Know Your Surveillance Programs

The NSA has four data collection programs.  Two collect “metadata,” and they are MAINWAY for phones and MARINA for the Internet.  The other two collect content, and they are NUCLEON for phone calls and PRISM for the Internet.

For more, see “U.S. surveillance architecture includes collection of revealing Internet, phone metadata,” Barton Gellman, WaPo

Not Helping

In defending the NSA’s broad surveillance of all of us, out-going FBI Director Robert Mueller told Congress that one of those programs identified Tamerlan Tsarnaev’s friend in Florida after the Boston Marathon bombings.

Yeah, they found him after the bombings.  And they killed him even though he was unarmed.  Great example.

Shoot the Messenger

So the broad reaction in Congress, both Dem and GOP, to Edward Snowden’s leaks is not that we need less spying on us, it’s that we need less contractor access to classified info.

For more, see “A Promise of Changes For Access to Secrets,” David E. Sanger and Jeremy W. Peters, NYT

Peter King, Fox News, Lies — Anybody Surprised?

Congressman Peter King (R-NY) said on Fox News that the Guardian’s Glenn Greenwald should be prosecuted as well as Edward Snowden.  He accused Greenwald of threatening to reveal the names of CIA agents, something Greenwald vigorously denies.

But most Fox viewers are going to hear only King’s wild accusation and not Greenwald’s vehement (and as far as I can tell, accurate) denial.  This is a prime example of how Fox skews perceptions and polarizes this country.  There’s enough here to debate and dissect without accusing Greenwald of stuff he hasn’t done.

As for King’s anti-terror bona fides, let’s not forget his support for the Irish Republican Army.

 

Quote of the Day

Sen. Jon Tester (D-Montana) on Edward Snowden:

“First of all, Snowden probably shouldn’t have done what he did.  But the fact of the matter is I don’t see how that compromises the security of this country whatsoever.  And quite frankly, it helps people like me become aware of a situation that I wasn’t aware of before because I don’t sit on that Intelligence Committee.”

That’s pretty much where I am on all this.

I Doubt We’re Up to This Moment

This feels like a big moment to me, these Edward Snowden leaks, a moment when we have to make decisions that aren’t based, for either Dems or Republicans, on how we feel about President Obama.  I don’t feel that we are up to it.  After 9/11, I believe that members of both parties in Congress acted in good faith, really just wanting to do the right thing so that we wouldn’t get attacked again.  You can say they went too far with the Patriot Act, but if they did, I believe their motives were honest, maybe based too much on raw emotion, but not based on partisan politics.

I believe our current Congress has a lot more crazy people in it than the Congress sitting in the fall of 2001.  I have much less confidence in them to even try to act out of principle, much less reach the right result.

I worry that we can’t have a real debate because some Dems will rally uncritically around the President simply because he is so hated by the other side and so under siege on the IRS, Benghazi, Obamacare, AP/James Rosen, immigration, etc.     I worry that the libertarian wing of the GOP, the Rand Paul types, will use this as an excuse to make some of their more outlandish theories and beliefs part of the mainstream.

This is a moment ripe for a shift in thinking and policy one way or the other, either to accept and ratify all this post-9/11 stuff for the foreseeable future or to say, “Whoa, this tradeoff doesn’t make sense” and roll some of it back.  I just hope that the wrong people don’t control the outcome of that shift.

The Best Thing I’ve Read on The Surveillance Stuff

 

From “We are shocked, shocked…,” David Simon (you know, the guy who created The Wire and Treme) at davidsimon.com:

Having labored as a police reporter in the days before the Patriot Act, I can assure all there has always been a stage before the wiretap, a preliminary process involving the capture, retention and analysis of raw data. It has been so for decades now in this country. The only thing new here, from a legal standpoint, is the scale on which the FBI and NSA are apparently attempting to cull anti-terrorism leads from that data. But the legal and moral principles? Same old stuff.

Allow for a comparable example, dating to the early 1980s in a place called Baltimore, Maryland.

There, city detectives once began to suspect that major traffickers were using a combination of public pay phones and digital pagers to communicate their business. And they took their suspicions to a judge and obtained court orders — not to monitor any particular suspect, but to instead cull the dialed numbers from the thousands and thousands of calls made to and from certain city pay phones.

Think about it. There is certainly a public expectation of privacy when you pick up a pay phone on the streets of Baltimore, is there not? And certainly, the detectives knew that many, many Baltimoreans were using those pay phones for legitimate telephonic communication. Yet, a city judge had no problem allowing them to place dialed-number recorders on as many pay phones as they felt the need to monitor, knowing that every single number dialed to or from those phones would be captured. So authorized, detectives gleaned the numbers of digital pagers and they began monitoring the incoming digitized numbers on those pagers — even though they had yet to learn to whom those pagers belonged. The judges were okay with that, too, and signed another order allowing the suspect pagers to be “cloned” by detectives, even though in some cases the suspect in possession of the pager was not yet positively identified.

All of that — even in the less fevered, pre-Patriot Act days of yore — was entirely legal. Why?

Because they aren’t listening to the calls.

It’s at that point, people, that law enforcement requires a full-throated argument of probable cause. It’s at that point that privacy rights must be seriously measured against the legitimate investigate needs of law enforcement. And it’s at that point that the potential for authoritarian overreach becomes significant.

So think for a minute about a scenario in which, say, a phone number is identified overseas as being linked to terror activity. It is so identified by, say, NSA overseas intercepts or through intelligence gathering by the CIA or the military. And say that there exists a database of billions and billions of telephonic contacts in the United States over a period of months or years. And say a computer could then run the suspect number through that data base and determine a pattern of communication between that overseas phone and several individuals in New York, or Boston, or Detroit. Would you want that connection to be made and made quickly? Or do you want to leave law enforcement to begin trying to acquire the call history on that initial phone from overseas carriers who may or may not maintain detailed retroactive call data or be unwilling to even provide that data fully to American law enforcement or do so while revealing the investigative effort to the targets themselves?Keep in mind that law enforcement must still establish probable cause to then begin to actually monitor conversations on the domestic numbers, and that this request for electronic surveillance is then, of course, subject to judicial review by the FISA court.

When the government grabs the raw data from hundreds or thousands of phone calls, they’re probably going to examine those calls. They’re going to look to establish a pattern of behavior to justify more investigation and ultimately, if they can, elevate their surveillance to actual monitoring of conversations. Sure enough.

When the government grabs every single fucking telephone call made from the United States over a period of months and years, it is not a prelude to monitoring anything in particular. Why not? Because that is tens of billions of phone calls and for the love of god, how many agents do you think the FBI has? How many computer-runs do you think the NSA can do? When the government asks for something, it is notable to wonder what they are seeking and for what purpose. When they ask for everything, it is not for specific snooping or violations of civil rights, but rather a data base that is being maintained as an investigative tool.

There is a lot of authoritarian overreach in American society, both from the drug war and the war on terror.

But those planes really did hit those buildings. And that bomb did indeed blow up at the finish line of the Boston marathon. And we really are in a continuing, low-intensity, high-risk conflict with a diffuse, committed and ideologically-motivated enemy. And for a moment, just imagine how much bloviating would be wafting across our political spectrum if, in the wake of an incident of domestic terrorism, an American president and his administration had failed to take full advantage of the existing telephonic data to do what is possible to find those needles in the haystacks.

Frankly, I’m a bit amazed that the NSA and FBI have their shit together enough to be consistently doing what they should be doing with the vast big-data stream of electronic communication. For us, now — years into this war-footing and this legal dynamic — to loudly proclaim our indignation at the maintenance of an essential and comprehensive investigative database while at the same time insisting on a proactive response to the inevitable attempts at terrorism is as childish as it is obtuse. We want cake, we want to eat it, and we want to stay skinny and never puke up a thing. Of course we do.

When the Guardian, or the Washington Post or the New York Times editorial board — which displayed an astonishing ignorance of the realities of modern electronic surveillance in its quick, shallow wade into this non-controversy — are able to cite the misuse of the data for reasons other than the interception of terrorist communication, or to show that Americans actually had their communications monitored without sufficient probable cause and judicial review and approval of that monitoring, then we will have ourselves a nice, workable scandal. …

But this? Please. This is bullshit.

In Baltimore thirty years ago, after the detectives figured out which pay phones were dialing pagers, and then did all the requisite background checks and surveillance to identify the drug suspects, they finally went to a judge and asked for a wiretap on several pay phones. The judge looked at the police work and said, okay, you can record calls off those public pay phones, but only if you have someone watching the phones to ensure that your suspects are making the calls and not ordinary citizens. And if you make a mistake and record a non-drug-involved call, you will of course “minimize” the call and cease recording.

It was at that point — and not at the earlier stage of gathering thousands and thousands of dialed numbers and times of call — that the greatest balance was sought between investigative need and privacy rights. And in Baltimore, that wiretap case was made and the defendants caught and convicted, the case upheld on appeal. Here, too, the Verizon data corresponds to the sheets and sheets of printouts of calls from the Baltimore pay phones, obtainable with a court order and without any demonstration of probable cause against any specific individual. To get that far as a law-abiding investigator, you didn’t need to know a target, only that the electronic medium is being used for telephonic communication that is both illegal and legal. It’s at the point of actually identifying specific targets and then seeking to listen to the conversations of those targets that the rubber really hits the road.

 

Quote of the Day

“The possibility of a broad government sweep of domestic telephone data in pursuit of potential terrorists has long been suspected by civil liberties advocates and even hinted at by members of Congress.”

“Documents Point To Effort By U.S. To Get Web Data,” Charlie Savage and Edward Wyatt, NYT

I think anyone who has been paying attention over the years and taken note of the grumbling about Section 215 of the Patriot Act has no reason to be surprised about the release of a specific classified FISA order to Verizon.  Agree with it or not, it’s no shocker.

As for Prism, the program getting Internet information rather than phone records, if it’s true that the government is looking only at communications by foreigners who are overseas, I’d be upset if they weren‘t doing this.  To me, this seems essential to keeping us safe.