Five Eyes’ Statement of Principles on Access to Evidence and Encryption

I presume this remarkable document has been some time in the making. Western, democratic, law-based governments have opened up a new front in the battle over encryption with the ideologues of the tech world.

Ministers from Australia, Canada, New Zealand, the United Kingdom, and the United States signed a Statement of Principles on Access to Evidence and Encryption, in response to the continued resistance over access to encrypted material subject to legal search.

calvini
Computer Lib, 1974 – an early manifesto

A key line that stands out: “Privacy laws must prevent arbitrary or unlawful interference, but privacy is not absolute.”

In fact, the concept that nothing is totally absolute and that the truth must be arrived at through reasoned discourse is an idea that goes back to The Enlightenment. This seems to have been something forgotten in Silicon Valley where many of the first impulses of what later became the industry date back to communitarian (read: “leave us alone, society, we’re doing our own thing”) ethos of early 1970s counterculture. Personal computers, and the technology built on top of those were seen as a place of communal – not public – liberation.

Anyway, enough of the history lesson….

Here is the document.

The text is copied below, in case it is moved on the website of the Department of Home Affairs.

Statement of Principles on Access to Evidence and Encryption

Preamble

The Governments of the United States, the United Kingdom, Canada, Australia and New Zealand are committed to personal rights and privacy, and support the role of encryption in protecting those rights. Encryption is vital to the digital economy and a secure cyberspace, and to the protection of personal, commercial and government information.

However, the increasing use and sophistication of certain encryption designs present challenges for nations in combatting serious crimes and threats to national and global security. Many of the same means of encryption that are being used to protect personal, commercial and government information are also being used by criminals, including child sex offenders, terrorists and organized crime groups to frustrate investigations and avoid detection and prosecution.

Privacy laws must prevent arbitrary or unlawful interference, but privacy is not absolute.  It is an established principle that appropriate government authorities should be able to seek access to otherwise private information when a court or independent authority has authorized such access based on established legal standards.  The same principles have long permitted government authorities to search homes, vehicles, and personal effects with valid legal authority.

The increasing gap between the ability of law enforcement to lawfully access data and their ability to acquire and use the content of that data is a pressing international concern that requires urgent, sustained attention and informed discussion on the complexity of the issues and interests at stake. Otherwise, court decisions about legitimate access to data are increasingly rendered meaningless, threatening to undermine the systems of justice established in our democratic nations.

Each of the Five Eyes jurisdictions will consider how best to implement the principles of this statement, including with the voluntary cooperation of industry partners. Any response, be it legislative or otherwise, will adhere to requirements for proper authorization and oversight, and to the traditional requirements that access to information is underpinned by warrant or other legal process. We recognize that, in giving effect to these principles, governments may have need to engage with a range of stakeholders, consistent with their domestic environment and legal frameworks.

Principles

The Attorneys General and Interior Ministers of the United States, the United Kingdom, Canada, Australia and New Zealand affirm the following principles in relation to encryption.

1. Mutual Responsibility

Diminished access to the content of lawfully obtained data is not just an issue for Governments alone, but a mutual responsibility for all stakeholders.

Providers of information and communications technology and services – carriers, device manufacturers or over-the-top service providers -– are subject to the law, which can include requirements to assist authorities to lawfully access data, including the content of communications. Safe and secure communities benefit citizens and the companies that operate within them.

We are always willing to work with technology providers in order to meet our public safety responsibilities and ensure the ability of citizens to protect their sensitive data. Law enforcement agencies in our countries need technology providers to assist with the execution of lawful orders. Currently there are some challenges arising from the increasing use and sophistication of encryption technology in relation to which further assistance is needed.

Governments should recognize that the nature of encryption is such that that there will be situations where access to information is not possible, although such situations should be rare.

2. Rule of law and due process are paramount

All governments should ensure that assistance requested from providers is underpinned by the rule of law and due process protections.

The principle that access by authorities to the information of private citizens occurs only pursuant to the rule of law and due process is fundamental to maintaining the values of our democratic society in all circumstances – whether in their homes, personal effects, devices, or communications. Access to information, subject to this principle, is critical to the ability of governments to protect our citizens by investigating threats and prosecuting crimes. This lawful access should always be subject to oversight by independent authorities and/or subject to judicial review.

3. Freedom of choice for lawful access solutions

The Governments of the Five Eyes encourage information and communications technology service providers to voluntarily establish lawful access solutions to their products and services that they create or operate in our countries. Governments should not favor a particular technology; instead, providers may create customized solutions, tailored to their individual system architectures that are capable of meeting lawful access requirements. Such solutions can be a constructive approach to current challenges.

Should governments continue to encounter impediments to lawful access to information necessary to aid the protection of the citizens of our countries, we may pursue technological, enforcement, legislative or other measures to achieve lawful access solutions.

Follow Chris Zappone on Facebook

Influence campaigns target culture as much as politics

This article about Russian social media efforts in Australia touches on a significant factor of Russian influence campaigns, and one that makes them different in nature from a lot of Chinese ones.

Authors Tom Sear and Michael Jensen write: “troll accounts are able to develop relationships, and it’s often through these relationships that political opinions are developed and voting decisions made.

jonesalex

“Disinformation…is not so much the distribution of falsehoods for political effect, but rather communications designed to manipulate a target audience in a manner favourable to the perpetrator.”

“…Adversarial actors, such as Russia, try to shift the identifications of a target audience from one political affiliation to another. One way of doing this is to break identifications with governing organisations by promoting a sense of insecurity and danger.”

A recurring theme to Russian propaganda is that liberal democracy can’t meet the challenges created by the modern world. The most glaring example of this is was the European migrant crisis of 2015, when a surge of anti-EU propaganda accompanied the throngs of Syrian and Middle Eastern refugees pouring across European borders. The crisis was used by Russia as an example of the failure of the European project. Russia was also a protagonist of the Syrian conflict, backstopping the Assad regime.

But there is an even larger trend going on here.

Russian influence ops are effective not simply by adjusting narratives, or by leading people toward radicalized, anti-establishment positions, but by shifting the very culture of a society. For this reason, the line between right wing rhetoric and Russian propaganda blurs.

kisch

As Sear and Jensen note, and I have documented for The Age, there are overlaps between Russia-linked propaganda, and News Corp content.

This is what makes detection arguably more difficult than any other type of clandestine influence op; because the activity coincides with  attitude shifts of the public.

Examples abound: The case of Alex Jones comes to mind. Once a free-ranging conspiracy theorist, he (and his fans) were slowly brought into the fold of the Russian information war machine. Seth Rich. Pizzagate. These will be unfortunate chapters in American history. Going back further, if you look at the role of Russia in the Sacco and Vanzetti trial propaganda, you can make the case it changed the culture.

Likewise, in Australia, it’s lost on many people today that the case of Egon Kisch, the Czech roving reporter whose language abilities made a mockery of Australia’s 1930-era anglophone xenophobia, was himself a member of the Moscow-directed Comintern. Today, Kisch’s story forms a unique chapter of Australian history. In a small way, he changed the history of the country.

 

The ‘soft narrative’ is a doubt narrative

The so-called ‘soft-narrative’ is a rhetorical line voiced in defense of Russia’s actions within the West, such as 2016 US election interference.

Molly McKew has rightly described how it shifts culpability for Kremlin aggression against the West from Russia back to the US/West.

trust
‘Trust no one’ as the man says.

“It’s essentially. ‘Yes, Russia does bad things, but so does the West/US. And really, the West should know better so it’s worse.’

Or it’s…

“Anything you do to punish Putin proves his point and makes him stronger.

Or it’s…

“It’s silly to think full-spectrum warfare is a thing when Russia can’t even pick up the trash.

“It’s the doubt narrative,” she says. “Not pro-Kremlin but moral equivalency or ‘Russia’s not a thing.'”

As you delve into discussions online, you will hear this argument frequently. It’s embraced by people supposedly “in the know” about Russian information war and influence campaigns. It’s also echoed by Westerners who, while no fans of Russia, are keen to highlight their own world-weary skepticism for Western governments.

The soft narrative: call it by its given name.

Follow Chris Zappone on Facebook

Not much China-bot activity outside of Taiwan, Chinese diaspora: Howard

Outside of Taiwan and the Chinese diaspora, the People’s Republic of China is not actively using bots to target elections, according to Oxford Internet Institute professor Philip Howard in recent US Senate testimony on Foreign Influence on Social Media.

“So far we have not documented much Chinese activity,” he told US Senators.

“We know they spend time working on voters in Taiwan, they work on the Chinese diaspora.

“We believe they have capacity but as of yet they have not set American voters in their sights.”

phil
Professor Howard (C-Span)

Go to 39.00 minute mark of the linked video to hear his remarks.

Howard’s Computational Propaganda project estimates China has between 300,000 to 2 million people ‘cybertroops’ to shape perceptions.

Alas, many would be inward-facing. The woes of internal division and information control.

That doesn’t mean that the diaspora community in Australia wouldn’t be a target of them – but perhaps just not at a massive scale.

Follow Chris Zappone on Facebook