4 ms·

The presentation made it seem as if each company was not participating passively. Specifically the stored intelligence "varies by provider" and there are "speci

The presentation made it seem as if each company was not participating passively. Specifically the stored intelligence "varies by provider" and there are "special requests available." Interestingly, there is no mechanism described which captures all content of a certain type i.e. email; it seems to be apparent that only content from the providers is available. Surely, if you can intercept email from google without their help you can grab ALL email traffic as well. The slides also show that providers join over time. If they were just intercepting you would expect all email providers to join at once; that doesn't appear to be the case. There are also stuff like "online social networking detail" and "login notifications" which make it seem like facebook has given access to their systems.

mpyne 13y ago
Honestly it could be as simple as a "Law Enforcement API", that's configured with a company-run interface to NSA. The NSA analyst gets intel on such-and-such an account ID/phone number/email/etc., uses PRISM to send a request (probably something stupid like SOAP, it's the govt after all). The company computer verifies a valid warrant ID, valid request type, "hoovers up" the data requested and spits it back to NSA. Technically not direct access. Certainly not a direct wiretap into the entire company database. But NSA is able to get the "special source data" they need for correlation on their end (possibly using tools as provided by Palantir). They figure out whatever network of conspirators they're researching, develop "actionable intel", good guys win (note: depends on your interpretation of good guys, obviously :P). Zuck and Page are still right in this scenario. I just wish someone would speak up about what the hell is actually going on!
- cpleppert 13y ago
  I think that you are broadly right. The government can already get access to Google, facebook etc so PRISM could be just a friendlier user interface around the whole process. So instead of: 1)investigate 2) get warrant 3) send warrant to companies with data request 4)companies send data back 5) repeat 3-4 until investigation complete PRISM allows an analyst to load up a warrant and start exploring data immediately without having to wait for the company to verify it and then do a ETL operation back to the NSA.
natrius 13y ago
What if "provider" is a euphemism? If they're intercepting and decrypting all traffic to and from the "providers", they have to write code to actually extract the data from those streams. Such code would "vary by provider", and an analyst could make "special requests" for code to parse a certain kind of data from the stream. The timeline of providers entering the program could be a timeline of when the NSA wrote the code to extract that company's data. Also, the published slides are just three out of forty-something. The bottom of the slide that lists the capabilities says "complete list and details on PRISM web page." I agree that if they're doing this, they probably are already intercepting all unencrypted SMTP traffic.

mpyne 13y ago

Honestly it could be as simple as a "Law Enforcement API", that's configured with a company-run interface to NSA. The NSA analyst gets intel on such-and-such an account ID/phone number/email/etc., uses PRISM to send a request (probably something stupid like SOAP, it's the govt after all). The company computer verifies a valid warrant ID, valid request type, "hoovers up" the data requested and spits it back to NSA. Technically not direct access. Certainly not a direct wiretap into the entire company database. But NSA is able to get the "special source data" they need for correlation on their end (possibly using tools as provided by Palantir). They figure out whatever network of conspirators they're researching, develop "actionable intel", good guys win (note: depends on your interpretation of good guys, obviously :P). Zuck and Page are still right in this scenario. I just wish someone would speak up about what the hell is actually going on!

cpleppert 13y ago
I think that you are broadly right. The government can already get access to Google, facebook etc so PRISM could be just a friendlier user interface around the whole process. So instead of: 1)investigate 2) get warrant 3) send warrant to companies with data request 4)companies send data back 5) repeat 3-4 until investigation complete PRISM allows an analyst to load up a warrant and start exploring data immediately without having to wait for the company to verify it and then do a ETL operation back to the NSA.

natrius 13y ago

What if "provider" is a euphemism? If they're intercepting and decrypting all traffic to and from the "providers", they have to write code to actually extract the data from those streams. Such code would "vary by provider", and an analyst could make "special requests" for code to parse a certain kind of data from the stream. The timeline of providers entering the program could be a timeline of when the NSA wrote the code to extract that company's data. Also, the published slides are just three out of forty-something. The bottom of the slide that lists the capabilities says "complete list and details on PRISM web page." I agree that if they're doing this, they probably are already intercepting all unencrypted SMTP traffic.