Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

10/30/2013
03:07 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

NSA Reportedly Taps Google, Yahoo Data Centers

National Security Agency can intercept traffic from Google's and Yahoo's data centers outside the U.S., according to documents from Edward Snowden.

Iris Scans: Security Technology In Action
Iris Scans: Security Technology In Action
(click image for larger view)
The National Security Agency can collect data as it flows across the data centers operated by Google and Yahoo outside the U.S., without assistance from either company and without the hindrance of security measures.

According to documents obtained by former NSA contractor Edward Snowden and interviews with government sources, The Washington Post reports that the NSA "sends millions of records every day from Yahoo and Google internal networks to data warehouses at the agency's Fort Meade headquarters."

Google chief legal officer David Drummond said in an emailed statement that the company has long been concerned about the possibility of this kind of snooping, which has motivated the company to extend encryption to more and more of its services.

"We do not provide any government, including the U.S. government, with access to our systems," said Drummond. "We are outraged at the lengths to which the government seems to have gone to intercept data from our private fiber networks, and it underscores the need for urgent reform."

Yahoo did not respond to a request for comment.

[ Goodbye, letter Captchas? Read Google Captcha Dumps Distorted Text Images. ]

When reports about the scope of NSA data collection began to appear in June, Google and other Internet companies denied providing open-ended access to customer data or to creating backdoors to allow access. They insisted they provided data only in accordance with legal process. The NSA's Prism system provides the agency and other law enforcement agencies like the FBI with access under the Foreign Intelligence Surveillance Act (FISA).

But it appears the NSA has another option. A document published by the Post describes an NSA project called MUSCULAR, operated jointing with Britain's GCHQ, by which the American and British intelligence agencies can access data flows and copy the data to their servers.

The exact method by which the network security for Google and Yahoo (and perhaps other Internet companies) has been thwarted remains unclear. But a slide from an NSA presentation on "Google Cloud Exploitation" includes a sketch indicating that the agency has the ability to withdraw and restore SSL protection at the point where Google's servers connect to the Internet.

The NSA only copies some of the data in the stream. Citing a top-secret Jan. 9 report, the Post says that 181,280,466 new records, metadata and content, were stored in the preceding 30-day period. And at least with regard to the email messages collected from Yahoo, it appears the NSA finds these messages more trouble than they're worth: The document provided by Snowden says, "analysts have complained of [the existence of the Yahoo mail archive], and the relatively small intelligence value it contains does not justify the sheer volume of collection at MUSCULAR."

At a hearing before the House Intelligence Committee on Tuesday, Gen. Keith Alexander said reports based on documents provided by Snowden misrepresented the scope of U.S. intelligence gathering. Alexander insisted that the gathering of U.S. phone metadata, a separate program, was lawful and that U.S. allies had helped gather metadata about individuals outside the U.S. James Clapper, Director of National Intelligence, defended spying on foreign leaders as a common goal of intelligence gathering. Recent reports indicating that the U.S. spied directly on European leaders have forced U.S. officials to justify the vast reach of U.S. data gathering and to mollify offended allies.

In a blog post on Wednesday, Glenn Greenwald, the journalist who, along with Laura Poitras, helped bring Snowden's revelations to light, characterized Alexander's claims as "unverified NSA accusations," noting that none of the many stories published in major newspapers about NSA spying have faced significant corrections.

"Nobody from the US government ever once — over the last four months — claimed that any of this reporting was inaccurate," Greenwald wrote.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
moarsauce123
50%
50%
moarsauce123,
User Rank: Ninja
11/1/2013 | 11:00:07 AM
re: NSA Reportedly Taps Google, Yahoo Data Centers
Even oversight will not reign in this self-serving bunch. The NSA exists only to be in existence and amass more funds and power. The only effective way to reign in the reckless spying is to cut funding to the NSA drastically. That will end any programs that are ineffective and with that cut back the Stasi approach of collecting everything.
cbabcock
50%
50%
cbabcock,
User Rank: Apprentice
10/31/2013 | 12:52:50 AM
re: NSA Reportedly Taps Google, Yahoo Data Centers
I don't think there are enough eyes in the federal government to watch all the things that the NSA is claimed to be watching. Nevertheless, the desperate need for oversight and rules governing what it does is self-evident at this point..
Firms Improve Threat Detection but Face Increasingly Disruptive Attacks
Robert Lemos, Contributing Writer,  2/20/2020
Ransomware Damage Hit $11.5B in 2019
Dark Reading Staff 2/20/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-18238
PUBLISHED: 2020-02-26
Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility ioLogik 2500 series firmware, Version 3.0 or lower IOxpress configuration utility, Version 2.3.0 or lower. Sensitive information is stored in configuration files without encryption, which may allow an attacker to a...
CVE-2019-17274
PUBLISHED: 2020-02-26
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.
CVE-2019-17275
PUBLISHED: 2020-02-26
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.
CVE-2020-3169
PUBLISHED: 2020-02-26
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a spe...
CVE-2020-3170
PUBLISHED: 2020-02-26
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could expl...