Advertisement
Bruce Schneier: There is too much external noise when you do mass surveillance. The problem is that "connecting the dots" is neither the right method nor the right metaphor. When you look at a child's coloring book, connecting the dots is very easy because they are all visible—they are all on the same page and they have numbers written on them. All you have to do is move the lead of your pencil across your page, from one dot to the other, and there you go—the drawing is done.In reality, those "dots" can only be seen and connected after things have occurred—so after each terrorist attack, if you want. When you look, it's easy to make the link between, say, an information request coming from Russia, a visit abroad, and other potential information gathered elsewhere. So with hindsight, we know who the terrorists are. That's why we're able to chase after them, but not stop them. Before an event occurs, there is an extremely huge number of potential "human dangers," and an even greater number of possible scenarios. There are so many variables to take into account that it's impossible to rely on a single potential course of events.
Advertisement
Mass surveillance is unreliable for statistical reasons, not for cultural or linguistic reasons. That analysis is valid for all countries, including France.I was thinking more in terms of population size.
That doesn't change anything. Attacks can come from anywhere. So yes, mass surveillance is as ineffective in France as it is elsewhere.So, the creation of a phone satellite that would intercept metadata and the black boxes that French operators would be provided with would be useless?
Yes. All it would do is breach people's right to privacy.Why does France want to acquire such systems?
I can't speak for France, but I have a good idea of why the US use these techniques, even though they're pointless.When intelligence officials speak in private, they acknowledge that mass surveillance is inefficient. But they see it as a sort of "insurance." They know that they need to be ready to do anything to fight against the terrorist threat, even if that entails doing something that's actually inefficient.The problem is that the bureaucrats that make these decisions are not the people who feel their harmful effect. My guess is that France is thinking the same as the US.Do you think these techniques already exist in France and that the new law is only a way of legitimizing mass surveillance?
We know that national surveillance is not a new thing in France—it's been practiced for decades. It's even been on the increase since we've started using online communication more and more. So yes, France is definitely trying to legitimize some already existing practices with this law, for sure, much the same way that many other countries are.Is there any proof that the omnipresent surveillance that exists in the US—on the internet, with phone conversations—has actually helped to stop terrorist attacks in the past?
No. It's now a clear fact that the mass surveillance performed in the US has never stopped a single attack. On several occasions, the government was asked to justify its surveillance methods, and they have failed to ever do so. Sometimes, they provide scenarios and vague plans, but the data never withstands any test.Are there better ways of stopping terrorist attacks then in your opinion?
What works and has proven efficient several times in the US, is to use "conventional" detective techniques—just following the clues. However there's an important caveat here: no method of surveillance or inquiry will ever stop a lone gunman.There are simply never enough hints to stop the aggressor before he acts in such cases. Individuals such as the Fort Hood shooter, or Anders Behring Breivik, or the Charlie Hebdo attackers in France, will always be a problem. Early intervention aimed at identifying and helping troubled individuals before they become murderers is the only real solution here.Thanks Bruce.