How the NSA Profits Off of Its Surveillance Technology

blottsie writes: The National Security Agency has been making money on the side by licensing its technology to private businesses for more than two decades. It's called the Technology Transfer Program, under which the NSA declassifies some of its technologies that it developed for previous operations, patents them, and, if they're swayed by an American company's business plan and nondisclosure agreements, rents them out. The products include tools to transcribe voice recordings in any language, a foolproof method to tell if someone's touched your phone's SIM card, or a version of email encryption that isn't available on the open market.

Comments

I can't quite decide

[i kan reed]

I know that the default majority slashdot opinion is, and for good reason, that everything the NSA is poisoned with malicious intent. But I can't actually decide if making useful security tools available is somehow against our citizens' interests.

I mean the compounding factors of large corporations, and big dumps of money, and selective availability all suggest problems too, but in a circumstantial way.

I can't make up my mind this time.

Re:I can't quite decide

[gstoddart]

One of the things which concerns me, is you're putting all powerful surveillance tools into the hands of private corporations.

Those corporations can then use and abuse that technology in ways which may ignore the law, and bypass any oversight.

And then if the NSA has included in their contract a share of the take, or simply invoke the PATRIOT act to demand it ... then you can effectively have government outsourcing things they're not legally allowed to do out to private industry, but then it doesn't break the law when private industry hands back the data they'd not have been able to collect legally.

At which point, they can basically do an end run around the law, and the people who are tasked with oversight.

And since we know they already lie to the people who are supposed to be overseeing the ... I have zero way that you can treat an organization like this as anything other than a rabid dog.

At this point, I think the only way to get the truth out of the NSA is to waterboard it out of them. Because they've demonstrated they don't give a damn about providing it to us.

I rank this as being massively creepy, and with legal implications which boggle the mind.

And, yes, I do come down heavily on the tinfoil hat end of the spectrum. But paranoia doesn't preclude malfeasance, especially when there's already evidence of malfeasance.

Big Brother is scary. Big Brother in bed with private industry is terrifying.

Re:I can't quite decide

[CaptainDork]

Truly, I feel the big bad monster out there is business. They have ways of getting their tentacles into everything.

It all started when the shoe shine boy started taking tips for information.

Re:I can't quite decide

[Anonymous Coward]

Former TTP contractor here: First, there are PLENTY of issues one can have today with NSA and the American defense and intelligence community as a whole (note: FORMER federal contractor)... but it can be argued that TTP is one of the few unqualified "good" things the agency does.

In short, there are a bunch of federal regulations and statutes dictating that technologies paid for by the federal taxpayers should (barring lingering classification concerns) be made available for licensing and further development by those taxpayers, usually in the form of private companies, universities, the staffs of other public agencies, etc. There are different rules and processes for each, with the "fees" often being nominal and dependent on the scope and extent of the patent's application, and working to the benefit of the actual inventor(s).

Also, this is NOT an NSA-specific exercise. Most (and I imagine all, but can't confirm individually!) federal laboratories participate in technology transfer - the Federal Laboratory Consortium is a publicly available entity maintained for just that specific purpose.

And as a final aside... if you had seen the size of the Agency's TTP office (manned by a skeleton crew of administrative staff and often at the mercy of the general counsel/patent attornies) and the numbers TTP actually deals with, you would find a lot of the scare language in the original article patently (puns!) ridiculous. It took us two years to get an update on the NSA.gov website, which apparently only ended up being a basic refresh of content - so much for all the hidden Agency slush fund pull!

Re:I can't quite decide

[ColdWetDog]

Three Rings for the Fortune 100 in New York City.
Seven for Haliburton in its halls of stone,
Nine for FBI doomed to lie,
One for the Dark Lord on his dark throne
In Fort Meade where the Shadows lie.
One Program to rule them all, One Program to find them,
One Program to bring them all and in the darkness bind them
In Fort Meade where the Shadows lie

Re:I can't quite decide

[sabri]

The NSA has done a lot of things over the years, most of them

Funded by the taxpayer already.

Now if companies are paying the NSA to get access to their research, they're paying twice: once as a taxpayer, and now as a "customer".

If the technology can be declassified, the information should be public property, as its research was funded by the taxpayer.

Re:I can't quite decide

[hey!]

It depends on how the money is handled. If it goes into the general fund, then I think this is great. If it is used to fund NSA operations, I think it is bad. That would make it too easy for the agency to avoid Congressional oversight.

In general self-funding government agencies are terrible idea-- that's why running the government "like a business" sounds good but is a lousy idea. Government agencies should serve the public, they shouldn't be profit centers. That's a conflict of interest. In places where police funding depends on seizing property involved in crimes -- typically drug crimes -- there's an incentive to do it to make money rather than fight crime.

There are some exceptions, like water districts that are funded by water and sewer fees, but these are essentially utilities that are run by the public, their rates set by boards elected by the ratepayers. But no agency should be self-funding except that it is controlled by the people providing the funding.

Re:I can't quite decide

[gstoddart]

their security systems and auditing don't have much oversight

So, they're incompetent then?

That makes me feel a whole lot better.

So, now instead of a bunch of lying bastards who abuse their power, ignore the law, and lie to the people who provide oversight ... they're a bunch of incompetent, lying bastards who abuse their power, ignore the law, and lie to the people who provide oversight.

That's what we need.

Re:how many copies of that encryption ...

[i kan reed]

If you're the NSA, do you hand out new secret encryption that you, yourself can't break? Or do you deal in purposefully flawed encryption, that generally works pretty well, but you can break in the back room when you want?

This is very creepy ...

[gstoddart]

So, all of those things we can't get funding for because they might be illegal?

No problem, we'll just raise the money by selling some technology.

And, while we're at it, we've also got a sideline business of charging shakedown money to politicians.

If they're a government agency, and developed these technologies with tax-payer money, are the technologies theirs to sell or patent?

This sounds like an agency which has more or less decided it is entitled to do anything it wants to, and the more it moves some of its operations into the private sector, the less oversight it comes under.

This sounds like some class A bullshit to me.

Re:Security is Big Business

[i kan reed]

Let them break the constitution

Like it's some kind of ordinance with jail time attached. I don't know how you're imagining constitutional enforcement works, but whatever it is you're thinking, it's not accurate.

1. Elected officials can break the law(this is the only thing that entails punishment).
2. Laws can be unconstitutional in whole or in part, and executive can decide that, and refuse to enforce, or the courts can decide that(more commonly), and throw it out, in whole or in part.
3. The manner of executive enforcement of constitutional laws can be unconstitutional, and courts can give orders throwing out cases that match those criteria.
4. The courts can rule in an unconstitutional way about constitutional enforcement of constitutional laws, in which case you're fucked.

Re:Security is Big Business

[Cro Magnon]

The obvious solution is to elect a President who will appoint a law-abiding AG. The obvious problem with that is, most candidates don't admit that they'll violate your rights while campaigning. :-P

Honestly?

[s.petry]

Perhaps providing a few facts will help you decide. In order to do so, lets remove the term "security tools" because this is not the only thing they are renting out. Let us also remove "NSA", as they are not the only Government agency that does this.

1. Government agencies are funded with Tax dollars. They do not use their own capital to develop products, they use your money and my money.
2. Your taxes have never been reduced by the Government reselling this technology. That is absolutely zero dollars you or I have seen in refunds due to "selling" what your investment pays for.
3. Government agencies are supposed to be reigned in by their Budgets. Lawful requests receive lawful funding, unlawful requests are supposed to be removed from the budget by Congressional committee prior to approving the budget.

These facts should then lead to several key questions that should be answered by not just the NSA, but all Government agency following similar procedures.

1. Does the funding reduce the tax payer footprint for the agency, or extend the budget beyond what Congress is approving?
2. What accountability is there for how revenue from "renting" is being spent?

Given that the answer to those two question are "increases budget, does not decrease tax payer burden" and "no accountability" this should be illegal on all fronts. It is used to bypass both Congressional oversight and legal restrictions on spending.

I'm right there with you if you were to say "Not all technology developed by the Government is bad.", but that is not the point of debate we should be making. Most technology is not inherently bad, it's the implementation and abuse that is bad.

Re:Security is Big Business

[Anonymous Coward]

Precedent had already been set.

By Clinton lying to Grand Juries. By Reagan and Iran Contra. By Carter...oh wait Carter never did shit other than show up, shake some hands, and talk about peanuts and saving gas. Most people on /. are probably to young to remember but I find it funny that Jimmy Carter was more of a black president that Obama will ever be. I don't mean that in a bad way, Carter had is own impediments, mostly from the liberal wing of the Democratic party, that prevented him from really accomplishing anything significant. And if it wasn't for Ted Kennedy maybe Carter wouldn't have suffered the complete ass kicking in the 1980 election, but there was no way he was going to beat Reagan. Anyways off topic, why Carter got elected....By Nixon and watergate.

I'm sure someone older than me could keep the chain going....my theory is every 2 term president will have something to tarnish their record and every single term president is basically just an unempowered placeholder that either road their immediate predecessor's coattails (i.e. Bush 1) or took advantage of a a conveniently timed disgruntled public (i.e. Carter).

My first thought was -

[Anonymous Coward]

That's ok right? I mean technology transfer to the public sector is a good thing. But then I thought, wait a second, why should this only be available to a few select businesses who can afford to pay for it? This work was funded by the American taxpayer. These businesses then acquire it without having taken the investment risk and cost of R&D. So basically, they've (the businesses) foisted their development costs off onto the American public, with the explicit and directed complicity of an agency that's supposed to be working in the public's interests. If the tech transfer is a good thing to do (irrespective of value judgements of the actual tech and its usage), then it should be made available back to the entire American public, not to give a competitive edge to selected corporations.

So yeah, I have an issue with the ethics of this.

Re:Security is Big Business

[swb]

Well, give Ashcroft some credit. He pushed back while sick in the hospital against Bush White House cronies and refused to sign off on domestic spying when they wanted him to.

http://www.washingtonpost.com/...

Are we even sure this is legal?

[Immerman]

As I recall the US government is not allowed to own copyrights for exactly this reason - hence the fact that all those NASA images etc. generated by government institutions are public domain. I'm frankly surprised that the government would be allowed to own patents since exactly the same reasoning should apply.