62 comments

[ 2.9 ms ] story [ 66.9 ms ] thread
"If one would give me six lines written by the hand of the most honest man, I would find something in them to have him hanged", Cardinal Richleu.

'Nothing to hide' privacy naysayers imagine innocence a perfect defense.

In practice a prosecution presents select facts in the order best suited to convict.

Under mass surveillance they have all the facts; the defense only has what one still possesses/ remembers.

With such resources, enough well cast aspersions could convict anyone of something.

Counter intuitively innocence can be harder to defend as the guilty will have prepared alabis. (part2 @)

Lawyers advise their clients not to talk freely to police for very good reason.@

@ https://www.youtube.com/watch?v=6wXkI4t7nuc

I wonder if this means that the NSA's definition of "collect" has conveniently reverted back to the widely accepted meaning.

Their previous defense was that "collect" meant to actually inspect the information.

(comment deleted)
What's best as a society is to fight. What's best as an individual is to conform.
Western press always mocks eastern countries because of their policies around surveillance and censorship to restrict free speech. They rarely report on what is going on around here.
They are two different worlds. There's no comparison. In the west, with cases like these, and people like Snowden, we're trying to defend our free speech and privacy by our standards. We're doing alright, but there are some big problems to solve. And yes, the media needs to cover this more.

But comparing this to censorship and related problems in China and Russia (single-party states with control of speech at the policy level) is just silly, for lack of a better word.

I think the point was more that maybe we should spend less time on others and more time on ourselves.
You didn't really address his argument other than to say it is silly?

In China it is very clear what is happening. In e.g. US it is all considered a secret. Everyone in China is aware of the "Great Big Firewall" and all the various laws restricting what you can and can not say.

Someone linked once to an article explaining that knowing of the existence of a monitoring system results in people changing their behaviors. This even though some of them support the system.

Seems easily comparable to me.

But which direction are we moving in?
This is like 2 prisoners arguing about their level of freedom.
I would argue that true freedom doesn't exist nor has it ever existed in the purest sense so what are we all arguing for?
We're arguing for our right to due process. Something that is thrown away when secret courts make such big decisions.
Well, here the 2 party system is like choosing between Coca Cola and Pepsi. Not very different from what happens with Communist countries.
Cool, so would ya mind voting for Trump since he is the same as Hilary anyway? ok, thx!
I don't know that I see one as concretely worse than the other though. I don't like either of them.
I think you have no idea what you're talking about.

Since you bring up "Communist countries," my grandfather lived in Communist Romania. He was beaten to death in jail over the course of two months on charges of possessing foreign currency [0]. My parents grew up with almost no food to eat, most of the time being tracked by the secret police, everywhere, black car following them home, informants at every corner, in every place they visited. A modern "Communist country" is North Korea. You can do some research on your own regarding that.

Yes, modern Russia and China aren't that bad. But comparing their single-party system (in which the party literally controls everything, and on many occasions silences dissent by "disappearing" people (read: killing them) ) with the United States, is in fact, just plain silly. Whoever pointed out that this is a bad way to argue is wrong. It is simply silly. Having the choice in two parties, where mostly anyone can, in theory, run, this is infinitely more free than a single-party state. People can make themselves known, they can speak what they want (look at Bernie), they can come out of nowhere without being carefully monitored and selected by a single party. Having the choice encourages politicians to at least somewhat work with the people's interest at heart, rather than just the interest of the party.

Your Coca Cola and Pepsi comparison is very myopic. If you cannot tell the difference between the two parties, especially at a time like this, you have no place discussing politics in any forum. Quick summary: one party is a center-right party trying increase funding to social services, the other is a far-right conservative party focused on the religious majority and traditional conservative values. There are many more things to them; the differences are tremendous. Read their Wikipedia pages, and those of their candidates.

Stop with these comparisons, guys. I know the state of affairs isn't great here, I know our media isn't focusing on the right things and we have huge problems with the NSA and privacy matters.

But be grateful for what we have, and appreciate that you live in a country where you will not be killed by the government for speaking too loud.

[0] https://en.wikipedia.org/wiki/Gheorghe_Ursu

> one party is a center-right party trying increase funding to social services, the other is a far-right conservative party focused on the religious majority and traditional conservative values

Stop drinking the soda. Those are the most colorful agendas which often result in 1 or 2 grand policy gestures to point at. In practice, the majority of the time is spent bolstering the businesses of donors. To whit, this is EXACTLY what communist countries produce, once they get the populace under control after a few purges.

Why go to the other side of the world? What about Canada, where we have hate speech laws and the CHRC?
> But comparing this to censorship and related problems in China and Russia (single-party states with control of speech at the policy level) is just silly, for lack of a better word.

I'm not so sure, I remember when Poland was under Russian control (before 1989). At least when you were making a phone call they had courtesy to say that your call is monitored.

Today the technology advanced so much that not only someone can listen your conversation, but also all of your conversation could be recorded and stored for years. Even if you don't care about that. Such information could be used to blackmail people in public offices allowing to control legislative and judicial branches. This itself endangers democracy.

Are you sure? Because it seems like they report on what is going on around here quite frequently.
We all knew it was coming, but dang that was fast.
Could someone clarify something for me?

As I understand it, PRISM is not a thing that lets the NSA willy nilly search the internal networks of companies they've onboard,

It is instead a thing for companies who would be the target of large volumes of these requests just because of their size to upload the data they're legally required to because of NSL or similar, in a rapid fashion.

Is this assessment correct?

PRISM is just one small program. There are many other ways the NSA collects your data.
As I understand it (so take it with a grain of salt) PRISM mandates that targeted companies collect and turn over data that matches a set of ("court-approved") guidelines without prompting[1].

This as opposed to the government finding probable cause, getting a warrant, and asking the company for the data (if they have it). Instead, the onus is placed on the company to comply with the guidelines set forth without first being asked.

It is unclear to me whether or not companies had to start collecting/reporting data they were otherwise discarding before, but this quote sounds like they are/were:

> "The NSA can use these PRISM requests to target communications that were encrypted when they traveled across the internet backbone, to focus on stored data that telecommunication filtering systems discarded earlier,[8][9] and to get data that is easier to handle, among other things.[10]"

[1] https://en.wikipedia.org/wiki/PRISM_(surveillance_program)

Is anyone aware of a source for this type of news that isn't quite so one-sided? It seems all we have is hyper-lefty "sky is falling" stuff and hard-charging right-wing "shut up kids, the government knows what's best for you."

I want reporting, not advocacy. The better of the mainstream press outlets are balanced to a fault but get the interesting details wrong or leave them out altogether. The fringe outlets target their core audience with lots of spun details and a lack of opposing viewpoint.

EDIT: If anyone can get past "lefty vs righty" and answer my core question I'd really appreciate it. This is a genuine query for information, not a clever way to troll.

I...hmmm...I don't know if my personal bias is influencing my perspective, but I usually find the EFF as a reasonable reporting source. They tend to fall on the left, but I struggle to see them as "hyper-lefty".

The key for me about the EFF is they are usually good at providing sources. I am going to take the time to read the linked Memorandum and Order document and form my own opinion:

> https://www.dni.gov/files/documents/20151106-702Mem_Opinion_...

Although, I do tend to agree with the EFF on a fair amount of issues (not always though).

My personal bias is way in favor of the EFF but the tone still irks me. And don't be fooled by footnotes! Unlike EFF, Wikipedia consciously strives for balance and they often come up way short, too. Any decent advocacy organization knows how to play the "references" game.
I agree with you, often the tone of EFF feels off. It can vary a lot by article.

I think this is evidence of a nascent tech community. We are fractured in our approach to some things (e.g. RMS vs others) and this shows in the varied responses by EFF.

I definitely don't agree with everything they have to say about tech and policy but I am glad they exist. They keep pretty good tabs on government and private company policy. Sometimes it feels weird when they criticize some private company for a policy which I feel is not a big deal, but I just register my disagreement and note they're not me ;-)

(comment deleted)
Those who care about the Fourth Amendment are probably more libertarian than anything, so left/right doesn't make sense for this particular issue.
Oh, come on. The Fourth Amendment has existed and been debated, challenged, abused, and defended long before libertarians were calling themselves a thing. Suggesting libertarians care about it more is just additional partisan nonsense. And it's partisan nonsense that doesn't make sense for this particular issue. Plenty of right-leaning Americans care about the 4th. Plenty of left-leaning Americans care about it, as well. We could maybe tease out some commonalities among them in relation to how they define the contours of Fourth Amendment issues. But beyond that, you're pretty much just making stuff up.

I realize there's a great many HNers who love to brandish their libertarian badges at every opportunity, but it makes for a really annoying echo chamber, and it creates unnecessary partisan division on issues we could otherwise rationally discuss.

Where's the fire?

Lowercase-L libertarian means that you care about liberty. I could have said "classical liberal," which would encompass modern libertarians and the Founders alike.

> echo chamber

I'm not getting a strong libertarian vibe from HN on anything except encryption/privacy, which is really ironic.

Advocacy is what most people want nowadays - reporting that resonates with your biases seems more fair (and thus, is trusted more) than reporting which might challenge your preconceptions. eff.org gets posted as often as it does because of its bias, not despite it.

Although to be fair, eff articles do get called out a lot on Hacker News as well - the userbase is diverse, any anything of interest will be argued from both sides, sometimes in good faith, sometimes not. But I think that's why biased articles are more likely to be posted than unbiased ones - the bias is what makes it seems interesting.

You don't have to be left wing to support privacy, in fact lots of right wing people including myself have it as one of their core beliefs.
I feel like you may perhaps be looking for this kind of news to show up in something akin to a legal or policy review/journal. Otherwise, I believe you'll find it difficult to locate a dispassionate presentation of the facts without too much editorializing.

On the other hand, even when disagreeing with others' conclusions, sometimes I like a bit of advocacy along with reporting, as it helps remind me people care.

So the FBI is now the equivalent of Gestapo, secret Police.
No, not yet, but they certainly can be. Handing this technology to the next J. Edgar Hoover -- and rest assured, there will be a next J. Edgar Hoover, even if Comey isn't him -- will be like giving an atomic bomb to that kid in high school that everybody was pretty sure would end up in jail.

If the judges and politicians had half a brain, they'd understand that they, and not us, will be the first to experience the downsides of a security state gone berserk.

A lost opportunity. Had they asked for the court orders from the FBI, that could set the framework for the future - information is collected, but cannot be searched without a court order. That could have been a decent compromise.

This is not going to be a popular opinion, but I think a compromise is necessary. There is no way to stand up to the train of data collection. For one, the public being afraid of this and that will demand to be protected at all costs, no matter how small the threat. The more scandalous the news cycle gets, the more panic we will see. And then the technology improves so fast, soon enough publicly installed video cameras will track everyone, and all within the constitutional framework.

A middle ground would be to create the fourth branch of the government that is tasked with data collection, but will only give it up on court order. Orders may be for individual incidents based on reasonable cause, or for data-mining, based on a judgement of proper scope.

Not so fast. The public was split on the Apple vs FBI case. As electronics penetrate deeper into our lives and identity thefts, spam, virus, social network attacks, credit card leaks, password leaks, etc become more common and more consequential, and the spread of the hopeless feeling about the lack of control of our data, we as a society are becoming more acquainted with security issues and more aware of why they are so important. I predict that governments will eventually be forced to come down on our side in the fight for maintaining our data private and secure.
> There is no way to stand up to the train of data collection. For one, the public being afraid of this and that will demand to be protected at all costs, no matter how small the threat.

I disagree. I think government data collection on citizens should not be allowed, period. I know many people external to tech who agree with me.

The issue occurs when government officials talk about terror attacks. If they were honest, and told anyone it never prevented a terror attack, more would be inclined to not be tracked.

Coupled with this, is the fact I don't trust the government databases not to get hacked, and neither does anyone else.

This opinion is about what the government can do with the data of non-citizens believed to be abroad.
I don't think you need a fourth branch; the judiciary should collect the data and determine when it can be searched.
Errr, reading the actual decision, i don't see a lot of support for the EFF's claims. It seems pretty cherry picked.

In fact it clearly states they can only retain stuff long term if the DOJ notifies them explicitly that they have a continuing litigation/preservation hold necessity (which is usually not the DOJ doing it,but say, a civil lawsuit that carries with it preservation obligations).

It also makes further clear that in all cases, the only people with access to most of any retained data is system administrators, not investigators, and that it can't be used for investigative purposes.

It does say general querying is allowed, but only people explicit 702 access rights are the ones who must be making such queries, or making such decisions. In all cases all records of who accessesd what with what query terms and their access level are explicitly logged, etc.

It also explicitly states that information acquired under section 702 will not be introduced as evidence against a person in a criminal proceeding, without 1. Explicit approval of the attorney general 2. in criminal cases related to national security crimes

In any case, this is not new, this viewpoint is something going back to FISC precedent from 2002.

So it's not like this just happened.

Additionally, the statute is pretty clear here.

It says: " (h) “Minimization procedures”, with respect to electronic surveillance, means—

... (3) notwithstanding paragraphs (1) and (2), procedures that allow for the retention and dissemination of information that is evidence of a crime which has been, is being, or is about to be committed and that is to be retained or disseminated for law enforcement purposes; and"

So again, nothing new here, this has been law for quite a while.

In short, i may hate a lot of things about FISA/FISC/etc, but i think the EFF is stretching to say this is a new problem, or to blame the court for it.

Why is this being downvoted without any attempt at refutation? When I dug in I came to similar conclusions.
"Please resist commenting about being downvoted. It never does any good, and it makes boring reading." https://news.ycombinator.com/newsguidelines.html
(comment deleted)
I'm familiar with policy. With my comment I started the interesting discussion you are now reading. The original comment (not mine) was buried and greyed out at the time I pointed out the improper downvoting. I felt it deserved to be read and responded to.
From the article:

"____Once it has communications in its custody, those limitations no longer apply____ and the government can troll through it for whatever law enforcement purpose it wants without having to worry about getting a pesky warrant." (emphasis mine)

You're not addressing this which I think is the point.

The relevant section from the ruling's conclusion:

"The government shall promptly submit in writing a report concerning each instance after December 4, 2015, in which FBI personnel receive and review Section 702-acquired information that the FBI identifies as concerning a United States person in response to a query that is not designed to find and extract foreign intelligence information. The report should include a detailed description of the information at issue and the manner in which it has been or will be used for analytical, investigative, or evidentiary purposes. It shall also identify the query terms used to elicit the information and provide the FBI's basis for concluding that the query is consistent with the applicable minimization procedures."

In other words, the FBI can query for data related to US persons without a warrant and justify it later with a report to the FISC.

""____Once it has communications in its custody, those limitations no longer apply____ and the government can troll through it for whatever law enforcement purpose it wants without having to worry about getting a pesky warrant." (emphasis mine)"

Except, I did: This is, as i pointed out, exactly what the statute allows and has been allowed since 2002!

Again, see In Re: Sealed Case, 310 F.3d 717 (F.I.S.C. 2002) which makes very clear this is the case: "The minimization procedures allow, however, the retention and dissemination of non-foreign intelligence information which is evidence of ordinary crimes for preventative or prosecutorial purposes. See 50 U.S.C. § 1801(h) (3). "

This isn't new by a longshot, and it's been okay'd by other courts other than this one, because that's what the statute says.

In fact, In Re Sealed case came about, because the FISA court tried to stop what the EFF is complaining about, and the government appealed. That is, their decision was "you can't use this for ordinary crimes". The government appealed, the reviewing court said fisa must allow them to use it for what they want, as per the statute.

So yeah, blaming the FISA court is silly, since they tried to stop this once already.

And calling this new or news is 14 years too late.

Except, you didn't.

None of your previous references make clear what the reference you just added now does which is that the minimization procedures allow for retention and dissemination of __non-foreign intelligence__ information which is evidence of __ordinary crimes__.

I can see in your previous comment where that might have been what you meant but leaving out the keywords I emphasized is cause for confusion.

In any case, arguing over whether or not the content of this statute is "news" is just a distraction.

The EFF is challenging this statute and its application as unconstitutional under the Fourth Amendment. Despite the amicus agreeing at least in part, the court decided to uphold the statute and to continue allowing warrantless querying for ordinary crimes.

News or not, this is cause for concern and I applaud the EFF in its efforts to do something about it.

If you read the opinion, instead of the PR, it makes clear exactly what I said, with citations and everything. So I'm just going to assume you didn't bother to read it.

The EFF has done literally nothing here except the press release and blaming a court that already took the EFF's position once and got beat down for it. I don't applaud them when they know this, and write a press release blaming the court, instead of complaining how hamstrung they are by precedent.

This is not effective advocacy in and way, shape, or form.

> it makes clear exactly what I said

It does make clear what you tried to say. Leaving out keywords makes it hard to have a productive conversation.

> This is not effective advocacy in and way, shape, or form.

Thanks to the EFF, among others, we have access to secret rulings by secret courts, something that shouldn't even exist in this country.

When the court upholds legal precedent and current statutes to allow warrantless querying of indiscriminately collected data by the FBI for ordinary crimes, many concerned citizens and casual observers would like to know about it. Again, more thanks to the EFF.

While it seems to be your focus here and elsewhere on this thread, I'm not interested in debating whether these rulings amount to "news" or "PR" opportunities for the EFF. If you do have alternative sources for info on FISC, its rulings and other legal apparatus involved in trampling Fourth Amendment rights, I'd be glad to check them out.

"Thanks to the EFF, among others, we have access to secret rulings by secret courts, something that shouldn't even exist in this country. "

Let's be 100% super clear here. This is not thanks to the EFF in any way, shape, or form. To claim otherwise is to simply deny history.

"While it seems to be your focus here and elsewhere on this thread, I'm not interested in debating whether these rulings amount to "news" or "PR" opportunities for the EFF."

Earlier, and here, you seem super-interested in fawning over the EFF at every possible opportunity. So i guess i'll just say that i'm not interested in watching you white knight for an organization that loves to pat itself on the back for other people's accomplishments.

The EFF does good for sure, but like most advocacy based organizations they have to make themselves appear effective to get funding, and they often do that by making themselves look like they are more seriously involved in good outcomes than they really are.

I think they are blaming the court for finding the statute you quoted is constitutional, when they believe it clearly should not be. Warrantless mass surveillance is bad enough for the special purpose of national security. It's obvious they would never be allowed to perform the same exact wiretaps directly for use in non-national security cases. So why is the obvious loophole a get-out-of-Constitution free card?

Information aquired under 702 may not be introduced.... Exactly, we call this parallel construction.

Those limits on retention you mention, which don't apply to evidence of a crime which has been, is being, or could possibly be committed (aka "about")... are those the same limits FISA just recently blasted NSA for not following and hiding from the court that they weren't following? [1]

They are not saying this is a new problem. This is a very old problem and also a very big problem. And for finding this constitutional, the only one to blame is the court.

[1] - http://www.politico.com/blogs/under-the-radar/2016/04/govern...

> It's obvious they would never be allowed to perform the same exact wiretaps directly for use in non-national security cases.

There is no "national security" exception to the 4th amendment. At least in theory, these are communications that wouldn't require a warrant but for FISA, because they involve communications with foreign non-citizens.

It's hard to keep up -- my understanding is "meta-data" is mass collected for Americans talking to Americans, and does this mean it can, and we will see that data being bulk mined for "crimes" just by entering someone's name? Or are you saying that this part isn't overseen by FISA?
" think they are blaming the court for finding the statute you quoted is constitutional,"

But they did that many years ago, yet eff acts as if this is new.

You are not refuting EFF's claim that the FBI can use the NSA's "terrorism" data for common criminal cases. All you are saying is that there are procedures that the FBI has to go through and that it's not a new thing.
I'm not refuting it because it's not new. The FISC court decided that back in 2002. See In Re Sealed case: 310 F.3d 717:

http://law.justia.com/cases/federal/appellate-courts/F3/310/...

" The "wall" emerges from the court's implicit interpretation of FISA. The court apparently believes it can approve applications for electronic surveillance only if the government's objective is not primarily directed toward criminal prosecution of the foreign agents for their foreign intelligence activity. " ...

The minimization procedures allow, however, the retention and dissemination of non-foreign intelligence information which is evidence of ordinary crimes for preventative or prosecutorial purposes. See 50 U.S.C. § 1801(h) (3). Therefore, if through interceptions or searches, evidence of "a serious crime totally unrelated to intelligence matters" is incidentally acquired, the evidence is "not ... required to be destroyed." H. REP. at 62 (emphasis added)."

(note the house report cite: This is in fact, what congress intended) Again, this came about because the FISA court tried to put a stop to these shenanigans back in 2002 and then the reviewing court reversed them. So now they let it go, as they are required to.

Man... this is depressing...

I'm counting on you lot at HN and beyond to create the technology allowing widespread encryption that makes such surveillance moot.