Private firms selling mass surveillance systems around world

Private firms selling mass surveillance systems around world, documents show

One Dubai-based firm offers DIY system similar to GCHQ's Tempora programme, which taps fibre-optic cables

Nick Hopkins and Matthew Taylor

Private firms are selling spying tools and mass surveillancetechnologies to developing countries with promises that "off the shelf" equipment will allow them to covertly snoop on millions of emails, text messages and phone calls, according to a cache of documents published on Monday.

The papers show how firms, including dozens from Britain, tout the capabilities at private trade fairs aimed at offering nations in Africa, Asia and the Middle East, the kind of powerful capabilities that are usually associated with government agencies such as GCHQ, and its US counterpart, the National Security Agency.

The market has raised concerns among human rights groups and ministers, who are poised to announce new rules about the sale of such equipment from Britain.

"The government agrees that further regulation is necessary," a spokesman for the Department for Business, Innovation and Skills said. "These products have legitimate uses … but we recognise that they may also be used to conduct espionage."

The documents are included in an online database compiled by the research watchdog Privacy International, which has spent the last four years gathering 1,203 brochures and sales pitches used at conventions in Dubai, Prague, Brasilia, Washington, Kuala Lumpur, Paris, and London. Analysts had to go undercover to gain access to the private fairs by posing as potential buyers.

The database, called the Surveillance Industry Index, shows how firms from the UK, Israel, Germany, France and the US offer governments a range of systems that allow them to secretly hack into internet cables carrying email and phone traffic.

Overall, the index has details from 338 companies, including 77 from the UK, offering a total of 97 different technologies which cover vast spectrum.

One firm says its "massive passive monitoring" equipment can "capture up to 1bn intercepts a day".

Others offer the latest James Bond-style paraphernalia, including cameras hidden in cola cans, bricks, children's carseats and boxes of tissues. One manufacturer customises car or vans, turning them into state-of-the art mobile surveillance control centres.

There is nothing illegal about selling such equipment and the companies say the new technologies are there to help governments defeat terrorism and combat crime.

But human rights and privacy campaigners have become increasingly alarmed at the sophistication of the systems, and worry that unscrupulous regimes could use them as tools to spy on dissidents and critics.

Libya's former leader Muammar Gaddafi is known to have used off-the-shelf surveillance equipment to clamp down on opposition leaders before his downfall.

Privacy International believes UK firms should now be subject to the same strict export licences rules faced by arms manufacturers.

"There is a culture of impunity permeating across the private surveillance market, given that there are no strict export controls on the sale of this technology, as there on the sale of conventional weapons," said Matthew Rice, research consultant with Privacy International.

"This market profits off the suffering of people around the world, yet it lacks any sort of effective oversight or accountability.

"This lack of regulation has allowed companies to export surveillance technology to countries that use their newly acquired surveillance capability to spy on human rights activists, journalists and political movements.

"We desperately need export regulations placed on these surveillance technologies, and the public needs to pressure politicians and governments to act now."

Privacy International hopes the Surveillance Industry Index will give academics, politicians and campaigners a chance to look at the type of surveillance technologies now available in the hope of sparking a debate about improved regulation.

The documents include a brochure from a company called Advanced Middle East Systems (AMES), which is based in Dubai.

It has been offering a device called Cerebro, which is a DIY system similar to the Tempora programme run by GCHQ - which taps information from fibre-optic cables carrying internet traffic.

AMES describes Cerebro as a "core technology designed to monitor and analyse in real time communications … including SMS (texting), GSM (mobile calls), billing data, emails, conversations, webmail, chat sessions and social networks."

The company brochure makes clear this is done by attaching probes to internet cables. "No co-operation with the providers is required," it adds.

"Cerebro is designed to store several billions of records - metadata and/or communication contents. At any time the investigators can follow the live activity of their target with advanced targeting criteria (email addresses, phone numbers, key words)."

AMES refused to comment after being contacted by the Guardian, other than to say it followed similar protocols to other surveillance companies. "We don't want to interact with the press," said a spokesman.

Another firm selling similar hi-tech equipment is VAStech, based in South Africa, which has a system called Zebra.

Potential buyers are told it has been designed to help "government security agencies face huge challenges in their combat against crime and terrorism".

VAStech says Zebra offers "access to high volumes of information generated via telecommunication services for the purposes of analysis and investigation".

It has been designed to "intercept all content and metadata of voice, SMS, email and fax communications on the connected network, creating a rich repository of information".

A spokesman for the company said: "VASTech produces products for governmental law enforcement agencies. These products have the primary goal of reducing specifically cross-border crimes such as child pornography, human trafficking, drug smuggling, weapon smuggling, money laundering, corruption and terrorist activities. We compete internationally and openly against several suppliers of similar systems.

"We only supply legal governments, which are not subjected to international sanctions. Should their status change in this regard, we hold the right to withdraw our supplies and support unilaterally."

Ann McKechin, a Labour member of the arms export control committee, said: "Obviously we are concerned about how our government provides licences, given these new types of technology.

"Software technology is now becoming a very large component of our total exports and how we police it before it gets out of country will become an increasingly difficult question and I think the government has to review its processes to consider whether they are fit for the task."

She said the Department for Business, Innovation and Skills, which has responsibility for granting export licences, had to ensure it has the skills and knowledge to assess new technologies, particularly if they were being sold to "countries of concern".

"The knowledge of staff which maybe more geared to more traditional types of weaponry," she added.

A business department spokesperson said: "The government agrees that further regulation is necessary. These products have legitimate uses in defending networks and tracking and disrupting criminals but we recognise that they may also be used to conduct espionage.

"Given the international nature of this problem we believe that an internationally-agreed solution will be the most effective response. That is why the UK is leading international efforts to agree export controls on specific technologies of concern. We expect to be able to announce real progress in this area in early December."

Privacy International's Rice said surveillance companies were "developing, marketing, and selling some of the most powerful, invasive, and dangerous technologies in the world that are keeping pace with the capabilities of the NSA and GCHQ".

He added: "The borderless nature of the internet and digital communications puts everyone's phone calls, text messages, emails, internet activity, and our most private communications are at risk. Mass surveillance is neither necessary nor proportionate."

http://www.theguardian.com/world/2013/nov/18/private-firms-mass-surveillance-technologies