Slashdot Mirror
Tech Firms Seek To Frustrate Internet History Log Law (bbc.com)
Plans to keep a record of UK citizens' online activities face a challenge from tech firms seeking to offer ways to hide people's browser histories. Internet providers will soon be required to record which services their customers' devices connect to -- including websites and messaging apps. From a report on BBC: The Home Office says it will help combat terrorism, but critics have described it as a "snoopers' charter". Critics of the law have said hackers could get access to the records. "It only takes one bad actor to go in there and get the entire database," said James Blessing, chairman of the Internet Service Providers' Association (Ispa), which represents BT, Sky, Virgin Media, TalkTalk and others. "You can try every conceivable thing in the entire world to [protect it] but somebody will still outsmart you. "Mistakes will happen. It's a question of when. Hopefully it's in tens or maybe a hundred years. But it might be next week."
...........to increase the general use of VPN's
Anybody with half a brain is using VPNs anyway. Go right ahead and inspect all my activity, you will only see me connecting to random servers all around the world exchanging what seems to be random noise. The only people who will be hit negatively by this are facebook-using idiots and other related scum, we've never needed them on our internet anyway. Let them suffer, they don't know how to use it anyway.
> Critics of the law have said hackers could get access to the records.
While well-intentioned, this is the totally wrong way to go about it. It's a technical argument to a problem which is political.
The point is, that in a modern state of Law, law enforcement has *no fucking business* in mass-surveilling people without a probable cause. And just because technology makes that possible these days, still: *no fucking business*
(And if you are really to discuss technical dangers, the real elephant in the room is: what happens if your state slides into some totalitarian mess? Unrealistic, you say? Watch closely what's happening in Turkey. Watch how easily "state of exception" is implemented in e.g. France because of "terrorists". The "hacker" scenario is really lame).
I want to hear more about how great those European governments are!
They do such a good job taking care of their citizens!
Think about the children seems to be getting swapped for "Think about the terrorists!"
This is such a bad idea, but hey, when it's up and running I wouldn't mind a look in that database, I'm sure just 30 minutes with it and I would have enough blackmail material to retire.
There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
Someone should create a noise program that runs in the background "visiting" thousands of sites with a mix of good and suspect URLs. The database would be so overloaded it would be hard to find any useful info.
Or gather all the ip interactions for the 99.99999% of non terrorist related activity and get swamped with noise.
UK does spy on its own people and share that with NSA. That does include MPs data (there is simply no way to separate such data without specifically tracking MPs and their families). It does include political groups, campaign groups, judges, juries, it includes everyone.
And you may not want to face it, but when Lt. Gen. Michael Flynn *is* the National Security advisor Trump appointed, and he was the same man who suggested sharing 5 eyes data with Putin to quell his perceived rise in Islamic extremism. And all this 5 eyes data? All this surveillance of the UK? It will all be available to a Putin's FSB.
Do you think you can mod the problem away? GCHQ staff happily spied on EU and UK knowing it was sharing with NSA staff, helping them spy on treaties that applied to the UK! They continued to do that, even after the 'no-spy' agreement was revealed to be bogus. This is how it works, they tell themselves whatever is needed to make it OK in their head.
All this data being collected, will be available by hack and by political agreement to enemies of the UK. NSA couldn't stop Russia hacking Florida election website, or any of the other election hacks, and now Russia has a toe in the door with Trump, 5 eyes is compromised.
All those 0 day exploits the NSA is sitting on, they will be available to Trump and to his friends soon.
Ya know back in the 80's one way fiber a static mac and arp entry with UDP. That is about as one way as things get. Not impossible to hark just rather hard. It works great for syslog actualy.
No it does not insure that the data is received or that it was not tampered with, but the treasure trove is the long term storage not what people are doing right then.
Mind you the whole things is a bit moot less and less traffic is not encrypted.
No sir I dont like it.
Whilst there's nothing that can be done about this - please don't kid yourselves that petitions and protests will actually change something - the rest of the world could help do the next best thing.
Completely destroy the UKs tourism industry.
Who wants to visit a country where porn has been blocked and you get monitored 24/7 under the clichéd retorts of child abuse and terrorism?
It only takes one bad actor to go in there and get the entire database,
Let's hope someone does, and makes public all politicians' activities.....
Well, there's this VPS in California, aaaand that's about it. Lots of stuff going to this one server on port 1194.
How long until they start hunting OpenVPN traffic, I wonder?
Are these logs kept and protected from tampering?
If not, then they are useless as evidence.
How do we know that someone didn't change the log to show that someone accessed terrorist sites and kiddie porn?
Reaping what you sow if it happened to be the folks responsible for this law.
>The Home Office says Because Terrorism
Stopped reading there. Partly because my bullshit meter overflowed and needs to reboot.
Okay it's online again. It should be fine until someone pretends the golden DB will be safe from hackers. The previous exposure should insulate it when the next member of the Ministry of Truth says Because Thinkofthechildren or Because Illegaldrugs.
Let’s just overload the system. Let’s have an application that requests 10 random websites every minute (but cut the connection as soon as 10 bytes come in, so to save bandwidth), 24/7. With 14,400 websites per day per user, the logs will quickly overflow, and it will become more arduous to snoop on people. Better yet, le 10% of those websites be questionable websites; when everyone is guilty of browsing questionable websites, no one is guilty of it.
...set the statute of limitations for ALL crimes to 30 days.
Full leak of all data.
4 weeks should provide enough to be wake up a decent number of people.
Slight other problem: You cannot request specific data, i.e. no web, email or really anything else. Are you drunk?
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Try an experiment first before implementing this law.
Require ALL corporate, political, TLA and law enforcement officials, as well as ALL other leaders, royals, celebrities, investors, lawyers, lobbyists, charity operators, employees, contractors, and volunteers, TLA employees, contractors and volunteers, and all donors to any of the above, AND NO ONE ELSE, to conduct ALL of their business and personal activities online and have their entire online history, as well as all calls, tracked and publicly and easily accessible to everyone for 10 full years on a block chain.
When they have all agreed to this, and have demonstrated for 10 years that they are all good people who can maintain a good example to live by, THEN they may track the public and weed out the criminals. And of course, continue tracking all the kinds of people mentioned in the previous paragraph, and hold them to the standards set in those first 10 good years.
Fill in the rest of the necessary legal mumbo-jumbo to make this stick as is colloquially intended.
captcha: angelic
No you walk into the room with the data and query it. Not sure on the UK but in the US you get to charge outrageous prices to handle subpoena's so not like the manpower is an issue. Is it realy that hard to go access a locked room?
No sir I dont like it.
I believe we need to disseminate the information necessary to make this unworkable https://www.change.org/p/reque...
This petition is currently getting a signature a second by my reckoning. https://petition.parliament.uk...