Investigatory Powers Bill: ISPs to keep 1yr of your browsing history

[HEXUS]

Access to the records will require judicial authorisation.

Read more.

[Kovoet]

This place is getting worse by the day.

[cheesemp]

I can see why they are ask for it from a simple point of understanding but won't the bad guys just use things like tor and be untraceable anyway? and if so what is the point?

[jimbouk]

Hmmm, think it's time to start using Tor. Oh well.

[OilSheikh]

Will the Movie, music and game studios have access to this data ?

[maxp779]

Might be time to conquer my fear of spiders and move to Australia... or use a proxy.

[Corky34]

Will the Movie, music and game studios have access to this data ?

I could be mistaken but i don't think we know anything for sure yet as the bill isn't published until later today, all reports so far are nothing more than leaks and speculation, once people get their hands on the bill it's probably going to take a while before we know the full extent of the changes.

[Roobubba]

It shows that the government is completely out of touch with reality. The effects of this proposal are as follows:
No effect on terrorists - they'll all be using encryption anyway.
Increased cost to all users - storage of large amounts of data forced upon ISPs will be passed on to the users, not to mention the additional costs they will face in staffing requests to access the data, and staff costs of managing the extra resources required.
Increased opportunity for hackers to compromise yet more personal data.

It's official. We are being governed by imbeciles. :/

[Corky34]

No effect on terrorists - they'll all be using encryption anyway.

Based on the incomplete information we have so far, that they're going to store either the IP address or possibly just the primary URL's on port 80 that information is far more valuable to the security services than the content, with the metadata you can create a relationship database, whose talking to who, how important that person is, etc, etc.

The metadata is what would be used to identify potential targets then if needed a warrant would be sort to intercept the content, if as you hypothesis a potential terrorist uses encryption and they couldn't intercept the content in transit then that's not a problem as the security services have the power, both technically and legally to use computer network exploitation: aka hacking to either get the decryption key or intercept the data before it's encrypted.

Increased cost to all users - storage of large amounts of data forced upon ISPs will be passed on to the users, not to mention the additional costs they will face in staffing requests to access the data, and staff costs of managing the extra resources required.

Again based on what's been leaked the costs won't be passed onto the ISP's users, the ISP's are however going to be compensated for any costs they incur from the government, in effect the costs are going to be borne by tax payers.

[abaxas]

Ermmmm,

ISPs have been loggin DNS requests or years.....

[DanceswithUnix]

Ermmmm,

ISPs have been loggin DNS requests or years.....

Interesting, I guess that makes my use of a home DNS resolver look suspicious

[shaithis]

Be interesting to see at what level this would work at?

DNS or packet inspection of ports 80 and 443.....if it's DNS, will google, OpenDNS etc be classified as ISPs?

[abaxas]

Be interesting to see at what level this would work at?

DNS or packet inspection of ports 80 and 443.....if it's DNS, will google, OpenDNS etc be classified as ISPs?

Couldn't they just transparent proxy, like freeserve used to?

[Corky34]

Or maybe just change your DNS servers to ones outside the UK?
A bit early to know how they plan to implement it but i know one thing for sure, people will find a way around it in a matter of hours, if not minutes after they find out how it's going to be done.

[DanceswithUnix]

Couldn't they just transparent proxy, like freeserve used to?

It isn't completely transparent, I have been annoyed by that in the past.

Besides, I expect bad people can work out how to configure a web server to work on a port other than 80.

I expect they need to do something like:

tcpdump -ieth0 -s96 -w traffic.dump 'ip or icmp or tcp or udp'

but at the levels of capture required to cover every user in the UK, I'm guessing they want to just store the packet header in raw binary along with a 4 byte date/timestamp to keep the storage down.

[Chadders87]

So as a after robbing my next bank, I am going to look at the following pages: Dover, P & O Ferries, Calais, Southern France Villas...

And then head off to Scotland.