Billions wasted on airport ‘security’

A new report from the International Air Transportation Association (IATA) say that the industry is wasting billions on unnecessary and ineffective security procedures which are slowing down travel and damaging the whole sector’s economic prospects, according to The Guardian. This comes only days after the German government decided not to introduce body-scanners after trials showed them to be unreliable.

The argument is not particularly surprising, but there seem to be interesting aspects of the issue (apart from the basic human rights problems which we should never forget). The first is that clearly someone is benefitting economically, even if it is not the air transport sector, and that someone is the security industry – although as it happens, a whole range of people and companies have benefitted from the aftermath of 9/11. The Guardian article mentions that UK-based scanning company, Smiths, has tripled its profits this year to near $1Bn, despite the problems with scanners. However, it isn’t all bad. In European domestic and regional markets, airlines have lost out to railway travel, and this can only be a good thing in terms of environmental concerns.

The second aspect is that IATA is using this to push the revival of integrated ‘trusted traveller’ plans coming out of the USA. Many countries have bilateral schemes, but the idea is for travellers with ‘nothing to hide’ to submit personal information to a central body that would validate them without the need for time-consuming checks on the airport. So far, such schemes have been largely restricted to business-class passengers, raising the strong possibility of confusion between really improved security and simply buying more convenience. However, there is another problem from the point of view of security here too: one of the major concerns for security is so-called ‘clean skins’, terrorist who have never triggered any suspicion because they are either entirely new converts to the cause, or have been deep undercover for years cultivating an unblemished record.

In any case, it appears that the security companies are trying to get past the criticism by producing new seamless and less intrusive scanning technologies that would not require long waits and would be integrated into the architecture of airport corridors etc. Of course, the delays and inconvenience of obvious security and surveillance procedures have a purpose and are not just by-products. There is, theoretically at least, a consciousness-raising effect of what Bruce Schneier calls ‘security theater’. If these new gadgets work, and the German trial suggests that there is often more smoke than heat in claims about effectiveness, this effect would be diminished in favour of speed and convenience for an as yet unknown proportion of travellers and much greater inconvenience for the remainder. It’s an interesting conundrum for the authorities…

Who gets Freedom of Information?

UK transparency campaigner, Heather Brooke, writes a comment piece on The Guardian website today on why she believes that UK university cancer researchers should have to give up information to transnational tobacco giant, Philip Morris. The basis for the argument is that Freedom of Information law should apply regardless of who the applicant is.

I generally admire Heather’s single-minded work on FoI, but single-mindedness is not always a virtue, and can sometimes lead to overly extreme conclusions which lack a broader understanding of the political economics involved. As in this case. As a researcher and analyst rather than a campaigner, I can see that there are three important counter-arguments to her piece:

1. Corporations are not people. There is a serious and ongoing battle here. Although legal incorporation means companies are often considered as legal people, we should not start to think of them as having ‘rights’ like individuals, not should rights that come from citizenship or by being an individual voter apply to them. Recently, the US supreme court rejected the argument of a large telecoms company that it had privacy rights. The worrying thing is that several lower courts had accepted that it could have such rights. Rather than providing corporations with more equivalences to human rights, we need to be holding corporations to account.  This brings me to…

2. The really important issue with large private companies and FoI is why those large private companies are not subject to the same kind of transparency. Corporate confidentiality makes no sense even in the context of liberal economic theory, however it makes even less sense if we think about FoI as a method of accountability. Corporations are unable to be held accountable via electoral processes and the markets are too diffuse and diverse (and spread across too many different countries) to work as a mechanism of accountability, so we need law that rebalances the power imbalances between corporations on the one had, and people, individually and collectively, on the other – through transparency. That is, after all, what is its main point when it comes to state transparency and FoI; it’s not really about ‘value for the tax payer’, it’s about power.

3. On that note, FoI is being increasingly used against academics and activists in particular as a form of intimidation by corporate interests. This is not to say that academics and activists should not be accountable, but it is not the case that all parties here of on a level playing field, and further, mechanisms of accountability are themselves not simply neutral or unequivocally always a good thing because of what they are supposed to do. Law has to embed intention, and be interpretable by the courts, in a way that clearly differentiates between legitimate use (for people holding organisations to account), poor excuses (as in the state claiming expense or lack of time as reasons for not releasing information), and blatant misuse of the law for purposes for which it was not intended. If it does not, it can simply become another method the intensification of organisational power against the interests of people.

Guess who likes the UK’s proposals to control the Internet?

In the wake of the riots, several British Conservative MPs, and indeed PM David Cameron himself, have suggested a harsher regime of state control of both messenger services and social networks. Their suggestions have attracted widespread derision from almost everybody who either knows something about the Internet and communications more broadly, or who places any value on freedom of speech, assembly and communication and regards these things as foundational to any democratic society.

However, the a yet vague proposals have gained support from one quarter: China. The Chinese state-controlled media have suggested that the Conservative Party’s undemocratic suggestions prove that the Chinese state was right all along about controlling the Internet and that now these events are causing liberal democracies to support the Chinese model of highly regulated provision (via Boing Boing).

This is pretty much what I have been suggesting is happening for the last 2 or 3 years – see here, here, here and here. It is just that now, the pretense of democratic communication is being dropped by western governments. And just in case David Cameron doesn’t get it – and he really does not appear to right now, no, it is not a good thing that the Chinese government likes your ideas: it makes you look undemocratic and authoritarian.

David Cameron doesn’t get it

David Cameron’s speech in the House of Commons today and associated comments, show that he has a really superficial grasp of what has been going on in British cities, mostly whilst he was on holiday and unwilling to return to demonstrate any kind of leadership.

First of all, he’s done the usual knee-jerk authoritarian and technophobic thing of blaming Blackberry and other messaging services. He has indicated that “Ministers would work with the police and MI5 to assess whether it would be right to stop people communicating via social network sites ‘when we know they are plotting violence, disorder and criminality’, and had “asked the police if they needed new powers in this area”. When the Egyptian government cut off access to social networking sites recently, western governments were quick to condemn this as evidence that this regime was exactly the kind of authoritarian government that should be brought down. However, in Britain, apparently not. And closing down communications systems just because some people are using them to send messages you don’t like is several steps beyond things like wiretapping. It is a massive and idiotic overreaction. Let’s hope the ‘assessment’ is, in the end, more considered…

Another face-palming moment was provided by the appeal to US experts in gang culture. Now, no-one is going to deny that there were gangs involved in this, nor that gang culture is an issue in British cities. But, first of all, the US is no place to look if you want lessons on controlling gangs, or more importantly, how to create a society in which gangs seem like a less attractive option in the first place. And secondly, there is an assumption that UK gang culture is just like US gang culture, just because they are both gang cultures. Why not look instead to other European countries without significant gang problems and ask what it is about those societies that work? Unfortunately that is the kind of question that would lead to fundamental challenges to UK socio-economic policy, and that’s exactly why the questions and responses will remain superficial.

These kinds of things will annoy the libertarian right and the left respectively, however at the same time, the UK Prime Minister is taking some strange stances that threaten to alienate his own centre-right supporters, in particular in refusing to halt cuts to policing budgets already proposed as part of his austerity measures (never mind massive cuts to social services to inner city youth, which will also be pushed ahead regardless).

It’s hard to see who remains that he is appealing to here…

Blackberry and the London Riots

I’ve been in the papers and on radio and TV a bit in the last few days here in Canada, talking about the London Riots, both as a ‘token Brit’ and a surveillance expert. I’m happy to talk about my feelings as someone from Britain and I’ve made it clear to people that I am neither a technical nor a legal expert, but the conversation inevitably ends up in those domains and others which are really outside my expertise – and I’ve had to be careful what I say.

I’ve generally stuck to three lines:

1. That these riots don’t provide simple moral lessons, they are neither politically-motivated or just about ‘crime’, but they do have roots and implications which are profoundly political – this is about consumerism, class, inequality and exclusion.

2. That you can’t blame Blackberry. That’s like blaming the postal service for hate-mail. The problems for RIM here are twofold: bad public relations from being associated with rioting, and how much it is prepared to sacrifice the privacy of its users to help UK police in an effort to counter the bad PR.

3. That all the UK investment in video surveillance didn’t help stop these riots (see my previous posts).

People like Chris Parsons are the kinds of people that the media need to talk to about the technical issues, and there’s a really fantastic and detailed post from his blog here on Blackberry and security and privacy issues. On legal issues, there’s no-one better than Michael Geist on things like lawful access. His website is here. Michael writes a regular column for the Toronto Star and I was quite amused that when the Star called me yesterday, I had to remind them to talk to him about lawful access issues! The best sociological piece I have seen on the causes is from Zygmunt Bauman.

That said, here’s some links – There’s a podcast here on the Financial Post, which also has a good discussion with Tamir Israel of CPIC.

On the more social side here, syndicated in lots of local and regional papers.

And the usually strangely edited piece in my local paper, the Kingston Whig-Standard, here, also featuring my colleague, Vince Sacco.

London Riots and Video Surveillance, Pt.2

My last post was about the lack of any apparent deterrence of rioting from CCTV. However that’s not to say that video surveillance is proving of no use to the authorities. However the way it is being used says a lot about both the limits of CCTV and the general problem of analysis of video images.

As part of ‘Operation Withern’, the investigation into the rioting, the Metropolitan Police have set up a special section of their website, London Disorder Images, as well as on Flickr, which is essentially crowdsourcing the identification of suspects. Despite being the most well-resourced police force in the UK, the Met lacks the resources, time and expertise to analyse and identify everyone it wishes to identify itself, and with widespread popular anger about the riots, they are banking on opening up the process of surveillance and identification as being more efficient and effective – and they may well be right.

Of course, with the problems of lighting, angle, distances, and image quality, the images vary in identifiability – and bear in mind that the few posted so far are probably amongst the best ones – and no doubt there will be many misidentifications. And, in addition, hundreds of people are already being processed through magistrates courts without much need to video evidence. But it is a tactic we are seeing more and more in many places (e.g. Toronto, following the G20 disturbances).

London Riots and Video Surveillance, pt.1

 A really interesting map on the website of the US monthly, The Atlantic, illustrating the relationship between density of video surveillance cameras (CCTV) and recent incidence of rioting in London. There are many things one can get even from a simple map like this. It’s worth noting in particular that Wandsworth and Harringey are the residential boroughs with the highest concentration of CCTV, and have been hit by rioting. There are also places with both greater and less than average density of CCTV which have not had rioting.
 
Whilst you have to be careful not to mistake correlation for causality, and bearing in mind that this is not a statistically tested verdict, the main tentative conclusion one can draw is that there seems to be no relationship between the presence and density of CCTV and the occurence of rioting. This might seem like  a fairly weak statement, but it is yet more evidence that CCTV has little deterrent effect on crime of this sort (and of course, the rioting is not only explicable as ‘crime’ anyway).
CCTV_boroughs.jpg
 

Norway, After the Event

I grew up in Norway until I was about 7, and so it’s hardly surprising that I’ve been thinking a lot about the country and its people following the recent attacks. I’ve spent some time over the last few days reading the manifesto of the self-confessed killer, but I’m not going to spend any time going over that farago of confused reactionary stupidity here.

What I am primarily interested in is how the country reacts, especially as we are now coming up to ten years after the 9/11 attacks -and the world is still living in the aftermath not only of the attacks themselves but of the reaction of the US and its subordinates. Surveillance Studies, along with many other research fields has documented and analyzed the turn to righter security and increased surveillance, and the corresponding weakening of longstanding individual liberties and collective rights.

But, if Norway’s Prime Minister, Jens Stoltenberg, has anything to do with it, Norway will not be going down the same destructive, counter-productive and vengeful path. Even though he himself and many people he knew were the targets of the attack, he has been emphasizing since that Norway should not compromise its openness and democratic values, on the contrary they should strengthen their commitment to those ideals.The New York Times today quotes him as saying:

“It’s absolutely possible to have an open, democratic, inclusive society, and at the same time have security measures and not be naive. […] I think what we have seen is that there is going to be one Norway before and one Norway after July 22 […] But I hope and also believe that the Norway we will see after will be more open, a more tolerant society than what we had before.”

Let’s hope so. My thoughts remain with the families and friends of the victims, and all the people of Norway. I’ll write more about the wider European reaction tomorrow or over the weekend.

UK consultation on CCTV: a weak brew?

The UK government has released a consultation document on a ‘Code of practice relating to surveillance cameras’ (CCTV). The closing date for comments in May 25th.

I will go through the document in more detail but there are several initial things to note here:

1. I am interested first of all in the fact that the camera systems are refered to as ‘surveillance cameras’ rather than ‘security cameras’ or ‘safety cameras’ as in many situations I have encountered around the world.

2. This is merely a step toward a state code of practice. The government had promised to ‘regulate’ CCTV, and what many people might have legitimately expected from such a promise was legislation, in other word a statutory footing for surveillance cameras and legal controls. A code of practice is very much at the weak and volunteeristic end of ‘regulation’ if it is regulation at all. The proposed Code itself is really quite weak and presaged on “gradually raising standards to a common level.” with nothing that is mandatory.

3. The document proposes another ‘Commissioner’ to govern surveillance cameras, a ‘Surveillance Camera Commissioner’. This government, despite its avowed attempt to reverse the proliferation of Quangos, seems to want to create another one. One would think that this would naturally fall under the remit of the Information Commissioner, but it appears that the Tory attacks on the ICO (which have been going on in newspapers like The Times for some years and have now spread to other libertarian groups) have been having some effect. Does Britain need another Commissioner in the area of information, surveillance and privacy? I don’t think so. I think we need to clarify the roles of existing Commissioners, and reduce their number – provide adequate budgets and better guidance and division of labour. I suggested a few weeks ago that splitting the ICO into a Surveillance and Privacy Commissioner (which would incorporate the data protection function and absorb all the existing micro-commissions like Surveillance, Interception of Telecommunications and now this new proposed Surveillance Camera Commissioner) and a separate Freedom of Information Commissioner, would be the best solution.

4. The consultation document acknowledges that camera surveillance has increased too rapidly in Britain and has eroded privacy and been overly intrusive. That’s a start. However it also hedges this quite strongly by saying that the government does not intend to limit law enforcement’s abilities. I am not sure the two things are compatible – but I will have to examine the proposals in more detail.

5. The document acknowledges that “CCTV does not always provide the benefits expected of it” but explains this as largely down to technical and operation reasons rather than anything more fundamentally problematic. This is not necessarily justified by evidence or particularly insightful.

6. The document acknowledges that Automatic Number Plate (Licence Plate) Recogntion (ANPR / ALPR) is largely unregulated too and that it connects to all kinds of databases, yet proposes little more than auditable data trails.

7. The document mentions both flying drone cameras / Unmanned Aerial Vehicles (UAVs) and helmet-mounted cameras, but assumes mistakenly that these are ‘niche and novel’. If this can still be said to be true, it will not be for much longer, and the document is overly dismissive of the immediacy of this issue.

8. The document is way too cautious and has the fingerprints of a ‘Sir Humphrey’ bureaucratic avoidance of anything that might ‘frighten the horses’, motivated as it claims to be by “the wish to avoid imposing unreasonable or impracticable bureaucratic or financial burdens on organisations” and recommending “an incremental approach.” It is too late for incrementalism, about 20 years too late in fact.

At first glance, the consultation document appears to be a rather weak brew rather than the strong medicine that is required.