Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

10/30/2013
03:07 PM
Connect Directly
LinkedIn
Twitter
RSS
E-Mail
50%
50%

NSA Reportedly Taps Google, Yahoo Data Centers

National Security Agency can intercept traffic from Google's and Yahoo's data centers outside the U.S., according to documents from Edward Snowden.

Iris Scans: Security Technology In Action
Iris Scans: Security Technology In Action
(click image for larger view)
The National Security Agency can collect data as it flows across the data centers operated by Google and Yahoo outside the U.S., without assistance from either company and without the hindrance of security measures.

According to documents obtained by former NSA contractor Edward Snowden and interviews with government sources, The Washington Post reports that the NSA "sends millions of records every day from Yahoo and Google internal networks to data warehouses at the agency's Fort Meade headquarters."

Google chief legal officer David Drummond said in an emailed statement that the company has long been concerned about the possibility of this kind of snooping, which has motivated the company to extend encryption to more and more of its services.

"We do not provide any government, including the U.S. government, with access to our systems," said Drummond. "We are outraged at the lengths to which the government seems to have gone to intercept data from our private fiber networks, and it underscores the need for urgent reform."

Yahoo did not respond to a request for comment.

[ Goodbye, letter Captchas? Read Google Captcha Dumps Distorted Text Images. ]

When reports about the scope of NSA data collection began to appear in June, Google and other Internet companies denied providing open-ended access to customer data or to creating backdoors to allow access. They insisted they provided data only in accordance with legal process. The NSA's Prism system provides the agency and other law enforcement agencies like the FBI with access under the Foreign Intelligence Surveillance Act (FISA).

But it appears the NSA has another option. A document published by the Post describes an NSA project called MUSCULAR, operated jointing with Britain's GCHQ, by which the American and British intelligence agencies can access data flows and copy the data to their servers.

The exact method by which the network security for Google and Yahoo (and perhaps other Internet companies) has been thwarted remains unclear. But a slide from an NSA presentation on "Google Cloud Exploitation" includes a sketch indicating that the agency has the ability to withdraw and restore SSL protection at the point where Google's servers connect to the Internet.

The NSA only copies some of the data in the stream. Citing a top-secret Jan. 9 report, the Post says that 181,280,466 new records, metadata and content, were stored in the preceding 30-day period. And at least with regard to the email messages collected from Yahoo, it appears the NSA finds these messages more trouble than they're worth: The document provided by Snowden says, "analysts have complained of [the existence of the Yahoo mail archive], and the relatively small intelligence value it contains does not justify the sheer volume of collection at MUSCULAR."

At a hearing before the House Intelligence Committee on Tuesday, Gen. Keith Alexander said reports based on documents provided by Snowden misrepresented the scope of U.S. intelligence gathering. Alexander insisted that the gathering of U.S. phone metadata, a separate program, was lawful and that U.S. allies had helped gather metadata about individuals outside the U.S. James Clapper, Director of National Intelligence, defended spying on foreign leaders as a common goal of intelligence gathering. Recent reports indicating that the U.S. spied directly on European leaders have forced U.S. officials to justify the vast reach of U.S. data gathering and to mollify offended allies.

In a blog post on Wednesday, Glenn Greenwald, the journalist who, along with Laura Poitras, helped bring Snowden's revelations to light, characterized Alexander's claims as "unverified NSA accusations," noting that none of the many stories published in major newspapers about NSA spying have faced significant corrections.

"Nobody from the US government ever once — over the last four months — claimed that any of this reporting was inaccurate," Greenwald wrote.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
cbabcock
50%
50%
cbabcock,
User Rank: Apprentice
10/31/2013 | 12:52:50 AM
re: NSA Reportedly Taps Google, Yahoo Data Centers
I don't think there are enough eyes in the federal government to watch all the things that the NSA is claimed to be watching. Nevertheless, the desperate need for oversight and rules governing what it does is self-evident at this point..
moarsauce123
50%
50%
moarsauce123,
User Rank: Ninja
11/1/2013 | 11:00:07 AM
re: NSA Reportedly Taps Google, Yahoo Data Centers
Even oversight will not reign in this self-serving bunch. The NSA exists only to be in existence and amass more funds and power. The only effective way to reign in the reckless spying is to cut funding to the NSA drastically. That will end any programs that are ineffective and with that cut back the Stasi approach of collecting everything.
Commentary
Ransomware Is Not the Problem
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  6/9/2021
Edge-DRsplash-11-edge-ask-the-experts
How Can I Test the Security of My Home-Office Employees' Routers?
John Bock, Senior Research Scientist,  6/7/2021
News
New Ransomware Group Claiming Connection to REvil Gang Surfaces
Jai Vijayan, Contributing Writer,  6/10/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Zero Trust doesn't have to break your budget!
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-34812
PUBLISHED: 2021-06-18
Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2021-34808
PUBLISHED: 2021-06-18
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors.
CVE-2021-34809
PUBLISHED: 2021-06-18
Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2021-34810
PUBLISHED: 2021-06-18
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2021-34811
PUBLISHED: 2021-06-18
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.