Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I can tell you from first hand experience that getting a warrant TO the FISA court from a sponsoring agency is a massive bureaucratic battle in and of itself.

Reason being, the agency powers that be don't want to send something up that will be disapproved because it takes significant time and effort of general counsel and leadership of these agencies to process, implement and track to maintain compliance - even if the warrant is reasonably broad.

So these numbers really don't mean anything in terms of just "blanket surveillance." The bar for even getting something to the court, in my experience, is incredibly high and you typically need very high ranking people to sign off on it. Which means your evidence, reason for doing and ensuring that it is within the boundaries of EO 12333 and a million other regulations, has to be pretty airtight.



Imagine a system that works as follows. You can have people assassinated. In order to do so, however, you need to fill in a hundred-page form with exhaustive details of your personal finances, your medical history, and the contents of your computers' hard drives; and then you need to play six sets of tennis against a strong player and win at least two; and then you need to play a 7-game chess match against a holder of FIDE's International Master title, and win at least two. Oh, and then there's a fee of $100k. Once you've done this, your application takes six months to be processed. Every week during this time, you get a callback and are asked intrusive personal questions about your sex life, your religion, and how you have voted in past elections. And then, at the end of the six months, the person named on the form gets assassinated by government agents.

Can we agree that (1) this would be a "massive bureaucratic battle", and (2) the bar would be "incredibly high" ... but (3) this shouldn't reassure us much, because jumping through the bureaucratic hoops and meeting those difficult criteria doesn't actually constitute good reason for having your target assassinated?

Your comments about the FISA court seem a little like this. Let's stipulate that getting approval is a tiresome process, and that there are difficult criteria to meet. That doesn't in any way guarantee that it only happens in cases where it's actually a good idea.


That's a terribly analogy. The bureacracy isn't there as just a speedbump. It's there to make sure you don't waste time on cases doomed to fail. Secondly, surveillance is an essential tool in fighting crime. Assassinations are not.


> "Secondly, surveillance is an essential tool in fighting crime."

This is a very dubious assertion. I'm not aware of any evidence that mass surveillance deters or prevents crime at all, much less is "an essential tool" for doing so.

But even if one, for the sake of argument, concedes the point that mass surveillance does significantly deter or prevent crime, you still have a system set up where the costs of that surveillance (loss of privacy, loss of accountability for abuses of power, introducing/secretly discovering backdoors, etc) are borne by the least powerful--ordinary citizens--while the benefits of mass surveillance (concentration of power, ability to bribe/extort/intimidate rivals, being seen as "doing something" about terrorism, etc) accrue only to those who are already powerful.

That is the real problem with mass surveillance. It creates a positive feedback loop that only exacerbates existing power imbalances, inevitably leading to corruption and capricious injustices by those who are most able to get away with it. Having a speedbump on the road to that inevitable destination, even a big one, is not much of a consolation if the heading is still the same.


Exactly that, as long as you have those who have access and those that don't you have something to be exploited. There you move towards a great divided in power, towards total lack of privacy or you don't gather the data. I think the later is actually the least likely. There are a lot of really powerful things you can do with good data, that seems worthwhile. The issue is then exploitation of that knowledge. For sure advantage will be had by someone, question is extent of imbalance and lack of privacy.


I'm not talking about mass surveillance. I'm talking about the targeted surveillance that comes from the warrants they sign off on.


> I'm not aware of any evidence that mass surveillance deters or prevents crime at all, much less is "an essential tool" for doing so.

Oh, you think you are sneaky. This is so carefully worded. You explicitly twist the words of the GP, where they use "fighting crime" you turn that to meaning "deters of prevents crime." They mention "surveillance", and you turn that into "mass surveillance."

That's like me saying "I don't see how fingerprint analysis helps to deter or prevent crimes." Oh sure, it helps capture people after the fact, but I don't think there has ever been evidence show that fingerprint analysis has actually deterred or prevented crime.

So, while you can stand their, smug with your "technically correct" remark, the reality is "surveillance is an essential tool in fighting crime" has been proven to be correct time and time again, and has been instrumental in handing convictions for a long, long time.


It's not a great analogy indeed.

However, you also don't provide much proof that "surveillance is an essential tool in fighting crime". Its efficiency to deter/prevent crime, or even to help catch offenders a posteriori, is also highly debatable (I guess it's more likely to be helpful for the latter, but that still makes the definition of "fighting crime" rather vague as well).

For kicks, I like this paper on how street-lighting and CCTV cameras are apparently equally efficient as deterrent: http://onlinelibrary.wiley.com/doi/10.1111/j.1745-9133.2004.... .

In the case of digital surveillance, I'd be extremely cautious about its actual efficiency. And that something is legal and efficient doesn't necessarily warrant that its ethical and should be used.


There is another way in which the analogy is flawed. The analogy states that after the six months, when the forms have been reviewed or approved, the target dies.

If this is to be analogous to bulk surveillance, the assassination agency would have to discover that the target had actually died in an accident eight months ago, just before the forms were submitted, and they would simply retroactively dismiss any wrongful death or homicide cases that may be ongoing.

The panopticon operators are asking forgiveness rather than permission, and only for those specific instances where the surveillance needs to be laundered from illegally gathered to warrant-authorized.

As such, I have no faith that the spying has ever stopped, or slowed, or even decreased its rate of growth. The steep bureaucratic hurdle does nothing to prevent it. The most it does is limit the amount of information that can be moved from the shadows into the sunshine via that method, and strongly encourages less costly alternatives to actually honoring the law. One such workaround is "parallel construction", where the illegal spying is converted into an anonymous tip to another "innocent" agency of the state, who then gets reasonable suspicion on a pretext charge--like failure to signal a lane change, plus the invocation of the magical ritual phrase "I smell marijuana"--and then the road-patrol cop somehow finds 20 kilograms of cocaine in the trunk.

Fixing or eliminating the FISA court won't stop the behavior. Only actual accountability for the people actually doing the dirty deeds will help.


The mission of FISA is explicitly not for fighting crime! It is for foreign intelligence collection only. It's also ill-suited for the purpose.

State and federal law enforcement can request a warrant. The turnaround time is far lower, the search methods more diverse, and the evidence gathered can be used in court.

Unfortunately, state law enforement can still subpoena your email metadata and your phone records without a warrant: https://en.wikipedia.org/wiki/Smith_v._Maryland


So let me get this straight, to prevent agents from wasting time on cases that are doomed to fail, they make sure that agents waste large amounts of time going through bureaucracy for legitimate cases that will probably win?

That sounds perverse.


That's a straw man argument. Andrew said that the reason the court doesn't decline a lot of requests warrants is because the cases that are not "airtight" never make it to the court. I think this is a fair response to the original comment analyzing the court's "historical performance" as being too lax.


Why should we believe Andrew?


Good question. I don't know if we should, although I've heard similar things said about requests to non-FISA judges, as well. It makes sense to me that if investigators' careers involve learning to cross their t's and dot their i's before they go to a judge requesting an intercept, and they spend years doing it, they get good at it.

Separately from belief, which is somewhat subjective (i.e. it involves more inputs than is practical to list in a discussion), it's important to realize that on a logical level, there are at least two interpretations to a 99% acceptance rate: (1) the bar is really low and (2) there are pre-filters. The certainty with which I often hear (1) being declared or implied seems to miss this point.


You make good points to ponder. In this sort of situation I find that looking at the outcome or the end result provides more information towards the intent or competency of the subject questioned. In my opinion the only real reason for a FISA court existence is to prevent civil laws from being broken. Has the FISA court overstepped the constitution in favor of securing our liberty? Has the FISA court been successful in securing privacy for those they serve?


It's so existential when it's about you...


I don't believe you, sorry. You may be telling the truth but there are so many lies we've been told that I just don't. Sorry, that's how it is and I'm sure a very large number of people would agree with that. The FISA court /is/ a rubber stamp, how do we know? Ed Snowden told us about all the incredible amounts of overreach that the FISA court approved in secret.

We're at far more risk from public servants with delusions of grandeur and infallibility going unchecked than lunatics with bombs. Lunatics with bombs cannot destroy democracy & freedom.


> Lunatics with bombs cannot destroy democracy & freedom.

Indeed, the idea of lunatics with bombs seems to be far more effective at that kind of destruction than actual lunatics.


Your last two sentences should be framed and displayed in every office of every agency concerned.


Agree.

“The Constitution is not an instrument for the government to restrain the people, it is an instrument for the people to restrain the government - lest it come to dominate our lives and interests.” ― Patrick Henry


Totally agreed with you. Just look at anything David Cameron says for incontrovertible evidence of your last paragraph.


I've put a lot of thought into it, and the only reasonable description of David Cameron is that he is a fascist.


We're at far more risk from public servants with delusions of grandeur and infallibility going unchecked than lunatics with bombs. Lunatics with bombs cannot destroy democracy & freedom

Definitely in agreement there. Look at history, it's always been the case.


The problem isn't whether passing FISA is difficult or not. The problem is what does pass FISA.

That something is not illegal does not mean it shouldn't be illegal. The FISA process legitimises a kind of mass surveillance that shouldn't be legal to begin with.

This is why people call it a rubber stamp process. Even if they're only approving valid requests, the put problem is what is being considered valid.


This is exactly the case. The reason there are almost no denials is that there would have been a great amount of due diligence performed to ensure that FISA collection was warranted. The fact that there are any denials after such analytic rigor takes place, suggests that the FISA court is not a rubber stamp.

Every single year people who are read onto FISA must complete a comprehensive course on how to deal with FISA data, and it's not taken lightly. People lose their job over mishandling of this type of data, for reasons such as: poor query construction, failure to timely delete accidental collection on US Persons, or collecting without prior justification.


> failure to timely delete accidental collection on US Persons

You mean that rule which previously said you had to delete accidental collected information regarding US persons after 6 months? That rule was changed a year ago to 5 years, and in 4 years there won't be any systems left that can delete information and the 5 years will be extended again and again, in the same way as copyright.


It's believable that FISA approval is hard to get, but it's not reassuring. What gets through FISA and what people want the government to do don't match well at all. We've already seen leaked examples of what gets through FISA, and a lot of them are sweeping, invasive, and don't respect the US persons standard in the ways most people would like.

Basically, there's no way to claim the system works when we can watch it produce bad results.


The issue seems to be what is considered warranted/justified. Legal vs Moral

If the rules/procedures/expectations are well defined, one will attain a great rate of success simply by virtue of having a system which can be predicted ( failing candidates early, prior to submission ). This doesn't mean that the system is a rubber stamp, simply that it is reasonably consistent and that the expectations are clear.

This view of rigor/justice contradicts perhaps a common sense understanding which could be rephrased perhaps along the lines of 'should this be warranted/justified?'

It is frustrating perhaps as a result of this mismatch.

How many people are denied marriage applications?

Yet, recently with Marriage Equality...


The problem with your argument is that nobody can legally validate it's central premise, because nobody is allowed to review applications to the FISC.

Unless you have some sort of inside track, I must ask you how you know that applications are thorough and well constructed? Because the only way to be sure is to allow for public scrutiny, but the whole point of the FISC is to avoid this.


This reeks of the typical police brutality / killing internal affairs investigation: we investigated ourselves and found that we did nothing wrong. Trust us.


The NSA has re-interpreted the meaning of the word "relevant" (for investigation) in order to collect millions of people's data at once. How can the FISA judges ever approve that?

Also, you're forgetting that a federal Court has just said that the Patriot Act NEVER allowed for bulk collection. Yet the FISA Court allowed it. Why?! But that's what you get with a secret spy Court that has no accountability.


>The fact that there are any denials after such analytic rigor takes place, suggests that the FISA court is not a rubber stamp.

The fact that there are any indictments after such extensive training takes place suggests that Internal Investigations is not dismissing warranted claims of illegal police behavior.

I don't buy that logic at all.


I've been thinking about this for a while. This is a very compelling argument.

You must have left on horrible terms though, the FISA court has just approved tracking your personal calls. I realize it's not personal, heck, they did the same to me. Nonetheless, there is a warrant to track your personal data. I'm not sure how reliable you could be. Why would they collect your data if you aren't under investigation?

Anyway, this is a stupid ranty argument appealing to emotion rather than logic. Bulk collection seems wrong in a way i have a hard time articulating.


General warrants are unconstitutional. That's all you really need to know.


Honestly, this isn't meaningful reassurance. I'll grant that the FISA approval rate is a bad number to look at - most approval systems eventually get into a pattern where people only submit things that will get approved.

On the other hand, saying that it's hard to get something to the court means basically nothing unless we trust that the bureaucracy and the court share our standards for "good requests". Having seen what things the FISA court has approved in the past, we can say that the system doesn't work simply because it already hasn't worked.


If this is true, it doesn't help at all. Getting a patent approved by the USPTO takes literally years (plural plus). Yet look at all the terrible patents and how the patent system has essentially become the opposite of encouraging innovation.

Government agencies will use FISA because it's there and they know it will get them what they want regardless of whether it makes sense to do it or not, leaked documents have shown.

http://exitpromise.com/patent-approval-process/


So, it's OK that the court is effectively a rubber-stamp, because we can trust that the agencies requesting warrants won't ask for things they don't think are reasonable?

No.


I believe you misunderstood him. He seems to be saying that almost no invalid requests were submitted, because there was a rigorous review before submission. The court might not be a rubber-stamp, but the agencies happened to only send reasonable requests, so they got approved.


Damn near everything they sent to be approved was in line with how FISA rules on such things.

We've got two arguments

    - Did FISA properly check submissions were appropriate for their rules/laws.
    - Are FISA rules/laws appropriate for USA #1
I think we can all agree the first might be true (and thus they are not rubber stamping), whilst simultaneously mostly agreeing the second is definitely doubtful


This is a great summary of the problem, and of why we're talking at cross purposes. Defending the accuracy of the FISA decisions only defends points one, while almost everyone attacking the court is talking about point two.


Whoever mentions the numbers on how few applications were rejected as an argument seemingly can't be talking about point two. And that was what prompted this particular discussion, so I don't think you can claim the people involved are talking about point two.


The NSA asks for "general warrants" and you think that's "reasonable"?

NSA: Can we spy on everyone at once?

FISA: Why yes of course you can - BUT, you have to fill out this form first...and do it properly or we'll never approve you!

NSA: Oh..but that's such a drag! Okay, fine, we'll do it.

That's kind of what seems to be happening.


NSA: Aw man the supreme court just told us to stop. Fisa: Don't worry about them I'll approve it for "six" more months lol.


That's not what happened here.


Could have fooled me.


Not sure if you read the OP, but it made it clear the conflicting ruling was from the Second Circuit, not the Supreme Court. Also, the Second Circuit ruling was based on Congress not being clear on what was allowed; now that Congress passed another law that extends bulk collection for 6 months, that argument no longer applies.


I didn't say that, I actually have little idea what has been requested. I was just explaining what the above comment meant.

Also, my "reasonable" meant "legally reasonable".


I'm not saying anything about how much trust you should put in the system, rather that the review process is significantly more in depth than what these statistics can show.


Maybe so, but what evidence does the public have of that claim? We get only the tiniest peeks at this process, and they look terrible, and then we're told "it's not so bad, you don't have enough information to know."

Which is exactly what people have complained about.


Ok, let's assume anecdotally that this is true. This is your experience.

How would this be any different from the bar that a prosecutor has for bringing a criminal trial to court? Lost time, lost reputation, chance of losing the election. Every time a prosecutor decides to go all in, they're taking what could be a huge risk -- if not in that particular case then in the aggregate.

Yet we see much different numbers from courts when an open adversarial system is used.

So a reasonable outside observer is left to conclude that either the federal government is full of incredibly competent legal minds, for whom the slightest mistake would be anathema -- or it's a rigged game. Doesn't matter what they bring.

I understand I'm making a bit of a false dichotomy for rhetorical effect, but my argument is still sound. One of these options is much more likely than the other one.


That's not a fair comparison, because the FISA court isn't proving guilt, it's requesting a warrant by attempting to prove reasonable suspicion. It would be a fair comparison if you compared them to the percentage-granted for regular search-warrants, and what I can find online seems to indicate that it's fairly high for those as well, again because they're not proving guilt.


I stop you right at the term 'court'. The doors are locked and all proceedings are done in secret with no counterparty. I say this 'court' doesn't conform to its definition of a "place where justice is administered". Maybe "court theatre" or "cargo cult court" might be a more accurate term ?


I believe the first Snowden document leaked (the dragnet Verizon FISC decision) is evidence against this argument.


If the evidence bar is so high, why exactly have there never been any arrests made using the data? That is an awful lot of people affected negatively for a zero benefit program. You would think a massive bureaucratic battle to only submit valid warrants would result in at least one arrest.


>why exactly have there never been any arrests made using the data?

To clarify the statements in press have been that no terrorists have been arrested based on the data. That is not the same as never having arrests.

There have been plenty of domestic arrests but they don't typically fall under the "terrorism" scope because of the nature of the act. Espionage etc... can be proven with this data and actions can be taken (like arrests) more quickly and easily than determining if someone is going to attack something a la terrorism.

I have no involvement in this case but I would say almost for certain that portions of surveillance in this case went to FISA for approval: http://www.businessinsider.com/fbi-we-arrested-a-russian-spy...

A gripe I have with the community at large is that the messaging focuses too much on terrorism and not enough on the other functions that are seeing successes everyday (counterintelligence etc...).


They have been hiding the activities of FISA by using parallel construction as the basis for arrests: 1) Get dirt on someone illegaly. 2) Find a legal avenue to discover that same information now that you know it's there. That protects their collection methods when defendants try to find out how they were nabbed. The FISA warrant never has to be disclosed if no one outside the community knows it exists. Consequently they are never "officially" used for an arrest.


So the justification of the warrants is to use a "national security" cover for spying on people while evading discovery for when we don't actually use it for national security? That sounds pretty impeachable to me.


The problem with an explanation like that is three-fold:

1. It applies to agencies you know and more specifically parts of those agencies you have experience with. Many federal agencies have demonstrated that the left hand and the right hand don't always talk.

2. Other agencies are free to apply different policies (cough NSA cough DEA cough) that aren't in line with say, the FBI's policies.

3. This does not change the fact that the FISA court acts as a rubber stamp, the bulk majority of what it rubber-stamps might have met the requirement of EO 12333, some of ought might also have been legal under the constitution and existing laws or maybe the judges are so blasé that they just assume that most of what they see must be OK, it got there after all.


Essentially this is the "we know who is guilty" argument.


So you're saying that the pass/fail ration we see is meaningless because there's effectively a prior filter.

What's the pass/fail ratio for it?


Well, it's also very high. Obviously, because these are highly trained, hard working, excessively competent, law enforcement agents who wouldn't suspect a person if he weren't doing something wrong. Who's got the time for that what with them being chronically under-funded, under-trained, and under-staffed. /s


I am sorry but did you just say that bureaucracy is against the will of the government? Bureaucracy is the government!


Is there any reason at this point to believe that FISA is less than an NSA organ? Secret courts in the USA, what has the world come to?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: