As I mentioned back in April when this all started to stink, this could be the greatest wholesale invasion of privacy and breach of the Constitution ever perpetrated by the US Government on its own people.

Former AT&T technician Mark Klein's affidavit is detailed here in this Wired exclusive. Kudos to Wired, which had slipped into irrelevancy after the rise of forums like Slashdot and Kuro5hin, for having the guts to tell AT&T to stick it on the claim that publishing these docs would abridge "corporate secrets" that AT&T held at its San Francisco facility.

This is a lot of technical stuff, but the key paragraph is this:

Another Cut-In and Test Procedure document dated January 24, 2003, provides diagrams of how AT&T Core Network circuits were to be run through the "splitter" cabinet. One page lists the circuit IDs of key Peering Links which were "cut-in" in February 2003, including ConXion, Verio, XO, Genuity, Qwest, PAIX, Allegiance, AboveNet, Global Crossing, C&W, UUNET, Level 3, Sprint, Telia, PSINet and Mae West. By the way, Mae West is one of two key internet nodal points in the United States (the other, Mae East, is in Vienna, Virginia).

Holy smokes. AT&T sold out its peering links, so any data transmitted over the backbone for THE ENTIRE USA, no matter the ISP, was owned by NSA using Narus Technologies' STA surveillance platform. So, it didn't matter that Qwest or some others didn't assent to the NSA spying, it was just a matter of falling back to the wide open door that AT&T had provided on the whole backbone.

In addition to this, the NSA picked the provider that at that time was engaged in union-busting at all of its technical centers. Coincidence? They could have used any other provider (Qwest included) in this program, but they chose the one actively culling its employees. I imagine that 1. AT&T was handsomely compensated for the trouble and 2. the employees who were hired back as "management technicians" were vetted thoroughly for trustworthiness and, most importantly, correct ideological standpoints. 

I am definitely not a tin-foil chapeaux type, but this is beyond the pale. I demand that they produce one incident where this technology has done anything to protect us from terrorists. Oh, wait. That stuff is all part of on-going operations in the global war on terror and could jeopardize that mission, therefore it must remain "Top Secret." It has been employed to track journalists and their contacts, though. Brave New World!!!

Oceania has always been at war with East Asia. 

62
vote
Andy Axel's picture

Internet vs. Phone Records

Holy smokes. AT&T sold out its peering links, so any data transmitted over the backbone for THE ENTIRE USA, no matter the ISP, was owned by NSA using Narus Technologies' STA surveillance platform. So, it didn't matter that Qwest or some others didn't assent to the NSA spying, it was just a matter of falling back to the wide open door that AT&T had provided on the whole backbone.

So that covers Internet traffic -- any word on how AT&T was providing call detail?

And in that regard, BellSouth is now demanding that USA Today retract their claims.

____________________________

Wasabi peas are people! They're people!

metulj's picture

Internet traffic

It is all one and the same. The fiber that carries your e-mail is the same as the fiber that carries your phone calls.

Here is how it works: You make a phone call. It runs down to the local switch, then over to the CO. The CO sits at a node on the internal telephone company network. The call, which by this time has been converted from analog to digital, is then passed to equipment that breaks it into hunks of data that is then transmitted over the fiber. This can be done via ATM (Asynchrous Transfer Mode) or good old Ethernet. The data bangs along through more central nodes (like the one described above) then gets converted back into information that the person you are calling's phone can understand. I am certain that there are good old fashioned copper line technologies still rattling along (until relatively recently, South Knoxville was crippled with bad old switching devices at the neighborhood level), but most of it runs along on the backbone that these companies invested so much into in the late 80s and through the 90s. The commercial Intarweb uses the same data transmission paths. It would be stupid to duplicate it.*

So this goes beyond the Mickey Mouse phone call logs**: they are analyzing all sorts of data. Now, it is too much to actually work with so what they are doing in plopping a special sniffer device that looks for patterns then zeroes in on the patterned traffic. 

*Internet II does this, but it is a non-commericial research network for universities to use for larnin' and their students to share high-speed porn and music.

**While at UT, I worked on a project that analyzed every inbound and outbound data connection. We would run statistics against the types of connections and generate profiles of activity. It was easy to do. So easy that even stupid old me wrote the programs that did most of the filtering. For shits and giggles, we developed profiles that could pretty accurately determine who the type of user of the data was without knowing their physical location. Professors in the physics department generate one sort of internet traffic; Women in Strong Hall generate a wholly different signature. It was creeeeeeeeeeeepy to work with this stuff. Ultimately, we made the executive decision (aka rebellion among the liberal grad students) to throw out the IPs and MAC addresses associated with the data and generate pseudonyms for each client computer that were not traceable back to the actual person. 

 

True happiness is knowing you are a hypocrite. -- Ivor Cutler

Andy Axel's picture

Here is how it works: You

Here is how it works: You make a phone call. It runs down to the local switch, then over to the CO. The CO sits at a node on the internal telephone company network. The call, which by this time has been converted from analog to digital, is then passed to equipment that breaks it into hunks of data that is then transmitted over the fiber. This can be done via ATM (Asynchrous Transfer Mode) or good old Ethernet. The data bangs along through more central nodes (like the one described above) then gets converted back into information that the person you are calling's phone can understand. I am certain that there are good old fashioned copper line technologies still rattling along (until relatively recently, South Knoxville was crippled with bad old switching devices at the neighborhood level), but most of it runs along on the backbone that these companies invested so much into in the late 80s and through the 90s. The commercial Intarweb uses the same data transmission paths. It would be stupid to duplicate it.*

This isn't correct, Metulj.

Interoffice transport is done via optical, but the bandwidth isn't shared between regulated service (i.e. telephone) and deregulated (i.e. Internet) service.

(1) Not all Central Offices are equipped for Internet service. (2) There are still some analog-only offices out there (if you look in a Telcorida LERG you may see some 1AESS facilities, e.g.; I know of one in metro Nashville, for that matter). (3) Bells couldn't carry Internet traffic over the same fiber which carries phone service because of equal access provisions -- if they carried that traffic themselves, they'd have to let every other carrier have access to it. This is a regulatory regime called "parity." (4) If the Internet was carried on common facilities with phone service, your telephone would go down any time that there's a cable fade on Internet service or a routing issue, etc. and you couldn't guarantee quality of service end to end because of "net neutrality" provisions anyway.

I mean, theoretically, sure -- but the Baby Bells up until recently weren't even allowed to carry traffic across LATA boundaries. It may be "stupid" to duplicate services but that's what you had to live with after the 1982 modified final judgment (which broke up AT&T) and before the 1996 Telecom Act, which only allowed Bell Operating Companies to carry LD traffic once they'd met a fairly strict set of "relief" criteria. Tariffs and regulation have made sure that the plumbing is separate. Usually phone and data are in separate rights of way and separate conduit, let alone on separate fiber strands.

(At UT, I'm pretty sure that they have an OC-48 which is co-lo with Bell at KNVLTNMA, but UT provides its own optical muxes. They're not even mixing traffic on the same SONET facility -- they're aggregating that traffic off OC12/OC3 channels but pass it off to different facilities at the CO. Some is on the big UT Siemens switch and provides SS7 to the UT campus -- which, incidentally, is provided by US LEC, not Bell -- but the routes out of that OC48 are diverse for local, LD, and Internet. Not even Bell itself uses common facilities for Internet and voice among its 60,000 employees in its nine state region.)

____________________________

Wasabi peas are people! They're people!

rikki's picture

Telcorida LERG...1AESS

Telcorida LERG...1AESS facilities...cable fade...LATA boundaries...OC-48 which is co-lo...aggregating that traffic off OC12/OC3 channels

Geez, you two, get a room. 

metulj's picture

Andy's my type.

Lefty geeks unite! 

 

True happiness is knowing you are a hypocrite. -- Ivor Cutler

Andy Axel's picture

Read the technical stuff on

Read the technical stuff on the Wired article. They are mixing and matching, and pumping it all through one room. There's no denying it.

I did read the techie stuff. I still don't see where they're directing anything but IP traffic through there. (Vonage customers, beware, though.)

If the central claims in the USA Today article hold, there's a separate program in which the providers in question are handing over bulk information with some details suppressed. That doesn't sound like this program.

Umm, UT uses Qwest, unless that's changed since I left last May, which may have happened, but things tend to fall apart in the nether regions of that fucked up place's upper middle management.

They may use Qwest for LD (Qwest won a state-wide bid for LD which is really competitive, so I wouldn't be surprised) but their SS7 network is provided by US LEC. I'm pretty sure, since I worked on the bid response for another service provider, and we lost.

UT has an OC12 split two ways (I1 and I2 to Abilene) and DS3s that supply the dormoritories. Everything is optical off the campus and in between buildings other than special cases (it is UT so that means that there are at least 50000000 excepts to every rule according to whose turf you are treading on). There's a honking Juniper that does the heavy lifting on I2 and 7000 series Ciscos that handles commodity links, with core routers.

Right, and somewhere they're deriving those DS3's from an OC48 metro ring, and there's a Lucent DMX (or equivalent) somewhere at UT which provides services on and off the ring.

And for what it's worth, some of the aforementioned middle management is busy trying to build its own regional optical backbone throughout the state. (DWDM links to Pelissippi State and UT-Martin? Jiminy.)

Anyway, not to lose the point here -- it would be difficult to provide both annotated/expurgated call detail records on an optical Internet backbone trunk, and if that was going on, I was interested in knowing how that was accomplished.

____________________________

Wasabi peas are people! They're people!

metulj's picture

Ack

The point is: They are sniffing and they have the full cahootishness behavior of the Telcos who provide both telephony AND Internet access.

(OT: yeah, they were kicking that statewide optical stuff around about 6 months before I left. It ain't middle management that got that ball rolling. It's the grunts, trust me. As soon as PHBs -- who think the server rooms are neat because they are well air conditioned -- catch wind that they'll get "+10 No Lay Off Protection" for 5 more years, they sign on, take credit and start finding ways to cut back on the people who are innovating at that place. UT sucks.)  

True happiness is knowing you are a hypocrite. -- Ivor Cutler

metulj's picture

Read the technical stuff on

Read the technical stuff on the Wired article. They are mixing and matching, and pumping it all through one room. There's no denying it.

Umm, UT uses Qwest, unless that's changed since I left last May, which may have happened, but things tend to fall apart in the nether regions of that fucked up place's upper middle management. UT has an OC12 split two ways (I1 and I2 to Abilene) and DS3s that supply the dormoritories. Everything is optical off the campus and in between buildings other than special cases (it is UT so that means that there are at least 50000000 excepts to every rule according to whose turf you are treading on). There's a honking Juniper that does the heavy lifting on I2 and 7000 series Ciscos that handles commodity links, with core routers. 

 

True happiness is knowing you are a hypocrite. -- Ivor Cutler

Brian A.'s picture

Working assumption

It's best to just assume that all your communications (phone and internet) is being tracked.  The NSA has access to the communications backbone, along with massive data storage capability. 

Brian A.
I'd rather be cycling.

Josh's picture

"Backbone"

I am a Cisco network engineer.

I really hate it when people use the word "backbone" as if it were a singular entity. In reality, the "backbone" is many many multiple bundles of fiber run across the USA between major cities and owned by many different companies. Every major telco or net provider has their OWN fiber running across at least a part if not ALL of the country.

If I am in New York and I send a packet to someone in California and we are both using an ISP that connects upstream to AT&T's massive fiber runs ... then we only hit the "AT&T backbone". If I am using an ISP that goes through "Level 3" and I am talking to someone across the country that uses an ISP who connects to "Level 3" ... then the traffic only hits those two ISP's and Level 3.

Contrary to uneducated belief ... there is no such thing as a single "internet backbone". The internet by it's very definition is a collection of private networks.

I do not contest that the NSA very well may have deals with every major top-level provider, but to say that everyone is "owned" because AT&T has to pass their traffic to and from other privately owned networks ... is just uneducated.

 

Factchecker's picture

Contrary to uneducated

Contrary to uneducated belief ... there is no such thing as a single "internet ... 

So King W was right? It really is "the internets"!  Heh.

___________________________ 

Never has the left been so right.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Lines and paragraphs break automatically.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is used to make sure you are a human visitor and to prevent spam submissions.
Image CAPTCHA
Enter the characters shown in the image.

User login

TN Progressive

TN Politics

Local Media Blogs

Local Paper

Local TV News

State News

Wire Reports

Site Statistics

Last 7 days:
  • Posts: 23
  • Comments: 286
  • Visits: 8,386
  • Pageviews: 20,103
Last 30 days:
  • Posts: 127
  • Comments: 1360
  • Visits: 39,827
  • Pageviews: 98,769

TN Progressive

Nearby:

Beyond:

At large:

Police Scanner Feeds