PDA

View Full Version : MUST READ: Evidence suggests huge effort by NSA to tap into Internet's backbone




torchbearer
08-14-2007, 11:16 AM
http://www.msnbc.msn.com/id/20254078/

By Dan Eggen
Updated: 2:28 a.m. CT Aug 14, 2007

In 2003, Room 641A of a large telecommunications building in downtown San Francisco was filled with powerful data-mining equipment for a "special job" by the National Security Agency, according to a former AT&T technician. It was fed by fiber-optic cables that siphoned copies of e-mails and other online traffic from one of the largest Internet hubs in the United States, the former employee says in court filings.

What occurred in the room is now at the center of a pivotal legal battle in a federal appeals court over the Bush administration's controversial spying program, including the monitoring that came to be publicly known as the Terrorist Surveillance Program.

Tomorrow, a three-judge panel will hear arguments on whether the case, which may provide the clearest indication yet of how the spying program has worked, can go forward. So far, evidence in the case suggests a massive effort by the NSA to tap into the backbone of the Internet to retrieve millions of e-mails and other communications, which the government could sift and analyze for suspicious patterns or other signs of terrorist activity, according to court records, plaintiffs' attorneys and technology experts.
Story continues below ↓advertisement

"The scale of these deployments is . . . vastly in excess of what would be needed for any likely application or any likely combination of applications, other than surveillance," says an affidavit filed by J. Scott Marcus, the senior Internet adviser at the Federal Communications Commission from 2001 to 2005. Marcus analyzed evidence for the plaintiffs in the case.

Illegally tracked?
In the first of two lawsuits before the court, the Electronic Frontier Foundation, a privacy group, alleges in a class action that AT&T collaborated with the NSA to operate a "dragnet" that illegally tracked the domestic and foreign communications of millions of Americans. The second case centers on the disbanded al-Haramain charity and two of its attorneys, who say they were given -- and then forced to return -- a Treasury Department document showing that they had been the focus of NSA surveillance.

Neither AT&T nor the federal government has admitted even the existence of a secret room, and the Justice Department is arguing that the cases should be dismissed because their subject matter is a state secret. The communications company, meanwhile, says it is prevented from properly defending itself because of national security reasons and dismisses the employee who briefly saw the room and worked on supporting equipment as a "line technician who . . . never had access to the 'secret room' he purports to describe."

The lawsuits are among dozens of challenges to the NSA surveillance program that have been consolidated in the San Francisco federal courts. The confrontation comes just days after the Democratic-controlled Congress acceded to the demands of the Bush administration for expanded NSA authority to conduct spying efforts on U.S. soil, effectively approving many of the practices at issue in San Francisco.

Tomorrow's hearing will focus only on whether the two lawsuits should be dismissed on the basis of the government's assertion of a "state secrets privilege." The outcome could determine whether the courts will ever rule on the legality of surveillance conducted by the NSA without judicial oversight between 2001 and January 2007, when the Bush administration first subjected the program to the scrutiny of a special intelligence court.

"If the courts take the position that the state-secrets privilege prevents the case from going forward, I think effectively there'll never be a decision about the legality of the program," said Cindy Cohn, the Electronic Frontier Foundation's legal director. "I think it's tremendously important for that."

NSA monitored
President Bush and his aides have confirmed that the NSA, beginning in late 2001, monitored electronic communications between the United States and overseas without warrants in cases in which one of the parties was believed to be affiliated with al-Qaeda. But administration officials have recently acknowledged that the NSA program was broader, and intelligence sources inside and outside the government have described a vast effort to collect and analyze telephone and e-mail communications that were later scrutinized by the government for desired information.

During the congressional debate over the surveillance legislation, Mike McConnell, the director of national intelligence, and other administration officials emphasized that the NSA needed access to major Internet and telephone exchanges to analyze transmitted data and identify and monitor "foreign intelligence" targets.

McConnell said all communications by such targets should be subject to government tapping, even if the individuals are in touch with foreigners inside the United States or with U.S. citizens. The precise methods by which the NSA has picked these communications out of the huge data stream it has tapped remain a highly classified secret.

But the lawsuit against AT&T, filed in early 2006, appears to provide the most detailed description of how the NSA gained access to a portion of this data stream, drawn from the Internet. The plaintiffs have argued in court documents that the practices used in San Francisco probably were used with telephone communications, also.

The allegations by Mark Klein, who worked for AT&T's WorldNet Service, underscore the government's dependence on major telecommunications providers to physically tap optic fibers that carry electronic signals around the globe. Some of the evidence also suggests that the NSA efforts were not limited to overseas e-mail communications and included the collection of purely domestic traffic.

<read the entire article by following the above link>

Hook
08-14-2007, 11:22 AM
If people would just use encryption such as PGP for everything, the NSA wouldn't have the resources to crack every datastream. Use VoIP whenever possible to, because it uses encryption for every packet.

torchbearer
08-14-2007, 11:25 AM
I thought the NSA had the "key" to all U.S. encryption?

Hook
08-14-2007, 11:33 AM
No, that is why Phil Zimmerman was prosecuted by the Feds when he relased PGP. It was a high enough grade algorithm that it was very difficult for the NSA to decrypt (Basically they had to do brute force key hacking). They have massive resources, but they cant violate mathmatical laws.

Hook
08-14-2007, 11:36 AM
Unless they happen to have a quantum computer. In that case the whole game is up.

angelatc
08-14-2007, 11:38 AM
I'm glad this guy's allegations are still alive and well. They tried really hard to make him look like a kook when he first went public with this stuff.

torchbearer
08-14-2007, 11:39 AM
How does one obtain PGP encryption?

constituent
08-14-2007, 11:39 AM
angelatc... you're not kidding, it's been brutal... even npr.

jonahtrainer
08-14-2007, 11:41 AM
I thought the NSA had the "key" to all U.S. encryption?

All commercially produced encryption. If it is developed privately and not sold commercially then as I understand it the key does not have to be given to the NSA.

torchbearer
08-14-2007, 11:45 AM
How does one obtain PGP encryption?

Bob Cochran
08-14-2007, 11:54 AM
Unless they happen to have a quantum computer. In that case the whole game is up.
Ha ha, get real.

Tuck
08-14-2007, 01:15 PM
How does one obtain PGP encryption?

http://www.pgp.com

some general info:http://en.wikipedia.org/wiki/Pretty_Good_Privacy

also a good service that encrypts all the data that goes through your internet connection so your isp can't monitor what you do or what sites you visit http://findnot.com

btw heres an interesting article about the dea having to use a keylogger because a drug dealer was using pgp encryption for his emails http://www.boingboing.net/2007/07/13/dea_agents_used_keyl.html

Hook
08-14-2007, 01:33 PM
Thanks Tuck, I was too lazy to get the info to the board :) pgp.com is a commercial implementation, but there is some open source implementation as well somewhere.

AnotherAmerican
08-14-2007, 01:55 PM
How does one obtain PGP encryption?

http://www.cryptography.org/getpgp.htm

torchbearer
08-14-2007, 02:59 PM
I'm getting the desktop version from pgp.com . it freaks me out to think the NSA is collecting my data via the internet.

Chase
08-14-2007, 03:05 PM
Here's the equipment manufacturer whose gear was in one of those AT&T NSA rooms: Narus (http://www.narus.com/products/intercept.html).

Here's a few choice paragraphs:


As the foundation for the industry's most advanced IP security, intercept and traffic classification applications, NarusInsight is unique in its ability to simultaneously provide deep packet inspection from layer 2 to layer 7 and complete correlation across every link and element on the network.


Industry-leading packet processing performance that supports network speeds of up to OC-192 at layer 4 and OC-48 at layer 7, enabling carriers to monitor traffic at either the edge of the network or at the core.

torchbearer
08-14-2007, 03:30 PM
They could be monitoring the very bits that carry this site....

Hook
08-14-2007, 07:14 PM
They could be monitoring the very bits that carry this site....

I'm almost certain they are, although I doubt anything here would get the attention of an actual analyst.
One thing to remember is that in order to encrypt your emails, the recipient needs to have PGP installed, and you need their PGP public key.
I know a guy that works for a contractor for the NSA that writes network snooping code. They use the VxWorks OS because of the real-time requirements. He has some interesting stories to tell...

inibo
08-14-2007, 07:36 PM
I'm almost certain they are, although I doubt anything here would get the attention of an actual analyst.

Perhaps we should preface all our posts with this (http://cossock.livejournal.com/849.html#cutid1) just to keep 'em guessing.:D

WannaBfree
08-14-2007, 09:49 PM
I've only read the first few paragraphs of the story but I think this was reported by 60 Minutes some months back.

torchbearer
08-14-2007, 11:18 PM
I think this is an update on what evidence will be heard at trial...

constituent
08-15-2007, 07:43 AM
i'm with you inibo.