Live data from Hacker News

The NSA: An Inside View

lorensr.me

301–310 of 323 posts

Re: The NSA: An Inside View

#301
post #70

Earlier quoted context omitted.

What's particularly interesting is that some of the recent disclosures don't seem to be visible inside the bubble. Take this assertion, for instance: "The NSA copy of my emails won't be viewed by police or FBI investigating me about marijuana use, for instance. Law enforcement might get a search warrant and retrieve a copy from Google, but not from the NSA." In fact, it's been known for months that the DEA receives i…

What's the legal term? I think it's "double construction"? Where the prosecution knows it's you from illegal means (wiretap/NSA spying) but by that knowledge can go back and construct the legal case in reverse. It's been rumored that Dread Pirate Of SilkRoad case was figured out that way.

> What's the legal term? I think it's "double construction"? Where the prosecution knows it's you from illegal means (wiretap/NSA spying) but by that knowledge can go back and construct the legal case in reverse.

I think the technical term is either "perjury" or "fraud on the court".

The euphemism, though, is "parallel construction".

Re: The NSA: An Inside View

#302
post #70

Earlier quoted context omitted.

What's particularly interesting is that some of the recent disclosures don't seem to be visible inside the bubble. Take this assertion, for instance: "The NSA copy of my emails won't be viewed by police or FBI investigating me about marijuana use, for instance. Law enforcement might get a search warrant and retrieve a copy from Google, but not from the NSA." In fact, it's been known for months that the DEA receives i…

What's the legal term? I think it's "double construction"? Where the prosecution knows it's you from illegal means (wiretap/NSA spying) but by that knowledge can go back and construct the legal case in reverse. It's been rumored that Dread Pirate Of SilkRoad case was figured out that way.

It is not necessarily illegal means, but simply means that the government do not want to expose in open court. Perhaps this is because they are illegal, or perhaps revealing the source of intelligence could compromise an active intelligence operation. The NSA does not want its methods exposed in open court. You will probably say that this is because they are illegal. But an equally plausible explanation is that revealing details of their capabilities is of benefit to their adversaries.

Re: The NSA: An Inside View

#303
post #296
post #289

Earlier quoted context omitted.

Folks have lost clearances and jobs. I don't know about prison time. But I do know the fear of these things happening is a motivating factor not to cross the line. But I'm just some guy...

The problem here is that you trust the organization to police itself, whereas it has little incentive to actually do so effectively. The cases of caught individuals seem to have gone under-punished, as they sound worthy of prison time. Also, even if the NSA polices against personal abuses, why would it police against systematic abuse for government's purposes against the constitution? Self-policing does not work well…

I'm not saying I trust it to police itself. I'm trying to suggest that the environment in which NSA analysts work does have a (positive) material effect on their behavior. Non-systemic transgressions are not common. When Snowden said he was able to check Obama's email, that angle was lost.

Now, systemic problems are a different issue. But the article we're all talking about here is written by an analyst from his own perspective.

Re: The NSA: An Inside View

#304
post #223

Earlier quoted context omitted.

Did this PR drone hack HN to plant his comment [1] from "745 days ago" too? [1] https://news.ycombinator.com/item?id=3296691

Yes, because the government would NEVER plant agents in various online forums to further their own agenda..... /s While I would guess this is probably not the case here I would caution against making it seem so ludacris....

Did the government somehow manage to predict 746 days ago that they would need to have a PR flackey describing the workday of an NSA analyst to clean up for Snowden? I mean, that's some pretty special prognostication, right there.

Re: The NSA: An Inside View

#305
post #298
post #178

Earlier quoted context omitted.

What in the Fourth Amendment speaks to electronic communications? The Fourth Amendment speaks to a person, their home, and their effects. Even things like postal mail do not technically fall under the Fourth Amendment. Rather, they fall under separately-passed Congressional law, and USPS regulations. For instance, did you know that the addressee of a letter may authorize the USPS to open the letter in a sorting facil…

@"What in the Fourth Amendment speaks to electronic communications? The Fourth Amendment speaks to a person, their home, and their effects." The Fourth Amendment also protects people's papers from warrantless search and the Crown's abuse of the privacy of papers when executing its "general warrants" were a huge driver in the adoption of that Amendment. Private electronic communications are "papers" in that context, a…

> Private electronic communications are "papers" in that context, a "gift" of a paper from one to another.

Except that would tend to imply that the 1s/0s of a digital communication can in some way represent a physical property of some sort which can warrant legal protection. Normally that viewpoint is completely abrogated by hacktivists since it leads inevitably to DRM and other IP-backed shenanigans.

On the contrary, the "paper" is duplicated and transmitted over third-party infrastructure, and normally to a third-party provider and then from there the "paper" still sitting in the user's computer RAM is finally forgotten by the software or saved to disk as a backup. But the copy sent to Google or FB or the ISP or whoever belongs completely to them, "gifted" or not. While the "intellectual property" and copyright will belong to the user, the "bits" belong to Google or FB or the ISP and so lose Fourth Amendment protection.

And it's better this way! The idea that one can exponentially and magically propagate property on hard disks around the world is almost laughably impossible. My point instead is that whatever protections are required for our electronic communications (either stored or in-flight) need to derive from positive statute law, not by people arguing the nuances of a Constitutional Amendment written while the "discoverer of electricity" still breathed! This is especially true since the interpretation of the Fourth Amendment which somehow corrals the government into getting the intended effect will necessarily require the invention of legal principles which will go against us in the future.

> But more importantly, the question you ask is phrased too narrowly in context. The First Amendment protects the right to communicate privately, free from government scrutiny. And the Fifth Amendment forbids the government from taking private property without due process and just compensation.

The First Amendment gives no such privacy right. Simply stated, your speech itself is protected, not your ability to privately communicate. There is a privacy right inherent in being able to associate (without the advocacy group being forced to make public its membership list), just like there's an privacy right in being able to petition anonymously. But there's no general right to privacy in the First Amendment and I'm surprised you'd make that error with a J.D. If anywhere there's a "right to privacy" against searches of this nature, it is in the Fourth Amendment (consider Katz v. United States, as modified by Smith v. Maryland).

But I'm even more worried by your reading of the Fifth Amendment. Your talk of "government taking private property" by copying 1/0s (not even on the wire necessarily, but even through things like PRISM) is EXACTLY what we've been fighting against with private companies.

A person may have signed an agreement with Google that gives Google the right to make copies of their email for delivery, but each ISP along that route signed no such thing. Are they all liable for transient IP theft then? Should a hacker copy that email unknowingly while cracking an ISP system, should they be charged for Copyright Act violations in addition to CFAA violations?

> Roll all three of those amendments together and you should begin to comprehend that Congress, in establishing criminal penalties for interception of the U.S. mail --- a topic you curiously omitted --- stood on very firm constitutional ground when it did so.

I mentioned it elsewhere, but that wasn't the topic anyways. But even there you've messed up the Constitutional principles. The reason Congress has power to regulate USPS has underpinnings entirely different from any of those 3 Amendments.

For starters, Congress has the power to regulate USPS by 2 specific clauses in Art. I, Section 8, detailing that Congress has the specific power to: "

- establish Post Offices and post Roads;, and - To make all Laws which shall be necessary and proper for carrying into Execution the foregoing Powers..."

In other words, Congress was specifically granted the power to setup the postal system of the U.S., subject to its other Constitutional constraints. So should Congress choose to further constraint the government as regards the postal service that is always their right. Congress must be at least as restrictive on the Government as the Bill of Rights demands, but they can choose to be more restrictive on their own.

But additionally, even if we weren't talking about the USPS, Congress has the right to regulate the Government in any fashion it wishes (again assuming it stays within the boundaries laid out by the Constitution) because of this clause from the same section:

"... To make Rules for the Government and Regulation of the land and naval Forces".

In fact it's only because of this positive direction from the Constitution that Congress is able to regulate, as the Tenth Amendment quite clearly states that any powers not specifically enumerated as belonging to the federal government are reserved to the states, and to the people.

> Your notion that U.S. mail is protected only by federal statute simply blinks past the fact that our federal government is a government of only limited powers, allowed only to do what is permitted by the Constitution, with all other powers and rights reserved to the States and the People; i.e., a "mail" law can not lawfully exist without Constitutional authorization for Congress to enact such a law.

Holy shit, now we agree again, will wonders never cease. But now you're inconsistent with yourself, which I'll leave you to correct however you choose.

> Also missing from your U.S. mail analogy is any analysis of a basis for believing that eMail should have any less protection than the U.S. mail. It is a criminal act for a government official on their own decision to open a letter to read the contents except in narrow common sense situations, such as a letter that is missing or has an invalid address. Why should eMail have any less protection?

I never once claimed that email should have no protection. All I've ever claimed is that it's not magically inherent in the Fourth Amendment, which speaks (on the whole) to private property and "a man's home is his castle", but not to what happens once you tell a third-party (especially a disinterested/neutral third-party) your little secret. If it were otherwise Congress would not have had to pass laws making it a crime for a government agent to open mail, engage in landline wiretaps, intercept electronic communications unless for foreign surveillance, etc. etc. etc.

> Paul E. Merrell, J.D.

Oh look, an AUTHORITY... should I link in all the opinions I find congruent to my viewpoint from a "real" J.D. or is it possible that your interpretation of the Constitution and the law is not binding simply because you and your J.D. say so?

Re: The NSA: An Inside View

#306
post #207

Earlier quoted context omitted.

> If someone in the NSA abuses his powers, it is very likely that nobody will ever know. But this claim is only a concern if an analyst can unilaterally abuse his power and never be caught. Are you saying this type of surveillance capability would then be acceptable if proper accountability and oversight safeguards can be emplaced? If anything this should be one of the easier things in the world to do, putting audit…

I thought the track record of the US Government on the matter was pretty clear: 1) Write down the law 2) Break it 3) Retroactively make the violation legal Wrt to what oversight exists, well... the fact that they have no idea what material Snowden took with him is telling. But that's not what I'd be the most worried about. How hard would it be for the White House to ask information about a specific individual for "na…

> I'm not sure what you're trying to say here. That the NSA doesn't need any form of oversight, and can be 100% trusted with the power to snoop on everybody belonging to any country

That's not at all what I'm trying to say. In fact I would argue very strong oversight is needed, but I'd also argue that very strong oversight is possible in the first place, which means that oversight (or not) is not the proper reason to argue about the very existence of the program in the first place.

In other words, the program(s) are either required or not. If they are required, determine the needed level of oversight and install it. If it's not required, then it's not required and discussions about oversight are simply redundant.

Re: The NSA: An Inside View

#307
post #197
post #191

Earlier quoted context omitted.

Yes, but why can Loren Sands-Ramshaw use a blog, where he critics his employer and also use Kickstarter without getting fired? Not that I want him to get fired, but I worry that he risks his job in telling us this critical information! Aren't those things, a spy shouldn't have? Is the working strategy, filling the web with disinformation about NSA employees, or is it to never use the web with a real identity for the…

He's no longer employed by the NSA. He left to play with a startup and some personal coding projects; the last paragraph of his post links to them. Any discussion of his employment there still gets reviewed by the NSA, but that's routine for anyone who does classified work. (And he does say up front that he sought that review, and that they had no problem with him posting what the rest of us read.)

Then it's even more important that we read this blog post in the knowledge that it's the one that made it past NSA screening. We'll never know how many didn't.

Re: The NSA: An Inside View

#308
post #209

Earlier quoted context omitted.

How do you know this?

There was an article about how they prefer to hire Mormons. It was interesting because this was before it was revealed that the largest NSA DC was to be built in Utah.

Wow, way to throw an entire religion under the bus to "prove" that the NSA is only looking for mindless zealots.

I have heard intelligence and law enforcement agencies like Mormons for things like being bilingual (many have learned a second language while serving a two-year mission full-time) and being drug- and alcohol -free.

Disclosure: I'm a Mormon. I can't blame people too much for thinking we are all unquestioningly loyal zombies, but I think we all know it's not really a fair point if you're trying to make a logical argument.

Re: The NSA: An Inside View

#309
... the cognitive dissonance is strong in this one.

> I am an American patriot.

> Patriotism to me simply means that I care about the US and its future.

> We all know that it's illegal to look at a US citizen's data without a court order. I use the term "look" deliberately: the Agency makes the distinction that looking at data is surveillance, while gathering it from locations outside the US is not. We gathered everything, and only looked at a tiny percentage of it. I am okay with this distinction both because I don't mind if my emails are copied to an Agency database

That very last bit, is that also a symptom of "patriotism", or more like a justification to tell himself "this was my job, I believe I do right, so my job was right, because it was my job, which is right".

(then again, his ad for "paleo mayo" does show that this person has a habit of buying into beliefs as long as they are backed by sufficiently authorative-sounding sources)

> NSA employees are the law-abiding type. Firstly, the lawbreaking type isn't likely to want to work for the government. Secondly, if they did apply, it is quite unlikely they would make it through the clearance process.

Yeah, actually, "law-abiding" is not really the word I'd describe for the sort of people this process attracts ... More something in between "gullible" and some of the less positive interpretations of "US Patriot".

> While the efficacy of polygraphs has been questioned, and while I'm sure given sufficient training and natural psychosomatic control one could beat them, I think they're fairly accurate. They may yield some false positives (I, for example, initially failed when I said, "No" in response to, "Have you ever given classified information to a foreign entity?" – this is before I knew any classified information – and had to fly back to DC for a second attempt a month later), but I believe false negatives are rare.

Aahahaha, yes, and so do horoscopes! Can you believe this guy?!

They could have had a psychic in a sufficiently impressive suit "evaluate" him, and he'd still have bought into it.

> Even if you are not a citizen of the Five Eyes, you shouldn't be worried about your data being viewed unless you're involved with a group of interest, such as a foreign government or violent organization.

Whut? So anyone involved with a foreign government, such as their politicians, should be worried.

By extension, all citizens relying on that government should be worried.

Doesn't make sense. But then, I can decide what not to worry about by myself.

Finally,

> it would seriously impair our ability to spy if we couldn't gather everything.*

> * I am not permitted to say why this is the case, but it is true.

Fine. But the problem is not so much having to take his word for it, it could very well be true. The problem is, your current situation is wrong, very wrong. It obviously needs overhaul, and without talking about the "why", you can't have a discussion about fixing it, either. He himself admits he is unaware of the "big picture"--all the while stating that whatever it is, he's probably okay with the implications.

I'm pretty sure that even if I did know all the things he knows but isn't telling us, I'd very much disagree with that notion.

> The NSA is our best hope in this war. In my mind, the Agency’s continued dominance of the Internet is absolutely worth [whatever]

Remember, patriotism doesn't mean he doesn't care about people outside the US, just as long as the NSA gets to dominate the entire Internet.

Re: The NSA: An Inside View

#310
post #174
post #37

Interesting to get a look at what it's like to be inside the bubble. It's compartmentalized enough that the individual actors can justify their actions by the assumed competence and benevolence of the others. > I didn't test it, but I'm sure there was automated analysis that prevented or flagged use of US selectors. The mental leap here is subtle, but substantial. Since I have been told I can't use US selectors , I a…

It all seems so sincere. Except when you see how closely this matches the talking points the NSA sent home with employees ( https://s3.amazonaws.com/s3.documentcloud.org/documents/8445... )

Whoa. The above PDF link is very much worth clicking.

Almost all of those points (except maybe the very last one) are echoed by the OP.

Except that this hand-out is straight-out propaganda and the OP sort of tried to veil that.

Post reply on HN