Risk
5/29/2013
12:58 PM
50%
50%

Will Britain Revive Its 'Snooper's Charter'?

Critics claim brutal slaying of soldier on London street could have been prevented by recently vetoed communications monitoring law.

A few weeks back, U.K. Deputy Prime Minister Nick Clegg announced he would block extensions of the monitoring powers of U.K. intelligence and law enforcement agencies because he agreed with critics who complained they amounted to a "snooper's charter".

Such decisions might now backfire on political leaders as voices start to call for closer communications monitoring in the wake of last week's savage Islamist terror attack on a British soldier on a Woolwich, London street.

One of Clegg's own party, House of Lords Peer Lord Carlile, went public Sunday in an article in the populist Mail that the law Clegg vetoed, the Communications Data Bill, would have been "very likely" to prevent attacks of this kind in the future.

[ What are other ways terrorists slip through the cracks? Read How Foreign Names Trip Up Terrorism Databases. ]

Carlile's attack is made more potent by his claim that he wrote to Clegg immediately after the latter's move to warn him, "I fear that this [blocking of the Bill] may come to haunt you and the party if any terrorism event occurs which could otherwise have been avoided."

Clegg's critics argue that the interception of Web and email communications data traffic as proposed would have alerted authorities to plans by the terrorists, who were already known to Britain's counter- intelligence agency, the Security Service.

Home Secretary Theresa May joined Carlile on Sunday to argue on the BBC that the bill should be revived. "I have always been clear that access to communications data is essential for law enforcement agencies and the intelligence agencies," May said in an interview on The Andrew Marr Show. "Law enforcement agencies, the intelligence agencies need access to communications data and that is essential to them doing their job," she said.

May is a member of the dominant party in the Coalition, the Conservatives, and it's no real surprise her call has been supported by other members of that party, too. But at least some of the Labor opposition have started to add their calls for a resuscitation of the bill's provisions, with former Home Secretary Alan Johnson saying on the same broadcast, "We need to get [a new version of the bill] on the statute book before the next general election."

Civil libertarians have been quick to come to Clegg's defense, with pressure group Big Brother Watch arguing that Britain's terrorist trackers already have just the sort of legislative powers, via RIPA, that Carlile and others say they have been denied, and that "factual errors and cheap rhetoric" are clouding the debate in a shocked post-Woolwich nation.

Thus British police "already have the power to find out who a suspected terrorist is talking to," said Big Brother Watch. How they do so -- "from covert human intelligence sources, covert surveillance, directed surveillance or intercept" -- is up to them. If someone were identified as a possible terrorist, local police and agencies can already monitor their online activity, and if the suspects had used some encrypted form of communication, the Communications Data Bill would "not have yielded any information," claimed the group.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-6090
Published: 2015-04-27
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix...

CVE-2014-6092
Published: 2015-04-27
IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to cause...

CVE-2015-0113
Published: 2015-04-27
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation...

CVE-2015-0174
Published: 2015-04-27
The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVE-2015-0175
Published: 2015-04-27
IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.