Hello. My name is Joe Bowser. I'm speaking here today as a private citizen and as someone who recently dealt with the full prior surveillance powers of most of the agencies of Public Safety Canada, and probably the CSE as well, although I'll never get confirmation of that.
First of all, I want to have it on record that I'm against the measures introduced in Bill C-51, of course. I'm also against the new proposed measures mentioned in the green paper. That would include compelling passwords at the border as well as data retention as well as back doors to encryption.
I'm actually here today to talk about accountability when our rights are actually violated; how just random Canadians, anyone with a cellphone, can actually have their rights violated; and about how law enforcement deals with actual technology to keep up with the digital world.
One recent thing that keeps popping up in the news, over and over again, is the technology. This box is called the StingRay. In case you're not aware, a StingRay is a device that law enforcement and intelligence communities can use to actually get your IMSI number, which is unique to your phone and your SIM card. It can identify you. Of course, once you have the IMSI, then you can go the telephone provider and say, “I want to know whose IMSI this is”. They can provide you all the basic metadata information, as well as probably all their Internet data, and you can actually pinpoint, using this device, when and where people are.
In once instance, Corrections Canada had one on a prison. They cracked down on illegal cellphones that had been smuggled in. They wanted to make sure no one had cellphones. But a farmer next door also got caught in it. The big problem with these cell towers is that they're fake. If the farmer had to call 911, he'd be in big trouble. It wouldn't work. The call wouldn't actually go through. It would probably reset, he'd have to dial again, and then it would go through. That's two seconds more that the person would have to deal with, where 911 doesn't work. Think about that.
Now, let's say you see something at the art gallery while you're in Vancouver. You see one of the many protests here—like the one outside, where you can hear them chant “Stop Bill C-51”—and let's say you want to check it out. You have, of course, the RCMP with their StingRay out trying to just collect data, to see who's there, as well as to surveil the crowd. You know, they gather some data. They see some people they're interested in. They know the people who are there, so they grab all that IMSI data and then they try to weed out whose IMSIs are what, based on their intelligence. Then they go and surveil them, steal their trash, and do all the other regular normal stuff that police do.
The thing is that if you're under surveillance, even if you're not doing anything illegal or wrong, and even if you don't get arrested, it still affects your life. You're definitely way more paranoid than you were before, especially since you don't have any recourse to know if you ever were under surveillance. There's no way of finding out. There's also no way for the public to actually talk about these technologies or confirm that they were ever being used.
The way the laws are written in Canada is that the onus, the power, is entirely in law enforcement. Even though the criminals already know how to get past the StingRay—it's old technology from 2008—the public doesn't know. Criminals can just get another SIM card or whatever and just bypass this technology. But the public, they don't know. They just don't. They'll keep on getting picked up by the IMSI and they'll keep on getting their data surveilled.
The IMSI is unique to everybody's cellphone. If you have a cellphone, you have an IMSI. It can be picked up by a device that's in the back of a van with some antennas. This device isn't actually registered with Industry Canada, so that's technically illegal as well, although I'm sure there's a warrant to get around that.