NSA Rejection of Digital FOIA

http://blog.jarrett.io/post/53847082072/nsa-response-to-foia-request

by jstreebin • 13 years ago

184 55 13 years ago

blog.jarrett.io

johng• 13 years ago

We can't tell you if we are monitoring you. Or what capabilities for monitoring we have. Despite you being a US citizen which we would have no reason to monitor.

Scary stuff folks.

sageikosa• 13 years ago

You can't expect the secret police to divulge their secrets.

whaevr• 13 years ago

Ooh gestapit..

PavlovsCat• 13 years ago

Just like you can't expect a scorpion not to sting? So far, the main argument for the continued existence of secret police A is the existence of antagonistic secret police B. Even the "bad guys".

Sounds like a great opportunity for an AI of the future: "find any group of people working together against everyone else, start subtracting members from the group until coherence reaches 0". That would deal with the spooks and the ones that create work for them in one swoop. Ahhh, I can dream, can't I.

sliverstorm2• 13 years ago

If they are trying to avoid divulging capabilities to foreign agencies, what does your citizenship have to do with anything? "I know it's Top Secret, but I'm a citizen! It's ok, you can tell me"

sawyer• 13 years ago

Last week: We'd be happy to respond to requests submitted via the handy dandy online form - these paper copies are invalid.

Today: We're sorry, if we told you of the existence or non-existence of data about you it would help terrorists.

fnordfnordfnord• 13 years ago

"I know," says spook1 to spook2, "We'll put up a web page where the rubes can enter their address, and have it automatically send them a FOIA_GLOMAR_GO_JUMP_IN_A_LAKE_HA_HA.pdf"

redblacktree2• 13 years ago

They responded. They just denied the request.

genwin• 13 years ago

tl;dr:

Dear FOIA requestor,

You get nothing, by law. It's for your own protection.

Sincerely,

NSA

driverdan• 13 years ago

Jarrett, can you post higher res images or an OCRed version? Those images are so small the text is about 4pt on my screen.

jstreebin4• 13 years ago

Sure thing, gimme a sec

jstreebin4• 13 years ago

https://www.dropbox.com/sh/b8d4bb9pfgryj3t/mGBrXRzkkY

Lmk if this helps

RyanMcGreal• 13 years ago

I cannot confirm or deny the existence or non-existence of a sense of humour, irony or shame on the part of the poor functionary who had to send out that response.

raintrees• 13 years ago

One of my favorite lines from Men In Black: "We at the FBI do not have a sense of humor that we are aware of."

fourply• 13 years ago

You missed a spot in p1 with the case number.

jstreebin4• 13 years ago

Oops, thanks

JunkDNA• 13 years ago

If you are the sort of person who is surprised by this, you need to get out from under the rock you live under. This is what any self-respecting intelligence gathering organization is going to say. Not revealing whether or not information exists (let alone the actual information itself) has been a staple of the trade from the very beginning of the intelligence community. This response would be identical regardless of current events.

edit: typos

jsmcgd• 13 years ago

Here's how I interpreted the letter: "We cannot confirm or deny the thing you requested exists because that thing you requested is classified". Unless all FOIA fail, it seems to me, in some broad sense, that they just confirmed the existence of the requested material.

ethomson• 13 years ago

I'm pretty sure that actually means that even the knowledge of existence is classified, as per the "details about them remain classified and/or protected from release..."

vorporeal• 13 years ago

I think it's more of "The information you requested, were it to exist, would be highly classified (due to its type), and therefore we can neither confirm nor deny its existence."

ctdonath2• 13 years ago

Read as "We cannot confirm or deny the thing you requested exists because if it exists/existed it would be classified, and that includes your request of whether it exists."

Stratoscope• 13 years ago

I'm no fan of the NSA, but you're right, the response made perfect sense to me. There's really no other way they could respond.

This isn't an exact parallel, but when I read their response and the reason for it, the first thought that came to mind was, "Oh, of course - it would be like a JavaScript timing attack."

rhizome• 13 years ago

They could have just offered the least untruthful answer instead.

llamataboot2• 13 years ago

I have gotten the same responses from the FBI many times for a FOIA request, though I have many associates questioned by the FBI, and I was detained in Ireland for possible hacking in the United States, so I assume I have a file. But anyway, same response of neither confirm nor deny from FBI about 4-5 times in last 10 years.

pyre2• 13 years ago

When applying for a foreign visa, they will probably require police records from your country of origin/citizenship. If you send in a request for records from the FBI, do they just send back a "Does Not Compute" answer, and then you're out of luck for preparing your visa application?

(assuming you're a US citizen)

dagw• 13 years ago

It's sometimes worth doing something you know will fail, just to find out exactly how it will fail.

joering2• 13 years ago

Were we to provide positive or negative responses to requests such as yours, our adversaries' compilation of the information provided would reasonably be expected to cause exceptionally grave damage to the national security.

simple as that: we can't tell you what you want to know, because we think you are a terrorist.

jasonkolb• 13 years ago

Absolute crap. Denied by an executive order, which is not legislated law and definitely does NOT supersede the law that put the FOIA process into place. This is garbage.

breakbread• 13 years ago

I received pretty much the exact same response in the mail yesterday.

http://i.imgur.com/CFgQ0eM.jpg

http://i.imgur.com/yVEvptE.jpg

http://i.imgur.com/inUUStL.jpg

http://i.imgur.com/qVGtdTj.jpg

vaadu• 13 years ago

I'm surprised they actually replied to you. A reply is admitting they exist, which they can not confirm nor deny.

pionar• 13 years ago

A reply does no such thing. They can say that your request is denied without even looking to see if the information exists first.

They're not saying, "It's there, we're just not going to admit it." They're saying "We're not even going to begin looking for it."

yebyen• 13 years ago

I think gp was saying: to reply to your letter is to confirm the existence of the body, the NSA itself, who received and replied to your request.

Now we know they exist!!!

coldcode• 13 years ago

Hmm what would happen if the entire (US) Hacker News readership sent in an FOIA request at the same time. Maybe we can destroy their photocopiers?

ctdonath2• 13 years ago

Taxes on American HN readers would increase accordingly to cover costs of buying & operating new copiers.

alanh• 13 years ago

Debt, rather. Expenses and taxes are divorced: it’s the deficit!

ghjm• 13 years ago

"Each agency may promulgate regulations, pursuant to notice and receipt of public comment, providing for the aggregation of certain requests by the same requestor, or by a group of requestors acting in concert, if the agency reasonably believes that such requests actually constitute a single request, which would otherwise satisfy the unusual circumstances specified in this subparagraph, and the requests involve clearly related matters."

They would just publish one response and send us all a link to it.

malkia• 13 years ago

Be careful! This might look in someone's eyes as subversive action.

schrodinger• 13 years ago

Ps, I've heard that apple will replace your iPhone for those purple specs in the pictures.

jstreebin4• 13 years ago

Oh sick! Thanks!

Yeah, my camera has gone to shit. I'll take it in next time I'm near a store

rsingel• 13 years ago

This what's known as a Glomar response: http://en.wikipedia.org/wiki/Glomar_response

That developed in law thanks to the press uncovering a secret, massive sunken-sub-raising boat built by Howard Hughes for the CIA to retrieve a lost Soviet sub (yes, the very thing that The Hunt for Red October was based on).

darkarmani• 13 years ago

Lower court precedent has thus far ruled the Glomar response to have potential merit, if the secretive nature of the material truly requires it, and only if the agency provides "as much information as possible" to justify its claim. Otherwise, the principles established in FOIA may trump claims to secrecy.

Is it required if they have no data collected and the subject isn't under investigation?

dfc• 13 years ago

Is what required?

sp3322• 13 years ago

When did the NSA start using Georgia? I always thought Times New Roman was more "official".

redblacktree2• 13 years ago

Awesome. A comment on typography. :)

sp3322• 13 years ago

Well, it's not like there's any content in this letter to look at :p

achughes• 13 years ago

NSA probably just wants to look more approachable /s

dsl• 13 years ago

Just recently: https://news.ycombinator.com/item?id=5844063

edraferi• 13 years ago

Surprisingly well-written response actually. Not too hard to figure out what they're talking about.

agarden• 13 years ago

The logic makes sense if you assume that the NSA is only using the data to target terrorists. In that scenario, the danger isn't that they will reveal to innocent civilians that they have your data. The danger is the precedent. Want to know if you are on their target list? File a FOIA. If they grant it, you're okay. If they deny it, you're in their sights.

But since we already know that they are collecting this metadata on absolutely everyone, I don't see what good it does to refuse to send it to you, whether you are a suspected terrorist or not. ...I suppose you could be fretting about whether you had slipped up and called Cousin Guido on your regular cell instead of a throw-away prepaid phone.

tsaoutourpants• 13 years ago

I hope that someone fights this. :) Just because the NSA determines that something is exempt from FOIA doesn't mean that their determination is lawful. I belive a court will rule that since it is entirely public that they've collected the information, as well as how they've collected it, and there have been government officials who have admitted to the program, their claim of exemption is improper.

NSA Rejection of Digital FOIA

Related Stories