I would urge everyone who can to sign the petition against it.
This, in my mind is a problem, not because of the obvious costs (ISPs storing _literally all_ metadata for a year), and the insidous privacy concerns, but how bad Govts are at keeping information secure. Below are 3 recent and well known examples of Government Mass Data leaks- this information will be compromised at some point, for profit or espionage.
IMHO, trotting out "If you've got nothing to hide, you've got nothing to fear" BS doesn't mean that at some point, that data will be misused, even if the UK (My) Government doesn't suddenly turn dictatorial.
I have lots to hide, and I have plenty to fear from the current government. I sincerely doubt that there's anybody out there who doesn't. I'm not going to worry too much about GCHQ and other Security Services, because I seriously doubt they'll be making any requests - I have no doubt that they have a far more comprehensive database in place already, and they're only included in the proposal to lend an air of legitimacy to the proceedings.
What concerns me is the sheer number of groups that are being given access from the start, not because of who is on it, but because somebody has compiled that list in the first place. It suggests that there is already a longer term plan in place for the use of this data, and these are the entities who will need access to achieve that end. Otherwise, surely the approach would be a lot more cautious - "We'll limit it to GCHQ and the Secretary of State for now, and all requestss can go through the SoS. That will give us an idea of who actually needs this data on a case by case basis, and we can tweak the legislation as necessary based on that."
Then you look a little closer at some of the entries. Why would the Fire Service need access? Nothing in their job involves anything to do with individuals, at least not to the degree that they have any requirement for access to any data about them. Well, it doesn't say Fire Service. It says "Fire and Rescue Authorities under the Fire and Rescue Services Act 2004". Take a look at that act. Unless you're in Greater London, your fire and rescue authority is your local council. Why did they feel the need to slip your council in through the back door like that? Granted, access is limited to "Watch Manager (Control)", which sort of sounds like a Fire Service position, but it's vague enough that you could legitimately assign that job title to a Traffic Warden's supervisor without anybody batting an eye.
Why do the Food Standards Agency need access? Access for them is restricted to Grade 6, which doesn't seem to have any job title definitions, only a pay range - as of August 2015 it was £54,000 to £69,500. So any person who commands that salary, regardless of whether they need it for that job, will have this access? That doesn't seem a particularly clever way to manage data access.
I don't have anything to hide- but a malicious attacker could easily cause me to.
Step One: Maliciously cause the target to click on a link or open a url (Phishing, Exploit, RFE, XSS etc)
Step Two: With JS, one can easy introduce HTTP connections to any number of websites, such as maybe the Taliban's official website (They have one!), Google Searches for (to think of a few) "Gaziantep Places to Stay", "Turkey Flights", "Opposition to the Kuffar at home", "Dabiq Magazine", "how to join the Khalifah" etc
This could easily be done in a realisic appearing manner, especially to ISP/GCHQ filters and alerts.
Step Three: If any of this tallies with any physical activity (Let's say the target wanted to go Clay Pigeon Shooting, or Visited a Gun Club because he has in interest in .22 target shooting), then they have a case.
Sure, it's defendable, and this is a really simplistic example. But it's basically ruined the target's life.
Remember, it's probably not the "Government" doing this, as this info will be leaked.
EDIT: heck, I'll be stuffed- I tend to actively visit /r/combatfootage...
> Granted, access is limited to "Watch Manager (Control)"
FFS, are they deliberately choosing the creepiest sounding job titles to give access to?! Sure, it sounds fine when it's linked to the Fire Service, but it sounds dodgy as hell when applied to the Internet Snooper Service.
Here's a nasty example of where this is going. Agencies will be able to compile "watches" on searches across the UK.
The Food Standards Agency will have a trigger for anyone that searches for "Salmonella" for example. They then cross reference the source IP address to any restaurants. Then they march in there and close it down.
This, in my mind is a problem, not because of the obvious costs (ISPs storing _literally all_ metadata for a year), and the insidous privacy concerns, but how bad Govts are at keeping information secure. Below are 3 recent and well known examples of Government Mass Data leaks- this information will be compromised at some point, for profit or espionage.
https://en.wikipedia.org/wiki/Office_of_Personnel_Management...
http://news.bbc.co.uk/1/hi/uk/7449927.stm
https://www.troyhunt.com/when-nation-is-hacked-understanding...
IMHO, trotting out "If you've got nothing to hide, you've got nothing to fear" BS doesn't mean that at some point, that data will be misused, even if the UK (My) Government doesn't suddenly turn dictatorial.