How Many People Are Included in Contact Chaining with 27,090 Numbers?

I’ve decided that if I could have a nickel for every time I’ve said “I told the apologists so” as I’ve read these documents, I’d be Warren Buffet. But I don’t get a nickel for predicting the NSA is as bad as it is. So I could use your help to keep doing what I do. 

One of the most stunning revelations from ODNI’s conference call with Officials Who Can’t Be Quoted Because They Might Be Lying is that only 11% of the numbers the NSA was comparing daily business record collections against should have been included.

Those numbers are presented in the government’s first response to Reggie Walton’s order for more information.

In short, the system was designed to compare both SIGINT and BR metadata against the identifiers on the alert list but only to permit alerts generated from RAS-approved identifiers to be used to conduct contact chaining [redacted] of the BR metadata. As a result, the majority of telephone identifiers compared against the incoming BR metadata in the rebuilt alert list were not RAS-approved. See id. at 4, 7-8. For example, as of January 15, 2009, the date of NSD’s first notice to the Court regarding this issue, only 1,935 of the 17,835 identifiers on the alert list were RAS-approved. (10-11)

This means that every day, the NSA was comparing names they thought maybe might could be terrorist numbers, as well as numbers they actually had reason to believe actually were, with all the phone records in the US to see if Americans were talking to these people. [Update: And to clarify, the 89% on the list who were "compared" to the daily business record take weren't contact chained -- NSA just checked to see if they should look further.]

As I said, per the Officials Who Can’t Be Quoted Because They Might Be Lying who gave today’s conference call, that’s as bad as it gets.

But it appears to get worse.

You see, as NSA was confessing all this to DOJ’s National Security Division, they were also cleaning up their lists (the January 15 numbers come from a week after NSD first got involved). And it appears that before they started their confessional process (in the days before Obama took over from George Bush), they had far more people on their list. And they were contact-chaining those numbers.

At the meeting on January 9, 2009, NSA and NSA also identified that the reports filed with the Court have incorrectly stated the number of identifiers on the alert list. Each report included the number of telephone identifiers purported on the alert list. See, e.g., NSA 120-Day Report to the FISC (Dec. 11, 2008), docket number BR 08-08 (Ex. B to the Government’s application in docket number BR 08-13), at 11 (“As of November 2, 2008, the last day of the reporting period herein, NSA had included a total of 27,090 telephone identifiers on the alert list . . . .”). In fact, NSA reports that these numbers did not reflect the total number of identifiers on the alert list; they actually represented the total number of identifiers included on the “station table” (NSA’s historical record of RAS determinations) as currently RAS-approved) (i.e., approved for contact chaining [redacted]

This appears to mean the NSA could (they don’t say whether they did) conduct chaining two or three degrees deep on all these potential maybe might could be terrorists.

If those 27,090 talked to 10 people in the US, and those 270,090 people in the US regularly talked to 40 people in the US, and those people talked to 40, then it would potentially incorporate 433 millio–oh wait! That’s more people than live in the US!

That is, there’s a potential that, by contact chaining that many people, this actually represented a comprehensive dragnet of all the networked relationships in the US until the days before Obama became President.

And they lied to Reggie Walton about it as they got their first real legal review of the program.

But honest, all this was really just unintentional.

Update: Later in the filing, the government admits they were doing more than 3 hops until early 2009.

Second, NSA is implementing software changes to its system that will limit to three the number of “hops” permitted from a RAS-approved seed identifier.

This means those 27,090 identifiers that were in use on November 1, 2008 (at which point it became clear Obama would win the election) could have been contact chained far deeper into American contacts. This makes it very likely that that “contact chaining” actually did include everyone in the US.

Twitter34Reddit2Facebook14Google+0Email

18 Responses to How Many People Are Included in Contact Chaining with 27,090 Numbers?

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18

Emptywheel Twitterverse
bmaz It is pretty hard to imagine Sebastian Vettel being a more selfish loathsome prick. #F1
3hreplyretweetfavorite
bmaz Team orders against Sebastian Vettel? Whoa, but Vettel is, once again, like last year, a fucking selfish dickhead. What a punk jerk.
3hreplyretweetfavorite
bmaz @AskZelda_ Well, other than that it was during NFL Playoffs (Ronnie LOVES the Packers), it is awfully attractive, no? http://t.co/m7aEAMMTig
3hreplyretweetfavorite
bmaz NICO! Whoa, what a ballsy move on Vettel. #F1
3hreplyretweetfavorite
bmaz So, what in the world did the Williams crew do to Massa's car?? Man, that was brutal.
3hreplyretweetfavorite
bmaz @AskZelda_ I have a Ronald Reagan mask from a Halloween in the 80's, do you think that would work? http://t.co/ksltCAaG4w
3hreplyretweetfavorite
bmaz @misterdevans just after the turn of the hour.
4hreplyretweetfavorite
bmaz Obama White House Sponsors Young and Rich Narcissistic 1% Fucktards That Will Ruin the World One Day http://t.co/XhEZdHp3yO Seriously
4hreplyretweetfavorite
bmaz @dceiver @ryangrim @HuffPostLive Lotta repetitive emphasis there. Is this like "All work and no play make Jack a dull boy" from The Shining?
4hreplyretweetfavorite
bmaz Now plattered: Ten Years After Undead (a new copy cause my old one was totally dead).
4hreplyretweetfavorite
bmaz @FrancisJeffrey7 @MarkSZaidEsq @Thomas_Drake1 @TimmyTokyo1 Not quite sure what to make of that, can you rephrase?
5hreplyretweetfavorite
September 2013
S M T W T F S
« Aug   Oct »
1234567
891011121314
15161718192021
22232425262728
2930