NSA Blew $100 Million On Phone Records Over Five Years, Generated Exactly One Usable Lead

from the try-not-to-ask-what-your-country-can-do-for-you-because-as-you-can-see... dept

The telephone metadata program the NSA finally put out to pasture in 2019 was apparently well past its expiration date. Since the initial Snowden leak in 2013, critics have argued the program needed to die since it was obviously the sort of general warrant rummaging (only without the warrant!) the founding fathers headed off with the Fourth Amendment.

The program wasn't remade/remodeled until the passage of the USA Freedom Act in 2015. That took the phone records away from the NSA and left them at their place of origin -- the databases maintained by telcos and other service providers. The government was also required to put forward some sort of articulable suspicion before asking for phone records from telcos.

The NSA was uniquely unprepared to handle these sorts of transactions, having been built from the ground up to collect everything and sort through it later. Now that its searches were more confined, it frequently found itself obtaining more records than it could legally justify having. The cost of compliance managed to outweigh the benefits of the program and the NSA just kind of stopped approaching the FISA court with requests for communications metadata.

Still, proponents argued the program had value -- possibly unrealized -- and that it should not be written out of existence by the periodic surveillance powers renewal process. I have no idea what they planned to use as evidence for these claims. A new report by Charlie Savage for the New York Times makes it clear even the most obligatory cost-benefit analysis should lead Congressional oversight to question why it allowed the modified Section 215 collection to limp along for another five years.

A National Security Agency system that analyzed logs of Americans’ domestic phone calls and text messages cost $100 million from 2015 to 2019, but yielded only a single significant investigation, according to a newly declassified study.

$100 million for a single investigation lead. How's that for ROI? It actually produced two leads, but the other lead was a dead end that terminated an investigation before it could get past its initial stages.

Not only was the program useless, it was also redundant.

It also disclosed that in the four years the Freedom Act system was operational, the National Security Agency produced 15 intelligence reports derived from it. The other 13, however, contained information the F.B.I. had already collected through other means, like ordinary subpoenas to telephone companies.

Killing the program just makes sense. And Congress can do it with during the renewal process for the USA Freedom Act, which expires in March of this year. With this information in the public domain, no one can seriously argue the program should continue to consume tax dollars and provide almost zero usable intel for another five years. Given the fact these agencies can still use subpoenas to target phone records, it would seem far more beneficial for everyone if the NSA and FBI did a bit more targeted snooping, rather than use the Foreign Intelligence Surveillance Act to sweep up Americans' phone records.

Filed Under: mass surveillance, metadata, nsa, phone metadata, section 215, surveillance, usa freedom act

FBI Asks Congress To Permanently Reauthorize The Phone Record Collection The NSA Voluntarily Shut Down

from the IC's-make-a-wish-foundation dept

Earlier this year, the NSA -- after a few months of hedging -- finally mothballed its phone record collection program. The modified phone metadata collection had posed problems for the NSA since its remodeling with the enactment of the USA Freedom Act, which forced the NSA to ask telcos for specific records, rather than just demanding they hand over everything on a rolling 90-day basis.

Whatever benefits this program provided to the NSA was apparently outweighed by the technical problems it created. After hinting at its impending death on a podcast of all things, the NSA made it (sort of) official in May, saying it didn't see any reason to move forward with the collection, not after it had already been unofficially shut down for several months by that point.

The NSA may not need the phone records collection but it appears the FBI thinks it does. The easiest way for Congress to codify the program's shut down would be to let it expire at the end of this year. FBI Director Chris Wray is hoping to prevent a do-nothing Congress from doing nothing and letting the clock run out on the metadata collection.

Wray's testimony to the Senate Intelligence Community asks legislators to flip the switch back to "ON."

NSA’s decision to suspend the CDR program does not mean that Congress should allow the CDR authority to expire. Rather, that decision shows that the Executive Branch is a responsible steward of the authority Congress afforded it, and that the numerous constraints on the government imposed by the FREEDOM Act, including oversight by the FISC, are demanding and effective. As technology changes, our adversaries’ tradecraft and communications habits continue to evolve and adapt. In light of this dynamic environment, the administration supports reauthorization of the CDR provision so that the Government will retain this potentially valuable tool should it prove useful in the future.

Yeah, I know. He said the NSA is trustworthy. It isn't, of course. And neither is the FBI for that matter. But the FBI feels strongly that the program the NSA can't operate without violating the law might be useful at some point in the future for whatever reason. And the FBI wants this authorization to be permanent, so it doesn't have to come down to the SSCI and make this pitch every half-decade. But "just in case" isn't really a compelling reason to keep a questionable authority alive, much less forever.

It's not the only thing the FBI wants permanently authorized. It wants the rest of the business records collection -- the stuff that isn't phone records (but IS bank records, hotel records, car rental records, apartment lease records, etc.) -- permanently reauthorized. This gives the FBI and other members of the Intelligence Community (which now includes the CBP) warrantless access to a wealth of records our courts and Congresspeople haven't declared worthy of Fourth Amendment protections.

Then there are the roving wiretaps. The FBI wants those reauthorized forever, despite its history of abuse. And it wants to be able to target random people for almost no reason whatsoever with the "lone wolf" provision. Normally, it's only able to target individuals in terrorism-related investigations by showing they're tied to an international terrorist group. With this provision, it can target non-US persons based on the hunch they might be their own personal terrorist cell.

The FBI says it has never used this provision, which seems like a clear indication it's not really needed. Nevertheless, the FBI feels this -- like the phone metadata collection -- might become useful at some undetermined point in the future and wants to keep its options open.

This is why surveillance reform is an ongoing battle, not something that can be patched up here and there with legislation. Every reform effort contains sunset periods and when those appear on the horizon, IC members start petitioning Congress to not only reauthorize powers they're not even using, but to do so permanently so they don't have to ask for another renewal every half-decade or so. Every sunset contains the potential for a "forever" authorization of powers the IC doesn't like to discuss in public and have likely been abused periodically, if not frequently. At minimum, IC members should be forced to justify the continuance of expiring collections and authorizations. If they can't offer something better than the FBI's offering here, the programs should be allowed to fade from existence.

Filed Under: 4th amendment, congress, fbi, mass surveillance, metadata, nsa, phone metadata, section 215, surveillance