“Specific Selection Term:” Still Not Convinced

While I was squawking about how Jim Sensenbrenner issued a manager’s amendment (aka USA Freedumb) purporting to end bulk collection by tying everything to a “specific selection term” without defining what “specific selection term” meant, the House Judiciary Committee released an updated version of the bill defining the term.

(2) SPECIFIC SELECTION TERM.—The term ‘specific selection term’ means a term used to uniquely describe a person, entity, or account.’

All the relevant invocations of the term now refer back to this definition.

The language not only doesn’t convince me this bill works, I think it validates my concern about the bill.

That’s because the word “entity” is already too loosely defined. Is this like the definition of the entity that struck us on 9/11 that Presidents have expanded anachronistically? Al Qaeda = AQAP = al-Nusra?

And in just about every case imaginable — an entity’s phone numbers, its bank accounts, its email addresses (though perhaps not domain name and IP) — there is a necessary translation process between the entity and the selector(s) that would be used for a search.

That this translation happens shows up in some of the invocations of “specific selection term” where they say the “specific selection term” will be used as a “basis” for selecting what to actually search on, as with the Pen Register section.

(3) a specific selection term to be used as the basis for selecting the telephone line or other facility to which the pen register or trap and trace device is to be attached or applied; and’

Al Qaeda is not the name of the telephone line (or facility, which itself has been an invention used to conduct bulk collection in the name of a specific selector).

This “basis for” language shows up even with the NSL language.

COUNTERINTELLIGENCE ACCESS TO TELEPHONE TOLL AND TRANSACTIONAL RECORDS.—Section 2709(b)  of title 18, United States Code, is amended in the matter preceding paragraph (1) by striking ‘‘may’’ and inserting ‘‘may, using a specific selection term as the basis for a request’’.

If the bill just required account identifiers or eliminated that “as a basis for” language, it might work. But as it is, that “as a basis for” involves analysis that also involves the possibility of using far different — and far broader — terms for the actual queries. (And it’s not clear — at least not to me — where and whether judges would get to approve this translation process.)

But you don’t have to take my word for it. You can look at a program that relied on “specific selection terms” “as a basis for” unbelievably vast collection.

The phone dragnet program.

In every single phone dragnet order, there’s a section that says records may only be searched if they’ve been associated with particular entities. Here’s the first one:

Screen shot 2014-05-06 at 10.15.18 PM

And here’s what that discussion evolved to look like even by 2007.

Screen shot 2014-05-06 at 10.18.56 PM

Mind you, the individual queries based off these specific references to the entities associated with al Qaeda (and Iran) were just that — individual account numbers of some sort (which is, again, why I think individual account identifiers might work). But the process of translating between the specific selection terms — al Qaeda and others — to specific identifiers involves the potential for using far broader terms than just an account identifier. It also, at one point, included over 27,000 identifiers that could be searched (albeit all individually).

The phone dragnet used specific selection terms as the basis for selecting which actual identifiers it queried. And while in this case, that still represented individual queries, it did lead to vast numbers of individuals queried.

(Note, RuppRoge says either “specific identifiers or selection terms” shall be used, admitting there’s a distinction between the two.)

So I think once you include “entity” in the definition, it makes the value of “specific selection term” pretty limited as a way to prevent bulk collection, because it invites the translation of that “entity” into something that is not an individual account but rather something far broader.

There’s no requirement that the specific search term and the queries it is used as a basis for have the same one-to-one correspondence laid out in the definition.

Interestingly, one of the two other things I saw in the update on quick pass (the other being a fix to language that could have been used for a third hop) is, along with the extension of the PATRIOT sunset, the extension of language from IRTPA that made those who engage international terrorism or simply activities in preparation for international terrorism an agent of a foreign power under FISA.

(C) engages in international terrorism or activities in preparation therefore;

I’m not surprised by this nor am I sure what that means (though it may support my observation that “agent of foreign power” drives this collection, not terrorism). But it also reminds me of how William Webster yoked this IRTPA language to Section 215 in his Nidal Hasan report.

That is, the government seems to want to make sure that its ability to query on people doing something that may or may not be tied to preparation for international terrorism will remain linked to its use of Section 215 to conduct that query.  I find that interesting.

Update: Here’s evidence I’m worried for nothing. The government motion to amend the dragnet order written in response to Obama’s effort to get queries pre-approved by the FISC describes “seeds” as specific selection terms. Not only does this establish a one-to-one correlation (or at least an identifier to query term correlation) with this language, but it sets a precedent at the FISC that specific selection term should mean actual query terms.

Tweet about this on Twitter0Share on Reddit0Share on Facebook0Google+0Email to someone

2 Responses to “Specific Selection Term:” Still Not Convinced

Emptywheel Twitterverse
emptywheel Also, one should ASSUME all pseudnyms are fake since so many people who were previously public (Mitchell, Jessen, Fredman, McPherson) hidden
bmaz So, aiders, abetters, suborners of perjury like Clapper willfully and wantonly roam free while @JamesRisen is still under the gun? Bullshit!
emptywheel @joshgerstein Brennan's role at head of TTIC. Also not covert.
bmaz Honestly, if we are still playing craven mind games over Alfreda Frances Bikowsky's name, then America is dumber than advertised.
emptywheel @joshgerstein Also gonna write some abt Jonathan Fredman, also not covert.
emptywheel @joshgerstein Except that her ID has been released years ago, and she's not covert. Hell, CIA's not even defacing her Wiki.
emptywheel Wondering if Kim Jong IL and Un weren't easily turned into Hollywood caricatures of Asians movies would keep going after them?
emptywheel Bikowsky prolly single biggest reason for way CIA demanded SSCI redact names. To prevent lawsuit, knowing ALL she's done, & of her promotion
JimWhiteGNV Does Newt Gingrich remember where he was when he first learned we had lost our first cyberwar?
emptywheel @JimWhiteGNV Along with 3 agency lawyers, apparently.
JimWhiteGNV @emptywheel Does @CIA want to retroactively classify Alfreda Bikowsky's name? Metaphysically impossible!
emptywheel @DeriaTURKEY the female that everyone is reporting on, repeating years of her known actions is Brennan? Nope. @biasedreporter
May 2014
« Apr   Jun »