How is this surveillance system supposed to work? Logging DNS requests? How feasible would it be to get everyone to look up every domain on the Internet and DDOS this surveillance system?
"are records of the internet services that have been accessed by a device. They would include, for example, a record of the fact that a smartphone had accessed a particular social media website at a particular time."
and:
"ICRs do not provide a full internet browsing history. The ICRs do not reveal every web page that a person visited or any action carried out on that web page."
How this will work in practice is anyones guess at the moment - every time I think of something short of logging every packet header sent/received in the UK (which leads to a staggering amount of data needing to be logged), I think of things that would slip though (and therefore wouldn't fulfil the first statement)...
[1] https://www.gov.uk/government/uploads/system/uploads/attachm...
I can't see the current government accepting the possibility that the Internet Bad Guys(tm) could just use a different protocol and avoid all logging.
- customer ID
- start and end times of the 'event'
- source IP address and port (the port is used to avoid a NAT at the ISP level)
- destination IP address and port
- volume of data transferred in each direction
- name of internet service connected to
- the URL
https://www.gov.uk/government/uploads/system/uploads/attachm...
There is a sample provided on the next page, which dumbs it down enough so that it sounds rather compelling.