National Defence committee  We need to consult the provinces and the private sector as well. So many of those things are in the hands of private companies. I know there are meetings. I know there is collaboration. I don't want to bring up the balloon again, but the reality is that people have asked, “What

National Defence committee  There's explicitly addressing what we call “hack back” or active measures. I did question the Canadian Armed Forces. They directed me to the document “Strong, Secure, Engaged”. Alex probably knows more about this too. There's a spot in there where it does say that with the right

National Defence committee  Thank you so much for mentioning Shoshana Zuboff's idea on surveillance capitalism. My son is actually a cybersecurity researcher and worked with her on that book. There is no question that we give up too much information on social media. There is a wonderful video on The Onion,

National Defence committee  I want to mention that I have a wonderful graduate student, Anika Kale, who has been studying intelligence curricula around the world, particularly from the point of view of gender. She finds that there is almost no awareness of gender in there. You are absolutely right. One so

National Defence committee  There's no question that we've seen this in U.S. presidential campaigns and other campaigns. Bots are created for the explicit purpose of getting people riled up. Sometimes they'll do both sides; they'll do the left and the right. The reason is that they want to sow discord in th

National Defence committee  Were you inviting me?

National Defence committee  Wonderful. Yes, first of all, I wanted to discuss something that I call the “ransomware from hell”. It's a scenario that I made and that I think needs to be aired here. Let's say you're a hospital administrator. You get an email and it says, “One of your employees just clicked o

National Defence committee  Yes. I believe there should be. There is a policy on the responsible use of AI on the Canada.ca website. I read it and it's fine, except that it's dated 2021. The first point I want to make is that you have to do this continuously. It's not one and done. There definitely should

National Defence committee  That's a million-dollar question. We'd all have the Nobel Prize if we knew that. The answer is to keep track. I'll give you one little example. Google has a search engine. We all know about it. By using Google, someone was able to find out the name of a young offender whose na

National Defence committee  Thank you very much. Mr. Chair, distinguished committee members, ladies and gentlemen, thank you very much for inviting me today. I would like to speak to you about a subject that I have been studying for years as a researcher, a University of Calgary professor and a fellow o

Information & Ethics committee  I'll just say I brought up the EU GDPR, general data protection regulation. Some people say it's the reason for Brexit, that it's 88 pages of rules. It does look a bit bureaucratic. I think it should be mined by us to look for the very good ideas that are within it, but not adopt

Information & Ethics committee  In my book the good ones are the ones who expose vulnerabilities and talk about it. A guy called me over and said, “Hey, let me show you something.“ About half the buildings in Canada are locked with a key proximity card called HID. He has discovered a way to hack it remotely. He

Information & Ethics committee  I know Snowden's parents, and his mother sent a copy of my book. I said, “Do you want it in digital form?” She said, “No, I can get stuff to him in Russia.” He definitely did a service, there's no question about that, and in some subtle ways. For example, last year the United S

Information & Ethics committee  I'd like to make the case for data obfuscation, which is you don't always have to keep all the data and keep it exactly. I was approached by a member of a provincial union who said their salaries are going on the sunshine list right down to the pennies they make and was that a

Information & Ethics committee  I would just add one thing. I was on a board once that disbursed $2 million of administrative penalties collected by the Alberta Securities Commission. We used it to educate the public about investors. I would suggest that education would be a wonderful use of any monies collecte