We are developing the social individualist meta-context for the future. From the very serious to the extremely frivolous... lets see what is on the mind of the Samizdata people.

Samizdata, derived from Samizdat /n. - a system of clandestine publication of banned literature in the USSR [Russ.,= self-publishing house]

RFID-enabled license plates to identify UK vehicles

RFID news reports that the UK-based vehicle licence plate manufacturer, Hills Numberplates Ltd, has chosen long-range RFID tags and readers from Identec Solutions to be embedded in licence plates that will automatically and reliably identify vehicles in the UK.

The new e-Plates project uses active (battery powered) RFID tags embedded in the plates to identify vehicles in real time. The result is the ability to reliably identify any vehicle, anywhere, whether stationary or mobile, and – most importantly – in all weather conditions. (Previous visually-based licence plate identification techniques have been hampered by factors such as heavy rain, mist, fog, and even mud or dirt on the plates.)

The e-Plates project has been under development for the past three years at a cost of more than £1 million, and is currently under consideration by a number of administrations. It is hoped that e-Plate will be one of the systems trialled by the UK Government in its forthcoming study of micro-chipped licence plates.

Brought to my attention by Stephen Hodgson of Unpersons.net. Thanks.

Biometrics Bandwagon Outpacing Privacy Safeguards

Jay Cline writes for ComputerWorld:

Governments and corporations increasingly see biometrics as the primary way they’ll identify people in the future. In an age of terrorism and fraud, they hope fingerprint and eye scanning will become the cheapest and most reliable means of verifying that people are who they say they are. But are we ready for this convergence of computers with our flesh and bones? I don’t think so. This significant intrusion into our personal space needs a heightened level of privacy protection that most organizations have only just started to envision.

I have a deeper misgiving about biometrics. Because they promise to be much more cost-effective and reliable than traditional authentication methods, I expect businesses will want to adopt biometrics-only authentication, discarding expensive traditional methods.

Three types of system failures could make your life miserable: a failed match, a mistaken match and stolen biometrics… Biometric ID theft victims may never fully clear their names.

Cline goes on to give a checklist of the top controls customers and citizens should demand before cooperating with biometric systems. Since I think that should be never, if you want to know, you’ll have to go and read it yourself…

Watchdog’s ‘alarm’ over ID cards

Plans for a national ID card scheme risk changing the relationship between the British state and its citizens, the information watchdog has warned.

Richard Thomas, Information Commissioner, said he had initially greeted the plans with “healthy scepticism” but the details had changed his view to “increasing alarm”. The government hopes a pilot scheme will pave the way for compulsory identity cards within the next decade. Mr Thomas told MPs the scheme was “unprecedented” in international terms.

Mr Thomas told the MPs that it was now clear the scheme was not just about identity cards but about a national identity register.

This is beginning to represent a really significant sea change in the relationship between state and every individual in this country.

It is not just about citizens having a piece of plastic to identify themselves. It’s about the amount, the nature of the information held about every citizen and how that’s going to be used in a wide range of activities.

Mr Thomas said that if the ID cards did work out as the government planned they would be “a very, very attractive proposition for criminals”.

Yes, let’s see whether Mr Thomas’s words make any difference to Big Blunkett… I guess not.

Testing the EU Arrest Warrant

The European Union instituted a European wide arrest warrant in order to speed extradition between Member States, without providing some of the basic precautions that a citizen would expect before being deported to a foreign country. These were established to promote the development of a European ‘judicial space’ under the guise of fighting the ‘war on terror’: an old chestnut these days in the campaign to undermine and reduce civil liberties.

However, the EU arrest warrant is running into the obstacles and minefields of laws and judgements. A recent case involved three French citizens, accused of belonging to a group, that Spain considers to be a terrorist and criminal organisation.

A French court on Tuesday rejected a Spanish request for the extradition of three French people accused of being members of an organisation suspected of financing Basque separatist group ETA, judicial sources said.

Amaia Rekarte, Yves Matxikote and Harritza Gallaraga were detained last month — but later released pending the court’s ruling — after Spain demanded their extradition on charges of belonging to a criminal and terrorist group.

The three accused belong to an organisation, Segi, with Basque sympathies and posssible links to ETA, the Basque terrorist group. However, membership of the organisation is not banned under French law, and Spain was requesting extradition for the three on actions conducted legally in France, whilst being illegal in Spain. It is not clear if the three acted in France alone or in Spain as well.

This appears to have been a ‘fishing trip’ to arrest three Basque sympathisers. It failed as the French judge in Pau argued that French citizens should not be extradited if their actions were legal in their own Member State. The European Commission played down the judgement:

The ruling appears to be a blow to the ambition behind the EU arrest warrant, which was to facilitate extradition in terrorism cases. However, the EU Commissioner for Justice and Home Affairs, Antonio Vitorino, does not want to overdramatise the importance of the case. “This is a case of conflicting competences between judges. The arrest warrant as such has not been called into question,” said spokesman Pietro Petrucci to EurActiv.

ETA has murdered over 800 men, women and children since 1968 in pursuit of an independent Basque state. The Spanish are understandably enthusiastic in their wish to prevent further murders in this cause.

Guilty until proved innocent

It is a long time since I have contributed anything to White Rose. And it is a long time since this article by journalist and novelist Alexandra Campbell appeared, in the Telegraph, on May 14th. Apologies on both counts, but better occasional contributions and late reports of White Rose relevant material than never, I hope you agree.

This article did not just appear in the Telegraph. It was also reproduced in full, in the “last word” slot, towards the end of the “all you need to know about everything that matters” magazine (i.e. lots of good bits from all the different British newspapers) The Week, of May 29th, Issue 462. That was where and (approximately) when I first read the piece.

Ms. Campbell, on the basis of vague CCTV “evidence”, was falsely accused of a crime, and it took a scarily long time for the system to stop persecuting her.

Concluding paragraphs:

“In theory,” said Mark, “it’s innocent until proved guilty. In practice, whoever makes the allegation first is believed.”

Now that we are all picked up on CCTVs up to 300 times a day, and can also easily be identified electronically through swipe cards (health clubs, the office, season tickets, etc), there is a real risk of someone linking you to a passing resemblance on a fuzzy CCTV image and making an allegation against you.

It had taken about eight months to get to this point of the inquiry and I was terrified of enduring months’ more worry before I was cleared, but the police followed up my brother’s statement quickly and dropped the charges. However, they told me that current policy is to leave fingerprints, pictures and allegations permanently on file.

Checking subsequently with the police press office, I find that “fingerprints may not be held for more than 42 days”, but I find it scary that nobody really seems to know. I suspect our civil rights are being chipped away all the time in the name of crime and terrorism prevention.

The whole thing, I discovered, was based on a breach of the Data Protection Act. Companies using CCTV are supposed to show images only to authorised people, such as the police. The supermarket involved should never have allowed the receptionist and the credit card victim to see footage on demand. The receptionist, himself in charge of CCTV, should have known this. He wasn’t even following his own company’s code of practice, which asks staff who are suspicious of members to take the matter to a manager first. But he has done nothing illegal.

And neither have I. But while I struggle to have my records deleted from police files, he has drifted on and cannot, so far, be contacted. Nobody knows if he made the allegation out of boredom, spite, or genuine, if misplaced, civic-mindedness. It’s Kafkaesque, said friends. It’s a joke, said others. But it wasn’t fiction and it wasn’t funny. I was actually very lucky.

I might not have been able to prove where I was. If I’d been a lawyer, police officer, accountant or worked in financial services, my career and livelihood would also have been on the line, and if I’d been a celebrity, the story would have been splashed all over the papers before it was disproved. If the allegation had been connected to terrorism, I would have been jailed immediately.

I used to think that if you didn’t break the law, you had nothing to fear from it. Now I know that if this can happen to me, it can happen to anyone.

RFID and privacy: Debate heating up in Washington

Privacy advocates and some lawmakers are pushing a debate over potential privacy abuses from the growing use of radio frequency identification chips as huge retailers such as Wal-Mart Stores Inc. move toward large-scale use of the technology.

They see the potential for retailers and other companies to be able to track consumers long after a consumer purchases an item – for example, a tennis shoe manufacturer scanning a sporting event for the number of people wearing its product.

Those advantages are why large retailers such as Wal-Mart and Target Corp., as well as government agencies such as the U.S. Department of Defense (DOD), are embracing RFID technology as a way to improve their supply-chain efficiency. Wal-Mart, leading the way on RFID adoption, plans to phase in use of RFID, with major suppliers of its north Texas stores required to use RFID chips on pallets and cases by January 2005. The DOD plans to require suppliers to use RFID tags by early 2005.

But early experiments with RFID haven’t gone smoothly, at least in the public relations arena. In early 2003, Wal-Mart and The Procter & Gamble Co. tested the use of RFID chips on individual packages of lipstick in an Oklahoma store, and the supposedly secret test raised the hackles of privacy advocates everywhere. The RFID chips allowed Wal-Mart to track the customers as they took the lipstick off shelves.

Wal-Mart’s test of RFID chips on individual products also prompted Senator Patrick Leahy, a Vermont Democrat, to suggest that federal legislation may be necessary at some point. He criticized what he called Wal-Mart’s “clandestine” testing of RFID.

In November, a group of privacy advocates, including the American Civil Liberties Union and the Electronic Frontier Foundation (EFF), issued a position statement on the use RFID in consumer products. The statement called for retailers to give notice to consumers when RFID chips are being used, what the purpose is and to have security measures in place verified by third parties.

The statement (pdf) calls on merchants to voluntarily comply with RFID privacy measures, and asks retailers to comply with a moratorium on item-level use of RFID chips until a technology assessment involving consumers and other stakeholders can be completed. The statement asked retailers not to force consumers to buy products with RFID tags and advocated that consumers should be able to remove or disable the tags, but the statement did not advocate federal legislation.

Ari Schwartz, associate director of the Center for Democracy and Technology (CDT), one of the groups signing on to the November privacy statement.

There has to be a way to kill these chips. The question is really what it’s used for and how it’s done, rather than the technology itself. Most of the benefit out there comes on the back end, in the stock room, and most of the privacy concerns come when it leaves the stock room.

Most retail uses of RFID so far are limited to stock rooms, and with retailers and vendors open to privacy discussion, Schwartz doesn’t yet see the need for federal legislation.

Up and down… and up again tomorrow

For those who have already visited White Rose earlier today and noticed that the article One for the heart, is missing. It was written for someone else and forwarded to me for information only. We hope to get it cleared with the publication for which it was originally destined and aim to re-post it tomorrow. Apologies to those who were inconvenienced.

Mistaken Identity, missing politicians

A belated account of Mistaken Identity, a public meeting on ID cards that took place in London last week. Unfortunately, we missed it as we were in Geneva protesting against something else. Fortunately, Stand have recorded the event and Privacy International has the full address by the President of The Law Society.

Thanks to infinite ideas machine (link now added to the blogroll)

U.S. Nearing Deal on Way to Track Foreign Visitors

The Department of Homeland Security is on the verge of awarding the biggest contract in its young history for an elaborate system that could cost as much as $15 billion and employ a network of databases to track visitors to the United States long before they arrive.

The program, known as US-Visit and rooted partly in a Pentagon concept developed after the terrorist attacks of 2001, seeks to supplant the nation’s physical borders with what officials call virtual borders. Such borders employ networks of computer databases and biometric sensors for identification at sites abroad where people seek visas to the United States.

With a virtual border in place, the actual border guard will become the last point of defense, rather than the first, because each visitor will have already been screened using a global web of databases.

Visitors arriving at checkpoints, including those at the Mexican and Canadian borders, will face “real-time identification” — instantaneous authentication to confirm that they are who they say they are. American officials will, at least in theory, be able to track them inside the United States and determine if they leave the country on time.

Whoever wins the contract will be asked to develop a standard for identifying visitors using a variety of possible tools — from photographs and fingerprints, already used at some airports on a limited basis since January, to techniques like iris scanning, facial recognition and radio-frequency chips for reading passports or identifying vehicles.

Let’s hope that such a ‘high-concept’ plan will be above the ability of governments to organise such monumental projects. After all they say, hope springs eternal…

Scots jump on board UK biometric ID card trial

The UK government’s biometric ID card trial is gathering momentum with Glasgow the latest city to go live with iris, fingerprint and facial recognition testing. The nationwide trial aims to enrol 10,000 volunteers around the UK who will have their biometric details recorded and put on a chip in a mock smart card. Testing started in April in London and will run through until August.

Glasgow now joins London, Leicester and Newcastle in the project and a mobile unit will travel around other parts of the country including Wales and the Home Counties.

The project has been hit by some teething problems in pre-trial tests, which highlighted defects in collecting and reading some of the biometric data. Civil liberties and privacy groups this week also formed an alliance in opposition to the introduction of ID cards to the UK.

“Blunkett’s ID card argument is specious”

Those are the words of Simon Moores of Zentelligence (Research) writing in Computer Weekly.

In a review of last week’s London public meeting, Moores begins by saying:

Never had I seen a pillar of government policy look so demonstrably fragile and flawed.

He concludes:

Blunkett’s ID card argument is specious and really not worth the plastic it may be printed on.

Cross-posted from the UK ID Cards blog

ID card backlash: is the poll tax effect kicking in?

Register notes that UK public support for ID cards is declining, while opposition is hardening, and a surprising number – perhaps five million – would be prepared to take to the streets in opposition, according to a new opinion poll released today. The results, although they still show 61 per cent in support of the scheme, show committed opposition in sufficient numbers for poll tax-style disruption to be a very real possibility.

Since last month’s Detica survey, numbers strongly opposed to any kind of ID card have doubled from 6 per cent to 12 per cent. Within the opposition 28 per cent, which would translate as 4.9 million in the population as a whole, say they would participate in demonstrations, 16 per cent (2.8 million) would get involved in “civil disobedience” and 6 per cent (around a million) would be prepared to go to prison rather than register for a card. Talk is of course cheap at this stage, but this is still an indication of seriously vehement opposition just a few weeks after the scheme was unveiled, and even the more favourable (for the Government) Detica poll showed quite clearly that the vast majority of people knew practically nothing of what the scheme entailed. And the more they learn, the less they may like it.

The latest survey was commissioned by Privacy International and conducted by YouGov, and obviously its intentions differ from the Detica survey, so the results are not always directly comparable. But some of the most interesting numbers stem from the differences. YouGov found that in addition to losing numbers, support is weakening, with people less sure, and rather lower numbers prepared to go for a compulsory scheme (which, ultimately, it will be). And some of the key components are decisively rejected by the public as a whole, which is what you might call a bit of a problem. Most (47 per cent versus 41 per cent) don’t want to have to tell the government when they change their address, and 24 per cent strongly oppose revealing it in the first place.

It is of course utterly illogical for people to be in favour of the scheme while opposing aspects of it whose removal would render it (as currently envisaged) unworkable. But The Detica poll also showed that support of the scheme was based on some pretty staggering misconceptions, so perhaps what we have here is a picture of a nation on its way to an education – as they join the dots up, it’s surely rather more likely that they’ll begin to reject the scheme as a whole, rather than, say, concluding it’s OK for the government to keep tabs on your address after all.

Link via Curiouser and curiouser!