Risk
5/29/2013
12:58 PM
Connect Directly
RSS
E-Mail
50%
50%

Will Britain Revive Its 'Snooper's Charter'?

Critics claim brutal slaying of soldier on London street could have been prevented by recently vetoed communications monitoring law.

A few weeks back, U.K. Deputy Prime Minister Nick Clegg announced he would block extensions of the monitoring powers of U.K. intelligence and law enforcement agencies because he agreed with critics who complained they amounted to a "snooper's charter".

Such decisions might now backfire on political leaders as voices start to call for closer communications monitoring in the wake of last week's savage Islamist terror attack on a British soldier on a Woolwich, London street.

One of Clegg's own party, House of Lords Peer Lord Carlile, went public Sunday in an article in the populist Mail that the law Clegg vetoed, the Communications Data Bill, would have been "very likely" to prevent attacks of this kind in the future.

[ What are other ways terrorists slip through the cracks? Read How Foreign Names Trip Up Terrorism Databases. ]

Carlile's attack is made more potent by his claim that he wrote to Clegg immediately after the latter's move to warn him, "I fear that this [blocking of the Bill] may come to haunt you and the party if any terrorism event occurs which could otherwise have been avoided."

Clegg's critics argue that the interception of Web and email communications data traffic as proposed would have alerted authorities to plans by the terrorists, who were already known to Britain's counter- intelligence agency, the Security Service.

Home Secretary Theresa May joined Carlile on Sunday to argue on the BBC that the bill should be revived. "I have always been clear that access to communications data is essential for law enforcement agencies and the intelligence agencies," May said in an interview on The Andrew Marr Show. "Law enforcement agencies, the intelligence agencies need access to communications data and that is essential to them doing their job," she said.

May is a member of the dominant party in the Coalition, the Conservatives, and it's no real surprise her call has been supported by other members of that party, too. But at least some of the Labor opposition have started to add their calls for a resuscitation of the bill's provisions, with former Home Secretary Alan Johnson saying on the same broadcast, "We need to get [a new version of the bill] on the statute book before the next general election."

Civil libertarians have been quick to come to Clegg's defense, with pressure group Big Brother Watch arguing that Britain's terrorist trackers already have just the sort of legislative powers, via RIPA, that Carlile and others say they have been denied, and that "factual errors and cheap rhetoric" are clouding the debate in a shocked post-Woolwich nation.

Thus British police "already have the power to find out who a suspected terrorist is talking to," said Big Brother Watch. How they do so -- "from covert human intelligence sources, covert surveillance, directed surveillance or intercept" -- is up to them. If someone were identified as a possible terrorist, local police and agencies can already monitor their online activity, and if the suspects had used some encrypted form of communication, the Communications Data Bill would "not have yielded any information," claimed the group.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-2413
Published: 2014-10-20
Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php.

CVE-2012-5244
Published: 2014-10-20
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to...

CVE-2012-5694
Published: 2014-10-20
Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo, (3) agentURLPath, (4) agentControlKey, or (5) platformDD1 parameter to frameworkgui/attach2Agents.p...

CVE-2012-5695
Published: 2014-10-20
Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS m...

CVE-2012-5696
Published: 2014-10-20
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.