Britain has passed what everyone calls the “snooper’s charter” otherwise known as the Investigatory Powers Bill.
This new legislation establishes the legal framework authorizing the government to hack into devices, networks and services in bulk and to create vast databases of personal information on all UK citizens. This is a preliminary step for a movement to impose worldwide taxation on Brits.
This is really to hunt money, not terrorism.
The “snooper’s charter” requires internet, phone and communication app companies to store records for 12 months and allow authorities to access them whenever they demand. That data will include anything you look at or search on the internet as well as all your telephone calls and text messages. Meanwhile, security agencies will be able to force companies to decrypt data avoiding the Apple confrontation in the USA. They are also imposing limitations on the use of end-to-end encryption.
They want EVERYTHING you do. This has ABSOLUTELY nothing to do with terrorism.
This is the hunt for taxes coming to a head in 2017.
For the first time, security services will be able to hack into computers, networks, mobile devices, servers and more under the proposed plans. The practice is known as equipment interference and is set out in part 5, chapter 2, of the IP Bill.
This could include downloading data from a mobile phone that is stolen or left unattended, or software that tracks every keyboard letter pressed being installed on a laptop.
“More complex equipment interference operations may involve exploiting existing vulnerabilities in software in order to gain control of devices or networks to remotely extract material or monitor the user of the device,” a draft code of conduct says.
The power will be available to police forces and intelligence services. Warrants must be issued for the hacking to take place.
For those not living in the UK, but who have come to the attention of the security agencies, the potential to be hacked increases. Bulk equipment interference (chapter 3 of the IP Bill) allows for large scale hacks in “large operations”.
Data can be gathered from “a large number of devices in the specified location”. A draft code of practice says a foreign region (although it does not give a size) where terrorism is suspected could be targeted, for instance. As a result, it is likely the data of innocent people would be gathered.
Security and intelligence agencies must apply for a warrant from the Secretary of State and these groups are the only people who can complete bulk hacks.
To help oversee the new powers, the Home Office is introducing new roles to approve warrants and handle issues that arise from the new powers. The Investigatory Powers Commissioner (IPC) and judicial commissioners (part 8, chapter 1 of the IP Bill) will be appointed by Theresa May, or whoever the serving prime minister is at the time.
The IPC will be a senior judge and be supported by other high court judges. “The IPC will audit compliance and undertake investigations,” the government says.
“The Commissioner will report publicly and make recommendations on what he finds in the course of his work,” guidance on the original bill says (page 6). “He will also publish guidance when it is required on the proper use of investigatory powers.”
Under the IP Bill, security services and police forces will be able to access communications data when it is needed to help their investigations. This means internet history data (Internet Connection Records, in official speak) will have to be stored for 12 months.
Communications service providers, which include everything from internet companies and messenger services to postal services, will have to store meta data about the communications made through their services.
The who, what, when, and where will have to be stored. This will mean your internet service provider stores that you visited WIRED.co.uk to read this article, on this day, at this time and where from (i.e. a mobile device). This will be done for every website visited for a year.
Web records and communications data is detailed under chapter 3, part 3 of the law and warrants are required for the data to be accessed. A draft code of practice details more information on communications data.
Bulk data sets
As well as communications data being stored, intelligence agencies will also be able to obtain and use “bulk personal datasets”. These mass data sets mostly include a “majority of individuals” that aren’t suspected in any wrongdoing but have been swept-up in the data collection.
These (detailed under part 7 of the IP Bill and in a code of practice), as well as warrants for their creation and retention must be obtained.
“Typically these datasets are very large, and of a size which means they cannot be processed manually,” the draft code of practice describes the data sets as. These types of databases can be created from a variety of sources.
Finally, we leave it to Edward Snowden to summarize just how insane this bill is…
The UK has just legalized the most extreme surveillance in the history of western democracy. It goes farther than many autocracies. https://t.co/yvmv8CoHrj
— Edward Snowden (@Snowden) November 17, 2016