[cryptography] Snowden: Fabricating Digital Keys?

John Young jya at pipeline.com
Fri Nov 8 14:13:09 EST 2013


At 12:55 PM 11/8/2013, you wrote:

>"Snowden persuaded other NSA workers to give up passwords",
>http://www.reuters.com/article/2013/11/08/net-us-usa-security-snowden-idUSBRE9A703020131108.

"The revelation that Snowden got access to some of the material
he leaked by using colleagues' passwords surfaced as the
U.S. Senate Intelligence Committee approved a bill intended
in part to tighten security over U.S. intelligence data.

One provision of the bill would earmark a classified sum of
money - estimated as less than $100 million - to help fund
efforts by intelligence agencies to install new software
designed to spot and track attempts to access or download
secret materials without proper authorization."

 From the FISA Improvements Act of 2013 (30 October 2013):

‘‘(5) AUTOMATED REPORTING.—

‘‘(A) REQUIREMENT FOR AUTOMATED REPORTING.—
The Director of the National Intelligence, in consultation with the
head of the agency responsible for acquisitions pursuant to
orders subject to the requirements of this subsection, shall
establish a technical procedure whereby the aggregate
number of queries performed pursuant to this subsection
in the previous quarter shall be recorded automatically, and
subsequently reported to the appropriate committees of
Congress.

‘‘(B) AVAILABILITY UPON REQUEST.—The  information
reported under subparagraph (A)  shall be available to each
of the following upon request:

  ‘‘(i) The Inspector General of the National Security Agency.
  ‘‘(ii) The Inspector General of the Intelligence Community.
  ‘‘(iii) The Inspector General of the Department Justice.
  ‘‘(iv) Appropriate officials of the Department of Justice.
  ‘‘(v) Appropriate officials of the National Security Agency.
  ‘‘(vi) The Privacy and Civil Liberties Oversight Board.





More information about the cryptography mailing list