Slashdot Mirror


NSA Ill-Suited For Domestic Cybersecurity Role

Hugh Pickens writes "Former CIA counterterrorism analyst Stephen Lee has an interesting article in the Examiner asserting that the National Security Agency is 'a secretive, hidebound culture incapable of keeping up with innovation,' with a history of disregard for privacy and civil liberties. Lee says that for most of its sixty-year history, the NSA has been geared to cracking telecom and crypto gear produced by Soviet and Chinese design bureaus, but at the end of the cold war became 'stymied by new-generation Western-engineered telephone networks and mobile technologies that were then spreading like wildfire in the developing world and former Soviet satellite countries.' When the NSA finally recognized that it needed to get better at innovation, it launched several mega-projects, tagged like 'Trailblazer' and 'Groundbreaker,' that have been spectacular failures, costing US taxpayers billions. More recently, the NY Times reported that the NSA has been breaking rules set by the Obama administration to peer even more aggressively into American citizens' phone traffic and email inboxes. Whistleblower reports portray NSA domestic eavesdropping programs as unprofessional and poorly supervised, with intercept technicians ridiculing and mishandling recordings of citizens' private 'pillow talk' conversations. Lee concludes that 'if the Federal government must play a role, then Congress and President Obama should turn to another agency without a record of creating mistrust — perhaps even a new entity. Meanwhile, NSA should focus on listening in on America's enemies, instead of being an enemy of Americans and their enterprises.'"

20 of 72 comments (clear)

  1. NSA 3 , Now it's personal by Culture20 · · Score: 2, Funny

    i l l Ill capitalization makes roman numerals!

  2. Good Luck with That by flaming+error · · Score: 5, Funny

    > Congress and President Obama should turn to another agency without a record of creating mistrust

    I'm afraid we have No Such Agency.

    1. Re:Good Luck with That by SatanicPuppy · · Score: 5, Insightful

      Yea, even if they did create a new agency, the simple reality is that most of the staff would be drawn from the NSA anyway. If you're going to reform the NSA, just do it, don't just add another player with roughly the same mission to make the turf battles even worse.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    2. Re:Good Luck with That by Narpak · · Score: 2, Interesting

      I always thought the Americans loved bureaucracy and redundancy. Police, FBI, US Marshall's, NSA, Homeland Security, CIA (and probably others that haven't yet been depicted in a major motion picture); I am sure their money is well spent funding all these agencies; especially those with overlapping jurisdictions.

    3. Re:Good Luck with That by SatanicPuppy · · Score: 2, Informative

      Yes...But no.

      The cops are the cops. Regular local law enforcement. Their jurisdiction is their local county/city.

      Then you have the state investigators. Basically the *BI. Like the FBI, but on the state level. They only deal with major crime, but only on a state level.

      Then you get the FBI. Major crime, federal level.

      CIA only deal with you dirty foreigners.

      NSA doesn't exist. Duh.

      The Marshall's deal with escaped prisoners.

      Homeland security is a republican pork project. There are cities in kansas that got more "terror" money than major cities that might actually get attacked. Don't confuse them with an actual agency.

      ATF and DEA and such are basically the enforcement arm of regulatory agencies. They have very narrow interests.

      Most of these organizations are very hierarchical. Police, State investigators, Federal investigators. Police, DEA. Police, ATF. Police, State Investigators. I once did a big seminar on whether or not it'd make sense to fold (for example) the ATF into the FBI, and when it comes down to it, it just doesn't make sense. They don't do the same stuff.

      That's about it.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  3. why NSA shouldn't be used for defense by SethJohnson · · Score: 5, Interesting

    The problem with the NSA is that it is part of the intelligence structure. If you insert them as a defensive player, more often than not, they will take absolutely NO action in order to protect their spying capabilities.

    At present, nobody knows exactly what the reach is of the NSA. Nobody knows what they can and can't hear. If you task them with defending assets, each probe or attack reveals new information about what the NSA has at their disposal, depending on what the response is. I really don't think the NSA is willing to compromise the secrecy of its capabilities in order to thwart hackers.

    Seth

    1. Re:why NSA shouldn't be used for defense by rtfa-troll · · Score: 2, Insightful

      Maybe they have been involved in defence but they've managed to as I've said before; they've managed to completely mess it up. I'll quote the illiterate AC who replied to me:

      Why would an agency dedicated to SPYING on other countries want the PUBLIC to use technologies such as IPSEC? They obviously understand the importance of computing security for our countries' future more than you will ever be able to comprehend.

      To answer the ACs first point, because they are also responsible for defense through their Informations Assurance Directorate; If the internet becomes part of the critical infrastructure of the USA (which it probably already has) then defences like IPSEC have to be widespread standards.

      The second point from AC mirrors yours. If the NSA has been doing so much for defence; if they understand it so well; where do the botnets come from?

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  4. What's this guy smoking? by mpapet · · Score: 4, Insightful

    I doubt the authors claims regarding the state of the NSA. It's fun to take a poke at big agencies like the NSA because they fit into that 'big bad government' mythology that is so prevalent today. He's presuming the NSA is somehow more effective than any other large organization. (public OR private)

    What I doubt is the possibility that a new agency would, in fact, respect the personal freedoms as spelled out in the constitution and probably codified with laws and court precedence. The steady corrosion of discipline and 8 years of Executive Office supremacy has worn away the last of the ideals spelled out in the Constitution.

    The last new agency I can recall is the Homeland Security Agency. They were gifted all kinds of previously independent agencies. The benefits are equally unclear on all sides of that monolith.

    --
    http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
  5. Like who? by Panaflex · · Score: 4, Insightful

    if the Federal government must play a role, then Congress and President Obama should turn to another agency without a record of creating mistrust

    Like, the FBI? Or perhaps the NRO? The CIA is just down the road. Maybe NASA could do it. Really - the facts are these - NSA already has the equipment, connections and brain power. You'll have a very difficult time replicating, much less staffing any enterprise like the NSA.

    Legally, they really are disqualified from performing the role of domestic spying. After all, they're administered by DOD, they've skirted American law by utilizing foreign bases for gathering, and are well known for bending the arms of domestic telecom companies.

    But they are a working tool - and they get the job done. It's difficult to argue against something that, so far, seems to work.

    --
    I said no... but I missed and it came out yes.
    1. Re:Like who? by flattop100 · · Score: 3, Insightful

      "But they are a working tool - and they get the job done. It's difficult to argue against something that, so far, seems to work." What is it, exactly, that they get done? And how do you know it works? You're turning a blind eye to a government agency with a huge amount of power that is performing illegal surveillance. I'm not nearly as trusting as you are...

    2. Re:Like who? by daten · · Score: 3, Informative

      The NSA also has an already existing and mature Information Assurance mission with experts publishing freely available cyber security guidance, configuration guides and software.

      In my opinion the NSA already has the expertise and experience required. Not everyone working there is assigned to domestic espionage.

    3. Re:Like who? by Panaflex · · Score: 2, Interesting

      There's a reason they operate in total secrecy - the information the NSA gathers is largely useless for domestic security purposes. But for commercial, political and legal purposes that information could be a deadly weapon.

      They're administered by the DOD. Unlike civilian operations, such as the FBI, NSA personnel very face real consequences for leaking information to the public. I don't know of any agency that has maintained such a degree of secrecy.

      How would you propose we protect such information, when operating under a civilian agency? How would you prevent such an agency and its personnel from being swayed under political influence, bribery and corruption, while operating in an open environment?

      I'm totally open to any credible suggestions - I just don't know how you can dig through trillions of personal & commercial messages, keep it all safe, and fund it without building a duplicate of the current NSA.

      --
      I said no... but I missed and it came out yes.
  6. Shrink 'em by Anonymous Coward · · Score: 3, Interesting

    Here's an idea: if the NSA has gotten to the point that even the White House or Congress can't control them, cut off their funding altogether and wish their employees good luck finding jobs. Create a new, much smaller NSA that has the authority to do one thing and only one thing: handle security for other government agencies, such as setting minimum standards for TOP SECRET transmission.

  7. Message right and wrong. by gubers33 · · Score: 2, Insightful

    Perhaps he is a little misguided in saying that we need to put the job in another agency's hands, but his reason for thinking so is not. I mean what we really need to do is take some power out of the NSA's hands. This is more of the mess left by the Bush Administration. They gave them so much power because of after 9/11 and the war on terrorism. It was a big problem immediately following 9/11 because we all wanted security so much we didn't realize how much we were losing. Obama is partially to blame for this when we voted to let the telcom companies off the hook last year. Perhaps it is time to give the Patriot Act the ax or rename it the Unconstitutional Act.

    --
    Just because you are wrong and I called you out on it doesn't mean I am a Troll.
  8. We want a competent domestic spying agency? by whiledo · · Score: 4, Insightful

    All this beating up on the NSA is fun and stuff, but are we really complaining that we don't have a competent domestic spying agency? We've already proven as a society to be incapable of electing a majority of leaders that respect privacy and are willing to give up a little temporary safety for essential liberty. So would it actually make us happy to have a bunch of g-men who are intelligent when it comes to new technology and could really fully exploit all the powers of databases and networks and algorithms to spy on us in an incredibly thorough manner?

    --
    Moderators: Before moderating a comment Insightful/Informative, check to see if a child post has already refuted it.
    1. Re:We want a competent domestic spying agency? by Deanalator · · Score: 2, Interesting

      That's not the complaint at all. If we had an agency actually geared for domestic cyber security, in theory, they would be able to crack down on NSA agents that have far over-reached their duties. I think it would be nice to have an agency more modeled after the FDA etc, auditing corporate networks the way FDA audits new food/drug products that are coming on to the market. If a company fails an audit, they receive a large fine, and just like the FDA does with research labs, companies need to be ready to be audited at any time. Any company with a business license and an Internet presence should be required to adhere at least to a minimum set of best practices.

  9. This guy's an idiot... by Moridineas · · Score: 3, Insightful

    Long story short, this guy is an idiot. I could go on at great length, but I'll just leave at this. (If anyone does want to discuss specifics in greater detail...which I'm sure they won't...I'd be happy to reply)

    First, a former CIA analyst from 10+ years ago doesn't know anything about the way NSA works. "CIA analysts" are the grunts of the intelligence community...more often than not they're the ones with english and political science degrees hired right out of college after having a grand time studying abroad in Prague or Barcelona. The author of this piece not only has CIA analyst on his resume but also Army...before making the jump to become a contractor (which could be anything from a security guard to copier technician). Anyway...

    Additionally, what he thinks he knows is ludicrous, and I've just picked (IMHO) the most egregious example:

    Whenever I met with my NSA counterparts, it was clear that they were stymied by new-generation Western-engineered telephone networks and mobile technologies that were then spreading like wildfire in the developing world and former Soviet satellite countries.

    Total nonsense. The proliferation of cellphones/satellite phones/wifi etc around the world has been one of the best things to happen to the NSA in YEARS. To claim otherwise is nutty.

  10. NSA more innovative than the DoD by stewbacca · · Score: 3, Informative

    the National Security Agency is 'a secretive, hidebound culture incapable of keeping up with innovation,

    Yeah, right. That's why the NSA-proprietary software actually works and the rest of the DoD is "innovating" by wasting billions of dollars on contractor-developed software that doesn't work. Maybe he thinks innovation means cutting off USB ports like the Army has done?

    1. Re:NSA more innovative than the DoD by Brian+Stretch · · Score: 2, Interesting

      the National Security Agency is 'a secretive, hidebound culture incapable of keeping up with innovation,

      Yeah, right. That's why the NSA-proprietary software actually works and the rest of the DoD is "innovating" by wasting billions of dollars on contractor-developed software that doesn't work. Maybe he thinks innovation means cutting off USB ports like the Army has done?

      And Lee just happens to work (or have worked) for such contractors. Gee, what a coincidink...

  11. SELinux anyone? by Suzuran · · Score: 4, Interesting

    I don't see the CIA contributing any code to us.

    If the CIA wants the NSA to stay out of domestic security, I say they can prove it by putting their programmers where their mouth is. All I'm seeing from my point of view is the NSA doing a lot of contributing and the CIA doing a lot of bitching.