Daily Archives: September 17, 2014

Members of Congress are set to leave Washington for an extended fall recess in a few days

The U.S. Congress is unlikely to pass legislation to end the National Security Agency's widespread collection of U.S. telephone records before leaving Washington, D.C., on a two-month break.

Congress is scheduled to leave town for its fall recess by the end of this week, with the USA Freedom Act still awaiting action in the Senate. Members of Congress will head back to their home districts to campaign for November's elections, with all members of the House of Representatives and a third of the Senate on the ballot.

The USA Freedom Act, with significant support in the House and the Senate, still has some lawmakers questioning whether reining in the NSA's phone records collection program would hurt the U.S. government's war on terrorism.

Absent congressional action, the U.S. Department of Justice and the Office of the Director of National Intelligence announced late Friday that they have asked for, and received, court authorization to continue the telephone records collection program. The U.S. Foreign Intelligence Surveillance Court reauthorized the program to continue until Dec. 5, with some limits proposed by President Barack Obama earlier this year.

It's important to "maintain the capabilities" of the telephone records program, "given that legislation has not yet been enacted," the two agencies said in a joint statement.

The House passed a watered-down version of the USA Freedom Act in May, but several senators have pushed for a pumped up version that they say would end the NSA's bulk collection of U.S. phone records.

The Senate version of the bill has even won the support of U.S. Attorney General Eric Holder and Director of National Intelligence James Clapper. But Congress has several other issues to deal with in coming days, including a continuing resolution to continue funding the government and a request from President Barack Obama to assist a fight against the Islamic State of Iraq and al-Sham [ISIS] in the Middle East.

Earlier this month, just after Congress returned from its summer recess, four tech trade groups urged the Senate to pass the USA Freedom Act.

Supporters of the bill said they're disappointed Congress hasn't passed the bill, but suggested it may still have life in a so-called lame duck session following November's election. Congress could also start over with a new bill after new members are seated in January.

Visit link:
NSA reform bill stalled with Congress headed toward fall recess

The National Security Agency has some of the brightest minds working on its sophisticated surveillance programs, including its metadata collection efforts. But a new chat program designed by a middle-school dropoutin his spare time may turn out to be one of the best solutions to thwart those efforts.

Prompted by Edward Snowdens revelations about the governments intrusive surveillance activities, loosely knit citizen militias of technologists and security professionals have cropped up around the world to develop systems to protect us from government agencies out to identify us online and grab our communications.

John Brooks is now among them.

Brooks, who is just 22 and a self-taught coder who dropped out of school at 13, was always concerned about privacy and civil liberties. Four years ago he began work on a program for encrypted instant messaging that uses Tor hidden services for the protected transmission of communications. The program, which he dubbed Ricochet, began as a hobby. But by the time he finished, he had a full-fledged desktop client that was easy to use, offered anonymity and encryption, and even resolved the issue of metadatathe to and from headers and IP addresses spy agencies use to identify and track communicationslong before the public was aware that the NSA was routinely collecting metadata in bulk for its spy programs. The only problem Brooks had with the program was that few people were interested in using it. Although hed made Ricochets code open source, Brooks never had it formally audited for security and did nothing to promote it, so few people even knew about it.

Ricochet is idiot-proof and anonymous.

Then the Snowden leaks happened and metadata made headlines. Brooks realized he already had a solution that resolved a problem everyone else was suddenly scrambling to fix. Though ordinary encrypted email and instant messaging protect the contents of communications, metadata allows authorities to map relationships between communicants and subpoena service providers for subscriber information that can help unmask whistleblowers, journalistss sources and others. Its not just these kind of people whose privacy is harmed by metadata, however; in 2012 it was telltale email metadata that helped unmask former CIA director and war commander General David Petraeus and unravel his affair with Paula Broadwall.

With metadata suddenly in the spotlight, Brooks decided earlier this year to dust off his Ricochet program and tweak it to make it more eleganthe knew hed still have a problem, however, getting anyone to adopt it. He wasnt a known name in the security world and there was no reason anyone should trust him or his program.

Enter Invisible.im, a group formed by Australian security journalist Patrick Gray. Last July, Gray announced that he was working with HD Moore, developer of the Metasploit Framework tool used by security researchers to pen-test systems, and with another respected security professional who goes by his hacker handle The Grugq, to craft a secure, open-source encrypted chat program cobbled together from parts of existing anonymity and messaging systemssuch as Prosody, Pidgin and Tor. They wanted a system that was highly secure, user friendly and metadata-free. Gray says his primary motivation was to protect the anonymity of sources who contact journalists.

At the moment, when sources contact a journalist, theyre going to leave a metadata trail, whether its a phone call record or instant message or email record [regardless of whether or not the content of their communication is encrypted], he says. And that data is currently accessible to authorities without a warrant.

When Brooks wrote to say hed already designed a chat program that eliminated metadata, Gray and his group took a look at the code and quickly dropped their plan to develop their own tool, in favor of working with Brooks to develop his.

See more here:
Middle-School Dropout Codes Clever Chat Program That Foils NSA Spying