The annual Communications Security Establishment Canada report for 2024 to 2025 mentions Toronto a few times but mostly as an afterthought. I still think it’s worth a look though. You can download the report here or read it online.

It begins with an assurance by current Chief Caroline Xavier (she/her) that:

Equity, diversity, inclusion and accessibility inform everything we do and are essential to helping us deliver our mission.

Thank goodness I’m not running the place because my decisions would likely be informed by shit like effectiveness and adherence to/promotion of the Establishment’s mission:

The Communications Security Establishment Canada is Canada’s agency responsible for foreign signals intelligence, cyber operations, and cyber security.

We gather foreign signals intelligence to defend Canada’s national security. We keep the Government of Canada’s information secure. We work with industry and academia to protect Canadians from cyber threats.

Oddly, on page 46 under the sub-heading “Inclusivity in our external representation” (part of the “CSE is Growing and Learning” section), it is noted that:

We worked hard this year to embed EDIA into every facet of our work … including pronouns and a land acknowledgement

Yet there’s nary a land acknowledgement to be found in the entire report! Begs the question, if CSIS can do it then why can’t CSEC?

But not to worry, out of the 56 page report (of which 17 pages are fluff like full-page photos, decorative graphics, and section titles), CSEC has dedicated 4 full pages (plus generous sprinklings elsewhere), to advertising its initiatives on equity, diversity, inclusivity, and accessibility.

So if an acknowledgement or two slip through the cracks then … you know … shit happens. But I can see how shit like this can happen when I read things like:

Our diversity—whether in our backgrounds, skills, talents or motivations—is our strength.

Bringing in people with differing backgrounds, skills, and talents at a superficial level seems like a good idea but am I the only one to suspect that differing “motivations” could be somewhat problematic? Like, would it be considered a sufficiently diverse motivation if an applicant openly wished to destroy CSEC from within?

Maybe a uniquely diverse dearth of motivation is what produced the dearth of land acknowledgements in the report.

But let’s put all that aside for a moment and summarize what else the Establishment gets up to in their spare time. In late 2024 the report claims that CSEC detected and disrupted a foreign ransomware group within 48 hours. Also in 2024 CSEC boasts of helping to take RT off the air in Canada and of assisting in thwarting some botnets. In addition they spent some time providing intel for the military:

This year, we delivered timely intelligence for many named operations, including operations UNIFIER, REASSURANCE and HORIZON.

A number of the same foreign targets of CSEC are the same as those entities targeted by CSIS, namely:

• the PRC’s expansive and aggressive cyber program presents the most sophisticated and active state cyber threat to Canada today
• Russia’s cyber program furthers Moscow’s ambitions to confront and destabilize Canada and our allies
• Iran uses its cyber program to coerce, harass and repress its opponents, while managing escalation risks

While CSEC openly assists the governments of Ukraine and Latvia, domestically they seem more interested in keeping tabs on people:

In 2024 to 2025, following a series of cyber incidents targeting northern institutions, and with the Minister’s authorization, the Cyber Centre began proactively deploying sensors to territorial government IT assets in Yukon, the Northwest Territories and Nunavut. These sensors detect malicious cyber activity in devices at the network perimeter and in the cloud. They are one of the Cyber Centre’s most important tools for defending systems of importance to the Government of Canada

Some people will say that these actions only target government infrastructure and help to increase security but those same people must also admit that simultaneously spreading the attack surface decreases security:

CSE operates Canada’s Top Secret Network (CTSN), a secure IT network used to collaborate and communicate at the Top Secret level. This year, CSE supported major site expansions for existing CTSN clients, including the National Security and Intelligence Review Agency (NSIRA), PCO, Justice Canada and the RCMP, resulting in a 20% increase of deployed endpoints. In the upcoming year, CSE will onboard 3 new government departments to CTSN:

• Environment and Climate Change Canada
• Public Prosecution Service of Canada
• Office of the Commissioner of Canada Elections

Why does Environment and Climate Change need access to top secret information? Maybe it’s for the same reasons that the government Covid jab contracts remain mostly secret.

Other than producing a lot of digital paperwork and giving presentations, it doesn’t seem like CSEC is very involved in most operational matters. Given how often the government ignores even this diminished function of the Establishment does not paint a rosy picture.

Between CSIS’ covert complaints and CSEC’s diverse distractions I don’t think it’s any wonder that Canada’s secret security apparatus relies heavily on the Five Eyes.

That being said, I’m pretty sure that it’s not the priority of the US, UK, Australia, or New Zealand to keep Canadians safe so I don’t find these or other partnerships reassuring. Something to keep in mind as the summer simmers and international intrigues increase.

I guess it’s fairly obvious, isn’t it?

After a while a blog becomes like a part of your body; it’s hard not to want to scratch it regularly. For me, every other day seems to work okay but a week — well, that requires one big-ass scratch.

So, in lieu of a bunch of back-dated posts, here’s a digest of what’s been keeping me busy for the past week:

1. I’ve started a new blog. Kinda. The first part is the domain registration and the setting up of all the hamster wheels and such. Then the blinking buttons and knobs and switches get put in, and finally you have the beginnings of a blog:

   RayJohnBlog.com

   Did I explain that correctly? What I mean is, you won’t see much but an empty blog sitting there, so don’t get all excited. But I don’t expect to take too long until launch — I’ve got an adequately pointy and antagonistic theme picked out and I’ll be keeping everything else pretty simple at the beginning.

   K, so who’s Ray John? I am. He’s an alias, a moniker, a nom de plume.

   Actually, he’s a bit more than that. Ray John is a personality that I hope to develop into results like money, loose women, and fame. Not necessarily in that order. Of course, since I’ll be penning him, and even more importantly, since I’ll be the face (and perhaps voice) of Ray John, he’ll have to be some well established part of my psyche that has plenty to say. So if you can sit through this drivel, you should be okay with Ray’s stuff too.

   I’ve known two Rays in my life; one saw my younger sister for a while and ended up being the assholiest of jerks, the second was a developer I worked with who was a thoroughly enjoyable fellow. Neither Ray was the inspiration here … I don’t even particularly like the name Ray to be honest. The name comes from “rage on”, the underlying idea that started me down this slippery slope. The combined name “Ray John” works phonetically, sounds like a ubiquitously ticked-off middle-class white dude, and also uses the most common spellings of  both names. The thing was hardly spontaneous; sorry if that bursts anyone’s bubble. You can go right ahead and pretend I beat the name out of a three-headed purple dragon named Elvis if it adds to the mystique.

   Since Ray is also a Torontonian I’ll be syndicating some of his blog on TCL. Ray’s blog topics won’t be limited to Toronto, however, which is why I needed to make this split. Besides, I want to give him room to breathe and grow.

   Be sure to check out “The Ray John Blog: I Got Beefs” just as soon as I post a big honkin’ link to it at the top of the sidebar.As for Toronto City Life, why, we’re just getting started here. ;)

2. Got me my first fully independent contract (and I gave myself a generous raise too). Okay, so technically the second contract, but who’s counting? I started on a portfolio site but didn’t have a chance to add any content before I landed the gig. Meh, maybe next time.

   Still, great excuse to get me a new ‘puter. Nothing fancy, mind you, but she’ll crunch the numbers I need crunched.

   

3. A couple of nights ago I notice a “drip drip” coming from somewhere around the bedroom when the upstairs neighbours were running their water. By yesterday afternoon, the leak had broken through the ceiling in my closet.

   
   I’d assumed that the water must either be coming from the shower or sink … it ran too long for it to be the toilet (thank God!) The plumber initially agreed with my assessment but after poking his head through the ceiling for about an hour, running the neighbours’ faucets, man-handling the pipes, etc., he concluded that it was the grout in the shower upstairs that was the source of the leak.

   Seems like older buildings like mine had grout applied right on top of drywall so once compromised, the thing just turns to mud. In this case, however, it isn’t merely the grout that’s coming away, the whole corner of their shower is apparently all puckered up and ready to fall off. Minor miracle that I’d just noticed it now, in fact.

   So, good news is that, for me, it means minor drywall work in my closet. And I learned how to fix common water pressure problems too! For my neighbours, it means that their bathroom (and especially shower), will be off-limits for a while.

… Continue Reading