{"id":53280,"date":"2015-02-02T12:00:50","date_gmt":"2015-02-02T12:00:50","guid":{"rendered":"https:\/\/www.transcend.org\/tms\/?p=53280"},"modified":"2015-05-05T21:26:09","modified_gmt":"2015-05-05T20:26:09","slug":"canada-casts-global-surveillance-dragnet-over-file-downloads","status":"publish","type":"post","link":"https:\/\/www.transcend.org\/tms\/2015\/02\/canada-casts-global-surveillance-dragnet-over-file-downloads\/","title":{"rendered":"Canada Casts Global Surveillance Dragnet Over File Downloads"},"content":{"rendered":"

\"canada<\/a><\/p>\n

28 Jan 2015 – <\/em>Canada\u2019s leading surveillance agency is monitoring millions of Internet users\u2019 file downloads in a dragnet search to identify extremists, according to top-secret documents.<\/p>\n

The covert operation, revealed Wednesday [28 Jan 2015] by CBC News<\/a> in collaboration with The Intercept<\/em>, taps into Internet cables and analyzes records of up to 15 million downloads daily from popular websites commonly used to share videos, photographs, music, and other files.<\/p>\n

The revelations about the spying initiative, codenamed LEVITATION, are the first from the trove of files provided by National Security Agency whistleblower Edward Snowden to show that the Canadian government has launched its own globe-spanning Internet mass surveillance system.<\/p>\n

According to the documents<\/a>, the LEVITATION program can monitor downloads in several countries across Europe, the Middle East, North Africa, and North America. It is led by the Communications Security Establishment, or CSE, Canada\u2019s equivalent of the NSA. (The Canadian agency was formerly known as \u201cCSEC\u201d until a recent name change<\/a>.)<\/p>\n

The latest disclosure sheds light on Canada\u2019s broad existing surveillance capabilities at a time when the country\u2019s government is pushing<\/a> for a further expansion of security powers following attacks in Ottawa and Quebec last year.<\/p>\n

Ron Deibert, director of University of Toronto-based Internet security think tank Citizen Lab<\/a>, said LEVITATION illustrates the \u201cgiant X-ray machine over all our digital lives.\u201d<\/p>\n

\u201cEvery single thing that you do \u2013 in this case uploading\/downloading files to these sites \u2013 that act is being archived, collected and analyzed,\u201d Deibert said, after reviewing documents about the online spying operation for CBC News.<\/p>\n

David Christopher, a spokesman for Vancouver-based open Internet advocacy group OpenMedia.ca<\/a>, said the surveillance showed \u201crobust action\u201d was needed to rein in the Canadian agency\u2019s operations.<\/p>\n

\u201cThese revelations make clear that CSE engages in large-scale warrantless surveillance of our private online activities, despite repeated government assurances to the contrary,\u201d Christopher told The Intercept.<\/em><\/p>\n

The ostensible aim of the surveillance is to sift through vast amounts of data to identify people uploading or downloading content that could be connected to terrorism \u2013 such as bomb-making guides and hostage videos.<\/p>\n

In the process, however, CSE combs through huge volumes of data showing uploads and downloads initiated by Internet users not suspected of any wrongdoing.<\/p>\n

In a top-secret PowerPoint presentation<\/a>, dated from mid-2012, an analyst from the agency jokes about how, while hunting for extremists, the LEVITATION system gets clogged with information on innocuous downloads of the musical TV series Glee<\/a>.<\/p>\n

CSE finds some 350 \u201cinteresting\u201d downloads each month, the presentation notes, a number that amounts to less than 0.0001 per cent of the total collected data.<\/p>\n

The agency stores details about downloads and uploads to and from 102 different popular file-sharing websites, according to the 2012 document, which describes the collected records as \u201cfree file upload,\u201d or FFU, \u201cevents.\u201d Only three of the websites are named: RapidShare<\/a>, SendSpace<\/a>, and the now defunct MegaUpload.<\/p>\n

SendSpace said in a statement that \u201cno organization has the ability\/permission to trawl\/search Sendspace for data,\u201d adding that its policy is not to disclose user identities unless legally compelled. Representatives from RapidShare and MegaUpload had not responded to a request for comment at time of publication.<\/p>\n

LEVITATION does not rely on cooperation from any of the file-sharing companies. A separate secret CSE operation codenamed ATOMIC BANJO obtains the data directly from internet cables that it has tapped into, and the agency then sifts out the unique IP address of each computer that downloaded files from the targeted websites.<\/p>\n

The IP addresses are valuable pieces of information to CSE\u2019s analysts, helping to identify people whose downloads have been flagged as suspicious. The analysts use the IP addresses as a kind of search term, entering them into other surveillance databases that they have access to, such as the vast repositories of intercepted Internet data shared with the Canadian agency by the NSA and its British counterpart Government Communications Headquarters.<\/p>\n

If successful, the searches will return a list of results showing other websites visited by the people downloading the files \u2013 in some cases revealing associations with Facebook or Google accounts. In turn, these accounts may reveal the names and the locations of individual downloaders, opening the door for further surveillance of their activities.<\/p>\n

Since the secret 2012 presentation about LEVITATION was authored, both RapidShare and SendSpace have toughened security by encrypting users\u2019 connections to their websites, which may have thwarted CSE\u2019s ability to target them for surveillance. But many other popular file-sharing sites have still not adopted encryption, meaning they remain vulnerable to the snooping.<\/p>\n

As of mid-2012, CSE was maintaining a list of 2,200 particular download links that it regarded as connected to suspicious \u201cdocuments of interest.\u201d Anyone clicking on those links could have found themselves subject to extra scrutiny from the spies.<\/p>\n

While LEVITATION is purportedly identifying potential terror threats, Canadian legal experts consulted by CBC News were concerned by the broad scope of the operation.<\/p>\n

\u201cThe specific uses that they talk about in this [counter-terrorism] context may not be the problem, but it\u2019s what else they can do,\u201d said Tamir Israel, a lawyer with the University of Ottawa\u2019s Canadian Internet Policy and Public Interest Clinic. Picking which downloads to monitor is essentially \u201ccompletely at the discretion of CSE,\u201d Israel added.<\/p>\n

The file-sharing surveillance also raises questions about the number of Canadians whose downloading habits could have been swept up as part of LEVITATION\u2019s dragnet.<\/p>\n

By law, CSE isn\u2019t allowed to target Canadians. In the LEVITATION presentation, however, two Canadian IP addresses that trace back to a web server in Montreal appear on a list of suspicious downloads found across the world. The same list includes downloads that CSE monitored in closely allied countries, including the United Kingdom, United States, Spain, Brazil, Germany and Portugal.<\/p>\n

It is unclear from the document whether LEVITATION has ever prevented any terrorist attacks. The agency cites only two successes of the program in the 2012 presentation: the discovery of a hostage video through a previously unknown target, and an uploaded document that contained the hostage strategy of a terrorist organization. The hostage in the discovered video was ultimately killed, according to public reports.<\/p>\n

A CSE spokesman told The Intercept <\/em>and CBC News in a statement: \u201cCSE is legally authorized to collect and analyze metadata, including from parts of the Internet routinely used by terrorists. Some of CSE`s metadata analysis activities are designed to identify foreign terrorists who use the Internet to conduct activities that threaten the security of Canada and Canadian citizens.<\/p>\n

\u201cCSE does not direct its activities at Canadians or anyone in Canada, and, in accordance with our legislation, has a range of measures in place to protect the privacy of Canadians incidentally encountered in the course of these foreign intelligence operations.\u201d<\/p>\n

The spokesman declined to comment on whether LEVITATION remained active, and would not provide examples of useful intelligence gleaned from the spying, or explain how long data swept up under the operation is retained.<\/p>\n

Discussion of \u201coperations, methods or capabilities,\u201d the spokesman said, would breach the Security of Information Act, a Canadian law designed to protect state secrets.<\/p>\n

Go to Original \u2013 firstlook.org<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

The covert operation, revealed Wednesday [28 Jan 2015] by CBC News in collaboration with The Intercept, taps into Internet cables and analyzes records of up to 15 million downloads daily from popular websites commonly used to share videos, photographs, music, and other files.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[60],"tags":[],"class_list":["post-53280","post","type-post","status-publish","format-standard","hentry","category-whistleblowing-surveillance"],"_links":{"self":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/53280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/comments?post=53280"}],"version-history":[{"count":0,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/53280\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/media?parent=53280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/categories?post=53280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/tags?post=53280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}