end by asking May if large parts of the draft bill would have to be rewritten in light of the committee hearings, the evidence gathered and the level of opposition to the current plan.

The Home Sec said she would only comment on that after the cross-parliamentary reports from the sessions had been published. May did concede that elements of the bill - which she claimed had been misinterpreted - would be addressed, however.

She was then dismissed and advised to take a swig of hot water, whiskey and honey to fix that nasty cold. ®

3 Big data security analytics techniques

More from The Register

next story
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Did a date calculation bug just cost hard-up Co-op Bank £110m?
And just when Brit banking org needs £400m to stay afloat
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Lavabit loses contempt of court appeal over protecting Snowden, customers
Judges rule complaints about government power are too little, too late
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Don't let no-hire pact suit witnesses call Steve Jobs a bullyboy, plead Apple and Google
'Irrelevant' character evidence should be excluded – lawyers
EFF: Feds plan to put 52 MILLION FACES into recognition database
System would identify faces as part of biometrics collection
Ex-Tony Blair adviser is new top boss at UK spy-hive GCHQ
Robert Hannigan to replace Sir Iain Lobban in the autumn
Edward Snowden on his Putin TV appearance: 'Why all the criticism?'
Denies Q&A cameo was meant to slam US, big-up Russia
Banks slap Olympus with £160 MEEELLION lawsuit
Scandal hit camera maker just can't shake off its past
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.