Hacker News new | ask | show | jobs
by timschmidt 181 days ago
> This was for extracting email envelope metadata to build a graph of who was contacting whom, a program that Snowden's leaks showed had already been shut down.

"According to Victor Marchetti, a former special assistant to the deputy director of the Central Intelligence Agency (CIA), a limited hangout is "spy jargon for a favorite and frequently used gimmick of the clandestine professionals. When their veil of secrecy is shredded and they can no longer rely on a phony cover story to misinform the public, they resort to admitting—sometimes even volunteering—some of the truth while still managing to withhold the key and damaging facts in the case."

https://en.wikipedia.org/wiki/Limited_hangout

In fact, NSA's own slide deck, an excerpt of which can be viewed here: https://www.cnet.com/tech/services-and-software/fiber-optic-... indicate that all Google services including Gmail, Docs, Maps, and others were subject to interception.

Additional NSA slides here: https://www.cnet.com/tech/tech-industry/new-slides-reveal-gr... detail email, chat, video, voice, photos, stored data, VoIP, file transfers, video conferencing, notifications, social networking details, and the ever ominous "Special Requests".

> What do you think the approval rate for other court orders is? It's exactly the same.

"Two wrongs make a right" is considered "one of the most common fallacies in Western philosophy".

https://en.wikipedia.org/wiki/Two_wrongs_don%27t_make_a_righ...

> This reporting was at odds with what the leaked documents said and was later walked back.

The linked article: https://en.wikipedia.org/wiki/United_States_Foreign_Intellig... contains 96 references to reporting from 2004 to 2021 from a wide variety of sources. The word "retraction" does not appear once. Among the cited sources are many examples such as:

A former federal judge who served on a secret court overseeing the National Security Agency's secret surveillance programs said Tuesday the panel is independent but flawed because only the government's side is represented effectively in its deliberations.

"Anyone who has been a judge will tell you a judge needs to hear both sides of a case," said James Robertson, a former federal district judge based in Washington who served on the secret Foreign Intelligence Surveillance Act court for three years between 2002 and 2005.

https://web.archive.org/web/20130711211028/https://abcnews.g...

1 comments

> "According to Victor Marchetti, a former special assistant to the deputy director of the Central Intelligence Agency (CIA), a limited hangout is "spy jargon for a favorite and frequently used gimmick of the clandestine professionals. When their veil of secrecy is shredded and they can no longer rely on a phony cover story to misinform the public, they resort to admitting—sometimes even volunteering—some of the truth while still managing to withhold the key and damaging facts in the case."

Then why didn't Snowden's doc show any illegal use of that data? Instead, he leaked many things that were perfectly legal as well as which high value targets were being surveilled in China in a transparent and failed attempt to get asylum in Hong Kong.

> "Two wrongs make a right" is considered "one of the most common fallacies in Western philosophy".

You are assuming it's wrong. Investigators aren't going to waste their time writing up court orders that aren't likely to be approved. Instead, we find that criminal defense attorneys rarely challenge the validity of warrants as issued but may challenge whether the warrant was followed.

> "Anyone who has been a judge will tell you a judge needs to hear both sides of a case," said James Robertson, a former federal district judge based in Washington who served on the secret Foreign Intelligence Surveillance Act court for three years between 2002 and 2005.

You're confusing multiple things here. You're confusing bulk metadata collection, which Robertson opposed, with individual surveillance warrants, which are always done without informing the person being surveilled. There was no opposing side to the bulk metadata collection, which was shut down. There was no record of mass domestic surveillance in Snowden's docs.

> There was no record of mass domestic surveillance in Snowden's docs.

That's funny, because there's a full slide deck from NSA about it here:

https://en.wikipedia.org/wiki/PRISM#The_slides

Notably, all the glossy corporate logos pictured are of American companies with predominantly American users. Not foreign ones. "Its existence was leaked six years later by NSA contractor Edward Snowden"

> Then why didn't Snowden's doc show any illegal use of that data?

"Snowden's subsequent disclosures included statements that government agencies such as the United Kingdom's GCHQ also undertook mass interception and tracking of internet and communications data – described by Germany as "nightmarish" if true – allegations that the NSA engaged in "dangerous" and "criminal" activity by "hacking" civilian infrastructure networks in other countries such as "universities, hospitals, and private businesses", and alleged that compliance offered only very limited restrictive effect on mass data collection practices (including of Americans) since restrictions "are policy-based, not technically based, and can change at any time", adding that "Additionally, audits are cursory, incomplete, and easily fooled by fake justifications", with numerous self-granted exceptions, and that NSA policies encourage staff to assume the benefit of the doubt in cases of uncertainty."

https://web.archive.org/web/20130626032506/http://news.yahoo...

https://web.archive.org/web/20170103043118/https://www.thegu...

https://web.archive.org/web/20170103043118/https://www.thegu...

> That's funny, because there's a full slide deck from NSA about it here:

Did you look at the slides you linked to? They describe targeted surveillance on specific foreigners outside the U.S.

> "Snowden's subsequent disclosures included statements that government agencies such as the United Kingdom's GCHQ also undertook mass interception and tracking of internet and communications data – described by Germany as "nightmarish" if true

Not a U.S. domestic surveillance program.

> allegations that the NSA engaged in "dangerous" and "criminal" activity by "hacking" civilian infrastructure networks in other countries such as "universities, hospitals, and private businesses",

Not a U.S. domestic surveillance program.

> and alleged that compliance offered only very limited restrictive effect on mass data collection practices (including of Americans) since restrictions "are policy-based, not technically based, and can change at any time", ...

The single U.S. mass data collection program in Snowden's leaks was phone metadata collection. Use of any data collected by the government is policy-based. In this case, use was limited to finding associates of foreign targets, and the query interface was limited to that. If it had changed, that would have been breaking the law, but Snowden showed no evidence of that. One more time: that single possibly illegal U.S. program Snowden leaked was then shut down anyway.

> Did you look at the slides you linked to?

Many times. They detail methods and partners used in mass surveillance on US soil involving US corporations and US routed internet backbone connections. No independently verifiable proof is provided that US persons are not targeted by this program.

Instead we're gifted such lovely terms as LOVEINT: https://en.wikipedia.org/wiki/LOVEINT in which the NSA admits to warrant-less domestic spying for the most trivial of reasons. Further demonstrating a lack of appropriate controls or process around such capabilities.

And testimony from "the agency official responsible for automating much of the NSA’s worldwide monitoring networks" indicating that mass surveillance infrastructure is used domestically: "After 9/11, they took one of the programs I had done, or the backend part of it, and started to use it to spy on everybody in this country. That was a program I created called Stellar Wind. That was seperate and compartmented from the regular activity which was ongoing because it was doing domestic spying. All the equipment was coming in, I knew something was happening but then when the contractors I had hired came and told me what they were doing, it was clear where all the hardware was going and what they were using it to do. It was simply a different input, instead of being foreign it was domestic." - William Binney

https://www.youtube.com/watch?v=590cy1biewc

> Not a U.S. domestic surveillance program.

"However, in recent years, FVEY documents have shown that member agencies are intentionally spying on one another's private citizens and sharing the collected information with each other."

https://en.wikipedia.org/wiki/Five_Eyes#Domestic_espionage_s...

> Many times.

Clearly not.

> They detail methods and partners used in mass surveillance on US soil involving US corporations and US routed internet backbone connections.

PRISM is a data ingestion system whereby the NSA ingests data collected by the FBI Data Intercept Technology Unit that gets data from specific accounts under court order. The DITU is clearly labeled in the diagram on the slide showing how it works. The NSA has no integration with the companies at all. The "Internet backbone" has nothing to do with PRISM.

> No independently verifiable proof is provided that US persons are not targeted by this program.

If the FBI gives a section 702 court order to a company for an account that isn't for a foreigner outside the U.S., they are not going to comply. The FBI wouldn't even ask. The very idea that you think "verifiable proof" is needed shows you believed the ridiculous conspiracy theory that the NSA could directly fetch any account's data, which was supported by neither the law nor the leaked documents but only by Greenwald's fever dreams

> Instead we're gifted such lovely terms as LOVEINT: https://en.wikipedia.org/wiki/LOVEINT in which the NSA admits to warrant-less domestic spying for the most trivial of reasons.

Yet another document that you claim to have read but didn't. The cases where they were able to surveil the person they were stalking were foreigners outside the U.S. The domestic cases involved querying for associates using the metadata. Neither one is "domestic spying" and certainly don't show any evidence of domestic mass surveillance.

> "However, in recent years, FVEY documents have shown that member agencies are intentionally spying on one another's private citizens and sharing the collected information with each other."

Once again, if you bothered to read the source documents, you would find that this quote is not supported by the citations. The first citation shows that the U.S. The first is about how the U.S. is allowed to use UK phone numbers in its metadata collection for chaining analysis, not to share that data or analysis with the UK as the quote claims. The second is about how Australia is allowed to share data it collected outside the U.S. and the U.S. with the U.S. without first looking for and removing the data of Australians who happened to be abroad whose data was collected, not for the U.S. to spy on Australians as your quote claims.

Lesson: If you see a claim that describes something that is clearly illegal, you should verify it before you repeat stuff that is very clearly nonsense and come off as a tin foil hat wearing conspiracy theorist.

Yes I am familiar with the official statements. They do not constitute "independently verifiable proof ... that US persons are not targeted by this program." and carry far less weight than the previously quoted and linked testimony which directly contradicts them when considered in context of the disclosures.

The same folks you'd have us believe without question have lied repeatedly about these very programs:

http://www.allgov.com/news/controversies/nsa-director-alexan...

https://apnews.com/article/business-33a88feb083ea35515de3c73...

Since the official statements aren't trustworthy, I'll accept independently verifiable (by a group like EFF) proof. I'd be a sillybilly to accept less.

Should be pretty easy. NSA has EFF's contact information from that lawsuit ( https://en.wikipedia.org/wiki/Jewel_v._National_Security_Age... ) in which they destroyed evidence against a court order, and argued "state secrets" against every claim. You know, the one that explicitly avoided deciding the constitutionality of all this on procedural grounds. Totally trustworthy behavior. Everyone responds that way when asked to prove they're not mass surveilling Americans.