Sunday 30 June 2013

The China Syndrome

The China Syndrome is a fiction. The idea is that if a nuclear reactor runs short of coolant the core will burn through its container and burrow all the way through the earth, coming out the other side, in China.

Don't try this at home.

Not least because you'll be disappointed – as Wikipedia tell us, "the Three Mile Island accident's molten core got exactly 15 millimeters on its way to 'China' before [it] froze at the bottom of the reactor pressure vessel".

The film The China Syndrome was released 12 days before the Three Mile Island incident. It's extraordinary what some studios will do for a bit of publicity.

In the film, Jack Lemmon has proof of a conspiracy to cover up known safety problems with a nuclear reactor. By the time he's ready to go public with it, he's so tired and nervous that he comes across as a gibbering wreck with no credibility.

The physics may be all wrong but the film is a warning to whistleblowers against suffering their own China Syndrome credibility meltdown. If you want to have an effect, you need to be taken seriously – try not to look like a gibbering wreck.

----------  o  O  o  ----------


Before 6 June 2013, anyone suggesting that a huge number of telecommunications in the US and the UK are intercepted by the security services would have been regarded as a gibbering wreck, a paranoid and ridiculous conspiracy theorist.

Now, anyone who expresses the mildest surprise at the allegation of widespread surveillance is accused of naïvety, they are credulous, delightfully innocent simpletons, unaware of how the world works – and has to work – for their own good.

That's quite a change.

It releases the brakes on the imagination.

Perhaps it's not just the US and the UK?

That is the contention of an article the Guardian published last night:
At least six European Union countries in addition to Britain have been colluding with the US over the mass harvesting of personal communications data, according to a former contractor to America's National Security Agency, who said the public should not be "kept in the dark".
The article has now been unpublished and if you search for it and click on the link that Google returns, you get a Guardian page headed "Taken down: deals to hand over private data to America", saying "This article has been taken down pending an investigation".

Probably best, in the circumstances, to keep the brakes on and await developments.

----------  o  O  o  ----------

After all, you don't want to look naïve do you?

That promises to be the fashion crime of 2013.

Naïvety.

And, wreck that you are, just look where your gibbering leads –


Don't Worry – a China Syndrome play for tomorrow

For years, the Commissioner for the Inland Revenue has been pursuing Google, a company whose income from activities in Ruritania is equivalent to 2% of GDP, a company whose associated costs are negligible and yet whose profits – judging by its corporate income tax payments – are somehow also negligible.

The Commissioner's case is strong and the legal team is particularly optimistic since the CEO of Google Ruritania rang, asking for a meeting at which the tax situation would, the CEO believed, be settled fully and finally, to the satisfaction of all parties.

Today's the day. The Commissioner is in the office, there's a knock at the door and the Second Secretary ushers in the CEO and, to the consternation of the Commissioner, two other people. One is the Permanent Secretary at the Ruritanian Board of Trade and the other is the Ruritanian National Security Advisor.

CEO: Commissioner, I must thank you for seeing me at such short notice. You do me a great honour. Relations between Google and Ruritania are nothing but cordial.

Comm: I wish that were the case, CEO. Perhaps today's meeting will bring about a rapprochement but, as things stand, Google's reluctance to pay the corporation tax due is an obstacle to unfettered cordiality between us.

CEO: Precisely why I am here, Commissioner, and once again I must thank you for coming so quickly to the point. Just to be sure that all of us in the room are clear, could I prey upon you to state the Revenue's argument in summary?

Comm: We have a large number of cases decided at the Upper Tribunal confirming that the Revenue must ignore the intermediate stages of a transaction if the sole purpose of those stages is to avoid tax. You know, CEO, as well as I do that those cases are remarkably similar to the way Google organises its affairs. If our unfortunate and unnecessary dispute were taken to the Tribunal, their decision would be in favour of the Revenue, Google would have to pay the tax due, with interest and with penalties on top. That's the law. Your pretence that business obviously transacted in Ruritania is actually transacted in Carpathia is laughable. You can give in now. Or you can give in later, when the interest bill will be even higher, as will the reputational damage done to Google by all the media coverage.

CEO: Thank you, Commissioner, for your pre-Leveson warning and for that succinct statement. And I must say that if we keep our eyes fixed exclusively on Google's accounts, we can hardly fault the Revenue's case. But there is a bigger picture. There are other costs to consider and I wonder if perhaps at this juncture the Ruritanian National Security Advisor who has so graciously agreed to accompany me today might say a few words.

Security: Commissioner, you read the newspapers. You know of PRISM and Boundless Informant and Tempora and Echelon. These security initiatives need data. That is the arrangement we have with our cousins across the sea. We provide data. As much data as possible. We receive much consideration in return. Consideration which mitigates Google's low tax bills. A large proportion of our data comes from Google. Anything which threatens Google's access to data is a threat to Ruritania and I must ask you to take this into account in framing your case. Please don't worry about Google, Commissioner.

Comm: I do indeed read the newspapers, esteemed Security Advisor. I am not immune to your argument and I am not entirely naïve. But you too, if I may say so, must look at the bigger picture. It is my department's job to collect taxes. There are limits. Limits which it is inadvisable to breach. Our parishioners grow reluctant to make their contributions when they see wastage by the public administration. And when they see poor quality public services. Not to mention slush funds of hush money and golden goodbyes. A delicate balance needs to be struck to preserve the orderly operation of the political settlement. That becomes harder still to achieve when foreign companies are seen to trade here without the impediments suffered by Ruritanian businesses.

CEO: And that, Commissioner, is why the Permanent Secretary is here with us today.

Trade: Your department, Commissioner, has its job, and so does mine – to expand the economy. How do you do that? You sell more. How do you do that? You advertise more. You need to create demand. You need to discover people's wants, needs and interests, their preferences and their aspirations. You need to help people to discover the truth about themselves. That way you know what to supply to whom. In all of these matters, there's Facebook of course, but Google is at the heart of our strategy for growth. Don't worry, Commissioner, about collecting taxes. Once we have got the economy growing again, the taxes will follow. But for that, we need Google. Do not stand in the way of Google, Commissioner. If you do, you stand in the way of not only national security but also the health of the Ruritanian economy. And that is not the Revenue's job.

Comm: My dear colleague, you and I have worked together for years, the collaboration between Trade and the Revenue has been a fruitful one, we speak our minds and we get results. Your prescriptions for the economy, as we have told you on many occasions, would fail at GCSE. Further, why should Google avoid tax while other businesses can't? Excusing Google would look to the public like patronage, a special favour and random whereas the law is meant to be impartial. If implemented, your prescriptions would make my job impossible.

CEO: Not so much impossible, Commissioner, as unnecessary. Don't you worry about the public. And don't worry about the law – much of it is mere mythology. Quaint. You see Trade's plan is for every person in Ruritania to maintain a personal data store, managed by state-appointed trusted identity providers. That includes both types of person, natural persons and legal persons, i.e. corporations, trusts, and so on. Once these personal data stores are populated, where is the need for the Revenue? A tax farmer app can simply calculate the amount of tax due and make life more convenient for everyone by filing their tax returns for them and direct debiting the money from their bank accounts. It would be naïve of anyone not to see that that is the purpose of a personal data store and that that is also why the Revenue as currently constituted serves no purpose in the digital-by-default new world.

Comm: Oddly enough, CEO, this may surprise you, but no, I don't worry. You rely on a semantic web which doesn't exist, you have no philosophy of language, no theory of meaning. And you rely on the study of artificial intelligence, which is certainly artificial but not intelligent – your minions talk trivially of the "quantified self" but you have no philosophy of mind and your grasp of psychology is as tenuous as your economics. Your failure is guaranteed. No worries there.

CEO: We'll see. But you won't. I have an inkling that Ruritania will soon relieve you of your commission.

The China Syndrome

The China Syndrome is a fiction. The idea is that if a nuclear reactor runs short of coolant the core will burn through its container and burrow all the way through the earth, coming out the other side, in China.

Don't try this at home.

Friday 28 June 2013

G-Cloud – how to win

Francis Maude, the Cabinet Office minister, made an important speech yesterday.

The speech is covered on his award-winning GOV.UK website – Minister Francis Maude described how government is moving into a "new world" of technology procurement by opening up opportunities to SMEs [small and medium-sized enterprises].

Every step of his argument is contentious.

Let's leave that for another day ...

... and content ourselves here with noting that, one way and another, Mr Maude gets round to saying that "one of our most successful innovations is the delivery of the G-Cloud framework, which embraces open procedures. This is a step change in the way government buys IT. It’s quicker, cheaper, more competitive and more accessible to SMEs ... As a result, of the 700 successful suppliers on the framework – 83% are SMEs" and:
For example, the Home office saved 83% on a hosting contract by contracting with Skyscape. Skyscape is an SME providing hosting and other IT support services – and were one of the first accredited suppliers on G-Cloud. They started as a small start-up with 6 people - and now employ over 30 as a direct result of the business they get through G-Cloud.
Out of 700 candidates, Mr Maude chooses Skyscape for his example.

Why?

Skyscape was only incorporated on 3 May 2011. Just over two years ago. Many SMEs have been established for much longer and have a track record that can be properly evaluated.

How did Skyscape get accredited to G-Cloud?

With no track record, it's a mystery – as Mr Maude says, "this is a step change in the way government buys IT".

Not only were Skyscape accredited, they started winning contracts. With HMRC. And the MOD. And the Government Digital Service. And, as noted in Mr Maude's example, with the Home Office.

That's four chunky contracts that established SMEs failed to win. Instead, they went to Skyscape which, as at 31 March 2012, had sales of £44,416, which cost them £327,320, they'd spent £956,965 on administration and the balance sheet shows negative net assets of £1,240,833.

Is that what Mr Maude means when he says that G-Cloud is "quicker, cheaper, more competitive and more accessible to SMEs"?

What's the trick? How do you beat the G-Cloud competition – 699 of the world's finest – when you've only got £1,000 of share capital, all controlled by one man, when nobody's ever heard of you and you've never done anything except run up debts of £1.2 million?

You'd like to know?

You'd like to know why you lost?

Why the contract wasn't accessible to you after all, even though you have a hard-won track record of success?

Here's a guess.

Take a look at one of Skyscape's press releases. Their very first press release. You don't have to go far back, obviously. Just to 11 November 2011:
SKYSCAPE CLOUD SERVICES APPOINTS COMMERCIAL DIRECTOR

November 11, 2011
Skyscape Cloud Services appoints Commercial Director to oversee G-Cloud delivery.

Skyscape Cloud Services Limited, ‘the easy to adopt, easy to use and easy to leave’ assured Cloud Services Company, today announced that Nicky Stewart, former G-Cloud Head of ICT Strategy Delivery has joined the company as Commercial Director.

Stewart held the position of head of ICT strategy at the Cabinet Office where she was responsible for leading a team of public and private sector organisations to develop the commercial strategy for G-Cloud, data centre consolidation and the government application store.

In this newly created position Stewart will work with public sector organisations and the Skyscape Alliance to ensure that the company’s commercial strategy is aligned to their goals and desired outcomes and that future innovative commercial models are developed.

“There is an enormous opportunity for the public sector to benefit from the dramatic cost-savings, improved agility and lower carbon footprint that cloud computing offers” said Nicky Stewart. “What I have seen in Skyscape is a unique ability to deliver this in an assured, secure and UK sovereign manner; with almost unlimited capacity”.

Phil Dawson, CEO of Skyscape adds “Nicky’s appointment will ensure that Skyscape’s services continue to be truly aligned to the goals of the G-Cloud initiative, with innovative commercial models and the associated financial benefits for the UK public sector. As an industry leading team we are very much looking forward to demonstrating the tremendous benefits that an elastic, on demand IT service will bring to UK public sector”
There's your lesson.

Choose your commercial director carefully – there's not much point bidding otherwise.

Make sure she's the former G-Cloud Head of ICT Strategy Delivery, and you're away.

Simples.

----------

Updated 25.4.14

This matter has now been aired by James Silver in Wired magazine, 11 April 2014, please see Each cabinet office PC costs UK taxpayers £7,000 a year. Why?.

Apparently DMossEsq is wrong:
When this alleged conflict of interest is put to Bracken, he laughs: "I don't know who Nicky Stewart is, so I've no idea," he says. "We face a systematic problem in the civil service of having a revolving door, usually outwards back to large systems integrators. We can't just tell people in government that you can't work for suppliers. [But we can] do a lot to make sure this doesn't happen, by not handing out massive contracts and then having our best brains and people who know our services going to the places who are delivering them back to us."
and:
Simon Hansford, CTO of Skyscape, responded to Wired: "Nicky has never held a sales role within Skyscape, or any other organisation. Nicky uses her public-sector expertise, and her knowledge of how the UK government purchases, to ensure that Skyscape develops its policies, principles and services in a way that aligns with government ICT strategy principles and meets the needs of the UK public sector. All of Skyscape's business is won through fair and open competition and Skyscape's success comes down to its disruptive business model."
So it remains a mystery how Skyscape won several prestigious central government contracts against established competition before it had even filed its first set of accounts with Companies House.

G-Cloud – how to win

Francis Maude, the Cabinet Office minister, made an important speech yesterday.

The speech is covered on his award-winning GOV.UK website – Minister Francis Maude described how government is moving into a "new world" of technology procurement by opening up opportunities to SMEs [small and medium-sized enterprises].

Every step of his argument is contentious.

Let's leave that for another day ...

... and content ourselves here with noting that, one way and another, Mr Maude gets round to saying that "one of our most successful innovations is the delivery of the G-Cloud framework, which embraces open procedures. This is a step change in the way government buys IT. It’s quicker, cheaper, more competitive and more accessible to SMEs ... As a result, of the 700 successful suppliers on the framework – 83% are SMEs" and:
For example, the Home office saved 83% on a hosting contract by contracting with Skyscape. Skyscape is an SME providing hosting and other IT support services – and were one of the first accredited suppliers on G-Cloud. They started as a small start-up with 6 people - and now employ over 30 as a direct result of the business they get through G-Cloud.
Out of 700 candidates, Mr Maude chooses Skyscape for his example.

Why?

Thursday 27 June 2013

The Tragedy of the Commons

Public cloud benefits
outweigh security and data sovereignty risks,
says head of Parliament IT

Back in the 1970s, few organisations could afford their own computer. Timesharing bureaux grew up as a result. You'd nip round to your local IBM or Burroughs or ICL bureau with a deck of punched cards and a couple of tapes and come back with a printout. Timesharing wasn't cheap. But it made computing a bit more widely affordable.

That all changed with the advent of microcomputers and cheap high-speed telecommunications. The timesharing bureaux went out of business during the 1980s.

30 years later, they're back. Cloud computing suppliers are the timesharing bureaux de nos jours.

It's the same pitch. Outsourcing to a cloud computing supplier is cheaper than running your own data centre. There's more flexibility. You can get up and running more quickly. Backup and security are handled by dedicated experts and not by your own staff.

(Of course, prices could go up once there's no alternative to the cloud. And the cloud computing suppliers' backup and security staff could turn out to be just as flaky as your own. But these points are rarely made. Your attention is distracted by the modern and exciting hippy lure of the web, which is somehow deemed to be a good in itself.)

Outsourcing in government IT has been going on for decades. During which time an oligopoly of systems integrators (SIs) has developed in the UK and has allegedly grown used to charging the government eye-wateringly disproportionate fees for their services.

The SIs operate expensive data centres. Shifting to the government cloud (G-Cloud), it is hoped, will cut costs hugely while at the same time reducing development lead times and improving the response to change.

That's the pitch. That's the picture which is drawn for you to admire. And if that's all there was to it, there could hardly be any objection to cloud computing.

... the Houses of Parliament [are] now in the process
of moving a number of applications to the public cloud
as part of plans to create a ‘digital parliament’

From the dept of useless statistics:
  • 325 posts have been published on this blog, starting on 3 October 2011.
  • 61 of them are tagged "G-Cloud".
Clearly, DMossesq thinks there is something more to it, some important problem with cloud computing that needs to be communicated to readers.

He is not alone.

The OECD think that "cloud computing creates security problems in the form of loss of confidentiality if authentication is not robust and loss of service if internet connectivity is unavailable or the supplier is in financial difficulties".

ENISA think that "its adoption should be limited to non-sensitive or non-critical applications and in the context of a defined strategy for cloud adoption which should include a clear exit strategy".

Larry Ellison, the President of Oracle, says "maybe I'm an idiot, but I have no idea what anyone is talking about. What is it? It's complete gibberish. It's insane. When is this idiocy going to stop?".

Richard Stallman, venerable IT person, says "cloud computing [is] simply a trap aimed at forcing more people to buy into locked, proprietary systems that [will] cost them more and more over time ... It's stupidity. It's worse than stupidity: it's a marketing hype campaign".

Sergey Brin, one of the founders of Google, "acknowledged that some people were anxious about the amount of their data that was now in the reach of US authorities because it sits on Google's servers. He said the company was periodically forced to hand over data and sometimes prevented by legal restrictions from even notifying users that it had done so".

Gordon Frazer, managing director of Microsoft UK, "gave the first admission that cloud data — regardless of where it is in the world — is not protected against the USA PATRIOT Act".

... there were challenges around
the legal requirements of where data is stored,
explained Joan Miller, Director of Parliamentary ICT,
... at the
Think G-Cloud event in London.

Then there's Mayer Brown, the US lawyers, who tell us that "US law enforcement authorities may serve FISA Orders, NSLs, warrants or subpoenas on any cloud service provider that is US based, has a US office, or conducts systematic or continuous US business—even if the data is stored outside the United States".

And, further, "US law enforcement authorities may serve FISA Orders, NSLs, warrants or subpoenas on any cloud service customer that is US based, has a US branch, or conducts systematic or continuous US business—even if the data is stored outside the United States".

There's the indefatigable Caspar Bowden, former chief privacy adviser to Microsoft Europe, who has issued more warnings of the coming war than Cassandra, see for example Experts warn on wire-tapping of the cloud.

And there's the larger-than-life Kim Dotcom whose cloud computing company, megaupload.com, was put out of business by the FBI.

“The big outstanding element was data sovereignty,”
said Miller. “We needed to know
what was happening to that data in the cloud,
and that anything that happened to that data
was in our control.”

Which is where we get to the nub of the cloud computing problem.

Customers of megaupload.com had their data hosted in the cloud by Carpathia, acting under contract to megaupload.com. When the business was shut down, the customers lost access to their data which, in some cases, imperils their business.

Kyle Goodwin is one of these customers and his lawyers say "the [US] government maintains that Mr. Goodwin lost his property rights in his data by storing it on a cloud computing service ... both the contract between Megaupload and Mr. Goodwin ... and the contract between Megaupload and the server host, Carpathia ..., likely limit any property interest he may have in his data".

Sign a cloud computing contract in other words and you lose the rights to your property.

You lose control of it.

“We were thinking we have to go back ...
and make sure that what we have done to measure the risk
is adequate to deal with ... the American government’s use of data 
...
In fact, we are reassured 
that everything we thought about
is still covered in the work we have already done.”

You already knew that – the media report the activities of hackers every day. Even the US military seem to be helpless in the face of cyberattacks allegedly carried out by the Chinese. You knew that the web is a dangerous place to store your data. There is no such thing as a secure website. "Secure website" is an oxymoron.

Cloud computing adds to the risks:
  • The website is no longer in-house.
  • The staff who operate the equipment are not on your payroll and have not been vetted by you.
  • Your contractor will have sub-contractors, like Carpathia, which makes the line of command longer.
  • And, thanks to the internet, your data can pop up on servers anywhere in the world, in or out of the jurisdiction of English law.
And as we have discovered this month thanks to Edward Snowden, you also need to know that the National Security Agency in the US and the UK's GCHQ will also have access to the data in the cloud and may share it with anyone.

The advocates of cloud computing know all that. They know about the loss of control and the hacking. And yet they persist.

According to Miller
much of the data held by the Houses of Parliament
is actually relatively low risk.
She explained that, other than in certain circumstances,
the majority of the data is already destined for the public domain.

If your lawyers promise to keep your data confidential and then store it in the cloud, you can fire them. That threat is sufficient to force all but the mad to try hard to keep your data confidential.

It is the tragedy of the commons that that incentive doesn't work with the UK public sector.

You won't catch the US losing control of their data if they can help it, nor China, nor Russia, nor Germany – GCHQ surveillance: Germany blasts UK over mass monitoring. Those are states that clearly aim to survive.

But in the UK, local government, central government and now Parliament itself seem to be determined knowingly to risk storing our data in the cloud. They are abdicating their sovereignty and with it their responsibility. Has the state lost the will to survive?

----------

(Hat tip: The tragedy of the commons)
(Hat tip: Matthew Finnegan from whom the big italic quotations above are taken)
(Hat tip: Glyn Moody)
(See also House of Lords Management Board Minutes 16 January 2013)
(And Think G-Cloud 2013)

----------

Update 3.3.14

Last June when the post above was written we were assured that the security arrangements for the UK parliamentary website are adequate.

Just under nine months later, what do we learn?
The official website of the UK Parliament contained basic flaws that left it vulnerable to hacking, a programmer has discovered.

In a well-known loophole that has now been closed, the internal search engine on www.parliament.uk allowed users to enter computer code that meant it displayed images, video and even requests for passwords where the results would ordinarily appear.
See Revealed: key UK websites vulnerable to hackers in today's Telegraph.

From today's Telegraph
don't worry,
just their little joke
"Basic flaw"?

"Well-known loophole"?

The Telegraph are talking about the website. Or are they talking about Joan Miller, Director of Parliamentary ICT? And all the other officials in Westminster and Whitehall who just can't take security seriously, headed by Public Servant of the Year ex-Guardian man Mike Bracken CBE?

Public Servant of the Year ex-Guardian man Mike Bracken CBE, you will remember, is the executive director of the Government Digital Service. He is the "head of digital", as they say, for the whole of Whitehall. And, setting a dubious example, he told a conference last October that security ought to be relaxed because he'd just had a daughter. He was so tired as a result that he couldn't remember the answers to all the Whitehall security questions he had to answer to use his account:


And as for Ms Miller, Director of Parliamentary ICT, it's the old story – just because someone tells you a website is secure doesn't mean it's true. Even if your interlocutor has a technical- and senior-sounding job title and works for the most respected organisation in the world.

On-line security is like unicorns.

And if that website is in the cloud, forget it.


Updated 4.4.14

Terence Eden, the blogger who discovered the security hole in the UK Parliament website and brought it to their attention, is too polite to use the word "muppet". Instead, he says:
The UK Parliament website is pretty great. It houses a huge amount of historical information, lets people easily see what's happening in the Commons and the Lords, and is run by some really clever people.

That's why it's so depressing to see such a basic error as this XSS flaw in their search engine.
He goes on to explain how the website security weakness could be exploited, explaining the procedures step by step and giving examples.

This is the first in a series he hopes to publish on what he calls The Unsecured State. Perhaps Whitehall and Westminster will take note.


Updated 7.4.14

Joan Miller steps down from role as director of parliamentary ICT

The Tragedy of the Commons

Public cloud benefits
outweigh security and data sovereignty risks,
says head of Parliament IT

Back in the 1970s, few organisations could afford their own computer. Timesharing bureaux grew up as a result. You'd nip round to your local IBM or Burroughs or ICL bureau with a deck of punched cards and a couple of tapes and come back with a printout. Timesharing wasn't cheap. But it made computing a bit more widely affordable.

That all changed with the advent of microcomputers and cheap high-speed telecommunications. The timesharing bureaux went out of business during the 1980s.

30 years later, they're back. Cloud computing suppliers are the timesharing bureaux de nos jours.

Monday 24 June 2013

Wake up, Spectator

As you will know thanks to Edward Snowden, the National Security Agency (NSA) in the US and the UK's GCHQ have been intercepting hundreds of millions of people's communications.

Mr Snowden's revelations have been published in the Guardian from 6 June 2013 onwards and here in the UK the public have been thoroughly patronised ever since by all other major media outlets.

Take the Spectator, for example. In their 15 June 2013 edition the leading article, 'Top Secrets', says:
This week’s exposé of the US National Security Agency has been heralded as the greatest intelligence leak since the Pentagon Papers. It is nothing of the sort. Far from revealing some institutional outrage, the whistleblower Edward Snowden merely appears to have found what any low-level intelligence source might find. Intelligence agencies try to find things out about certain people. Spies spy, and can be innovative in their techniques. Rapid technological advances mean that the amount of snooping is growing at a faster rate than laws and regulations have been able keep up. But where is the scandal?
The spying is being done for our own good, to protect us, by two benevolent states, the spies are dedicated public servants doing their patriotic duty, what else would we expect, we would have to be naïve and credulous and other-worldly to be surprised, everyone knew about it, ...

That's the line. Strange, in that case, that the Spectator have never mentioned it before.

The allegation is, according to the Spectator, that the NSA and GCHQ spy on each other's citizens, thereby getting round the fact that it's illegal for them to spy on their own citizens:
Even if true, this has not proven to be a matter of any great concern for the general public. Opinion polls on both sides of the Atlantic suggest that people are not particularly bothered. People appear to recognise that the security agencies must exercise unique powers to intercept and thwart people who wish to harm us.
Since when did the Spectator abdicate thought and resolve political issues by appealing to opinion polls?

There's a one-word answer to that – never. Which suggests that the article wasn't written spontaneously. The editor is following a script. And not very well, because the article goes on to say:
The same is not true for the taxman, who would quite like some of these powers for himself. The government’s ‘snooper’s charter’ is an attempt to give any government department, even town halls, various degrees of power to pry in the name of ‘national security’ ...
"The same is not true for the taxman"? Why not? Same logic – it's all for the public good, the state has a duty to collect the right amount of tax, nothing-to-hide-nothing-to-fear, what else would we expect, ... Now who's being naïve and credulous and other-worldly?

Given that the occasion for the Spectator's leading article is the publication of the NSA's and GCHQ's secrets, how could they expect to be taken seriously when they write:
Spies are quite good at keeping secrets; governments are not.
And then this:
... what might happen if information relating to people’s medical records were leaked to a government employer or a health insurance company?
"What might happen if information relating to people’s medical records were leaked"? What do they mean "if"? This is on the way to becoming government policy, as the Spectator should know.

Stephan Shakespeare, the founder of YouGov, the political polling organisation, has been asked to produce a National Data Strategy. The state should allow people's health and education data to be exploited, he says in the Shakespeare Review, and his recommendations have been welcomed by Francis Maude, Cabinet Office minister.

The Spectator should also know that Mr Maude's digital-by-default policy for public services depends on so-called "identity providers" getting us all on-line with a personal data store. And that his Electoral Registration and Administration Act provides for us all to maintain our entry on the electoral roll on-line – the electoral roll, that is, which will be used for the 2015 general election. And that his G-Cloud policy is the fastest way yet discovered for the government to lose control of our data.

It's about time the Spectator woke up to midata, the Department for Business Innovation and Skills initiative which is meant to use the same "identity providers" to get us to store our personal data on-line where GCHQ and the NSA can get at it for our own good:
My name is Stephen and I head up the work on consumer confidence and trust which is part of the midata voluntary programme ... A data-enabled online market place will create new services that will take your data and do some really interesting things with it ...

Hi I’m Dan, Director of the midata Innovation Lab, part of the midata voluntary programme ... By putting information back into the hands of consumers, and by encouraging business to release data, investing in products that consumers want and that use this information, we will help empower UK consumers in a really meaningful way ...

I’m Richard and I chair one of the expert working groups looking at what we need to do to ensure that consumers can be confident when they allow their data to be passed to and used by third parties who are developing new and innovative applications to aggregate and use existing data in a way that brings benefits to users of these new services ... A data rich economy will allow lots of innovative companies to create brand new services that will enable you to take your data and do some really interesting things with it, with the ultimate goal of making sure you can get the best deal across a range of services.
There are safeguards, the Spectator tell us:
In reality, MI5 and MI6 already have powers to intercept anything categorised as a ‘communication’. Permission is needed — but it is sought and granted. It is wrong for MI5 or the CIA to engage in a ruse to cut out the paperwork. But let us not pretend this makes either into a 21st-century Stasi.
Public confidence in those safeguards is not increased by Mr Maude's attitude to data-sharing between, say, GCHQ and HMRC:
I want to bust the myths around the complexities of data sharing ... we aim to find effective ways of using and sharing data for the good of everyone.
Who's in charge of the £650 million cybersecurity budget that presumably paid for GCHQ's communications interception systems? Francis Maude.

The Spectator quite properly holds out against the provisions of the Leveson report. Let's see a little of the same prudently sceptical spirit applied to this NSA and GCHQ business.

----------

Updated 27 December 2013:

Wake up, Spectator?

Fraser Nelson is the Editor of the Spectator.

And judging by an article of his in today's Telegraph six months after the post above was published he's woken up, please see The state should be exposing the cyber-snoops, not joining them.

Hallelujah.

Wake up, Spectator

As you will know thanks to Edward Snowden, the National Security Agency (NSA) in the US and the UK's GCHQ have been intercepting hundreds of millions of people's communications.

Mr Snowden's revelations have been published in the Guardian from 6 June 2013 onwards and here in the UK the public have been thoroughly patronised ever since by all other major media outlets.

Thursday 20 June 2013

Digital-by-default – an eternal mystery?

In connection with the enquiry into digital-by-default, Rt Hon Francis Maude MP, Cabinet Office minister and Postmaster General, gave evidence to the House of Commons Science and Technology Committee on Monday 17 June 2013:



There were many questions about digital-by-default before he gave his evidence – please see for example Digital-by-default, an open letter to the House of Commons Science and Technology Committee.

And having given his evidence now?

They remain unanswered.

Digital-by-default – an eternal mystery?

In connection with the enquiry into digital-by-default, Rt Hon Francis Maude MP, Cabinet Office minister and Postmaster General, gave evidence to the House of Commons Science and Technology Committee on Monday 17 June 2013:



There were many questions about digital-by-default before he gave his evidence – please see for example Digital-by-default, an open letter to the House of Commons Science and Technology Committee.

And having given his evidence now?