{"id":36270,"date":"2013-11-11T12:00:00","date_gmt":"2013-11-11T12:00:00","guid":{"rendered":"http:\/\/www.transcend.org\/tms\/?p=36270"},"modified":"2015-05-05T22:21:14","modified_gmt":"2015-05-05T21:21:14","slug":"your-email-is-likely-being-monitored-the-nsas-invasion-of-google-and-yahoo-servers","status":"publish","type":"post","link":"https:\/\/www.transcend.org\/tms\/2013\/11\/your-email-is-likely-being-monitored-the-nsas-invasion-of-google-and-yahoo-servers\/","title":{"rendered":"Your Email is Likely Being Monitored &#8211; The NSA\u2019s Invasion of Google and Yahoo Servers"},"content":{"rendered":"<p>What a week! Shortly after Secretary of State John Kerry admitted that maybe our government had gone \u201ctoo far\u201d in its surveillance programs, the Washington Post dropped another Edward Snowden bombshell demonstrating that it is going a whole lot farther than we knew.<\/p>\n<p>If Kerry\u2019s ersatz admission \u2014 couched in a defense of National Security Agency surveillance \u2014 provoked a collective yawn from many who follow these developments, the latest Snowden stuff snapped us to attention. The Post\u00a0<a target=\"_blank\" href=\"http:\/\/www.washingtonpost.com\/world\/national-security\/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say\/2013\/10\/30\/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html\" >published an article<\/a>\u00a0detailing the NSA\u2019s interception of information coming in and out of Google and Yahoo servers over non-public, internal network fibre optic lines. In December, 2012 alone, the program (revealingly called \u201cMUSCULAR\u201d) processed 181,280,466 Google and Yahoo records that included email, searches, videos and photos.<\/p>\n<p>Up to now, the NSA has defended its actions by telling us it is combatting terrorism through the capture of data in a public space, the Internet, after obtaining court orders. This shows they were lying. MUSCULAR is the theft of about 25 percent of all Internet data from two of the most popular data handling companies with no court orders or advisories in complete defiance of the law and our rights. It is, quite simply, government gangsterism.<\/p>\n<p>And it brings into focus the most important question: why? Because this isn\u2019t about counter-terrorism, not with that many records and their surreptitious capture. This is about surveillance and analysis of the daily communications of an entire country and much of the world.<\/p>\n<p>The technology of MUSCULAR, a program jointly carried on by the NSA and its British counterpart, isn\u2019t hard to explain. Essentially, technologists at the spy agency have figured out a way to intercept data being exchanged among servers that store everything you do on Google and Yahoo.<\/p>\n<p>Here\u2019s the difference between this and other previously revealed spying programs. Your data travels over the Internet to get to those servers and be stored there. For others to see what data you\u2019ve stored, it must travel out, again over the Internet. That\u2019s legally protected data and the NSA (at least theoretically) needs a court order to remove it from those servers. The FISA court (the NSA\u2019s blessing source) almost always rubber stamps NSA requests so it\u2019s pretty easy to conduct that kind of data extraction but at least there is still a record of what the NSA is looking for and why and some grounds for taking legal action against it.<\/p>\n<p>Muscular doesn\u2019t go near the data as it\u2019s travelling on the Internet or while it\u2019s on those servers. Instead it intercepts data that\u2019s already been stored and is travelling through non-public connections between each company\u2019s many servers as the companies synchronize stored data or transfer it internally. Internet giants like Google transfer data among their servers constantly in networks of servers known as (you\u2019ve heard it before) \u201cclouds\u201d. This constant transfer helps distribute server activity so that a sudden spike in requests for data on a particular server doesn\u2019t crash it (called \u201cload management\u201d) or for maintenance, security and other reasons. To do this they use special fibre-optic wires that connect their various servers and are not publicly available.<\/p>\n<p>The data transferred among these servers is typically encoded so nobody can read it without having the decoding keys. That\u2019s a security measure. According to these reports, the NSA has figured out a way to de-code those formats, then captures the data being transferred by tapping into these internal connections and then, without anyone outside the NSA knowing it, decodes the stuff and analyses it to decide what, if anything, they want to do with it. If they decide to store it, they have several NSA storage centers that can easily handle it. They then allow the data to resume its journey. It all happens in micro-seconds.<\/p>\n<p>This is typically called a \u201cman in the middle interception\u201d and it\u2019s like tapping the wire between your computer and an external hard drive you use for storage \u2014 except multiplied hundreds of millions of times.<\/p>\n<p>\u201cI knew the NSA drawing was real from the smiley-face,\u201d\u00a0<a target=\"_blank\" href=\"http:\/\/www.slate.com\/articles\/technology\/bitwise\/2013\/10\/nsa_muscular_program_spying_on_google_and_yahoo.html\" >wrote Slate\u2019s David Auerbach, referring to the Internet smile icon used in the leaked diagram and replicated above<\/a>\u00a0[2]. \u201cOnly an eager and myopic software engineer \u2014 seeing the interception of Google and Yahoo\u2019s data as a challenge and game rather than as a security and political matter \u2014 would make such a light-hearted and self-satisfied gesture at the prospect of hacking into Google\u2019s internal servers.\u201d<\/p>\n<p>Of course, it\u2019s not a game. It is a highly sophisticated and intentionally intrusive method of data-gathering: spycraft at its most pernicious performed constantly on the email, photos, videos and other data posted by the people of this country (and many others).<\/p>\n<p>NSA chief Keith Alexander was immediately dispatched to issue his predictable disclaimers: \u201cIt would be illegal for us to do that. So, I don\u2019t know what the report is,\u201d\u00a0<a target=\"_blank\" href=\"http:\/\/www.cnn.com\/2013\/10\/30\/us\/nsa-google-yahoo\/\" >he told a cyber-security conference last week.<\/a>\u00a0[3]\u00a0\u201dBut I can tell you factually we do not have access to Google servers, Yahoo servers. We go through a court order.\u201d Alexander has proven himself a master of evasion in the past but this was a doozy. This is about tapping wires not accessing servers.<\/p>\n<p>Officials at both Google and Yahoo tried to put make-up on their black eyes through statements of outrage, calls for \u201crestraint\u201d, and assurance that they were not \u201cadvised\u201d of a massive surveillance effort they would never have approved. But the point is that it\u2019s happening and their PR-driven assurances to users that our data is safe mean absolutely nothing.<\/p>\n<p>What a mess! In the space of two weeks, President Obama publicly states that he didn\u2019t know the extent of the spying but will aggressively \u201clook into it\u201d. Secretary Kerry admits it may have gone too far but it\u2019s all in a good cause. Alexander side-stepped comment on the real revelation and his National Security Advisor boss James Clapper seemed intent on avoiding the issue entirely be issuing another of his famous non-denial statements. In fact, the non-denials were bouncing like a bunch of ping-pong balls during an earthquake \u2014 colliding with each other in a nonsensical frenzy. That was coupled with the flow of rhetorical outrage emanating from many governments as Snowden information made clear that surveillance was being conducted on everything from Spanish citizens\u2019 email accounts to the personal emails (and perhaps phone calls) of German chancellor Angela Merkel.<\/p>\n<p>Obviously, data gathering of this scope isn\u2019t about catching terrorists. That certainly could be part of the outcome but there\u2019s no way you analyze over 183 million pieces of data in a month to identify crazies. Something else is going on.<\/p>\n<p>Post reporter\u00a0<a target=\"_blank\" href=\"http:\/\/www.pbs.org\/newshour\/bb\/government_programs\/july-dec13\/surveillance_10-31.html\" >Bart Gellman, who broke the story, told PBS<\/a>\u00a0[4]\u00a0that \u201c\u2026on its face I don\u2019t see any evidence that they\u2019re flouting the law here. They\u2019re using it in ways that the companies and the public didn\u2019t expect.\u201d But that challenges logic. Going into a company\u2019s internal systems to remove data without that company\u2019s knowledge sure seems illegal. At the very least, it reflects a disturbing cynicism on the Administration\u2019s part about the spirit of the law and what privacy laws tell our government about how it should relate to its citizens.<\/p>\n<p>The question, however, isn\u2019t whether this is legal but what the Obama Administration is trying to do with the definition of legality. The history of this Administration demonstrates that it\u2019s preparing for some very troubled times and its preparations are obscenely repressive. With an economy that simply cannot return 25 million unemployed people to work, the massive retrenchment of people\u2019s rights, the slashing of our social safety nets, a society ripped apart by the frantic hysteria of weekly domestic terrorism, an insane but growing extreme right-wing and a Congress that has no popular support and is no longer governing anyone, the eruption of massive protest and resistance in every corner of the society is no surprise. Nor does it take much vision to predict that things are going to get a whole lot hotter.<\/p>\n<p>The politically powerful are involved in an intense debate about how to govern this society while the social contract it has used to govern in the past can\u2019t be met. The debate rages but it\u2019s clear that all sides are talking about a more restrictive society. The key to such repression is data capture. No matter how intense and widespread this repression turns out to be, they have the data they need to make all options possible including the crushing of protest movements. Do we trust them not to use the data that way?<\/p>\n<p>In past contributions to these web pages, I\u2019ve written that, while we are not in a police state, the government has constructed an apparatus capability of turning this country into one with a flip of its legal switch.<\/p>\n<p>That\u2019s the meaning of the MUSCULAR revelations. As far as data is concerned, everything is in place.<\/p>\n<p>____________________<\/p>\n<p><i>Alfredo Lopez<\/i><i>\u00a0writes about technology issues for This Can\u2019t Be Happening!<\/i><\/p>\n<p><a target=\"_blank\" href=\"http:\/\/www.counterpunch.org\/2013\/11\/05\/the-nsas-invasion-the-google-and-yahoo-servers\/\" >Go to Original \u2013 counterpunch.org<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>What a week! Shortly after Secretary of State John Kerry admitted that maybe our government had gone \u201ctoo far\u201d in its surveillance programs, the Washington Post dropped another Edward Snowden bombshell demonstrating that it is going a whole lot farther than we knew.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[60],"tags":[],"class_list":["post-36270","post","type-post","status-publish","format-standard","hentry","category-whistleblowing-surveillance"],"_links":{"self":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/36270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/comments?post=36270"}],"version-history":[{"count":0,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/36270\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/media?parent=36270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/categories?post=36270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/tags?post=36270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}