US Promoting Mesh Networks; Reporters Misleadingly Think They Somehow Stop Digital Spying

from the not-the-same-thing dept

A recent article in the NY Times talked about how the US State Department is behind a project to build up mesh networks that can be used in countries with authoritarian governments, helping citizens of those places access an internet that is often greatly limited. This isn't actually new. In fact, three years ago we wrote about another NY Times article about the State Department funding these kinds of projects. Nor is the specific project in the latest NYT article new. A few months back, we had covered an important milestone with Commotion, the mesh networking project coming out of New America Foundation's Open Technology Institute (OTI).

But the latest NYT article is especially odd, not because it repeats old news, but because it tries to build a narrative that Commotion and other such projects funded by the State Department are somehow awkward because they could be used to fight back against government surveillance, such as those of the NSA. The problem is that the issues are unrelated, and nothing in mesh networking deals with stopping surveillance. As Ed Felten notes, the Times reporters appear to be confusing things greatly:

There’s only one problem: mesh networks don’t do much to protect you from surveillance. They’re useful, but not for that purpose.

A mesh network is constructed from a bunch of nodes that connect to each other opportunistically and figure out how to forward packets of data among themselves. This is in constrast to the hub-and-spoke model common on most networks.

The big advantage of mesh networks is availability: set up nodes wherever you can, and they’ll find other nearby nodes and self-organize to route data. It’s not always the most efficient way to move data, but it is resilient and can provide working connectivity in difficult places and conditions. This alone makes mesh networks worth pursing.

But what mesh networks don’t do is protect your privacy. As soon as an adversary connects to your network, or your network links up to the Internet, you’re dealing with the same security and privacy problems you would have had with an ordinary connection.

The whole point of Commotion and other mesh networks is availability, not privacy. The target use is for places where governments are seeking to shut down internet access, not surveil on them. Yes, there is a case where if you could set up a mesh network that then routed around government surveillance points you could circumvent some level of surveillance, but the networks themselves are not designed to be surveillance proof. In fact, back in January when we wrote about Commotion, we pointed out directly that the folks behind the project themselves are pretty explicit that Commotion is not about hiding your identity or preventing monitoring of internet traffic.

Could a mesh network also be combined with stronger privacy and security protections? Yes, but that's different than just assuming that mesh networking takes on that problem by itself. It doesn't -- and it's misleading for the NYT to suggest otherwise.

Filed Under: access, commotion, mesh networks, privacy, security, state department
Companies: new america foundation, oti

Detailed Study Suggests NSA Rarely Useful In Stopping Terrorism

from the but-fear! dept

While we've already seen multiple detailed analyses of why the NSA's bulk collection of email data under Section 215 of the PATRIOT Act hasn't been particularly helpful in stopping any real terrorist attacks on the US, there are still other NSA programs as well. The folks over at the New America Foundation have put out a detailed new report looking at whether any of the NSA's programs have been effective. The report finds, exactly as everyone else has, that the Section 215 effort was only helpful in finding one guy who sent some money to Somalia. However, more importantly, it also looks at the other big NSA program, the one that comes under Section 702 of the FISA Amendments Act which includes (among other things) the PRISM program that got a lot of attention. Once again, the evidence of 702's usefulness is fairly minimal. The report finds that it was used in less than 5% of investigations of people charged with terrorism since 9/11.

The full report looks at all 225 individuals who were either part of Al Qaeda or an associated group and charged with terrorism since 9/11. In looking over every plot they were involved in, you see that much more traditional means of catching terrorists were involved in almost every case. There are community/family tips, informants, other non-NSA intelligence, routine law enforcement, self-disclosed by publicizing his own extremist activity, "suspicious activity" reports... and of course, plots that weren't actually prevented. There is, to be fair, a large number of plots where the discovery is from "unclear" means -- and it's entirely possible that some of those were discovered under the Section 702 programs. However, at the very least, this calls into question just how valuable either of these key NSA efforts really are.

Filed Under: 9/11, fisa amendments act, nsa, patriot act, section 215, section 702, terrorism
Companies: new america foundation