Bruce Schneier

 
 

Schneier on Security

A blog covering security and security technology.

« Movie Clip Mistaken for Al Qaeda Video | Main | Cheating on Tests »

May 25, 2006

Winkler on NSA Spying

Ira Winkler on why the NSA spying hurts security.

Posted on May 25, 2006 at 8:30 AM11 CommentsView Blog Reactions

To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter.

Comments

Swamping the FBI with NSA 'leads' -- all positives, which will be virtually all false positives -- will so overload the Bureau that they will have no choice but to pencil-whip the items into the bit bucket as 'unfounded', never having time to give any of them honest consideration. Thus no real positives will be found, and it won't make a difference if they are present or absent.

The FBI should kick them all back to the NSA, charging the NSA with winnowing the wheat from the chaff.

If the FBI is to be stuck with them, then they should get most of the NSA's budget. Applying that principle will put a stop to this nonsense quickly.

Posted by: roy at May 25, 2006 9:13 AM


"None of those investigations turned up a legitimate lead. I have spoken to about a dozen agents, and they all roll their eyes and indicate disgust with the man-years of wasted effort being put into physically examining NSA "leads." "

Sooner or later, one of those factitious "leads" is going to look good enough to pursue, and some innocent person is going to acquire detailed personal knowledge of the criminal justice system.

Anyone who thinks this couldn't happen to them should google "Richard Jewell". If he'd found that bomb after 9/11 instead of before, he'd be in a Navy Brig today.

Posted by: Carlo Graziani at May 25, 2006 9:17 AM


Be thankful we're not getting all the government we're paying for.

-Will Rogers

Posted by: bob at May 25, 2006 9:45 AM


Quantity is antithetical to quality. This assertion cannot be made strong and loud enough. In this case, I would call to question exactly what data the government is getting from the phone companies: actual switch records (CDRs) or records processed (or even touched) by the phone companies. What's the error rate in these records? We all know it's not zero (ever get billed for a call you didn't make). Given the sheer volume of errors that will be present in this type of large data set, isn't the only thing we'll be sure of is to be wasting huge amounts time and resources?

Lou the troll

Posted by: Lou the troll at May 25, 2006 9:53 AM


There is one area Ira Winkler has not touched on that is "terorist evolution".

Put simply if it becomes known that certain types of people attract attention of the authorities the terorists will get to find out about it irespective of publicity. Then assuming they are even half way intelegent they will take defensive countermeasures to ensure they do not fall under suspicion.

An example of this actually in progress is the number of western born Muslims chosing to go and receive an education in Pakistan. Since it has become fairly widely known that such people will automatically attract the attention of the security services the number of young men going has droped.

So you average citizen let alone terorist has become aware that some lawfal activities are bringing them under suspician and have evolved into a different pattern of behaviour that either attracts less attention or no attention.

How long before they modify there other behaviour such as speaking to their relatives in "suspect countries" by phone, or other relatives who might be targeted and instead use good old fashioned letters for instance?

All tools blunt or otherwise become less effective with use. This is esspecially true of mass eavesdroping which cannot help but become known to the terorists within a very short time.

At best this type of behaviour provides vague pointers that need to be qualified by other means. This is true of all Elint activities, in fact the US reliance on SatTech and not on Human Intelagence on the ground has had some spectacular failiers of recent times...

Posted by: Clive Robinson at May 25, 2006 10:33 AM


@Clive

"All tools blunt or otherwise become less effective with use."

Apparently this applies to spell checkers too. ;-) Good points as always, tho [sic].

Posted by: 1915bond at May 25, 2006 10:46 AM


From the article:
"Congress is not exercising any backbone at all, and neither are its constituents -- a.k.a., you. "

This is a real problem. I'm not the type to march in the streets, and I think most of the non-extremist, law-abiding Americans who vehemently disagree with this policy are similarly unfamiliar and uncomfortable with protests stronger than a letter to their Senator.

Mine promised to safeguard our civil liberties, and then promptly recommended Gen. Hayden be confirmed for DCI as a man who will "speak truth to power".

There is disbelief at the utter lack of accountability in the face of each new scandal, and the rising cynicism is paralyzing.

But if there were a nonviolent protest organized by sane "normal" people happening tomorrow, I'd be there, because this needs to stop right now.

Posted by: Cowed and bulled at May 25, 2006 12:42 PM


The NSA broke the law because the President does not believe the law applies to him.
The King willfully and knowingly broken the FISA law under the logic that since the law was created by the Congress it does not apply to the Executive.
The King operates under the logic that any law that Congress makes that hampers his power is void.

All hail his Majesty George the Second

Posted by: AG at May 25, 2006 1:52 PM


I've been gnashing my teeth about this model since they proposed TIA - that the flood of data would make efficient collection/investigation more difficult, AND that the terrorists can develop methods to social engineer any pattern-based detection system.

Sen. Dianne Feinstein has lost my vote, permanently. She opined that a war over the 4th Amendment was brewing, but then voted to confirm a man who doesn't know what it says, and circumvented law by changing the standard from probable cause to reasonable belief.

Posted by: Nick Lancaster at May 25, 2006 3:19 PM


Witness the madness of King George.

Posted by: roy at May 25, 2006 4:28 PM


'To date, FBI agents have been sent out to do thousands of investigations based on this warrantless wiretapping. '

Isn't this how the brooklyn bridge plot was discovered?

Posted by: me at May 25, 2006 9:36 PM


Post a comment



Real names aren't required, but please give us something to call you. Conversations among several people called "Anonymous" get too confusing.



E-mail is optional and will not be displayed on the site.


Remember Me?


Powered by Movable Type 3.36. Photo at top by Steve Woit.

Schneier.com is a personal website. Opinions expressed are not necessarily those of BT.

 
Bruce Schneier