Crypto Wars Podcasts

My first attempts at podcasts for this site, produced sometime ago on YouTube, were two videos about the Crypto Wars. This is the story about the attempts to control the use of strong encryption in the late 1990s, and then again in more recent years. From about 2014 to 2018. This includes things like the Investigatory Powers Act in the UK, and other similar laws elsewhere. The two podcasts are linked below.

Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.

YouTube privacy policy

If you accept this notice, your choice will be saved and the page will refresh.

Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.

YouTube privacy policy

If you accept this notice, your choice will be saved and the page will refresh.

Crypto Wars 2.0

I was invited to give a talk at Oxford University on Crypto Wars 2.0 for the Cyber Security DTC that is jointly ran by Oxford and Royal Holloway. I have given a talk on the Crypto Wars at Durham in the past but this talk was a combination of a revisiting the the Crypto Wars today, but also a look to the future. I have produced a podcast of the talk and the slides are available here.

33C3 – Proposed EU Copyright Law – Not Fit for Anything

Another highlight from 33C3 was Julia Reda’s talk about the proposed EU copyright law, Copywrongs 2.0. I say highlight, only because it was an interesting and compelling talk, the law itself is an absolute lowlight. To say that the proposed law is not fit for purpose is an understatement, and there is a question as to whether it is designed for purpose has less to do with protecting creators and more to do with protecting an industry struggling with an outdated business model.

The reform is a final parting shot by the outgoing EU commissioner Günther Oettinger. His proposed reform to EU copyright threatens freedom of expression by making simple things like linking to content (a central tenet of the the internet) a breach of copyright. This is obviously madness.

The proposals seems to be the product of some intensive lobbying by what are often referred to as ‘old media’. Some news publishers, mostly those who are struggling to adapt their business models to the 21st century, want to charge search engines and social networks for the links displayed in searches or embed in users posts. Essentially charging for the traffic sent their way. The other culprit is the music industry, struggling in the world of YouTube. Personally, I particularly don’t want to see the newspaper industrial disappear, especially in the world we live in today, but this isn’t the answer.

So what does the proposed law prohibit? As written sharing small sections of news articles e.g. on a blog or a personal website (such as this one) without a license from the publisher will be an infringement, for as long as 20 years after the article was originally published. This is crazy, the point of doing that is to drive traffic to the original story, the newspaper industry seems to be shooting itself in its foot.

As its stands the EU Commission has not proposed any exceptions based on the size of the snippet, or for individuals, or for non-commercial purposes, and providing a link to the source isn’t enough. This essentially means you have to have a license to reference or attribute a quote. What this means for newspapers quoting each other I don’t know, or for academic work.

Not only can you not link on social media, it would also seem that indexing the web in general would be impossible without licensing, and thus essentially impossible. In fact, any and every site in existence would have to ways of filtering out copyright infringements.

What about collaboration? The affect such a law would have on site that foster collaboration is also not clear, but likely to be bad. For example GitHub would have to put in place the filtering technology to search for source code that someone wants to keep of the site. Even if that code was written under some open source licenses. Also in trouble would be Wikipedia, and anyone using data from the web for training of AI or similar.

So what is Günther Oettinger trying to do? Does he just have no understanding of the internet, and it would seem copyright? He is known to be in favour of big business, and seems to be close to the publishing industry. At best its a misguided attempt at protecting an outmoded business model. What happens now is down to people doing a bit of lobby of our own. Is there any point in Brits getting involved? Yes, for one there is a chance that the UK will mirror some EU laws, at least initially and we don’t want this one. Also we can do our bit to help out our EU neighbours.

Podcast – quick history of encryption

I did a quick video of a very short history of encryption for a friend who was putting on a screening of Citizen Four. I tried to put the film into some context, including the crypto wars. Hard to do in ~10 minutes but I think I managed it.

Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.

YouTube privacy policy

If you accept this notice, your choice will be saved and the page will refresh.

Investigatory Powers Bill

The video below is a recording of Teresa May answering questions on the draft Investigatory Powers Bill. some interesting highlights (or low lights) for me where the following:

  • She essentially didn’t answer the question on why it is unhelpful to compare the retention of web history with that of an itemised phone bill. The two things are not the same. An itemised phone bill doesn’t record a version of the conversation that took place. Now, although I believe that the retention is not include the exact pages visited, it does include the IP address of the website. So even though that is not exact pages visited, it does give some idea of the content that might have been viewed as they could go and retrospectively visit the site. Importantly, this doesn’t include whether the site has changed in the meantime. Also it is not clear to me whether the IP address and the site are recorded. Obviously this is important as you can host a large number of websites on a single server… In short this comparison is supposed to be there for clarification, it doesn’t clarify anything.
  • Some of the wording seems to be vague to say the least. This is of some concern as it could allow for a degree of ‘mission creep’. Where the legislation is used for things that it was not really intended for. We have already seen the government use terrorism laws for strange things, the most obvious of which was them being used to freeze Icelandic bank accounts during the financial crash.
  • No sunset clause. So the bill will not time out on its own, and realistically unless the attitude of a future government is very difference from today. We might well be stuck with it forever.
  • I will also point out that there seems to be some scope for the weakening of encryption in the bill. We haven’t seen this since the May 2000 Electronic Communications Act, in which the Home Office left in a vestigial power to create a registration regime for encryption services. Basically the capacity to weaken/back door encryption. This did have a sunset clause which expired.

Security Algorithms Need to be More Transparent

I wrote a piece for The Conversation, “It’s time to shine a light on the unseen algorithms that power ‘Big Brother’”. I try to make the point that we as citizens know very little about the algorithms that power the security services (not to mention all sorts of other things too). Which is troubling as there is a great potential for them to discriminate, or plane get things wrong. This is both potentially damaging to us, but it also makes them less useful. I also draw a comparison between these analytical algorithms and cryptographic algorithms, which are often deliberately opened up to ensure there strength. Analytical algorithms that have the power to refuse someone entry to a country, or potentially assist with putting someone behind bars, should also be open.It’s time to shine a light on the unseen algorithms that power ‘Big Brother’