Risk
5/29/2013
12:58 PM
50%
50%

Will Britain Revive Its 'Snooper's Charter'?

Critics claim brutal slaying of soldier on London street could have been prevented by recently vetoed communications monitoring law.

A few weeks back, U.K. Deputy Prime Minister Nick Clegg announced he would block extensions of the monitoring powers of U.K. intelligence and law enforcement agencies because he agreed with critics who complained they amounted to a "snooper's charter".

Such decisions might now backfire on political leaders as voices start to call for closer communications monitoring in the wake of last week's savage Islamist terror attack on a British soldier on a Woolwich, London street.

One of Clegg's own party, House of Lords Peer Lord Carlile, went public Sunday in an article in the populist Mail that the law Clegg vetoed, the Communications Data Bill, would have been "very likely" to prevent attacks of this kind in the future.

[ What are other ways terrorists slip through the cracks? Read How Foreign Names Trip Up Terrorism Databases. ]

Carlile's attack is made more potent by his claim that he wrote to Clegg immediately after the latter's move to warn him, "I fear that this [blocking of the Bill] may come to haunt you and the party if any terrorism event occurs which could otherwise have been avoided."

Clegg's critics argue that the interception of Web and email communications data traffic as proposed would have alerted authorities to plans by the terrorists, who were already known to Britain's counter- intelligence agency, the Security Service.

Home Secretary Theresa May joined Carlile on Sunday to argue on the BBC that the bill should be revived. "I have always been clear that access to communications data is essential for law enforcement agencies and the intelligence agencies," May said in an interview on The Andrew Marr Show. "Law enforcement agencies, the intelligence agencies need access to communications data and that is essential to them doing their job," she said.

May is a member of the dominant party in the Coalition, the Conservatives, and it's no real surprise her call has been supported by other members of that party, too. But at least some of the Labor opposition have started to add their calls for a resuscitation of the bill's provisions, with former Home Secretary Alan Johnson saying on the same broadcast, "We need to get [a new version of the bill] on the statute book before the next general election."

Civil libertarians have been quick to come to Clegg's defense, with pressure group Big Brother Watch arguing that Britain's terrorist trackers already have just the sort of legislative powers, via RIPA, that Carlile and others say they have been denied, and that "factual errors and cheap rhetoric" are clouding the debate in a shocked post-Woolwich nation.

Thus British police "already have the power to find out who a suspected terrorist is talking to," said Big Brother Watch. How they do so -- "from covert human intelligence sources, covert surveillance, directed surveillance or intercept" -- is up to them. If someone were identified as a possible terrorist, local police and agencies can already monitor their online activity, and if the suspects had used some encrypted form of communication, the Communications Data Bill would "not have yielded any information," claimed the group.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5211
Published: 2015-01-27
Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.

CVE-2014-8154
Published: 2015-01-27
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overf...

CVE-2014-9197
Published: 2015-01-27
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.

CVE-2014-9198
Published: 2015-01-27
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

CVE-2014-9646
Published: 2015-01-27
Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.