Expanding Unconstitutional Backdoor Searches Of Surveillance Data Is Easy: Just Change What Words Mean

from the some-language-tricks-and-funny-games dept

I already wrote a post about how the FISA Court rejected the arguments of the public advocate that it appointed to review the legality and constitutionality of the infamous backdoor searches. However, I wanted to put up a second post as well, digging a little deeper into what the ruling itself means, rather than just focusing on the public advocate part of it. Because it's pretty scary. We already knew that, once that data was collected under the Section 702 PRISM program, the NSA opened it up to both the CIA and FBI to search on for other purposes.

However, as Elizabeth Goitein explains over at Just Security, even then there were some limitations:

 The Justice Department, having worked Section 702 into the foreign intelligence exception by certifying that the government’s targets were not Americans and that the surveillance had a foreign intelligence purpose, and having met the constitutional reasonableness requirement by noting that incidentally collected information about Americans would be “minimized,” was allowing the FBI to run queries of Section 702 data to obtain information about Americans in ordinary criminal cases. Edward Snowden’s disclosures confirmed this practice, and the Privacy and Civil Liberties Oversight Board’s (PCLOB) report on Section 702 revealed that it was routine.

Many commentators (myself included) have noted that this loophole creates an end run around the warrant requirement in ordinary criminal cases. Until recently, however, there was at least one substantive limitation on the FBI’s ability to query Section 702 data. As reported by the PCLOB, the FBI’s minimization procedures provided that queries must be “reasonably designed” to “find and extract” either “foreign intelligence” or “evidence of a crime.” This was a far cry from the probable cause that would be needed to obtain a warrant, but it was something. The FBI, at least on paper, could not simply go on a fishing expedition through the warrantlessly obtained data.

But the details of this newly revealed ruling show that that limitation has gone away -- basically because the FBI changed its own minimization procedures in part to pretend English words don't mean what they really mean. In the past, the NSA has reinterpreted many English words to mean things different than their plain English meaning. In this case, the FBI has decided to redefine the word "query":
Displaying the intelligence community’s penchant for defining well-understood terms to mean something entirely different, the FBI’s most recent minimization procedures, in the FISC’s words, “clarify that a search of an FBI storage system containing raw-FISA acquired information does not constitute a ‘query’ within the meaning of the procedures if the user conducting the search does not receive access to unminimized Section 702-acquired information in response to the search.” This includes instances in which the search does return unminimized Section 702-acquired information, and the agent is notified of that fact but is not authorized to access the data. Because such searches are deemed not to constitute “queries,” they presumably are not subject to the requirement that “queries” must be reasonably designed to return foreign intelligence or evidence of a crime.

The new procedures also “clarify” what happens if an agent performs a search that returns Section 702 information the agent is not authorized to access. In such cases, an agent who is authorized to access the information may re-run the search and determine whether the information “reasonably appears . . . to be foreign intelligence information, to be necessary to understand foreign intelligence information, or to be evidence of a crime.” If so, the information is passed along to the original agent.

This “clean team” approach is no substitute for a limitation on the initial search. It is analogous to claiming that searches of homes are not “searches,” and thus do not require warrants, if the agents performing the search find nothing – or if an elite team steps in to perform the search and can turn over what it finds to prosecutors only if it is evidence of a crime. Previously, the procedures did not allow fishing expeditions; now they do, and it seems somewhat beside the point that the fisherman only gets to keep the fish if he catches one.
Got that? A query is no longer a query and the FBI has much broader authority to do backdoor searches than was previously known. As the EFF notes in response to this, this seems to fly in the face of legal precedent and the Constitution:

This is a constitutional problem. Quite apart from the bait and switch opportunities it creates for the FBI, it's like saying it's OK for school officials to set up a drug testing program for non-law enforcement purposes, and then once it’s set up, they can completely abandon that purpose and start testing students to simply to put them in jail. Or that the government can set up a program to test pregnant women for drugs with a goal to get them into treatment, but also hand the information over to the police and use the threat of prosecution as additional leverage.

The Supreme Court rejected the latter scenario as unconstitutional in Ferguson v. City of Charleston in 2001. Other Supreme Court cases make clear that even holistic, programmatic assessments of Fourth Amendment "reasonableness"—like the one the FISC engages in here—must take into account the invasiveness of these programs. Searching vast databases containing the full content of emails and every website visited by nonsuspect Americans without a warrant is about as invasive as it gets.

And it's not just the FBI that gets much broader access to these backdoor searches. Marcy Wheeler points out that the decision reveals that the NSA and CIA basically wrote themselves a note last summer saying that they no longer needed to follow minimization procedures... and the judge is cool with that. Here's the paragraph in the ruling:
The NSA and CIA Minimization Procedures included as part of the July 15, 2015 Submission each contain new language stating that “[n]othing in these procedures shall prohibit the retention, processing, or dissemination of information reasonably necessary to comply with specific constitutional, judicial, or legislative mandates.” See NSA Minimization Procedures at 1; CIA Minimization Procedures at 4-5. These provisions were not included in the draft procedures that were submitted to the Court in June 2015, but appear to have been added by the government thereafter. They are not discussed in the July 15, 2015 Memorandum.
As Wheeler notes, this is just the NSA and CIA deciding unilaterally that they can ignore minimization. The judge even pointed out that this move "could undermine the Court's ability to find the procedures satisfy the above-described statutory requirement." However, the judge, Thomas Hogan, then decides that this is kind of okay because government lawyers told him informally (yes, really!) that they don't intend to abuse this very much:
The Court understands based on informal communications between Court staff and attorneys for the government that NSA and CIA intend to apply the similar provisions at issue here in the same narrow manner.
Wheeler has a lot more on this particular part of the ruling and how troubling it is. But, in short, it has also broadened the ability of the government to snoop through these massive troves of data. The reliance on informal promises not to take it too far mean very little. As former NSA and CIA director Michael Hayden has said, his job was to push up as close to the boundaries of what was legal as possible. Once Congress or the courts told him what was legal (or, in some cases, the President unilaterally), he would make use of that. Why would that not be the case here? Or, as Wheeler explains more vividly:
I’m not sure how that’ll be effective when President Trump decides he can pass an Executive Order requiring NSA to keep all the US person data it collects but not tell FISC about it, because the order they report on this to him is part of the minimization procedures they say they can blow off.
And, of course, none of this can be appealed, because even though there are the arguments from the public advocate (which didn't include this last part about ignoring minimization), only the government itself can appeal a ruling, and they got everything they wanted here (and possibly more).

The only actual way to fix it at this point is for Congress to step in and rewrite the law, but the chances of that happening appear to be slim to none.
Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: 4th amendment, backdoor search, backdoor searches, cia, definitions, fbi, fisa court, fisc, law enforcement, mass surveillance, nsa, prism, query, section 702


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    That Anonymous Coward (profile), 22 Apr 2016 @ 10:42am

    And the rule of law slides further into oblivion.
    They are keeping us safe and protecting our rights, for varying changing definitions as set forth by the government.

    link to this | view in chronology ]

    • icon
      DannyB (profile), 22 Apr 2016 @ 11:02am

      Re:

      It depends on what the meaning of the word "is" is.

      link to this | view in chronology ]

    • identicon
      Mason404, 22 Apr 2016 @ 11:31am

      Re:

      The basic problem is that most Americans (including TechDirt staff) still think the classic rule-of-law exists here --- and that constant hand-wringing over the endless examples of rule-of-law violations by their government rulers... will somehow fix this tyrannical situation.

      Should be obvious by now that the "Law" won't protect your rights...nor will the Constitution, nor the courts, nor voting in government-controlled elections.

      The upcoming Presidential election will change nothing, regardless of who is elected.
      Welcome to Orwell's 1984 dystopia (+32 years).

      link to this | view in chronology ]

    • identicon
      Anonymous Coward, 22 Apr 2016 @ 12:18pm

      Re:

      Maybe they are keeping your rights and protecting your safes?
      Who knows! They should just write new laws in foreign languages. Then they can truly mean anything.

      link to this | view in chronology ]

      • identicon
        Anonymous Coward, 22 Apr 2016 @ 12:45pm

        Re: Re:

        They have to take our rights away from us for safe keeping, so the terrorists can't steal them.

        link to this | view in chronology ]

  • identicon
    Anonymous Coward, 22 Apr 2016 @ 11:15am

    God damn it. Even the word "is" will have to be strictly defined in laws from now on. Just throw a dictionary in each new law.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 22 Apr 2016 @ 11:17am

    Hey...

    We have been breaking the law and disregarding the Constitution for a long time now and... without much challenge from any of you or your stupid and ignorant juries!

    Shut the Fuck UP!

    ~US Government

    link to this | view in chronology ]

  • icon
    That One Guy (profile), 22 Apr 2016 @ 11:17am

    Taking 'gullible' to whole new levels

    So the agencies in question can't even follow the rules as they are set out, and the judge feels that an informal statement that they won't abuse the rules too much actually means anything?

    Yet more evidence showing that referring to the FISA 'court' as a 'court' does a great disservice to actual courts, they're a bunch of putzes in robes that rubber-stamp anything put in front of them, and are for all intents and purposes nothing more than slightly separate branches of the various intelligence agencies.

    link to this | view in chronology ]

  • identicon
    SpaceLifeForm, 22 Apr 2016 @ 11:18am

    From the Department of Redundancy Department

    "When I use a word,” Humpty Dumpty said in rather a scornful tone, “it means just what I choose it to mean — neither more nor less.”
    “The question is,” said Alice, “whether you can make words mean so many different things.”
    “The question is,” said Humpty Dumpty, “which is to be master – – that’s all.”
    (Through the Looking Glass, Chapter 6)

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 22 Apr 2016 @ 12:47pm

    Sayers law at work.

    All the references in this article really don't give way to any suggestion that anyone involved understands data processing. What we are talking about here is typically one of two things: SQL, or really big plain-text data sets.

    So twenty posers argue over a topic that basically boils down to telling Bob what to look for. Bob then either writes the queries, or hacks up some regexps, and poof! Data. Then Bob explains what he got, because even AFTER he gets it, the committee still can't understand the data without having some contextual understanding of the underlying systems.

    You can't do what Bob does, or limit what Bob does using Socratic method. That is why these technologies were invented in the first place. So this article highlights a much larger problem. Which is that the whole legal system is trying to drive nails with screwdrivers. Using Socratic method to describe these systems, is like trying to convey the theory of relativity using a childs watercolors.

    A computational definition of freedom, requires an understanding of computation.

    link to this | view in chronology ]

  • icon
    Uriel-238 (profile), 22 Apr 2016 @ 1:00pm

    They tried the same trick on "torture"

    Mr. Rumsfeld declared that waterboarding doesn't count as torture by redefining the terms of what is or isn't torture, which is how the Bush administration (and the Obama administration to follow) was / is able to waterboard detainees while claiming they don't torture them.

    It appears people play these semantics games when they would really rather not discuss the meat of the matter: What they're doing transgresses unjustly on the rights of others, and is a despicable practice, no matter how they justify it to themselves.

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 22 Apr 2016 @ 6:58pm

      Re: They tried the same trick on "torture"

      Mr. Rumsfeld declared that waterboarding doesn't count as torture by redefining the terms of what is or isn't torture, which is how the Bush administration (and the Obama administration to follow) was / is able to waterboard detainees while claiming they don't torture them.Mr. Rumsfeld declared that waterboarding doesn't count as torture by redefining the terms of what is or isn't torture, which is how the Bush administration (and the Obama administration to follow) was / is able to waterboard detainees while claiming they don't torture them.

      I read in the news the other day about a guy that was arrested for torturing his girlfriend by... waterboarding her. It seems that he thought that she was cheating on him and he was just "questioning" her about it. His defense was that waterboarding has been declared OK by the federal government, so he didn't do anything wrong. Of course, he's now sitting in prison. He didn't seem to understand that different definitions and different laws apply for different people.

      link to this | view in chronology ]

  • icon
    timlash (profile), 22 Apr 2016 @ 2:28pm

    More and More

    We as a society deserve neither liberty nor security. We've apparently surrendered that much freedom already.

    link to this | view in chronology ]

  • identicon
    John Smith, 22 Apr 2016 @ 3:49pm

    Everything is broken

    The Patriot Act is treason.

    First, hijack the language.

    Second, harass and prosecute anyone who points out that the emperor has no clothes.

    These are insane times in an insane world

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 22 Apr 2016 @ 5:47pm

    I'm not a linguist, a philosopher, or even a lawyer. I am, however, pretty sure that we're all doubleplusfucked.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 22 Apr 2016 @ 7:02pm

    Guillotines

    ...are not all that hard to make.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 23 Apr 2016 @ 5:26am

    It's "law enforcement" no longer - "semantics enforcement" sounds more like it.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 23 Apr 2016 @ 7:12am

    So I get the feeling when they try to repeal or ban that pesky 2nd amendment things will come to a head one way or another

    link to this | view in chronology ]

    • icon
      nasch (profile), 25 Apr 2016 @ 11:12am

      Re:

      So I get the feeling when they try to repeal or ban that pesky 2nd amendment things will come to a head one way or another

      They're not trying to repeal any amendments, just adding more and more exceptions to them. 1st, 2nd, 4th, 5th, 6th, 8th, and 10th, for example. The 3rd, 7th, and 9th seem to be in pretty good shape still.

      link to this | view in chronology ]

  • identicon
    Anonymous Coward, 24 Apr 2016 @ 11:42am

    New Rules

    Hence forth and hereafter, ALL laws on the planet Earth shall be written in Klingon, with commentary in High Romulan. The Vulcans may weigh in if they deem it necessary, but hold no decisive power to change the law. The citizens of Earth have NO power to criticize or change anything.
    2845 - UFP Council.

    link to this | view in chronology ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.