Discovering NSA Code Names Via LinkedIn

Okian Warrior writes with this news as reported by TechDirt: "The Washington Post revealed some of the code names for various NSA surveillance programs, including NUCLEON, MARINA and MAINWAY. Chris Soghoian has pointed out that a quick LinkedIn search for profiles with codenames like MARINA and NUCLEON happens to turn up profiles like this one which appear to reveal more codenames: 'Skilled in the use of several Intelligence tools and resources: ANCHORY, AMHS, NUCLEON, TRAFFICTHIEF, ARCMAP, SIGNAV, COASTLINE, DISHFIRE, FASTSCOPE, OCTAVE/CONTRAOCTAVE, PINWALE, UTT, WEBCANDID, MICHIGAN, PLUS, ASSOCIATION, MAINWAY, FASCIA, OCTSKYWARD, INTELINK, METRICS, BANYAN, MARINA.' TRAFFICTHIEF, eh? WEBCANDID? Hmm... Apparently, NSA employees don't realize that information they post online can be revealed."

Comments

A fleeting moment of rich irony.

[Picass0]

>> "Hmm... Apparently, NSA employees don't realize that information they post online can be revealed."

I admit to laughing at this.

Re:A fleeting moment of rich irony.

[Bob the Super Hamste]

First thing I thought was pay back is a bitch.

Re:A fleeting moment of rich irony.

[icebike]

>> "Hmm... Apparently, NSA employees don't realize that information they post online can be revealed."

I admit to laughing at this.

Or perhaps these are designed and planted to attract people interested in these acronyms and program names to lure them into some sort of trap, or merely to record who looked at these profiles.

Ah, ok, I'll go take my meds now. Latr, but remember: fcsjkeaw jlcekfw6eh ae nasje ki4tsvt!

Re:A fleeting moment of rich irony.

[Cenan]

There are at least two confirmed idiots working for the NSA [1], it's not that much of a stretch to think there's more where they came from.

Re:A fleeting moment of rich irony.

[SJHillman]

People will keep looking until they find something. Give them what they wanted to find and they'll stop looking.

Re:A fleeting moment of rich irony.

[Cenan]

Congress will keep looking until it's too much like work and they give up. Give them anything and they'll stop looking. From there it's just the whistleblowers that are left

Fixed to reflect new data.

Re:A fleeting moment of rich irony.

[Will.Woodhull]

These idiots have some level of access to the assets that the NSA is developing.

And that is reason enough to shut the NSA down completely, and charge its career bureaucrats with criminal negligence wrt corruption of the US Constitution which they are supposed to be protecting.

If the NSA can allow these idjits to mess around, then how many of their other, more intelligent, personnel have found ways to make a little cash on the side by selling the kind of stuff Snowden has given away?

Re:A fleeting moment of rich irony.

[dywolf]

first thing i thought was red herring

Re:A fleeting moment of rich irony.

[Anonymous Coward]

First thing I thought was pay back is a bitch.

Yeah, because knowing there's a project called "DISHFIRE" is so utterly helpful to figuring out what they're doing. Because we all live in conspiracy theorist wish fulfillment movies where this one grizzled screwball is screaming about how he knew there was something called "DISHFIRE", and why didn't we believe him before, and now we can stop it... somehow... whatever it is.

On a side note, though, "DISHFIRE" is an incredibly hilarious name for just about any project.

Re:A fleeting moment of rich irony.

[pegr]

Submitted earlier with a better headline. (sigh)

No, the gotcha is not revealing project code names. Why post code names if the names are secret? The gotcha is...(ahem)

REVEALING THE NAMES OF ANALYSTS WITH ACCESS TO TOP SECRET PROJECTS!

Re:A fleeting moment of rich irony.

[ganjadude]

Pretty much. Once we have the names of a program. we can submit FOIA requests on them. thats one of the catch 22s with FOIA. you have to know what you are looking for, you cant just say "I want all the info on the NSA spying on americans" you need to say" I want all information on codenameA codenameB codenameC." will they give it? doubtful but its a start.

Re:A fleeting moment of rich irony.

[Anonymous Coward]

Yeah, because knowing there's a project called "DISHFIRE" is so utterly helpful to figuring out what they're doing. Because we all live in conspiracy theorist wish fulfillment movies where this one grizzled screwball is screaming about how he knew there was something called "DISHFIRE", and why didn't we believe him before, and now we can stop it... somehow... whatever it is.

The names are mostly random because they don't necessarily bear any resemblance to the projects.

But having a publicly-trawlable bunch of data that links real-world humans, their real-world qualifications, and the projects that they've been read in on, however, is precisely the sort of social graph that an adversary could use to figure out what the codenamed projects are actually all about.

If there are dozens of cunning linguists and digital signal processing experts working on DEATHSTAR, and all the people who list MSPACMAN happen to have oceanography backgrounds or prior experience at companies that make precision optics, it doesn't take a genius to see that despite their names, DEATHSTAR is the project that's more likely to be NSA Line Eater, and MSPACMAN the project that involves sharks with frickin' lasers on their heads.

Re:A fleeting moment of rich irony.

[1s44c]

I laughed until I realized that these are the people who have legal permission to force IT giants to do whatever they want.

The world is screwed.

Re:A fleeting moment of rich irony.

[Sir_Sri]

REVEALING THE NAMES OF ANALYSTS WITH ACCESS TO TOP SECRET PROJECTS!

That, and a lot more is easy to find now that the NSA data centres are off in the middle of no where.

When your major work is done in major metropolitan places this is hard, but in bluffdale Utah this is super easy. Look for the expensive houses on the land registry and being publicly listed. Anyone who doesn't have any obvious source of a big income works on something important at either camp williams or the NSA data centre. You have their house, spouse(s), kids, kids schools everything. All with public information.

Small towns are incredibly easy to infiltrate for this sort of thing. If you want to know who is most vulnerable all you need is the local pimp and an employee at the local credit union and you can find everything you need about enough people in the town to get everything you want.

There are other things you could look for too. Who has the fastest internet service, who gets a lot of computer parts packages from newegg etc. Who frequents the expensive restaurants, who drives the newest most expensive cars? If you want to figure out who the special forces guys are in any western country, go to the city where their training base is are and look for sports cars. (Gurkha's obviously not until recently as they weren't paid enough for sports cars).

Re:A fleeting moment of rich irony.

[Vintermann]

It isn't just the names that are revealed. You can infer from the profiles quite a bit of information about what these programs are used for. Take quotes like these (from various public posts):

Utilized ANCHORY/MAUI reporting database to correlate and verify target selections.
Utilized AIRGAP for discovery of priority targets within the missions AOI.
Used Marina as a tracking and pattern of life tool on selected targets within the missions AOI.
Used Marina as a raw SIGINT data viewer for detection and analysis of priority targets.
Used HOMEBASE as coordination and tasking tool with other DNI analysts.

Sounds like FOIA time

[Bob the Super Hamste]

To me this sounds like it is time to file a bunch of freedom of information act requests. The bigger question is what if anything will the media do with this newf ound info.

Re:Sounds like FOIA time

[alphatel]

To me this sounds like it is time to file a bunch of freedom of information act requests. The bigger question is what if anything will the media do with this newf ound info.

I requested more info for you, here is some you should enjoy
http://s3.documentcloud.org/documents/716069/boozallenhamiltonnsa.pdf

Apparently Booz employees forgot that their cloud documents are.... well, public

Re:Sounds like FOIA time

[pellik]

My bet is they will talk about Snowden some more.

Re:Sounds like FOIA time

[pellik]

That pdf is just someone copy/pasting keywords they recognize but apparently don't understand. For example they are looking for experience with penetration testing, and then the next requirement is pen testing. Reverse Engineering comes up twice in the same list. It's so repetitive that I'm just not sure I can believe this is a legitimate document of any sort.

Re:Sounds like FOIA time

[PopeRatzo]

The bigger question is what if anything will the media do with this newfound info.

Considering how the press reacted to Edward Snowden's revelations, they will probably ask the question, "Should LinkedIn be prosecuted for leaking this information?" and, "Is LinkedIn a traitor?"

Simple explanation

[Sparticus789]

Project code names are not classified, ever. Every project has a unclassified code name like any of the above which can be used for things like budgeting and frankly, resumes. A guy I know tried to get "FLUFFY BUNNY" approved as a code name, but they denied it. The easy way to tell, is that unclassified code names are single words chosen by a random computer word generator, and the classified code names are always 2 words, chosen again by a random computer word generator.

While this may be interesting, the reality of the Fort Meade area is that any job in intelligence, analysis, or IT with a location of Fort Meade or Annapolis Junction, MD is a NSA job. Some of them even post on Craigslist and one time, I had a Facebook add pop up that said "Want an NSA Clearance?" (not a typo, the company messed up their grammar).

Re:Simple explanation

[TheNinjaroach]

Want an NSA Clearance?

That grammar is not incorrect. Phonetically, the "N" begins with a vowel sound so "an NSA" is correct.

Re:Simple explanation

[heypete]

I had a Facebook add pop up that said "Want an NSA Clearance?" (not a typo, the company messed up their grammar).

According to Purdue, words that start with consonants may be preceded with "an" if they have a "vowel sounds". They give the example of "an MSDS" and "an SPCC". Similarly, words that start with vowels but have consonant sounds use "a".

I'm no expert in grammar, but it seems possible that "an NSA clearance" may be correct.

Any experts want to chime in?

Re:Simple explanation

[Sparticus789]

Simple answer, yes. Complex answer, sometimes the project managers want a hip and cool project name so they try to come up with a generic term for their project that is similar to what the project does. The project name has to go through a CAO (classification advisory officer), of which there are 20-25 at any given time. They are always people in positions that can be named to the public, so any name of an individual on the NSA website is a CAO. Like the Director of the NSA or the division chiefs. The CAO determines whether or not the project name gives away too much information about the details of the project.

In all reality, all of those project code names are probably one specific type of information that just came from different sources. Pinwale is e-mails. So one of them is a database of foreign HF intercepts, another is a database of foreign-bound cell phones, one is a database of every phone call made by political opponents of the administration, etc.

Re:Simple explanation

[BForrester]

You're mostly right.
  - "Want a NSA clearance?" is incorrect.
  - "Want an NSA clearance?" is better.
  - "Want NSA clearance?" would be better still. There's no need for an article at all.

Re:Simple explanation

[Mashdar]

In English, a/an are selected phonetically and are otherwise identical. "An" does not imply plurality (in fact it implies singularity).

Substituting "NSA" for "security" in your examples does make a difference, because "NSA" begins with a phonetic vowel sound, whereas "security" begins with a phonetic consonant.

Articles in English are selected phonetically, not typographically, and thus "an NSA" is correct, whereas "a NSA" is not. This can be confusing to look at, but who ever said English was easy?

Re:Simple explanation

[a-zarkon!]

That grammar is correct. Phonetically, the "N" begins with a vowel sound so "an NSA" is correct.

FTFY - Grammar police should endeavor to avoid use of the double negative.

Re:Simple explanation

[chihowa]

You choose the appropriate article based on how the acronym is pronounced. NSA is pronounced "en es ay", so "an" precedes the "en". NASA is pronounced "na sa", so "a" would precede the "na".

If you pronounced NASA as "en ay es ay", you would use an "an" before it. Try actually saying "a N". It's awkward to say, which is why we say "an N".

Re:Simple explanation

[mysidia]

one is a database of every phone call made by political opponents of the administration

Whoa... talk about abuse of power......

sudo make me a sandwich

make: *** No rule to make target `me'. Stop. (What kind of sandwich?)

Black Briar

[Archangel Michael]

Treadstone

Missed out the important ones

[Anonymous Coward]

So long as CODE NIGHTMARE GREEN, MAGINOT BLUE STARS, and SCORPION STARE aren't on the list, I'm happy.

Well, happier.

Well, less unhappy.

Re:Missed out the important ones

[lgw]

SCORPION STARE was disappointing anyhow. I want a room where any camera in the panopticon state can be displayed on the wall monitor, and I want a basilisk in that room! Hand camera-weapons just seem so ... everyday.

ARCMAP is not a code name-

[uncwjason]

Awesome! I don't work for the NSA, but I do use ARCMAP....although Esri would prefer it spelled "ArcMap". It's common GIS software, not a NSA program.

arcmap

[hackula]

Arcmap is the unofficial name for ESRI's flagship product ArcGIS Desktop.

Gives me an idea, though

[Anonymous Coward]

I really need a job. So, I figured I could pose as an NSA person. And when a potential employer calls for a reference, they'll just say, "We cannot confirm nor deny that he worked here."

My job description could be ANYTHING. I could make up ANYTHING.

Skilled in intelligence platforms such as: BANANA, MACARONI, METRICS, SAES, SPURIOUS, HEX, SEX, LEXX, PECS.

Programmed in Python, Jython, NSAthon.

Designed and developed a super computer that has broken all records.

Re:Gives me an idea, though

[Anonymous Coward]

Developed a ciphertext-only key-recovery attack on AES-256.

Re:Gives me an idea, though

[Dr_Barnowl]

Developed a plaintext recovery attack for SHA-256

minority report

[beefoot]

> Used a variety of tools and data to provide advanced threat warnings to American civilian, government, and military personnel He can't possible be thinking of getting a better job with that line on his linkedin profile. That's so last-decade.

No. "an" is right.

[Arakageeta]

"The rule is that you use a before words that start with a consonant sound and an before words that start with a vowel sound."

It's all about sound. "N" is pronounced "En." Hence, "an."

Grammar Girl: http://tinyurl.com/nuj8h5a

Re:Just saying Hi!!

[Sponge Bath]

You know who I am.

On the internet, the NSA knows you're a dog.

Re:Just saying Hi!!

[awkScooby]

You know who I am.

Yes, you're a foreigner, until proven otherwise.

Re:Are all of these acronyms?

[SJHillman]

The government retains a crack team of acronymists. They spend days laboring over each acronym making it perfect. Some examples

MANPADS (Man-portable air defense system)
DILDO (Direct Input Limited Duty Officer)
ASSBAG (Airframe Structure Support Boeing Advisory Group)

**I didn't make these up, there are sources for them but that would take more effort than Slashdot is accustomed to. Plus I accidentally closed those tabs already.

Re:Michigan

[Impy the Impiuos Imp]

Wtf is right. We haven't gotten this much attention since the Great Lakes Avengers branch.

But he lacks one skill

[Hentes]

All these skills and he still didn't figure out how to turn off capslock.

Re:Just saying Hi!!

[Quirkz]

Everyone's a foreigner to somewhere, right?

Re: Irony as now google is your pal

[Em Adespoton]

Digging a little deeper, if you refactor the contents of those search results, you get a VERY complete picture of what's going on... for example, PINWALE is the code name for Mission Systems, developed for the Military by Northrop Grumman. Most of the people who developed the system appear to be on LinkedIn :)

That's just a taste; anyone good at graph theory and data mining could probably put together quite a dossier of people and projects based on the public info available through LinkedIn/Google.

I can just imagine the interview

[reluctantjoiner]

Interviewer: Tell me an example of when X happened and how handled it?

AC: Sorry, that information is unavailable.

Re:Just saying Hi!!

[RabidReindeer]

Everyone's a foreigner to somewhere, right?

We prefer the term "potential enemy combatant".

Paste that into Google and this is what you get.

[hazeii]

Kinda surprised this isn't linked yet (as all you need to do is paste the string into Google)

Make of this what you will.

(Do I worry about being woken at 3 in the morning with a gun in my face? Well, yes, I do).