Tuesday May 31st, 2016 12:46PM

Reagan's role in NSA's hack of Google and Yahoo

By The Associated Press
SAN JOSE, Calif. (AP) -- Back when Yahoo was something hollered at a rodeo and no one could conceive of Googling anything, President Ronald Reagan signed an executive order that extended the power of U.S. intelligence agencies overseas, allowing broader surveillance of non-U.S. suspects. At the time, no one imagined he was granting authority to spy on what became known as Silicon Valley.

But recent reports that the National Security Agency secretly broke into communications on Yahoo and Google overseas have technology companies, privacy advocates and even national security proponents calling for a re-examination of Reagan's order and other intelligence laws.

Experts suggest a legislative update is long overdue to clear up what Electronic Frontier Foundation legal director Cindy Cohn calls "lots of big gray areas."

With the cooperation of foreign allies, the NSA is potentially gaining access to every email sent or received abroad, or between people abroad, from Google and Yahoo's email services, as well as anything in Google Docs, Maps or Voice, according to a series of articles in the Washington Post. It's impossible to know how many of Google and Yahoo's collective 1.8 billion accounts are affected, but in a single 30-day period last year, field collectors processed and warehoused more than 180 million new records - ranging from "metadata," which would indicate who sent or received emails and when, to content such as text, audio and video, the Post reported.

The Post reported that the NSA and its British counterpart, the U.K. Government Communications Headquarters, have intercepted and tapped into data funneled by Google and Yahoo through fiber optic cables, routing information in an NSA operation called Muscular. The information was provided to the newspaper by former NSA contract employee Edward Snowden, who is being sought by the U.S. for leaking classified information.

"Had the NSA done the same warrantless tapping at Google's Mountain View, California, headquarters, there's no doubt they would be violating the law," said Cohn, whose San Francisco-based non-profit fights for digital freedoms. "They're doing this abroad because they want that fig leaf of legality."

The NSA, in an online statement, says its collection operations comply with federal laws and orders.

Reagan's 1981 Executive Order 12333 for the first time in a public, written record allowed foreign covert action to be conducted from inside the U.S. The measure, amended several times after 9/11, outlines key rules for more than a dozen intelligence agencies. It spells out when spies are allowed to peek into mail, homes and electronics, identifies who has to approve of specific searches, and details how to carry out clandestine collection of foreign intelligence.

"What NSA does is collect the communications of targets of foreign intelligence value, irrespective of the provider that carries them," the agency said, likening the data channels at private firms to super highways.

In other words, the NSA is not targeting information about Google and Yahoo as such, but is conducting surveillance on foreigners using the services these companies provide, said University of Indiana law professor David Fidler. But Fidler says this explanation ignores the fact that the NSA is directly targeting the facilities of U.S. companies, "even if the information ostensibly sought concerned foreign persons."

Even Google's chairman Eric Schmidt, outraged by the invasion, says he's not sure it is illegal, telling CNN the operation is "perhaps a violation of law but certainly a violation of mission."

It is unclear exactly how the intrusions were carried out, but Daniel Castro, senior analyst at the Washington nonprofit Information Technology and Innovation Foundation, suspects the surveillance required a computer savvy person either working for the NSA, another government, or a contractor, to physically get inside a network provider's facilities to tap into the fiber optic network and route a copy of the online traffic into their own network. The set up could be similar to a secret NSA room built into an AT&T building in San Francisco in 2002 and made public by a retired AT&T staffer in 2007.

The Post reported that the NSA isn't breaking into accounts as they sit, stored in data centers, but is able to gather the emails and other communications as they move between them.

The NSA says that if they accidentally scoop up extra, non-criminal related information from Americans, there are strict limits about how it can be used. But there's no guarantee those limits apply if British intelligence agents are doing the rerouting and then turning information over to the NSA, and the Obama Administration will not talk about their methods.

Thus the immediate pushback from advocates is a loud call for new laws.

"It's a relatively new phenomenon that the government is sweeping through American communications outside the U.S., so there haven't been a lot of legal decisions," said American Civil Liberty Union's national security project attorney Patrick Toomey. "We think that these revelations show the ways in which the surveillance laws are in desperate need of reform. The location in which surveillance and collection occurs no longer matters."

Those reforms are already underway, spearheaded by the USA FREEDOM Act introduced by Senate Judiciary Committee Chairman Patrick Leahy (D-Vt.) and Congressman Jim Sensenbrenner (R-Wisc.), chairman of the Crime and Terrorism Subcommittee in the House; the proposed legislation, which is widely supported by the tech industry including Google, seeks to limit the NSA's surveillance powers both here and abroad. The bill appears to have bipartisan support.

But it might not go far enough for Kel McClanahan, executive director of National Security Counselors, which represents clients involved in security or privacy law-related proceedings. McClanahan says in addition to the broad privacy questions, there's a problem with the NSA actions when it comes to attorney-client privilege. Working with an attorney in the United Kingdom, McClanahan is currently fighting a legal Freedom of Information Act battle with the NSA, seeking documents related to Sharif Mobley, a U.S. citizen charged with terrorism in Yemen. Under current law, says McClanahan, the NSA could ostensibly tap into the private communications between himself and the British attorney he is working with, and read the litigation strategies as he and the British attorney plan them.

"From what I can tell, what they're doing is technically legal because of the lack of any law prohibiting it," he said.

The NSA says it has "minimization procedures" that limit how deeply it can examine communications of U.S. citizens while they're in the U.S., but it's unclear whether they extend to foreign attorneys.

Earlier reports based on Snowden's documents revealed the existence of other NSA programs, including the PRISM data-gathering program, which forces major tech firms to turn over the detailed contents of Internet communications, although those required court orders.

The difference this time is that the NSA is "tapping into the data centers as a backdoor activity, which made the tech firms extremely unhappy," said attorney Pat Fowler, who handles data privacy and security cases from his Phoenix, Arizona office.

Indeed, several Google engineers who spend their days fighting hackers fired back with furious online responses to their systems being targeted.

And it's quite possible Yahoo and Google weren't the only ones, said Fowler, noting that Microsoft's Hotmail, which with Google's Gmail and Yahoo's email dominate the email market.

"It wouldn't be a stretch to think they might try to get that data from the other entities," said Fowler.

Attorney Steven Bradbury, who headed of the Justice Department's office of legal counsel until 2009, used to advise the president and executives on constitutional questions of privacy and security. Today he says public concerns about invasions of privacy are off base because the NSA is not allowed to target U.S. data abroad, and when it gets it, there are tight limits.

"Communications that travel over wires overseas are susceptible to interception by all kinds of foreign governments that are active in collecting and doing surveillance," he said. "The difference is that the NSA and U.S. intelligence agencies are subject to strict rules and oversight. There's much more protection for U.S. persons than for foreign citizens."
© Copyright 2016
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
S&P 500 index has its best year since 1997
The stock market closed out a record year with more all-time highs on Tuesday, giving U.S. indexes their biggest annual gains in almost two decades.
6:56PM ( 2 years ago )
Colorado readies for 'Green Wednesday' pot sales
Police were adding extra patrols around pot shops in eight Colorado towns that plan to allow recreational sales to anyone over 21 on Jan. 1.
1:52PM ( 2 years ago )
Kerry seeks framework for Mideast peace talks
A senior State Department official says Secretary of State John Kerry will try this week to get Israel and the Palestinians to agree on a framework for negotiating a final peace agreement, yet cautions against raising expectations for Kerry's latest round of shuttle diplomacy.
1:35PM ( 2 years ago )
U.S. News
Missing Ga. bank director arrested in Brunswick
A bank director accused of losing millions of investors' dollars before vanishing last year was arrested Tuesday during a traffic stop in a city in south Georgia.
7:00PM ( 2 years ago )
Amtrak to suspend some Crescent service in Jan., Feb.
Amtrak service will shut down in parts of the Southeast for several days in January and February for rail maintenance by Norfolk Southern Railway.
9:00AM ( 2 years ago )
Lung cancer scans urged for some smokers, not all
Certain current or former heavy smokers should start getting yearly scans for lung cancer to cut their risk of death from the nation's top cancer killer, government advisers said Monday - even as they stressed that the tests aren't for everyone.
7:26AM ( 2 years ago )
Business News
Sex offender held in Hall County for failing to register
A 47-year-old man was booked into the Hall County Jail Tuesday, being held without bond for allegedly failing to register as a sex offender, his second such arrest.
6:09PM ( 2 years ago )
Pharmacy robberies may involve same suspect
Oakwood Police Tuesday afternoon released details in a pharmacy robbery they're investigating, similar to one that happened in the Hall County Tuesday morning.
5:46PM ( 2 years ago )
Victim critical following apartment fire
A 41-year-old woman was in critical but stable condition Tuesday after being rescued from an apartment fire in Forsyth County late Monday afternoon.
3:16PM ( 2 years ago )
Local/State News
Feeling US snub, Saudis strengthen ties elsewhere
Increasingly vocal in its frustration over U.S. policies in the Mideast, Saudi Arabia is strengthening ties elsewhere, seeking out an alignment that will bolster its position after it was pushed to the sidelines this year.
4:34PM ( 2 years ago )
NSA reportedly intercepts computer deliveries
A German magazine has lifted the lid on the operations of the National Security Agency's hacker unit, revealing how American spies intercepted computer deliveries, exploited hardware vulnerabilities, and even hijacked Microsoft's bug report system to spy on their targets.
12:31PM ( 2 years ago )
Rockets fired from Lebanon into Israel
Rockets from Lebanon struck northern Israel on Sunday, causing no injuries but sparking an Israeli reprisal shelling in a rare flare-up between the two countries.
12:26PM ( 2 years ago )
Amid shouts of 'shame,' House GOP defeats gay rights measure
Democrats shouted "shame," but House Republicans switched their votes and defeated a measure to protect gay rights
8:03PM ( 1 week ago )
CDC director Freiden warns GOP Zika bill is inadequate
The head of the Centers for Disease Control and Prevention warned Wednesday that a House GOP measure to combat the Zika virus is inadequate to deal with the swelling threat to public health
7:36PM ( 1 week ago )
Trump unveils list of his top picks for Supreme Court
Donald Trump, the presumptive Republican nominee for president, released Wednesday a list of 11 potential Supreme Court justices he plans to vet to fill the seat of late Justice Antonin Scalia if he's elected to the White House.
3:31PM ( 1 week ago )
1st US penis transplant could bring hope to maimed soldiers
A 64-year-old cancer patient has received the nation's first penis transplant, a groundbreaking operation that may also help U.S. veterans maimed by roadside bombs
8:04PM ( 2 weeks ago )
States dig in against directive on transgender bathroom use
Politicians in Texas, Arkansas and elsewhere are vowing defiance over the Obama administration's new directive on transgender bathroom use
9:19PM ( 2 weeks ago )