Saturday, June 15, 2013

Obama's power grab: Column
...The justification for giving the government a lot of snooping power hangs on two key arguments: That snooping will make us safer and that the snooping power won't be abused.

Has it made us safer? Anonymous government sources quoted in news reports say yes, but we know that all that snooping didn't catch the Tsarnaev brothers before they bombed the Boston Marathon -- even though they made extensive use of email and the Internet, and even though Russian security officials had warned us that they were a threat. The snooping didn't catch Major Nidal Hasan before he perpetrated the Fort Hood Massacre, though he should have been spotted easily enough. It didn't, apparently, warn us of the Benghazi attacks -- though perhaps it explains how administration flacks were able to find and scapegoat a YouTube filmmaker so quickly . But in terms of keeping us safe, the snooping doesn't look so great....

CBS News: Someone was pulling data from Sharyl Attkisson’s computer; Update: CBS report added
...“A cyber security firm hired by CBS News has determined through forensic analysis that Sharyl Attkisson’s computer was accessed by an unauthorized, external, unknown party on multiple occasions late in 2012. Evidence suggests this party performed all access remotely using Attkisson’s accounts. While no malicious code was found, forensic analysis revealed an intruder had executed commands that appeared to involve search and exfiltration of data....

...What was going on in “late 2012″? Well, that would have been the controversy over the terrorist attack on our consulate in Benghazi. And, checking the record, we see that Attkisson had a very interesting scoop on October 20th, relying on anonymous military sources that called into question the Obama administration’s claim that they couldn’t have responded in time to assist in the attack...

NSA gets early access to zero-day data from Microsoft, others
The National Security Agency (NSA) has used sensitive data on network threats and other classified information as a carrot to gain unprecedented access to information from thousands of companies in technology, telecommunications, financial, and manufacturing companies, according to a report by Michael Riley of Bloomberg. And that data includes information on “zero-day” security threats from Microsoft and other software companies, according to anonymous sources familiar with the data-swapping program.

The NSA isn’t alone in the business of swapping secrets with the corporate world. The FBI, CIA, and Department of Defense (DOD) also have programs enabling them to exchange sensitive government information with corporate “partners” in exchange for access to things like information on cyberattacks, traffic patterns, and other information that relate to network security....

Bloomberg: Spy agencies sharing data with “thousands” of firms
... Thousands of technology, finance and manufacturing companies are working closely with U.S. national security agencies, providing sensitive information and in return receiving benefits that include access to classified intelligence, four people familiar with the process said.

These programs, whose participants are known as trusted partners, extend far beyond what was revealed by Edward Snowden, a computer technician who did work for the National Security Agency. The role of private companies has come under intense scrutiny since his disclosure this month that the NSA is collecting millions of U.S. residents’ telephone records and the computer communications of foreigners from Google Inc (GOOG). and other Internet companies under court order.

Many of these same Internet and telecommunications companies voluntarily provide U.S. intelligence organizations with additional data, such as equipment specifications, that don’t involve private communications of their customers, the four people said....

...Some U.S. telecommunications companies willingly provide intelligence agencies with access to facilities and data offshore that would require a judge’s order if it were done in the U.S., one of the four people said.

In these cases, no oversight is necessary under the Foreign Intelligence Surveillance Act, and companies are providing the information voluntarily....