News for hackers. Stuff that matters.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @08:59AM (#38952235)
> But it was also enabled by a belief in the reliability and credibility of IT systems, which is profoundly undeserved and inaccurate

I don't think this is a real thing. The individual system was vouched for by senior people. That's why it wasn't questioned any further.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by UglyToad on Thursday January 11, 2024 @09:17AM (#38952437)
The other complication was that a change in the law was made to assume computer systems were correct by default due to the problems with the existing law around breathalysers and speed cameras:

"In 1997 the Law Commission published a paper which went into some detail about the use of mechanical and computer evidence in court. It seemed a little too fixated with the effective workings of speedometers, traffic lights and breathalysing devices called ‘Intoximeters.’ It concluded that the present law is ‘unsatisfactory’ because of the necessity for prosecutors to ‘prove that the computer is reliable.’"[0]

The amended law changed the burden of proof from the prosecution proving the system functioned correctly to the defence proving it didn't, without access to the systems being used to prosecute them.

[0]: The Great Post Office Scandal, Nick Wallis

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by ExoticPearTree on Thursday January 11, 2024 @10:00AM (#38953032)
> The amended law changed the burden of proof from the prosecution proving the system functioned correctly to the defence proving it didn't, without access to the systems being used to prosecute them.

It is mind boggling that someone thought it is OK to put this into law. What happened to the idea of innocent until proven guilty?

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by paulmd on Thursday January 11, 2024 @10:51AM (#38953873)
Seems obvious what happened in context: the government got tired of people “weaseling out” of speeding tickets and breathalyzers (think of the kids!!!) and wrote a law saying the machine right by default unless you had a reason to think otherwise. And of course prosecutors never rest at constructing a novel theory to win cases, so soon enough it was being used in serious cases and not speeding tickets…

(not that it’s fundamentally just with speeding tickets either really! but it's also kind of understandable, you're the 27th person the judge has heard today trying to weasel out of a speeding ticket with the same set of "but the machine could have been wrong!" excuses. And frankly the brits seem to be a lot more "pragmatic" about individual right vs societal ones... the political class there seems to respect the people there exceptionally little even by political-class standards lol)

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by HPsquared on Thursday January 11, 2024 @10:35AM (#38953606)
The old "this time it's different" trope strikes again.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by belter on Thursday January 11, 2024 @11:15AM (#38954200)
This is the UK legal system...They have been torturing Julian Assange in front of everybody for years...
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by blibble on Thursday January 11, 2024 @02:13PM (#38957257)
the UK legal system has many flaws but the handling of Assange was not one of them

he breached his bail conditions and was rightly jailed for it

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by belter on Thursday January 11, 2024 @07:42PM (#38961900)
Julian Assange has been imprisoned for seven years in the UK, for what were charges in the UK of a maximum, and that is a maximum of five years. The UK Legal system regularly releases on bail people accused of murder...yes murder. Assange, was setup in court sitting away from his lawyers, inside the glass-panelled dock of the court, like if he was some modern, Hannibal Lecter, ready to jump and eat the brains of the judge. Using nothing more than the similar psychological tactics, copied from Putin in Russian. Don't even pretend the court is impartial, just make the accused show up in court, with no communication with the lawyers, and inside a cage...

Judges in the UK have been so impartial they publicly made statements of him being a narcissist, not even pretending to even appear impartial. Nils Melzer, the United Nations special rapporteur on Torture and Other Cruel, Inhuman or Degrading Treatment or Punishment, concluded after visiting Assange in prison is treatment was nothing more than torture...

Yeah totally normal...for the UK legal system...

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by blibble on Friday January 12, 2024 @08:46AM (#38967841)
> the UK Legal system regularly releases on bail people accused of murder...yes murder.

it turns out there's consequences for jumping bail

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by amiga386 on Thursday January 11, 2024 @09:53AM (#38952928)
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by ndsipa_pomu on Thursday January 11, 2024 @10:06AM (#38953123)
That's a tricky law to have on the books. In general, I would agree that computer testimony (e.g. log records) is usually trustworthy, but that's with relatively simple processes such as writing information into a log or recording times and events. However, it shouldn't be applied to larger systems with more complicated functioning such as accounting software unless the results can also be backed up with detailed logs that can be verified to produce the stated result.

The fact that the Fujitsu employees had complete and un-audited access to all the remote terminals should have made the computer testimony unreliable, but of course the post office lied about that and denied that anyone had remote access.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @09:42AM (#38952791)
This is a tricky one, because you could just claim that the system wrote audit trails that show you did something due to a bug. How do you prove it either way?
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by UglyToad on Thursday January 11, 2024 @09:49AM (#38952877)
I think any (financial crime) case built solely on computer evidence is too weak to be prosecuted, even if that means you end up accepting some non-zero amount of financial crime. "it is better a hundred guilty persons should escape than one innocent person should suffer" as someone once said.

In the case of the sub-postmasters the Post Office, as far as I'm aware, never proved where these stolen sums supposedly went. The computer evidence was thought terminating and was the only thing (except false confessions under duress) used to secure these convictions, rather than proper investigative work.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by VBprogrammer on Thursday January 11, 2024 @10:54AM (#38953919)
Yeah, it seems crazy to me that they didn't have to prove where this money went. I suspect the majority of people caught stealing money in any other capacity are probably caught by the changes to their lifestyle being noticed before the financial irregularities are ever spotted.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by notahacker on Thursday January 11, 2024 @11:19AM (#38954283)
The amounts people were prosecuted over supposedly stealing were in the tens of thousands of pounds (some made up the alleged discrepancy by paying back some of their own salary). Not something likely to radically alter the lifestyle of a small business owner (if they had been stealing they'd probably have spent it on cash payments to staff and family, gambling habits and boring stuff like mortgage repayments and savings)

It's crazy auditors didn't spot discrepancies especially with the high base rate of reported frauds and errors, but if finding the receipts for stolen money was the threshold for prosecution any remotely competent thief would be in the clear

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by VBprogrammer on Thursday January 11, 2024 @11:43AM (#38954660)
It's hard to say exactly how much a sub-postmaster makes but from a brief search it seems to be in the range of £30k-£35k. It's not like the kind of money these people had down the back of their couch.

If there is absolutely nothing to corroborate the money going missing, no evidence presented for where or how the money was stolen then there shouldn't be enough to send someone to prison.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by UglyToad on Thursday January 11, 2024 @11:50AM (#38954794)
As the sibling comment says (max reply depth reached) the sub-postmasters in general were just about getting by. Part of why this scandal is so egregious is that these people were often just-about-managing under terms of an incredibly unfair contract with the PO.

The amounts of money involved may be small to business owners in other domains but for SPMs many were almost bankrupted by trying to replace the sums out of their own earnings as you say. This wouldn't have been a rounding error to their lifestyle, it should have been provable to any halfway decent investigator. And if not? Then they get away with it and it's the price we pay not to live in tyranny.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by singleshot_ on Thursday January 11, 2024 @01:59PM (#38957032)
Blackstone’s ratio is ten to one, not a hundred to one.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by jmull on Thursday January 11, 2024 @12:42PM (#38955688)
> This is a tricky one, because you could just claim that the system wrote audit trails that show you did something due to a bug.

Well, yeah. A defendant should be able to argue that because that can (and did) happen and it's bad to routinely wrongly convict people.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @02:39PM (#38957733)
That's not the point I'm making. Obviously it's bad to wrongly convict people.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by jmull on Thursday January 11, 2024 @04:32PM (#38959416)
I guess I don't know what your point is.

I thought when you called it a "tricky one" you were expressing that it might be a bad thing if it were difficult to convict someone based primarily on audit logs.

But if you don't want people to be wrongly convicted, then surely that's a good thing, right? As we know, there's no guarantee a particular audit log is correct.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Friday January 12, 2024 @04:26AM (#38965909)
> But if you don't want people to be wrongly convicted, then surely that's a good thing, right?

Think of it like a diagnostic test, like covid tests. That sort of test has 2 measures, not one (anyone who just says "Test X is 95% accurate!" is selling you something) - specificity and sensitivity. Sensitivity is the percentage of true positives it generates out of all positives, and specificity is the percentage of true negatives it generates out of all negatives.

I don't want people to be wrongly convicted, no, so I want legal tests to have a very high specificity. But I could do that easily, by just throwing every case out as not guilty. The hard bit is raising sensitivity at the same time. You can't just say "if you don't want people to be wrongly convicted", because that justifies far too many things.

> As we know, there's no guarantee a particular audit log is correct.

There's no guarantee anything is correct. Three witnesses could have colluded and someone might go to jail for it, but unless there's a reason to think they colluded, we don't assume that. That's the problem I'm talking about: how do we get a feel for software systems without assuming like the Post Office that they work, or like you that they don't work?

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by timthorn on Thursday January 11, 2024 @12:59PM (#38955967)
Nick (and two former subpostmasters) gave a talk to the University of Manchester a couple of years ago: https://www.youtube.com/watch?v=jpkSIGd7Z68
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by denton-scratch on Thursday January 11, 2024 @10:36AM (#38953622)
> The individual system was vouched for by senior people.

Well, how the Post Office commissioned the Horizon system is something that the inquiry doesn't seem to have got to yet.

From what I've seen of the inquiry (not much), Post Office managers seem to have been desperate to protect the reputation of the Horizon system, and still are. But the miscarriages of justice have now been exposed, and the costs of putting them right are now unavoidable; so the reputation of Horizon can't now be just a matter of subpostmasters.

My guess is that defects in Horizon, and damage to Horizon's reputation, will turn out to affect much more than the wronged subpostmasters. I suspect that some very large commercial contracts will turn out to be affected, and paying compensation to the subpostmasters will turn out to be a tiny component of the costs of this catastrophe. The Post Office is already warning that it may not be able to pay the compensation, and that the government will have to step up.

The Post Office is a weird mess of subsidiaries and holding companies, and has contracts with all sorts of 3rd parties. I anticipate that we are going to witness a slooow explosion of the Post Office, over like ten years. It's ludicrous, of course, that a private company should be able to be complainant, investigator and prosecutor as well as being sole custodian of the evidence (Horizon logs).

It's also ludicrous that the Post Office's lawyers, Cartwright King, should describe requests for disclosure as a "fishing expedition". Defendants shouldn't have to request disclosure of evidence that might help the defence; that is an obligation that falls on the prosecution as a matter of statute law.

I'm waiting for the inquiry to find out how the Horizon system was commissioned, and how it was tested; and who was in charge of commissioning.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by Zhyl on Thursday January 11, 2024 @09:06AM (#38952311)
Yes, because they believed in the infallibility of the software in the first instance.

It was only subsequently that that believe changed to outright lying to cover their own backs.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @09:07AM (#38952328)
I really don't think you can assume that. Other humans will have told them that it was good.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by Zhyl on Thursday January 11, 2024 @09:12AM (#38952375)
I can assume that a wider and deeper understanding of how software works would have meant that the investigations would have demanded a more thorough accounting of how the software worked, evidence provided by the system that it's calculations were correct (an audit trail) and that these questions would be asked at every juncture whenever the issue was raised to a new body or party.

As can be seen by following the story, this wasn't the case. The only evidence provided in criminal cases was essentially a witness statement saying that the system was working correctly and that was the end of it.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by mike_hearn on Thursday January 11, 2024 @11:19AM (#38954290)
Note that they had audit trails of various kinds, but some of the bugs yielded incorrect logs.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by Zhyl on Thursday January 11, 2024 @04:06PM (#38959075)
I didn't know that and that's insidious
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @09:18AM (#38952448)
> The only evidence provided in criminal cases was essentially a witness statement saying that the system was working correctly and that was the end of it.

I'm not saying it wasn't. You're assuming a blind faith in all IT is the cause of this witness' belief. I'm disagreeing with you there.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by Zhyl on Thursday January 11, 2024 @09:23AM (#38952518)
I'm assuming an ignorance in IT which allows for a vote of confidence from a trusted party to go unquestioned and unsubstantiated. Not a blind faith in all IT.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @09:41AM (#38952775)
Fair enough. I might have misread. It was this that made me think that:

> it was also enabled by a belief in the reliability and credibility of IT systems

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by ndsipa_pomu on Thursday January 11, 2024 @09:50AM (#38952884)
Yes, but even after getting lots of reports from sub postmasters complaining about bugs, they persisted in telling their victims that they were the only one reporting any issues. They were lying and knew they were lying as they could just force the sub postmaster to make good any "losses". They were most definitely acting maliciously.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by robertlagrant on Thursday January 11, 2024 @09:53AM (#38952926)
I'm not disagreeing with that. If they're lying then we're not in the "blind faith" discussion any more anyway.
Re:A TV Show Forced Britain's Devastating Post Office Scanda... by asdefghyk on Thursday January 11, 2024 @01:10PM (#38956147)
Re "...The individual system was vouched for by senior people......"

The obvious mistake most likely made here is these senior people where not asked , " exactly how they formed this opinion." and what specific evidence they had.

I would have said , if they could NOT produce the evidence , that verified their statement, their is no way they could make the statement as accurate about the system accuracy.

The people must not have had experience in software development and testing.

Re:A TV Show Forced Britain's Devastating Post Office Scanda... by garyfirestorm on Thursday January 11, 2024 @03:55PM (#38958913)
‘Something something…I swear…to best of my knowledge…that the system works correctly’