7 ms·
So according to the report, Obama is going to propose legislation that: - Would end the NSA's authorization to collect bulk call records from telephony provide
by sinak 13y ago
So according to the report, Obama is going to propose legislation that:
- Would end the NSA's authorization to collect bulk call records from telephony providers under §215.
- Would require the NSA to require court approval prior to every §215 call record request. Up to 2 hops worth of call records would be included.
- Won't require that telecoms maintain anything more than the 18 months of call records that they are already obliged to hold.
The devil's in the details, but it sounds like a big change from the existing call records program. If Congress passes something along these lines, it'd be a major win.
But the §215 call records program is just a very small component of the objectionable surveillance programs. Here's just a sampling of the others:
"Upstream" collection: The sort of thing that happens in AT&T's Room 641A - fiber optic cables intercepted, data captured (under program names Fairview, Blarney, Stormbrew, Oakstar). Auth'd under Executive Order 12333 and the various FISA laws [1]. Searched using the XKEYSCORE frontend. GCHQ has similar program called Tempora which the NSA has access to.
MUSCULAR: Jointly run by GCHQ and NSA, collects data as it passes between the backend servers of services like Yahoo and Google. [2]
PRISM: Auth'd under §702, allows NSA to request data from tech companies about anyone who might be "reasonably believed" to be outside the US.
BULLRUN: Various efforts to break encryption, including attempts to insert vulnerabilities into encryption standards. Snowden's security clearance wasn't high enough to get any real details on exactly what the NSA has achieved as part of BULLRUN [4].
I think the scariest of those is Bullrun. We don't (and likely won't) know to what degree the NSA has managed to break or circumvent encryption [5].
[1] http://en.wikipedia.org/wiki/Upstream_collection http://en.wikipedia.org/wiki/Upstream_collection
[2] http://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html http://www.washingtonpost.com/world/national-security/nsa-in...
[3] http://www.theguardian.com/uk/2013/jun/21/gchq-cables-secret-world-communications-nsa http://www.theguardian.com/uk/2013/jun/21/gchq-cables-secret...
[4] http://www.eweek.com/blogs/security-watch/nsa-bullrun-911-and-why-enterprises-should-walk-before-they-run.html http://www.eweek.com/blogs/security-watch/nsa-bullrun-911-an...
[5] https://twitter.com/nicoleperlroth/status/376481848760606720 https://twitter.com/nicoleperlroth/status/376481848760606720
- devconsole 13y agoPerhaps the scariest thing is their plan to collect and store all data on all of your activities, then retroactively mine it. That is, from the moment you use the internet for the first time as a 9 year old until the day you die as an 89 year old, every text message you send, every email you write, every website you visit, and (if you're thinking of becoming a politician) every nude picture you send can potentially be used against you. The reason this is scary isn't just because of the present social climate. The current social climate is actually pretty decent. The reason it's scary is because social climates can change quickly. A couple decades from now, what you did legally today may be illegal. If you're pursued and prosecuted, it's possible someone may dig through this vast trove of collected data and use it against you. Clapper (the head of the NSA) has taken the stance that it's okay to collect everything, and that a "search" hasn't taken place until some human actually tries to look through that data. He frequently uses the analogy of a library: it's okay for the NSA to have all the books (everyone's data, everywhere) because a search hasn't taken place until they take one of the books off the shelf and look through it. The temptation to use that library for purposes other than curbing terrorism must be pretty strong. I'm going to speculate for the sake of example. It was often cited that one of the reasons for the 9/11 attacks was that the agencies weren't cooperating. As such, there has been a lot of pressure for the agencies to work together since then. I'm going to guess that if the FBI hadn't eventually tracked down DPR on their own, they may have tried to turn to the NSA for help. While it's not clear that the NSA has those kinds of capabilities, they're certainly more capable than the FBI at breaching the Tor network. There are slides out there which say something along the lines of "... we're able to deanonymize individual targets, not everybody at once." That example is a little bit unrelated to "collecting all data about everybody and then mining it," but remember that if the agencies begin cooperating in that fashion, sharing that trove of data may be the next logical step. I apologize for speculating, and my speculation should be treated as such. But please realize that just because they're not doing that to Americans yet doesn't mean they're not doing it to citizens of other countries with impunity today. Here's another ancillary point. It should be no surprise that the NSA could probably find out the identity of Satoshi Nakamoto pretty easily. But my point in bringing that up is this: if Satoshi himself cannot stay anonymous, then what hope do any of us have? Anonymity may be dead at this point. It's pretty clear that humans will continue to live even if that's the case, but a world without privacy is going to be a very strange one. By the way, I should also mention that the GCHQ may be even more capable than the NSA. There are signs that the NSA are better at pulling off attacks (Stuxnet, Tailored Access Operations) but that GCHQ are better at collecting data (bypassed Google's encryption). It has also been hinted that whenever the NSA runs into roadblocks against investigating Americans, they enlist the help of the GCHQ since it's legal for them to do so (and vice-versa). So even if the NSA is reformed, there is still this spectre of this worldwide data collection and governmental collaboration hovering over society.