national security agency

Facebook's outmoded Web crypto opens door to NSA spying

Secret documents describing the National Security Agency's surveillance apparatus have highlighted vulnerabilities in outdated Web encryption used by Facebook and a handful of other U.S. companies.

Documents leaked by former NSA contractor Edward Snowden confirm that the NSA taps into fiber optic cables "upstream" from Internet companies and vacuums up e-mail and other data that "flows past" -- a security vulnerability that "https" Web encryption is intended to guard against.

But Facebook and a few other companies still rely on an encryption technique viewed as many years out of date, which cryptographers … Read more

Surveillance 'partnership' between NSA and telcos points to AT&T, Verizon

Want to play a game of "guess who?"

A newly disclosed top secret document lauds the National Security Agency's "productive" and long-standing surveillance "partnership" with a pair of telecommunications providers -- that permitted tapping into their fiber links -- but without naming names.

This is where things get interesting for clue sleuths.

Even in the top-secret document published by the Guardian today, the firms are described only as "Company A" and "Company B." But the NSA's inspector general did disclose that, at the time the program was being … Read more

Secret court lifts veil, slightly, on Google, Microsoft lawsuits

The most secretive court in the nation, which has been criticized for authorizing domestic surveillance by the National Security Agency, has taken a tiny step toward openness in lawsuits brought by Google and Microsoft.

CNET has learned that Reggie Walton, the presiding judge of the Foreign Intelligence Surveillance Court, told the Obama administration last week that -- barring any objections from the government -- he would take the unusual step of disclosing procedural information about the Internet companies' litigation.

The Department of Justice responded yesterday by saying it had no objections. Neither Google nor Microsoft's legal briefs "contain … Read more

Data, meet spies: The unfinished state of Web crypto

Revelations about the National Security Agency's surveillance abilities have highlighted shortcomings in many Internet companies' security practices that can expose users' confidential communications to government eavesdroppers.

Secret government files leaked by Edward Snowden outline a U.S. and U.K. surveillance apparatus that's able to vacuum up domestic and international data flows by the exabyte. One classified document describes "collection of communications on fiber cables and infrastructure as data flows past," and another refers to the NSA's network-based surveillance of Microsoft's Hotmail servers.

Most Internet companies, however, do not use an privacy-protective encryption technique … Read more

Student group files complaint against U.S. firms over NSA data snooping

A student group has charged several U.S. technology companies with violations of European law for allegedly cooperating with the NSA to collect data on private citizens.

Known as Europe-v-Facebook (EVF), the group of Austrian students announced Wednesday that it filed formal complaints with the EU against Facebook, Apple, Microsoft, Skype, and Yahoo. The group contends that since the five companies do business in Europe through subsidiaries, they fall under European privacy laws.

Such laws allow the export of data only if the company's European subsidiary can guarantee an "adequate level or protection" in the home country. … Read more

How Web mail providers leave door open for NSA surveillance

Billions of supposedly private e-mail messages a day flow through unsecured links, where they can be snared in digital dragnets operated by the National Security Agency and other intelligence services.

Recent revelations about NSA surveillance -- including a top-secret document discussing "collection of communications on fiber cables and infrastructure as data flows past" -- have highlighted the ease with which government eavesdroppers can exploit the Internet's infrastructure. Another classified document, which the Guardian published Thursday, mentions network-based surveillance of Hotmail servers.

Over the last decade or so, Web mail providers began to turn on encryption to armor the connectionsRead more

North Korea calls U.S 'kingpin of human rights abuses' following NSA leaks

North Korea has pounced on the recent revelations of NSA snooping to take a few digs at the United States.

Minju Joson, the country's state-run newspaper, lashed out at the U.S. in the wake of leaks from National Security Agency whistleblower Edward Snowden that the NSA has been collecting data on U.S. citizens under a secret program known as PRISM. Snowden also said last week that the U.S. has been hacking into computers in China and Hong Kong for the past several years.

A commentary in Minju Joson called the U.S. "a kingpin of human rights abusesRead more

Body scanner ruling could squelch NSA domestic spying

A high-profile group of technologists and privacy advocates is attempting to halt domestic surveillance of Americans through a clever twist: using federal bureaucratic rules against federal bureaucrats.

In a request today to National Security Agency director Keith Alexander and Defense Secretary Chuck Hagel, the group argues that the NSA's recently revealed domestic surveillance program is "unlawful" because the agency neglected to request public comments first. A federal appeals court previously ruled that was necessary in a lawsuit involving airport body scanners.

"In simple terms, a line has been crossed," Marc Rotenberg, executive director of the … Read more

Snowden: Feds can't plug leaks by 'murdering me'

Edward Snowden, the one-time U.S. government analyst responsible for the most high-profile leaks from the National Security Agency in its history, is explaining his decision to disclose top-secret documents in a live chat hosted by the U.K.-based Guardian newspaper.

Snowden, 29, is reportedly still in Hong Kong after leaving his home and girlfriend in Hawaii. His disclosures about NSA surveillance, including acquiring logs of millions of Americans' domestic phone calls, have left the Washington establishment reeling. On Sunday, former Vice President Dick Cheney called him a "traitor."

In his responses to questions on Monday from … Read more

NSA spying flap extends to contents of U.S. phone calls

The National Security Agency has acknowledged in a new classified briefing that it does not need court authorization to listen to domestic phone calls, a participant in the briefing said.

Rep. Jerrold Nadler, a New York Democrat, disclosed on Thursday that during a secret briefing to members of Congress, he was told that the contents of a phone call could be accessed "simply based on an analyst deciding that."

If the NSA wants "to listen to the phone," an analyst's decision is sufficient, without any other legal authorization required, Nadler said he learned. "I … Read more