A keystroke away…

times_front

In 1939 there were about 140,000 Jews living in the Netherlands, including about 25,000 German Jews who had fled from Germany. By 1945, only about 35,000 of these people were alive. The Nazi extermination of Dutch Jews was remarkably efficient, mainly because Holland had been a well-administered state which kept very good records of its citizens, their addresses and their religions. So when the Nazis arrived, their genocidal task was easier than it was in some other occupied countries.

This horrific story neatly encapsulates the dilemma of the data-driven state. On the one hand, good governance requires that a state knows a lot about its citizens — where they live, what they do for a living, what taxes they pay, which schools their children can attend, and so on. Since 9/11, Western democracies have determined that the ‘war’ on terror (or the need to keep us safe, depending on your point of view) requires that the state needs to know an awful lot more about its citizens, and so comprehensive surveillance of their online and mobile communications, movements and financial transactions has been added to the government’s shopping list.

As we know from Edward Snowden and other sources, the scale and intrusiveness of this surveillance is now staggering. And — as the UK Investigatory Powers Bill shows, the state’s appetite for fine-grained personal data seems insatiable and is destined to grow.

Confronted with this new reality, one celebrated ex-spook remarked that we are “a keystroke away from totalitarianism”. What that means is that the information resources now available to states would be a godsend to an authoritarian regime that wasn’t restrained by constitutional niceties, civil liberties or human rights.

When one puts this point to spooks and government officials, however, their instinctive response is to pooh-pooh the idea. It may be technically true, they say, but — come on! — we live in a democracy and the chances of an authoritarian bully gaining power in such a polity are, well, infinitesimal.

Following the Brexit vote and Donald Trump’s ascendancy in the US presidential election, this complacency is beginning to look a bit strained.

Take the UK. It is, in general terms, a mature and stable democracy. And yet in the hours and days after the Brexit vote its government went into a meltdown from which it was only rescued by the emergence of the Home Secretary (a.k.a. Ministry of the Interior) as the sole survivor of a chaotic leadership competition in the governing party.

Meanwhile, on the other side of the Atlantic, a property-tycoon-cum-reality-TV-star who is unstable, narcissistic, racist, misogynistic, ignorant of world affairs, a proponent of torture and of deporting up to 11 million immigrants has come to within a hair’s-breadth of becoming President of the United States.

Contemplating this alarming possibility, optimists and realists both fall back on tropes about the extent to which presidential power is constrained by America’s constitutional structure. Trump may be terrible, they say, but the system would rein him in.

I wonder. And an interesting Reuters scoop this week illustrates the potential problem. It turns out that a government headed by a President who is a cautious legal scholar secretly compelled a major Internet company — Yahoo — to build a custom computer program to search all of its customers’ incoming emails for specific information provided by U.S. intelligence officials.

Just ponder that for a moment: an Internet company was forced to design and operate a bespoke, real-time email-wiretap service for the U.S. government.

“It remains unclear what form the directive took”, says The Intercept‘s report,

“though according to Andrew Crocker, an attorney with the Electronic Frontier Foundation, the best guess is that it invoked Section 702 of the Foreign Intelligence Surveillance Act, which permits the bulk collection of communications for the purpose of targeting a foreign individual.

But this Yahoo program doesn’t appear to have had even an ostensibly non-U.S. target. Rather, literally every single person with a Yahoo email inbox was evidently placed under surveillance, regardless of citizenship.

Even Prime Minister Theresa May might regard this as executive overreach — until the next terrorist outrage. But would President Trump? You only have to ask the question to know the answer.

So let’s have less complacency about the stability and implicit good sense of democracies. We’ve moved into uncharted territory.

The economics of P.G. Wodehouse

Nice Guardian column by Aditya Chakrabortty about the Tories’s political confusion. I particularly like this passage:

The problem with this cabinet is not that they lack ideas for Brexit Britain: not at all. It’s rather that they’ve got too many and most haven’t been baked for long enough. Consider cabinet minister Andrea Leadsom’s demand that Britons take up fruit-picking – while her colleague Jeremy Hunt urges them to train as doctors. Consider the Tories’ various barmy import-substitution plans, such as Liz Truss’s plaintive cry a couple of years ago that Britain imports two-thirds of its cheese and “That. Is. A. Disgrace”. Down one side of the cabinet, free-trade buccaneering; down the other, economic autarky on all dairy products. And on both sides, a preference for factoids over evidence and for blue-sky thinking over anything remotely serious.

Well, well. Fans of P.G. Wodehouse will recognise here some echoes of Roderick Spode, the Amateur Dictator and Leader of the Blackshorts. Spode’s economic policies, for example, included giving each citizen at birth a British–made bicycle and umbrella; banning the import of foreign root-vegetables; compulsory scientific measurement of all male knees; and stipulating that each English county should specialise in its manufacturing industry. Warwickshire, for instance, would specialise in the manufacture of umbrellas. Oh — and the national rail gauge should be widened, so that sheep could stand sideways in railway trucks.

Theresa May’s merrie band are not quite at Spode’s level yet, but they’re getting there.

Trump’s taxes

The New York Times‘s scoop on Trump’s taxes is interestingly provisional. But Trump hasn’t responded. Here’s why:

All the Times has is three pages of Trump’s records from 1995. Everything else is informed speculation, extrapolation, and the word “could,” which appears again and again through the article.

Think about how dangerous that was for the paper. Trump could have released his tax returns and proven them wrong. Trump could have shown their speculation to be mere speculation, and used it as a cudgel to discredit their reporting on his campaign. The Times was far, far out on a limb.

But the Times bet correctly. Trump still isn’t releasing his returns. And here’s what that means: whatever is in his returns is worse than what the New York Times is telling the world is in his returns. The Trump campaign has decided it prefers the picture the Times is painting — a picture where Trump didn’t pay taxes for 18 years — to the picture Trump’s real records would paint.

Yep.

The Internet of Insecure Things is up and running

This morning’s Observer column:

Brian Krebs is one of the unsung heroes of tech journalism. He’s a former reporter for the Washington Post who decided to focus on cybercrime after his home network was hijacked by Chinese hackers in 2001. Since then, he has become one of the world’s foremost investigators of online crime. In the process, he has become an expert on the activities of the cybercrime groups that operate in eastern Europe and which have stolen millions of dollars from small- to medium-size businesses through online banking fraud. His reporting has identified the crooks behind specific scams and even led to the arrest of some of them.

Krebs runs a blog – Krebs on Security – which is a must-read for anyone interested in these matters. Sometimes, one fears for his safety, because he must have accumulated so many enemies in the dark underbelly of the net. And last Tuesday one of them struck back.

The attack began at 8pm US eastern time, when his site was suddenly hit by a distributed denial of service (DDoS) attack…

Read on

Subduing wishes to possibilities

An excerpt from Francis Spufford’s Backroom Boys, a memorable history of the early British personal computer industry. He’s writing about how two Cambridge students, David Braben and Ian Bell, used ingenious mathematical tricks to get round the limited memory available on the BBC Model B when they were creating their trailblazing computer game, Elite:

Whether the components are atoms or bits, ideas or steel girders, building something is a process of subduing wishes to possibilities … A real, constructed thing (however dented) beats a wish (however shiny) hands down; so working through the inevitable compromises, losing some of what you first thought of, is still a process of gain … But sometimes the process goes further. Some of the best bridges, programs, novels – not all the best, but some – come about because their makers have immersed themselves in the task with such concentration, such intent openness to what the task may bring, that the effort of making wishes real itself breeds new wishes. From the thick of the task, in the midst of the practical hammering, the makers see further possibilities that wouldn’t have been visible except from there, from that spot, from that degree of engagement with the task … This is what happened when Bell and Braben wrote their game … It became great because they saw the possibility of it being great while they were just trying to make it good.

This is wonderful, insightful writing about the creative process.