Snowden meets Swedish lawmakers in Moscow to talk about surveillance, privacy issues

STOCKHOLM Three Swedish lawmakers have met Edward Snowden in Moscow to discuss surveillance and privacy issues.

Friday's meeting was organized by the Right Livelihood Award Foundation, which gave its annual human rights prize to Snowden last year. The former National Security Agency systems analyst sought shelter in Russia after leaking details of the United States' once-secret surveillance programs.

In a statement from the foundation, Snowden said he discussed mass surveillance, privacy and transparency with the lawmakers and added "I hope to see them soon again in Sweden."

If he leaves Russia, Snowden would risk arrest and extradition to the U.S., where he's been charged under the Espionage Act.

The Swedish lawmakers were from the Green Party the junior member of Sweden's coalition government and the Moderate and Liberal parties.

Read more from the original source:
Snowden meets Swedish lawmakers in Moscow to talk about surveillance, privacy issues

Snowden’s leaks served only to strengthen the NSA’s resolve

Edward Snowden is heralded as both a hero and villain. A privacy vigilante and a traitor. It just depends who you ask. The revelations he made about the NSA's surveillance programs have completely changed the face of online security, and changed the way everyone looks at the internet and privacy.

But just before the whistle was blown, it seems that the NSA was considering bringing its telephone data collection program to an end. Intelligence officials were, behind the scenes, questioning whether the benefits of gathering counter-terrorism information justified the colossal costs involved. Then Snowden went public and essentially forced the agency's hand.

With a massive public backlash against what the NSA had been doing, the agency was obviously keen to defend what it had been doing. Whatever attacks were thrown by privacy advocates, individuals and civil liberties campaigners, the NSA had a trump card. Fighting terrorism. The agency would, of course, never admit that perhaps it was going too far, or that its operations were costing too many millions of dollars; it had to vigorously defend what it had been doing.

The NSA became so wrapped up in defending what it had already been doing, that it managed to convince itself of the worth of continuing its work. After all, if the activities had been justifiable before, do they not continue to be justifiable? The 'threat' of terror attacks is something that has become part of the media and governmental narrative, seared into the public consciousness.

We havent been told that terrorist threats had vanished or even diminished; if anything, the threat -- if we're to believe what we're told -- is greater than ever. Throw 'defense of America' into the equation, and you can get away with just about anything. Chuck in a few instances of the word 'terror' for good measure, and you're good to go.

The Associated Press makes the surprising suggestions about the NSA's doubts about what it was doing. The timing is interesting as we are approaching the deadline by which the law authorizes the collection of phone data (June 2015). The NSA has managed to persuade itself of the value of various surveillance programs over the years, and Congress will take quite some convincing if the law is to be changed such that the programs are outlawed.

This is not the first time that it has been suggested that Snowden's revelations had an unexpected side-effect. A data sharing agreement between the NSA and the UK's GCHQ was, essentially, made legal because of the fact that Snowden had made it public. Up until that point it had been illegal for the two intelligence agencies to share information in the way they had been but once the cover was blown it was rather a different story.

It would be very surprising to see the NSA back down now. Even if we were told that phone, email, and other data collection was coming to an end, how many would believe it to be true? It was happening in the background before, who's to say that would not just continue?

Photo credit: Maren Wulf / Shutterstock

Read this article:
Snowden's leaks served only to strengthen the NSA's resolve

Before Snowden’s leak, NSA mulled ending data-collection program

WASHINGTON The National Security Agency considered abandoning its secret program to collect and store American calling records in the months before Edward Snowden leaked the practice, current and former intelligence officials say.

Some officials thought the program's costs outweighed the meager counterterrorism benefits. After the leak and the collective surprise around the world, NSA leaders strongly defended the phone records program to Congress and the public, but without disclosing the internal debate.

The proposal to kill the program was circulating among top managers but had not yet reached the desk of Gen. Keith Alexander, then the NSA director, according to current and former intelligence officials who would not be quoted because the details are sensitive. Two former senior NSA officials say they doubt Alexander would have approved it.

The behind-the-scenes NSA concerns, which have not been reported previously, could be relevant as Congress decides whether to renew or modify the phone records collection when the law authorizing it expires in June.

The internal critics pointed out that the already high costs of vacuuming up and storing the "to and from" information from nearly every domestic landline call were rising, the system was not capturing most cellphone calls, and the program was not central to unraveling terrorist plots, the officials said. They worried about public outrage if the program ever was revealed.

After the program was disclosed, civil liberties advocates said the records could give a secret intelligence agency a road map to Americans' private activities. NSA officials presented a forceful rebuttal.

Responding to widespread criticism, President Barack Obama in January 2014 proposed that the NSA stop collecting the records but instead request them when needed in terrorism investigations from telephone companies, which tend to keep them for 18 months.

Yet Obama has insisted that legislation is required to adopt his proposal, and Congress has not acted. So the NSA continues to collect and store records of private U.S. phone calls for use in terrorism investigations under Section 215 of the Patriot Act. Many lawmakers want the program to continue as is.

Alexander argued that the program is an essential tool to hunt for domestic plots. He and other NSA officials support Obama's plan to let the phone companies keep the data, as long as the government quickly can search them.

Some fault NSA for failing to disclose the internal debate about the program.

Read the original:
Before Snowden's leak, NSA mulled ending data-collection program

One dead in fatal shooting at NSA headquarters

A shooting occurred at the gates of the National Security Agency in Fort Meade, Maryland, leaving one person dead and another injured.

According to Fox 5 in Washington D.C., the incident escalated after a car tried to bypass security at an entrance to the NSA facility at around 9 a.m. Monday morning. Authorities are yet to provide a motive for the incident, however, they have given a detailed description of the events that led to the fatal shooting.

Update on 3-30-2015: Added changed number of perpetrators, included comments from Fort Meade commander andNSA spokesman, as well as details about the stolen car used in the incident.

NSA spokesman John Freed told ABC News that the driver disobeyed routine instructions for safely exiting the secure campus, which led security personnel to put up barriers. The driver was said to have sped toward an NSA police car that was blocking the road. Officers shot at the vehicle when the driver refused to stop. In addition to the two people in the car, a police officer was also hurt in the incident.

Related:Tech giants demand an end to NSA spying, as Patriot Act is set to expire

CBS Baltimorereported that one person died and another was sent to the hospital. Fort Meade Garrison Commander Brian Foley told the Associated Press that the shooting has been contained, and there is an ongoing investigation. He said that the residents, service members, and civilian employees at the installation are safe, adding that they will continue to remain vigilant at all of our access points.

Initially, there were conflicting reports about the gender of the perpetrators, however, NBC News said that the perpetrators were men disguised as women. When the car was searched after the incident, police found wigs, a weapon, and some cocaine. Mary Phelan, a spokeswoman for the Howard County Police Department, told the Associated Press that the car used in the incident was stolen from a hotel in Jessup, Maryland.

The FBI has taken over the investigation. For now, authorities are saying that the incident can not be linked to terrorism.

FBI Baltimore is investigating a shooting incident which occurred this morning at a gate at the National Security Agency at Fort Meade just off I-295 in Anne Arundel County, MD. The shooting scene is contained and we do not believe it is related to terrorism, the agency wrote in a statement. We are investigating with NSA Police and other law enforcement agencies. Our Evidence Response Team is processing the crime scene, and FBI Agents are doing joint interviews with witnesses. We are working with the U.S. Attorneys Office in Maryland to determine if federal charges are warranted. We have no further information at this time to release.

A similar security incident occurred in Fort Meade earlier this month. Hon Young, who was behind a shooting in the area, was caught after officers recognized his car from surveillance footage. This is a breaking news story, so details are still murky. Well update this article when authorities make further announcements.

Read the original post:
One dead in fatal shooting at NSA headquarters

Surveillance And The Encryption Boogeyman

In January of this year, British Prime Prime Minister David Cameronlet it be known that he intended to dumb down encryption so that law enforcement could monitor all of the information streaming across the country. A direct attempt to capitalize on the Paris attacks. This was an unfortunate overture against encryption and privacy in general. Sure, he is stumping for votes with his electoral base but, this is by no means the first or the last time this sort of rhetoric has popped up.

Today news about a police chief with Europol was advocating against encryption as it gives criminals a leg up.

From BBC:

A European police chief says the sophisticated online communications are the biggest problem for security agencies tackling terrorism.

Hidden areas of the internet and encrypted communications make it harder to monitor terror suspects, warns Europols Rob Wainwright.

Tech firms should consider the impact sophisticated encryption software has on law enforcement, he said.

The irony being that the Europol website defaults to TLS 1.2. This is security technology designed to protect communications across a network. When I check the connection to the Europol website it presents this message, Your connection to http://www.europol.europa.eu is encrypted with modern cryptography. I cant help but chuckle.

The part of this that troubles me is that this comes on the heels of the Cameron statements about encryption. Now we hear about this from a law enforcement organization. The spectre of the terrorist boogeyman is getting trotted out more often. The difficulty is that this use of fear uncertainty and doubt will have unfortunate repercussions for perfectly innocent people.

Make no mistake, there is a need for law enforcement to have mechanisms in place to combat crime but, they have those. They are called laws. The problem here is that law enforcement and government have found that there are easier ways to get the information they want/need. The documents Edward Snowden leaked illustrated that this has become a serious problem.

Read more:
Surveillance And The Encryption Boogeyman

European police chief: Encryption is the ‘biggest problem’ in tackling terrorism

Wikimedia/YtoyodaEuropol director Rob Wainwright

A European police chief has spoken out against encryption, describing it as the "biggest problem" in tackling terrorism, the BBC reports.

Europol director Rob Wainwright said that the rise in use of secure messaging platforms that cannot be decrypted by law enforcement under any circumstances has "become perhaps the biggest problem for the police and the security service authorities in dealing with the threats from terrorism."

In the wake of multiple revelations about the extent of government surveillance of citizens' communications, there has been a surge in use of encrypted software that cannot be decrypted by companies or authorities if the user refuses to surrender their password. In particular, Google and Apple both promised to encrypt the data stored on Android and iOS devices by default (although Google has postponed implementation because the technical demands of encryption was crippling users' phones).

This hardened stance from technology companies has infuriated authorities, who see encryption as a significant challenge to monitoring potential criminal and terrorist threats. Previously, a senior US cop has said that introducing encryption by default will make the iPhone "the phone of choice for the paedophile."

British Prime Minister David Cameron has also spoken out against the spread of encryption technology, apparently promising to outlaw it if he is re-elected in May 2015. "[Do] we want to allow a means of communication between two people which even in extemis with a signed warrant from the home secretary personally that we cannot read?" he asked. "My answer to that question is no, we must not."

AP Photo/J. Scott ApplewhiteApple CEO Tim Cook has spoken out in favour of strong encryption tools.

However, security experts have condemned such suggestions. Strong encryption tools are already widely available they ensure online payments can be made securely, and journalists and activists use them to communicate with sources. It's unlikely that many other tech companies would even comply with a ban, if passed into law Apple CEO Tim Cook previously said that the company has "never worked with any government agency from any country to create a backdoor in any of our products or services... And we never will."

Nonetheless, Wainwright is critical of companies like Apple. "We are disappointed by the position of these tech firms and it only adds to our problems in getting to the communications of the most dangerous people hat are abusing the Internet." He told the BBC he believes the increase in encryption is "because of a greater commercial imperative driven by what they perceive to be consumer demand for greater privacy of their communications."

Wainwright adds that encryption has "changed the very nature of counter-terrorist work from one that has been traditionally reliant on having good monitoring capability of communications to one that essentially doesn't provide one any more."

See the rest here:
European police chief: Encryption is the 'biggest problem' in tackling terrorism

Govt announces open source software policy

Govt announces open source software policy

New Delhi: The government has announced a policy for adopting open source software (OSS), making it mandatory that such software is considered along with proprietary products, as it looks to bring in transparency and lower total cost of ownership of projects.

The policy shall be applicable to Central government organisations and and those State governments that choose to adopt this policy, an official statement said.

"Under the overarching vision of Digital India, Government of India aims to make government services digitally accessible to citizens in their localities and to ensure efficiency, transparency and reliability of such services at affordable costs," it said.

It added that organisations worldwide have adopted alternative solutions to optimise costs by exploring avenues of OSS and the Policy will encourage the formal adoption and use of OSS in government organisations in the country.

Under the Policy, all government organisations, while implementing eGovernance applications and systems will have to include a specific requirement in Request for Proposal (RFP) for all suppliers to consider OSS along with closed source software (CSS) while responding.

Suppliers will have to provide justification for exclusion of OSS in their response, in case they do not do so.

"Government organisations shall ensure compliance with this requirement and decide by comparing both OSS and CSS options with respect to capability, strategic control, scalability, security, lifetime costs and support requirements," it said.

In certain specialised domains where OSS solutions are not be available, the concerned government organisation can consider exceptions "with sufficient justification", it said.

Communications and IT Minister Ravi Shankar Prasad had said CSC codes, which are proprietary, used to be monopolistic as there is not only a lockin but vendors also charge heavily for maintenance and subsequent updates.

Original post:
Govt announces open source software policy

How open source can bring NHS IT back to the future

Open source has the power to revolutionise the NHS, but it's an issue of confidence

In many respects open source software is not really understood within healthcare. A lot of people hear about it and imagine a teenager who downloaded a piece of code off the Internet. The lack of control and ownership of the code is seen as a risk to clinical safety. And they would be right if that were the case.

But the open source approach in the NHS is not new. In the 80s and early 90s, the health service used to write its own software, just as open source programmers are doing now. In-house programmers spoke to clinical and administrative colleagues, and developed software that would help them deliver more efficient care.

Back then, teams ran a fully-integrated suite of systems. These were well-received, and are still used today by some organisations. I recall the South West Information Team writing a patient administration system (PAS) for the whole of the South West of England imagine the time, effort and cost associated with that type of project today.

> See also: Making the paperless NHS a practical reality

Somewhere along the line the NHS lost confidence and belief that it could do this in-house and began contracting out IT development. The start of the 21st century saw software suppliers working alongside clinicians but this approach had its limitations. Any IT functionality developed would be sold back to individual trust by suppliers rather than shared for the wider benefit of the NHS. The result? IT costs soar and trusts are unable to combine or promote best practice of technology projects.

Same problems, different solutions

As a taxpayer and an NHS employee I realise that every penny is precious. Healthier lifestyles and better drugs means our population lives longer, and we do not have sufficient funding to help manage long-term complex conditions. We either need more investment, or have to make better use of current resources.

IT is just one area of healthcare that needs more money. What can we do as an IT department to overcome this challenge? Think outside the box. PAS systems from the mid-90s worked for a fraction of the cost compared with todays market. They were affordable systems that delivered results. How can we achieve this now?

Funding bids can help with purchasing technology, but the recent Integrated Care Digital Record bid process highlighted some downsides. Having been through a bidding process and advised that the open source programme was one of the key priorities for the NHS, we then heard nothing for months which makes it very hard for trusts to plan their finances in already difficult circumstances. But thanks to the affordability of open source, we can still press ahead with our open source EPR project.

Read the original:
How open source can bring NHS IT back to the future