FOIA the PRISM tech stack

http://www.nsa.gov/public_info/foia/submit_foia_request/foia_request_form.shtml

by merinid • 13 years ago

147 24 13 years ago

8ig82• 13 years ago

I'm not sure what this is all about, but even though it is _my_ government, I feel like submitting this form would add me to some monitoring list.

ianstormtaylor• 13 years ago

So, sadly true. I was sending a friend an email today about this entire thing and for the first time ever I questioned whether my email would be eavesdropped on by my own government. It was a horrible feeling.

8ig82• 13 years ago

Exactly. This loss of trust and credibility is a big deal. Once it's lost, I'm not sure what the government does to get it back.

sitkack3• 13 years ago

They don't need credibility, the chilling effects of knowing you are being watched are enough. You prevented yourself from actualizing your thought crime.

natrius• 13 years ago

Don't worry about it. Everyone's on the monitoring list.

sitkack3• 13 years ago

The nice thing about exposing what was already "known" is now so many people are talking about it openly. It is hard for the wolves to attack so many moving targets. What we need is for hundreds to file very narrowly focused FOIA requests that do not probe too deeply. They need to be fulfillable.

merinid2• 13 years ago

Good chances they are using http://en.wikipedia.org/wiki/Apache_Accumulo

JoachimSchipper2• 13 years ago

Do you have any specific reason to believe that?

adkatrit• 13 years ago

Why would they have a form to ask for records on yourself when they don't publish which records they have. This is like a game of Go Fish but with personal data.

merinid2• 13 years ago

Ooooh - http://www.pdl.cmu.edu/SDI/2013/slides/big_graph_nsa_rd_2013...

angersock• 13 years ago

Nice find.

This paper seems to suggest that a possible counter attack is to create bogus edges and adjacencies--thus fucking with the utility of a (sparse) adjacency matrix or attempts at having useful window sizes for BFS or the like.

I suspect, though, that any sort of attempt at that would somehow be thwarted and just cause more pain on the attempting party.

timClicks• 13 years ago

I find this especially interesting coupled with Cray's YarcData graph analytics hardware called Urika, which has 512 terabytes in memory. http://www.yarcdata.com/Products/

DigitalSea• 13 years ago

Nice try, NSA. You're not getting any more of my information.

downandout2• 13 years ago

Unfortunately, despite the disturbing fact that we are reading about PRISM (disturbing both that it exists and that our government can't keep highly sensitive secrets), it is classified Top Secret until September 1, 2036. I could be wrong but I believe that FOIA requests regarding it will fail until then.

dlitz2• 13 years ago

> disturbing both that it exists and that our government can't keep highly sensitive secrets

Why could it be disturbing that a government's officials can't keep secrets about cases where they abuse their power or act against the public interest? Isn't that how democratic institutions are supposed to be designed?

downandout2• 13 years ago

It's disturbing because if things as sensitive as this are leaking, it means other things will leak that could cost lives.

sitkack3• 13 years ago

Or it was leaked on purpose to let everyone know that they should, "shut the fuck up." Or be watched?

monkmartinez• 13 years ago

http://www.youtube.com/watch?v=TuET0kpHoyM

Sami_Lehtinen• 13 years ago

No SSL/TLS, great job. Well, I assume AES crypto wouldn't bother them anyway. ;) Because it wouldn't be smart to make standard crypto which would blind them.

damianball• 13 years ago

If I remember correctly, Verisign has indicated they would be willing to create a trusted root level certificate for the government to spoof the ssl of any domain... so I don't know if SSL is enough, unless you only allow CAs you've created or you trust.

JoachimSchipper2• 13 years ago

For all you PGP fanatics, consider (from http://33bits.org/2011/03/09/link-prediction-by-de-anonymiza..., a blog which I highly recommend) the sentence "During (...) 2007-2009, Shmatikov and I (...) showed how to take two graphs representing social networks and map the nodes to each other based on the graph structure alone—no usernames, no nothing."

Tinfoil won't save you this time.

csears2• 13 years ago

I just submitted the form and got the following error. Might be time to upgrade that ColdFusion formmail script, guys.

http://www.nsa.gov/applications/forms/foiaemail.cfm

Internal Server Error - Read

The server encountered an internal error or misconfiguration and was unable to complete your request. Reference #3.a447da3f.1370606557.3a7abfb

csears2• 13 years ago

Also, they appear to be redirecting all HTTPS requests to HTTP. Try it: https://www.nsa.gov/public_info/foia/submit_foia_request/foi...

Configuration mistake or force of habit?

FOIA the PRISM tech stack

Related Stories