10 ms·
It's not just metadata – the NSA is getting everything
- alexqgb 13y agoThis hinges on the same re-definition of "collect" that Clapper tried to make, equating "go into the world and gather" with "go to the secret library of everything and retrieve." The essential implication is that we're constructing a mirror of the world (or at least, as much of it as can be reduced to information). Unnervingly, we're operating as though law and language which developed in the original world will map directly to this new realm, even though it's obviously and radically different. We really need to start talking about the Mirror World as such. Security and surveillance is just one (hugely problematic) aspect of what could easily be the 21st century's defining development. I suspect we're not going to reach a suitable détente on police and military surveillance until we've developed a commonly accepted sense of what the Mirror World entails for a constellation of considerations, from energy, economy and ecology to culture and education. This really is the tip of a very big iceberg.
- jdp23 13y agoStewart Baker, former general counsel of the NSA, posted about this "collection-first model" last week on the Volokh conspiracy. To his credit, he did describe the gathering of the data as collection; but his underlying point was that the government is taking the approach of collecting it all and putting restrictions on use. Of course, he thinks that's on balance a good thing ... http://www.volokh.com/2013/06/07/minimization-and-the-collection-first-surveillance-model/ http://www.volokh.com/2013/06/07/minimization-and-the-collec...
- samstave 13y ago"go to the secret library of everything and retrieve." https://en.wikipedia.org/wiki/Akashic_records https://en.wikipedia.org/wiki/Akashic_records
- kahirsch 13y agoClapper just made up a new definition of "collect" to excuse his brazen lie. I don't understand why Clapper still has a job. But there's nothing in this article that indicates that either Senator Feinstein or Senator Nelson was using the word in anything but the ordinary sense. After the FBI or NSA get a court order, they can look at the content of emails and listen in on phone calls going forward, and they can also get past communications that are still stored on the server--or the target's own computer, if they have access. Local police also get warrants to look at past emails and they sure don't use a database of everyone's emails.
- Terretta 13y ago> But there's nothing in this article that indicates that either Senator Feinstein or Senator Nelson was using the word in anything but the ordinary sense. Supporting implication is in the video in the article. Listen all the way through the video.
- Zigurd 13y agoBest new hashtag of the week: #leastuntruthful
- b6 13y agoI know hunches don't count for anything on HN, and we still don't have enough information, and may never. But I think this is right, they're storing all major forms of communication. If so, it's incredibly dangerous.
- zalzane 13y ago>If so, it's incredibly dangerous. I think it's absolutely thrilling. Just imagine, all it takes is one disgruntled, lucky cypherpunk to crack into the NSA content database and reveal its content to all. Unencrypted emails, text messages, phone calls between you and your mum. Let's be honest, leaking that database is probably what it's going to take to see any kind of real attention/change on this issue.
- marshray 13y agoMaybe that's what those 19998 other unreleased documents are.
- daywalker 13y agoI haven't seen 20,000 documents reported anywhere, or perhaps I just missed it. Do you have a link to an article mentioning this? Thanks.
- marshray 13y agoI don't recall where I heard that, I may be mistaken. I'll keep looking around and update here when/if I find it again. EDIT: Possibly http://www.nytimes.com/2013/06/11/us/how-edward-j-snowden-orchestrated-a-blockbuster-story.html?pagewanted=all http://www.nytimes.com/2013/06/11/us/how-edward-j-snowden-or... "Mr. Snowden has now turned over archives of “thousands” of documents, according to Mr. Greenwald, and “dozens” are newsworthy."
- andrewcooke 13y agothis isn't 'everything' - the article 'only' mentions phone calls and emails. that's the easy stuff NSA can access from ISPs like AT&T, Verizon, etc. that's important because it doesn't contradict respected people at Google, or require magic crypto cracking. i'm repeating myself here, so sorry, but there are two separate issues: 1 - nsa is getting a lot of data from the people routing traffic. likely all metadata. and perhaps some (significant) subset of unencrypted traffic. 2 - despite the misleading prism slide, they don't seem to be getting complete, direct access to the web companies' data. the uproar about the slides put the initial emphasis on the web companies and has confused discussion since. but the consistent story that seems to be emerging is that it's the ISPs, who have much more of a tradition of collaborating with NSA, who are providing a lot more data than people expected. and that data is being stored without legal approval, relying on the idea that "no-one looks at it" without a warrant. at least, that's the most consistent view i can find. what worries me most at the moment is how much hardware would be needed to store and process all that data, and whether that is feasible.
- marshray 13y agohttp://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/all/ http://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/al... As a result of this “expanding array of theater airborne and other sensor networks,” as a 2007 Department of Defense report puts it, the Pentagon is attempting to expand its worldwide communications network, known as the Global Information Grid, to handle yottabytes (1024 bytes) of data. (A yottabyte is a septillion bytes—so large that no one has yet coined a term for the next higher magnitude.) It needs that capacity because, according to a recent report by Cisco, global Internet traffic will quadruple from 2010 to 2015, reaching 966 exabytes per year. (A million exabytes equal a yottabyte.
- whiddershins 13y agoso, according to this article, their intended capacity is adequate to store all internet traffic. All da bytes.
- mikegioia 13y ago
- orthecreedence 13y agoI think while some may view this as speculation, it's extremely fair reasoning given a) the people we're dealing with and b) how carefully they're choosing very specific words. They got caught with their hand in the cookie jar and are now dancing around the issues. It's upsetting that using a word like "collect" can give any sort of plausible deniability. "Oh, I didn't mean 'collect' in the traditional sense, lol!" This is all just one big lie on top of another on top of another. I think we'd all be ridiculously stupid to not acknowledge that.
- whiddershins 13y agoThis is outrageous. And much more upsetting. I don't think it is all that speculative. Everyone with access to classified information keeps saying there is much much more they are doing, which we don't know about. Well, what else would it be? Cameras in my house? What would MUCH MORE be?
- einhverfr 13y agoOver here in Asia, where there can be fear of maids kidnapping children, a big trend is CCTV in the home. This is then sent out over the internet to the CCTV collection company and visible via the internet if you have a username or password. For those who have watched the movie "So Close" (I recommend it-- sexy, tragic, thrilling, thought provoking), the idea of global surveillance of cameras in houses and businesses is something well within the possibility over here, though perhaps not to the same extent in the US.
- mitchty 13y agoI'm genuinely curious, how often do maids actually kidnap children where you're at?
- einhverfr 13y agoThere are stories. I doubt it is as common as the fear is. Certainly not a threat that I would give anyone with the influence cameras in my house to solve.
- mitchty 13y agoFigured as much, was wondering if it were close to the russian dash cameras or more of a boogeyman that isn't likely to be reality.
- bdamm 13y agoThey could be using idle phones as microphones, for example. They certainly have that capability, through researched and purchased 0-day vulnerabilities in iOS and Android.
- calhoun137 13y agoLast month an FBI agent admitted on CNN that the contents of phone calls are being collected[1]. It was written up by none other than...Glenn Greenwald(GG). One thing that has really bothered me since I become a hardcore HN regular is that GG articles almost never come to the front page, even when they are entirely on topic. I recall, on multiple occasions, finding links to places like Ars or a similar site which are basically just doing a summary of GG's latest article. I really hope after the latest NSA revelations that HN will begin to take GG seriously, get his articles to the front page, and give him the respect he more than deserves. [1] http://www.guardian.co.uk/commentisfree/2013/may/04/telephone-calls-recorded-fbi-boston http://www.guardian.co.uk/commentisfree/2013/may/04/telephon...
- christoph 13y agoWow. I hadn't read that article. One thing that really stood out was the "Information Awareness" office and it's ultra creepy logo that looks like something straight off an underground conspiracy website. Edit: Found a Guardian article from 2002 - http://www.guardian.co.uk/world/2002/feb/18/september11.usa http://www.guardian.co.uk/world/2002/feb/18/september11.usa "The agency which Poindexter will run is called the Information Awareness Office. You want to know what that is? Think, Big Brother is Watching You. IAO will supply federal officials with "instant" analysis on what is being written on email and said on phones all over the US. Domestic espionage."
- rangibaby 13y agohttp://www.rotten.com/library/conspiracy/information-awareness-office/ http://www.rotten.com/library/conspiracy/information-awarene... "In the Defense Department budget submitted in September 2003, the Information Awareness office had mysteriously disappeared. As if belatedly realizing that it's better not to tell people when you're preparing an oppressive evil computer system designed to crush their individual privacy, the office's functions were shuffled into an unknown number of "black bag" budget items — intelligence appropriations which do not have to be explained to the public or justified to legislators. So be grateful that the Bush Administration was stupid enough to let you have a glimpse of Big Brother before he slinks off to the shadows. The next time you see him, he'll be kicking in your door."
- gojomo 13y agoIndeed, it increasingly seems 'content' is a consciously-chosen term, which is intentionally time-tense-ambiguous, to obscure the fact that calls and other communications have slready been recorded to NSA systems. They're not tslking about a warrant to truly start 'collection' of future communications (in the normal senses of English). Getting a warrant just sets the read-access bit on already ingested 'content': "Oh, the secret court approved the warrant? OK, let me run `chmod a+r /calls/by-person-id/us-gz-74916949/*` - now you're in!" This might also explain the growing pursuit of mandatory-total-traffic-retention policies in other countries. Their security establishment has a hint of how nifty this has been for the NSA, but might not be able to pull off — legslly or financially — the same broad ingest feeds and giant datacenters as in the US... so they try to offload the obligation to regulated private entities, and still have the arbitrary lookback when they need it.
- diminoten 13y agoComplete and utter speculation. This is wordplay for page views, I'm disgusted to have given them one.
- leoc 13y agoIt's certainly speculation with a linkbait title, but the apparent consistency between Clemente and Feinstein makes it not-completely-woolly speculation. It's certainly more than possible that that Feinstein's statement should be interpreted straightforwardly while Clemente was just largeing it up for TV though.
- diminoten 13y agoMore than possible? What does that even mean? Speculation. Complete speculation. Not worth any rational thinker's time.
- roboneal 13y agoIt also enrages me how they dismiss the metadata as a "nothing burger". Does it occur to anyone how much leverage you can exert with that information alone in such areas as finance, divorce proceedings, opposition research, leak investigations, and good old fashioned blackmail? To add to it, they don't even need a court order or oversight to do the metadata searches per Feinstein (today).
- benjarrell 13y agoThis [1] is with less data than the NSA collects. 1: http://www.zeit.de/datenschutz/malte-spitz-data-retention http://www.zeit.de/datenschutz/malte-spitz-data-retention
- pfortuny 13y agoIf you read Soljenitsin, you realize the importance of metadata instantly: "why did you call X, where did you meet Y...."
- samstave 13y agohttp://www.reddit.com/r/conspiracy/comments/1g9gum/with_all_this_surveillance_and_spying_how_could/ http://www.reddit.com/r/conspiracy/comments/1g9gum/with_all_...
- mtgx 13y agoWhat matters me is that most even forget to mention part of the metadata is the location of the device. With that data they can basically track everyone's location, almost as accurately as with GPS. And such GPS tracking was just considered unconstitutional in a 9-0 decision by the Supreme Court. I really hope all this stuff gets to the Supreme Court. Even if not all of it is unconstitutional, I could see at least 80% of the policies comprised in Patriot Act and FISA Amendments Act being unconstitutional.
- Vivtek 13y agoWhat blows my mind is the conservatives worried about the government taking their guns - but not at all worried about the government knowing they called the gun store yesterday or paid $300 there last Friday.
- mehwoot 13y agoThis is not proof at all. It's a theory, based on the phrasing used, but nowhere near conclusive.
- calhoun137 13y agoWatch the video at the end of the article.
- mehwoot 13y agoHe says "No digital communication is secure" (this is obviously an embellishment; this is trivial to show unless the U.S. government has broken every major encryption scheme), "and so these communications will be found out". He does not specifically say these phone calls will be found out. He could very well be referring simply to the ability for FISA requests to receive information about an individual that has been stored by companies like facebook, google, etc. The interviewer's question was "And you're not talking about a voicemail, right?" It is not clear in any way that he is saying the government has recorded all phone calls and can go back and listen to them. Additionally, sources tell CNN the wife of Tamerlan Tsarnaev spoke with her husband on the phone after his pictures and video appeared around the country as the prime suspect. If this was after he was already named as the prime suspect, you are telling me they didn't have a traditional wiretap on him and his relatives at that point? Btw the transcript linked in the article (http://transcripts.cnn.com/TRANSCRIPTS/1305/01/ebo.01.html http://transcripts.cnn.com/TRANSCRIPTS/1305/01/ebo.01.html) and the video don't match up, so it is hard to get context.
- vixen99 13y agoIt's not clear that the government has recorded all telephone calls? This interviewee says "All digital communications are ....are..." and uncharacteristically hesitates. Evidently he doesn't want to complete that sentence. So he tries again: "There's a way to look at digital communications in the past and I can't go into details." No need to - it's called 'recording the entire communication'.
- 13y ago
- bowerbird 13y agoeverything is being saved. _everything._ it's massively compressed, so they need _pointers_ to review anything specific. but if they really _want_ to, they _can_. they're telling you this in dribs and drabs, because it'd be too big a shock to tell you all at once. you'll get used to the idea... after all, "it's for your own good". right? -bowerbird
- rl3 13y agoThe article conducts a fairly scrupulous analysis of what politicians and officials are saying, and likely is correct in its assertions. However, it doesn't mention (within the same post) that the NSA has been operating DPI gear at the carrier level for a long time now. Mainstream media has overlooked this fact more often than not recently. DPI sitting on carrier pipes is what the Room 641A scandal in 2006 was about. Its disclosure helped kick off the warrantless wiretap debate we're currently having. Virtually every NSA whistleblower since has mentioned the operation of Narus devices. Consider the following: A) NSA is confirmed to be operating Deep Packet Inspection (DPI) devices on internet backbone fiber-optic cables within the United States, with telecom cooperation. B) The recent revelation that Verizon has been providing NSA call metadata and routing information (but not content) on a massive scale. Obviously not just Verizon, but every major telco. C) Construction of NSA's Bluffdale, Utah data storage facility is almost complete. The storage capacity varies depending on who you ask, but most conservative estimates put it at a scale such that it can hold the entirety of the world's communications well into the foreseeable future. It's not rocket science they're already intercepting and storing the content of traffic. The Verizon metadata and routing information is certainly used in conjunction with DPI for attribution and deduplication of intercepted traffic. It's a simple matter of 1 + 1 + 1 = 3. --- Except the number of operands is more likely in the double digits. If I may indulge in speculation and conduct some quotation analysis of my own: OP's article cites many officials hinting that what we currently know, even in light of the recent debate, is only the tip of the iceberg. However, in my opinion the foremost quote in this regard occurred seven years ago: In 2006, Russel Tice, NSA whistleblower, was quoted as saying: "In my case, there's no way the programs I want to talk to Congress about should be public ever, unless maybe in 200 years they want to declassify them." [1] OK, 200 years is probably a bit of an embellishment, especially if you listen to Singularity folks who suggest the human race won't even be the human race by then. However, Tice explicitly mentioned this in context of a "different angle" from the warrantless intercept operations just seeing the light of day at the time. [2] If he wasn't even talking about what's currently being debated in the media, then what was he referring to? My guess would be something on the analysis side of the equation. Perhaps collection and subsequent analysis of mobile device geolocation data. Imagine employing the technique of geofencing on individual citizens at a national or even global scale. Non-targeted individuals entering within a certain radius of targeted individuals at sufficiently similar velocity for a specific duration or frequency could end up drawing suspicion upon themselves. Combined with other data points, individuals who are societal outliers in terms of behavior could be detected with ease. Or, maybe it's that and more. There's all sorts of enterprise-class big data simulation products out there where you can simulate an environment in extremely fine-grained fashion using a near-unfathomable amount of data points. -- TL;DR - The notion that NSA isn't getting everything is laughable. Comprehensive, retroactive surveillance is already a reality. --- 1. http://blog.foreignpolicy.com/posts/2006/07/10/hoekstra_blows_the_whistle http://blog.foreignpolicy.com/posts/2006/07/10/hoekstra_blow... 2. http://thinkprogress.org/security/2006/05/12/5319/more-unlawful-activity/ http://thinkprogress.org/security/2006/05/12/5319/more-unlaw...
- brown9-2 13y agoIf this was the case, how come the leaked FISA order about Verizon's metadata doesn't refer to it? The theory relies on two people from two different backgrounds using the same meaning for "collect".
- CurtMonash 13y agoI went through a similar analysis a few days ago: http://www.dbms2.com/2013/06/10/where-things-stand-in-us-government-surveillance/ http://www.dbms2.com/2013/06/10/where-things-stand-in-us-gov... See also the comment thread, and the followuphttp://www.dbms2.com/2013/06/13/how-is-the-surveillance-data-used/ http://www.dbms2.com/2013/06/13/how-is-the-surveillance-data...
- lurchpop 13y agoDoesn't it feel like we're all just playing along when it comes to whether they're getting email and call contents? We all suspect they're getting everything, but the acceptable range of debate for now is just metadata. With so many people in the know saying "tip of the iceberg" it should be pretty obvious they're AT LEAST getting calls & emails. The horrific details may be some other shit we didn't even think of like alt uses of OnStar-type systems, data over powerlines (PDSL), hidden capabilities in mobiles, hijacked root CAs, etc.