Introduction: Here be digital data

The space is mostly dark; there is no silence. Footnote ³ Bright lights, predominantly white ones, compose geometrical figures. They draw your attention; they are focal sites – they become the object of your cognitive efforts. This is a fully embodied experience. Each artwork is made of sound as much as of visuals. As you walk into the exhibition, sound surrounds you. You find yourself in the middle of an avalanche of blinking digits and moving lines. You nearly feel overwhelmed, and it gets more intense when you approach each installation. The sounds, the lights, they are the by-product of datasets generated for other purposes. As the exhibition brochure puts it, ‘[Ryoji Ikeda] develops his computer programs and algorithms that generate the images and sounds for his compositions.’ Footnote ⁴ Here the datasets work like compost. Most of the datasets were generated by sophisticated devices, but they are collected by Ikeda as if they were ‘bachelor data’.Footnote ⁵ They are recycled into abstract visuals and rhythms, seemingly familiar images and noise. There is no (data) composition without some form of computing. This world speaks data and these data are way too embodied.

We live in medias data. As Ikeda's compositions show, data inform our world – they can compose our reality, and they arrange us inside it. Security practice is no exception. From smart and biometric border controls to body scanners, from drones to passenger and financial surveillance systems, processing digital data is crucial for (in)security actors.Footnote ⁶ Data and data analytics carry the promise of actionable knowledge, that is, meaningful information for targeted security decisions. Critical security scholars increasingly cater to these ‘security devices’, investigating their practices and their politics.Footnote ⁷ But, with a few notable exceptions,Footnote ⁸ critical security research fails to question how data come to be part of security compositions. While Critical Data StudiesFootnote ⁹ and Surveillance StudiesFootnote ¹⁰ increasingly invite data to be conceptualised as socially and materially constructed artefacts, Critical Security Studies (CSS) tends to consider data as the crude foundations of security assemblages, as though data were endowed with obvious representational value. In light of Ikeda's artworks, we summon CSS to explore digital data, to borrow from Lauren Wilcox, as both ‘embodied and embodying’ elements of security compositions.Footnote ¹¹

This contribution is a conceptual composition. We speak to CSS by bringing together research and notions from diverse disciplinary perspectives. We draw from Science and Technology Studies (STS) writ large, including new media studies as well as the philosophy of technoscience and the history of computing.Footnote ¹² This is not just a joyful exercise of eclecticism, but a thoughtful effort to compose with,Footnote ¹³ to bring together diverse insights that permit you to better understand how digital data come to play a pivotal role in security practice. We propose two tropes borrowed from feminist and critical approaches to technoscience – composting and computing.Footnote ¹⁴ We argue that both are ways of making sense of, and making sense with, digital data. Composting is about composing data as lively elements, while computing is about composing data as embodied and embodying elements. Both invite us to think of data not as mere output of a single process of datafication, where something is turned ‘in[to] a quantified format so it can be tabulated and analyzed’.Footnote ¹⁵ They rather permit us to think of data in their becoming something: a thing whose materiality, meaning and productivity should be investigated in a situated manner. They make us follow ‘quasi-objects’ characterised by their being at the same time specific and relational,Footnote ¹⁶ rather than assuming them as immaterial and representational. Because – as Ikeda's artworks and a growing scientific literature teach us – the materiality, meaning, and productivity of data change across diverse practices.Footnote ¹⁷

Our experimental composition is a response to Claudia Aradau's and Tobias Blanke's suggestion that ‘data needs to be approached as an object of inquiry rather than subsumed to knowledge’.Footnote ¹⁸ We argue that a multisensorial approach proves helpful in such an endeavour. As Ikeda's installations remind us, sound and listening – and not only visual machines, graphs, and images – are essential elements of our relation to digital worlds. And, in fact, they have informed and continue to affect security practice and computing.Footnote ¹⁹ In this article, we pay special attention to what sonic experiences of the digital can teach us about security compositions: how they can help us to deepen an exploration of data as something, and as something becoming part of a security something (else). We suggest that our tropes are well suited for this experimentation because they foreground practices of togetherness, as signalled by the common prefix com of composting and computing. Here, togetherness is not simply the result of a composition, that is, a tightened fabric of fixed relations, but it is the very process of composing, which is an eminently political and unstable activity of becoming. By attending to togetherness, we can explore security practice as it were not a matter of clear-cut assemblages, but rather a constant, composite, and non-linear attempt to ‘make something with something’.Footnote ²⁰

This contribution comes along, in itself, as a composition. A series of brief accounts of artistic data compositions come to punctuate, interrupt, and inform what would be, otherwise, quite a traditional structure. These paragraphs – like the one opening this introduction – are formatted in italics. One of these accounts is accompanied by an image taken by a photographer during Ikeda's exhibition at the Eye Filmmuseum Amsterdam (September to December 2018).Footnote ²¹ While the accounts do not directly speak about security practice, they mirror embodied experiences of digital data that are valuable for CSS because they run counter to a certain ‘visualism’ of social sciences and humanities.Footnote ²² In the next section, we discuss how critical security scholars approach (or not) digital data in their work. In conversation and in response to this literature, we then propose moving towards a critical study of security compositions. We sample the diverse smorgasbord of STS rather than gorging on one (fashionable) concept or author as the ultimate fix to CSS’ shortcomings. In this spirit, we introduce some terminological reflections on the tropes we propose – composting and computing. Even though our contribution is chiefly of a conceptual nature, we also use each trope to unpack a given security practice. We retrace how passenger data become composting material for European law enforcement authorities. And we explore how asylum seekers’ voices are turned into data and then computed by governmental agencies to assess the (un)trustworthiness of migrants’ claims. Based on these inputs, we turn our ear to contemporary composers. We walk into a multisensorial exploration of technology and security – where data as sound and noise come to trouble often too silent surveillance practices. Eventually, these steps permit us to address, in the outro, the question of how to grasp security data practice, and thus what it means to live in data-informed worlds.

Digital data in Critical Security Studies

What are we looking at when we look at digital data? Powerful projectors are beaming white light against an enormous black wall. The same light turns people into shadows and silhouettes, while exposing the museum's infrastructure. Ultimately, the above picture (Figure 1) makes it nearly impossible to firmly say what we are actually looking at. Alphanumerical characters, bits, people, shadows, profiles, infrastructure? Besides, the digital file on which the image is stored is not formatted to convey the constant noise, the constant pulse in our eardrums.

Figure 1. ‘Ryoji Ikeda’, September to December 2018, Eye Filmmuseum, Amsterdam. Photo: Studio Hans Wilschut.

Well before the so-called Snowden revelations,Footnote ²³ CSS scholars had already engaged with security technologies. In particular, critical researchers were among the first to look at how data-driven systems (re)shape the security governance of the international. They cast a light on the growing deployment of biometric controls, and the multiplication of databases as security mechanisms.Footnote ²⁴ Focusing on data analytics, their work now unpacks the forms of knowledge that underpin data-led security practices,Footnote ²⁵ and investigates the institutional relations that organise sociotechnical assemblages.Footnote ²⁶ Often in conversation with Surveillance Studies,Footnote ²⁷ critical security scholars have built a solid literature on the many ways in which governmental and private actors use digital data to govern populations. However, what is often missing in these accounts is proper attention to the diverse roles of (digital) data. Data are implicitly understood as if they were just ‘out there’, naturally available in great quantity, as an obvious by-product of our digital age. Even when critical scholars think of data as the data-doubles of individuals,Footnote ²⁸ the tendency is to present them in rather immaterial terms. For instance, the digital format of data is considered as a mere facilitator for the spread of algorithmic governance. It is only seldom thought of as a crucial site of bio- and disciplinary politics, that is, where a ‘whole range of decisions that affect the look, feel, experience, and workings of a medium’ happen, and where ‘a set of rules according to which a technology can operate’ are decided and tentatively imposed upon others.Footnote ²⁹ In other words, in most CSS literature, data are not something to be problematised and accounted for. They are assumed as a given, an instrumental entity that just makes the work of those who govern easier, and that facilitates exchange and cooperation among security actors.

Increasingly, however, this view about data and security practice is evolving. For instance, Evelyn Ruppert et al. state ‘that data has a performative power that is resignifying political life’.Footnote ³⁰ Their perspective opens up a more historical and sociological approach of datafication processes. Their main focus is on the social dynamics that give meaning to data practices. As they note, ‘data is not an already given artefact that exists … but an object of investment … that is produced by the competitive struggles of professionals who claim stakes in its meaning and functioning’.Footnote ³¹ There is great value in this kind of approach. For instance, Didier Bigo's study of data analysts working in security agencies shows how the very accumulation of data becomes a powerful justification to shape any further vision of European security cooperation.Footnote ³² Moreover, research carried out in the same vein casts a light on how diverse security agencies rely on data as valuable capital to establish transnational and public-private relations,Footnote ³³ and to govern at a distance.Footnote ³⁴

Researchers focusing on pre-emptive security unpack an important facet of data politics. Their studies show how the present and the past become data sources for visualising a ‘speculative’ future, which becomes the informational ground on which security decisions about action can be taken today.Footnote ³⁵ These works highlight the crisis of the representational model through which we generally understand data. What security actors work with, according to Louise Amoore, is mainly a ‘data derivative [that] is not centred on who we are, nor even on what our data says about us, but on what can be imagined and inferred about who we might be – on our very proclivities and potentialities’.Footnote ³⁶ In other words, the power of data does not lie in their conveying information about us or about a given state of existing affairs. Data – and in particular digital data – have value for security actors because they are composable into what Amoore calls a ‘mosaic’, that is, the backdrop justification of a security decision that aims to prevent a future state of affairs from coming into being.Footnote ³⁷ Her work highlights how this post-representational use of data in security practice is highly problematic. First of all, it is difficult for those who are governed to challenge a mosaic whose tiles are often shrouded by secrecy, and whose selection criteria are not disclosed by security actors.Footnote ³⁸ But it is also problematic for some security practitioners. As Amoore notes, ‘[t]he “real time decision” … is simply read off from the derivative – replacing the agonism and radical uncertainty of decision and placing responsibility in the realm of response.’Footnote ³⁹ This form of automation – or ‘decision support’ system, in the official discourse of some institutionsFootnote ⁴⁰ – redefines the role and power of some security actors. For instance, it disempowers those that have no say in what is left to ‘real decision[s]’, that is, the seemingly mundane adjustments of a security composition's parameters.Footnote ⁴¹ In sum, this literature foregrounds the necessity to take seriously the diverse ways in which data become part of a security composition, and how they affect the other elements of the same composition.

On their own, the two described strands of the CSS literature fail to provide a fully useful way to grasp digital security compositions. The former approach shows how data and databases are now established and widely recognised tools for doing security. The latter brings us closer to the material and cognitive inner workings at play in data-driven security practice. Obviously, the common concerns at the core of these literatures are the evolving practices of governing through (digital) data. Yet, these studies tend to overlook the other side of the coin – the governing of data themselves. Sociological approaches are chiefly concerned with a focus on how humans and human institutions – be they border control agents, or security agencies – use their access to data(bases) to act upon other humans or other human institutions. Data and databases are, once established, considered the somewhat constant elements of a security assemblage. Sociomaterial approaches engage more closely with specific technologies, in particular with more or less advanced data analytics, and question how data practices coorganise new ways of doing security and thinking the political. But these works, albeit implicitly, foster a problematic worldview of data compositions. Their emphasis on the role of risk calculation and algorithms presupposes that ‘data is passive and algorithm is active’, while, in actual fact, ‘the passive/active distinction is not quite accurate since data does not just exist – it has to be generated’.Footnote ⁴² And – as we suggest – they not only have to be generated, but also composted, computed and ultimately governed.

Towards a critical study of digital security compositions

Yasunao Tone is, like Ikeda, a Japanese artist working on experimental approaches to music and sound. He has a special interest in (dis)information and noise – noise here both in the sense of potentially meaningless data, and of sound. Footnote ⁴³ He often plays with code, images, text, and, most importantly, the translations between them, that is, how something becomes something else. Footnote ⁴⁴ Tone has explored the digital by playing with altered CDs, that is, CDs submitted to physical deterioration. CDs are attacked, scratched, damaged, decorated with tape, and then played, generating music based on glitch and noise. The altering of the discs must, however, be limited. CD players are indeed designed to deal with a degree of problems, and sonically compensate for instance some minor scratching. Beyond a certain degree of problems, however, CD players will regard the CD as unfit for playing, and just stop. The artist can thus play with the system only to the extent that the system does not interpret the situation as excessively problematic. Footnote ⁴⁵

Our contribution is an invitation to broaden the scope of CSS with regard to data security compositions, by exploring the ways in which data are played with in such compositions. Against the backdrop of the CSS literature discussed above, we suggest following how data become something with which something else can be done. Our previous researchFootnote ⁴⁶ and current fieldworkFootnote ⁴⁷ invite us to take seriously the fact that several actors consider data as they were both a solution and a problem for security practice.Footnote ⁴⁸ Not only does distinguishing noise from signal remain problematic despite the much-trumpeted breakthroughs in machine learning or artificial intelligence, but there are also manifold actors – be they human institutions, legislative instruments, or technical infrastructures – that are busy generating, storing, integrating, curating, and protecting data.Footnote ⁴⁹ In other words, governing data creates the condition of possibility to govern people and things.

Our insight is further supported by Matthias Leese's empirical work on ‘standards and standardization’, which shows the potential of unpacking ‘the choices within standardization’ for specific data and data-driven technologies.Footnote ⁵⁰ Similarly, Mareile Kaufmann et al. argue that patterns for predictive policing are to be understood as ‘matter[s] of concern’.Footnote ⁵¹ They are not linear descriptions of an (in)security reality ‘out there’, but ‘depend on specific algorithms and databases that bring them into being, as well as on decisions whether a pattern is considered meaningful in the specific context of predictive policing’.Footnote ⁵² This article contributes to this emerging CSS literature by foregrounding how digital data matter even before they come to matter in more traditional security terms;Footnote ⁵³ in other words, even before they become ‘data derivatives’, a tile of a security ‘mosaic’, or a pattern to be visualised. For instance, Tone's artwork emphasises the importance of the material support on which data are stored. Taking care of appropriate storage conditions is essential for data to become something through(out) their life cycles.Footnote ⁵⁴

In the spirit of composition promoted by this Special Issue,Footnote ⁵⁵ we embark on a conversation with multiple works. We draw from diverse disciplines – STS writ large, but also diverse art forms, especially sound and music. While CSS has punctually engaged with leading STS authors and core concepts,Footnote ⁵⁶ we believe that there is still a great untapped potential in such a vibrant and diverse literature. This is where our tropes of composting and computing come from. And it is from artists and art critics that we learn to attend to the sound – to look at data beyond visuality. Rather than proposing one more (sonic) turn to CSS, we bring STS scholarship and arts to bear on a critical study of digital security compositions.Footnote ⁵⁷ By attempting to recompose them into our contribution, we wish to challenge our own (disciplinary) understanding of digital data. And this, we humbly suggest, is already a way to unpack and question digital security compositions.

The composting trope

Back to Ikeda's exhibition. These sounds, these lights, are the by-product of datasets generated for other purposes. As is often the case, Ikeda has mainly used ‘scientific datasets’. Footnote ⁵⁸ Right here, right now, they give way to unforeseen images and sounds, to a new world. And there are a lot of data surrounding you. An avalanche of numbers turning into their own cartography. Lines of different lengths that roll through a giant screen. Diagrams emerge out of the mess, pointers move up and down, left and right – they insist on a specific point. The images change continuously. Even those standing still become something else. If you turn your head quickly, your peripheral vision captures a multitude of colours out of the intensely white beam of the lamp. The camera of your smartphone will only record these changing colours. It is unable to process the light pulses the same way as you are sensing them. And there is this constant (data) noise.

Philosopher of technoscience Donna Haraway often uses the trope of compost.Footnote ⁵⁹ In her work, compost functions both as a verb and a noun. She explains that: ‘I work with string figures as a theoretical trope, a way to think with a host of companions in sympoietic threading, felting, tangling, tracking, and sorting. I work with and in SF [science fiction] as material-semiotic composting, as theory in the mud, as muddle.’Footnote ⁶⁰ Composting can be thus understood as a theoretical trope, but one where the concept – if we wish to call it a concept – is not purified from its everydayness. In other words, composting only works well as a trope when we first relate to the mundane practice of compost.

Compost is ‘decayed organic material used as a fertilizer for growing plants’.Footnote ⁶¹ By extension, it is ‘a mixture of compost or similar material with loam soil used as a growing medium’.Footnote ⁶² As a verb, to compost is both to ‘make (vegetable matter or manure) into compost’ and to ‘treat (soil) with compost’.Footnote ⁶³ Not surprisingly, the term shares the same etymological roots as composition. According to the dictionary, both terms can be traced back to the Latin verb componere, meaning ‘put together’.Footnote ⁶⁴ Starting with the mundane of composting may be promising, both for gardeners and for theorists. The Practical Handbook of Compost Engineering notes that ‘[t]here is no universally accepted definition of composting’, but that, in ‘practical’ terms, ‘composting is a form of waste stabilisation, but one that requires special conditions of moisture and aeration to produce thermophilic temperatures’.Footnote ⁶⁵ Philosophers Sebastian Abrahamsson and Filippo Bertoni seem to agree, as they argue that ‘[v]ermicomposting is complex: the coexistence of heterogeneous and disparate processes and entities may bring about problems.’Footnote ⁶⁶ For composting to succeed, the steering of the work of many is needed, and an understanding of what each thing may specifically contribute is often essential. As Abrahamsson and Bertoni suggest, this opens several questions about the kind of politics that composting triggers.Footnote ⁶⁷ For instance, Haraway's recent work plays with the idea that composting presupposes, or, better put, enacts some forms of composition. Both composition and compost are about doing ‘something with something’ (to borrow again from Guattari).Footnote ⁶⁸ They are about accepting that there is a state of affairs with something already going on. That there are things already there that may be brought together. Composting and composing are processes. The things that are already there modify what comes to them, and they are modified in the encounter. They are transformed and transformative things, undone and enriched by the same process. A piece may be broken to adjust to another. A melody emerges by the juxtaposition of some notes (and silences). As Ikeda's artworks vibrantly show, datasets are recoded and curated, and we may end up developing a better knowledge of our world – even if his datascapes do not convey any information about it.

Composting troubles the somewhat classical questions about who the agent of the action is. Is it the vermicomposter? The worms eating the waste? The waste itself? This trope shows that providing a simple and unequivocal answer may be missing the point. The questions themselves reify a linear model in which there is a unique subject that acts, while everything else becomes the object of that action (a target or a tool). Composting highlights the need to organise the appropriate conditions of participation for discrete elements, that may contribute to the overall action of turning what for some people is waste into food for worms, then soil, and eventually nutrients for plants. In some cases, the conditions facilitating composting rely on the yeast that must be added. This is what we illustrate in the following section, where some digital data are curated to act as compost for speculative security action. In other cases, some data are extracted from larger datasets, enriched with further meta-data and stored away – to be cross-matched when new information is received and mobilised in support of an investigation. In sum, rather than striving to locate the ultimate agent, we aim at understanding how data as something are inscribed into a rationale of governing – what has to be put in place to make the compost produce its ‘productive juice’.

In the following section, we suggest thinking Big Data security from the vantage point of the composting trope. This means to explore Big Data's expectations and anxieties about the increase of noise in a situated manner. According to Rob Kitchin, ‘Big Data is characterized by being generated continuously, seeking to be exhaustive and fine-grained in scope, and flexible and scalable in its production.’Footnote ⁶⁹ This also implies the ‘challenge of analysing’ these data, that is, ‘coping with abundance, exhaustivity, and variety, timeliness and dynamism, messiness and uncertainty, high relationality, and the fact that much of what is generated has no specific question in mind or is a by-product of another activity’.Footnote ⁷⁰ In other words, too many digital data are constantly being produced, stored, and processed. This simultaneously invites and requires the deployment of appropriate computing power, storing capacities, and knowledge practices.Footnote ⁷¹ The assumption underlying big data practices is that there must be a great potential in this ever-growing mass of data. Still, avoiding getting lost in the translation of too many data sources is a major issue for security actors.

Security as recycling data

Composting digital data, rather than avoiding ingesting them in first instance, is the main solution adopted by the European legislator in the face of data proliferation. Take the Passenger Name Record (PNR) Directive, which is a massive scheme for air passenger surveillance.Footnote ⁷² Adopted in 2016 by the European Union (EU), it requires all air carriers to transfer passenger information to national law enforcement authorities, whenever a commercial aeroplane flies between a EU Member State and a third country.Footnote ⁷³ All passengers are filtered through the checking of their PNR, even if only a few will be stopped or denied boarding. As such, the PNR system embodies the ambition of many governmental actors and private companies arguing that data-driven technologies eventually permit the control of circulation without hampering flows.Footnote ⁷⁴ PNRs are essential for the continuous working of the commercial air sector as we now know it; their circulation greatly facilitates air travel.Footnote ⁷⁵ The PNR Directive creates another cycle of use for these pre-existing data. Here PNRs are recycled in the sense that they are routed not only to commercial actors but also to security authorities, the Passenger Information Units. These new law enforcement units are responsible for storing, processing, and exchanging PNRs. They continuously receive vast amounts of personal data, and have to analyse this information for a purpose different than the original one, for example counterterrorism or organised crime prevention. One could attempt to picture this as a perpetual reinvention of life for data, but only, we suggest, by including the fact that such renewal implies processes of coming apart, breaking down, and decay.

The organisation of the novel PNR lifecycle can be aptly understood with the help of the composting trope. For a start, the very creation of an automated system for transferring data from reservation systems to national authorities required the development of a new messaging standard. The system now endorsed by several countries and companies, PNRGOV, was developed by a private-public working group led by the International Air Transport Association (IATA).Footnote ⁷⁶ This recycling step demonstrates that data are both socially and materially constructed, and that their construction, curation, and – if necessary – reformatting are necessary to enable security composition. So far, CSS literature has paid too little attention to security actors’ organisational efforts underpinning the recycling of data into a security practice. The main focus of critical research has tended to remain the irruption of advanced data analytics and the cohort of private and public actors promoting and adopting them for security purposes.Footnote ⁷⁷ Yet, the governmental ambition to let data speak by themselves requires much more than the data in and of themselves. It presupposes the technical ability to receive and handle data from various sources, as well as the adequate computing infrastructure to process them and the statistical expertise to make (some) sense of them. The importance of these ‘feasibility’ requirements is becoming evident to those authorities that want to compost PNR for their security compositions.Footnote ⁷⁸

Big data security practice promises to connect the dots. Composting illustrates how this ambition is supposed to function in practice. According to the European legislator, the added value of a PNR-based surveillance system is the ability to identify ‘unknown suspects’,Footnote ⁷⁹ that is, those travellers that are not (yet) sought by law enforcement authorities. In the text of the PNR Directive, this practice is called risk assessment, and it requires two forms of dot connection. First, a series of profiles should be drawn. Then, a link between a profile and an actual traveller should be established. To sketch a profile, not only external intelligence is to be used, but also the very PNR data stored by the Passenger Information Units.Footnote ⁸⁰ These datasets are thus expected to act as reactive agents, to complement the intelligence coming from outside the PNR database. In this sense, the storage of PNRs for a long period after their initial ‘depersonalisation’Footnote ⁸¹ (for a total of five years) is motivated by the expectation that this extended lifecycle may permit their further recycling. In turn, this would give way to better knowledge generation as if (somewhat decayed) PNRs were compost in a dynamic data-bin.

But composting does not only happen when security agencies want to deploy ‘predictive’ algorithms or machine learning systems. It is also at play in more classic investigative work, especially when this involves dealing with potentially overwhelming sources of data. Take, for example, existing European approaches to terrorism content posted on Internet platforms. At present, the EU Internet Referral Unit flags ‘“jihadist” terrorist online propaganda’ on social media, asking for its removal.Footnote ⁸² At the same time, it stores this material in an ‘electronic reference library’ that ‘contains, in a structured way, original statements, publications, videos and audios produced by terrorist groups or their supporters’.Footnote ⁸³ The main goal of this composting operation is to facilitate future investigations. Here, digital data can become a security something, for example the potential pieces of a future ‘mosaic’.Footnote ⁸⁴ However, this happens only when data have been properly recycled, that is, stored, preserved, and put at the disposal of other actors - such as law enforcement authorities and IT systems.

In sum, thinking about this security practice with the trope of composting offers us some critical vantage points. Composting is a trope and an activity closely related to Haraway's commitment to ‘stay with trouble’.Footnote ⁸⁵ This trouble is also, as Thierry Hoquet reminds us, an eminently present situation that should not be avoided even if difficult.Footnote ⁸⁶ Critical security scholars have discussed the deployment of PNRs and similar data-driven systems as a way to dodge the trouble of present, if not imminent, security threats by visualising and mobilising future ones.Footnote ⁸⁷ However, composting invites us to shift attention from the algorithmic ambitions of the system to the diverse ways in which data become something, now and in the future. Similarly to the notion of data derivative, this points towards the need for a better understanding of the temporality of the ‘real decision’ concerning security action.Footnote ⁸⁸ However, composting insists on understanding data as lively entities – whose lives are to be continuously supported or organised. It thus foregrounds security actors’ efforts to continuously ensure the material conditions that enable their (security) composition. This means curating, storing, and protecting data in a way that their security compositions are – in composting jargon – ‘stabilized’. The fact that this is not an easy task opens up new research and political avenues. It obliges critical security scholars to resist the idea of a security system as a black box, or as a practice that will ever become black-boxed. It also offers a political grip on the security practice itself, inviting scholars to stay with the trouble of studying security actors' troubles with digital data. It multiplies questions about what is to be considered a good data composition, thus supplementing those raised during the legislative process. Grasping how digital security compositions work in practice might require that we stop focusing on opening the black box. Instead we may want to take the time to rip it up, shake its components, and pay attention to how that actually sounds. Ikeda's compositions resonate vibrantly in this endeavour.

The computing trope

Let's go back again to Ikeda's artwork. Stepping into Ikeda's installation may be overwhelming. You are invited to leave the quest for a univocal meaning outside the door. The titles of the installations are only on the brochure. The only signposts are the white lines on the wall, just after the entrance. They tell you that ‘[Ikeda] develops his computer programs and algorithms that generate the images and sounds for his compositions.’ No composition here saw the light of day without some form of computing. Compared to your everyday experience of the digital, whose inner workings become perceivable only when problems occur, you are now face to face with manifestations of computer processing that co-produce extremely bodily experiences, directly targeting your senses. Through constant sound, these experiences generate and sustain a dissonance with your all-too-polished perception of what data are supposed to look or sound like.

In order to achieve a more embodied understanding of digital data, we should take computing seriously. Introducing computing as a trope may sound counterintuitive, especially since the work of CSS on data-driven security already foregrounds algorithms and calculative techniques.Footnote ⁸⁹ However, our inquiry concerns the connections between compost, the componere of compositions, and the computus behind computers and data. If we accept the idea that computus is rooted in the counting of one's fingers (digitus), as opposed to the more abstract calculus,Footnote ⁹⁰ we are brought back to the need to consider the inherent materiality of digital security compositions. The term computare is, itself, a combination of com (together) and putare (to settle).Footnote ⁹¹ That is, it is a term fundamentally about bringing together, about togetherness. We are confronted with the importance of how, by counting, people and things can be brought together or torn apart.

The birth of modern computing is deeply rooted in security. Most notable technological advances in the field were triggered by codebreaking efforts, as well as ballistics calculations, before, during and after the Second World War.Footnote ⁹² Computers were initially persons (most often women) responsible for calculation – ‘hidden figures’ (to borrow from the title of a Hollywood movie)Footnote ⁹³ in a complex composition of human and non-human resources that made computing possible. Digital data were only progressively developed as actionable (that is, computable) and storable (and thus reusable) elements, as well as outputs of computing. In this sense, the history of computing does not only retrace the abstract models through which computer designers imagine the world and its politics,Footnote ⁹⁴ but also highlights the material practices through which computers relate, and thus meddles in its world and politics.Footnote ⁹⁵

The fact that computers compute is however more than a tautology. First, it reminds us that much of the work that computers do is different from what they generally pretend to be doing. It is as if it was better to keep computing far from our sight, although traces of such computing might be heard in the noise produced by some machines – typically dysfunctional, overheating, potentially about-to-die devices. For instance, Wendy Chun notes that ‘[w]hen the computer does let us “see” what we cannot normally see, or even when it acts like a transparent medium through video chat, it does not simply relay what is on the other side: it computes.’Footnote ⁹⁶ In other words, computers crunch things out there as if they are something else than what they supposedly are – not images or sound, but very material data – be they punch cards, ‘variations of magnetic field, voltages, or pulses of light’.Footnote ⁹⁷ And then they spit out further data that can become something else: images or sound. With the diffusion of computers, attention for this passage is often lost. As Chun argues, ‘[i]n order to become transparent, the fact that computers always generate text and images rather than merely represent or reproduce what exists elsewhere must be forgotten.’Footnote ⁹⁸ This is an important reminder of the risk of missing the sites of computing politics. In fact, even critical discourse around data processing is eager to embrace visual similes; it is typically all about transparency and opening the black box.Footnote ⁹⁹ Chun further argues that ‘[t]he current prominence of transparency in product design and in political and scholarly discourse is a compensatory gesture.’Footnote ¹⁰⁰ If anything, taking the material practice of computing seriously invites us to resist visual and political shortcuts by retracing its embeddedness in the fabric of security.Footnote ¹⁰¹

Second, computing presupposes some forms of programming. The history of computing shows how material and compositional programming can be. Again, Chun reminds us that: ‘[a]s computers became machines, programmers became human and programming became functionally equivalent to the process of “setting up” the ENIAC [Electronic Numerical Integrator and Computer]-the physical act of wiring the machine for a particular problem.’Footnote ¹⁰² As Michael S. Mahoney, historian of computing, notes: ‘[t]he computer is not one thing … and the same holds true of computing.’Footnote ¹⁰³ He then highlights that ‘[b]etween the mathematics that makes the device theoretically possible and the electronics that makes it practically feasible lies the programming that makes it intellectually, economically, and socially useful.’Footnote ¹⁰⁴ In this context, it appears necessary to keep questioning our understanding of computing beyond engineering and mathematical accounts, but also beyond visual imagery and imagination, that is, the transparent machine, the black-boxed processing. Until now, not only scholars but also artists have been struggling to find ways to make the data in big data accessible without necessarily focusing on making them visible.Footnote ¹⁰⁵ It is as if we were all seduced by the visual power of increasingly aesthetically refined design of data visualisation.Footnote ¹⁰⁶

If we are to look beyond visuality, we may want to examine how sound and noise inform information technologies as we know and experience them. Historically, computing emerged by accompanying the interception of sound. In 1943, the first British programmable electronic computer was used to process data (about German communications) collected by wireless intercept operators – women, predominantly, who listened out for Morse code for hours and transcribed it to be processed by the computer.Footnote ¹⁰⁷ Sound was thus, technically, the original computing raw material. But it was already turned into specific and embodied data, in this case punched cards. Since then, the intersections between sound and security have been studied from a number of perspectives.Footnote ¹⁰⁸ However, CSS rarely considers the relations of security and sound with and through data.

Listening to the asylum speakers

‘New audibilities’ have been addressed in the field of critical forensics, which can be described as being at the crossroads of security studies, art, and architecture.Footnote ¹⁰⁹ From this perspective, the artist and researcher Lawrence Abu Hamdan has notably studied accent monitoring and the automated determination of origin by audio technologies.Footnote ¹¹⁰ These data-driven systems are used to judge the veracity of statements by asylum seekers, which become – in his work – ‘asylum speakers’.Footnote ¹¹¹ Automated speech analysis practices build upon older and relatively widespread practices of Linguistic Analysis for the Determination of Origin (LADO), or speech analysis by human experts, that is, analysts and linguists.Footnote ¹¹² A 2017 report noted that a majority of European countries relied on language analysis as standard practice, or at least occasionally, to determine probable country and/or region of origin of applicants for international projection.Footnote ¹¹³ In 2019, Turkey, in the context of its commitments towards the EU to slow down flows of migrants and refugees, started funding a programme of Technical Assistance for Capacity Building for Effective Nationality Determination,Footnote ¹¹⁴ to use language tests to identify the origin of a person in asylum cases, relying on both automated systems and humans. Ultimately, these systems resonate with the Biblical episode about the identification of an enemy's survivors through their pronunciation of the word ‘shibboleth’.Footnote ¹¹⁵

‘Automatic dialect recognition’ is part of the toolbox of the Integrated Identity Management (IDM) programme that the German Federal Office for Migration and Refugees (BAMF) introduced in 2016.Footnote ¹¹⁶ German authorities started testing these systems in 2017, and implemented them in 2018.Footnote ¹¹⁷ To date, they have expressed their eagerness to further work on dialect recognition together with migration authorities from other European countries.Footnote ¹¹⁸ The software aims to ‘increase process efficiency in the asylum procedure’, together with automatic face recognition and the analysis of mobile data devices.Footnote ¹¹⁹ All these data-driven systems are directed towards helping decision-makers make sense of the asylum seekers’ data collected during registration – here better understood also in sonic terms. In Germany, the initial deployment of ‘automatic language recognition’, labelled at the time ‘language biometrics’, met political and societal reluctance, admittedly because the software lacked accuracy.Footnote ¹²⁰ What the tool embodies, in any case, is a certain way of governing through data that does not even pretend to translate reality. It is unconcerned with what asylum speakers actually say, or, more exactly, it is grounded on the assumption that whatever they might say is not worth being taken into account before the trustworthiness of their belonging is ascertained. Despite the seeming invisibility of the computing process, this assessment is extremely embodied – socially and materially. The computer computes migrants because it hears speech as data, which will enter into a conversation with other people's data – it needs data as compositional elements. It lives on configuring life as made of ‘components of composite evidence’.Footnote ¹²¹ It computes to compose. It transforms individuals into elements of a wider security composition, inside which the data about them potentially undergoes a series of further transformations. For instance, German authorities can process audio records collected during asylum procedures and use them outside the asylum procedure, for example, to establish identity or to identify evidence for purposes of criminal prosecution and threat prevention.Footnote ¹²²

The governing of asylum seekers as asylum speakers highlights a peculiar composition of security through sound and its turning something into data and data into something else.Footnote ¹²³ Automatic language recognition in this context tells us about the limits of the audible, and how security practice marks what is to be played. The introduction of the automated means that for linguistic forensics, seemingly ‘objective’ datasets are generated and brought together – aimed at countering the fact that procedures would otherwise be ‘based largely on the claims made by the asylum-seekers themselves’.Footnote ¹²⁴ Approaching this form of security composition with the trope of computing highlights how it differs from other surveillance practices deployed by security actors. Contrary to fingerprinting, the voice samples are not extracted for establishing, assigning, and then enforcing a univocal identity to individuals.Footnote ¹²⁵ While the voice of the asylum seeker may be considered a bodily feature, once sampled and digitised it rather embodies something else. To borrow from Michelle Weitzel, this form of computing is another way to ‘audaliz[e] the body’ of the migrant and thus one ‘of the ways in which sound is … harnessed by powerful actors in the security sphere’.Footnote ¹²⁶ First of all, asylum seekers’ voices materially become a dataset that can be compared with an existing database of already stored and classified voices. The voices-turned-data are treated as a sonic ‘immutable mobile’,Footnote ¹²⁷ rather than a continuously adjusted performance.Footnote ¹²⁸ With these data structures already in place, and the support of an algorithm, it is supposedly possible to identify not individual identities but statistical anomalies.Footnote ¹²⁹ At the same time, the datafied voice embodies the asylum seeker as a uniquely socialised being: a speaker who is supposed to have unique social traits, such as an accent, acquired not because of some biological reasons, but due to their socialisation in a given geographical place – a region where a distinctive dialect is spoken. Their voice, because it is social rather than individual, becomes the first ‘clue’ to be followed.Footnote ¹³⁰

We argue that there is both heuristic and political value in mobilising the computing trope when it comes to this kind of security compositions. Thinking about this practice in terms of computing counters the rather disembodied image conveyed by proponents of ‘automatic dialect recognition’. It invites researchers to unpack what embodies what, and how. Somewhat paradoxically, the fact that computers do not hear or see as we hear and see, foregrounds questions about the social and cultural assumptions underpinning the idea that asylum seekers – or people in general – have a unique linguistic socialisation.

This is the sound of digital security composition

Ikeda became progressively involved in explorations around data, notably through collaborations with, among others, the German musician Carsten Nicolai, with whom he shares an interest in the duality of the senses. Footnote ¹³¹ Although often described as a minimalist artist, Ikeda is equally attracted by the slogans ‘less is more’ and ‘more is more’.Footnote ¹³² Proliferation (of data) and (data) excess constitute a recurrent motif in his trajectory. In his work Dataphonics, created for the French radio station France Culture in 2007, Ikeda investigates the ‘sound of data’ (the sound of digital data) and the ‘data of sound’ (the components of sound), as well as the relations between them. Footnote ¹³³ Dataphonics is part of his broader art project Datamatics (2006–08), with which he has been exploring – in artistic forms as diverse as concerts, installations, publications, and CD releases – the potential to perceive the invisible multi-substance of data, seeking ‘to materialise pure data’. Footnote ¹³⁴ Whereas Tone's work is primarily concerned with translations between code, images, and text, Ikeda's compositions invite us to focus on the transformations of data, inside data, through data. Footnote ¹³⁵

By introducing the tropes of composting and computing, we want to highlight data's co-constructed and situated nature. This is not a novel idea – ‘“raw data” is … an oxymoron’ is becoming a leitmotif in much STS writ large literature.Footnote ¹³⁶ Still, composting and computing show promise. For instance, they work well with composition because they are not visual tropes, contrary to many of those we use in social sciences and beyond. While they both invite an exploration of how data become something inside wider compositional frameworks, they do not force upon us compositions as visual images. Taken together, they prepare us for what Weitzel calls a ‘sonic reimagining’, more attuned to the study of the governance of ‘flesh-and-blood bodies’,Footnote ¹³⁷ as well as specific and relational digital data. Indeed, data as something calls for attending to their materiality from a multisensorial perspective – resisting the temptation to limit our understanding of what data are to what we can see or visualise, or to how we have got used to picturing them. This posits the question of what kinds of compositions data make possible or facilitate. But also, indirectly, of what kinds of negotiations actors should carry out when they want to use a dataset in a different kind of composition – that is, when they compute by composting.

Contemporary composers can teach CSS something about grasping data-driven practice. They have been playing with the digital for some time already. They explore the relations between music, data, and sound, including noise, in their own way. This resonates – so to say – with Roland Barthes's attention for the contemporary evolution of music. Barthes proposes that we think about, and ultimately ‘rediscover’, what he defines as ‘musica practica’.Footnote ¹³⁸ He argues that ‘[t]o compose, at least by propensity, is to give to do, not to give to hear but to give to write.’Footnote ¹³⁹ It is the ability to move ‘from one source of sounds to another’.Footnote ¹⁴⁰ Composing with sound sources then – be they music noise or anything else – is ultimately akin to the ‘making something with something’ suggested by Guattari.Footnote ¹⁴¹ In some cases, data compositions may thus become a way to question security practice, rather than perform it. And – as Ikeda's artworks teach us – computing and composting can play a role in this effort to better understand, to question and to reimagine, security compositions. Relying on music and sound art composers that sometimes happen to be computer program(mer)s too, we can reflect upon how entering into data-informed worlds might be imagined beyond purely visual data visions.

Christina Kubisch is a German composer, musician and sound artist, active since the 1970s. She has notably developed installations that take as themes ‘the worlds between hearing in the dark and seeing sound’,Footnote ¹⁴² making ‘hidden sounds of urban space electronically experienceable’.Footnote ¹⁴³ Since 2003, she has been working on ‘Electrical Walks’,Footnote ¹⁴⁴ in which audience members receive specially designed headphones allowing them to hear the sound of electromagnetic fields, mediated by magnetic induction, and are invited to walk around following pre-established routes, so they are able hear ‘the hums, buzzes, and gurgles of electromagnetic fields’.Footnote ¹⁴⁵ The headphones allow participants to experience sounds that are not detectable without or outside them, which brings these devices close to a certain idea of ‘espionage technology’.Footnote ¹⁴⁶ The sounds’ immediacy, their unexpected manifestation, and their closeness ‘seem to give the listener access to the secret world of things’.Footnote ¹⁴⁷ Of course, such a secret world does not reveal the whole truth about the secret life of modern cities.Footnote ¹⁴⁸ The use of headphones in public spaces, in any case, also fleshes out the tensions between walking in public and private listening, between public spaces and intimate sensing.Footnote ¹⁴⁹ With these walks, invisible structures are ‘musically composed’, arising out of ‘cash machines, security barriers, neon advertisements, antennas, WLAN, and electrical cables’.Footnote ¹⁵⁰ Actually, Kubisch notes that security devices are ‘some of the best ones’ in terms of generating sound.Footnote ¹⁵¹ As she explains, ‘[w]hen you walk through [security or anti-theft systems], you get pulsating sounds that have different rhythms’: from ‘simple’ to ‘sophisticated’, from too ‘strong’ to altogether silent.Footnote ¹⁵² In 2005, Kubisch composed Security, which combines recordings from security gates of fashion shops in a number of different cities.Footnote ¹⁵³ This data composition is also obtained by making inaudible electromagnetic fields audible, and is concerned with the hidden dullness of such hidden reality.

According to Theodor Adorno, the very idea of composing with computers is a ‘cheap joke’, inevitably resulting in compositions by subjecting subjects to a series of laws alien to them.Footnote ¹⁵⁴ Yet, Ikeda's attempts to (audio-visually) compose by materialising ‘pure data’ through visuals and sound get us closer to making sense of data. When we experience his artworks, we sense digital data differently. Similarly, when we wear Kubisch's headphones, we enter a sonic-scape marked by the rhythm – and the silences – of different devices, including security ones. This reduces our alienation towards data. As Marcella Lista has it, ‘the spectator becomes the listener and even more, the interpreter of this composition through the simple movement of their body, associated with the sensitive membrane of the eardrum’.Footnote ¹⁵⁵ References to purity are, however, certainly puzzling, unless we can agree that ‘pure data’ are purely decayed data. Ikeda's data are compost material, made compatible with potentially infinite computability, and composability – the ‘“bachelor” data’ mentioned in exergue.Footnote ¹⁵⁶ These are also the data that contemporary security practice is made of, and that critical security scholarship needs to attend to.

Digital data are the debris with which governing rationales are compos(t)ed. The composting trope connects directly to an understanding of security compositions as (eco)systems where data are unstable. In the EU PNR example discussed above, personal data can even die and be born again as anonymised data, masked data, or training data for risk assessment algorithms. Similar to what happens in Ikeda's installations, data keep becoming something else, slightly different yet potentially productive data. The volume of data and their multiple dimensions make it difficult for our senses to determine where they are coming from, and to keep track of them in an intelligible way – to the extent that we might need to ponder how they could (meaningfully) keep track of us. We know, nevertheless, that this is what they are about – tracking us together, through their being together, and regardless of whether they might become data debris, or data rubbish.

Outro

In this contribution, we have combined two tropes to better understand how digital security compositions work in practice. Our suggestion is that thinking with composting and computing we can better apprehend the role that digital data come to play in the fabric of security. We have relied on compost and computing to see data as somethings, with the ultimate purpose of better grasping how data do something (else) – tuning ourselves to the missing.Footnote ¹⁵⁷ Composting turns our attention to how security actors attempt to digest what sounds like an excess of data, to how they try to organise noise. Computing obliges us to attend to data as both embodied and embodying somethings. Sound blends in the togetherness implied in composting, computing, and composing, with its capacity to cross material obstacles, breaking through bodies and borders, to reach the other side and merge. With sound, we can experience and understand how data interconnect in ways that the visualisation of data inevitably cannot convey as eloquently. Sounds cannot be contained inside the box; they take us directly into the continuum of the continuum of data-driven security practices.

Thinking of security practice as a matter of (data) compositions promises to enrich CSS in two ways. First, we hope to broaden our field's worldview of data-driven security. So far, critical security research mostly focuses on algorithms, centres of calculations, and data analysis.Footnote ¹⁵⁸ In other words, this scholarship offers a compelling contribution in studying the governing through data. Too little attention has been paid to data structuring, curation, and integration, yet these mundane activities are crucial to make data ‘algorithm ready’,Footnote ¹⁵⁹ both for machine learning and less advanced computing processes. They are also critical for security actors establishing new systems, coping with big data or simply engaged in transnational cooperation – as we have shown in our brief discussion of a European project for passenger surveillance. From this perspective, the tropes of composting and computing contribute to an emerging literature studying the politics of design and of implementation of data-driven security practice. Second, studying security practice in terms of data compositions supplements the latent visualism that informs our ways to think about the digital. Instead of discussing traditional sonic security practices (for example, wiretapping) we have focused on how data can encode sound, that is, the voice of asylum seekers. Sound turned into data means that these data can then be cross-matched, assessed, and governed. These digital data embody both migrant voices and criteria of truth – the right accent, or the right dialect. While similar to already studied practices of bodily surveillance, for example, fingerprinting, these sonic embodiments deserve scholarly and political attention. They rely on and reify problematic assumptions about socialisation, truth, and identity. At the same time, data turned into sound do not only facilitate security actions, as in the use of a metal detector, but may also embody apparently silent and invisible digital surveillance practices, as we heard in Kubisch's sonic compositions.

Each of Ikeda's installations has its own specific voice. You wonder whether it is a single track coming back as a loop, or whether it will keep evolving, changing indefinitely. You search for patterns, rhythm, and meaning. You attempt to connect pitches and specific sounds with what is happening on the screen – the sudden appearance of a link, the display of geometrical figures, the pinpointing of a spatial coordinate, and their continuous vanishing. Your eyes and your ears, your body, your brain: all of you soon feels overwhelmed by all these data. You see and hear data everywhere, and in everything, somehow trying to convey information that keeps moving, that is inapprehensible. The world around you speaks data, with data that are never silent, that are never fully fixed. Some visitors step into an installation, and walk upon a gigantic display on the ground. They sit down and take (digital) pictures of themselves in the midst of data flows, to be shared across data platforms. They are data swimming through data streams. You play with your own shadow on the data screens, feeling in read-only mode. You can see, you can hear, you can take more pictures. But you cannot edit, nor be fully viewed, or even heard. This may be the ideal place to start thinking.