Article View: sci.crypt
Article #234SIB (was: right of privacy)
From: Ross Anderson
Date: Fri, 30 Oct 1992 12:07
Date: Fri, 30 Oct 1992 12:07
67 lines
3933 bytes
3933 bytes
In article <1992Oct29.171911.4872@infodev.cam.ac.uk>, I wrote: |> In the UK, the Securities and Investment Board (which is a private company) |> has greater powers of investigation than the police; for example, it can |> compel testimony without a warrant. |> |> If they want to, they can force you to hand over crypto keys just like that. |> They can also delegate powers to recognised professional bodies such as the |> Law Society, and to recognised clearing houses. weaver@kuttner.sfc.sony.com (Eric Weaver) was amazed: > By what act or law can they do that? Doesn't it conflict with the > Magna Carta or Brit. Bill of Rights? Inquiring Yanks wanna know. The current legislation is the 1986 Financial Services Act. The UK is not alone in this, as many countries have non-police agencies which enforce money and investment market regulations. The third world is particularly bad, as governments there often use exchange controls to loot their citizens, enrich themselves and their cronies, and (in the process) wreck their countries' economies. In fact, you can be deprived of your liberty in Britain if an overseas agency suspects you of doing something that's not even a crime here. For example, my wife has an Indian name. If the Directorate of Revenue Intelligence in India noticed this and wondered why we weren't registered with them for exchange control, they might suspect me of exchange control violations and ask the SIB for assistance. Never mind the fact that Britain has no exchange controls, so even if I had bought a few rupees at Thomas Cook's in London, it's not a crime here. Forget that neither I nor my wife have ever been to India, and so we cannot possibly have come under Indian jurisdiction. This sort of detail didn't seem to interest the great and wise civil servants who framed our laws. So the SIB monitor my traffic and see that it's encrypted. Can't have that! I get told to hand over my PGP private key and put in jail until I agree. The supposed justification for giving these powers to the SIB (and for giving similar powers under the Companies Act to the Department of Trade and Industry) is that conventional law enforcement had a very poor record against suspected securities fraudsters. Just the same sort of reasonable sounding practical argument which Denning used and which every bureaucracy will use when it can to increase its power. But two things seem wrong: [1] if the SIB's real purpose was to solve financial crimes, it wouldn't be set up and staffed the way it is. Their head of enforcement's previous career was as an accountant with London Transport, and his lawyer used to work in the rent rebate office of Hackney council. Their 13 investigators are paid 21,000 pounds a year, which doesn't buy you a very clever lawyer in London (a detective constable in the police gets 24,000; a corporate law partner maybe ten times that). [2] The Department of Trade and Industry acts as the arms and legs of our very own spook agency, GCHQ, when it comes to controlling the export of cryptographic equipment and working on security standards such as ITSEC. So what's the SIB actually for? I think we should be told, Ross
Technical Details
Message-ID:
<1992Oct30.120726.6695@infodev.cam.ac.uk>Path:
arc1-ca.pugleaf.net!sparky!uunet!pipex!pavo.csi.cam.ac.uk!cam-cl!rja14References:
<1992Oct26.180813.7002@netcom.com> <7553@transfer.stratus.com> <1992Oct28.111437.1@zodiac.rutgers.edu> <BwuGz2.LFr@knot.ccs.queensu.ca> <1992Oct29.171911.4872@infodev.cam.ac.uk> <1992Oct29.131705@kuttner.sfc.sony.com>Show Full Headers
Complete Article Headers
Newsgroups: sci.crypt Path: arc1-ca.pugleaf.net!sparky!uunet!pipex!pavo.csi.cam.ac.uk!cam-cl!rja14 From: rja14@cl.cam.ac.uk (Ross Anderson) Subject: SIB (was: right of privacy) Message-ID: <1992Oct30.120726.6695@infodev.cam.ac.uk> Sender: news@infodev.cam.ac.uk (USENET news) Nntp-Posting-Host: ely.cl.cam.ac.uk Reply-To: rja14@cl.cam.ac.uk (Ross Anderson) Organization: U of Cambridge, England References: <1992Oct26.180813.7002@netcom.com> <7553@transfer.stratus.com> <1992Oct28.111437.1@zodiac.rutgers.edu> <BwuGz2.LFr@knot.ccs.queensu.ca> <1992Oct29.171911.4872@infodev.cam.ac.uk> <1992Oct29.131705@kuttner.sfc.sony.com> Date: Fri, 30 Oct 1992 12:07:26 GMT Lines: 69