Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Ex AT&T Tech Says NSA Monitors All Web Traffic

Posted by Zonk on Fri Nov 09, 2007 04:05 PM
from the tinfoil-hats-engaged dept.
Sir Tandeth writes "A former technician at AT&T, who alleges that the telecom giant forwards virtually all of its internet traffic into a 'secret room' to facilitate government spying, says the whole operation reminds him of something out of Orwell's 1984. Appearing on MSNBC's Countdown program, whistleblower Mark Klein told Keith Olbermann that all Internet traffic passing over AT&T lines was copied into a locked room at the company's San Francisco office — to which only employees with National Security Agency clearance had access. 'Klein was on Capitol Hill Wednesday attempting to convince lawmakers not to give a blanket, retroactive immunity to telecom companies for their secret cooperation with the government. He said that as an AT&T technician overseeing Internet operations in San Francisco, he helped maintain optical splitters that diverted data en route to and from AT&T customers. '"
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
    • by cavtroop (859432) on Friday November 09 2007, @04:13PM (#21300831)
      and there are pictures of the secret room at AT&T here [wired.com] Hmm, interesting. Two pictures of random signs that could be anywhere, and two pictures of the front of the building. None of which show anything remotely interesting. Incriminating stuff, that :) Not that I don't think they do this, just that the pictures are....underwhelming...
    • by PhreakinPenguin (454482) on Friday November 09 2007, @04:13PM (#21300839) Homepage Journal
      So if I post 4 images of the EXTERIOR of the main AT&T building, can I get modded informative too?
    • by purpledinoz (573045) on Friday November 09 2007, @04:17PM (#21300889)
      What's worse is that this will be justified under the guise of anti-terrorism. As bills get passed to erode the freedom of American's, I'm watching the US slowly descend into totalitarianism. Lets face it, Americans just don't care. And why should they? They live comfortable lives, entertained with Britney Spears and Paris Hilton. If they follow the rules, they won't get hassled. Things will have to get pretty bad until people wake up and realize what has happened.
      • by Threni (635302) on Friday November 09 2007, @04:30PM (#21301115)
        > What's worse is that this will be justified under the guise of anti-terrorism.

        http://en.wikipedia.org/wiki/Project_SHAMROCK [wikipedia.org]

        I'm not sure it's any worse than when it's justified by whatever the current bogeyman is. Could be terrorism, drugs, child porn, communism etc - it's always just a cover. Follow the money. Who gains from a powerful military, full prisons, terrible education and a fat, lazy corrupt police force?

      • by Luke Dawson (956412) on Friday November 09 2007, @04:32PM (#21301143)

        As bills get passed to erode the freedom of American's, I'm watching the US slowly descend into totalitarianism.
        Actually, it's a really clever way of defeating terrorism, one that the terrorists will never catch on to! You see, since they hate us for our freedom, if we eliminate all of these pesky freedoms, the terrorists will have nothing to hate us for anymore! See, it makes perfect sense :)
        • by vux984 (928602) on Friday November 09 2007, @05:25PM (#21301887)
          But alas, they don't hate us for our freedom and never have. So we're very busily and efficiently solving the wrong problem.

          They hate us because we've been meddling in their governments, undermining their sovereignty, propping up dictators favorable to us, invading them when those propped up dictators fall out favor, all for our own national self interests.

          I know your post was intended to be funny, and was, but the irony of situation is even worse.

          Taking away our freedoms will never stop foreign terrorists from hating us for jerking their countries around. But it might well spawn an outbreak of domestic terrorism if they keep at it. The Unabomber was just a prelude, as the very type of stuff he lashed out about is coming to pass.

            • by Anonymous Coward on Friday November 09 2007, @06:29PM (#21302585)
              And yet they don't bomb Mexico, Canada, Africa, Japan, Russia, etc even though they're all different cultures. You're fooling yourself if you think that our political actions don't put us towards the top of their shitlist.

              Indeed some muslims want to kill us all. Does that warrant spending over http://www.reuters.com/article/politicsNews/idUSN2450753720071024 [reuters.com]2 TRILLION dollars mostly borrowed from the Chinese to kill them? Our president spends money like a teenager with a credit card, without care for who's going to have to pay it back or the price of interest. That kind of short-sightedness is going to screw us over in the next 30 years.
              • by Das Modell (969371) on Friday November 09 2007, @08:51PM (#21303629)

                And yet they don't bomb Mexico, Canada, Africa, Japan, Russia, etc even though they're all different cultures. You're fooling yourself if you think that our political actions don't put us towards the top of their shitlist.

                America's position does put it at the top of the shitlist, but that doesn't mean that it's only targeted because of its foreign policies.

                Islamic fundamentalism is alive and well in Africa, and there's also fundamentalist and terrorist activity in Canada. Islamic fundamentalism is also a problem in Britain, Germany, France, Netherlands, Belgium, Sweden, Norway, Denmark, Spain, Italy and Australia.
            • by WallaceAndGromit (910755) on Friday November 09 2007, @06:50PM (#21302761) Homepage
              There are religious maniacs out there that hate our culture...

              What, like this one [amazon.com]?
                • by IgnoramusMaximus (692000) on Saturday November 10 2007, @03:57AM (#21305201)

                  Yes, O'Reilly is clearly far more dangerous than the global Jihad.

                  Well, actually, yes.

                  You see, all of the jihad is based on demagougery exploiting various, mostly unrelated, real or imagined grievances in the Arab world, and aims at creation of violence and warfare towards all and any comers who are unlike the target audience via indoctrination, lies, manipulation of facts etc and so on. At the forefront of the movement are loudmouth morons who spew constant stream of anti-everything-non-fundamentalist-Islam invective and rouse various sociopaths to action, mostly via small arms warfare combined with improvised explosives, punctuated by suicidal bomb attacks and a very rare spectacular terrorist assault on foreign soil, which results in few thousand casualties per year on average.

                  On the other hand we have demagougery exploiting various, mostly unrelated, real or imagined grievances in of the xenophobic, supremacist white subsectuion of American society, which aims at creation of violence and warfare towards all and any comers who are unlike the target audience via indoctrination, lies, manipulation of facts etc and so on. At the forefront of the movement are loudmouth morons who spew constant stream of anti-everything-non-white-upper-class-Christainst invective and rouse various sociopaths to action, mostly via large scale warfare, aerial bombardment and wholesale occupation of foreign nations, exctrajudicial imprisonment in Gulags, torture etc, with hundreds of thousands of casualties in Iraq alone in a period of 4 years.

                  In other words, O'Reilly, Coulter, Malkin etc are the ideological equivalents of Osama and various pontificating radical Imams in their various Madrassas. The difference is that their spew is empirically proven to be capable of causing vastly more damage and casualties than that of all the modern jihadis combined so far.

                  Perheaps that will change when the Pakistani nukes change hands to Taliban or Al-Queda and O'Reilly and Osama will start competing on more even terms.

                  None of which of course helps the more sane part of the humanity which is likely to caught in the crossfire caused by the blowhard morons of the world.

                  My dream is that one day all of the most insane of the violence promoting demagouges like O'Reilley, Coulter and Osama are all caught, given flamethrowers or some such and sent to an uninhabited island to practice what they preach on each other, while the rest of the world goes on about making our lives better. The last one standing gets to own the island where his followers are all sent as a punishment to listen to his or her whining 24/7 for the rest of their short lives.

      • by darjen (879890) on Friday November 09 2007, @04:35PM (#21301197)

        What's worse is that this will be justified under the guise of anti-terrorism. As bills get passed to erode the freedom of American's, I'm watching the US slowly descend into totalitarianism.
        This is nothing new. It was all part of the neoconservative plan against communism before the Soviet Union fell. The new focus on terrorism is allowing them to continue their Big Government agenda. Lest you doubt what I'm saying, here it is straight from William F Buckley: http://en.wikipedia.org/wiki/William_F_Buckley#First_books [wikipedia.org]

        We have got to accept Big Government for the duration--for neither an offensive nor a defensive war can be waged, given our present government skills, except through the instrument of a totalitarian bureaucracy within our shores. ... And if they deem Soviet power a menace to our freedom (as I happen to), they will have to support large armies and air forces, atomic energy, central intelligence, war production boards, and the attendant centralization of power in Washington...
        • by Duhavid (677874) on Friday November 09 2007, @05:27PM (#21301919)
          "Next, I don't buy it because it's not feasible. How many NSA agents would it take to monitor ALL Internet traffic."

          You assuming at least a couple things here
              A: That Agents are monitoring the traffic. Could be they are filtering for keywords. Storing for later review.
              B: That they are looking at all the traffic.

          And on fighting terrorism, how about we stop sending them money that ends up making
          them such a valuable part of the world? And I don't know what is wrong with leaving
          them alone, really. There is some legitimacy to their grievances, you know.
          What is now Israel was Palestine ( and before that had a variety of owners,
          none of them Jewish until you get *really* far back ). Britain decides for
          partition, and you have to give up your homeland, your business, your home
          so that a bunch of people who have been practicing terrorism in your country
          can have a home? If it were you, you would be pissed, and fighting back,
          so would I. Why is that so hard to understand? Now, don't go getting on any
          "you must hate Israelis" thing, furthest thing from the truth. I understand
          ( and support ) the idea of Israel having a homeland, but I also understand
          that the Palestinians want the same, and have been moved to provide it for
          the Israelis. Not to mention all the building that Israelis have done in
          the contested areas to attempt to annex those areas.

          And America has involved itself in this conflict, supplying arms and money
          to support Israel.

          I don't know what all the answers are, but starting the discussion with
          ignoring where all the parties are "at" is not wise.
            • by Duhavid (677874) on Friday November 09 2007, @06:22PM (#21302513)
              "Well, the post says ALL TRAFFIC. (it does go on to say all of AT&T's traffic, however). Even so, it's not feasible"
              "We learn in The Internet for Dummies that any two packet do not have to, and probably will not take the same route to get from A to B."

              Quibbling. Are they copying data, and should they? That they are possibly not copying *all* has little relevance to the right/wrongness of this.

              "First, it was the UN that partitioned that area, not Britain."

              OK. It still was not an invitation by the Palestinians to come live with them.
              It was an external decision imposed on the people living there.

              "The Palestinians have a homeland."

              And do they have control that that? I recall news articles from
              after Hamas won the election about Israel cutting off tax revenue
              to them. Doesnt sound like any kind of real homeland to me.
              Would you consider it sufficient?

              "The UN resolution did not give the land that Palestinians claim was Palestine and give it to the Israelis. They took a piece of land that was British"

              A British colony, imposed by force by British arms.
              The Palestinians were the ones living there.

              "and gave half to Israel and half to the Palestinians."

              If you have something, someone claims control of that
              something, and gives half to you, half to someone else,
              will you be satisfied?

              "When Israel was attacked for being there (notice that British were not) by every neighboring Arab nation, they said, "Screw you people, we're taking it all!""

              A: Every Arab nation is not Palestine.
              B: I understand that part of the history. Yes.
              And I understand that the Arabs were being very
              hostile to Israel, and I understand how Israel
              is not really liking that. They have legitimate
              security concerns. I get it.

              Believe it or not, I am not saying that the Palestinians are 100% right and
              the Israeli's 100% wrong in this issue.

              "Since then, they have given it back."

              Have they?

              "Still not good enough evidently. The Palestinians want to claim that all of the land that was once British was really Palestine and they want it all back."

              It was Ottoman Empire, then a British colony after the war.
              Again, it was still Palestinians living there. Africa, India,
              Pakistan, America, Canada, etc, etc were all once British colonies.
              What legitimacy do colonial holdings from centuries past have to
              do with government today, especially with all that has been said
              about self determination?

              In other words, I don't think the Palestinians bought into the
              "it's British" idea, it was still "theirs". The Western world
              may have recognized it as British, but they likely didn't.

              And once again, if you owned something, someone else claimed it,
              and divided it and told you you could have half simply because
              of the force of arms, would you walk away happy?
              I don't know where you are politically or economically, but if
              you have ever argued that taxes are stealing, or that they are
              a government monopoly, unfair and imposed, this is the same
              thing.

              "That was 50+ years ago. At what point to give up? Would you support Native Americans lobbing mortars into New York from Jersey? Would you support them launching missiles into Detroit from a reservation in Michigan? What's the difference (other than this had always been Indian land)?"

              Not much difference. There is also the Irish problem as an excellent
              example. I don't know when to give up.

              Also, an important distinction. I am *NOT* saying I *support* any of
              the above using terrorism. I am saying I *understand* where they are
              coming from, how they feel they don't have many other choices on the
              matter. Also, recall that in negotiations, you don't get much from a
              position of weakness. Reagan and Thatcher both argued that ( correctl
              • by cheezus_es_lard (557559) <cheez17&gmail,com> on Friday November 09 2007, @05:47PM (#21302165) Homepage
                A couple of notes. AT&T is one carrier- it's likely the other US carriers, such as Qwest, Verizon, etc. are all doing the same thing. CALEA has done a lot for voice in the auto-intercept arena, and they're all compliant with it- hence the presence of automatically-receptive departments at the telcos who _already deal with these people_. Installing splitters and a 'secret room' isn't that far fetched, considering that most CO facilities already use 10% splitters on their fiber backbones for testing purposes, installing another set to route to the NSA doesn't seem that hard. In the dark room, have yourself a bunch of fiber gear designed to recreate the incoming signal and coupled with packet re-assemblers which reconstitute the data streams and mine those that are tagged interesting, and route them directly over DS-3, OC-3 or better (who knows how much dark fiber NSA's got in use?? 49 billion buys a lot...) into the NSA's intercept facility. All of a sudden diverse paths, multihoming, even Tor seem less capable of obfuscating your data's origins- your different paths are all re-constituted at NSA, and then mined for intel. Combine this with a broader-scale mining of data focused on terrorism, drugs, any topic of interest, and you have a massively broad filter capable of doing heuristics on national trends on any different topic, as well as a tool for law enforcement to gather intel for both domestic (warrantless wiretaps, anyone) and foreign surveillance- large portions of Internet transit the USA.

                People used to talk about the acres of computing facilities at the NSA. They're on the bleeding edge in all their tech- and you think they can't reconstitute some diversely-pathed packet data? Encryption? Please. If it's electronic, it's insecure. Get it through your heads.

                love and peace.
                -cheez
            • by QuickFox (311231) on Friday November 09 2007, @05:48PM (#21302173)

              How does monitoring bits over a wire limit your freedom
              If a CIA officer followed you everywhere, always two steps behind you, registering and reporting every opinion you utter and every person you contact, would you feel that your freedom and your democratic rights were being respected?

              Is monitoring on a wire better just because it happens far away where you can't see it?

              I suppose you feel that it's tolerable as long as government and law enforcement remain reasonably democratic and every officer of the law remains reasonably uncorrupted. But how long will they remain this way, and not succumb to the temptations inherent in these arrangements? Temptation has a very strong corrupting effect.

              or prevent you from voting?
              Democracy isn't just voting. Lots of countries have voting without being democratic.
            • by QuickFox (311231) on Friday November 09 2007, @06:01PM (#21302309)

              Some people also don't believe that the Constitution is a suicide pact.
              Far, far more people die from traffic accidents than from terrorism. It would make far, far more sense to sacrifice freedom and democracy for the sake of saving traffic lives. The same goes for tobacco, alcohol, and many other causes of death. Terrorism is really tiny. Sacrificing democracy for such a tiny cause makes no sense.
            • by poot_rootbeer (188613) on Friday November 09 2007, @06:45PM (#21302741)
              Some people also don't believe that the Constitution is a suicide pact.

              I would rather die than allow the protections guaranteed to us by the Constitution to be stolen from us.

              Anybody who would not is a wretched coward.
          • Re:Shameful (Score:5, Insightful)

            by soren100 (63191) on Friday November 09 2007, @07:02PM (#21302867)

            It is already a totalitarianism state, you don't have to wait for it.

            Your words are, frankly, insulting to the millions of individuals who lost their liberty, lives, property, and loved ones in REAL totalitarian states. Read the Gulag Archipelago sometime and get informed.
            The problem is, that the REAL totalitarian states never just appear fully formed. They go through stages. Germany before WWI had a constitution and elected its leaders in a democratic (or at least Republican, to be more correct) fashion. There were no gas chambers then.

            Another example is that the Jews were forced to wear the yellow "star of david" on their clothes in 1938. If they were to complain about the regulations and say that they were living in a "police state", then by your logic they could easily be ridiculed because the concentration camps such as Auschwitz had not been built yet -- construction on those started in 1940. By your logic the star of david is just a patch on a coat, nothing to be worried about, right? So by your words and logic they would be "frankly, insulting" their future selves who would be dying in the gas chambers two years later.

            The problem with your logic is that you are saying that a person cannot complain about the totalitarian nature of his country until he can be killed for just complaining about the totalitarian nature of his country -- a "catch 22".

            America is definitely becoming less and less free every day and more authoritarian -- that is very easy to see. The right of privacy is guaranteed by our constitution, and when it is public knowledge that our government is publicly ignoring that constitution that is definitely the time to complain. Our constitution was created to protect us from our government and when our government starts treating it like toilet paper it is time definitely time to do something.

            I honestly think you feel good about yourself through pretending you live in a totalitarian state for the same reason that Christians enjoy hearing stories about "persecuted Christians" in third-world hell holes.
            It is illegal for the government to do domestic warrantless wiretapping, yet they admit that they are doing it. It is illegal for the government to torture people, yet they admit they are doing it. It is illegal for the government to deny people their judicial due process by taking people to secret prisons in foreign countries, but they admit they are doing it. Anyone who does not understand that American rights and freedoms, like the right to privacy and t are disappearing has their head in the sand.

            America is no longer the "land of the free and home of the brave" and it is very much high time for everyone to start recognizing that fact and start speaking up. Trying to say that our government is not repressive enough or authoritarian enough to speak up about it is ridiculous. The people who were tortured and killed at Abu Ghraib and other places at the hands of our government would not find those words "frankly, insulting". They would say that those words are an understatement.

            When people in America joke on a regular basis that if you say anything against the government that you might be sent to Guantanamo, and when our elected officials argue about whether or not repeatedly drowning someone and reviving them is torture, you can be pretty sure that we have crossed the line that divides a free state and an authoritarian state.
    • by TheMeuge (645043) on Friday November 09 2007, @04:24PM (#21300985) Homepage
      While I doubt that they "save" all the traffic, it is entirely possible, that transmitted data is scanned for certain key words and the flagged packets are then investigated further. I think it isn't unreasonable to suspect that the ENTIRE web traffic moving in and out of the computers of some AT&T clients is recorded.

      Given this data, it is entirely clear that there is no reason to believe that any non-encrypted data is not going to be monitored, recorded, and traced.

      While we must try to abort this particular endeavor through the civil process, it is rather clear to me that it's likely to be a futile effort. The way I see it, as the technological capability for total surveillance draws closer, the government and commercial entities will not be far behind.
          • by Chris Burke (6130) on Friday November 09 2007, @05:38PM (#21302041) Homepage
            Just like many other conspiracy theories, this one fails the Occam's Razor test.

            Like most premature and inappropriate applications of Occam's Razor, this one fails the Thought For Seven Seconds test.

            So they can't the whole internet. They sure as hell can have it split to go through their secret rooms in the telco's offices, where they can do whatever keyword searching or other simple analysis they want and then save off the portion that may be considered interesting.

            The whole point is that he doesn't know what the NSA is doing with the data, he only knows that he set up the splitters to route a copy of all the data into the secret room.

            The "and they're saving everything to disk" part is something that someone here made up and now has apparently become an official part of the "conspiracy theory". So if that part doesn't make sense, the whole thing must be a lie! Except no, it doesn't work that way.
    • by NoData (9132) <_NoData_@yahBLUEoo.com minus berry> on Friday November 09 2007, @06:58PM (#21302831)
      Also, good interview with Mark Klein on NPR's All Things Considered.
      http://www.npr.org/templates/story/story.php?storyId=16088947&ft=1&f=1 [npr.org]
      One thing he mentions: The NSA likely has installations like this maybe a dozen of locations around the country.
      • by nunyadambinness (1181813) on Friday November 09 2007, @05:20PM (#21301843)
        "The Bush camp has done this kind of thing before"

        It seems upon first reading that you're claiming the Bush camp faked the documents that Rather lost his career over.

        Did I misread you?

        And if not,could you please source that? Your link doesn't address it at all. I haven't heard that accusation before, and would like to see something to support it.
        • Oh yeah? Go take pictures of important buildings in the middle of the day across town and see if you don't get questioned by the police after a few hours?
          If it takes you a couple of hours to take pictures of the outside of the building, I would expect the police to pick you up. And give you a breathalizer, a drug test and to check if you were an escapee from the Home For The Easily Bewildered.
  • by NotQuiteReal (608241) on Friday November 09 2007, @04:07PM (#21300729) Journal
    Come take a drink from the firehose!
        • by crabpeople (720852) on Friday November 09 2007, @06:04PM (#21302345) Journal
          A music or movie is widely broadcast, that is the point of it, to tell a story. If an artist wants to let no one hear his song, locks it in a vault, and it gets shared, then thats wrong. But if an artist is producing music to be heard, then they have no right to privacy in regards to that song now do they?

          You are somehow confusing the right to privacy with disseminating other peoples already released intelectual property. The issues are not even remotely similar. Of course this being slashdot, you have been wildly and incorrectly modded up.

  • Encrypt (Score:5, Insightful)

    by Monstard (855195) on Friday November 09 2007, @04:07PM (#21300731)
    The future of internet is encrypted internet.
    • Re:Encrypt (Score:5, Insightful)

      by marcop (205587) <{marcop} {at} {slashdot.org}> on Friday November 09 2007, @04:13PM (#21300835) Homepage
      No. Why should I? The constitution is clear on this issue. The true answer is impeach those responsible and prosecute At&T. criminally.
      • Re: (Score:3, Interesting)

        That sounds awesome. In theory. But reality doesn't quite match up the idealism you show. What difference does the Constitution make when those in charge have shown quite clearly that they don't give a shit about the Constitution? I all but guarantee you that these guys are gonna get off scot free for all the crap they've pulled.
      • Criminal law is also very clear on burglary.

        That doesn't make it a bad idea to close and lock your front door.
        • Re:Encrypt (Score:5, Informative)

          by 644bd346996 (1012333) on Friday November 09 2007, @04:21PM (#21300953)

          The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
          Clear enough? No warrant, no searches or seizures of my stuff. They are particularly prohibited from searching through all of my correspondence without a warrant.
            • Re:Encrypt (Score:5, Informative)

              by Shimmer (3036) <brianberns@gmail.com> on Friday November 09 2007, @04:44PM (#21301297) Homepage Journal
              The insufficiency of analogy to more traditional means of communication (postal service in sealed envelopes, telegraph, town crier, word of mouth, whatever) is sufficient demonstration that the constitution is unclear on these matters.

              Fine. Have you by any chance ever read the 10th Amendment?

              The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.
              In other words, if the Constitution is unclear and there is no relevant law then the Federal Govt. has no power whatsoever to intercept our Internet traffic.
      • Re:Encrypt (Score:4, Informative)

        by 11223 (201561) on Friday November 09 2007, @04:54PM (#21301447)
        I'm afraid you do not understand how public key crypto works. If Alice has Bob's key and has personally verified that the signature of the key, communication between Alice and Bob is secure so long as the "hard problem" that the cryptosystem depends on (e.g. discrete log for RSA) is not broken. There is no proxying which can take place; Alice encrypts her traffic with Bob's public key before sending it to him.

        Is it possible you've confused public key cryptosystems in general with systems based on Diffie-Hellman key exchange that provide protection against eavesdroppers but not man-in-the-middle attacks?
        • Re:Encrypt (Score:4, Informative)

          by Chris Burke (6130) on Friday November 09 2007, @06:42PM (#21302717) Homepage
          I'm afraid you do not understand how public key crypto works. If Alice has Bob's key and has personally verified that the signature of the key, communication between Alice and Bob is secure so long as the "hard problem" that the cryptosystem depends on (e.g. discrete log for RSA) is not broken. There is no proxying which can take place; Alice encrypts her traffic with Bob's public key before sending it to him.

          The first bold part is what commonly makes the second bold part untrue.

          Unless Alice has personally verified that the key she has is in fact Bob's key and vice versa, then she doesn't know for sure that it's Bob's public key that she's using. If Alice just get Bob's public key off the internet itself, then Alice doesn't know that it was Bob Alice was talking too and it may actually be Charlie's public key that she received. If it is in fact Charlie's public key, then Charlie can act as a man-in-the-middle. Alice unknowingly sends a message to Charlie with Charlie's public key, he decrypts it, re-encrypts it with Bob's public key, then sends it on to Bob. Neither will ever know.

          People get around this by using certificates which come from a Certificate Authority whom they trust and who verifies that the keys you received are really Bob's keys and not Charlie's. The same problem shows up here, though, since at the point where Alice is communicating with the certificate authority over the internet, the CA is basically Bob and she's in the same boat.

          People get around this part of the problem by having the Certificate Authority's keys hard-coded inside their browsers and OSes. There are two problems with this, one general and the other specific. The general problem is that if you get your browser over the internet, once again you can't be sure that the CA's key is really the right key and that the MD5 hash is really the MD5 hash of the unmodified browser. The specific problem is that this whole article is about the government getting telecom companies to cooperate with their spying programs. The Certificate Authority's usually fall into that category, and it would be naive to assume that they haven't handed over to the government their private keys, in which case NSA-Charlie doesn't even need to feed you a fake CA key somehow, he can just flat out pose as CA-Bob.

          It is fundamentally impossible to share cryptographic keys securely over an insecure communication network. This is known as "the key exchange problem", and it's really, literally, impossible to fix. The only way to truly be secure when exchanging keys is for Alice and Bob to step outside the insecure network and physically meet in person, and exchange keys and verify that the other person has the correct key.

          So if you're really so paranoid that you feel you must encrypt all your communications to keep the government from spying on you, just remember this, and find an off-line way to exchange public keys with everyone you wish to talk to.
  • Whoa (Score:5, Funny)

    by yamamushi (903955) <yamamushiNO@SPAMgmail.com> on Friday November 09 2007, @04:08PM (#21300743) Homepage
    Thats a LOT of porn!
  • by StefanJ (88986) on Friday November 09 2007, @04:15PM (#21300867) Homepage Journal
    You know, those little pamphlets full of fine print that get shoved in your bill and promptly thrown away because they're purposely made to be obscure and hard to read?

    If there's no "we allow an obscure government agency look at everything you read, write, say and listen to without court order or accountability" clause, can we sue the fuckers?
  • by Overzeetop (214511) on Friday November 09 2007, @04:20PM (#21300949) Journal
    ..but with extra "bad" and no "joke".
  • Olbermann? (Score:3, Funny)

    by MarsDefenseMinister (738128) <dallapieta80@gmail.com> on Friday November 09 2007, @04:25PM (#21301027) Homepage Journal
    Come on, that Countdown program is just about as biased left as you can get. I guess bias for the liberal side is called news, and bias for conservatives is an outrage, requiring an attack dog like Media Matters. It's a good thing that Fox News exists, or there would be no conservative voices in the media at all.
    • Re:Olbermann? (Score:5, Insightful)

      by QCompson (675963) on Friday November 09 2007, @04:39PM (#21301235)

      Come on, that Countdown program is just about as biased left as you can get. I guess bias for the liberal side is called news, and bias for conservatives is an outrage, requiring an attack dog like Media Matters. It's a good thing that Fox News exists, or there would be no conservative voices in the media at all.
      No kidding. Remember in the run-up to the Iraq war when the Bush administration couldn't get their agenda across to the american people because all the lefty news outlets refused to parrot their claims? Oh wait, that's right. Pretty much 99% of the American media (including the highly "liberal" New York Times) spent the years 2002-2004 mindlessly repeating the administration's talking points without doing any independent reporting.

      But still, it's a good thing we have Fox News. Otherwise where would I get all the newest info on my favorite celebrities (what's that silly Paris up to today)? Or how I would know which ethnic/religious/political group to direct my hatred towards?
  • by gozu (541069) on Friday November 09 2007, @04:33PM (#21301155) Journal
    The NSA are the good guys, therefore, any traffic monitoring they do will be used to catch the bad guys. Since we are good guys*, we have nothing to fear.

    NOTHING!

    *Unless you smoke weed, use p2p or jaywalk, in which case you're a bad guy and you deserve to go to jail.

  • ALL Internet (Score:5, Interesting)

    by mi (197448) <mi+slashdot@aldan.algebra.com> on Friday November 09 2007, @04:37PM (#21301219) Homepage

    forwards virtually all of its internet traffic

    This reminds me of that anecdote from years back about a question asked by a clueless user on how he can "download all of the Internet" at once and take it with him...

    Seriously, are we supposed to believe, that "virtually all" of AT&T Internet traffic passes through one facility in San Francisco? It is likely, they have the same rooms in all major nodes, though...

    Which brings us back to those earlier laws obliging phone companies to maintain equipment in all central offices, which would allow the government to eavesdrop on anybody's phone calls. Sure, the police needed a warrant to actually perform the eavesdropping. But the equipment and the facilities ("secret rooms") are always there.

    What they most likely don't need a warrant for is the statistics — did the number of calls to so-and-so suddenly increase? Did he call such-and-such after this-and-this called him?..

    Most likely, NSA is looking for similar things on the Internet — there is a lot of insight to be gained from simply knowing, which sites get more traffic in (possible) correllation with certain events... And then, again, there is a need for the equipment to always be there, so that warranted intercepts of the datastreams can be performed too.

    Yes, this is prone to abuse. No, it can not be effectively audited by the public without "compromising" (or even "jeopardizing") "the mission". The only relief comes from the knowledge, that any evidence illegally collected still can not be used against anyone in the court of law...

  • Credentials?! (Score:5, Interesting)

    by yhetti (57297) <yhetti@s[ ]ix.net ['hev' in gap]> on Friday November 09 2007, @05:00PM (#21301543) Homepage
    I'm not going to claim it's not happening, but this is not the guy to listen to. I don't want to be a dick about this, but he's not a network engineer, he's not a network admin, he's not a data specialist...he's a cable splicer. He does VDV work for AT&T. Is it possible, if not likely, that he maybe doesn't have a complete understanding of how all the tubes work past Layer 1? (And just to really be a dick about it, every VDV person I've met claims to be a data network expert because they lay the wires. Ask one why Ethernet is limited to 100M by spec and watch the fun.)

    With only 20 of those facilities, and just in AT&T locations, the fibertaps wouldn't even have a significant percentage of traffic going through them. Do some traceroutes; do some ping tests; Try it from different providers. They would have to be routing all traffic through those points. Your ping times would know, and the global BGP tables would know.

    I have a comfortable tinfoil hat. What I *could* be easily convinced of is that the NSA has taps on all oceanic fiber. That's much easier to do, since there's not all that many. And...frankly, they should be. We pay them a lot of money to keep us safe. A *lot* of money. But I don't think this is the guy to listen to regarding something this big and damning.
    • Re:Credentials?! (Score:5, Interesting)

      by nehumanuscrede (624750) on Friday November 09 2007, @06:06PM (#21302355)
      Considering I WORK for AT&T, I would give him far more credit than any engineer
      or planner this company employs. They are engineers in title only. If you want
      to know how things work within a Central Office, go ask the folks who work in it.
      They have far better insight than the planners do.

      The ONLY other possible explanation for having a room full of equipment locked up
      would be a co-located company. It's not uncommon for other carriers to have
      equipment in the office that's unaccessible to AT&T and vice versa.

      However, none of them require a government clearance to gain entry. Just a
      simple key. Nor are they usually hidden from view. They simply put up wire cages
      to restrict access to the rooms in question.

      All it will take is an audit of the fibers in question and the splitters. If the
      splitters actually exist on the backbone fibers and they route into that room, then
      AT&T will have some explaining to do. Simple as that.

      The theory I've kicked around is this type of equipment will have a specific eqpt
      code in the databases AT&T uses. ( Assuming it's inventoried at all. Though the
      word document produced indicates that it might be ) Shouldn't be all that tough to run
      an eqpt scan against a Central Office CLLI code to see if it shows up in the
      inventory. . . .

      Just a theory mind you ;)

      Now as to the percentage of the internet comment I saw earlier.

      Do you actually believe this is the ONLY office this type of setup is installed in ?
      Please. If this gear is what we all think it is, then the major Toll buildings
      ( read that the major hubs ) will likely ALL have this gear installed in it. It's
      just a matter of figuring out which offices have been compromised. Probably easy to
      spot. Find the biggest serving office in any given city and start your search there.

      It's also doubtful they are saving the Internet in real time. It's more than likely
      a scan and flag type setup. It's likely not even done on site. It's far more probable
      that the redirected traffic is shipped out another fiber that is directly connected to
      an NSA office in the region.

      For the encryption comment:

      The day we start encrypting everything on the net will be the day you see the bills
      popping back up to keep those ' terrorist tools ' out of the hands of the average
      citizen.

       
    • by Frosty Piss (770223) on Friday November 09 2007, @04:15PM (#21300859)

      I am somehow not convinced... how many TB of data would a major provider like that move in a day? Those would have to be some moby servers...
      That it is all forwarded through that secret room doesn't mean that they look at it all. Perhaps they have some algorithm, some system or filter, for determining what they want to look at closer...
    • Re:Doubtful (Score:5, Insightful)

      by Divide By Zero (70303) on Friday November 09 2007, @04:15PM (#21300871)
      The fact that a thing cannot be done well in a reasonable amount of time within a predetermined budget has never gotten in the way of our government trying to do it anyway.