PRISM Reportedly Accesses Data Without Companies Knowing

NSA PRISM program is reportedly capable of accessing data from internet companies without them even knowing. Secure portals have apparently been set up by companies that can be accessed any time by authorized government employees.

Like It , +1 , Tweet It , Pin It Original content from Ubergizmo.

    

PRISM whistleblower Edward Snowden reveals himself, reasons for leaking surveillance program (updated)

Only days after the initial leaks and explanations by the US government about the National Security Agency’s data surveillance program PRISM, Edward Snowden has revealed himself as the whistleblower. He’s employed by defense contractor Booz Allen Hamilton and also worked at the NSA as a “technical assistant” for the CIA. In speaking to The Guardian, he explained his reasons for disclosing the intelligence program: he wanted to “to inform the public as to that which is done in their name and that which is done against them,” hoping that they’ll use the information to debate the issue.

While the NSA’s data-mining tool is reportedly known as Boundless Informant, Snowden has been keeping himself bound to a hotel in Hong Kong during this whole drama. Major internet companies have insisted that the government doesn’t receive direct access to their servers and President Obama has stated that “nobody is listening to your phone calls, but the issue remains far from black and white. Snowden claims a “massive surveillance machine” is in the making under the radar — at this point he’s now waiting to see what happens next, assured he’s made the the decision that feels right to him. Catch the full interview at the source link.

Update: In case there was any doubt that Snowden has ever been employed by Booz Allen Hamilton, the company just released the following statement:

Booz Allen can confirm that Edward Snowden, 29, has been an employee of our firm for less than 3 months, assigned to a team in Hawaii. News reports that this individual has claimed to have leaked classified information are shocking, and if accurate, this action represents a grave violation of the code of conduct and core values of our firm. We will work closely with our clients and authorities in their investigation of this matter.

Filed under:

Comments

Source: The Guardian

PRISM Program Allegedly Providing Intelligence To UK

A new report alleges that UK’s Government Communications Headquarters have also been receiving information from internet companies. It is claimed to have had access through PRISM since June 2010.

Like It , +1 , Tweet It , Pin It Original content from Ubergizmo.

    

PRISM Program Called ‘Lawful’ By U.S. National Intelligence Director

The U.S. National Intelligence Director says that PRISM program is lawful and has been authorized by Congress. A fact sheet has also been released so as to ‘dispel some of the myths’ related to PRISM.

Like It , +1 , Tweet It , Pin It Original content from Ubergizmo.

    

After PRISM, NSA’s ‘Boundless Informant’ Datamining Tool Details Leaked

Top secret documents related to the NSA’s ‘Boundless Informant’ tool have allegedly been leaked. This tool categorizes and indexes surveillance data obtained from computer networks around the world.

Like It , +1 , Tweet It , Pin It Original content from Ubergizmo.

    

The NSA’s Boundless Informant: a data mining tool that maps collected intelligence

The NSA's Boundless Informant a data mining tool that maps collected intelligence

Leaks, denials and declassifications aside, one thing has been clear recently: the National Security Agency takes in a lot of data — allegedly collecting call logs, internet records and even Facebook photos from folks all over the world. So, how does the outfit handle all this data? With custom software, of course. According to documents obtained by The Guardian, the NSA sorts through its treasure-trove of intelligence with a tool called Boundless Informant, data mining software that helps the NSA sort out how closely they’re monitoring a given part of the world.

According to the documents, Boundless Informant reportedly “allows users to select a country on a map and view the metadata volume and select details about the collections against that country.” A screenshot found by The Guardian shows this in action, highlighting over two billion reports in the United States alone. According to the outlet, the screenshot also outs the program’s heaviest hitters: in March of 2013, Boundless Informant boasted 14 billion reports from Iran, 13.5 billion from Pakistan and 12.7 billion from Jordan. We’ve got to hand it to the NSA — we may not like what it’s up to, but at least it’s organized.

Filed under:

Comments

Source: The Guardian

Director of National Intelligence declassifies PRISM info to clear up ‘inaccuracies’

Director of National Intelligence declassifies PRISM info to clear up 'inaccuracies'

After details of a government program called PRISM with alleged hooks into the servers of major internet companies became public this week, Director of National Intelligence James Clapper decided it was necessary to reveal even more information. According to his statement, clearing up the “significant misimpressions” and “inaccuracies” requires the release of further classified info, included in a fact sheet listed after the break. So what is PRISM, according to the “Facts on Collection of Information Pursuant to Section 702”?

It is an internal government computer system used to facilitate the government’s statutorily authorized collection of foreign intelligence information from electronic communication service providers under court supervision…This authority was created by the Congress and has been widely known and publicly discussed since its inception in 2008.

In short, Section 702 facilitates the targeted acquisition of foreign intelligence information concerning foreign targets located outside the United States under court oversight. Service providers supply information to the Government when they are lawfully required to do so.

The document claims PRISM is not an “undisclosed collection or data mining program.” The above passages seemingly align with statements (including one today from Yahoo) from the companies listed claiming that they only respond to inquiries when required to by law. It goes on to offer some details on the process used to identify foreign targets (“Section 702 cannot be used to intentionally target any U.S. citizen, or any other U.S. person, or to intentionally target any person known to be in the United States”) and the oversight involved. Specifically mentioned is the involvement of the Executive, Legislative and Judicial branches of the federal government. Additionally, another report from The Guardian exposes more internal documents that contradict the theory that PRISM involves access to “cable intercepts,” although that can occur under a different process.

Filed under: , , ,

Comments

Source: Director of National Intelligence, PRISM Fact Sheet (PDF)

NYT explains how tech companies allow PRISM, yet deny ‘direct server access’ happened (update)

NYT explains how tech companies allow PRISM, yet deny 'direct server access' happened update

Yesterday a series of leaked PowerPoint slides in the Washington Post revealed a program codenamed PRISM that allowed government investigators access to data from a number of top internet companies. That leak has been followed up in the last 24 hours by a series of blanket denials as tech companies (and their CEOs, including Google’s Larry Page and Facebook’s Mark Zuckerberg) claimed they do not give “backdoor access,” only generally acknowledging that they do respond to individual court orders. Meanwhile government officials including President Obama responded to the claims mostly by claiming whatever is going on — including the bulk collection of call logs by the NSA — is legal and has been “repeatedly authorized by Congress.”

Tonight, a New York Times article may be able to explain the difference between the statements, citing information from people briefed on the program and lawyers that handle the requests. Their report is that the companies discussed ways to “efficiently and securely” share data about foreign users in response to requests made under the Foreign Intelligence Surveillance Act. In contrast to the initial reports of direct server access, this report claims when a government request is made under an individual FISA request, it’s reviewed by company lawyers and then sent over, sometimes electronically using company servers. That can include an investigation into a specific person, logs of certain search terms, and in some cases “real-time transmission of data.” One specific instance cited involved an NSA agent going on-site at a company’s HQ, installing government software on its server and remaining there for several weeks to offload data to a laptop.

So why the quick denials about something the companies listed (including AOL, parent company of Engadget) may actually have ties to? Because FISA requests are by their nature secret, the report claims employees that deal with the requests can’t discuss the details, even with their fellow employees. Notably, although companies must by law respond to the requests, they’re not legally obligated to make it easy, and the article points out Twitter as a company that has declined to participate. Because of that, even if PRISM is more a streamlining of bureaucratic processes than a government backdoor into your Candy Crush Saga level, the semantic differences of company denials may not sit well with users, much less citizens voting for the officials who oversee the programs.

Update: Google Chief Legal Officer David Drummond has chimed in once again via a post on Google+, denying (again) that the government has any access to Google servers. That includes directly, through a back door, or any kind of “drop box” as the Times report mentions had been discussed. Meanwhile, CNET has an alternate source who corroborates the company’s claims of no direct access, describing the system as a “formalized legal process.”

Filed under: , , , , ,

Comments

Source: New York Times, Google (Google+)

The Daily Roundup for 06.07.2013

DNP The Daily RoundUp

You might say the day is never really done in consumer technology news. Your workday, however, hopefully draws to a close at some point. This is the Daily Roundup on Engadget, a quick peek back at the top headlines for the past 24 hours — all handpicked by the editors here at the site. Click on through the break, and enjoy.

Comments

President Obama responds to PRISM concerns, clarifies scope of snooping

If you’ve missed the news on PRISM and the hugely disconcerting allegations that the NSA is basically tracking everything you do on the internet and every call you make on your cellphone, we’re guessing that’s because you’re stuck in a cave that has access to neither technology. The allegations are incredibly troubling to say the least, and President Obama this afternoon took the time to address them — albeit briefly. For one thing, he clarified that “nobody is listening to your phone calls,” indicating that people are looking at metadata about those calls (destinations, length, etc.) rather than the calls themselves. Additionally, he clarified the internet side of the program thusly: “Internet monitoring is only for those outside United States; we have to balance keeping America safe with privacy concerns.” That’s great for Americans, but perhaps a bit troubling for everyone else.

This more or less echoes the statements made yesterday by James Clapper, Director of National Intelligence. President Obama also reminded that this program predates his taking office, and that he himself was skeptical but has come around to the program, stating that this is something “Americans should feel comfortable about.” Well, then, how comfortable do you feel? Let us know in comments.

Update: The Wall Street Journal has a full transcript of President Obama’s comments.

Filed under:

Comments

Source: The Washington Post, CNBC (Twitter)