Slashdot Mirror


NSA to Become Government Net 'Traffic Cop?'

OriginalArlen writes "The NSA may be appointed 'Internet traffic cop', overseeing data sharing among US government agencies for Homeland Security, according to an A.P. report on SecurityFocus. Apparently the aim is to improve security of all government networks." This would seem to follow in the footsteps of creating the Department of Homeland Security, since the aim is to enable better sharing of data between government institutions.

48 of 170 comments (clear)

  1. Interesting Statistic by bigtallmofo · · Score: 5, Funny

    If the NSA becomes the "Internet Traffic Cop", can it be said that 99.9% of the NSA's budget is devoted to pornography?

    --
    I'm a big tall mofo.
    1. Re:Interesting Statistic by Tackhead · · Score: 2, Funny
      > If the NSA becomes the "Internet Traffic Cop", can it be said that 99.9% of the NSA's budget is devoted to pornography?

      So the old joke about getting a job with NSA by calling up your mother and talking about cryptography needs to be rewritten? Eew!

      "NSA is now funding research not only in steganography, but in all areas of advanced mathematics. If you'd like a circular describing these new research opportunities, just fire up your newsreader, download a .JPG of your mother, and ask for one!"

  2. NSA == Spy && !SecurityInforcer by Space_Soldier · · Score: 3, Interesting

    "Apparently the aim is to improve security of all government networks." That does not make sense; is not the job of the NSA to brake security of any network in order to easedrop on the conversations? It is a spy agency, not a security agency.

    1. Re:NSA == Spy && !SecurityInforcer by Anonymous Coward · · Score: 2, Interesting

      It's definitely a security agency [too]. Part of their job is to make sure US government use secure systems and protocols.

    2. Re:NSA == Spy && !SecurityInforcer by qbzzt · · Score: 4, Insightful

      That does not make sense; is not the job of the NSA to brake security of any network in order to easedrop on the conversations? It is a spy agency, not a security agency.

      The assumption is that a spy agency will have a good idea what kind of holes would allow other spy agencies to break in. Not a bad idea, IMAO.

      --
      -- Support a free market in the field of government
    3. Re:NSA == Spy && !SecurityInforcer by PornMaster · · Score: 3, Interesting

      I don't know if you remember the Clipper Chip initiative from the Clinton Administration -- '93/'94, but the NSA was pushing to get a key-escrow encryption chip in production and mandated for use when communicating sensitive data with the Feds.

      Of course, nobody outside the US would use it, since the gov't would keep a backdoor key...

      Here's some info from NIST about it that plainly talks about the NSA's involvement.

    4. Re:NSA == Spy && !SecurityInforcer by leerpm · · Score: 2, Interesting

      Personally, I don't see a problem with it either. The NSA is already reknowned for it's ability to secure networks & systems very well. I believe they write many of the books & guidelines that government agencies and companies use to secure their networks. Perhaps we will see an expanded use of SE-Linux?

    5. Re:NSA == Spy && !SecurityInforcer by lp-habu · · Score: 2, Informative
      NSA says differently:
      The National Security Agency/Central Security Service is America's cryptologic organization. It coordinates, directs, and performs highly specialized activities to protect U.S. information systems and produce foreign intelligence information. A high technology organization, NSA is on the frontiers of communications and data processing. It is also one of the most important centers of foreign language analysis and research within the government.
      This and more at their web site.http://www.nsa.gov/about/
    6. Re:NSA == Spy && !SecurityInforcer by digitalchinky · · Score: 2

      Do you mind if I laugh at that last comment for a while!!!! haha.

      You are talking about ancient versions of sun os and solaris that still allow the use of 'rsh' 'finger' 'telnet' 'ftp' and other things like 'nis'

      Internal security is very lax, audit trails are where it's at anyway - but this is why you get vetted for six months prior to landing a job.

      The systems are insecure, the average individual has no concept about security which is the same as any other large organisation. It's all left to just a few individuals to deal with entry/exit points - anything above secret (codeword) may or may not live on networks that are mostly not connected to any other - but it depends on the audience.

    7. Re:NSA == Spy && !SecurityInforcer by afidel · · Score: 2, Informative

      You are wrong, the NSA's first goal is to break enemy cyphers, but a strong second goal is to keep our own cyphers secure. Witness the tweak to the DES sbox selection, it made DES more secure against a class of attacks that the civilian sector wouldn't reinvent for several decades. It makes sense to have your people that know the most about security and breaking into secure systems establish the practices for other agencies to follow, now having them actually enforce said policies is another matter. It might lead to hostility as well as turf wars between the NSA and other branches of the security sector.

      Finally, from their own mission statement page.
      The Information Assurance mission provides the solutions, products, and services, and conducts defensive information operations, to achieve information assurance for information infrastructures critical to U.S. national security interests.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    8. Re:NSA == Spy && !SecurityInforcer by Ernesto+Alvarez · · Score: 2, Informative

      I'd say that making sure the government communications are secure is part of the NSA's job.

      They usually screen the ciphers to be used so they are secure enough (like DES and AES).

      Also SELinux (although it started as a semi-independent project) seems to show that security is indeed part of its task. They made SELinux to make a point about the need for mandatory controls, and to make others adopt MAC, enhancing security in the process.

      They probably develop ciphers and hardware for government use, too. Although I have no data on that, it is known that GCHQ (the british counterpart of the NSA) worked on public key encryption taking a security point of view (instead of an attacker's POV), that can be seen on J. H. Ellis' paper (PDF link). Nice reading material BTW. Very easy to understand even for nontechnical people and IMHO very insightful.

  3. erm... by REBloomfield · · Score: 5, Interesting

    I can't read the article, as my wonderful UK Government overseers have deemed it bad enough to go on the proxy blacklist, but... how is policing Government networks the same as policing the entire Internet???

    1. Re:erm... by Nastard · · Score: 2, Informative

      I'll karma whore and help you out at the same time...

      The article:

      White House may make NSA the 'traffic cop' over U.S. computer networks

      By Ted Bridis, The Associated Press Feb 14 2005 1:28PM

      The Bush administration is considering making the National Security Agency -- famous for eavesdropping and code breaking -- its "traffic cop" for ambitious plans to share homeland security information across government computer networks, a senior NSA official says.

      Such a decision would expand NSA's responsibility to help defend the complex network of data pipelines carrying warnings and other sensitive information. It would also require significantly more money for the ultra-secret spy agency.

      The NSA's director for information assurance, Daniel G. Wolf, was expected to outline his agency's potential role during a speech Wednesday at the RSA technology conference in San Francisco. In an interview preceding his speech, Wolf told The Associated Press that computer networks at U.S. organizations are like medieval castles, each protected by different-size walls and moats.

      As the U.S. government moves increasingly to share sensitive security information across agencies, weaknesses inside one department can become opportunities for outsiders to penetrate the entire system, Wolf warned. Attackers could steal sensitive information or deliberately spread false information.

      "If someone isn't working on being a traffic cop, giving guidance on how secure they need to be, a risk that is taken by one castle is really shared by other castles," Wolf said. "Who's defining the standards? Who says how high the walls should be?"

      The NSA already helps protect systems deemed vital to the nation's security, such as those involved in intelligence, cryptography and weapons. Wolf said the administration is considering whether to designate its fledgling information-sharing efforts also under the NSA's purview.

      The White House Office of Management and Budget currently directs efforts by civilian agencies to secure their computer networks.

      The NSA's information security programs are highly regarded among experts. "Bring it on. This clearly ought to be done," said Paul Kurtz, a former White House cybersecurity adviser and head of the Washington-based Cyber Security Industry Alliance, a trade group. "This will raise the bar across the federal government to a far more secure infrastructure."

      Congress has directed the NSA and the Department of Homeland Security to study the architecture and policies of computers for sharing sensitive homeland security information.

      In the latest blueprint for U.S. intelligence spending, lawmakers warned that attackers always search for weak links and that connecting distant systems "will further increase the vulnerability of networks that originally were developed to be susbstantially isolated from one another."

      It's unclear how the NSA's efforts would affect private companies, which own and operate many of the electrical, water, banking and other systems vital to government. Wolf said the agency already works to secure such systems important to military installations, but he denied that NSA would have any new regulatory authority over private computers.

      "When we talk about being the traffic cop, we're not in charge of these networks," Wolf said. "We're not running these networks."

      It also was unclear how much the effort might cost.

      "If you're going to have a network that everyone in government can get into, that means some agencies are going to have to come up to meet new, higher standards, and that's expensive," said James Lewis, director of technology policy at the Center for Strategic and International Studies, a conservative think-tank.

  4. Better sharing of data isn't what's needed... by Anonymous Coward · · Score: 2, Insightful

    ...since the aim is to enable better sharing of data between government institutions.

    The system, imperfect as it was, got information about the 9/11 attacks to the top of the political food chain in time to do something about it. The president did nothing about it.

    The problem isn't reorganizing data sharing. It's reorganizing leadership.

    1. Re:Better sharing of data isn't what's needed... by Jim_Maryland · · Score: 3, Informative

      While the information made it to decision makers in some form, acting on every threat would be impractical. How many other reports did decision makers get that turned out to be invalid? Hind sight is always much clearer.

      As for data sharing, the problem isn't technical rather it's a policy issue. "It's reorganizing leadership." - Leadership can be blamed, but it's not only at the top level as your statement about "The president did nothing about it." indicates. Each agency tends to consider their "secrets" to be more important than other agencies "secrets". Many people are responsible at various levels in the intelligence gathering process and placing blame on a single person, the president in your case, is not realistic. Many of the policies to protect information have been in place for quite a bit of time. DHS has the task of breaking down these barriers and will hopefully lead to better communication, but even with that, determining which threats are truly credible will still be a judgement call at various levels.

  5. Well hey... by EvilTwinSkippy · · Score: 3, Interesting

    The best cops are the ones you don't know are there.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
    1. Re:Well hey... by zoloto · · Score: 2, Interesting

      Well, this is very true in most cases however, I'm always worried about the abusue of power that sometimes comes with authority and especially with anonymity. You could have 100,000 seriously awesome, kick-ass agents out there that do in fact protect the rights and privlidges of the USA citizens while thwarting criminals, crime and other malicious deeds. But all it takes is one. One dishonest, power absorbed individual to abuse his granted powers of authority and it becomes public. Suddenly, these hidden cops are targeted when they're found and the people take out their rage on one of the good guys.

      I do believe in the good nature of people, but the responsibility of honor and integrity in the shadow of anonymity with authority is too much power for almost everyone to hold. I do not want this responsibility simply because of the personal temptation to not be so honest, especially when you know there is a tiny chance of getting caught, or in being complacent thus making things worse when you throw a blanket X (arrests, fines, punishments etc.) over a stereotyped group.

      In theory this could work. But unless the organisation dealt with themselves, policed themselves so efficently that severe misdeeds were punished with prison or confinement for example (maybe without judicial review, but that's iffy), it would never work in reality. You would need highly trained, talented, motivated, honorable men and women with the educational, cognitive and dicipline to do such a job.

      Unfortunately, people like that are hard to come by... espeically ones who can withstand and take the burden of responsibility while maintaining a level head and not letting his ego swell.

      Just my 0.02c

  6. Ambiguous by Nastard · · Score: 3, Insightful

    After reading TFA, I'm a little confused. From what I gathered, they won't be "traffic cops" so much network guards slash data escorts. It seems to me that "traffic cops" is misleading, since it implies that they'll have some sort of authority over personal data as well.

    Or perhaps I read it wrong, and they'll be setting up speed traps and beating ethnic people.

    1. Re:Ambiguous by EvilTwinSkippy · · Score: 2, Funny
      On the next episode of "Packets..."

      Cop: Son, is that an evil bit I see on your header?

      Kid under flashlight: No sir, it's... it's my brother's. Yeah...

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  7. My Rights Online? by yotto · · Score: 5, Insightful

    How does this affect MRO? They're not looking at my traffic, impeding my traffic, or even thinking about my traffic. They're routing government traffic.

    And they're a government agency. /confused.

  8. Not only did you not read the article... by daveschroeder · · Score: 2, Insightful

    ...you apparently didn't read the *summary*. From the first *sentence* of the summary:

    "The NSA may be appointed 'Internet traffic cop', overseeing data sharing among US government agencies for Homeland Security [...]"

    1. Re:Not only did you not read the article... by Anonymous Coward · · Score: 2, Insightful

      ...you apparently didn't read the *summary*. From the first *sentence* of the summary:


      "The NSA may be appointed 'Internet traffic cop', overseeing data sharing among US government agencies for Homeland Security


      You apparently still don't get it. If the NSA is looking at the data going back and forth between ALL U.S. government agencies, what do you think 99% of that data is? American citizens, or Sudanese?


      The NSA is a spy agency. Their task is to collect data from foreign communication intercepts. Now they're being tasked to monitor U.S. government traffic. That's in order to spy on you, bud...

  9. Whew.. by cyberfunk2 · · Score: 2, Insightful

    The way the story read at first sounded like it was the NSA reading all internet traffic..

    if it's some sort of government central aggregation DB for the various agencies, I dont see why we should have a problem with it.

    1. Re:Whew.. by PornMaster · · Score: 2, Interesting

      Just because it's not the subject of this article, don't assume that they're not watching your traffic.

      Echelon doesn't get much coverage these days, but I'm sure it's still out there.

  10. Oh that. by Anonymous Coward · · Score: 5, Insightful

    That's hyperbole.

    It's how we have debates over here in America. First we take out the facts. Look at them. Create the most extreme, yet superficially similar argument from them. Then we shoot them in the head, and bury them in a shallow grave. If anyone dares to impugn our integrity we first call them a "name-caller" but in much less flattering terms, and cite the fact that they are thus as proof of their unreasonable bias. If that doesn't work, we turn of their mic while our friends yell at them until we throw to commercial.

    Why do we behave in such a course, pointless and ignorant manner? A good question. I'm glad you asked it. We do it for the children. Now I've really got to take a break.

  11. Can't think of a better entity for the job by ScentCone · · Score: 3, Insightful

    Virtually every government agency is subject to evolution in their mission, especially when we experience a fundamental change in the technological landscape. The NSA probably has more experience, nuts-and-bolts-wise, with this subject than any other collection of humans on the planet. No question they've got the chops, but the budget warfare will be a bloody one, just like it was with the TSA or is shaping up to be on things like border crossing security or container shipment inspection. Compared to years past, these changes are happening very, very quickly. At least the NSA won't have to run out and figure out what sort of people to hire, or invent new tools to understand their mission in this case. It's more a matter of scale, and of getting, say, the IT guys at the Commerce Department to understand their nerdy new friends.

    --
    Don't disappoint your bird dog. Go to the range.
  12. Government networks by Anonymous Coward · · Score: 4, Informative
    This has nothing to do with the Internet. Government networks are separated from the Internet by an air gap. Unless you have physical access to a terminal (behind the nice guys with automatic weapons who check your credentials, at least where I worked), you can't get on SIPRNet or JWICS.

    I'm all for NSA making these classified networks more secure.

  13. I can see it now... by brian0918 · · Score: 2, Funny

    ... microsoft.com gets hacked, and they send Frank Parker back in time 7 days to fix it...

  14. Re:DHS is redundant by Erwos · · Score: 4, Informative

    "I never could come to grips with creating a Department of Homeland Security when we already had a National Security Agency."

    The National Security Agency's mandate is nothing at all like DHS's. Not even similar. If you thought about this for three seconds more, you would have also realized that NSA cannot, by law, conduct surveillance on US citizens or on US territory. This would prevent them from doing criminal investigations of any sort, wouldn't it?

    This is basically akin to asking why we need the FBI when we have the CIA. The organizations have the same general goal (protect the citizens of the United States), but are supposed to be doing two entirely different things.

    -Erwos

    --
    Plausible conjecture should not be misrepresented as proof positive.
  15. Re:DHS is redundant by ScentCone · · Score: 2, Informative

    I never could come to grips with creating a Department of Homeland Security when we already had a National Security Agency. It seems more like Bush had more out-of-work friends than he had positions to appoint them to.

    This is not interesting, this is a political troll. DHS focuses strictly on what its name says: domestic stuff. The NSA, traditionally, is tasked with listening in on those international communications that would imply threats to our interests. The NSA happens to be the best technical match (in terms of expertise and capacity) for helping to secure inter-agency networking, specifically to help keep that info from being cracked. It's a good fit.

    On a side note, has anyone else heard that the entrance to the DHS building is in an alley, and the entire office space is about as big is the lobby of the CIA HQ?

    That's mostly myth, of course. But the real point is that the CIA's Virginia HQ is a place where thousands of people actually perform analysis and publishing work. The DHS people are more supervisory, and coordinate the domestic security work that's done elsewhere (say, at the TSA).

    --
    Don't disappoint your bird dog. Go to the range.
  16. in time to do something about it by wiredog · · Score: 2, Informative

    Not really. If you read the 9/11 Commission Report it's pretty clear that the communications were pretty fouled up. It wasn't clear until after flight 93 went down how many aircraft had been hijacked, and what was being done about it.

  17. NSA has -always- had dual roles by ishmalius · · Score: 2, Interesting
    Once again, this is not news. NSA has always had the dual mission:
    • Cryptography : the design and implementation of secret communications.
    • Cryptology : the analysis of existing secret communications.
    Ever since its inception, it has had these two tasks... making secure codes for this government, and breaking the codes of other governments.
    Here is their mission statement
    1. Re:NSA has -always- had dual roles by clap_hands · · Score: 2, Informative

      Excuse my nitpicking, but you probably mean Cryptography and Cryptanalysis, which together form the field of Cryptology.

  18. The NSA? by tholomyes · · Score: 2, Informative

    There's No Such Agency.

    --
    When did the future switch from being a promise to a threat? -C. Palahniuk
    1. Re:The NSA? by nelsonal · · Score: 3, Informative

      If you want to learn more about the NSA and you find yourself in the Baltimore-Washington corridor, I whole heartedly reccomend going to check out the national cryptological museum which has several excellent exhibits regarding the history of codes used by countries (they have an enigma or purple and a Cray which is more than I've ever seen in other museums).

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
  19. Re:Anybody want to guess? by digitalchinky · · Score: 3, Interesting

    The 'effort' will cost virtually nothing more than one of the front end operators tuning up a modem somewhere, or adding a couple extra patches to the spiderweb...

    There's a logical reason for doing this - NSA has people already trained, systems already in place, will not cost the tax payer too much extra cash.

    DSD is going in a similar direction - no matter how much the public like to jump up and down about it - it's the way of the future. Ok, so ASIO is meant to deal with domestic tapping, but has a very 'strong' history of 'borrowing' DSD personnel for the technical aspects - why 'not' get DSD to do it?

    Simplification basically is the reason - no conspiracy theories, it just makes sense. If you are 'shocked' at this move, you are essentially blind to things that have been going on since the 'internet' started.

  20. Re:DHS is redundant by Wyatt+Earp · · Score: 5, Informative

    That's because you don't understand what NSA does.

    "The National Security Agency (NSA) is a United States government agency responsible for both the collection and analysis of message communications, and for the security of government communications against similar agencies elsewhere. It is a part of the Department of Defense. Its eavesdropping brief includes radio broadcasting, both from organizations and individuals, the Internet, and other intercepted forms of communication, especially confidential communications. Its secure communications brief includes military, diplomatic, and all other sensitive, confidential or secret government communications."

    http://en.wikipedia.org/wiki/NSA

    "The United States Department of Homeland Security (DHS) is a Cabinet department of the federal government of the United States that is concerned with protecting the American homeland and the safety of American citizens. This department was created primarily from a conglomeration of existing federal agencies in response to the terrorist attacks of September 11, 2001."

    http://en.wikipedia.org/wiki/United_States_Depar tm ent_of_Homeland_Security

    Office of the Secretary
    Directorate of Border and Transportation Security
    Transportation Security Administration
    U.S. Customs and Border Protection
    U.S. Immigration and Customs Enforcement
    Federal Law Enforcement Training Center
    Directorate of Emergency Preparedness and Resonse
    Federal Emergency Management Agency
    Directorate of Information Analysis and Infrastructure Protection
    National Cyber Security Division
    Directorate of Science and Technology
    U.S. Citizenship and Immigration Services
    U.S. Coast Guard
    U.S. Secret Service

  21. Re:DHS is redundant by skraps · · Score: 2, Insightful
    If you thought about this for three seconds more, you would have also realized that NSA cannot, by law, conduct surveillance on US citizens or on US territory.

    You must forget that we're talking about the people who make the laws. Your statement about whether the NSA can lawfully monitor US citizens shows your lack of thinking here. If it was possible for them to pass a law *creating* the DHS, then it was certainly possible for them to pass a law *modifying* the NSA, FBI, CIA, or whatever other acronym you want.

    --
    Karma: -2147483648 (Mostly affected by integer overflow)
  22. P2P Government Filesharing by NardofDoom · · Score: 2, Insightful

    The government should take its 'information sharing' cue from college students. You can find just about anything on P2P networks, right? So why not have a secure and authenticated P2P network available to government employees. That way, an FBI agent in Florida looking for information could fire up this application and search on the computers of everyone in the FBI, CIA, and NSA that he had access rights for. This information would be available instantaneously and freely. Think KaZaA + Kerberos. This doesn't seem to be that hard to implement. I even came up with a cute name for it: FiBbIr, the governmental knowledge engine.

    --
    You have two hands and one brain, so always code twice as much as you think!
  23. Analogy overuse alert level: RED by miu · · Score: 2, Interesting
    In an interview preceding his speech, Wolf told The Associated Press that computer networks at U.S. organizations are like medieval castles, each protected by different-size walls and moats.

    He then proceeds to add traffic cops, building standards, and interconnectedness to the mix and try to maintain the castle analogy.

    I know that analogy and metaphor can be a powerful tool in helping people understand systems, but it is painful to watch a speaker twist and manipulate their explanations trying to fit things into the framework they decided to use.

    It also makes me wonder if the speaker is intentionally misleading his audience.

    --

    [Set Cain on fire and steal his lute.]
  24. Re:NSA domestic? by superpulpsicle · · Score: 2, Interesting

    I know people who have had jobs with a relatively low level security clearance. These people claim that they could hear their phones tap at random times. I can't even imagine what people with high level clearance have to deal with.

  25. Here comes the new Sheriff by DrDebug · · Score: 2, Interesting

    The innocence (ignorance) of the early Internet is long gone. The hackers and scammers and spammers and phishers and terrorists have found they can profit from the current state of the Internet. Their exploits will cost us all.

    Our freedom and liberties are now fading. We will no longer be anonymous in our posts. The age-old question of liberty tempered by security concerns once again raises it's head.

    The NSA may be the new sheriff in town. They will require more money and more computer power than what they have now; but given the will of a security-conscious government, it will happen. Big Brother will be born again, unless a knowledgable judiciary reigns in their power.

    It was fun while it lasted. Everything changes.

  26. Hey... by Greyfox · · Score: 3, Funny

    If it means that the black helecopters abduct those fuckers who keep sending me Nigerian E-Mail scams and phishing scams, I'm all for it. They could stash them in the cell next to Manuel Noriega. Whatever happened to ol' Manuel anyway? Did he ever even get a trial? Is that a black helecopter? Ow! Hey quit it! #^!#@!~ [NO CARRIER]

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  27. More accurate heading by Zenmonkeycat · · Score: 2, Insightful
    "NSA to oversee communication between government agencies"

    The original reading gives the impression that the NSA is going to be watching all internet traffic, rather than limiting their scope to traffic going between governmental offices and departments.

    There's nothing about this that would seem to have a limiting effect on the rights of the general public, only the rights of those sending information from, say, their desk at the State Department to someone else's desk in the DIA.

    --

    *****
    Dear Mary,
    I yearn for you tragically,
    A.T. Tappman, Chaplain, U.S. Army.

  28. Mea Silly by Doc+Ruby · · Score: 2, Funny

    Yeah, you're right - I just woke up, and only caught my bleary-eyed total mistake after hitting submit. The Slashdot CGI took forever to process it, and I scrambled to hit STOP, but too late. I'm going to get pounded for that stupid error. "Should have used the Preview button." :(.

    --

    --
    make install -not war

  29. Not traffic cop, building code inspector by lawnsea · · Score: 2, Insightful

    Paranoid blathering by people who don't know a firewall from a fire hydrant aside, what TFA is talking about is giving the NSA authority over network security standards. This means that the NSA will CERTIFY that a particular network, say the FDA, meets the minumum standards necessary to take part in the information sharing network of the DHS. They will most likely also audit said networks regularly.

    In this light, they will be much more of a building inspector than a traffic cop, ensuring that your foundation is not made out of, say, gasoline soaked asbestos.

    Another important point is that they will be looking only at an organizations internal network. They can't control what happens outside the DMZ except to make sensible requirements regarding encryption and the like for sensitive information. (NOT Classified information, that's what SIPRnet is for; the actual term is 'Sensitive but Unclassified')

    As TFA pointed out, they have been doing this for some time in select areas of the US Govt. They are really good at it and have the clout to keep disparate agencies in line. The main aim of a decision like this is to ensure that Agent Joe at the FBI is not reluctant to send sensitive information to Agent Laura at the INS because he is worried that their computer security standards are not up to snuff.

    Does the NSA spy on the internet? well, duh, probably. Does this article have anything to do with that? Nope.

    google these to be less ignorant: INFOSEC, NCSC, 'network defense in depth'

  30. Re:NSA domestic? by ratnerstar · · Score: 2, Informative
    The CIA is indeed a foreign intelligence agency, but the grandparent post is correct: NSA does not, under usual circumstances, monitor "US persons." A US person is defined as a:

    a) US citizen
    b) Known permanent resident alien
    c) Unincorporated association substantially composed of US citizens or resident aliens
    d) Corporation is it is incorporated in the US and non directed or controlled by a foreign government.

    The NSA is not allowed to collect on any of those entities; see Executive Order 12333 and USSID 18. Of course, there are exceptions, which keep getting broader and more numerous. But if you're a US citizen, you can be reasonably sure that the NSA is not collecting on you.

    --
    Just because you sold your soul to the devil that needn't make you a teetotaler. --The Devil and Daniel Webster
  31. Re:NSA domestic? by quarkscat · · Score: 2, Informative

    Correction to parent post:
    "NSA did not have jurisdiction to spy on USA
    citizens on USA soil."

    That is why the ECHELON project was started.
    The British spy on USA citizens, the USA spys
    on Canadian citizens, the Canadians spy on the
    Australian citizens, and the Australians spy on
    the British citizens (or some other variation
    thereof). That way, no one country can be
    charged directly with spying on its own citizens,
    but all the information goes into the black bag.

    Today, however, the USA has the USA Patriot Act,
    so the government can do what it damn well wants,
    when it wants, and how it wants. This is also
    why the Intelligence Reform law places more (and
    new) powers for domestic surveillance in the
    hands of the Department of Defense (rather than
    the FBI). Because Dubya?Co can get away with it,
    and because that is the way "Rummy" likes it.

    Besides, both the CIA and the NSA have been using
    a portion of their undisclosed funding to buy up
    US shell companies as fronts for aggregating
    their domestic footprint. CEOs are ex-military,
    ex-intelligence, or ex-government types who have
    regularly crossed the "Chinese Wall" between
    government and commercial ventures. This is
    part of what President Dwight Eisenhower warned
    the public about 45 years ago regarding the
    military-industrial complex.

    If you don't like it, try teleporting into one
    of the other dimensions, because that is the way
    it is, and even your vote will not get you any
    reprieve from this reality.