Feeds

NSA, UK hacked Yahoo! and Google data center interconnects – report

Project MUSCULAR taps millions of YOUR records a month

Build a business case: developing custom apps

British and US intelligence agencies managed to tap into the connections between data centers run by Yahoo! and Google, and in one month this year slurped 181,280,466 records, including metadata and the contents of communications, according to new documents from Edward Snowden.

A report dated January 9, 2013, from NSA’s acquisitions directorate, detailed the operation, dubbed MUSCULAR, in which operatives from the NSA and Britain's GCHQ tapped the fiber-optic transmission cables from the non-US data centers run by the two firms.

One document, sent to the Washington Post, shows a hand-drawn diagram of how it's done, including a smiley face.

NSA diagram on Google cloud

NSA surveillance design and emoticon

“We have long been concerned about the possibility of this kind of snooping, which is why we have continued to extend encryption across more and more Google services and links, especially the links in the slide," Google’s chief legal officer, David Drummond, told the paper in a statement.

"We do not provide any government, including the US government, with access to our systems. We are outraged at the lengths to which the government seems to have gone to intercept data from our private fiber networks, and it underscores the need for urgent reform.”

Under the scheme, GCHQ intercepts the traffic and stores it in a "buffer" that can hold between three and five days' worth of traffic from the data centers. The NSA then picks through this to find useful information using up to 100,000 search terms before emptying the buffer.

What makes MUSCULAR so puzzling is that under the terms of the PRISM program, US intelligence services already have access to the records of both Google and Yahoo! Either Snowden's documents are incorrect or the NSA and GCHQ have decided to cut out the middle man and go for the data directly.

The Washington Post speculates that the reason overseas data centers are targeted is to avoid the possibility of collecting data on US citizens in breach of America's Foreign Intelligence Surveillance Act. In a statement the NSA denied this, and claims that it gathered "vast quantities of U.S. persons’ data from this type of collection."

"NSA applies Attorney General-approved processes to protect the privacy of U.S. persons - minimizing the likelihood of their information in our targeting, collection, processing, exploitation, retention, and dissemination," it said. "NSA is a foreign intelligence agency. And we’re focused on discovering and developing intelligence about valid foreign intelligence targets only.”

The NSA is subject to political oversight and on Tuesday intelligence operatives testified in front of Congress, along with those tasked with conducting a review of surveillance activities by the NSA and others. Representative Mike Rogers, who as head of the Permanent Select Committee on Intelligence helps provide congressional oversight of the NSA, shared this little gem with the panel.

"You can't have your privacy violated if you don’t know your privacy is violated, right?" ®

Boost IT visibility and business value

More from The Register

next story
The police are WRONG: Watching YouTube videos is NOT illegal
And our man Corfield is pretty bloody cross about it
China hopes home-grown OS will oust Microsoft
Doesn't much like Apple or Google, either
Super Cali signs a kill-switch, campaigners say it's atrocious
Remote-death button bad news for crooks, protesters – and great news for hackers?
UK government accused of hiding TRUTH about Universal Credit fiasco
'Reset rating keeps secrets on one-dole-to-rule-them-all plan', say MPs
Fast And Furious 6 cammer thrown in slammer for nearly three years
Man jailed for dodgy cinema recording of Hollywood movie
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Don't even THINK about copyright violation, says Indian state
Pre-emptive arrest for pirates in Karnataka
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Scale data protection with your virtual environment
To scale at the rate of virtualization growth, data protection solutions need to adopt new capabilities and simplify current features.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?