hasimir: (Default)
Monday, September 5th, 2011 02:38 pm

Last week the complete unredacted diplomatic cables obtained by WikiLeaks last year were revealed to the world following a series of events involving WikiLeaks, the Guardian and possibly others. There has been much finger pointing regarding who is to ultimately blame for this, which is essentially pointless. The deed is done and the information is out. A couple of days later WikiLeaks, under the direction of Julian Assange, elected to update their Cablegate site with the unredacted data and provide a full mirror archive [torrent] and PostgreSQL database copy [torrent].

Already there are interesting revelations being brought to international attention by the latest data releases. There are also very valid concerns regarding the safety of intelligence sources, victims of crime and political dissidents who are identified in the cables. Amongst these have been the revelation that one or more cables identify current Australian intelligence officers, as reported in The Age and The Sydney Morning Herald.

Last Friday a statement [PDF] was made by Robert McClelland, the Australian Attorney-General, regarding this fact and confirming that the Australian Security Intelligence Organisation (ASIO), along with other agencies, were reviewing the material. Mr. McLelland reiterated that Section 92 of the Australian Security Intelligence Organisation Act 1979 (ASIO Act) makes it a crime to “publish or cause to be published in a newspaper or other publication, or by radio broadcast or television, or otherwise make public, any matter stating, or from which it could reasonably be inferred, that a person having a particular name or otherwise identified, or a person residing at a particular address, is an officer (not including the Director-General), employee or agent of the Organisation or is in any way connected with such an officer, employee or agent or, subject to subsection (1B), is a former officer (not including a former Director-General), employee or agent of the Organisation or is in any way connected with such a former officer, employee or agent.” That second part is obviously aimed at protecting the families of ASIO employees, while subsection 1B deals with exceptions where former officers have consented to their previous employment being made public.

This has led to speculation that Julian Assange could face prosecution under Section 92 of the ASIO Act. There may be the possibility of additional charges relating to officers of other Australian agencies, such as the Office of National Assessments (ONA) or the Australian Secret Intelligence Service (ASIS). In adition to the cable referred to by The Age and The Sydney Morning Herald there is at least one cable which lists the names of a number of senior ONA analysts and there may be more buried amongst the quarter of a million cables.

One of the problems facing any Australian prosecution in this matter will be whether or not charges can be laid based on the sequence of events. The initial revelations of the complete data came from a GPG encrypted file which had been available online via BitTorrent for several months and which was decrypted using a passphrase published by the Guardian. Each on its own could not reveal the information, they had to be used together to obtain the data. If charges were to be laid related to that, who would be charged? Julian Assange for creating the encrypted file? Another WikiLeaks staffer for putting it on BitTorrent? David Leigh and Luke Harding at the Guardian for publishing the decryption passphrase in WikiLeaks: Inside Jullian Assange’s War on Secrecy? John Young at Cryptome for providing the decrypted CSV file? Raymond Hill at Cablegate Search for using that data in his online database? Others?

That’s just dealing with the initial release of the data. The next question is whether or not Julian Assange or others involved with WikiLeaks can be charged for effectively republishing the data after it has already been decrypted by others? No doubt this is something which Australian Commonwealth prosecuters will consider following the reviews of the diplomatic cables being conducted by ASIO and others.

On Sunday the Attorney-General followed the national security theme with a statement [PDF] announcing a new national security awareness campaign promoting the National Security Hotline (NSH). The NSH was introduced in 2002 by the Howard Government and the initial advertising campaign in 2003 featured much derided fridge magnets for every household.

What is unclear about the latest NSH advertising campaign is whether it was already planned, whether or not it is in response to or accelerated due to the release of the unredacted cables or whether it is part of a push to turn public opinion against WikiLeaks. When the cables were being dribbled out with effort taken to redact information that could identify people at risk of violence or retaliation it was difficult for many people to take the government’s objection too seriously. The complete release last week changes that scenario completely and the publication has been condemned by the traditional media organisations, which had previously worked with WikiLeaks to redact and publish the cables. It is possible that the Attorney-General’s department views an elevation of national security in the public consciousness will make it easier for people to draw the conclusion that the cable publication and, by extension, WikiLeaks is to be condemned.

Regardless of one’s opinions of Julian Assange and WikiLeaks, either for or against, the fact is that the facility to provide a platform for the global release of sensitive material has been a major change for both national and international politics. It has shifted the concentration of power in ways which governments are not used to. They are beginning to learn a similar lesson to that of the media: that the people formerly known as the audience are able to actively engage to a greater extent than previously possible. Not only are people able to do this, but they actually do it.

As I type this there are people around the globe pouring through the released cables looking for interesting information. Some of the results are published by traditional media outlets, some are blogged about and some are included in the running commentary on Twitter or other social media networks. Most people refer to the latter as crowd-sourcing, but governments and intelligence agencies refer to it as open source intelligence. It is another example of ordinary citizens being able to level a playing field which has previously been restricted to governments, intelligence agencies, law enforcement and corporations with the budgets necessary to obtain and mine vast amounts of data. This shift is, unsurprisingly, of real concern to those organisations which have traditionally maintained a monopoly on information.

As a consequence, moves by governments around the world to attempt to limit or discourage this power shift are to be expected. Where that coincides with existing national security legislation, such as that protecting intelligence officers here in Australia, a link is able to be drawn between the power shift and a subtext of potential sedition. It’s not quite accusing anyone engaged in any aspect of the shift in power and sharing (versus control) of information of treason, but it is a manner of presenting opposition to people doing so as in the interests of national security. It is a subtle and dangerous approach to the changing nature of politics and intelligence, which could backfire. Yet it is one which will be pursued by any government seeking to maintain a concentration of power; that being, all of them.

It also won’t work, not completely, that genie is well and truly out of the bottle. The governments, intelligence agencies, law enforcement and corporations already know this; their game is now to limit anything which they see as potentially damaging. The extent of their success or failure in this will only become apparent over time; not just in relation to the various releases from WikiLeaks, but also information which will be released by other sources and organisations in the future.

There are new players in the Great Game of international politics, players who were previously viewed almost entirely as pawns. It will be very interesting to see how it plays out as the power and the rules shift.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Saturday, August 20th, 2011 06:53 am

Yesterday’s news that Paul Freebody, a candidate for the Queensland seat of Cairns, has been expelled from the Liberal National Party (LNP) highlights the need for the greater adoption of email encryption and digital signatures.

As with the OzCar Affair of two years ago, the issue here relates more to the verification that an email has not been tampered with rather than protecting the content from prying eyes. Thus it is a digital signature which would have been of use to Freebody in this case. Had he already been using OpenPGP compliant software to sign his emails, such as PGP or GPG, Freebody could have proven that the change to his email after signing and sending it was made by someone else, without needing to identify or, in this case, embarass that person.

The reports regarding the case of Paul Freebody are a little unclear as to whether the modified email had been sent from his computer or whether a family member who had received the email modified it and then forwarded it on. Regardless of which of those two alternatives it was, the regular use of a digital signature would have helped.

If the email had been modified on Mr. Freebody’s computer before it was sent, the prompt to sign the message would have prevented message from being sent without the relevant passphrase. If the relative had removed the signing option then Mr. Freebody could have pointed to the lack of the signature as a certain level of proof that he did not send that email.

Had the email been signed and a recipient modified the content before forwarding it to others, the signature would not validate for that message and Mr. Freebody could then have pointed to that as proof that the message had been altered. In this case Mr. Freebody could have provided a copy of the original message with the valid signature for comparison.

This is the second time in as many years in which a forged or modified email has resulted in a scalp being claimed in Australian politics; yet the tools to prevent it have been available for two decades and standardised since the late 1990s. Since that time the ease of using email encryption and signatures, particularly with the combination of Thunderbird, GPG and Enigmail, has been improved considerably.

Until people in public life start using at least this aspect of cryptographic technology, even if they don’t actually encrypt their email, these kind of scandals will continue to occur.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Thursday, June 23rd, 2011 12:22 am

Australian blogger Mike Stuchbery, a vocal critic of ACCESS Ministries‘ school chaplaincy program, has been gagged by the evangelical religious group.

On the 15th of June Mr. Stuchbery posted an article about a graphic novel, Man Hunters published by ACCESS Publishing International, a division of ACCESS Ministries. The original article included several images from the graphic novel and a link to a PDF of the complete article.

On the 17th of June Mr. Stuchbery received a letter from Moores Legal stating that the post of the graphic novel and any part of it was a breach of copyright. The letter demanded the removal of the graphic novel PDF, the deletion of any copies of same, the removal of any images from the PDF and the deletion of the entire article which included this content. The letter, which Mr. Stuchbery posted, included a deadline of 5:00pm on June 22nd.

Mr. Stuchbery complied with the request to remove the PDF and all of the images, except for a single panel. The other panels were replaced with transcripts of the dialogue. He cited the “fair use” (actually it is “fair dealing”) provisions of the Copyright Act 1968 for the purpose of the critique which comprises the remainder of his article.

In spite of this compliance, Mr. Stuchbery’s posting access to his site was disabled by WordPress.com before the deadline set by Moores Legal. This indicates that the purpose of this action is not simply to protect the material published by ACCESS Ministries, but to silence one of their critics. If it were purely concerned with the copyright issue then the deadline would have been honoured, as would the fair dealing provisions of the Copyright Act 1968. Instead moves were made to report Mr. Stuchbery’s site for copyright infringement to his hosting provider before that, the result being suspension of updates well before the deadline. According to Mr. Stuchbery he discovered the suspension more than nine hours prior to the deadline.

This type of use of copyright law by organisations, especially religious organisations, to stifle dissent is nothing new. The Church of Scientology is well practiced at using precisely this tactic to silence their critics and have done so to great effect for many years. Now ACCESS Ministries are taking their turn at using copyright law to censor their opposition. This case is a little different from many of the Scientology ones in one crucial respect; the criticism of ACCESS Ministries and their teaching material does not relate purely to their internal policies and behaviour, as much of the Scientology criticism does, it relates to material used by ACCESS Ministries chaplains in a government funded program for secular schools. As such, criticism of the policy and of any content used in the delivery of that policy should be protected by the implied right to free political speech. This relates to both the High Court rulings regarding freedom of political speech inferred from the Australian Constitution and various international treaties which Australia has ratified, most notably the International Covenant on Civil and Political Rights.

With this action ACCESS Ministries have proven their complete disregard for the civil rights of those who do not agree with them. They have shown their willingness to resort to any means available to silence any and all opposition and criticism.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Friday, June 3rd, 2011 07:56 am

Six months ago Victoria went to the polls and elected a Liberal-National Coalition government, led by Ted Baillieu, with a (slim) majority in both houses of parliament. After more than a decade of Labor government, this was not entirely unexpected. Due to electoral reforms made by the previous Labor government, there will be another three and a half years before another election will be held.

The change in government has led to a drastic change in the tone of governance in Victoria. Three of the changes which particularly illustrate this are a review of the Charter of Human Rights and Responsibilities Act 2006 with a possible result of watering down or even repealing the Act, on the spot fines for “indecent” language and the controversial introduction of legalising discrimination for groups not wishing to employ, service or otherwise interact with individuals with life styles or traits they object to. That last one essentially translates to: some Christian organisations want support for prejudice against single mothers, non-believers, people of different faiths, divorced people and, of course, the entire LGBTI community.

Those aren’t the only things on the agenda, there are assorted other law-and-order policies currently being pushed by Baillieu and Attorney-General Robert Clark, including mandatory sentencing for sixteen and seventeen year-old violent offenders. Still, this is only six months into a four year term. It is clear that Baillieu and Clark are aiming for significant changes to Victoria’s legislative powers before the voters have a chance to oppose them. Perhaps this would be more understandable if the policies presented to the public by the Coalition had included this significant law-and-order focus; but, with the exception of the fairly standard comments about recruiting more police, this was not the case.

It is clear that the Baillieu-Clark agenda, beginning with the reduced emphasis on human rights, is to forge a far more conservative and controlled Victoria. The first step is to reduce the rights previously granted to Victorians. The second step is to introduce law-and-order policies which may appeal to some sections of the community without appearing too controlling to the general punter, but which actually undermine civil liberties significantly. The third step is to provide greater power to certain interest groups at the expense of minorities.

So what can we expect in the future? I expect there will be considerably more similar action in the future. Most likely this will include anti-association legislation, which is normally labelled as “anti-bikie” legislation and which has been adopted in South Australia and New South Wales. Whenever politicians and police discuss legislation like this they are careful to focus on one section of the community, in this case “criminal organisations” and motorcycle clubs, but the reality is that the legislation is never so specific and can be used against any organisation or group of people. Currently the Charter of Human Rights and Responsibilities Act prevents such anti-association legislation from being passed in Victoria, but a repeal of that Act or reduction in its scope may open this door.

No doubt there will be more than this in just the next year or two, given the changes pushed in just the last six months. By the time of the next election in November 2014, the changes in Victoria could be tremendous.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Saturday, May 28th, 2011 11:49 pm

Over the course of the better part of the last couple of decades I have developed certain skills which have helped (or tried to help) various friends through the trauma of sexual assault and rape. Most of these skills stem from little things like listening and not judging. Not to mention reigning in the temptation to go off half-cocked, as it were, and form a possé to go rapist hunting. After all, who would that really benefit?

I would like nothing more than to never have the need to use these skills again. That’s why I support SlutWalk, even though I was a little too ill to attend today’s one.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Tuesday, March 8th, 2011 01:52 pm

Yesterday’s Patch Monday podcast from Stilgherrian dealt with the plan for Australia to sign the Council of Europe’s Convention on Cybercrime.

This treaty deals with a number of matters, some of which are just designed to address issue which are already illegal, such as child pornography and pædophilia, just with a technological slant. Some of it relates to computer or network specific crimes, such as computer intrusion and denial of service attacks. Some of it, however, deals with expanding the powers of law enforcement agencies to intercept data traffic and to retain logs of all online activity for possible future use by law enforcement.

Colin Jacobs, from Electronic Frontiers Australia, attempts to address some of the many ways this treaty will adversely affect civil liberties and privacy issues in particular. While Nigel Phair, from the Surete Group, promoted the opinions of law enforcement for what they believe they need to investigate cases online.

There are details of the Australian review of this treaty are on the Attorney-General’s website and will be accepting submissions until the close of business on Monday the 14th this month.

It appears highly likely that moves to prepare Australia to sign the Convention on Cybercrime will be used to enact contentious issues like data retention policies in Australia. So anyone wishing to prevent that should strongly consider sending a submission to the Attorney-General’s Department review.

Should Australia sign this treaty and/or introduce data retention policies, then some people may wish to consider various methods of circumventing that policy. Fortunately some of the same methods which can be used to bypass Internet censorship, such as using a VPN and Tor, can also be used to circumvent the data retention policies.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Sunday, February 27th, 2011 06:06 pm

The Australian government is now on track to possibly branding the national plant (this acacia contains less than 0.02% alkaloids and it is currently unknown whether or not it is possible to derive psychoactive compounds from it), along with thousands of other native plants, illegal. This is apparently part of a move to create uniform anti-drug legislation across the country. All the plants targetted by this new legislation contain or produce chemicals which are either drugs or drug precursors which are either illegal in Australia or which the government intends to make illegal.

The Garden Freedom website goes into greater detail regarding the legislation, who it will affect and which species of plants are to be classified as contraband. The list includes, but is not limited to; datura, cacti, wattle, salvia, ephedra (aka Mormon Tea) and assorted other species.

Personally I think this current move is ridiculous. As someone of a more libertarian bent, I think that people ought to be able to do whatever they like, including drugs, as long as the choice is freely made and does not impinge on the rights of others. Ideally that choice should be made only with a thorough understanding of the risks involved. I realise, of course, that most people in this world, especially politicians and law enforcement do not agree with me. So putting aside my views regarding personal freedom aside for the moment, this particular change in legislation is still ridiculous for the following reasons:

  1. Most of the chemicals listed which can be made from Australian plants are already illegal; the actions required to produce drugs like N,N-Dimethyltryptamine (DMT) are already covered by existing legislation. Legislating against plants such as acacias and cacti won’t make any real difference to the current illegality of DMT or mescaline.
  2. Most of the plants affected by this proposed legislation are incredibly common throughout the country, on both public and private land. It is quite likely that this will directly affect the gardens of a vast number of Australians, most of whom won’t even know (or care) the exact species of plants on their property. Likewise most of them won’t know (or care) that boiling the bark off several trees of these plants might produce a compound that will make someone vomit and then hallucinate (or vice-versa).
  3. Most, if not all, of the drugs being targetted by this legislation do not produce the same type of anti-social effects as alcohol or a number of synthetic drugs.
  4. The plants will not be able to be eradicated.
  5. Attempting to destroy the native plants proscribed by this legislation will have an adverse affect on the environment. Consider, for a moment, the number of acacias which produce flowers and how many bees visit those flowers to collect pollen to produce honey. That’s just one little link and there are many, many more.

Yet the Attorney-General wishes to make the growing and sale of thousands of Australian flora as illegal as marijuana.

As with most, if not all, government consultations and inquiries, submissions are accepted from the public. The closing date for this one is Friday the 11th of March.

Originally published at Organised Adversary. Please leave any comments there.

hasimir: (Default)
Tuesday, January 4th, 2011 06:24 am

For the last couple of years the Australian government has been strongly pushing a policy of Internet censorship; usually dubbed the Clean Feed, following the UK model. The first ACMA report from 2008 included some detail of attempts to filter more than just web traffic.

The ACMA report prompted me to analyse the methods by which the government might be able to achieve one of the options in the ACMA report: filtering HTTPS traffic. My report, Cleaning A HTTPS Feed: Report on the Filtering of the Hypertext Transfer Protocol over Transport Layer Security or Secure Socket Layer Connections, was first published last year by Atomic MPC Magazine and later by Civil Liberties Australia.

Since last year’s election and the precarious outcome, the government has announced a review of the classification system before making a final decision on how to proceed with an Internet censorship regime. In spite of the significant opposition to the scheme, both the Minister responsible, Senator Stephen Conroy, and Prime Minister Gillard have voiced continued support for censorship of the Internet.

As the government does not wish to drop this policy, I don’t wish my report into the implications of certain aspects of filtering to slip by. My full report on the methods of filtering traffic which is intended to be secure is available here (PDF).

Originally published at Organised Adversary. Please leave any comments there.