Scotland Yard charge Cardiff man with “training, researching” how to use crypto software – Ars technica
A Cardiff man who is a suspected member of ISIS has been accused of training in the use of encryption software to aid terrorism and hiding a computer program on a USB drive disguised as a cufflink.
Samata Ullah, 33, was charged with six terrorism offences after being arrested in a street in Cardiff on September 22 by officers from Scotland Yard’s counter-terrorism squad.
The charge sheet includes one count of preparation of terrorism “by researching an encryption programme, developing an encrypted version of his blog site, and publishing the instructions around the use of [the] programme on his blog site.”
Ullah is also accused of knowingly providing “instruction or training in the use of encryption programmes” in relation to “the commission or preparation of acts of terrorism or for assisting the commission or preparation by others of such acts.”
He has additionally been charged with being in possession of a “Universal Serial Bus (USB) cufflink that had an operating system loaded on to it for a purpose connected with the commission, preparation, or instigation of terrorism.”
oh dear. All of the Forensics, Information Security, Computer Security and Cyber Security students are in big trouble. We all study encryption, and probably all have programs on our USB drives. I once owned a Duracell Battery styled USB pen, sorry. My bad.
Then again, Google are now terrorists under this ruling. And about time too.
Other articles discussing Scotland Yard’s Encryption charges
While this adds significant nuance to the Ars article above, the primary point still stands as to count three: the criminal act was researching encryption, developing an encrypted version of a blog site (which describes publishing over HTTPS and a few other things), and teaching encryption. The intent of this criminal act was to aid and assist terrorism, but the criminal act was still researching, deploying, and teaching cryptography. This is a hugely important nuance – quoting a comment from user Withabeard on Reddit:
He hasn’t been charged for helping terrorists.
He has been charged for having an encrypted blog. The reason authorities have chosen to charge him, is because that blog may contain material that helps terrorists. The distinction is small, but it has a massive impact on how we apply laws in the UK.
Helping other people conduce killing of other humans is already illegal in the UK, so that is what he should be charged with if there is evidence he did it.
But he has literally been charged with “instruction or training in the use of encryption programmes”.
It shouldn’t matter what the encryption was going to be used for, no-one should ever be charged with doing that.