James Bamford has a superb review of the new book by Matthew Aid about the US National Security Agency (NSA) in the New York Review of Books this month. What seems to be causing a stir around the intelligence research (and computing) community is the reference to a report by the MITRE corporation into a the information needs of the NSA in relation to new central NSA data repository being constructed in the deserts of Utah. The report, which is being rather speculative, says that IF the trend for increasing numbers of sensors collecting all kinds of information continues, then the kind of storage capacity required would be in the range of yottabytes by 2015 – as CrunchGear blog points out: there are “a thousand gigabytes in a terabyte, a thousand terabytes in a petabyte, a thousand petabytes in an exabyte, a thousand exabytes in a zettabyte, and a thousand zettabytes in a yottabyte. In other words, a yottabyte is 1,000,000,000,000,000GB.” However CrunchGear misses the ‘ifs’ in the report as some of the comments on the story point out. There is no doubt however, that the NSA will have some technical capabilities that are way beyond what the ordinary commercial market currently provides and it’s probably useless to speculate just how far beyond. Perhaps more important in any case, are the technologies and techniques required to sort such a huge amount of information into usable data and to create meaningful categories and profiles from it – that is where the cutting edge is. The size of storage units is not really even that interesting… The other interesting thing here is the hint of competition within US intelligence that never seems to stop: just a few months back, the FBI was revealed to have its Investigative Data Warehouse (IDW) plan. Data Warehouses or repositories seem to be the current fashion in intelligence: whilst the whole rest of the world moves more towards ‘cloud computing’ and more open systems, they collect it all and lock it down.
Category: data
Information-rich animals
Iris scanning has been proposed for horse by a company called Global Animal Management (GAM) Inc. As bloodstock is a huge and lucrative business – feeding everything from the private obsessions of the super-rich through the horseracing industry to the dreams of teenage horse-enthusiasts – it is not surprising to see such investment in biometrics. Racehorses were, after all, the first living creatures to be regularly microchipped. Vets seem sceptical about the idea, but surely members of the medical profession would be more enthusiastic about non-invasive replacements for invasive identification techniques like RFID?
Ironically, support for the scepticism comes form GAM’s own website, where a very interesting short video shows just how comprehensive the surveillance of animals through RFID chips has become. RFID chips do not just identify, they carry whole life-cycle information on origins, movements, health and disease and legal compliances. And because of the chips this information is carried with the animal not simply associated with it via a distant database as the result of an occasional scan. The system creates what GAM calls ‘information-rich animals’, which presumably is what makes GAM – and it hopes, its customers – cash-rich too…
(thanks to Aaron Martin, whose reading now seems to include Horse and Hound magazine…)
Canadian Internet Snooping Law
I’ve noted before that there seems to be a concerted push around the world by governments to introduce comprehensive new telecoms surveillance laws that force telecommunications and Internet Service Providers (ISPs) to record, store, and provide access to and/or share with state intelligence agencies, the traffic and/or communications data of their customers (in other words, users like us). What is noticeably here is that there is a particular logic that appears in the arguments of governments who are attempting to persuade their parliaments or people of the need for such laws. This logic that is firstly, circular and self-referential, in that it makes reference to the fact that other governments have passed such laws as if this in itself provides some compelling reason for the law to be passed in their own country. The second part of this is a king of competitive disadvantage arguments that flows from the first argument: if ‘we’ don’t have this law, then somehow we are falling behind in a never openly discussed intelligence-capability race that will hit national technological innovation too.
The media often seem oblivious to what seems obvious, and hence the story on the CTV news site today with reference to Canada’s currently proposed communications law that would allow the Canadian Security and Intelligence Service (CSIS) warrantless access to such the data from Internet and telecoms providers. They consider it to be ‘unexpected’ that the parliamentary Security Intelligence Review Committee has come out in support of the bill. Looking at the reasons why though, they are exactly what one would expect if one has been following the debates around the world and contain exactly the logics I have outlined. The story notes that the committee “points out that governments in the United States and Europe have already passed laws requiring co-operation between security agencies and online service providers” (without, incidentally, pointing out that these remain enormously controversial, or that other governments have abandoned some of their attempts) and later that “intelligence technology… requires continued access to new talent and innovative research.” However they won’t go into details as it is a “very sensitive matter.”
And absent from this debate as usual is the fact that this is not just a question of ‘national security’ if you set up these systems, you feed the US National Security Agency too. Canadian intelligence is still bound by agreements made after WW2, particularly the CANUSA agreement on Signals Intelligence (SIGINT), later incorporated into the UKUSA structure. And as we all know, right now, the USA does not always have the same strategic interests as Canada (the issue of arctic sovereignty is just one example). If this bill is passed, it’s a license for US spies, not just Canadian ones.
UK police still adding innocent people’s DNA to database
Research in the UK has shown that police forces in Britain are continuing to add the DNA – and incidentally the fingerprints, although this is never mentioned – of innocent people to the DNA database despite the European Court of Human Rights ruling that it was illegal (and the government’s promise to accept the ruling). According to The Guardian newspaper today, 90,000 innocent people have been added to the National DNA database (NDNAD) since a the court ruling and the Association of Chief Police Officers (ACPO) – incidentally, a private organisation – is still telling chief constables to continue with this collection. On the other hand the process of removing individual profiles has been painfully slow: only 611 DNA profiles of innocent people have been removed, and all as a result of individual challenges in court. It seems that the police are determined to drag their feet as long as possible and, in fact, break the law quite openly. Hardly a good example…
Lies, Damned Lies and CCTV Statistics…
Earlier today, I reported on reports that claimed that 96% of US citizens support video surveillance. Now, thanks to Vicki Contavespi, and the people at BRS Labs who commissioned the survey from Harris Interactive, I have the raw figures. And, unsurprisingly enough, whilst they aren’t ‘lies’, they don’t quite show what the headlines suggested – just as my headline, a quote often attributed of course to Disraeli, is also an overstatement of the case at hand. This is a very interesting survey. There were quite a few questions asked, and I don’t have time to go through all of them here now, but I will just deal with the question of ‘support’ for video surveillance and break it down just a little more.
First of all, the main questions on the acceptability of video surveillance (and other surveillance techniques) are couched in an particular way that is common in market research. The lead question is “How strongly do you agree or disagree with each of the following statements?” There is then a list of statements, which each have four options: strongly agree, somewhat agree, somewhat disagree, and strongly disagree. There is no ‘neutral / don’t care / no opinion’ option, which might have taken out many of those in the ‘somewhat’ categories on either side. The headline figures used then, of course, elide the ‘strongly’ and ‘somewhat’ figures.
For video surveillance, there are two main statements, firstly, “The federal government should be able to utilize video surveillance as long as my personal privacy is not invaded”, and secondly, “Local law enforcement should be able to use surveillance cameras to monitor public places.” The first question already contains a bias, in that is specifies a situation of no privacy invasion. This effectively nullifies the most common objection to video surveillance, and especially for those for whom the Federal Government is a intrinsically suspicious entity. The second, interestingly, doesn’t have this proviso, but then ‘local law enforcement’ isn’t ‘the Feds’ and generally does not attract the same antipathy. But the lack of a qualifying statement might provide a better clue to US public attitudes on video surveillance overall. For the first statement, the ‘headline’ figure of agreement is 82% and the second is 78%. However this disguises the fact that ‘strong agreement’ is much more limited, 36 and 35% respectively. And if you add up the ‘somewhat agree’ and ‘somehat disagree’ figures, you get 57% and 58%, which indicates to me that the majority of US people don’t have strong opinions for or against CCTV. See – statistics are all about what you are looking for in them!
What is even more interesting is that the question was then asked: “Which of the following aspects of video surveillance cameras, if any, concern you?” You would think that, given the headline and press release, that the survey showed no real concerns about CCTV. But that really isn’t the case at all. In fact, 88% of respondents said they were concerned by at least one of the listed aspects of video surveillance. Now remember, you’ve only got 18% or 22% who said that they disagreed with CCTV in terms of the question posed above, so this means that even most of the people who supported CCTV to whatever degree of strength, had concerns and most had more than one concern. This is quite striking. The main concerns were “not knowing what will be done with the information that is gathered ” (66%), “The fact that recorded footage can be used to mistakenly incriminate me” (61%), “Not knowing the background of whoever may be watching” (60%), “Not knowing how often and where I might be watched” (50%) and “The fact that photographs can be taken of me without permission” (48%). The only one on which there was significant difference between men and women seems (and I haven’t done any statistical analysis of the difference) to be over the concern about how often and where people might be watched, about which women were more likely to be concerned than men. In fact, in the whole survey, there appear to be no real overt differences in response based on gender.
So where, you might well be asking, does this 96% support figure come from? I searched through the tables some distance for the 96% figure before I found it. It certainly doesn’t refer to generalised support, but comes in response to the following question: “Which of the following areas, if any, do you think should be monitored by video surveillance in an effort to help protect U.S. citizens?” A-ha! So we have a question that implies the use of video surveillance somewhere, and that it will be used specifically to help protect US citizens (none of those foreigners!). The question is clearly pushing the respondents towards a positive answer. But here too things are not quite what the headlines claimed. Certainly, 96% of respondents said that video surveillance should be used in some areas. However, it is only in “Airports” (92%), “Public transportation” (85%) and “Seaports” (82%) that there is an overwhelming vote of confidence (though quite why seaports are considered to be less at risk or would benefit less from video surveillance than airports, I am not quite sure – the ghosts of 9/11 hover, I suppose).
“Public schools/Universities” barely scrape a majority (53%), and one wonders what the figures would be if they split universities and schools (and indeed different levels of school). “Playgrounds” only hit 39% – not so much of the common British ‘think of the kiddies’ paranoia here perhaps – “Businesses” – where of course surveillance is actually more likely to be found than anywhere else! – doesn’t manage a third (32%) and “Local neighborhoods”, which is the only unequivocal ‘public space’ category is only on 22%. Why not parks? Why not city centre streets? It is of course these places where the real controversy and the real fire and debate over CCTV lies. And the indications from this survey are that the more personal, the more intimate, the more there is a sense of ‘community’, the less likely US citizens are to accept video surveillance, even if it is couched in the overly positive way it is here.
And there is a question whose answers demonstrate further the complexity here. And, ironically, the percentage of respondents who replied to the question “Which of the following, if any, do you think are currently the biggest threats to your personal privacy?” with one of more concerns was – you guessed it – 96%! The major concerns were actually mostly from private or criminal surveillance: “identity theft” (74%), “Internet security threats” (70%) and “Unknown individuals who handle my personal information” (60%). Only 33% were concerned about federal or local government, but this isn’t surprising when this category is headed, as it is in the survey, “Big Brother”! Who is going to admit to being scared of ‘Big Brother’? And if you are going to give a silly popular stereotype as a potential answer, then the other categories should be similarly labelled… And why wasn’t this 96% the lead-in for the media?
As I said, there is a lot more in here too, and despite its flaws, this is an interesting survey which has much to it than meets the eye if you just read the media reports.
CIA buys into Web 2.0 monitoring firm
Wired online has a report that the US Central Intelligence Agency has bought a significant stake in a market research firm called Visible Technologies that specializes in monitoring new social media such as blogs, mirco-blogs, forums, customer feedback sites and social networking sites (although not closed sites like Facebook – or at least that’s what they claim). This is interesting but it isn’t surprising – most of what intelligence agencies has always been sifting through the masses of openly available information out there – what is now called open-source intelligence – but the fact is that people are putting more of themselves out their than ever before, and material that you would never have expected to be of interest to either commercial or state organisations is now there to be mined for useful data.
(thanks, once again to Aaron Martin for this).
US Congress debates online data protection
The US House of Representatives will finally get to debate whether online advertising which tracks the browsing habits of users is a violation of privacy and needs to be controlled. A bill introduced by Rep. Rick Boucher of Virginia will be propsing an opt-out regime that gives users information about the uses to which their data will be put, and allows them to refuse to be enroled. At present many such services work entirely unannounced, placing cookies on users’ hard drives and using other tracking and datamining techniques, and without any way in which a user can say ‘no’. Of course, we have yet to see the results of the inveitable industry scare-stories and hard-lobbying on the what will be proposed, let alone pased. But the proposal itself is particularly significant because so far the US has so far always bowed to business interests on online privacy and data protection, and if this bill is pased, it is a sign that what EFF-founder, Howard Rhiengold, long ago called the ‘electronic frontier’ might start to acquire a little more law and order in favour of ordinary people.
UAE plans DNA database of entire population
Police in the United Kingdom have recently been forced by the European Court of Human Rights to scale back their increasingly large National DNA Database (NDNAD), which previously potentially included DNA profiles of anyone arrested by the police, whether charged with any offence or not. This at least shows that there is some recourse to law and and a higher authority that will protect the rights of citizens against the extension of state power… in reasonably democratic Europe at least.
However authoritarian regimes need have no such concerns. The Persian Gulf state of the United Arab Emirates (UAE) has decided that it is to create a national DNA database of the entire resident population. According to The National newspaper, this will not even need any kind of debate or even new legislation. They estimate that this will take up to 10 years if population growth is factored in.The paper claims this will be the world’s first such comprehensive database, but this is only partly true. Iceland, Sweden and Estonia have all set up comprehensive DNA databases run by their health services. But the UAE’s certainly appears to be the first attempts at a comprehensive law enforcement DNA database.
DNA pioneer, Sir Alec Jeffrys, has his doubts of course. But learned critique, or opposition or overt resistance are probably all largely irrelevant to the UAE government. However, if there is to be a roadblock, it may be the economy: the UAE’s population is made up to a great extent of temporary foreign workers of all skill levels and occupation types, and the economy depends largely on the willingness of such workers to continue to come to the UAE. Whilst those at the bottom may feel they have little choice, those at the top may decide that such a policy would make the difference between them coming to and investing in the UAE, or not. The second article claims that ‘visitors’ will be exempt, but not ‘residents’. How this plays out remains to be seen. I have no doubt that the UAE will give in to the pressure of global wealth and find some way of exempting rich foreign residents, whilst making absolutely sure that poor immigrant workers are the first to be sampled.
Towards Open-Circuit Television
The era of Closed-Circuit Television (CCTV) surveillance may be coming to an end. Surprised? Unfortunately, this does not mean that we are likely to see less surveillance, and cameras being torn down any time soon – quite the contrary. Instead a number of developments are pointing the way to the emergence of more Open-Circuit Television (OCTV) surveillance. These developments include technological ones, like wireless networking, the move to store data via ‘cloud’ computing, participatory locative computing technologies like CityWare, and the increasing affordability and availability of personal surveillance devices (for example, these plug and play mini-cameras unveiled at DemoFall 09). However they also include changes in the way that video surveillance is monitored and by whom.
Back in 2007, a pilot scheme in Shoreditch in London, which enabled residents to watch CCTV cameras on a special TV channel, was canned. However the project had proved to be incredibly popular amongst residents. Now The Daily Telegraph reports that an entrepreneur in Devon, Tony Morgan has set up a company, Internet Eyes, which is marketing what is calls an ‘event notification system’. They plan to broadcast surveillance footage from paying customers on the Internet, with the idea that the public will work as monitors. They won’t just be doing this for nothing however: the whole thing is set up like a game, where ‘players’ gain points for spotting suspected crimes (three if it is an actual crime) and lost points for false alarms. To back this up, there are monthly prizes (paid for out of the subscriptions of the organisations whose cameras are being monitored) of up to 1000 GBP (about $1600 US). Their website claims that a provisional launch is scheduled for November.
Mark Andrejevic has been arguing, most recently in iSpy, that those who watch Reality TV are engaging in a form of labour, now we see the idea transferred directly to video surveillance in ‘real reality’ (a phrase which will make Bill Bogard laugh, at least – he’s been arguing that simulation and surveillance are increasingly interconnected, for years). This idea might seem absurd, indeed ‘unreal’ but it is an unsurprising outcome of the culture of voyeurism that has been engendered by that combination of ever-present CCTV on the streets and Reality TV shows that came together so neatly in Britain from the early 1990s. It certainly raises a shudder too, at the thought of idiots and racists with time on their hands using this kind of things to reinforce prejudices and create trouble.
But is it really so bad? At the moment, UK residents are asked to trust in the ‘professionalism’ of an almost entirely self-regulating private security industry or the police. Neither have a particularly good record on race-relations for a start. Why is it intrinsically worse, if there are to be cameras at all (which I am certainly not arguing that there should be) to have cameras that are entirely open to public scrutiny? Is this any different from watching public webcams? Wouldn’t it actually be an improvement if this went further? If say, the CCTV cameras in police stations were open to public view? Would it make others, including the powerful, more accountable like a kind of institutionalised sousveillance?
In Ken Macleod‘s recent novel, The Execution Channel, the title refers to an anonymous but pervasive broadcast that shows the insides of torture chambers and prison cells, which functions as a device of moral conscience (at least for literary purposes) but also a Ballardian commentary on the pervasive blandness of what used to be the most outrageous atrocity. Accountability is in the end as far from this project as it is from Internet Eyes. Set up like a game, it will be treated like a game. It strips out any consequence or content from reality and leaves just the surfaces. What is ‘seen’ is simply the most superficial – and seen by the most suspicious. Participatory internet surveillance is Unreality TV. In any case, I don’t think it will either be successful in terms of crime-control (other such participatory surveillance schemes, like that on the Texas-Mexico border, have so-far proved to be failures) or useful in social terms, and may also be illegal without significant safeguards and controls anyway.
And there is nothing to stop multiple people signing up with multiple aliases and just messing the system up… not that I’d suggest anything like that, of course.
(Thank-you to Aaron Martin for badgering me with multiple posts pointing in this direction! Sometimes it just takes a little time to think about what is going on here…)
Gordon Brown stalls on UK ID cards issue
Despite the news stories saying that he had made a significant announcement on ID cards, the British Prime Minister, Gordon Brown, said absolutely nothing new interesting on the subject in his speech on future Labour policy yesterday. As Henry Porter comments on The Guardian website, whilst his announcement that ID cards would not be compulsory in the (increasingly unlikely) event of another Labour term was greeted with enthusiasm by the party faithful, this is not any kind of change in policy and nothing concrete was said about the National Identity Register (i.e.: the database, the important bit!). While the Conservative Party may be limited and rather disingenuous in their apparent opposition to the ‘surveillance state’, Labour appears to be merely self-congratulatory and complacent.