NSA spies infiltrate Google, Yahoo

Posted on by

In this slide from a National Security Agency presentation on “Google Cloud Exploitation,” a sketch shows where the 'Public Internet' meets the internal 'Google Cloud' where user data resides. Two engineers with close ties to Google exploded in profanity when they saw the drawing

From the Washington Post in the USA:

NSA infiltrates links to Yahoo, Google data centers worldwide, Snowden documents say

By Barton Gellman and Ashkan Soltani, Wednesday, October 30, 5:19 PM

The National Security Agency has secretly broken into the main communications links that connect Yahoo and Google data centers around the world, according to documents obtained from former NSA contractor Edward Snowden and interviews with knowledgeable officials.

By tapping those links, the agency has positioned itself to collect at will from among hundreds of millions of user accounts, many of them belonging to Americans. The NSA does not keep everything it collects, but it keeps a lot.

According to a top secret accounting dated Jan. 9, 2013, NSA’s acquisitions directorate sends millions of records every day from Yahoo and Google internal networks to data warehouses at the agency’s Fort Meade headquarters. In the preceding 30 days, the report said, field collectors had processed and sent back 181,280,466 new records — ranging from “metadata,” which would indicate who sent or received e-mails and when, to content such as text, audio and video.

The NSA’s principal tool to exploit the data links is a project called MUSCULAR, operated jointly with the agency’s British counterpart, GCHQ. From undisclosed interception points, the NSA and GCHQ are copying entire data flows across fiber-optic cables that carry information between the data centers of the Silicon Valley giants.

The infiltration is especially striking because the NSA, under a separate program known as PRISM, has front-door access to Google and Yahoo user accounts through a court-approved process.

The MUSCULAR project appears to be an unusually aggressive use of NSA tradecraft against flagship American companies. The agency is built for high-tech spying, with a wide range of digital tools, but it has not been known to use them routinely against U.S. companies.

White House officials and the Office of the Director of National Intelligence, which oversees the NSA, declined to confirm, deny or explain why the agency infiltrates Google and Yahoo networks overseas.

In a statement, Google said it was “troubled by allegations of the government intercepting traffic between our data centers, and we are not aware of this activity.”

“We have long been concerned about the possibility of this kind of snooping, which is why we continue to extend encryption across more and more Google services and links,” the company said.

At Yahoo, a spokeswoman said: “We have strict controls in place to protect the security of our data centers, and we have not given access to our data centers to the NSA or to any other government agency.”

Under PRISM, the NSA already gathers huge volumes of online communications records by legally compelling U.S. technology companies, including Yahoo and Google, to turn over any data matching court-approved search terms. That program, which was first disclosed by The Washington Post and the Guardian newspaper, is authorized under Section 702 of the Foreign Intelligence Surveillance Act and overseen by the Foreign Intelligence Surveillance Court.

Intercepting communications overseas has clear advantages for the NSA, with looser restrictions and less oversight. NSA documents about the effort refer directly to “full take,” “bulk access” and “high volume” operations on Yahoo and Google networks. Such large-scale collection of Internet content would be illegal in the United States, but the operations take place overseas, where the NSA is allowed to presume that anyone using a foreign data link is a foreigner.

Full NSA statement in response to the @WashingtonPost story. Notice they don’t deny breaking into Google and Yahoo: here.

The National Security Agency (NSA) is spying on hundreds of millions of users of Google and Yahoo services, according to a report yesterday in the Washington Post based on internal documents provided by former NSA contractor Edward Snowden: here.

Google’s been working with the NSA since 2003: here.

Amidst a rising diplomatic crisis over mass electronic espionage in Europe by the US National Security Agency (NSA), European officials attacked US spying operations in Europe, including the wiretapping of German Chancellor Angela Merkel. They rejected NSA chief General Keith Alexander’s claims that the NSA relied entirely on European intelligence agencies to carry out its espionage operations: here.

WHARTON PROFESSOR: HOW GOOGLE ABUSED ITS POWER “Google has committed so many abuses, over so many years, that it has hard to know where the European Commission should start. And, I believe, once the filing of complaints and litigation start, there will be additional complaints. There will be more complaints, in more jurisdictions. Eventually even Google’s cozy ties with the current administration in Washington will not be enough to protect it, and there will be litigation in the US as well.” [HuffPost]

Australia’s Liberal-National coalition government has announced that Chinese transnational telecommunications giant Huawei will not be awarded contracts connected with the country’s fibre-optic Internet infrastructure project. The decision followed suggestions by senior government figures that the ban—imposed last year by the former Labor government on the advice of the Australian Security Intelligence Organisation (ASIO)—could be lifted. It appears that the Obama administration again intervened to ensure that Beijing cannot cut across its untrammelled surveillance operations in Australia, one of Washington’s key “Five Eyes” intelligence partners: here.

Related articles