Slashdot Mirror
UK's MI5 Wants Oyster Card Travel Data
Boiled Frog from a Nation of Suspects writes "The Oyster card, an RFID single-swipe card (which was recently cracked), was introduced to London's public transport users purportedly to make their lives easier. Now, British Intelligence services want some of the benefits by trawling through the travel data amassed by the card to spy on the 17 million Britons who use it. The article notes, "Currently the security services can demand the Oyster records of specific individuals under investigation to establish where they have been, but cannot trawl the whole database. But supporters of calls for more sharing of data argue that apparently trivial snippets — like the journeys an individual makes around the capital — could become important pieces of the jigsaw when fitted into a pattern of other publicly held information on an individual's movements, habits, education and other personal details. That could lead, they argue, to the unmasking of otherwise undetected suspects."
They should make records like this for all MPs and their families pubically available, updated daily and hosted on the interweb.
After 6 months, they can decide if they *REALLY* want the intelligence services (and anyone who picks an MI5 laptop up on a train) to have the same.
What the honest hope to unmask is criminals by considering everyone a suspect.
What they will do is discover and harass political opposition. Dark times for the UK.
http://slashdot.org/comments.pl?sid=216934&cid=17629948
"That could lead, they argue, to the unmasking of otherwise undetected suspects."
Translated: We want to be able to spy on you. We are not sure why yet.
I steal signatures. This one used to be yours.
Would the anonymised version of the data be any help to them? They could have all the travel data but not tied to any actual names but just to the anonymous IDs of the cards, and then if that data implicates one of the anonymous travellers, or if there's a reason to belief one of those are tied to a suspect, they could get a warrant or something like that for the name tied to it?
Here is my pass, and an additional 100 pounds Sterling. Now, just travel around London for the next 7 days, sightseeing or whatever you like. When you are done, mail it back to me. Wow, now that is a really good tourism plan. What? Why am I being arrested at the airport? No, I did not rob a bank. No, I am not muslim. Oh, that's why? hmmmm
Or better, stick it inside someone else's bag and you look like you were traveling with them. The downfall of all of this is that there is no physical link between the tag and any human being. This is just stupid. Tracking people will not work, and will ONLY inconvenience the stupid criminals and honest people. When will governments learn?
Support NYCountryLawyer RIAA vs People
Spying on everyone, and having everyone spy on *each other*, is a fabulous way to run a civilization. As we all know, the former Soviet Union and China are the closest we've come to paradise-on-earth.
What the fuck is wrong with England? I mean, Orwell *showed* them in "1984" how bad it could be, but they keep moving towards it. It's very strange.
First, apparently what they are asking for is not "anonymized" data. Second, as was very clearly demonstrated by the AOL data-release scandal, it is sometimes possible to get an awful lot of personal data on people by putting enough "anonymous" data together.
... and I have to say that stories like this are exactly the reason why I opted out of using the original Oyster where you have to register and hand over personal details. I use the anonymous pay as you go version. Though, thinking about it, I'm sure with a little effort they could associate the card id with the debit card payments used to top it up.
Shanghai metro for one has an oyster type card that is anonymous. To top it up you pay cash at the ticket office.
There are logs, and you can check them yourself by inserting the card into a reader; same for your wife who took your card to see where you've been. It is anonymous in that your personal details are not tied to the card ID, so no fishing expeditions by the authorities.
And this is why you should be wary of ANY data collection scheme...just like it used to be that any application would eventually evolve to a point where it incluided a webbrowser/IRC client/email reader, data collections like thses evolve until the government wants it.
And what happens when the database gets hacked (this is INEVITABLE) and your personal data is online, never to go away? Jack shit is what. The government won't reimburse you, the data will never dissappear (like they say, real men don't do backups, they archive to the internet!) and identity theives (including, you guessed it, terrorists) will have a field day with easily used personal data which can't be 'taken back'.
This is one of those cases where the certain (not potential, this shit is ionevitable) consequences are much worse than any 'problem' you are trying to solve.
Personal data will hit the net, identity thieves will have fun and you actually make tracing terrorists MORE DIFFICULT.
God, people are dumb sometimes.
-- Waht? Tehr's a preveiw buottn?
Oh man, I never saw this coming! Did you? Such a surprise. And here I thought they'd stop at the public cameras! Ha ha ha, boy is my face red.
Oh well. I'm sure this time they'll be satisfied with their new powers.
Breaking Into the Industry - A development log about starting a game studio.
...because if you're going to be planning to commit some kind of 'terror' act, you're not going to be traceable by your oyster card. In fact, you're more likely just to pay cash at the ticket machines and be untraceable. I don't have anything to hide, but I won't use oyster - or own a customer loyalty card, or pay with debit/credit card when I can just pay cash. If it's not your own government spying on you, it's marketing companies working for corporations!
People in power really don't have as much to hide. Political dissidents, on the other hand, have to watch out for reprisals. Would you risk having anything to do with an opposition group if you knew your affiliation would be noted? Symmetry of information is not always the same as symmetry of power.
The best way to oppose this is to note that there's no real law enforcement benefit.
No calls now, I'm
From TFA:
The fear of cyber-warfare has climbed Whitehall's agenda since last year's attack on the Baltic nation of Estonia, in which Russian hackers swamped state servers with millions of electronic messages until they collapsed. The Estonian defence and foreign ministries and major banks were paralysed,
Except that these were done by some Estonian script kiddies, so it wasn't "CYBERWARFARE!!!11@@!"
Rich.
libguestfs - tools for accessing and modifying virtual machine disk images
Your sarcasmometer is overdue for recalibration.
Lacking <sarcasm> tags,
Unless you are already tracking a suspect, data trawling is ineffective. The bigger the database, the less effective it is as more and more false positives occur and have to be investigated. This wastes huge amounts of time and resources and starves real investigations that could well turn up real suspects.
What can you say? That you didn't saw this coming? Really?
In the Netherlands there will be a travelcard that can be used in the whole country. Train, bus, tram, subway, everything.
They come in two flavours. One, *cough* anonymous, wihthout reduction and one, personalised, with 40% reduction. It appears anonymity comes at a price.
But who cares. They wouldn't do anything bad with it. They wouldn't use it to datamine your behaviour.
Recently I heared this story. I can't tell if it's true, but it sounds likely. They are still running trials with the cards and there are "some" flaws in the system. Somebody, with a registered card, described his traven from A to B and back again. After that trip, he found there was more money on his card than before and he wrote a story about is. Anonymously.
But surprisingly enough he got a call from the card company, so he asked how he got his phonenumber. The answer was "what do you think?".
I find this disturbing.
Privacy is terrorism.
That's right. And I am going to do something about it, right now.
Oh, wait.... Not now, American Idols is on. And I'm hungry. I think I'll get a pizza.
Knowledge is power. Knowledge shared is power lost.
Why does the system need to collect any personally identifiable data in the first place? Apart from the obvious surveillance uses, that is.
Incidentally, in Helsinki the public transport system uses an electronic pay card system, which is also used to create statistics on travel for use by the transport authority in designing their services. This data used to be personally identifiable, and was indeed used by the police to track the movements of the Myyrmanni bomber prior to the bombing. There was a bit of a fuss about this, however, and nowadays the system can no longer be used to track the movements of any given individual. Or that is what they say, anyway.
In England, you can, as a Member of Parliament, actually hold the same seat indefinitely. There's no maximum term, no maximum number of times you can be elected, so if you have a constituency where the majority of people support you, you can be in power forever. This is certainly the case where I live where the local MP has been in control since the mid 1960s. This is why I do not vote as he is unbeatable since he gets voted in by most of the over 60s (as well as others, since there's no good competition as you'd never win against him.)
I wonder where they got the 17 million stat from? Is that the number of Oyster cards ever issued? Given that there are only 8 million people in the whole of Greater London (which is the only city the oyster card exists) and only some of them (i've no idea how many but I'd guess about 50%) use public transport that seems a touch high to be current users.
It's already anonymous if you want it to be. You can buy an Oyster card over the counter for cash without giving any personal details. You can optionally register the card, so you can top up the pre-pay online and so on, in which case it ceases to be anonymous, but the default is anonymous.
Of course, if you really have something to hide, you buy individual tickets, which would only be traceable with a lot of work correlating the CCTV images (no change from the present). Ok, it's £4 per Zone 1 journey instead of £1.50, but I bet the terrorists can afford it. In other word, this isn't a measure against the terrorists -- it's too easily circumvented: it's just more monitoring of the ordinary reasonably law-abiding citizen.
Quidnam Latine loqui modo coepi?
It's a silly thing to ask for, since any terrorist who isn't a complete idiot is likely to use the anonymous version. Of course, anyone willing to blow themselves up is probably some kind of idiot to start with...
I am TheRaven on Soylent News
My MP takes 48% of the vote with a majority of 10,000. But, yes, I'd certainly do what you suggest if I supported any of the other candidates, because what you say makes sense. That said, I'm not a supporter of democracy, so have resigned myself to not getting involved in any significant way (a bit like not going to church really) unless a party that'll transition us to technocracy arrives!
:)
Back to democracy though, I dare say that getting Proportional Representation implemented would drive up those turnouts since every vote would count, but what party with a chance at winning First Past The Post is going to support that?
Honestly, my main worry is not that criminals or other external parties will misuse the information a government gathers, but that the government itself will misuse that information. It should not be forgotten that an individuals liberty and a government's authority are always in conflict with each other, which is the whole reason modern, so-called free societies have systems to limit the powers of government. Many people seem to have lost sight of the importance of those limits, and would be willing to grant almost unlimited powers to the state, since they do not believe the state would ever misuse those powers.
It's a lovely display of trust, of course, but a woefully misguided one. If in any governmental system there is potential for abuse, then sooner or later there will be abuse. Simple probability. The more power a government has over it's citizens, the more potential for damage there is in cases of abuse. And any government will take all the power they are given, that is why they must actively be kept in check.
It was only today I read someone seriously wondering why people would complain about the police keeping a register of DNA samples and fingerprints of all citizens - their express point of view was that if it helps catch criminals, anything goes. At times like that, I tend to feel like I'm an atheist debating the existence of God with a deeply religious person. It's as if there were no common ground at all, no common logic to be found. Hopefully it isn't so.
Alas, I have corrupted their data set by ending all my journeys at Morning Crescent.
I don't disagree with this. In fact, there's a continuum between the two, especially as lobbyists control governments and it becomes harder to tell the line between the government and private citizens with an agenda, between people with "authorized" use of force and people abusing force. It's not a crisp line. And the founding fathers certainly knew this, which is why they built a distributed government and refused to centralize power from the start--which makes me not understand why the modern Republican party can favor "original intent", and yet do these kinds of things, which dismantle what I see as the core of the original intent. "Original intent" must just be a marketing buzz word to them, used as after-the-fact justification for something they wanted to do, because their rhetoric doesn't match their actions, and I can't believe they don't know that the founders meant to limit the power of government, and to reserve to the people the right to defend themselves.
If those same people had written the Bill of Rights today, I'm quite sure the second amendment would have been extended to contain a personal right to some sort of defense against cyber intrusion, the little used third amendment would have contained protections against the government commandeering ISPs, the fourth and fifth amendment rights against cyber surveillance, and so on. The intent of the so-intensely-defended second amendment was not to preserve deer hunting for all time, it was to allow the citizenry a way to protect themselves against the encroachment of a too-powerful federal government.
Also, what's especially odd, and it goes again to what you're saying above, is that in the US, there are any number of talk show hosts (most of whom, in my area, are unabashed Republicans) who outright refer to the Democrats as traitors in the style of the book by that name. It is a travesty that one can think of mere political opposition that way, and somewhat scary because bad things tend to begin with a dehumanization of the supposed enemy, preparatory to doing something bad to them as a mass. But you'd think the silver lining would be that they would dare not put a bunch of power in the hands of the government, lest it get in the hands of what they think are traitors as part of the natural process of the next election. Instead, though, they seem to just blindly do it, and then somehow hope that they can use the fact of having created so precarious a situation as leverage to say "and therefore you must not elect a Democrat, for they are criminals and thieves." I just don't get it.
Of course, the article is about the UK, and their history with this is much different. So some of what I'm saying doesn't really apply to them from a literal historical point of view... except that the whole point of studying history, anyone's history, is to not have to live it oneself.
Kent M Pitman
Philosopher, Technologist, Writer
Ahmed: I fear that our plot is finished
Abdul: Oh great imam, why is that?
Ahmed: Those infidels, MI5, are now collecting information form Oyster cards. That will force us to buy travelcards or even full price tickets. As we only have a budget of 10 pounds and thirty seven pence for the entire year we cannot afford to place our instruments of terror at the key locations across London.
Abdul: Oh wise one, you are so right. With the help of Saitan, the imperialist infidels have defeated us with this plan. Now the people of London can live without fear of vengeance for their transgressions.
Doesn't it make you feel good to know that our freedoms are protected by politicans, lawyers and journalists.
Even if the card is not directly tied to your personal details, it is still quite useful to the powers that be. It contains all of your travel information, even if it's not linked with your name. All that's required is to make use of any of the numerous CCTV cameras all around London (particularly in the tube) to get a photo as you swipe the card of interest, then ID that photo (which, assuming you are a person of interest in the first place, would be quite easy). Sure, it's more work (for _them_) than having your name right there, but having an anonymous card (not linked at any point to a credit card) is far from the privacy heaven you dream of.
Any terrorist who isn't a complete idiot will be using ye olde magnetic strip cards paid for with cash. So these changes will serve to catch catch complete idiots, while letting the masterminds get through.
Actually, even smarter terrorists would use an anonymous card that's been topped up with stolen credit card data (one or more cards) which would send the spys looking in the wrong places, and possibly highlight the dangers of relying too much on data.
"I think it would be a good idea" Gandhi, on Western Civilisation
I cannot see, why the British police & government do not get it over with once and for all: Give everybody an RFID implant, make sure you cannot go anywhere in public without being traced, keep the records forever, make them available to any (semi-)governmental institution including the police and MI5 -- remembering that they will keep your data safe.
...
No need for beating around the bush and small steps in the direction of total surveillance.
It is just like removing a plaster, do it swiftly and the pain will soon be forgotten!
Honestly
PS: It will, of course, due to fact that crimes could be committed by foreigners, be mandatory for people visiting England to have an implant too, maybe just a temporary one that is removed at the border. Naturally, nobody in their right mind would object to that.
Your sarcasm is noted, re: this article, but you are spot on in your distrust.
No chick ever trusted any guy who said "I'll just put the tip in", and no thinking person should trust a government that says they are trying to make your life safer by invading your privacy.
I have seen and heard comments that are dismissive and arrogant to anyone who brings up the privacy issue, and that article seals it for me. We go from making your life safer by installing cameras everywhere, then to watching where you travel, in the name of anti-terrorism, then to collecting your DNA and making predictions about whether you will become a criminal.
George Orwell was not only an author, but apparently also somewhat of a prophet.
Other than this text, there is no discernible information contained in this sig.
Remember remember the fifth of November
Gunpowder, treason and plot.
I know of no reason why gunpowder, treason
Should ever be forgot...
Don't fight for your country, if your country does not fight for you.