- <div class="title"><a href="http://people.skolelinux.org/pere/blog/Vi_kan_selv_avsl_re_mobiltelefonoverv_kning.html">Vi kan selv avsløre mobiltelefonovervåkning</a></div>
- <div class="date"> 3rd January 2015</div>
- <div class="body"><p>Jeg sendte inn følgende leserinnlegg 2014-12-26, og etter en uke
-synes jeg det er på tide å publisere teksten på bloggen min.</p>
-
-<p><strong>Vi kan selv avsløre mobiltelefonovervåkning</strong></p>
-
-<p>Det er fascinerende å lese hvordan
-<a href="http://mm.aftenposten.no/stortinget-og-statsministeren-overvakes/">overvåkningen
-av mobiltelefoner med IMSI-fangere som Aftenposten avslørte</a> har
-blitt mottatt. Men det er spesielt to poeng som jeg synes har fått
-for liten oppmerksomhet.</p>
-
-<p>Det ene er at innbyggerne nå selv kan avsløre når noen forsøker å
-overvåke oss. Det hele lar seg gjøre takket være en fribruksdatabase
-over plasseringen til kjente mobilbasestasjoner som heter
-OpenCellID. Enhver med en Android-basert mobiltelefon kan ta i bruk
-«<a href="https://github.com/SecUpwN/Android-IMSI-Catcher-Detector">Android
-IMSI Catcher Detector</a>» ved å laste den ned fra Internett og slik
-få tak i verktøyet som Aftenposten brukte for å oppdage de uoffisielle
-mobilbasestasjonene. Ved hjelp av dette verktøyet kan Android-brukere
-få varsel i smarttelefonen når slike oppdages, uansett om det er
-kriminelle, offisielle myndigheter eller utenlandske
-etterretningsorganisasjoner som står bak. Vi har dermed alle mulighet
-til å oppdage avlytting, og trenger ikke håpe på at PST, Post og
-Teletilsynet eller mobilselskapene gjør jobben for oss. De vil
-uansett måtte holde overvåkning fra offisielle myndigheter skjult for
-befolkningen.</p>
-
-<p>Det andre er at den viktigste informasjonen IMSI-fangere samler inn
-er hvem som er i kontakt med hvem og hvor de befinner seg (også kalt
-metadata), ikke hva som blir sagt og skrevet når folk er i kontakt med
-hverandre. Den som f.eks. vet hvilke politikere som snakker med hvem
-kan få innsikt i hvordan politikere påvirkes og hvilke sårbare punkter
-de har. Forskerne ved senter for Internet og samfunn ved Stanford Law
-School har dokumenterte i sitt metadata-prosjekt
-<a href="https://cyberlaw.stanford.edu/blog/2013/12/spy-your-metadata">at
-slik innsamlet informasjon blant annet kan avsløre medisinske
-tilstander, politiske sympatier, religiøse overbevisninger</a>. I
-tillegg har den pensjonerte generalen Michael Hayden i USA, som har
-ledet både CIA og NSA,
-<a href="http://www.thenewamerican.com/usnews/crime/item/18244-we-kill-people-based-on-metadata-admits-former-cia-nsa-boss">innrømmet
-at USA dreper folk basert på innsamlede metadata</a>. Begge deler
-forteller
-<a href="http://kieranhealy.org/blog/archives/2013/06/09/using-metadata-to-find-paul-revere/">hvor
-verdifullt metadata er</a>, og gir grunn til å være mer bekymret for
-innsamling av metadata enn avlytting.</p>
-
-<p>Seniorrådgiver Roar Thon i Nasjonal Sikkerhetsmyndighet sier ofte
-at hver og en av oss er ansvarlig for vår egen sikkerhet, og
-Aftenpostens avsløring har gjort flere kjent med verktøy vi har
-tilgjengelig for å ta dette ansvaret. Men det reelle problemet er jo
-ikke at det settes opp utstyr vi ikke kan stole på, men at
-telefonsystemet er laget slik at det er mulig å sette opp slik
-utstyr.</p>
-
-<p>Vennlig hilsen
-<br>Petter Reinholdtsen
-<br>Medlem i <a href="http://www.nuug.no/">foreningen NUUG</a></p>
-
-<p>Etter at jeg skrev dette innlegget ble en ny Android-app,
-<a href="https://opensource.srlabs.de/projects/snoopsnitch">SnoopSnitch</a>,
-som gjør tilsvarende sniffing etter uoffisielle mobilbasestasjoner
-lansert. Jeg vet ikke hvilke av dem som er best.</p>
-
-<!--
-
-Publisert som
-http://h-debatt.no/innlegg/vi-kan-selv-avslore-overvakning/
-Klassekampen 2014-12-31 side 39
-
--->
+ <div class="title"><a href="http://people.skolelinux.org/pere/blog/Is_Pentagon_deciding_the_Norwegian_negotiating_position_on_Internet_governance_.html">Is Pentagon deciding the Norwegian negotiating position on Internet governance?</a></div>
+ <div class="date"> 3rd November 2015</div>
+ <div class="body"><p>In Norway, all government offices are required by law to keep a
+list of every document or letter arriving and leaving their offices.
+Internal notes should also be documented. The document list (called a mail
+journal - "postjournal" in Norwegian) is public information and thanks
+to the Norwegian Freedom of Information Act (Offentleglova) the mail
+journal is available for everyone. Most offices even publish the mail
+journal on their web pages, as PDFs or tables in web pages. The state-level offices even have a shared web based search service (called
+<a href="https://www.oep.no/">Offentlig Elektronisk Postjournal -
+OEP</a>) to make it possible to search the entries in the list. Not
+all journal entries show up on OEP, and the search service is hard to
+use, but OEP does make it easier to find at least some interesting
+journal entries .</p>
+
+<p>In 2012 I came across a document in the mail journal for the
+Norwegian Ministry of Transport and Communications on OEP that
+piqued my interest. The title of the document was
+"<a href="https://www.oep.no/search/resultSingle.html?journalPostId=4192362">Internet
+Governance and how it affects national security</a>" (Norwegian:
+"Internet Governance og påvirkning på nasjonal sikkerhet"). The
+document date was 2012-05-22, and it was said to be sent from the
+"Permanent Mission of Norway to the United Nations". I asked for a
+copy, but my request was rejected with a reference to a legal clause said to authorize them to reject it
+(<a href="http://lovdata.no/lov/2006-05-19-16/§20">offentleglova § 20,
+letter c</a>) and an explanation that the document was exempt because
+of foreign policy interests as it contained information related to the
+Norwegian negotiating position, negotiating strategies or similar. I
+was told the information in the document related to the ongoing
+negotiation in the International Telecommunications Union (ITU). The
+explanation made sense to me in early January 2013, as a ITU
+conference in Dubay discussing Internet Governance
+(<a href="https://en.wikipedia.org/wiki/International_Telecommunication_Union#World_Conference_on_International_Telecommunications_2012_.28WCIT-12.29">World
+Conference on International Telecommunications - WCIT-12</a>) had just
+ended,
+<a href="http://www.digi.no/kommentarer/2012/12/18/tvil-om-usas-rolle-pa-teletoppmote">reportedly
+in chaos</a> when USA walked out of the negotiations and 25 countries
+including Norway refused to sign the new treaty. It seemed
+reasonable to believe talks were still going on a few weeks later.
+Norway was represented at the ITU meeting by two authorities, the
+<a href="http://www.nkom.no/">Norwegian Communications Authority</a>
+and the <a href="https://www.regjeringen.no/no/dep/sd/">Ministry of
+Transport and Communications</a>. This might be the reason the letter
+was sent to the ministry. As I was unable to find the document in the
+mail journal of any Norwegian UN mission, I asked the ministry who had
+sent the document to the ministry, and was told that it was the Deputy
+Permanent Representative with the Permanent Mission of Norway in
+Geneva.</p>
+
+<p>Three years later, I was still curious about the content of that
+document, and again asked for a copy, believing the negotiation was
+over now. This time
+<a href="https://mimesbronn.no/request/kopi_av_dokumenter_i_sak_2012914">I
+asked both the Ministry of Transport and Communications as the
+receiver</a> and
+<a href="https://mimesbronn.no/request/brev_om_internet_governance_og_p">asked
+the Permanent Mission of Norway in Geneva as the sender</a> for a
+copy, to see if they both agreed that it should be withheld from the
+public. The ministry upheld its rejection quoting the same law
+reference as before, while the permanent mission rejected it quoting a
+different clause
+(<a href="http://lovdata.no/lov/2006-05-19-16/§20">offentleglova § 20
+letter b</a>), claiming that they were required to keep the
+content of the document from the public because it contained
+information given to Norway with the expressed or implied expectation
+that the information should not be made public. I asked the permanent
+mission for an explanation, and was told that the document contained
+an account from a meeting held in the Pentagon for a limited group of NATO
+nations where the organiser of the meeting did not intend the content
+of the meeting to be publicly known. They explained that giving me a
+copy might cause Norway to not get access to similar information in
+the future and thus hurt the future foreign interests of Norway. They
+also explained that the Permanent Mission of Norway in Geneva was not
+the author of the document, they only got a copy of it, and because of
+this had not listed it in their mail journal.</p>
+
+<p>Armed with this
+knowledge I asked the Ministry to reconsider and asked who was the
+author of the document, now realising that it was not same as the
+"sender" according to Ministry of Transport and Communications. The
+ministry upheld its rejection but told me the name of the author of
+the document. According to
+<a href="https://www.regjeringen.no/no/aktuelt/unga69_rapport1/id2001204/">a
+government report</a> the author was with the Permanent Mission of
+Norway in New York a bit more than a year later (2014-09-22), so I
+guessed that might be the office responsible for writing and sending
+the report initially and
+<a href="https://www.mimesbronn.no/request/mote_2012_i_pentagon_om_itu">asked
+them for a copy</a> but I was obviously wrong as I was told that the
+document was unknown to them and that the author did not work there
+when the document was written. Next, I asked the Permanent Mission of
+Norway in Geneva and the Foreign Ministry to reconsider and at least
+tell me who sent the document to Deputy Permanent Representative with
+the Permanent Mission of Norway in Geneva. The Foreign Ministry also
+upheld its rejection, but told me that the person sending the document
+to Permanent Mission of Norway in Geneva was the defence attaché with
+the Norwegian Embassy in Washington. I do not know if this is the
+same person as the author of the document.</p>
+
+<p>If I understand the situation correctly, someone capable of
+inviting selected NATO nations to a meeting in Pentagon organised a
+meeting where someone representing the Norwegian defence attaché in
+Washington attended, and the account from this meeting is interpreted
+by the Ministry of Transport and Communications to expose Norways
+negotiating position, negotiating strategies and similar regarding the
+ITU negotiations on Internet Governance. It is truly amazing what can
+be derived from mere meta-data.</p>
+
+<p>I wonder which NATO countries besides Norway attended this meeting?
+And what exactly was said and done at the meeting? Anyone know?</p>
projects / homepage.git / blobdiff