- Report: FBI investigating fake net neutrality comments 5 Years Ago
- The first professional U.S. transgender boxer just won his first fight Today 2:18 PM
- Twitch streamer apparently hits partner on video Today 1:45 PM
- There’s now rehab for Fortnite addiction Today 12:07 PM
- How to watch América vs. Pumas online for free Today 11:25 AM
- ‘Target Tammy’ is the latest white woman to complain about Black people minding their own business Today 11:08 AM
- Jason Momoa reprises ‘Game of Thrones’ character on ‘SNL’ Today 10:06 AM
- How to watch the epic Copa Libertadores final online for free Today 9:35 AM
- The top fandoms of 2018 Today 8:00 AM
- How to watch Real Madrid vs. Huesca online for free Today 6:40 AM
- What is Sling TV? Today 6:15 AM
- A year of apologizing to the internet Today 6:15 AM
- How to stream NFL’s Week 14 games for free Today 6:00 AM
- John Kelly will be leaving the White House, and Twitter reacted exactly as expected Saturday 6:12 PM
- Shonen Jump manga is going (mostly) free to combat piracy Saturday 5:14 PM
The FBI makes a great middlman between comapnies like Microsoft and the NSA.
Microsoft worked to provide the FBI with court-ordered user data after the company began using encryption for customers who used Outlook, according to newly-released documents first leaked by Edward Snowden.
Snowden, of course, is the former National Security Agency contractor who obtained a huge cache of agency documents and passed them to a handful of journalists, including Glenn Greenwald, in 2013. Among the earliest programs his documents revealed was PRISM, which allows the NSA to get emails, chats, and other files from targets who use any of nine different American tech companies, like Yahoo, Google, and Facebook.
Some of PRISM’s specifics are still sketchy, but U.S. officials have admitted it’s authorized by section 702 of the FISA Amendment Act. While most PRISM companies have explicitly and specifically denied working with the NSA to knowingly give the agency customers’ information, these documents contribute to the knowledge that the FBI played intermediary between the tecnology giant and the NSA.
Referencing Microsoft’s implementation of Secure Socket Layer (SSL) encryption for its customers who use Outlook, one newly-revealed slide—released as part of Glenn Greenwald’s recent document dump that coincides with his new book tour—says:
MS working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012. The SSL solution was applied to all current FISA and 702/PRISM requirements.
A spokesperson for Microsoft declined to go on the record, but strongly rejected the implication in that document that the company had given encryption keys to the government.
In an earlier blog post responding to the PRISM program, Microsoft General Counsel Brad Smith wrote that when the company began using encryption as the default for Outlook users, it kept those encryption keys a secret, but still obeyed court orders for user information:
To be clear, we do not provide any government with the ability to break the encryption, nor do we provide the government with the encryption keys. When we are legally obligated to comply with demands, we pull the specified content from our servers where it sits in an unencrypted state, and then we provide it to the government agency.
When news of PRISM broke, most of those nine companies denied knowingly worked with the NSA on the PRISM companies. Microsoft’s specific statement was:
[W]e provide customer data only when we receive a legally binding order or subpoena to do so, and never on a voluntary basis. In addition we only ever comply with orders for requests about specific accounts or identifiers. If the government has a broader voluntary national security program to gather customer data we don’t participate in it.
Another PRISM slide makes it explicit that PRISM doesn’t have for a direct relationship with Internet companies, and that such a relationship is available “only through FBI.”
Clarification: This story has been updated with additional contextual information from Microsoft, as well as new language to make clear that Microsoft denies any attempts to hand over user data to the FBI without legal obligation.
H/T Matthew Keys | Image by Jason Reed
A former senior politics reporter for the Daily Dot, Kevin Collier focuses on privacy, cybersecurity, and issues of importance to the open internet. Since leaving the Daily Dot in March 2016, he has served as a reporter for Vocativ and a cybersecurity correspondent for BuzzFeed.