The Impunity Files, Police Edition: Trolling for Rawshark.

By now it is well known that in their effort to find the source of the information upon which Nicky Hager’s book Dirty Politics was based, the NZ Police searched and seized computers, phones and personal records from Mr. Hager’s home. They also intimidated Mr. Hager’s daughter (who was home at the time) by forcing her to dress in front of an officer and relinquish her personal computer. In addition, they asked a number of service providers to give them access to Mr. Hager’s personal details without a warrant or production order. Most of the service providers refused or asked for a warrant but at least one, the financial corporation Westpac, gave up eight month’s worth of Mr. Hager’s transaction records without asking the Police for a legal instrument compelling them to do so.

News of this caused a brief furore amongst civil libertarians, privacy advocates, some journalists and a few business people. But as with much that the Police does that is borderline in terms of legality, the issue soon dropped from the public eye. Few if any follow ups have been published and for all intents and purposes the Police have emerged unscathed from yet another episode of operating with impunity and contempt for the law.

I have had opportunity to review Police documentation regarding the case released under Discovery (79 pages in total). Readers are invited to read the full dossier released by the High Court over at Scoop, which also has an interesting newspaper story detailing the genesis of the investigation into Mr. Hager.

Much in the Police documents is redacted but there is plenty to consider nevertheless. In the spirit of public interest journalism (although I am not a journalist by training, inclination or employment), I have decided to add a bit more to the public domain on this case. As it turns out, the Police did more than ask various service providers to give them access to Mr. Hager’s private information, and they got things rolling just before and then accelerated  the investigation very quickly after a complaint was laid about the source of the material from which Dirty Politics was constructed (the infamous or heroic hacker known as Rawshark, depending on how you view things).

On August 22, 2014, amid the sequels to the publication of Dirty Politics and the speculation as to the identity of the hacker who accessed the information from a notorious right-wing blogger that detailed his unsavoury connections to government officials and corporate interests, Rawshark tweeted what most observers saw as a satirical or diversionary tweet saying that s/he was on vacation in Vanuatu. Rather than take it with a grain of salt, and after the blogger formally complained on August 25, 2014, the NZ Police fired up their investigative resources and on September 18, 2014 a detective constable by the name of Rachelle (I shall leave her last name out), who was assigned to the case by a superior named Simon (again, I shall leave his surname out for the moment), telephoned Immigration New Zealand (INZ) for information on all NZ residents and citizens who had traveled to Vanuatu around that time.

I should note that this very same detective Simon was the police officer who made the “enquiry” of Westpac about Mr. Hager’s financial details on September 24, 2014. In the days that followed the Police were able to obtain detailed information on Mr. Hager’s property holdings from Wellington City Council as well as full details of his Westpac bank accounts and credit cards. Although some of this information was available through the Council web site, on at least one occasion detective constable Rachelle was able to obtain information directly from the Council without a warrant or production order (this information is available on pages 25-26  of the Discovery documents that I have read. (KEB Vol 4 Part 1C file pages 1468-69).

One has to wonder what relevance Mr. Hager’s property valuations and rate payments have with regard to the search for Rawshark. If the figures were obtained for a future asset seizure in the event Mr. Hager is found guilty of a crime, we have to remember that he has not been charged, much less convicted of any such thing. A search for aspects of his worth with an eye to future seizure implies a presumption of guilt on the  part of the Police before any charges have been laid against Mr. Hager. To say the least, that is a perversion of natural justice.

During the September 18, 2014 conversation with detective constable Rachelle, a female senior INZ officer replied that it would be difficult to compile a list of all New Zealanders who traveled to Vanuatu during the referenced time period because INZ only had data on those who traveled directly to Vanuatu from NZ and did not hold information on those who may have stopped off elsewhere (such as Fiji) on their way to the holiday destination. She sent the Police an OIA form to fill out (which was completed and returned that day) in order to assist the INZ side of the investigation. A day later, on September 19, 2014, she emailed detective constable Rachelle and wrote that there was nothing more that INZ could do “on their end” and suggested that the Police “might want to try Customs.”

That was a good tip.  Detective constable Rachelle noted then that she would speak to someone at Customs who was working on organised crime to find out the best source for that information. On September 23, 2014, after approaching NZ Customs, the NZ Police received from them spreadsheets containing the names of 2500 NZ citizens or residents who travelled directly from NZ to Vanuatu in the two weeks prior and after August 22, 2014. The spreadsheets were then sent to an officer Nichola (again, no last name needs to be published at this time) “at intel to see what plan we can come with in relation to analysing this information.”

The passenger information was presumably sourced from Air Vanuatu and/or Air New Zealand, who code share the three weekly flights between Auckland and Port Villa. No warrant or production order was issued for the release of this information, and it is unclear as to who and how Air Vanuatu and/or Air New Zealand were approached, or whether they were approached directly at all. This information is detailed on pages 70-71 (KEB Vol 4 Part 1C file pages 1525-26) of the Police documents released under Discovery in the case Mr. Hager has brought against them.

It is unclear whether the Police ever came up with a plan to analyse the personal information of the 2500 NZ citizens and residents that flew to Vanuatu from NZ in the two weeks before and after August 22, 2014. What is clear is that it was done, at a minimum, in violation of the Privacy Act because the data was obtained without a warrant or production order. Moreover, it is not clear what was ultimately done with the information about the 2500 people whose details were obtained by the Police. Was it analysed? Did any of it lead to further inquiries or action? Was it stored? Was it destroyed? Was some records kept and others not? The bottom line is that this information was obtained based upon a “courtesy” request, not a lawful order, and was part of a trolling exercise that began before a complaint was laid and not as a result of specific or precise information related to the Hager investigation. Both procedurally and substantively, obtaining this travel-related data of 2500 NZ citizens and residents was unlawful.

Given that Rawshark appears to be a pretty savvy hacker who knows how to cover his/her tracks, it is arguable that any of the 2500 people whose privacy was violated by Customs and the Police (and perhaps Air Vanuatu and/or Air New Zealand) had anything to do with obtaining the material for Dirty Politics. Beyond the issue of what was done with their personal information, the question is whether they have been told by any of these agencies about their records being accessed. After all, they have nothing to fear if they have nothing to hide, so it would seem natural that the Police and/or the other entities involved in the privacy breach would let the 2500 travellers know that their private records are safe. That is important because these records could well be more than passport details and could include ticket purchase location details, credit card information etc. At this point we do not know the full extent of the Police handling of this private information, but the privacy breach is a pretty big one in any event so the duty to inform those affected is great.

Published information is that the senior officer in charge of the investigation into Rawshark is Assistant Commissioner Malcolm Burgess. It appears that Mr. Burgess was contacted by email by the rightwing blogger on August 19, 2014 and immediately assigned the matter to the National Criminal Investigation Group (see the NZ Herald article on November 14, 2015 by David Fisher). That is odd because at the time no formal complaint had been made–that did not happen until August 25, 2014. In fact, it appears that an investigative plan of action was drawn up before the blogger made his formal complaint, then quickly put into action once he did.

In any case, perhaps Mr. Burgess is a “hand’s off” manager who did not know what those under him were doing, particularly detective Simon. But it would be interesting to see how he feels about the way the information on Vanuatu travellers was accessed given that it appears to have shed no light on Rawshark’s identity and seems to have violated the Privacy Act. In other words, it looks like it was a useless and illegal fishing expedition, which should be a concern for him as the senior office in charge.

I understand the importance of chasing all leads and avenues of inquiry in criminal investigations. I understand the notion of professional courtesy amongst security agencies. I understand the utility of informal agreements between government offices. I understand that institutional cultures may see legal requirement more as a challenge rather than as an obligation. I understand that sometimes investigatory overkill in one case is needed to serve as a deterrent to others who might seek to pursue similar courses of action.

But I also know, from both my academic writing on democratic governance and my professional experience while working in security branches of the US government, that at its institutional core democracy is about self-limitation and the universal rule of law, to which can be added the bureaucratic axion “CYA.” Yet when it comes to the NZ Police in this case and others, it seems that an institutional culture of impunity far outweighs respect for the self-limitations imposed by law when it comes to decision-making on matters of policy and operations.

Perhaps the Privacy Commissioner and other civil rights groups might want to take another look into this case because it is not just Mr. Hager who has had his rights violated by the Police investigation into Rawshark’s identity (in what to my mind is more a case of journalistic intimidation rather than a legitimate investigation into criminal wrong-doing). As much as I would like to believe that the Independent Police Conduct Authority (IPCA) would seize the opportunity to examine the particulars that I have outlined, its track record suggests otherwise.

One thing is certain: there are 2500 people in NZ who got a lot more than they bargained for when they booked direct flights to Vanuatu in the middle of last year.

Culture, strategy and an end to the phony war

It is a truth universally acknowledged that, in business and elsewhere, culture eats strategy for lunch.

Nicky Hager’s latest book Dirty Politics (which I haven’t read, but here’s Danyl’s summary) seems certain to cause a strategic shift in the electoral landscape. It should give credence to some of the left’s claims about the National party, and turn public and élite scrutiny on the character and activities of the Prime Minister and his closest aides, including his apparently-extensive irregular corps of bin men, turd-mongers and panty-sniffers. To do so is probably its primary purpose, and the timing and cleverly-built hype around the book reflects this.

But what I hope is that it also produces a cultural shift in New Zealand politics — weakening, or at least rendering more transparent, the intrigue and back-room, or back-door, dealing that characterises this sort of politics.

The book apparently alleges that the Prime Minister’s office is at the heart of a broad network of nefarious intelligence and blackmail, where they collect and hold a lien over the career or private life of everyone close to power. Nobody is their own person; everyone is owned, to some extent, by the machine. Patrick Gower wrote before the 2011 election that John Key owns the ACT party, and Hager’s book seems to substantiate this, detailing how they forced Hide’s resignation, in favour of Don Brash.

That is culture, not strategy, and it exerts considerable influence on those over whom the lien is held.

Immediately upon the book’s release, Cameron Slater noted that some journalists, and some Labour and Green MPs, would be getting nervous. Well, good. If there has emerged some sort of mutual-assured destruction pact to manage this culture, ending it could be Nicky Hager’s lasting contribution to New Zealand. Let the comfortable and the cozy live in fear for a bit. This includes Kim Dotcom, who claims to hold such intrigue against the Prime Minister, and is the target of a similar campaign, though it remains in abeyance.

This is a phony war about preserving the position of political élites on both sides of the ideological divide, to the general detriment of the sort of politics we actually need as a nation. Unlike the original MAD pact, we don’t risk the end of the world if this all blows up — we just might get our political and media systems cleaned out.

At least that’s the theory. I’m not very optimistic — cultural systems are sticky and resilient, and clearly many people have much invested in them. As we have seen with bank bailouts and phone hacking, the system can’t be destroyed from outside, and the influence wielded applies also to anyone who might be called upon to investigate.

The final point is about intelligence and security. The book alleges that the Prime Minister’s office released information from the Security Intelligence Service to these people, and that National staffers illicitly accessed Labour’s computers. The documents that form Hager’s source material also were apparently illicitly obtained from Cameron Slater’s website during an outage. That’s probably the most serious cultural indicator: sometimes you have to fight fire with fire. We are well beyond due for a serious discussion about the acceptable bounds of espionage, leakage and spying, and if Nicky Hager’s book generates this debate, he will have done Aotearoa a great service.

L

Long and short of the NZDF spying scandal.

Accusations that the NZDF may have been spying on journalist Jon Stephenson during or after he was in Afghanistan researching what turned into a series of very critical stories about the actuality of SAS operations in support of the elite Afghan counter-terrorism Crisis Response Unit (CRU) have sparked both public outrage and government backlash. Numerous media entities and civil libertarians have protested the alleged spying as an infringement on press freedom, with the story now picked up by the US press because Mr. Stephenson was working for a US based news service when the spying supposedly occurred, and the spying may have been carried out by US agencies.

It is early days yet in the development of the story, but there are numerous angles that if explored could lead to a can of worms being opened on the NZDF and NZ government as well as the US administration. More immediately, if what has been made public so far is accurate then there are some NZ-focused issues to ponder, which can be broadly divided into matters of short and long-term consequence.

The specific accusation is that NZDF obtained meta-data about Mr. Stephenson’s phone records from US intelligence sources while he was in Kabul. This meta-data included the phone numbers of those he contacted or who called him while in theater, which could be “mined” and subject to network analysis in order to create signal maps and flow charts of the patterns of communication between them as well as with Mr. Stephenson (what have been called signals meta-data “trees”).

Implicit in the original story by Nicky Hager is the possibility that the content of Mr. Stephenson’s conversations and possibly his emails were accessed by the NZDF, or at least by foreign partners who then shared that information with the NZDF.

This is the short aspect of the story. Mr. Hager believes that Mr. Stephenson was subject to an NSA signals trolling scheme akin to that done by the PRISM program, and that the NZDF may have requested that Mr. Stephenson be surveilled by the NSA as a result of Stephenson’s investigation but also because the NZDF could not spy on him directly. However, since the SIS and GCSB had officers on the ground in Kabul and shared workspace with NSA and CIA personnel, the possibility was raised that they were somehow involved in the electronic monitoring of Mr. Stephenson, either has initiators or recipients of the NSA meta-data mining of his communications.

This may or may not prove true. The government and NZDF flatly deny that any spying, whether by the NSA, GCSB or NZDF, was done on Mr. Stephenson. Mr. Hager claims to have evidence that NZDF personnel obtained Mr. Stephenson’s telephone meta-data (presumably he has at least been shown that data by the NZDF personnel who are his sources).

One of these versions is apparently false, although there may be a twist to the story that bridges the veracity gap between them.

Since Mr. Stephenson was in a declared conflict zone in which a multinational military coalition was engaged, he was inevitably subject to military intelligence collection. Military organizations and their various service branches maintain human and signals intelligence collection units that focus on tactical aspects of the conflict zone. That would, at a minimum, include canvassing local telephone and email networks for information on potential threats and contextual background. Such collection is designed to facilitate “actionable” intelligence: information that can be used to influence the political environment as well as the kinetic operations that occur within it.

It is possible that Mr. Stephenson’s phone records were collected by an ISAF military signals intelligence unit. It probably was that of a US military unit. That unit may have identified Mr. Stephenson as a New Zealander and passed his information on to one of the intelligence shops located at Bagram Air Force base or elsewhere for sharing with the NZDF as a professional courtesy and a “head’s up” on who Mr. Stephenson was involved with.

If this is true, then Mr. Hager’s NSA/PRISM/GCSB/NZDF spying scenario is wrong. However, the issue does not end there. The big questions are whether the NZDF requested that an allied military signals intelligence unit spy on Mr. Stephenson, or if not, what it did with the information about Mr. Stephenson volunteered to it by its ally.

If the latter is the case, then it is possible that the NZDF took no action because it either considered the information marginal to its intelligence concerns or improper for it to receive and use. That in turn could have led to the destruction of that meta-data after it was received.

On the other hand, if the NZDF requested said information about Mr. Stephenson from a military intelligence partner, that would make any subsequent meta-data record destruction an attempt to eliminate evidence of that request or the use to which the data-mining was put.

It should be noted that such spying in conflict zones is usual and to be expected by anyone operating with them, journalists and non-journalists alike. Moreover, it is perfectly legal as well as reasonable for the NZDF to share information with its military intelligence partners, even if it includes information about unaffiliated NZ citizens operating in conflict zones in which the NZDF is deployed. Thus it would not have been unlawful for the NZDF to obtain Mr. Stephenson’s electronic meta-data whether it initiated its collection or merely received the results.

This extends to its use of the SIS or GCSB to assist in said collection, since the SIS is empowered to spy on NZ citizens and the GCSB was working in a foreign theater in which Mr. Stephenson was working for a “foreign entity” (McClatchy New Service), therefore making him a legitimate target under the 2003 GCSB Act. Whether one or both of these agencies was involved in the spying on Mr. Stephenson, should it have occurred, the eavesdropping could legally be conducted without warrant, again owing to situational circumstance.

However, just because something is legal does not make it right. This is where the long of the story comes into play.

Mr. Hager also revealed the existence of an NZDF operations manual, apparently drafted in 2003 and revised in 2005, that included at least “certain investigative journalists” along with hackers, foreign spy agencies, ideological extremists, disloyal employees, interest groups, and criminal organizations in the category of “subversive” threats (although it remains unclear as to when that particular passage was added to the text and who authored and authorized it). The definition of subversion was stretched to include those whose activities could undermine public morale or confidence in the government and NZDF. This included “political” activities deemed inimical to the NZDF image or reputation.

Whether it was included in the original version or added some time later (perhaps very recently), that definition of subversive threats is astounding. The language used borrows directly from the lexicon of the Pinochet dictatorship and Argentine Junta. It completely ignores the concept of press freedom in a democracy, which is premised on the autonomous separation of the media and the military as institutions. It lumps in so-defined subversive threats with physical threats to operational security in the field. That makes those identified as subversives enemies rather than adversaries, which allows them to be treated accordingly.

The wording of the passage about subversive threats in this manual says more about those who drafted it and the NZDF leadership that allowed it to become doctrine than it does about any real threat posed by journalists to the NZDF or government. Being embarrassed by critical reporting is not akin to being shot at. Even if written in the fevered years immediately after 9/11, the authors of that passage (and presumably others in the manual) display an authoritarian, anti-democratic mindset that is fundamentally inimical to democratic civil-military relations and, for that matter, democratic military professionalism.

Chris Trotter has noted that the NZDF, as a military organization, is authoritarian in nature and thus inherently un-, if not anti-democratic. I respect his view but disagree to an extent. Virtually all social organizations are hierarchical in nature–families, churches, private firms, unions, schools, bureaucracies, political parties and yes, the armed forces, police and intelligence agencies. That makes the egalitarian bases of democratic political society unlike virtually all other forms of social organization.

In other words, we are socialized in a hierarchical world and it is democracy as a political form that is the unnatural outlier.

Even so, although hierarchy can and often does tend towards authoritarianism, in democracies social organizations that are hierarchically constructed bow to the egalitarian meta-logic that posits that in their political interactions they are bound by notions of mutual respect, independence, corporate autonomy and non-interference. That is, they practice at a meta-level what they do not at the macro or micro-levels: in their interactions with each other groups forgo the hierarchical disposition that characterizes their internal governance.

This is important because the NZDF field manual that Mr. Hager exposed and whose existence is now confirmed by the government displays an authoritarian mindset and operational perspective that transcends the necessary hierarchy of NZDF organization. The NZDF is not inherently authoritarian because it is hierarchical in nature, but because, if the spying allegations are correct in light of the manual’s language about threats requiring military countering, its leadership displays an authoritarian disposition when it comes to things it finds objectionable, including pesky reporters (I shall leave aside Mr. Trotter’s remarks about military allegiance to the Queen rather than government or citizenry, although I take his point as to where its loyalty is directed and the impact that has on its transparency and adherence to democratic norms).

In sum: Consider what the manual says with regards to subversive threats in light of the well-publicized NZDF attacks on Mr. Stephenson’s professional and personal integrity that resulted in the defamation trial recently concluded (attacks that could well fit within the “counter-intelligence operations” recommended in the manual). Add in the claims by Mr. Stephenson that a senior military officer uttered death threats against him (the subject of a police complaint in 2011 that was not actioned). Factor in the NZDF admission in the defamation trial that it tracked Mr. Stephenson’s movements along with the possibility that the NZDF did acquire and utilize Mr. Stephenson’s telephone communications records in a capacity other than to detect tactical threats to units in theater. Further include Mr. Hager’s findings in his book Other Peoples Wars, in which the NZDF was seen to disregard government instructions regarding its conduct in foreign theaters and collaborated extensively with US intelligence (both military and civilian) in places like Bamiyan in spite of its repeated denials that it was doing anything other than building schools and roads in that province.

The conclusion? In light of this sequence of events it is very possible that the NZDF  has systematically operated in an unprofessional and anti-democratic fashion for at least a decade, and particularly with regard to Mr. Stephenson.

This is a serious matter because it gives the impression that the NZDF has gone rogue (assuming that the governments of the day were, in fact, unaware of the language in the field manual or of the alleged spying). Rectifying this institutional anomaly is important. How to do so is critical.

It is not enough to blame the previous government and retired NZDF commanders for the manual, then excise the offending passage while maintaining that no NZDF records of spying on Mr. Stephenson exist. Instead, the NZDF leadership during this time period needs to be held accountable for allowing anti-democratic attitudes and practices to take root within it and, if need be, action needs to be taken against those who authorized the language of the manual and/or the spying if it happened. Only that way can confidence in NZDF accountability and commitment to democratic principles be restored.

In order for any of this to happen, yet another inquiry needs to be launched. Given the debates about the GCSB and TICS Bills and ongoing concerns about Police and SIS behaviour, that says something about the state of New Zealand’s security community at the moment.

 

 

Crosby|Textor are at it again

They appear to only have one tactic, and they’re using it again. Last night’s Media 7 had a segment on Lynton Crosby’s recently aborted defamation action against Nicky Hager. Media 7, being responsible journalists, asked Lynton Crosby if he would like to come on the show, his response was a nasty gram through his lawyers threatening yet more legal action and heavying TVNZ into not discussing the case.

  • Media 7 is here (second segment), complete with nastygram and a good discussion of how the wealthy use our archaic and overcomplicted defamation laws to stifle dissent
  • Nicky Hager’s brief explanation of the case is here
  • The full detail is here

It’s nice to know the kind of people John Key chooses to take advice from

National: cutting their way into the recession

At Pundit Nicky Hager has an article up about National’s “spending” plans. Based on leaked material he shows that, having started to realise the gravity of the recession, English has increased capital expenditure by no more than an additional $250 million of capital spending a year: in terms of government spending that’s nearly nothing. As Hager concludes:

As the country heads into the worst recession of our lifetimes, John Key and Bill English have decided against any significant economic stimulus package. As other countries acknowledge the magnitude of the crisis and spend, our Cabinet will be putting their energy into finding places to cut.

At the same time the National cabinet is taking a knife to operational spending: 10% here, at least 500 jobs there, 30 more over here. These cuts of operational cuts will very quickly add up to $250 million, not to mention poorer services for all New Zealanders,

So National’s plans to get us out of the recession are… exactly what their plans always were: cut, cut and cut. Less service, less support, and what money there is will be redirected to the private sector labelled “infrastructure investment” and “improved competition”.