So, let's see. The NSA does it, GCHQ does it, DGSE does it. The operating assumption should be that all countries are monitoring all communications for at least metadata. Personally, I would not be the slightest bit surprised to learn that all phone calls are being recorded and as much Internet traffic as possible.
I'm not surprised by this news at all. The technical means have been there for years and years. And the desire has been there for much longer. Anyone who reads the history of SIGINT will understand that the desire to capture all communications is perfectly normal in that environment.
Snowden's "revelations" are completely unsurprising to anyone who has thought about this and the technology. I'm still waiting for him to reveal something actually surprising.
I'm not surprised by this news at all. The technical means have been there for years and years.
Have you thought through the implications of this? To me capturing and storing all the information we generate is really dangerous, and there's no way I'd want a log of everything in my life to be accessible to my secret service, my government, police, and the secret services of anyone they might wish to share it with (in particular the NSA) in secret and without my permission.
You've carefully avoided stating an opinion on these actions of our security services, but presented it as a fait accompli that we may as well just live with. I disagree. They've lied to us about what they were collecting (everything) and lied to us about what it is for (terror). I see no reason to trust any assurances or controls which are introduced on access, and the only way to stop abuse is to stop collection.
It appears they're not yet at the point where they can store all information indefinitely, but that point will arrive soon, and I think we should stop them before it does. I don't even trust the current politicians and police with this information on every citizen, let alone any conceivable politician who might come to power in the next few centuries.
IMHO we should have strong protections banning outright the collection and collation of this sort of material except where there are reasons to be believe someone is a serious criminal (violence, fraud, terror), with judicial oversight, for a limited time, with the data deleted after the trial. Just as the police are not allowed to demand DNA samples from entire populations in order to solve a crime, security services should not be allowed to store our every move and thought in the name of defending liberty, it makes a mockery of the concepts they claim to be protecting, and is extremely dangerous in the long term.
You've carefully avoided stating an opinion on these actions of our security services, but presented it as a fait accompli that we may as well just live with
You want my opinion? I agree: it's very dangerous for the state to have detailed information about an individual's life. The potential for abuse is enormous.
The only winning move is not to play. And before you complain this is impossible, for the record, Stallman has been doing the same for years. He doesn't own a cellphone. Think about that for a moment; mull over the implications.
He's been saying for years that the allure of convenience is a mirage in terms of privacy. Is he doing something illegal? No, I think it's safe to say not. Most likely, neither are you.
I think it'd be a shame to sacrifice all the utility of the Internet and telephone services because of mass surveillance. I'd rather sacrifice some of the capabilities of GCHQ and the NSA instead.
Whether or not it's surprising is totally irrelevant and you should stop pretending it isn't, if that is what you're saying.
But you've got an interesting point in that the desire has always been to capture everything -- while the technical means to do it have been available for a couple of years. Along with a further shift in how people communicate towards easily moniterable technology, that is the crux of the matter.
It was one thing to have secret societies intent on capturing everything in the 60s, when technology limited the scope of the operation. It's another thing when that intention is not readjusted to the societal and technical realities of 50 years later.
That's why it seems like such a sudden, surprising change in policy to some who haven't kept up with the technical possibilities for surveillance, while others realize it's been a slow change going on for decades now.
And of course, for the past decades some of us have been trying to point out the technical possibilities to everyone who would listen, only to get told that just because it's possible doesn't mean it's being done -- we're not surprised by Snowden's leaks, but certainly vindicated.
This is a discussion on HN, not in a general public forum. Sure, the general public is probably surprised by what's been revealed but we should not be.
Being french, I am quite certain that this is a lesser news to french people than PRISM was to americans.
Read the comments (if you can read french), and you'll notice that the reactions are all a sarcastic combination of "not surprised at all" and "that darn government probably didn't even get this right".
To sum up the differences:
- PRISM was legal. That said, in France, legal coherency is a joke. Laws conflict with each other, and even when voted, they may not be applied.
- There is an implied contract in the US that the government won't spy on citizens. Nobody believes that in France.
- As a result of the above, the people behind this "revelation" won't even be sued.
- French people tend to use services from abroad (mostly american, sweden and german), so the government doesn't have much leverage to get information from companies. I doubt they broke TLS. They do have a huge understanding with ISPs, however. Incidentally, ISPs are severely distrusted by their users.
All in all, our democracy is even worse than yours. Yes, that is possible.
Being french too, when I first read about PRISM, I thought the american people would fight it fiercly. I just read about the french equivalent and I know the french people will never try to fight it.
Legal or not, it's our liberty they're taking away from us.
The people of the USA and France now feel powerless against our respective governments. We gave our votes to the executioners of our liberty.
Isn't the point that no-one should be surprised any more?
We've recently had revelations suggesting that several intelligence services are essentially grabbing as much communications data as they can. Why would anything think if the US are doing it and the UK are doing it that anyone else with a reasonable budget and level of technical capability isn't?
Moving forward (even prior to this but certainly now) the assumption should be that if a country has the resources to have an intelligence service which can do this, they're doing it.
With regards to this the most likely constraining factor for any intelligence service is money and resources rather than morality, legality or anything else.
Why would it surprise anyone (HN or otherwise) that the NSA is trying to do what is available COTS for enterprise, for auditing and law enforcement (CALEA), on a massive scale? Especially in the current environment of civil liberty erosion?
Because its outside their domain and expertise and/or they really haven't been paying attention.
EDIT: the point is that I don't believe that HN should be anymore knowledgeable about this than the General Public because it is a specialized domain. It's not 'the Internet'.
Some. I think it depends if you can explain it properly. That was supposed to be the media's job, in the 'self-regulating' system of democracy. Obviously, that failed. So now we have non-democracy, and little way out except...
And for what, with surveillance like this, how is there still crime and terrorism?
either it's ineffective
or they're overselling the capabilities
or they're more interested in dissidents, and judging by the way activists and whistle blowers are being treated, i suspect this is the real reason these systems exist.
EDIT: Or there's some other threat none of us know about and these systems are working perfectly at keeping us all safe... but that's a long shot.
You're straining my point I feel. I simply think that this sort of surveillance would have made a big impact on the $36 billion drug trade, what with the war on drugs being such a hot topic an all.
But no. It seems drug dealers don't use phones or computers or send mail to communicate with any of the cartels or drug lords we know of, and presumably coordinate their gargantuan logistical operations via telepathy.
Or, the government doesn't deem the drug trade worthy of scrutiny, despite the warnings that it funds terrorism.
So the government is NOT trying to prevent terrorism but instead has setup these elaborate systems just to prevent activism and whistle blowing. You sure that aliens aren't involved somewhere in there ?
The FACTS are this. The head of the NSA has testified in front of congress that over 50 potential terrorist acts were thwarted because of PRISM since 9/11 including bombing of the NY subways and stock exchange. And there is no evidence that the infrastructure the NSA has is available to every single cop in every town in order to fight crime.
The head of National Intelligence testified in front of congress, too. When asked if they were collecting "any type of data at all on millions or hundreds of millions of Americans", he said, "No.". When the question was repeated, he said, "Not wittingly."
So he outright lied to congress. The information that you claim is a fact is from a source that I no longer believe.
That it's a fact that he said that doesn't make it a fact that it is so.
Oh, and the irony of thinking otherwise and mocking "tinfoil"; I never saw anyone resorting to that who didn't strike me as projecting. It's for example a conspiracy theory to simply note that buildings don't just fall into themselves because of office furniture fires, but it's not a conspiracy theory to believe Saddam is about to unleash WMD without even being able to name what he'd gain from it. It doesn't take genius to note that the deciding factor is not how realistic or dumb fucking stupid something is, or even physically possible for that matter, but wether it goes against or with power.
> It's for example a conspiracy theory to simply note that buildings don't just fall into themselves because of office furniture fires, but it's not a conspiracy theory to believe Saddam is about to unleash WMD without even being able to name what he'd gain from it. It doesn't take genius to note that the deciding factor is not how realistic or dumb fucking stupid something is, or even physically possible for that matter, but wether it goes against or with power.
Well, yeah, the phrase "conspiracy theory" refers to a theory that involves a massive conspiracy among the power elites to keep the truth about some important thing from the public.
So, yeah, the claims about Saddam's WMD's weren't a conspiracy theory, they were just lies by those in power (an accurate description of the nature and motivation of those claims would have been a conspiracy theory, which demonstrates also that "conspiracy theory" and "false" aren't the same thing.)
One thing I find helpful to keep in mind that if you hang a wall full of analog clocks, they will synchronize. That's just what happens, without any of the clocks ever formulating a plan and the rest agreeing to it.
In the same way, it's just common sense that powerful entities, while also competing with each other, synchronize in keeping the unwashed masses in check. If ants can do it, so can people. That in itself doesn't make any old claim valid, but it means looking out for signs of such "unspoken conspiracy" is simply paying attention instead of acting like a goldfish (by which I don't mean to diss goldfish, just trying to make a point).
I expect snow in winter; that doesn't mean I may claim rain is snow, but it means I wont stare for 30 minutes when it does start snowing, and wonder what all the white stuff is. It also means I sometimes get irritated with people who do.
Yes, there are nutty theories and nutty claims. But they are so in their own right, not "because it's a conspiracy theory". This is exactly as logically valid as saying "that's a Jewish-sounding argument", to Godwin this thing for good measure.
Not that you don't know all of this, I just felt like rambling a bit. HN prides itself in having argument instead of memes, but it's still tinfoil this and tinfoil that without even blushing sometimes, which is the lolcat of the domesticated pseudo-intellectual if you ask me.
Technically, they do "talk" to each other: "the two pendulums would exert a force on each other through minute vibrations in the wall". I would argue humans do the same. And not just "the" powerful either, everybody does. Sometimes for fun, sometimes for gain, sometimes just to be social, but hardly ever with a clearly formulated "plan", or meetings in dimly lit rooms. That's just not necessary when you already noticed you're in agreement with someone about crucial things, simply because you're both doing them.
Also, it's perfectly normal for people to "conspire" to do something without any of them even reflecting on what they're doing individually, much less as a group. It's possible to work in unison towards a common goal without even being consciously aware of that. Kinda like a flock of birds, or pendulum clocks :P
We are way past this now. If anything, we have the opposite problems of "apology theorists" and "coincidence theorists".
People have been trained to think "conspiracy" is some BS endeavour that includes aliens in Roswell, mind control, illuminati etc.
Fact is, most of history has seen covert action by governments and organisations. Those are also conspiracies (by definition), and it's totally wrong (and disingenuous) to lump them with BS conspiracy theories.
It's so unsurprising that the US forced a foreign president to touch down and have his plane searched in a foreign country to try and catch the whistleblower.
Ridiculous by whom? It wouldn't surprise me if we spied on our allies citizens and then sold the intelligence to our allies so they didn't have to.
I mean, we have in the past warned allies that one of their citizens was planning an attack. It should have been obvious that meant we were monitoring their citizens.
We need to stop being so blasé about the way countries spy on each other and the general public. No, it's not anything new. Yes, spies spy, that's their job. But it shouldn't be their job.
Exactly, this is what I've been pointing out: Every government with the means to monitor domestic and foreign communications does so and invariably stretches the law in order to achieve it.
That's why I've felt the focus on the NSA and GCHQ (i.e. the US and and UK) was misplaced. The focus should be on better privacy protections and rolling back state surveillance in all countries, not just the two whose programs are the best-known. In fact the understanding of how widespread this is may reignite the push for better client-side privacy and anonymity protection tools.
I have good info that NORAD has been tracking Santa for years with GPS tracking by remotely enabling cell phones he's carrying as presents.
In seriousness though, you're absolutely right and I feel the same way. I think the important thing here is that it's the first time the general public (and much of the tech community) has been presented this information in a straight-forward way. Also, people who had long ago deduced everything being revealed now (like me) will hopefully see the full extent of everything that's been happening. I have additional things I figure have been going on but which I loathe to discuss for fear of sounding paranoid. However, I used to feel that way when talking about the gov't reading email and tracking your FB activities, so it's nice to finally be able to discuss that with people and not seem like a lunatic or have the issue immediately dismissed.
edit:
But let me make a tinfoil hat prediction now, and I can point back to this post one day to maybe win a bet:
The private data collected on everyone is being shared with government workers (and private contractors) on all levels in some form. I think that many, many depts and orgs across federal, state, and local levels are privy to our personal/private data at least in aggregate/anonymized form whether they realize it or not. For instance, I think at least a small portion of police and fire responses are triggered by our private data, perhaps in a way that those responders don't even realize. It's a crazy idea and perhaps I'll head over to the TwoPlusTwo forums to begin taking bets :)
I think people too often discount the fact that for the NSA system, there's actually oversight. Or at least they try very hard to make it seem like there is. I haven't seen that in the European stuff, and that's what worries me.
>Snowden's "revelations" are completely unsurprising to anyone who has thought about this and the technology. I'm still waiting for him to reveal something actually surprising.
To someone used to an abusive relationship, no abuse is surprising.
"Oh, now he hit me with a metal club. Big fucking deal"
That doesn't make it acceptable or non dangerous.
So I wouldn't be waiting, like a mere spectator on something that doesn't affect me, for him to "reveal something actually surprising".
I hate, hate, hate comments like these. They serve absolutely no purpose other than saying I told you so.
Yes, some of us understood the spying is broad, but I don't think most of us expected the cables to be tapped directly, and take all the data like from a firehose and store it all. How can you say even that doesn't surprise you? And even if it doesn't you think 99% of the people out there understood this?
Does your mom or dad think it's okay their phone calls are stored and analyzed by the government?
Anyway, just because you (probably) knew this was going on, doesn't mean there shouldn't be a time to get outraged about it.
No. OP is saying that he is not outraged because he wasn't surprised. He may not like the fact that it is happening, but he is not outraged. That was the point of the comment. A little bit of 'I told you so', and a little more of 'stop getting so upset, because if you really cared you would have known.' The only thing that changed with Snowden is that now you know about it.
But lets be honest, we are talking about spying. If we didn't already know, we should have assumed, because the point of spying is to know everything. What did everybody thing spying was? Because it certainly isn't legal. And now that everybody understands what spying entails I am supposed to be outraged? Yawn. Wake me up when the secret police ACTUALLY start taking people away. Because until till then, the NSA is doing its job, and that is spying however legal or illegal it may be.
But when that day comes, if history serves as any precedent, I'll know about it before you do.
i am austrian, so our HNA http://en.wikipedia.org/wiki/Heeresnachrichtenamt would be my "scandal". they run a sigint station smack in the center of vienna, located in a WW2 flaktower. public knowledge, but just add Snowden, Morales, some other bullshit and voila, another great feat of journalism.
- ∃ a (centralized) data collection by the french secret services (DGSE)
- almost all telecommunications are intercepted and stored (physically, at 141 Boulevard Mortier, Paris)
- They value metadata (social graph, etc) more than contents
- Some parts of the Police force and some other agencies have access to some of the data
- The DSGE assets that the law does not "cover" this operation. The CNIL (French commission for "computing and freedom") disagrees. There is some general consensus to pretend that this French PRISM does not exist.
Ok, so it seems this thing that we call free society is rapidly going off the rails. In addition to GCHQ and this crap from France, Netzpolitik.org recently dug up some interesting info on the publically known activities of the German secret services, which include tapping sea cables[1] and listening in on 5% of DECIX traffic[2].
So we now know for a fact that, while the general populace was blissfully disinterested and the techie crowd was mostly playing with its new toys, the intelligence community started building an all-encompassing global surveillance infrastructure. If we don't manage to pull off a roll-back now, our children or grandchildren will live in an actual science fiction dystopia.
My feeling is that we have a very small chance to achieve a roll-back in (continental) Europe, because the uncovered actions of secret services here are much more at odds with the societal consensus on the accepted powers of the executive. For the big five prospects are IMO more bleak.
>>My feeling is that we have a very small chance to achieve a roll-back in (continental) Europe, because the uncovered actions of secret services here are much more at odds with the societal consensus on the accepted powers of the executive. For the big five prospects are IMO more bleak.
I strongly suspect that this isn't the case. The legal framework that governs the GCHQ is far less restrictive than that for the NSA. In the case of the DGSE the whole thing is basically apolitical and doesn't have any meaningful oversight. The FISA court at least approves the techniques of collection and then the targeting procedures. The NSA doesn't get ruled against often but it does happen (the case in 2011 that dealt with targeting procedures I believe).
Sure Germany and other countries which have a strong commitment to privacy dont' operate the same programs but seem perfectly happy to take intelligence data when it is provided.
I doubt the EU is going to dismantle their surveillance capabilities while knowing that the US and other nations are still doing it. That's less power for the EU and more power for everyone else.
It is best to do the following thought experiment: What if all communications data was available to "somebody"?
Well, sooner or later, this "somebody" would use it for things that for them are no-brainers: For example fighting terrorism in case of "somebody" = law enforcement. But then what?
Unfortunately, a situation in which somebody has all the data and is allowed to use it for a limited number of purposes is not stable. There is just too much that you can do with it, making the temptation irresistible. It then really doesn't matter if the scope of usage is extended in a million small steps or a few giant leaps, because the end state of a system with humans and data is that the humans will use the data.
But obviously, not everybody will have access to the data. We start (now) from a situation in which there is an information access asymmetry between the intelligence community and the general public and there is no indication that the intelligence community will ever be willing to give up this privileged position.
So in the end, all the data is available and it is used for many purposes, but the number of those that have access to it is limited, and their access gives them certain advantages over everybody else. This is how, over the course of a few dozen decades, you arrive at a security-clearance based caste system.
We're talking about future developments of society in a rather abstract manner, so the whole discussion is always scraping along the edge of BS territory. However, I've stated clear assumptions each step of the way. Some of them may be wrong, but I am (unfortunately) confident that they're not.
Let's take the data usage expansion hypothesis. Already in the discussion about the EU data retention directive many stakeholders stated that they want access to the data for persecution of activities such as tax avoidance or file sharing. Even now, after they (mostly) lost their case, these people try again every few years. If they continue to persist and if they get a little bit of what they want every now and then (which has happened), we have the million steps scenario. I consider the situation unstable, because the resources of those that want to restrict the usage of gathered data (at least here in the EU) are dwarfed by the resources available to those that want to expand the usage.
Even the most extreme statement in my tale (the one about the caste system) has some footing in reality. When we still had the STASI here in Germany, the nature of what they did basically made them such a caste. Because STASI operatives had the job of spying on their surroundings with the tools available at the time, they had a general information advantage compared to everybody else. However, the rest of society avoided any contact with them (obviously only possible when they were not undercover) because of what they did. I once heard that children in school had to proclaim the professions of their parents at some point during the school year. If a child did not state a specific profession but just said "worker", everybody knew that the parents were STASI. Of course the child was then shunned by the other children.
While falling short of a fully developed caste system, this little example shows that a society with an extremely developed information gathering and processing apparatus can move in that direction.
I admit that using the word thought experiment was most likely wrong, but then it follows that one really can't make a Gedankenexperiment about the future of society, doesn't it?
Just like with small countries acting as offshore tax havens, is there a case for setting up a lot of cloud services in countries that neither have the technical capability or simply do not care what data is stored with them?
Of course on the way there data pass through routers of at least one country that siphons the information and using satellite internet connection is costly :(.
One of our former presidents, Mitterand in the 80ies, used intelligence services to eavedrop phone conversations for his own needs.
You'd think people would revolt, but more recently in order to operate the "three strikes" law and HADOPI they delegated the monitoring of P2P/Interenet trafic (in order to check for IP rights violations) to a private company.
We have laws about the privacy of communications too (like paper mail), but strangely nobody seem to realize they plainly apply to electronic communications.
I'm waiting for the same EU HN users to start calling for the banning of all French citizens from the rest of Europe, and the blockading of all French online services, as they did with the US yesterday. Perhaps how all French citizens need to be punished so they'll force their government to change their behavior...
Maybe we'll see some German politicians talking about how bad French companies are for being complicit with their intelligence services and they need to make sure their citizens don't use any French services. But, I'm not holding my breathe - because, I'm sure that attacking France will do little for most politician's re-election chances over there.
[Edit: Down-votes? If you're going to disagree with me regarding the political opportunism and lack of criticism of France, then come out and say it.]
I'm guessing, nobody will react. We already have the most impopular president of the last 50 years, one of the highest tax rates of modern country, highest unemployment rate, high abstention rate in elections, high immigration rates, high debt ratios, and the extremist political parties are on the verge of gaining massive support in the next european elections.
That, plus the fact that we've had numerous previous experiences of terrorists bombing our country, makes me think that we really have far bigger issues than the secret service spying everyone at the moment.
Immigration can be a huge force for growth and prosperity as much as it can be destructive. You can think of a country as a company, and of immigration as recruitment. Recruitment will make, or kill, a company.
Just as for the US, we've known that these intelligence programs exist for many years. If you can read French, see this post [1] about Frenchelon from 2010, I also highly recommend the Bug Brother blog [2], and Reflets.info [3].
It looks like with the nuclear bomb: all countries want the world to know that they have it. Are secret attacks becoming the norm and governments are telling they have the means to uncover any hidden identity?
Anyway, it would have been surprising if intelligence agencies didn't collect as much data as they can. What was the most scandalous with Prism is the methods of bullies used by civil servants against businessmen. It's fair if they can catch data discreetly, not if they threaten to imprison or kill to gain easier access to all databases.
Are there any initiatives to build a new internet with secure/anonymous transmissions in place from the ground up? Could such a thing even be possible?
They do not mention sources, but I'd say it is some sort of open secret which is known by a lot of journalists. They mention that this officially does not exist, and from off-the-record talks, it does not exist because it's "secret défense".
From what I've heard, no. This isn't a Snowden leak, it's the result of a journo sitting on information and having an opportune moment to publish.
This isn't the first exposé of the French government's communication surveillance either. There have been quite a few articles on this over the past few years.
There are two possible conclusions: Everyone does it, there is no hope, just resign yourself to surveillance. Or, one can conclude that no matter how much you trust your own government to treat surveillance data correctly, whatever that might mean to you, some other government is out to get your business data, etc. with no compunctions, so you better secure your systems and communications.
In some ways I believe that Internet has now matured up to a level where it is able to impact the Government and its functionaries in a very serious manner (Avoiding the word disruptive here, because unlike Hollywood, Government people generally take this word with a more murderous rage).
It's no longer okay to brush away stories as conspiracy theories because, well, you now know it could be true. Most likely. All this that has happened in past few weeks seems like a moment of truth to me. I have a strong feeling that the next level of impact of Internet on these Governments and arcane bureaucratic structures will be one to watch.
I'm not surprised by this news at all. The technical means have been there for years and years. And the desire has been there for much longer. Anyone who reads the history of SIGINT will understand that the desire to capture all communications is perfectly normal in that environment.
Snowden's "revelations" are completely unsurprising to anyone who has thought about this and the technology. I'm still waiting for him to reveal something actually surprising.