Live data from Hacker News

XKeyscore: NSA program collects 'nearly everything a user does on the internet'

theguardian.com

151–160 of 641 posts

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#151
post #120

I am going to be obliterated for this comment! Does the fact they've caught 300 terrorists in anyway justify what they're doing? I am not saying it does, I just wondered what people's thoughts were (although I can guess!). It's interesting that it was included in the article in an attempt to give it some 'balance'..

no.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#152

Honest, maybe naive question, but what types of programmers actively help build and maintain systems like this? I turned down a job for a company that is less than a mile from my house because I viewed their business as immoral. Hard for me to fathom anyone taking a job, helping to build systems like this. I get that many of the components of a system like this could be seen as harmless. However, a system of this com…

I guess some people are in it for the money. Some probably like the technical challenge. But I'm sure there are also quite a few that believe this system really is preventing terrorism, following the law, and not doing anything wrong.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#153

Um... surely this has to be a spoof. "Select foreignness factor"?? really? The user interface and way this is done just seems to amateur hour to believe this is actually true

The numbers seem way off and too keystone cop to be true. 20 terabytes is not large for the NSA. It can search BCC?? Only the sender has them. so everything would have to be collected at each ISP (which isn't impossible).. but I think the guardian has been trolled.

If you're using Gmail then Google sends your email, so Google knows your BCC lines.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#154
I realize that it isn't morally right, but I think such data storage is inevitable. With the rise of instant communications, the amounts of data people generate are massive, and old school law enforcement can't keep up. Thus with the increase in technology, there's going to be an increase in counter-technology.

I guess what we need to ask ourselves now is whether we want any secrets at all. A true Panopticon -- a society where everyone could see what everyone else was doing -- might bring a "freedom" from certain types of subterfuge, and attack.

Then again, I don't want to live in it.

That leads us to the question of how we handle the flood of data when looking for hostile activity, because governments are certain to use available technology to trap, parse and search that flood.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#155

Earlier quoted context omitted.

This presentation is from 2008. According to the presentation on PRISM Facebook joined the program on 3 June 2009. That would indicate that the searches here are based, most likely, not on participation by Facebook but by passive sniffing of HTTP traffic and then session reconstruction.

In 2008 Facebook ran on HTTP, so back then it would have been easy to sniff this data. I believe Gmail also transferred in plain text back then. When those companies switched to HTTPS, the NSA likely 'leverage some pressure' to get them to join PRISM, which puts the data back in this system.

You've got your timeline wrong. Facebook didn't support HTTPS for anything but user login until 2011.

[0] https://www.facebook.com/blog/blog.php?post=486790652130

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#156

I am curious: Suppose this is true and NSA analysts have the technical capability to access enormous amount of information with no authorization. But if they do do that, agains the law and the rules and their actions are recorded in the system, they could face penalties no? I mean I could kill someone with a hammer technically, that doesn't make hammer bad per se, does it ?

It says can be audited. I suspect the number of times that has been done is vanishingly small, perhaps only on Snowden, after his revelations :) It smells to me like plausible deniability. Claim you have set up a system where things can be audited, don't ever answer how frequently it is done or what the penalty is for abuse of the system. Top secret and all. This kind of system really should freak people out. I imagine it would be a great blackmail info system if people start speaking against the govt or "causing problems". I can imagine public figures don't want to be publicly shamed for their online activities, gambling, porn, affairs, etc...

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#157
Is this information the NSA could've attained left to their own devices, or is this sort of stuff only accessible with help from service providers, eg Facebook and Google?

What I'm trying to ask is: with all the hullabaloo Google, Facebook, Yahoo, Microsoft, etc have made about individual, manual reviews of information requests, are we still being lied to? I suspect that we obviously haven't been told the whole story by these companies, and that they are a lot more implicit in this than they let on, but this article seems almost like definitive proof that they did indeed allow unlimited access to user information.

If this is saying what I think it's saying, then I feel seriously back stabbed by the startup darlings -- Zuckerberg, Brin and Page, etc -- that so many people here love and idolize. They should absolutely be held accountable.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#158
post #12

This is brilliant, I love the screenshots: Foreignness factor: The person has stated that he is located outside the U.S. Human intelligence source indicates person is located outside the U.s. The person is a user of storage media seized outside the U.s. Foreign govt indicates that the person is located outside the U.s. Phone number country code indicates the person is located outside the U.s. Phone number is register…

[deleted]

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#159
post #116

Earlier quoted context omitted.

The person is a user of storage media seized outside the U.s. Interesting, so everyone who ever hit a MegaUpload link is potentially a foreign entity?

Kind of puts into perspective why they would coordinate such a massive raid on Megaupload. The target may not have even been the data - merely seizing the data puts anybody who has accessed the megaupload website as an easy target.

@netrus - I am not even sure where the tinfoil line is anymore.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#160
post #17

Interesting; it appears someone failed to redact some data from the slides. In the Facebook chat example, the message is "to" 1536051595. Using the Facebook Graph API, we can gather information based on this ID: http://graph.facebook.com/1536051595 Which leads us to the Facebook profile ( https://www.facebook.com/arash.gorjipour.5 ) of an individual, real or contrived, named "Arash Gorjipour". His email address and p…

Probably picked at random. The screenshot 'test case' could have been you. We are all in the database after all.

Of course, it would have been more amusing had the 'selector' been chosen as 'Barack Hussein Obama II'.
Post reply on HN