AT&T Accidentally Leaks NSA Suit Information

op12 writes "CNET has an article describing how AT&T accidentally leaked sensitive information involving the NSA lawsuit. From the article: 'AT&T's attorneys this week filed a 25-page legal brief striped with thick black lines that were intended to obscure portions of three pages and render them unreadable. But the obscured text nevertheless can be copied and pasted inside some PDF readers, including Preview under Apple's OS X and the xpdf utility used with X11. The deleted portions of the legal brief seek to offer benign reasons why AT&T would allegedly have a secret room at its downtown San Francisco switching center that would be designed to monitor Internet and telephone traffic. The Electronic Frontier Foundation, which filed the class action lawsuit in January, alleges that room is used by an unlawful National Security Agency surveillance program.""

Comments

DMCA anyone?

[MarkByers]

But the obscured text nevertheless can be copied and pasted inside some PDF readers, including Preview under Apple's OS X and the xpdf utility used with X11.

Looks like Slashdot is informing readers how to avoid document protection mechanisms. I hope you don't get sued under the DMCA!

Proactive protection...

[Volante3192]

So, if there really are...
benign reasons why AT&T would allegedly have a secret room at its downtown San Francisco switching center
then why did...
the Bush administration [submit] a 29-page brief that elaborates on its argument that the case should be tossed out of court because of the "state secrets" privilege?

Seems like if they didn't do anything illegal they have nothing to fear.

What's amazing is

[thealsir]

That the US as a whole doesn't seem to give a shit about this. Look at the results of polls. Ranges from general aloofness to "it's good for National Security(TM)." Look at T's stock price. Huh, normally a company with such an incriminating lawsuit wielded against it would take at least somewhat of a hit in price (though the markets ARE very wierd right now). It seems that the techie crowd are the very small minority of folks who actually care that their phone calls were tracked without ANY precedent in the first place. We're not talking warrantless tracking, we're talking completely random warrantless tracking. What was the saying in Rome? Feed the masses and give them entertainment, and you can do anything to them.

Re:What's amazing is

[QuantumRiff]

The population as a whole can not conceptialize the power of correlated data. They see shopping "club cards" and see that they get a better price. They watch "24", and see that the bad guys are caught cause their license plates are pulled up in 5 seconds (all bad guys drive their own vehicles, of course!).. they see stoplight cams taking pictures of license plates as making the streets safer..

We geeks deal with data every day. We understand that patterns can be drawn from it, often very incorrect patterns based off of incomplete data.

The non-geeks cannot comprehend that in the next very few short years, they will get a knock on the door, and the police will say, On Thursday, at 8am, you shopped at the grocery store on 10th street, bought a bunch of bannana's and some milk. 20 minutes later, you were seen driving buy at 3MPH over the speed-limit on this street, which is only 5 minutes from the grocery store. You had better account for exactly what you did during that 15 minutes, because we are placing you under arrest for a crime that was commited in that area at that time. We also see that you have called your nephew 3 times in the last month, who was served 6 months (several years ago) in jail for an assault. And you give money to the ACLU, which makes our job harder.

Re:What's amazing is

[iminplaya]

Oh look! American Idol is on!

US pop show victor attracts more votes than any president

Re:Here's why _you_ should dismiss the case...

[packetmon]

Cryptome has had copies of these documents for some time (about a week). You should take some time to read them. This gentleman falls in line with Michael Lynn who lost his job for disclosing Cisco's flaws. With the government wanting to monitor everything and its mother, I think it serves them right to have the truth exposed. If you'd like an interesting read, read on:

mass surveillance of the entire population is logically plausible if NSA's domestic spying is not looking for terrorists, but looking for something else, something that is not so rare as terrorists. For example, the May 19 Fox News opinion poll of 900 registered voters found that 30% dislike the Bush administration so much they want him impeached. If NSA were monitoring email and phone calls to identify pro-impeachment people, and if the accuracy rate were .90 and the error rate were .01, then the probability that people are pro-impeachment given that NSA surveillance system identified them as such, would be p=.98, which is coming close to certainty (p_1.00). Mass surveillance by NSA of all Americans' phone calls and emails would be very effective for domestic political intelligence.

But finding a few terrorists by mass surveillance of the phone calls and email messages of 300 million Americans is mathematically impossible, and NSA certainly knows that. The Politics of Paranoia and Intimidation

Anyhow, here's an unredacted excerpt:

In January 2003, I, along with others, toured the AT&T central office on Folsom Street in San Francisco -- actually three floors of an SBC building. There I saw a new room being built adjacent to the 4ESS switch room where the public's phone calls are routed. I learned that the person whom the NSA interviewed for the secret job was the person working to install equipment in this room. The regular technician work force was not allowed in the room.

Why are they suing AT&T?

[Anonymous Coward]

You think they would sue the ones actually responsible for making this all happen, you know, the fucking government?

  Suing AT&T really misses the point...

Re:Why are they suing AT&T?

[Spy der Mann]

Suing AT&T really misses the point...

No, it tells companies that the government isn't the only one they should fear.

Re:Why are they suing AT&T?

[DragonWriter]

AT&T is the one prohibited by law from providing this information; the government isn't prohibited from receiving it, though they are prohibited from seizing it.

So they are suing the people that broke the law.

Plus, of course, sovereign immunity makes it difficult to sue the government unless it voluntarily decides to let you.

Re:Here's why _you_ should dismiss the case...

[packetmon]

You're wrong. FACT #1: Novak wrote the column. Cheney and Libby Scooter leaked it to him, read the court documents and get your information correct. FACT#2 Cryptography such as PGP is unbreakable as it is known. Assume? We know the breakdown of that term. FACT#3 If the NSA should decide to sniff encrypted traffic, and if by slight chance they had enough disk space and time to break the message, chances are, within the amount of time needed to break the encryption, an act of terrorism would have been acted out making their sniffing worthless. Takes time to break codes so I suggest you read up on the problems of cracking codes (A Tutorial on Linear and Differential Cryptanalysis)

128-bit encryption: 0.25 sextillion years. That's barebones SSL. PGP with a 4096 bit key? Right...

What the lawyers hid from you

[Anonymous Coward]

For those who cannot read the redacted pdf brief online, here are the parts in bold italics that the lawyers did not want you to read.

Plaintiffs contend that the Klein Declaration is itself sufficient to make out a prima facie case on their statutory claims. But even if one focused only on the two claims as to which plaintiffs make any argument, the Court could not determine the validity of those claims without first evaluating information covered by the government's state secrets assertion. Plaintiffs' suggestion that they need only show that certain communications have been split off into a "secret room" strips multiple elements from the statutes on which their claims are based and glosses over numerous issues that would have to be explored if their claims were ever to be fully litigated.

AT&T cannot confirm or deny any of the facts on which plaintiffs' complaint is based. But it is certain that the Klein Declaration and its associated exhibits are insufficient to demonstrate any illegal conduct by AT&T. Plaintiffs offer no evidence regarding what, if anything, actually happens to any data once it allegedly enters the alleged "secret room." Plaintiffs' purported expert provides merely "suggestive" configurations between unknown equipment in an AT&T facility. See Declaration of J. Scott Marcus In Support of Motion for Preliminary Injunction (Dkt. 32) 74. His strongest opinion, explicitly based "in terms of media claims" is conditioned entirely on a supposition: "if the government is in fact in communication with this infrastructure." Id. 39. Plaintiff's purported expert, of course, has no knowledge whether this is true or not.

Even accepting their allegations as true, plaintiffs' declarations fail to establish their claims. Key factual issues that bear directly on the viability of their legal claims and AT&T's defenses are subject to the Government's state secrets assertion and are unavailable. Without either confirming or denying the plaintiffs' assertions, AT&T notes that the facts recited by plaintiffs are entirely consistent with any number of legitimate Internet monitoring systems, such as those used to detect viruses and stop hackers. Although the plaintiffs ominously refer to the equipment as the "Surveillance Configuration," the same physical equipment could be utilized exclusively for other surveillance in full compliance with the terms of FISA - which even the plaintiffs themselves would not contend is unlawful. See id. 40 ("The SG3 Configurations could be used for a number of legitimate purposes."). The mere existence of these so-called configurations, even if plaintiffs' allegations were accurate, would not by itself be prima facie evidence of what - if any - information is intercepted or divulged or by whom. And it certainly is not prima facie evidence of any illegality. Plaintiffs fail to establish even a prima facie case that there has been an "interception" of "contents" within the meaning of 18 U.S.C. 2510(4) & (8), whether there has been "electronic surveillance" within the meaning of 50 U.S.C. 1801(f), and whether particular statutory exemptions do not apply, see, e.g., 18 U.S.C. 2702(c). Certainly nothing compels the inference that the contents of communications of "millions of ordinary Americans," (Motion for Preliminary Injunction (Dkt. 30) at 11), have been divulged to the government, in contradiction of the government's statement that communications are intercepted only if the government has "a reasonable basis to conclude that one party to the communication is a member of al Qaeda," or otherwise affiliated with al Qaeda. Press Briefing by Attorney General Alberto Gonzales and General Michael Hayden, Plaintiffs' Request for Judicial Notice (Attachment 2) (Dkt. 20).