Security

U.K. Knots Closer Cyber Security Ties In Washington

Comment

Image Credits:

The U.K. Prime Minister David Cameron is in Washington DC this week, lobbying the U.S. President on the need for circumventing the strong encryption of Internet services.

This follows Cameron’s anti-encryption comments in the U.K., earlier this week, although government sources subsequently clarified that he does not intend to outlaw encryption per se — so much as seek to circumvent it by putting pressure on Internet companies to co-operate with governments by inserting backdoors into their security systems.

The why of all this anti-encryption rhetoric is the usual ‘national security’ excuse, with Cameron arguing that U.K. intelligence agencies must be able to access user data “in extremis” — to order to track down potential terrorists.

The series of recent terror attacks, and apparent attempted attacks, in Paris and Belgium are being used as justification for this push and of ‘evidence’ of imperative. Although, as the Snowden revelations have shown us, we know governments already have vast online surveillance dragnets — dragnets which failed to prevent the aforementioned terror attacks.

Indeed, in all likelihood, these vast non-targeted digital surveillance programs have made the intelligence services’ job of tracking down ‘a few interesting needles’ that much harder, given limited resources end up being stretched by more and more digital noise. But that hasn’t stopped Cameron seizing the opportunity to lobby for yet more online surveillance.

So far so ‘standard political post-terror-attack excuse for digital surveillance crackdown’ operating procedure.

But that’s not all. The U.K. P.M. is also today banging his political drum from Washington on the need for governments and companies to tighten their cyber security, in the wake of the Sony hack. And has traveled over the pond with an entourage of U.K. cyber security startups in tow — to ostensibly show off British startup talent in the online security space.

In an interview with the BBC, Cameron said U.S. and U.K. security agencies would be stepping up their co-operation in this area, and staging joint ‘cyber war games’ — forming so-called “cyber cells”, comprised of FBI and MI5 agents working together and sharing more data about potential online threats.

The co-operation arrangement has been dubbed “unprecedented” by Downing Street. The first exercise will apparently be a staged attack on the financial sector, and will take place later this year, according to the BBC.

“It’s not just about protecting companies, it’s about protecting people’s data, protecting people’s finances. These attacks can have real consequences to people’s prosperity,” Cameron told the BBC’s political editor, Nick Robinson, in a video interview.

Eh?

Now you might think these two political positions stand in opposition — i.e. on the one hand calling for a reduction in online security by requiring Internet companies perforate their own encryption, while on the other announcing measures apparently aimed at bolstering online security against hackers.

However the fuzziness of political techno rhetoric allows for a very large slice of fudge to be so served. Especially as much mainstream media either does not understand and/or is not interested in conveying technology discrepancies — meaning the politicians get to spin without being unspun. And they know that.

“We need to be able, in extremis, to interrupt the contacts between terrorists, whether they are using fixed phones, mobile phones or the Internet,” Cameron went on to say in the BBC interview, when asked what he wanted the U.S. President to do about making companies like Facebook and Google “co-operate with tracking down terrorists”.

“We both face the same challenge and we need to work with these big companies, we have good relationships with them, to make sure that we can keep people safe. So it’s a conversation to have with the President, which I’ll be doing today and tomorrow, and a conversation we both need to have with the companies concerned,” he added.

Robinson’s follow up question to these comments was not to ask Cameron to square the insecurity circle of coercing a perforation of corporate encryption on the one hand whilst warning of the dangers of corporate hacking threats on the other.

Rather he asked Cameron whether President Obama “calls you bro”.

Ummm…

he calls you bro

Spooky action at a distance

Now there’s another theory that can in fact square Cameron’s crypto policy inconsistencies.

This theory suggests that talk of “cyber cells” and “cyber war games” is just a smokescreen to deflect the media and bamboozle the voting public while both U.K. and U.S. governments seek to do a back-room data-sharing deal that will subvert the security of Internet companies in the interests of expanding government agencies’ surveillance capabilities — helped along by respective national agendas apparently being aligned on this point.

After all the FBI has been publicly critical of U.S. Internet companies tightening their encryption. As has the head of the U.K.’s GCHQ.

So joint U.S.-U.K. “cyber cells” might be a cloak for more than a few cyber war games. The whole closer cyber security co-operation initiative could also be a vehicle for passing encryption keys into perforated Internet services or a channel for more user data to flow.

As data privacy rights expert Caspar Bowden has noted, section 702 of the U.S. Foreign Intelligence and Security Act (FISA) already allows for spying on foreign nationals. And if the PM of the foreign body in question also wants the ability to spy on domestic citizens, well then, there’s no diplomatic blocker standing in the way — beyond the potential for some negative publicity for a government that asks another to subvert the crypto of all its own citizens.

Hence the combination of ‘keeping people safe’ counter-terrorism rhetoric being directed at encrypted Internet services by Cameron, coupled with him laying down a parallel smokescreen of joint U.K.-U.S. cyber security initiatives. Or that’s one reading of these otherwise conflicting Tory technology insecurity-security policy proposals.

This theory certainly makes Cameron’s incoherent technology policy pronouncements better add up. Which just leaves the question of who in the U.K. wants to vote for a Prime Minister who is asking a foreign government to spy on British citizens?

Oh and the other pressing question: how will U.S. Internet companies respond to a fresh round of political pressure over their use of strong encryption? Will they stand firm, a la Apple’s Tim Cook’s prior comments on iMessage encryption (“If the government laid a subpoena to get iMessages, we can’t provide it. It’s encrypted and we don’t have a key.”)?

Or will they be strong-armed into adding backdoors into mainstream services, thereby making them less secure against hackers, as well as accessible to spooks?

TechCrunch contacted Apple, Facebook and Google to ask for their response to Cameron’s latest anti-encryption comments and will update this post with any response. At the time of writing none of the companies had responded to a request for comment. Update: A Facebook spokesman declined to comment.

More TechCrunch

AI startup Anthropic is changing its policies to allow minors to use its generative AI systems — in certain circumstances, at least.  Announced in a post on the company’s official…

Anthropic now lets kids use its AI tech — within limits

Zeekr’s market hype is noteworthy and may indicate that investors see value in the high-quality, low-price offerings of Chinese automakers.

The buzziest EV IPO of the year is a Chinese automaker

Venture capital has been hit hard by souring macroeconomic conditions over the past few years and it’s not yet clear how the market downturn affected VC fund performance. But recent…

VC fund performance is down sharply — but it may have already hit its lowest point

The person who claims to have 49 million Dell customer records told TechCrunch that he brute-forced an online company portal and scraped customer data, including physical addresses, directly from Dell’s…

Threat actor says he scraped 49M Dell customer addresses before the company found out

The social network has announced an updated version of its app that lets you offer feedback about its algorithmic feed so you can better customize it.

Bluesky now lets you personalize main Discover feed using new controls

Microsoft will launch its own mobile game store in July, the company announced at the Bloomberg Technology Summit on Thursday. Xbox president Sarah Bond shared that the company plans to…

Microsoft is launching its mobile game store in July

Smart ring maker Oura is launching two new features focused on heart health, the company announced on Friday. The first claims to help users get an idea of their cardiovascular…

Oura launches two new heart health features

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI considers allowing AI porn

Garena is quietly developing new India-themed games even though Free Fire, its biggest title, has still not made a comeback to the country.

Garena is quietly making India-themed games even as Free Fire’s relaunch remains doubtful

The U.S.’ NHTSA has opened a fourth investigation into the Fisker Ocean SUV, spurred by multiple claims of “inadvertent Automatic Emergency Braking.”

Fisker Ocean faces fourth federal safety probe

CoreWeave has formally opened an office in London that will serve as its European headquarters and home to two new data centers.

CoreWeave, a $19B AI compute provider, opens European HQ in London with plans for 2 UK data centers

The Series C funding, which brings its total raise to around $95 million, will go toward mass production of the startup’s inaugural products

AI chip startup DEEPX secures $80M Series C at a $529M valuation 

A dust-up between Evolve Bank & Trust, Mercury and Synapse has led TabaPay to abandon its acquisition plans of troubled banking-as-a-service startup Synapse.

Infighting among fintech players has caused TabaPay to ‘pull out’ from buying bankrupt Synapse

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

The Twitter for Android client was “a demo app that Google had created and gave to us,” says Particle co-founder and ex-Twitter employee Sara Beykpour.

Google built some of the first social apps for Android, including Twitter and others

WhatsApp is updating its mobile apps for a fresh and more streamlined look, while also introducing a new “darker dark mode,” the company announced on Thursday. The messaging app says…

WhatsApp’s latest update streamlines navigation and adds a ‘darker dark mode’

Plinky lets you solve the problem of saving and organizing links from anywhere with a focus on simplicity and customization.

Plinky is an app for you to collect and organize links easily

The keynote kicks off at 10 a.m. PT on Tuesday and will offer glimpses into the latest versions of Android, Wear OS and Android TV.

Google I/O 2024: How to watch

For cancer patients, medicines administered in clinical trials can help save or extend lives. But despite thousands of trials in the United States each year, only 3% to 5% of…

Triomics raises $15M Series A to automate cancer clinical trials matching

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. Sign up here for free — just click TechCrunch Mobility! Tap, tap.…

Tesla drives Luminar lidar sales and Motional pauses robotaxi plans

The newly announced “Public Content Policy” will now join Reddit’s existing privacy policy and content policy to guide how Reddit’s data is being accessed and used by commercial entities and…

Reddit locks down its public data in new content policy, says use now requires a contract

Eva Ho plans to step away from her position as general partner at Fika Ventures, the Los Angeles-based seed firm she co-founded in 2016. Fika told LPs of Ho’s intention…

Fika Ventures co-founder Eva Ho will step back from the firm after its current fund is deployed

In a post on Werner Vogels’ personal blog, he details Distill, an open-source app he built to transcribe and summarize conference calls.

Amazon’s CTO built a meeting-summarizing app for some reason

Paris-based Mistral AI, a startup working on open source large language models — the building block for generative AI services — has been raising money at a $6 billion valuation,…

Sources: Mistral AI raising at a $6B valuation, SoftBank ‘not in’ but DST is

You can expect plenty of AI, but probably not a lot of hardware.

Google I/O 2024: What to expect

Dating apps and other social friend-finders are being put on notice: Dating app giant Bumble is looking to make more acquisitions.

Bumble says it’s looking to M&A to drive growth

When Class founder Michael Chasen was in college, he and a buddy came up with the idea for Blackboard, an online classroom organizational tool. His original company was acquired for…

Blackboard founder transforms Zoom add-on designed for teachers into business tool

Groww, an Indian investment app, has become one of the first startups from the country to shift its domicile back home.

Groww joins the first wave of Indian startups moving domiciles back home from US

Technology giant Dell notified customers on Thursday that it experienced a data breach involving customers’ names and physical addresses. In an email seen by TechCrunch and shared by several people…

Dell discloses data breach of customers’ physical addresses

Featured Article

Fairgen ‘boosts’ survey results using synthetic data and AI-generated responses

The Israeli startup has raised $5.5M for its platform that uses “statistical AI” to generate synthetic data that it says is as good as the real thing.

1 day ago
Fairgen ‘boosts’ survey results using synthetic data and AI-generated responses