Feeds

Declassified documents show NSA staff abused tapping, misled courts

And that's just the non-redacted stuff

Choosing a cloud hosting partner with confidence

The US Office of the Director of National Intelligence (ODNI) has declassified 1,800 pages of documents that indicate that the NSA routinely overstepped its authority and misled oversight bodies about the surveillance of US citizens.

"In June of this year, President Obama directed me to declassify and make public as much information as possible about certain sensitive intelligence collection programs undertaken under the authority of the Foreign Intelligence Surveillance Act (FISA) while being mindful of the need to protect national security," said James Clapper, director of national intelligence in a Tumblr posting.

"These documents were properly classified, and their declassification is not done lightly. I have determined, however, that the harm to national security in these circumstances is outweighed by the public interest."

The documents are currently being pored over by legal experts, but early scans show that between May 24, 2006 and February 17, 2009, the NSA was monitoring 17,835 phone accounts, barely 2,000 of which had "reasonable articulable suspicion" of wrongdoing – a requirement for such surveillance to be legal.

During a judicial review of the program, the NSA said that the problems stemmed from the fact that the information-gathering infrastructure was so complex that "there was no single person with a complete understanding of the FISA system architecture," but that a thorough technical review carried out in 2009 should have sorted things out.

In addition, many NSA analysts were able to access the metadata on phone records without proper training or authorization, or in 32 cases without even knowing that they were accessing restricted data. Filters designed to stop over-collection of data were not activated for months after their installation.

FISC Judge Reggie Walton, in a 2009 ruling, was certainly less than impressed. "To approve such a program, the Court must have every confidence that the government is doing its utmost to ensure that those responsible for implementation fully comply with the court's orders. The Court no longer has such confidence."

In a statement, the Electronic Frontier Foundation pointed out that Director "depends what you mean by collect" Clapper is somewhat disingenuous in saying the documents were released as part of a drive for openness, since the Department of Justice was forced to declassify the documents after the EFF won a Freedom of Information Act case last week.

"Incredibly, intelligence officials said today that no one at the NSA fully understood how its own surveillance system worked at the time so they could not adequately explain it to the court," said Trevor Timm, EFF digital rights analyst. "This is a breathtaking admission: the NSA's surveillance apparatus, for years, was so complex and compartmentalized that no single person could comprehend it.

"As it's been clear to us and to an increasing percentage of the American public, making public how the government interprets our laws is not only NOT dangerous, but is vital to our democracy." ®

Beginner's guide to SSL certificates

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
In the next four weeks, 100 people will decide the future of the web
While America tucks into Thanksgiving turkey, the world will be taking over the net
Microsoft EU warns: If you have ties to the US, Feds can get your data
European corps can't afford to get complacent while American Big Biz battles Uncle Sam
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.