Do you hear that? It’s starting.
The predictable drumbeat of dire warnings about what will happen if portions of the Patriot Act – the post-9/11 law being used to conduct controversial NSA dragnet surveillance – are allowed to expire on June 1 has already begun.
James Clapper, the director of national intelligence, issued what is likely to be the first of many vague warnings from the intelligence community on Monday. Faced with the expiration of the part of the Patriot Act that allows the bulk collection of information about Americans’ phone calls, Clapper brought out the favored hypothetical of the surveillance hawk: An unspecified attack will occur, which would have been prevented if Congress had reauthorized the dragnet collection of Americans’ phone calls.
“If that tool is taken away from us… and some untoward incident happens that could have been thwarted if we had had it,” Clapper said, “I hope that everyone involved in that decision assumes the responsibility.”
There’s just one problem with this particular bit of emotional blackmail, however. The pesky, rather inconvenient fact is that the government’s mass surveillance programs operating under Section 215 of the Patriot Act have never stopped an act of terrorism. That is not the opinion of the NSA’s most ardent critics, but rather the findings of the president’s own review board and the Privacy and Civil Liberties Oversight Board. This program has had over a decade to prove its value, and yet there is no evidence that it has helped identify a terrorism suspect or “made a concrete different in the outcome of a counterterrorism investigation.”
In less than three months, Section 215 will expire unless Congress takes action to extend that authority. As that deadline approaches, we will be hearing more from folks in the intelligence community who would like to see the program continued indefinitely.
Congress would do well to remember that this is a program that is sweeping up vast amounts of data on innocent Americans in violation of their constitutional rights. It’s also one that, despite the rhetoric, has not succeeded in making us any safer. In fact, even Director Clapper has expressed support for some reform of Section 215.
The drumbeat of doom is only going to get louder between now and June. But it can’t drown out the truth. Surveillance reform is urgently needed to rein in out of control government spying and to restore our rights.
According to various publications in the American and foreign media, the United States has created a global system of cyber espionage that allows the interception and processing of personal data around the globe in violation of fundamental human rights. Tapped phones, intercepted short messages, supervised discussions in social networks and stolen emails – this is the ugly reality we are living in. The NSA and other units of the United States Intelligence Community are more than capable of breaching any mobile operating system, be it iOS, Android or BlackBerry OS.
In 2011 US intelligence agencies successfully finished the development of geo-location tracking software that allows the NSA to collect and save more than five billion location records of mobile users around the world on a daily basis, and then through a special program labeled CO-TRAVELER analyze and monitor the movement of certain individuals that could be of interest for Washington. In addition, since 2010 information on social contacts of US citizens, their personal data, including telephone calls, Internet logs, bank codes, insurance data is being processed by intelligence agencies on a regular basis.
The NSA’s secret project codenamed Boundless Informant seeks to establish control over “information space.” According to The Guardian it has been able to collect the data on 97 billion phone calls worldwide since March 2013.
The global electronic intelligence net Echelon (AUSCANNZUKUS or Five Eyes), that was established by the US in cooperation with the UK back in 1947, allowed the intelligence agencies of the the Untied States, the United Kingdom, Canada, Australia, New Zealand, Norway, Denmark, Germany, Turkey and other countries to exchange secret information, including the records on their respective citizens.
Yet another secret project codenamed Prism established by the NSA and Britain’s Government Communications Headquarters (GCHQ), allowed intelligence agencies to establish close partnerships with major IT companies back in 2007, including Microsoft, Yahoo, Google, Facebook, PalTalk, AOL, Skype, YouTube and Apple. Such cooperation allows the secret services to read private e-mails and monitor the transfer of files throughout global information space. This allows the NSA to control sovereign leaders, business representatives and foreign diplomats as has been repeatedly reported on by various international media outlets.
However, Washington doesn’t seem to be satisfied with its “progress” since it continues funding and developing new secret projects that would not simply allow the United States to retain an effective control over global information space, but to influence web users worldwide to its own advantage as well.
Thus, the Intelligence Advanced Research Projects Activity Agency (IARPA) in recent years has started a number of research programs to manipulate social networks.
Programs for analysis of the socio-cultural content of language (Socio-Cultural Content in Language – SCIL Program) is implemented in order to develop algorithms, methods and technologies that could enable the intelligence community to supervise the activities of various non-governmental organizations that do not agree with the social policies of certain governments. The development of this program is dictated by the need to recognize the content of messages transmitted over the Internet, taking into account linguistic differences and dialects.
IARPA in close collaboration with the National Institute of Standards and Technology is also developing a program codenamed Reynard, which aims at studying the phenomena of social dynamics in so-called virtual worlds such as MMOs. This particular study is carried out in the interest of the security agencies in order to assess the political mood of the population and taking proactive measures once it changes.
The intelligence community is also sponsoring the development of the Aladdin program designed for automated analysis and description of video content (Automated Low-Level Analysis and Description of Diverse Intelligence Video – VACE). The main goal of this program is to provide intelligence analysts with automated search capabilities to track videos that could be of interest for them. Videos for analytical processing can come from different sources – television, surveillance cameras, regular pictures, interviews or even footage shot by drones. The footage is systematized by time and place to identify certain individuals and determine the sequence of their actions which may be in certain semantic relations to present-day events.
Currently, IARPA implemented a program called Babel, which aims at developing effective speech recognition software in different languages and dialects.
Washington and its agencies are literally spending billions of taxpayer dollars annually under the convenient guise of the “war on terror”, which in fact turns out to be a hidden war against its own citizens, now deprived of basic human rights. But what makes it even worse is that it’s pushing its satellite countries to launch an all-out offensive against the civil liberties of Europe and beyond.
Almost all wars begin with false flag operations.
The coming conflicts in North Korea and Russia are no exception.
Mass public hysteria is being manufactured to justify aggression against Moscow and Pyongyang, in retaliation for acts attributed to the North Korean and Russian governments, but orchestrated and carried out by the CIA and the Pentagon.
The false flagging of North Korea: CIA weaponizes Hollywood
The campaign of aggression against North Korea, from the hacking of Sony and the crescendo of noise over the film, The Interview, bears all the markings of a CIA false flag operation.
The hacking and alleged threats to moviegoers has been blamed entirely on North Korea, without a shred of credible evidence beyond unsubstantiated accusations by the FBI. Pyongyang’s responsibility has not been proven. But it has already been officially endorsed, and publicly embraced as fact.
The idea of “America under attack by North Korea” is a lie.
The actual individuals of the mysterious group responsible for the hacking remain conveniently unidentified. A multitude of possibilities—Sony insiders, hackers-for-hire, generic Internet vandalism—have not been explored in earnest. The more plausible involvement of US spying agencies—the CIA, the NSA, etc. , their overwhelming technological capability and their peerless hacking and surveillance powers—remains studiously ignored.
Who benefits? It is illogical for Pyongyang to have done it. Isolated, impoverished North Korea, which has wanted improved relations with the United States for years (to no avail), gains nothing by cyber-attacking the United States with its relatively weak capabilities, and facing the certainty of overwhelming cyber and military response. On the other hand, Washington benefits greatly from any action that leads to regime change in North Korea.
But discussion about Pyongyang’s involvement—or lack of—risks missing the larger point.
This project, from the creation of The Interview to the well-orchestrated international incident, has been guided by the CIA, the Pentagon, and the State Department from the start. It is propaganda. It is a weapon of psychological warfare. It is an especially perverted example of military-intelligence manipulation of popular culture for the purpose of war.
There is nothing funny about any of it.
The Interview was made with the direct and open involvement of CIA and Rand Corporation operatives for the express purpose of destabilizing North Korea. Star and co-director Seth Rogen has admitted that he worked “directly with people who work in the government as consultants, who I’m convinced are in the CIA”. Originally conceived to be a plot taking place in an “unnamed country”, Sony Pictures co-chairman Michael Lynton, who also sits on the board of the Rand Corporation, encouraged the film makers to make the movie overtly about murdering Kim Jong-Un. Bruce Bennett, the Rand Corporation’s North Korean specialist, also had an active role, expressing enthusiasm that the film would assist regime change and spark South Korean action against Pyongyang. Other government figures from the State Department, even operatives connected to Hillary Clinton, read the script.
The infantile, imbecilic, tasteless, reckless idiots involved with The Interview, including the tasteless Rogen and co-director Evan Goldberg, worked with these military-intelligence thugs for months. “Hung out” with them. They do not seem to have had any problem being the political whores for these Langley death merchants. In fact, they had fun doing it. They seem not to give a damn, or even half a damn, that the CIA and the Pentagon have used them, and co-opted the film for an agenda far bigger than the stupid movie itself. All they seem to care about was that they are getting publicity, and more publicity, and got to make a stupid movie. Idiots.
The CIA has now succeeded in setting off a wave of anti-North Korea war hysteria across America. Witness the ignorant squeals and cries from ignorant Americans about how “we can’t let North Korea blackmail us”, “we can’t let Kim take away our free speech”. Listen to the ridiculous debate over whether Sony has the “courage” to release the film to “stand up to the evil North Koreans” who would “blackmail America” and “violate the rights” of idiot filmgoers, who now see it as a “patriotic duty” to see the film.
These mental midgets—their worldviews shaped by the CIA culture ministry with its endorsed pro-war entertainment, violent video games, and gung-ho shoot ‘em ups—are hopelessly brain-curdled, irretrievably lost. Nihilistic and soulless, as well as stupid, most Americans have no problem seeing Kim Jong-Un killed, on screen or in reality. This slice of ugly America is the CIA’s finest post-9/11 army: violent, hate-filled, easily manipulated, eager to obey sheeple who march to whatever drumbeat they set.
And then there are the truly dumb, fools who are oblivious to most of reality, who would say “hey lighten up, it’s only a comedy” and “it’s only a movie”. Naïve, entitled, exceptionalist Americans think the business of the war—the murderous agenda they and their movie are helping the CIA carry out —is all just a game.
The CIA’s business is death, and that there are actual assassination plans in the files of the CIA, targeting heads of state. Kim Jong-Un is undoubtedly on a real assassination list. This is not funny, either.
The real act of war
The provocative, hostile diplomatic stance of the Obama administration speaks for itself. Washington wanted to spark an international incident. It wants regime change in Pyongyang, does not care what North Korea or China think, and does not fear anything North Korea will do about it.
On the other hand, imagine if a film were about the assassination of Benjamin Netanyahu and the toppling of the government in Tel Aviv. Such a film, if it would ever be permitted even in script form, would be stopped cold. If it made it through censors that “magically” never slowed down The Interview (and yes, there is censorship in America, a lot of it) Obama would personally fly to Tel Aviv to apologize. At the very least, Washington would issue statements distancing themselves from the film and its content.
Not so in the case of The Interview. Because American elites actually want the Kim family murdered.
Despite providing no proof of North Korean involvement, President Barack Obama promised a “proportional response”. Promptly, North Korea’s Internet was mysteriously shut down for a day.
Unless one is naïve to believe in this coincidence, all signs point to US spy agencies (CIA, NSA, etc.) or hackers working on behalf of Washington and Langley.
Given the likelihood that North Korea had nothing to do with either the hacking of Sony, the initial pulling of the movie (a big part of the publicity stunt, that was not surprisingly reversed) or the “blackmailing” of moviegoers, the shutting down of North Korea’s Internet was therefore a unilateral, unprovoked act of war. Washington has not officially taken responsibility. For reasons of plausible denial, it never will.
Perhaps it was a dry run. A message. The US got to test how easily it can take down North Korea’s grid. As we witnessed, given overwhelming technological advantage, it was very easy. And when a war against Pyongyang begins in earnest, American forces will know exactly what they will do.
The US is flexing its Asia-Pacific muscles, sending a message not only to Pyongyang, but to China, a big future target. Some of the other muscle-flexing in recent months included the anti-Beijing protests in Hong Kong (assisted by the CIA and the US State Department), ongoing provocations in the South China Sea over disputed oil, and new defense agreements that place new anti-missile systems and missile-guided naval vessels to the region.
The bottom line is that America has once again been mobilized into supporting a new war that could take place soon. The CIA and Sony have successfully weaponized a stupid movie, making it into a cause and a battle cry.
If and when bombs fall on North Korea, blood will be on the hands of the makers of The Interview, every single executive who allowed it to be made, and the hordes who paid to see it.
If America were a decent, sane society, The Interview would be exposed, roundly denounced, boycotted and shunned. Instead it is celebrated.
The CIA should be condemned. Instead, Seth Rogen hangs out with them. America, increasingly dysfunctional, loves them. Obeys them.
The false flagging of Russia
Regarding The Interview, Russian Foreign Ministry spokesman Alexander Lukashevich issued a statement in sympathy with North Korea, correctly calling the film’s concept aggressive and scandalous, and decried the US retaliatory response as counterproductive and dangerous to international relations.
Of course. Washington has no interest in improved international relations.
The Russians should know.
Like Kim Jong-Un, Vladimir Putin has been vilified, demonized and false-flagged, incessantly. If Kim is today’s object of ridicule, Putin is Evil Incarnate.
Consider the hysterical, desperate provocations by Washington in recent months.
A US-NATO coup, engineered by the CIA, toppled the government of Ukraine, planting a pro-US neo-Nazi criminal apparatus on Russia’s doorstep. The CIA and its worldwide network of propagandists pinned the blame on Putin and Russia for aggression, and for obstructing “democracy”.
The MH-17 jetliner is downed by Ukrainian operatives, with the support of the CIA, Mi-6, etc. etc. This false flag operation was blamed on Russia— “Putin’s Missile”. The US and NATO are still trying to pin these murders on Putin.
The war against the Islamic State—a massive CIA false flag operation—seeks to topple the Assad government as well as to militarily counter Russia. The ongoing Anglo-American conquest of regional oil and gas supplies, and energy transport routes is also aimed at checkmating Russia and China across the region.
The US and NATO have attacked the Russian federation with sanctions. The US and Saudi Arabia have collapsed oil prices, to further destroy the Russian economy. Full-scale military escalations are being planned. The US Congress is pushing new legislation tantamount to an open declaration of war against Russia.
What next? Perhaps it is time for the CIA to produce a Seth Rogen-James Franco movie about assassinating Putin. Another “parody”. Or how about a movie about killing Assad, or anyone else the United States wants to make into a Public Enemy? Don’t think Langley isn’t working on it.
The return of the Bushes (who were never gone)
In the midst of all escalating war hysteria comes news that Jeb Bush is “actively exploring” running for president in 2016. The long predicted return of the Bush family, the kings of terrorism, the emperors of the false flag operation, back to the White House appears imminent.
The CIA will have its favorite family back in the Oval Office, with a true CIA scion to manage the apocalyptic wars likely to be launched in earnest in the next two years: Russia/Ukraine, North Korea, the Middle East.
Jeb Bush will “finish the job”
The 2016 presidential “contest” will be a charade. It is likely to put forth two corrupt establishment political “friends” posing as adversaries, when in fact, they are longtime comrades and conspirators. On one side, Hillary (and Bill) Clinton. On the other side, Jeb Bush, with George H.W., George W. and all of the Bush cronies crawling back out of the rotten woodwork. The fact is that the Clintons and Bushes, and their intertwined networks, have run the country since the 1980s, their respective camps taking turns in power, with Obama as transitional figurehead (his administration has always been run by neoliberal elites connected to the Clintonistas, including Hillary Clinton herself).
The collective history of the Bushes stretches back to the very founding of the American intelligence state. It is the very history of modern war criminality. The resume is George H.W. Bush—the CIA operative and CIA Director—is long and bloody, and littered with cocaine dust. The entire Bush family ran the Iran-Contra/CIA drug apparatus, with the Clintons among the Bush network’s full partners in the massive drug/weapons/banking frauds of that era, the effects of which still resonate today. And we need not remind that the Bush clan and 9/11 are responsible for the world of terror and false flag foreign policy and deception that we suffer today.
While it remains too early to know which way the Establishment will go with their selection (and it depends on how world war shakes out between now and 2016), it is highly likely that Jeb Bush would be the pick.
Hillary Clinton has already been scandalized—“Benghazi-ed”. Jeb Bush, on the other hand, has ideal Establishment/CIA pedigree. He has waited years for the stupid American public to forget the horrors that his family—Georges H.W. and W.— brought humanity. And now Americans , with their ultra-short memories, have indeed forgotten, if they had ever understood it in the first place.
And the American public does not know who Jeb Bush is, beyond the last name. Jeb Bush, whom Barbara Bush always said was the “smart one”, has been involved in Bush narco-criminal business since Iran-Contra. His criminal activities in Florida, his connection with anti-Castro Cuban terrorists and other connections are there, for those who bother to investigate them. His Latin American connections—including his ability to speak fluent Spanish, a Latin wife and a half-Latin son (George P. Bush, the next up and coming political Bush)—conveniently appeals to the fastest-growing demographic, as well as those in the southern hemisphere drug trade. Recent Obama overtures towards the Latino demographic—immigration, Cuba—appear to be a Democratic Party move to counter Jeb Bush’s known strengths in the same demographic.
Today, in the collective American mind, Kim Jong-Un and Vladimir Putin are “the bad guys”. But the mass murdering war criminal Bushes are saints. “Nice guys”.
A Jeb Bush presidency will be a pure war presidency, one that promises terror, more unspeakable than we are experiencing now, lording it over a world engulfed in holocaust.
This is not a movie.
Today, in a hushed courtroom in Washington, D.C., not far from the now-empty halls of Congress, a federal appeals court heard arguments in Klayman v. Obama, a challenge to the NSA’s bulk collection of telephone metadata first revealed by Edward Snowden. If you have ever made a phone call, or received a phone call, this case has implications for your personal privacy and you should pay close attention to what happens next.
The appeal follows a December win for Larry Klayman, a conservative lawyer and activist and the plaintiff in the case, where a district court judge ruled the program was likely unconstitutional. Today, government lawyers attempted to argue that this program should be allowed to continue.
The arguments hinged on a central question: Is the warrantless, non-targeted surveillance currently being conducted by the NSA, which is scooping up data on all (or almost all) calls made or received on U.S. telephone networks, a violation of the Fourth Amendment?
The government tried to argue that it is not. They claim that their searches of this massive call record database are reasonable, and that there is no reasonable expectation of privacy in the numbers one dials.
But, as EFF Legal Director Cindy Cohn argued on behalf of both EFF and the ACLU as friends of the court, the government has no right to scoop up such a massive amount of personal information about Americans in the first place.
The truth is, the NSA’s bulk collection of the phone records of all Americans is fundamentally different than putting a trace on the phone of an individual suspected of wrongdoing. The sheer scale of this program means that we are all suspects, or at least potential suspects, in the eyes of our government.
Think about the impact of knowing that your every phone interaction is being logged by the government. This kind of surveillance has even greater implications for lawyers and journalists, who have to worry about protecting the confidentiality of clients and sources. The phrase “chilling effect” seems insufficient to describe the potential loss to our society, to our whole way of life, as we slowly begin to censor ourselves because we know that the government is always monitoring our communications.
This is contrary to the very nature of a democracy, where people are supposed to hold their government to account. Who will be willing to speak out against an abusive government when that government knows all our deepest, darkest secrets?
Governments are by nature interested in acquiring more power, and today, more than ever, information is power. We should not be surprised that the government wants to know who Americans are speaking with, and for how long, and how often. We rely on the Constitution, and on the other branches of government, to provide a check on that desire.
Today, we asked the court to provide that check and to declare bulk collection of American’s telephone metadata unconstitutional.
(To read the ACLU and EFF’s amicus brief in Klayman v. Obama, click here.)
We’ve filed our reply brief in the appeal of Smith v. Obama, our case challenging the NSA’s mass telephone records collection on behalf of Idaho nurse Anna Smith. The case will be argued before the Ninth Circuit Court of Appeal on December 8, 2014 in Seattle, and the public is welcome to attend.
Another case challenging the telephone records program, Klayman v. Obama, will be argued on November 4 in Washington DC before the DC Circuit and EFF will be participating as an amicus.
The Smith v. Obama case records are all here: but we thought we’d highlight three of the more outrageous arguments the government made, and our responses debunking them.
Mrs. Smith doesn’t think her phone records are any of the government’s business. That’s why, only a few days after the Guardian published a secret order from the Foreign Intelligence Surveillance Court revealing the government’s bulk collection of the telephone records of millions of innocent Americans, she sued. Smith v. Obama challenges the government’s collection of call detail records under Section 215 of the PATRIOT Act. Mrs. Smith is represented by her husband, attorney Peter Smith, along with the ACLU, EFF, and Idaho State Rep. Luke Malek.
The district court said it felt bound to dismiss her claims because of a 1979 Supreme Court case, Smith v. Maryland. That case involved the collection of the phone numbers dialed by a criminal suspect over the course of three days. It’s one of the cornerstones of the so-called “third party doctrine,” the idea that people have no expectation of privacy in information they entrust to others—and it’s outdated to say the least.
The centerpiece of Mrs. Smith’s case is the issue of whether the government’s collection of our telephone records in bulk, and retention of those records for five years, triggers the Fourth Amendment’s warrant requirement. The warrant requirement applies if there is a legitimate and reasonable expectation of privacy in those records. And if the warrant requirement applies, the collection is unconstitutional, since there is no warrant (everyone agrees that the secret FISA Court rulings allowing the bulk collection under Section 215 of the Patriot Act are NOT warrants).
We argue that there is a legitimate and reasonable expectation of privacy violated by the bulk collection of telephone records, because unlike the narrow situation the Supreme Court considered in 1979, they can reveal an incredible amount of sensitive information. For example, in one short-term study of only a few months of telephony metadata from 546 people, researchers at Stanford were able to identify one plausible inference of a subject obtaining an abortion; one subject with a heart condition; one with multiple sclerosis; and the owner of a specific brand of firearm.The government wants the court to simply ignore these differences. Alternately, the government argues that even if there is an expectation of privacy, it is so small compared to the government’s interest that the warrant requirement can be ignored, under something called the “special needs” test (more on that below).
But, as we emphasize our reply brief, this is wrong, in part because we are living in what member of the President’s Review Group Professor Peter Swire calls the “Golden Age of Surveillance.” As we argue: “technological advances have vastly augmented the government’s surveillance power and exposed much more personal information to government inspection and intrusive analysis. If courts ignored this reality, the essential privacy long preserved by the Fourth Amendment would be eliminated.”
The Government’s Arguments
So with that background, let’s look at three of the most troubling claims the government makes.
Call Detail Records Don’t Actually Identify People
The government still claims with a straight face that call detail records don’t reveal private information, because they “do not include information about the identities of individuals,” including “the name, address, [or] financial information” of any telephone subscribers.
That’s technically true, of course, but who cares? It’s not like this prevents the government from identifying you in less than a millisecond after it gets your telephone number. Last time we checked, the government did have access to, say, telephone books and the many public online services that can do reverse number lookup. That’s why we point out that: “phone numbers are every bit as identifying as names. Indeed, they are more so: while many people in the country may share the same name, no two phone subscribers share the same number.”
It’s pretty ridiculous for the government to continue to try to convince the court that the absence of the names in calling records represents any real privacy protection for the millions of Americans whose records are collected. It plainly does not.
We Have to Collect Everything for the Program to Work. But We’re Not Collecting Everything.
The government tries to challenge Mrs. Smith’s standing to sue by repeatedly alleging that the call detail records “program has never encompassed all, or even virtually all, call records and does not do so today.” It claims that the case should be dismissed because Mrs. Smith cannot immediately “prove” that her records were included. Of course, that’s not how litigation works. Mrs. Smith has good reason to believe that her records have been included—the government’s own public statements give her good reason. The district court properly rejected this argument, but the government continues to press it on appeal.
The government also seems to be talking out of both sides of its mouth here, since, as we note in our brief:“In explaining the program to Congress and the public…the government has emphasized not only that the program is comprehensive, but that this comprehensiveness is the key to its utility.”
In fact, Robert Litt, General Counsel of the Office of the Director of National Intelligence told Congress: “In order to find the needle that matched up against that number, we needed the haystack, right. That’s what the premise is in this case.” And NSA Deputy Director John Inglis defended the program by saying: “If you’re looking for a needle in the haystack you need the haystack. So you wouldn’t want to check a database that only has one third of the data, and say there’s a one third chance that I know about a terrorist plot, there’s a two thirds chance I missed it because I don’t have that data.”
So to get the case dismissed they want to convince the court that they aren’t really collecting “virtually all” of the telephone records, but their public justifications rely on the fact that they are. So either they are collecting Mrs. Smith’s records, along with every other Verizon Wireless customer—Verizon is the second largest wireless service in the U.S. after all—or they are not very good at meeting their own stated goals. Which is it, government?
And that goes right to the heart of the government’s next argument:
Bulk Telephone Records Collection Isn’t Necessary to Protect Us—But Is Still Allowed Under the “Special-Needs Doctrine”
The government’s fallback argument is that even if the call detail records triggered the Fourth Amendment, a warrant is still not required under a narrow legal precedent called the “special-needs doctrine.” It allows warrantless searches of a few small categories of people who have a reduced privacy expectation, like students in schools or employees who handle dangerous equipment. It also only applies when compliance with probable-cause and warrant requirements would be “impracticable” and the government’s primary goals are not law enforcement.
The first problem here is that the millions of ordinary Americans affected by the government’s bulk collection do not have a reduced expectation of privacy in the records of their telephone calls. The privacy interests here are great, since with a trail of telephone records, the government can learn extremely sensitive information.
The second problem is that no less than the White House itself has said that the government can accomplish its goals without bulk telephone records collection. This has been confirmed by the President’s two hand-picked panels as well as several Congressmembers who have seen the intelligence information. As we point out in our reply brief, the best the government can say about the program is that it “enhances and expedites” certain techniques it uses in its investigations. So getting a warrant isn’t impracticable, it’s just, at most, inconvenient. But as we point out: “If efficiency alone were determinative, the Fourth Amendment’s warrant requirement would have no force at all.”
The special-needs argument is especially concerning because if the courts were to accept it, the special-needs doctrine could become an exception that swallows the Fourth Amendment’s rule against general searches. It could, de facto, create a national security exception to the Constitutional rights enjoyed by ordinary, nonsuspect Americans, something the founders plainly did not do when they created this country in the midst of a national security crisis.
We expect an interesting argument on December 8.
High-Level NSA Official Tied To Husband’s Private Signals Intelligence Business, Has A Second Business That Owns A Plane
Buzzfeed’s Aram Roston has uncovered more evidence linking the NSA’s SIGINT (signals intelligence) director to a number of private contractors known to do business with the US government — perhaps even the agency itself.
Roston previously exposed the close ties between Teresa Shea’s position and her husband James’ employer, DRS Signal Solutions, a company focused on “SIGINT systems.” Not only that, but business records indicated that James Shea apparently runs Telic Networks, another SIGINT-focused business operating out of their hometown (Ellicott City, Maryland).
Needless to say, neither Teresa Shea, her husband, her husband’s employer, nor the NSA itself have offered anything in the way of comments on this suspicious-looking arrangement. The NSA did offer some boilerplate about “robust internal controls,” but simultaneously stiff-armed Buzzfeed’s request for Teresa Shea’s financial disclosure statements, citing the National Security Act of 1959. (This citation is also agency boilerplate, or at least was until Jason Leopold challenged it with a lawsuit. This move forced former NSA head Keith Alexander’s financial disclosure statements out of its hands. In light of this recent decision, it appears Shea’s statements will be released as well.)
This all looked conflicted enough, but Roston has uncovered more suspicious-looking information.
Yet another company, apparently focused on the office and electronics business, is based at the Shea residence on that well-tended lot.
This company is called Oplnet LLC.
Teresa Shea, who has been at the NSA since 1984, is the company’s resident agent.
The company’s articles of organization, signed by Teresa Shea, show that the firm was established in 1999 primarily “to buy, sell, rent and lease office and electronic equipment and related goods and services.” An attorney who also signed the document, Alan Engel, said he couldn’t comment on client matters.
Roston and Buzzfeed were unable to come up with any hard evidence linking Teresa Shea’s home business with federal contracts, but it did uncover a very interesting purchase.
Records show Oplnet does own a six-seat airplane, as well a condominium property with an assessed value of $275,000 in the resort town of Hilton Head, South Carolina.
Flight records for this aircraft show it has made a majority of its landings at three airports — one of them being Ft. Meade, Maryland, home of the NSA. It is not uncommon for people who own their own planes to actually set up a company to own that plane for a variety of legal and tax reasons — and it’s possible that’s what’s happened here — though it is notable that James Shea has a pilot’s license, while Teresa does not.
Perhaps it’s indicative of nothing at all, other than the overwhelming gravitational pull of the Beltway. But then, there’s this timeline.
1984 – Teresa Shea joins the NSA as an engineer working in SIGINT issues.
1990 – James Shea sets up Sigtek, Inc., which goes on to receive “hundreds of thousands of dollars in contracts with the federal government, according to a federal contracting database.”
1999 – Teresa Shea registers Oplnet, using their home address.
2000 – James Shea sells Sigtek, Inc. for $20 million to a British firm, while remaining listed as President of the company.
2007 – James Shea sets up Telic Networks, his newest SIGINT-focused company. This too is “based” at the Sheas’ shared home address.
2010 – Teresa Shea is promoted to Director of SIGINT. Nearly simultaneously, James Shea is named vice president of major SIGINT contractor DRS Signal Solutions.
Much of the Sheas’ shared success hinges on SIGINT — both the government’s expansion of dragnet surveillance and simultaneous growth of SIGINT-focused contractors. Maybe there’s nothing to this, but the silence from everyone involved seems to indicate there’s at least the “appearance of impropriety,” if not flat-out misconduct and abuse of power.
More will be known when (and always appended when dealing with the NSA, if ) Shea’s financial disclosure documents are released. At the very least, they’ll at least confirm the information Buzzfeed has dug up and prevent the NSA from boilerplating this whole situation into non-existence. The NSA is taking a second look at Keith Alexander’s post-NSA activities. If it’s willing to go that far, it’s willing to dig up dirt on lower-level officials. You can’t be too careful in the intelligence business these days, not with the eyes of legislators, activists and a whole bunch of pissed-off Americans watching your every move.
The US routinely shares private information about its citizens of Arab and Palestinian descent with Israel, the New York Times revealed yesterday.
In an Op-Ed in the newspaper, James Bamford said that the former National Security Agency (NSA) contractor Edward Snowden told him that the US “routinely passed private, unedited communications to Israel”.
Documents leaked by Snowden reveal that the US passes on “unevaluated and unminimised transcripts, gists, facsimiles, telex, voice and Digital Network Intelligence metadata and content,” to Unit 8200, an elite Israeli intelligence department.
He said the intercepts included communications of Arab and Palestinian-Americans, whose relatives in Israel and the Palestinian territories could become targets based on the information.
Whistleblower Snowden said this is ”one of the biggest abuses we’ve seen”, Bamford reported.
Bamford cited a memorandum of understanding between the NSA and Unit 8200 outlining transfers that have occurred since 2009.
Snowden, a former NSA contractor, is wanted by the US on espionage charges after leaking thousands of secret NSA documents.
He claimed asylum in Russia, where he has been granted a three-year residency that allows him to travel abroad.
Global Information Society Watch | September 2014
Years before Edward Snowden leaked his first document, human rights lawyers and activists have been concerned about a dramatic expansion in law enforcement and foreign intelligence agencies’ efforts to spy on the digital world. It had become evident that legal protections had not kept pace with technological – that the state’s practical ability to spy on the world had developed in a way that permitted it to bypass the functional limits that have historically checked its ability to spy. These concerns culminated in the International Principles on the Application of Human Rights to Communications Surveillance, a set of principles intended to guide policymakers, activists and judges to better understand how new surveillance technologies have been eating away at our fundamental freedoms and how we might bring state spying back in line with human rights standards.
Over a year and a half in the making, the final version of the Principles appeared on July 20, 2013, the first weeks of what we might call the Snowden era. An updated version was issued in May 2014. The Snowden revelations, once they started rolling in, affirmed the worst of our concerns. Intelligence services as well as law enforcement had taken it upon themselves to spy on us all, with little consideration for the societal effects. Lawmakers and even the executive had little comprehension of the capabilities of their own spymasters, and how our digital networks were being turned against all individuals everywhere. The need for the Principles was confirmed in spades, but the long and difficult job of applying them to existing practices was just beginning.
Since then, the Principles have, we hope, been a lodestar for those seeking solutions to the stark reality exposed by Snowden: that, slipping through the cracks of technological developments and outdated legal protections, our governments have adopted practices of mass surveillance that render many of our most fundamental rights effectively meaningless. The Principles have been signed by over 470 organizations and individual experts, by over 350,000 individuals throughout the world, and endorsed by the United Kingdom’s Liberal Democratic Conference, as well as European, Canadian, and German parliamentarians.The Principles have played a central guiding role in a number of the rigorous debates on the need to limit states’ increasingly expansive surveillance capacities. Their impact is already evident in, for example, the United States’ President Review Group on Intelligence and Communications Technologies report, the Inter-American Commission on Human Rights report and the the United Nations High Commissioner for Human Rights’ recent report on the right to privacy in the digital age. Their influence has also manifested in some of the administrative, legislative and administrative attempts to address surveillance problems post-Snowden. Perhaps most importantly, they have functioned as a rallying point for campaigning and advocacy initiatives around the world.
Below, we spell out some of the key features of the Principles. A more detailed explanation of the legal grounding for our conclusions in human rights jurisprudence can be found in a Legal Analysis and Background Materials document generated in support of the Principles.
Core Definitions in International Human Rights Law
The Principles begin with defining two core concepts that spell out the “what” and the “how” of measured surveillance. The first concept focuses on the type of data to be protected, while the second one ensures that a broad range of surveillance activity constitutes an interference with privacy rights. Outdated definitions of these two terms have led to expansive surveillance practices, as wide swaths of sensitive data or surveillance activities have been deemed outside the scope of legal protections. These definitional changes are designed to re-focus privacy protections away from artificial examinations of the kind of data or method of interference, and back on the ultimate effect on the privacy of the individual.
The Principles make clear that it’s time to move beyond the fallacy that information about communications does not pose as serious a threat to privacy as the content of communications. Information about communications, also called metadata, subscriber information or non-content data, can include the location of your cell phone, clickstream data, search logs, or anonymous online activity. Individually, these can be just as invasive as reading your email or listening to your phone calls. When combined and analyzed en masse, the picture painted by such data points can be far more revealing than the content of the communications they accompany. In spite of this reality, pre-Internet age (in fact, postal service-based!) legal conceptions have persisted in some legal systems, offering less or, in some instances, no protection at all to information that is not classified as ‘content’. What is important is not the kind of data is collected, but its effect on the privacy of the individual.
As explained in Legal Analysis and Background Materials which have been prepared for the Principles:
“The Principles use the term “protected information” to refer to information (including data) that ought to be fully and robustly protected, even if the information is not currently protected by law, is only partially protected by law, or is accorded lower levels of protection. The intention, however, is not to make a new category that itself will grow stale over time, but rather to ensure that the focus is and remains the capability of the information, alone or when combined with other information, to reveal private facts about a person or her correspondents. As such, the Principles adopt a singular and all-encompassing definition that includes any information relating to a person’s communications that is not readily available to the general public.”
This concern has been addressed by the latest report of the Office of the High Commissioner for Human Rights, who made clear that:
“From the perspective of the right to privacy, this distinction between [content and metadata] is not persuasive. The aggregation of information commonly referred to as “metadata” may give an insight into an individual’s behaviour, social relationships, private preferences and identity that go beyond even that conveyed by accessing the content of a private communication.”
Given the revealing nature of metadata and content alike, states should be restrained from unchecked interference with any protected information: from revealing a speaker’s identity if it is not public; from wantonly vacuuming up the websites or social media one has visited; from stockpiling information on all the people one has communicated with; and tracking the ‘when’, ‘from where’, and ‘for how long’ of all our digital activities. In the pre-Internet age, the much more limited amount and kind of “metadata” available to law enforcement was treated as less sensitive than content, but given current communications surveillance capabilities, this can no longer be the case.
Communication Surveillance: Much of the expansive state surveillance practices confirmed during the past year depend on confusion over whether actual “surveillance” has occurred and thus whether human rights obligations even apply. Some have suggested that if information is merely collected and kept but not looked at by humans, no privacy invasion has occurred. Others argue that computers analysing all communications in real-time for key words and other selectors does not amount to “surveillance” for purposes of triggering legal privacy protections. Still others seek to reduce privacy protections to ‘harmful uses’ of information. Such legal variations can mean the difference between reasonable and carefully targeted investigations and a surveillance state built on the continuous mass surveillance of everyone.
In the digital age, where the most sensitive portions of our lives are constantly communicated over digital networks, it has never been more important to ensure the integrity of our communications. It means little whether the interference takes the form of real-time monitoring of Internet transmission, hacking into individuals’ mobile devices, or mass harvesting of stored data from third party providers. The mere recording of Internet transactions – even if ultimately unviewed – can have serious chilling effects on the use of our most vital interactive medium. We have to ensure that all acts of communications surveillance are within the scope of human rights protections and, hence, are “necessary and proportionate”.
On this front, the Office of the High Commissioner for Human Rights (OHCHR) report, made clear that:
“any capture of communications data is potentially an interference with privacy and, further, that the collection and retention of communications data amounts to an interference with privacy whether or not those data are subsequently consulted or used. Even the mere possibility of communications information being captured creates an interference with privacy, with a potential chilling effect on rights, including those to free expression and association.”
To remedy this issue, the Principles define “communications surveillance” as encompassing the monitoring, interception, collection, analysis, use, preservation and retention of, interference with, or access to information that includes, reflects, or arises from or a person’s communications in the past, present or future.
Scope of Application
The Principles also address a long-standing problem arising from narrow interpretations adopted by some states regarding the extraterritorial application of their human rights obligations. Some have argued that the obligation to respect privacy and other human rights of individuals effectively stops at their national borders. In a world of highly integrated digital networks, where individual interactions and data routes defy any semblance of territorial correspondence, such distinctions are meaningless. The Principles therefore apply to surveillance conducted within a state or extraterritorially, and regardless of the purpose for the surveillance – including enforcing law, protecting national security, gathering intelligence, or another governmental function.
The OHCHR’s report explicitly underscores the principle of non-discrimination:
“Article 26 of the International Covenant on Civil and Political Rights provides that all persons are equal before the law and are entitled without any discrimination to the equal protection of the law” and, further, that “in this respect, the law shall prohibit any discrimination and guarantee to all persons equal and effective protection against discrimination on any ground such as race, colour, sex, language, religion, political or other opinion, national or social origin, property, birth or other status.”
In this regard, the OHCHR’s report has underscored its importance:
“measures to ensure that any interference with the right to privacy complies with the principles of legality, proportionality and necessity regardless of the nationality or location of individuals whose communications are under direct surveillance.”
The 13 Principles
The substantive Principles are firmly rooted in well-established human rights law. Generally, any limits on human rights should be necessary, proportionate and for a set of permissible purposes. These limits must be set out in law, and cannot be arbitrary.
Under international human rights law, each right are divided in two parts. The first paragraph sets out the core of the right, while the second paragraph sets out the circumstances in which that right may be restricted or limited. This second paragraph is usually called the “permissible limitations” test.
Regarding the right to privacy, the UN Special Rapporteur on Counter-Terrorism and the UN Special Rapporteur on Freedom of Expression have stated that the “permissible limitations” test under Article 19 of the International Covenant on Civil and Political Rights among other articles are equally applicable to Article 17 of the International Covenant on Civil and Political Right
The OHCHR report has neatly summarized these obligations with respect ot Article 17 of the International Covenant on Civil and Political Rights (ICCPR), which prohibits the arbitrary or unlawful interference with privacy rights
“To begin with, any limitation to privacy rights reflected in article 17 must be provided for by law, and the law must be sufficiently accessible, clear and precise so that an individual may look to the law and ascertain who is authorized to conduct data surveillance and under what circumstances. The limitation must be necessary for reaching a legitimate aim, as well as in proportion to the aim and the least intrusive option available…Any limitation placed on the right (an interference with privacy, for example, for the purposes of protecting national security or the right to life of others) must be shown to have some chance of achieving that goal. The onus is on the authorities seeking to limit the right to show that the limitation is connected to a legitimate aim. Furthermore, any limitation to the right to privacy must not render the essence of the right meaningless and must be consistent with other human rights, including the prohibition of discrimination. Where the limitation does not meet these criteria, the limitation would be unlawful and/or the interference with the right to privacy would be arbitrary.”
Legality – No Secret Laws: The principle of legality is a fundamental aspect of all international human rights instruments and the rule of law. It is a basic guarantee against the state’s arbitrary exercise of its powers. For this reason, any restriction on human rights must be prescribed by law. The meaning of “law” implies certain minimum qualitative requirements of clarity, accessibility, and predictability. Laws limiting human rights cannot be secret or vague enough to permit arbitrary interference.
On that front, the Office of the High Commissioner on Human Rights made clear that:
“To begin with, any limitation to privacy rights reflected in article 17 must be provided for by law, and the law must be sufficiently accessible, clear and precise so that an individual may look to the law and ascertain who is authorized to conduct data surveillance and under what circumstances.”
The need to meaningfully and publicly explain rights-infringing practices—while important in all contexts—is key to any effective check on communications surveillance as such practices tend to be surreptitious and difficult to uncover. Given the highly technical and rapidly evolving nature of communications surveillance, it is also incumbent that laws are interpreted publicly and not through secret processes effectively free from public scrutiny. The state must not adopt or implement a surveillance practice without public law defining its limits. Moreover, the law must meet a standard of clarity and precision that is sufficient to ensure that individuals have advance notice of, and can foresee, its application. When citizens are unaware of a law, its interpretation, or the scope of its application, it is effectively secret. A secret law is not a legal limit on human rights.
In her landmark report Pillay made clear that:
“Secret rules and secret interpretations even secret judicial interpretations of law do not have the necessary qualities of “law”. Neither do laws or rules that give the executive authorities, such as security and intelligence services, excessive discretion; the scope and manner of exercise of authoritative discretion granted must be indicated (in the law itself, or in binding, published guidelines) with reasonable clarity. A law that is accessible, but that does not have foreseeable effects, will not be adequate. The secret nature of specific surveillance powers brings with it a greater risk of arbitrary exercise of discretion which, in turn, demands greater precision in the rule governing the exercise of discretion, and additional oversight.”
Laws should only permit communications surveillance by specified State authorities to achieve a Legitimate Aim that corresponds to a predominantly important legal interest that is necessary in a democratic society.
Under international human rights law, any restriction on our fundamental freedoms must generally pursue a permissible purpose or “legitimate aim.” These purposes or aims are often enumerated within the Article itself. The Principles therefore require that communications surveillance only be undertaken in pursuit of a predominantly important legal interest. Such interests have been described by Germany’s highest court as “the life, limb and freedom of the individual or such interests of the public a threat to which affects the basis or continued existence of the state or the basis of human existence.”
Regarding the right to privacy, the UN Special Rapporteur on Counter-Terrorism and the UN Special Rapporteur on Freedom of Expression have stated that the “permissible limitations” test under Article 19 of the International Covenant on Civil and Political Rights among other articles are equally applicable to Article 17 of the International Covenant on Civil and Political Rights, which prohibits arbitrary interference with the right to privacy.
The Office of the High Commissioner on Human Rights has similarly affirmed, in its 2014 Report, that “any limitation to privacy rights reflected in article 17 must be necessary for reaching a legitimate aim”. The Report elaborates:
“Surveillance on the grounds of national security or for the prevention of terrorism or other crime may be a “legitimate aim” for purposes of an assessment from the viewpoint of article 17 of the Covenant. The degree of interference must, however, be assessed against the necessity of the measure to achieve that aim and the actual benefit it yields towards such a purpose.”
Finally, communications surveillance cannot be employed in a manner that discriminates on the basis of grounds such as race, colour, sex, language religion or national origin, as such discrimination constitutes an illegitimate purpose.
Necessity, Adequacy and Proportionality
International human rights law makes clear that any interference with our fundamental freedoms must be “necessary in a democratic society”. In its General Comments No. 27, the Human Rights Committee clearly indicates that it is not sufficient that such restrictions serve a legitimate aim, they must also be necessary to it. Restrictive measures must also be adequate or appropriate to achieving their protective function. They must also be the least intrusive options amongst those which might be expected to achieve the desired result, and they must be proportionate to the interest to be protected. Finally, any restrictive measure which undermines the essence or core of a right is inherently disproportionate and a violation of that right.
Applying these foundational principles to the context of communications surveillance, the Principles affirm that:
Necessity: Often, a surveillance objective might be achieved using far less intrusive mechanisms. While it is by no means necessary to exhaust other options, it should be recognized the communications surveillance is inherently invasive and should not be a tool of first recourse.
Adequacy: It is not sufficient to show that a given surveillance practice is necessary for achieving a given objective, it must also be adequate and appropriate to it. As noted by the High Commissioner, at minimum, communications surveillance which interferes with privacy “must be shown to have some chance of achieving [its] goal.”
Proportionality: Communications surveillance should be regarded as a highly intrusive act that interferes with human rights and poses a threat to the foundations of a democratic society. Communications surveillance for investigative purposes, in particular, should only occur once the state has convinced an objective third party – a judge – that a serious threat to a legitimate interest exists and that the communications mechanism in question will yield information that will assist with that serious threat.
No voluntary cooperation:
Current digital networks and interactions entrust vast amounts of personal and sensitive data in the hands of a wide range of third party intermediaries, including ISPs, email providers, hosting companies and others. Through their discretionary decisions to comply (or not) with state surveillance requests, these intermediaries can dramatically impact on the privacy rights of all. Such voluntary sharing bypasses due process and poses a serious threat to the rule of law. The Necessary and Proportionate principles therefore prohibit any state communications surveillance activities in the absence of judicial authorization.
Contrary to many official statements, the modern reality is that state intelligence agencies are involved in a much broader scope of activities than simply those related to national security or counterterrorism. The Necessary and Proportionate Principles state that communications surveillance (including the collection of information or any interference with access to our data) must be proportionate to the objective they are intended to address. And equally importantly, even where surveillance is justified by one agency for one purpose, the Principles prohibit the unrestricted reuse of this information by other agencies for other purposes.
The Office of the High Commissioner for Human Rights report also emphasized that point:
“The report explained that the absence of effective use limitations has been exacerbated since September 11, 2001, with the line between criminal justice and protection of national security blurring significantly. The resultant sharing of data between law enforcement agencies, intelligence bodies and other State organs risks violating Article 17 of the Covenant on Civil and Political Rights, because surveillance measures that may be necessary and proportionate for one legitimate aim may not be so for the purposes of another.”
Integrity of Communications And Systems:
No law should impose security holes in our technology in order to facilitate surveillance. Undermining the security of hundreds of millions of innocent people in order to ensure surveillance capabilities against the very few bad guys is both overbroad and short-sighted, not least because malicious actors can use these exploits as readily as state agents. The assumption underlying such provisions—that no communication can be truly secure—is inherently dangerous, akin to throwing out the baby with the bathwater. It must be rejected.
The Office of the High Commissioner for Human Rights report supports that conclusion, stating that:
“The enactment of statutory requirements for companies to make their networks “wiretap-ready” is a particular concern, not least because it creates an environment that facilitates sweeping surveillance measures.”
Notification And Right To An Effective Remedy
Notification must be the norm, not the exception. Individuals should be notified that access to their communications has been authorized with enough time and information to enable them to appeal the decision, except when doing so would endanger the investigation at issue. Individuals should also have access to the materials presented in support of the application for authorisation. The notification principle has become essential in fighting illegal or overreaching surveillance. Any delay in notification has to be based upon a showing to a court, and tied to an actual danger to the investigation at issue or harm to a person.
Before the internet, the police would knock on a suspect’s door, show their warrant, and provide the individual a reason for entering the suspect’s home. The person searched could watch the search occur and see whether the information gathered went beyond the scope of the warrant. Electronic surveillance, however, is much more surreptitious. Data can be intercepted or acquired directly from a third party such as Facebook or Twitter without the individual knowing. Therefore, it is often impossible to know that one has been under surveillance, unless the evidence leads to criminal charges. As a result the innocent are the least likely to discover their privacy has been invaded. Indeed, new technologies have even enabled covert remote searches of personal computers and other devices. Any delay in notification has to be based upon a showing to a court, and tied to an actual danger to the investigation at issue or harm to a person.
The OHCHR report lays out four characteristics that effective remedies for surveillance-related privacy violations must display:
“Effective remedies for violations of privacy through digital surveillance can thus come in a variety of judicial, legislative or administrative forms. Effective remedies typically share certain characteristics. First, those remedies must be known and accessible to anyone with an arguable claim that their rights have been violated. Notice (that either a general surveillance regime or specific surveillance measures are in place) and standing (to challenge such measures) thus become critical issues in determining access to effective remedy. States take different approaches to notification: while some require post facto notification of surveillance targets, once investigations have concluded, many regimes do not provide for notification. Some may also formally require such notification in criminal cases ; however , in practice , this structure appears to be regularly ignored.”
The 2014 OHCHR report continues, stressing the importance of a “prompt, thorough and impartial investigation”; a need for remedies to actually be “capable of ending ongoing violations”; and noting that “where human rights violations rise to the level of gross violations…as criminal prosecution will be required”.
Safeguards for International Cooperation:
Privacy protections must be consistent across borders at home and abroad. Governments should not bypass national privacy protections by relying on secretive informal data sharing agreements with foreign states or private international companies. Individuals should not be denied privacy rights simply because they live in another country from the one that is surveilling them. Where data is flowing across borders, the law of the jurisdiction with the greatest privacy protections should apply.
More to Be Done: The Necessary and Proportionate Principles provide a basic framework for governments to ensure the rule of law, oversight and safeguards. They also call for accountability, with penalties for unlawful access and strong and effective protections for whistleblowers. They are starting to serve as a model for reform around the world and we urge governments, companies, NGOs and activists to use them to structure necessary change.
But while the Principles are aimed at governments, government action isn’t the only way to combat surveillance overreach. All of the communications companies, Internet and telecommunications alike, can help by securing their networks and limiting the information they collect and retain. Online service providers should collect the minimum amount of information for the minimum time that is necessary to perform their operations, and to effectively obfuscate, aggregate and delete unneeded user information. This helps them in their compliance burdens as well: if they collect less data, there is less data to hand over to the government. Strong encryption should be adopted throughout the entire communications chain and, where possible, for data in storage.
It’s clear that under the cloak of secrecy, malfunctioning oversight and the limited reach of outdated laws, the practice of digital surveillance in countries from the far north to the far south, have overrun the bounds of human rights standards. We all hope to see activists around the world showing exactly where a country has crossed the line, and how its own policymakers and the international community might rein it back. We must call for surveillance reform to ensure that our national surveillance laws and practices comply with human rights standards and to ensure cross-border privacy are in place and effectively enforced. Working together, legal plus technical efforts like deploying encryption, decentralization of services and limiting information collected, can serve as a foundation for a new era of private and secure digital communications.
- International Principles on the Application of Human Rights to Communications Surveillance, updated July 2014 https://neccessaryandproportionate.org/text
- EFF, Article19: Legal Analysis and Background Materials: International Principles on the Application of Human Rights to Communications Surveillance, May 2014 https://en.necessaryandproportionate.org/LegalAnalysis
- The Right to Privacy in the Digital Agehttp://www.ohchr.org/EN/Issues/DigitalAge/Pages/DigitalAgeIndex.aspx
- Report of the High Commissioner for Human Rights on the right to privacy in the digital age
- Annual Report of the Inter-American Commission on Human Rights 2013. Annual Report of the Office of the Special Rapporteur for Freedom of Expression http://www.oas.org/en/iachr/expression/docs/reports/2014_04_22_%20IA_2013_ENG%20_FINALweb.pdf
- Human Rights Committee, General Comment 27, Freedom of movement (Art.12), U.N. Doc CCPR/C/21/Rev.1/Add.9 (1999).
- UN Special Rapporteur on the Promotion and Protection of Human Rights and Fundamental Freedoms While Countering Terrorism, A/HRC/13/37
- UN Special Rapporteur on the Promotion and Protection of the Right to Freedom of Opinion and Expression, A/HRC/23/40
IRS Claims Two Years Of Emails Were Destroyed In A ‘Computer Crash;’ Congressman Asks The NSA To Supply ‘Missing’ Email Metadata
The IRS is currently being investigated by Congress for some possibly politically-motivated “attention” it directed towards “Tea Party” and other conservative groups that operated as tax-exempt entities. Along the way, IRS official Lois Lerner, who was the first to publicly disclose the inappropriate targeting, was also one of the first government officials to plead the Fifth (twice) in government hearings.
The Congressional investigation demanded copies of Lois Lerner’s emails from the IRS. Some were turned over to the House Ways and Means Committee, but not everything it sought. Now, the IRS is telling the committee that it’s not going to get everything it asked for.
The IRS has told Congress that it lost more than two years’ worth of emails involving former IRS official Lois Lerner, due to a computer crash.
House Ways and Means Committee Chairman Dave Camp (R-Mich.) on Friday said it was “unacceptable” that he was just learning of this problem now, after a lengthy investigation into Lerner’s involvement in the IRS targeting scandal.
Camp points out that the IRS withheld these emails for over a year before suddenly “discovering” they were unavailable. The IRS says it can find everything Lerner sent to and received from other IRS employees but nothing containing correspondence with those outside the agency.
Obviously, this convenient “computer crash” has generated a lot of skepticism. For one thing, a “computer crash” doesn’t really have the power to destroy electronic communications. Email is almost always stored somewhere else other than the local user’s computer. And even if the IRS meant a “server crash” instead of a “computer crash,” any decent server system contains multiple levels of redundancy.
The Blaze sought input from Norman Cillo, a former Microsoft project manager, who presented six reasons why he believes the IRS is lying about its inability to recover these emails. Number one on the list seems to be the most applicable.
I believe the government uses Microsoft Exchange for their email servers. They have built-in exchange mail database redundancy. So, unless they did not follow Microsoft’s recommendations they are telling a falsehood.
The IRS’s own policies on email state that its employees use both Microsoft Outlook and Exchange, which means it should have some form of backup available.
Secure Messaging enrollment is an automated process for all LAN accounts with an Exchange mailbox in IRS. You can find the instructions for configuring the Outlook client to use the certificates at the Secure Enterprise Messaging Systems (SEMS) web site: http://documentation.sems.enterprise.irs.gov/.
According to Cillo, the only other explanation for the IRS’s inability to recover these emails is that the agency is “totally mismanaged and has the worst IT department ever.” Unfortunately, the government seems to have a lot of mismanaged and terrible IT departments, so this may be closer to the truth than anyone would really like to admit. Perhaps the general ineptitude of large government agencies is behind the Treasury Department’s policy that all email sent to or from IRS employees be “archived” via hard copy printouts.
If you create or receive email messages during the course of your daily work, you are responsible for ensuring that you manage them properly. The Treasury Department’s current email policy requires emails and attachments that meet the definition of a federal record be added to the organization’s files by printing them (including the essential transmission data) and filing them with related paper records. If transmission and receipt data are not printed by the email system, annotate the paper copy.
There’s more information here, citing the IRS’s own internal guidelines on tape backups, etc., that suggest further levels of redundancy, as well as the commissioner of the IRS testifying that the agency stores its emails on servers.
Critics believe the IRS has simply “vanished” the crucial emails in order to cut Lerner adrift and make it appear she acted alone. Any evidence that would tie outside government agencies (including the administration itself) into this situation has been deemed unrecoverable. Supposedly, there should be paper copies of the missing emails, but no one in Congress has requested these and the IRS certainly isn’t offering to look.
But one Congressman thinks he has a solution to the missing email dilemma. Steve Stockman (last seen here threatening to bring a defamation lawsuit against someone who uttered true facts about his criminal past) knows some people who have a whole lot of email data just laying around.
“I have asked NSA Director Rogers to send me all metadata his agency has collected on Lois Lerner’s email accounts for the period which the House sought records,” said Stockman. “The metadata will establish who Lerner contacted and when, which helps investigators determine the extent of illegal activity by the IRS.”
Yeah, let me know how that works out for you, Steve. The NSA can’t even confirm or deny its monthly water usage at its Utah data site, much less that it has metadata pertaining to Americans’ communications.
[Sidebar: I do really love the fact that this sort of thing is becoming increasingly common — the use of the NSA as the backup-of-last-resort for phone/email/internet communications data. If anyone claims it can’t find email X or phone record Y, someone’s going to say, “Hey, I’ll bet the NSA has a copy!” Hilarious. The NSA will never again be allowed to pretend it doesn’t harvest data on American citizens.]
The whole letter, which begins with some light ass-kissing of new NSA director Michael Rogers (“thank you for your 33 years of, and continued service to, our country...”) and closes with a bit of grandstanding, surreally asking “the Agency” to send all relevant metadata on the missing Lerner emails to “Donny@mail.house.gov.” All in all, probably one of the most incongruous demands the NSA has ever received, a letter which conjures up the image of a late-night meeting in an underground parking garage, with sunglassed NSA liaisons handing over a briefcase full of metadata to a 19-year-old intern dressed in his dad’s suit.
It’s pretty hard to shake the impression that this is a coverup. As always, the specter of pure ineptitude lurks in the background, as it often does when large bureaucracies tangle with technology. But until the IRS presents further evidence detailing how exactly these emails went missing, it’s safe to assume there’s been an active effort made to cover up government impropriety.
China’s Foreign Ministry Spokeswoman Hua Chunying
China has dismissed the recent allegation by the US that the Chinese military has been involved in hacking a US security firm, describing Washington’s approach on the issue as unconstructive.
A private US cyber security firm accused a unit of China’s military on Monday of hacking attempts to access information on US satellite and aerospace programs, Xinhua reported.
China’s Foreign Ministry Spokeswoman Hua Chunying rejected the allegation at a press briefing on Tuesday.
“I have noticed the report you mentioned, its wording and style looks familiar, citing the names of the hackers and their claims of their military identity,” she said, responding to a question about US reports alleging Chinese hacking attempts. “Have you ever seen thieves bearing a name tag saying ‘thieves?’” she said.
Washington had issued an indictment against five Chinese military officers on charges of cyber theft earlier on May 19.
The Chinese Foreign Ministry spokeswoman further challenged the integrity of the US allegations against her country, referring to the massive American espionage efforts across the globe as part of its PRISM program under the US National Security Agency (NSA).
The program, which was revealed by former NSA contract employee Edward Snowden in 2013, showed that the US was spying on the phone and email communications of top world leaders, including those of Washington’s allied countries as well as China.
“The US is a hacking empire,” Hua said. “It is not constructive for the US to attack others instead of repenting and correcting its own mistakes.”
The Chinese official further pointed out that cyber attacks are a global challenge – transnational and anonymous in nature – requiring cooperation among all countries to be countered.
The German government has been trying to avoid upsetting either the US by denouncing the large-scale surveillance being carried out by the NSA in its country, or the German people by not denouncing it. It finds itself in the same quandary as regards opening a formal investigation into the spying, which is probably why it has held off for so long. But now, the German authorities have come up with a sort of compromise, as GigaOM reports:
Germany’s federal prosecutor has launched the country’s first formal investigation into the activities of the NSA in Germany, specifically the U.S. intelligence agency’s reported bugging of Chancellor Angela Merkel’s mobile phone.
Harald Range said on Wednesday that the other potential avenue of investigation — that of the surveillance of the German people — remained open, though no investigation was being launched yet due to a lack of evidence.
Leaving aside the question just how much evidence the federal prosecutor needs before he investigates whether the German people have been subjected to US surveillance — a signed confession from President Obama perhaps? — the other issue here is the astonishing lack of sensitivity this move displays. The German government seems to be saying that spying is outrageous and must be investigated immediately if it’s directed against the powerful; but if it’s against the little people, then, well, sorry: we need more evidence before we could possibly risk upsetting the US.
A federal judge who ordered the National Security Agency to retain all records of its secret telephone surveillance related to an ongoing case has reversed the order – just a day after it was issued.
“In order to protect national security programs, I cannot issue a ruling at this time. The Court rescinds the June 5 order,” US District Judge Jeffrey White said from the bench on Friday.
The NSA had been prohibited from destroying any of its records of communications surveillance on Thursday – specifically under the government’s Section 702 program.
Section 702 of the Foreign Intelligence Surveillance Act (FISA) has been used by the NSA to justify widespread collection of phone calls and emails.
White first ordered that the agency retain records in March, to which the NSA responded that it was legally obliged to destroy all documents after a five year period.
White issued the temporary restraining order (TRO) in March to prevent the destruction of evidence. However, on Thursday, EFF filed an emergency motion, stating that in the past week interactions with government lawyers demonstrated that the destruction of records had continued.
Records could form a basis of evidence for two pending lawsuits posing a challenge to the surveillance program. One was filed by AT&T customers and the other by 23 Californian organizations.
The case – Jewel v. NSA the Electronic Frontier Foundation (EFF) sued the NSA and other government agencies on behalf of AT&T customers.
The Friday hearing saw lawyers from the Electronic Frontier Foundation (EFF) going up against lawyers from the Department of Justice.
The case has stagnated in the court system for several years. In 2008, the original complaint was filed against AT&T and the government, which it was alleged, was involved in “illegal and unconstitutional program of dragnet communications surveillance conducted by the National Security Agency and other Defendants in concert with major telecommunications companies.”
Evidence pre-dated Snowden’s revelations in June 2013, and was based on evidence from former San Francisco AT&T technician Mark Klein in 2006.
“I don’t want the preservation effects to get in the way of national security, but I don’t want national security to checkmate our case,” Cindy Cohn, an EFF attorney, told the court, reported arstechnica.
Justice department lawyers sought a stay. They argued that phone records and internet programs were separate. Section 702 allows the government access to emails and Facebook messages. The lawyers said that their compliance would put the program at risk.