Panopticon of global surveillance

[Magda Hassan]

The NSA's power largely comes from its myth of being super-smart and hyper-competent. So much for that.

Spying Blind

The National Security Agency has an intelligence problem: It won't admit how dumb it is.

BY SHANE HARRIS | AUGUST 16, 2013

The Obama administration's claim that the NSA is not spying on Americans rests on a fundamental assertion: That the intelligence agency is so good at distinguishing between innocent people and evildoers, and is so tightly overseen by Congress and the courts, that it doesn't routinely collect the communications of Americans en masse.


We now know that's not true. And we shouldn't be surprised. The question is, why won't the NSA admit it?
On Thursday night, the Washington Post released a classified audit of NSA's intelligence-gathering systems, showing they are beset by human error, fooled by moving targets, and rely on so many different servers and databases that NSA employees can't keep tabs on all of them.
It had been previously reported that the NSA had unintentionally collected the communications of Americans, in violation of court orders, as it swept up electronic signals in foreign countries. But officials had sought to portray those mistakes as limited, swiftly corrected, and not affecting that many people.
Wrong again.
One of the reasons that the NSA has been able to gather so much power is that the agency has built a reputation over the years for super-smarts and hyper-competence. The NSA's analysts weren't just the brainiest guys in the room, the myth went; they were the brightest bulbs in the building. The NSA's hackers could penetrate any network. Their mathematicians could unravel any equation. Their cryptologists could crack any cipher. That reputation has survived blown assignments and billion-dollar boondoggles. Whether it can outlast these latest revelations is an open question.


The Post found that the NSA "has broken privacy rules or overstepped its legal authorities thousands of times each year since Congress granted the agency broad new powers in 2008..." That's the year when NSA's global surveillance system went into hyperdrive. The agency was granted unprecedented authority to monitor communications without individual warrants and to surveil whole categories of people and communications.
Most of the violations affecting Americans' information were the result what the agency calls "incidental collection." So how many Americans were caught up in the NSA's surveillance nets as they were dragged across supposedly foreign targets? The exact number is unclear. But the short answer is: lots and lots of them.
In one instance, a programming glitch collected a "large number" of calls from Washington, D.C, instead of the intended targets in Egypt, according to the audit. Somehow, the area code 202 (for Washington) was keyed instead of 20 (the country code for Egypt.) The NSA's supposedly discriminating surveillance architecture was undone by a typo.
The audit reveals a recurring problem with human error in the day-to-day operations of global surveillance and shows what a messy and imprecise business it can be. In the first quarter of 2012, 123 incidents of non-compliance with the rules, or 63 percent of those examined, were attributed to human or operator error. These included typographical errors, inaccurate or overbroad search queries, and what the report calls "inaccurate or insufficient research information and/or workload issues."
Analysts needed more "complete and consistent" information about their targets to avoid errors, the audit found. This suggests that while the NSA's collection systems are dipping into data streams, the analysts aren't always equipped to determine who is and isn't a legitimate target.
The NSA's systems also have problems knowing when a target is on the move, and possibly has entered the United States. (When he does, different regulations come into play about how the surveillance is authorized and what can be monitored without approval from the court.)
As recently as 2012, NSA was not always able to know when targets using a mobile phone had crossed a U.S. border. These so-called "roamers" accounted for the largest number of technological errors in the violations that were examined.
A problem discovered last year, which appears in the report under the heading "Significant Incidents of Non-Compliance," helps illustrate how NSA is collecting so much information that it can actually lose track of it and store it in places where it shouldn't be.
In February 2012, the NSA found 3,032 "files containing call detail records" on a server. A call detail record, or CDR, is analogous to a phone bill. It shows whom was called, when, and for how long. This is metadata, like what's collected today on all phone calls in the United States.

http://www.foreignpolicy.com/articles/20...telligence