4 ms·
I'd even add more technical controls on top of accountability/oversight compliance organizational changes: - Any data collected under a general warrant is encr
by mpyne 13y ago
I'd even add more technical controls on top of accountability/oversight compliance organizational changes:
- Any data collected under a general warrant is encrypted immediately.
- Access to this data is audited to a WORM-style server.
- Decrypting the data requires 2 persons to provide a key (I believe there are crypto schemes that do this in the literature; if not I'm sure NSA could figure it out).
- The process that decrypts the data after the authentication creds are provided also notifies a random 3rd party within NSA (or even a Congressional/FBI/etc. panel setup for this purpose).
On top of this there need to be changes to how NSLs and FISA warrants are treated. They are secret only so long as needed for the law enforcement purpose.
Afterwards, if there is still an issue of sensitivity from a counter-terrorism standpoint (e.g. enemy groups would learn too much about our capabilities if fully detailed NSLs/warrants were public), then they are scrubbed as little as necessary to allow for public dissemination. This could mean aggregate reporting, sunset provisions for gag orders, etc. But having permanent gag orders is not befitting our Republic.
Finally I agree that having NSA write its own rules is not a good idea. I would require Congress to set overarching policy and limits on NSA's actions and prevent Congress from delegating that into the Executive Branch. I think even the Dems and GOP could hopefully get along long enough to ensure national security is being guarded...
- dllthomas 13y agoI agree with everything here. Given a free hand, I'd likely go significantly further. I was simply proposing the simplest, smallest change that I think everyone serious would agree an improvement over what has been implemented. I don't think it's anywhere near enough.