Via Chris Soghoian, we learn that a Saudi Arabian telecom company (one of just two) contacted well-known pro-privacy researcher Moxie Marlinspike recently to see if he might help them intercept communications from a variety of popular communications apps, including Twitter, Viber, Line and WhatsApp. Curious about what they wanted, Marlinspike emailed with them a bit, and then published what he was told -- including the fact that they later told him they very quickly and easily figured out how to intercept WhatsApp communications. Eventually, he told them that he wouldn't work with them, and the guy he was communicating with told him by not helping the Saudi government intercept communications, he was helping the terrorists:

I know that already and I have same thoughts like you freedom and respecting privacy, actually Saudi has a big terrorist problem and they are misusing these services for spreading terrorism and contacting and spreading their cause that’s why I took this and I seek your help. If you are not interested than maybe you are on indirectly helping those who curb the freedom with their brutal activities.

From there, however, Marlinspike goes on into a very interesting discussion, well worth reading, about changes in the hacker/security community lately and the lucrative business of selling 0day exploits (often to governments) rather than publishing them and getting things fixed.

Forgetting the question of legality, I hope that we can collectively look at this changing dynamic and perhaps re-evaluate what we culturally reward. I’d much rather think about the question of exploit sales in terms of who we welcome to our conferences, who we choose to associate with, and who we choose to exclude, than in terms of legal regulations. I think the contextual shift we’ve seen over the past few years requires that we think critically about what’s still cool and what’s not.

Maybe this is an unpopular opinion and the bulk of the community is totally fine with how things have gone (after all, it is profitable). There are even explicitly patriotic hackers who suggest that their exploit sales are necessary for the good of the nation, seeing themselves as protagonists in a global struggle for the defense of freedom, but having nothing to do with these ugly situations in Saudi Arabia. Once exploits are sold to US defense contractors, however, it’s very possible they could end up delivered directly to the Saudis (eg, eg, eg), where it would take some even more substantial handwaving to think that they’ll serve in some liberatory way.

Exploits will be exploited. Helping anyone to make use of them means that eventually they're going to get exploited by others in ways you might not agree with.

It's long been assumed (or hinted at very strongly by a variety of evidence) that the feds have been making and collecting copies of pretty much every digital communication available. A whistleblower from AT&T more or less revealed the details on that. The NSA's ability to collect all this data is well documented, and people are just now coming to terms with the legal loopholes used to justify this mass sweeping up of communications.

However, for the most part, it was believed that the content of phone calls was not included in this broad sweep. While it's well known that law enforcement can get a wiretap on your phone if they suspect something, there was little indication that other calls are being recorded. Similarly, information about who you called and when you spoke to them tends to be easy for law enforcement to get. However, Glenn Greenwald is noting that a former FBI counterterrorism agent, Tim Clemente, went on TV, and in discussing the investigation of Katherine Russell (the wife of deceased accused Boston bomber Tamerlan Tsarnaev) has clearly said that the contents of historical phone calls are also available to the feds.

BURNETT: Tim, is there any way, obviously, there is a voice mail they can try to get the phone companies to give that up at this point. It's not a voice mail. It's just a conversation. There's no way they actually can find out what happened, right, unless she tells them?

CLEMENTE: "No, there is a way. We certainly have ways in national security investigations to find out exactly what was said in that conversation. It's not necessarily something that the FBI is going to want to present in court, but it may help lead the investigation and/or lead to questioning of her. We certainly can find that out.

BURNETT: "So they can actually get that? People are saying, look, that is incredible.

CLEMENTE: "No, welcome to America. All of that stuff is being captured as we speak whether we know it or like it or not."

It's possible this was an exaggeration, but when questioned about this particular point later, Clemente again insisted that it was the case and specifically added that "all digital communications in the past" are recorded and stored. Of course, again, he may have misspoken. Or he may be exaggerating for effect. There's also the possibility that Tamerlan's phone calls were actually being tapped given the earlier investigation of him for possible terrorist connections.

So there are numerous possibilities here, but it is still a case of an FBI counterterrorism agent claiming, multiple times, that the contents of all phone calls are being recorded, which, if true, would be quite a revelation (and probably not something Clemente is supposed to be revealing via an interview with the media). At the very least, it would be good for there to be some serious follow up on this to find out how true Clemente's claims really are.

You may recall that in the course of the case against Kim Dotcom in New Zealand, it was revealed that the New Zealand intelligence service, the Government Communications Security Bureau (GCSB), illegally wiretapped and spied on Kim Dotcom. The GCSB's mandate is that it can only spy on foreign communications, but used its powers illegally domestically. While NZ prime minister John Key apologized for the episode, it has raised lots of questions about his role in the whole matter -- and when he knew the law was being broken. Other info has come out as well, including attempts to cover up the illegal surveillance, and the fact that the GCSB illegally spied on nearly 100 people. Dotcom is now suing the government over this whole mess.

Given all that, you might think that PM Key would be focused on putting in place safeguards to stop the system from being so abused in the future. Not so. Instead, as reader aster points out, Key is now trying to change the law to make it easier to spy on citizens and others in the country. In other words, he's seeking to legalize domestic spying for the intelligence agency. The new proposal would allow for domestic spying on citizens and residents if approved by PM Key. As if he didn't already appear untrustworthy in the matter, he's now suggesting that because it has to go through him, it'll somehow avoid abuses? Opposition politicians are pointing out how laughable it is that Key is now asking people to trust him personally that such spying powers won't be abused.

Remember how the New Zealand intelligence organization GCSB (Government Communications Security Bureau) had to admit that it had illegally spied on Kim Dotcom? That kicked off an investigation that has now revealed that the GCSB illegally spied on somewhere around 85 people.

GCSB director Ian Fletcher said in February that his agency did not illegally spy on anyone else on behalf of law enforcement agencies.

But the Kitteridge report contradicts this - questioning the lawfulness of GCSB surveillance involving 85 New Zealanders. The agency is forbidden from spying on anyone with citizenship or permanent residence here.

The illegal spying was conducted between April 2003 and September last year and done on behalf of the Security Intelligence Service, the domestic spy agency.

But wait... there's more. The report also found that it's likely GCSB violated other laws as well, including the Privacy Act and the Defence Act. Not surprisingly, the report also finds a mess of an agency with terrible management, poor record-keeping and little oversight. Shocking, isn't it, that such conditions would lead to abuse of power and illegal surveillance, huh?

It's kind of sad that anyone could possibly think that it's okay for the government to have secret interpretations of the law in a free and open society. "The law" is more than just the legislation itself, but the collection of caselaw and interpretations, combined with the legislation, that make up the overall "law." If some of those interpretations are kept secret, then how can the public obey the law? The answer is that they can't -- which is why secret interpretations shouldn't be allowed. The Justice Department, however, prefers to keep some things secret, and it's asking the court to dismiss a lawsuit filed by the EFF seeking to find out how the Foreign Intelligence Surveillance Court is interpreting parts of the FISA Amendments Act, after it was revealed (late on a Friday) that the court found at least one situation in which the feds collected info in violation of the 4th Amendment.

The EFF figured the public should know the details. The DOJ on the other hand... would rather the public stay in the dark. The DOJ actually suggests that merely revealing the fact that they got slapped down by the FISC provides enough "balance."

Last summer, in an effort to strike the right balance between government transparency and the protection of critical intelligence activities, the government declassified four statements concerning its activities pursuant to Section 702 of the Foreign Intelligence Surveillance Act (“FISA”) Amendments Act of 2008. Not content with that disclosure, Electronic Frontier Foundation (“EFF” or “Plaintiff”) submitted a Freedom of Information Act (“FOIA”) request seeking additional information related to two of the declassified statements, specifically, that on at least one occasion the Foreign Intelligence Surveillance Court (“FISC”) “held that some collection carried out pursuant to the Section 702 minimization procedures used by the government was unreasonable under the Fourth Amendment” and that “on at least one occasion the FISA Court has reached th[e ] conclusion” that “the government’s implementation of Section 702 of FISA has sometimes circumvented the spirit of the law.”

And thus, we should be satisfied with that and want no more. Also, you don't want to know what kind of hell would break loose if the DOJ had to reveal how the law was actually interpreted. I mean, we'd all die or something very close to it, judging by the DOJ's language.

The government has determined that disclosure of the information withheld from Plaintiff could result in exceptionally grave and serious damage to the national security. Plaintiff obviously cannot contend otherwise. The Court accordingly should defer to the government’s determination in this case, uphold the Department’s withholdings, and grant this motion.

Basically, we've determined that you're all better off not knowing this information, and you should trust us because it's not like we have any incentives to lie (though, of course, we do). Also: boo!

Thankfully, more people are realizing just how ridiculous this is. The Washington Post has put out an editorial slamming the DOJ for its position:

Yet, as the amicus brief points out, the OLC’s opinions aren’t some intermediary step toward establishing the final legal interpretations for the executive branch. In general, they are the final legal interpretations for the executive branch. The FBI could choose to exercise the authority that the OLC said it had — or not — but Congress, the judiciary and the public at large all deserve to know what the executive branch thinks it can do, once it issues a conclusive opinion.

In other words, it's not right that the government can determine its own secret interpretations of the law, and it's time for the courts to put a stop to this.

You may recall that, last fall, a Congressional investigation completely slammed Homeland Security's "Fusion Centers" -- noting that despite DHS insisting that they were critical to "fighting terrorism," the actual evidence showed that they had done nothing helpful in the fight against terrorism, but were instead chock full of wasteful (possibly fraudulent) spending... and with an added dose of civil liberties violations (just for fun).

Apparently, the Fusion Centers are trying to rehabilitate their own image, but they might want to send their officials to press training a bit more before sending them out into the wild. Reason alerts us to an interview that the director of the Arkansas State Fusion Center did with some local TV stations in which he appears to completely contradict himself -- first arguing that the Fusion Centers don't spy on Americans... and then saying they spy on "anti-government" Americans. First, there was this:

"There's misconceptions on what fusion centers are," he says. "The misconceptions are that we are conducting spying operations on US citizens, which is of course not the fact. That is absolutely not what we do."

Okay then. We've established won't you don't do. So, tell us, what do you do?

Davis says Arkansas hasn't collected much information about international plots, but they do focus on groups closer to home.

"We focus a little more on that, domestic terrorism and certain groups that are anti-government," he says. "We want to kind of take a look at that and receive that information."

Okay, hold on a second here. It would seem that his first statement is completely proven untrue by that second statement. Unless he's arguing that if someone classifies you as "anti-government" then you're no longer a US citizen, which would be a rather unique (and wrong) interpretation of the Constitution.

Elsewhere in the article, Davis defends what he does by playing the patriotism card, in which he can't actually explain what good he's doing, but just the fact that he's "doing something" after 9/11 is important.

"I do what I do because of what happened on 9/11," Davis says. "There's this urge and this feeling inside that you want to do something, and this is a perfect opportunity for me."

This line of argument is such ridiculously lazy and dangerous thinking. People who feel they need to "do something!" without caring as to what that something is or (more importantly) if it actually helps (or hurts) are not doing anyone any favors. They're just bound to cause more trouble.

Just recently, we learned that the EFF had been handed what appeared to be several pages of severe formatting errors and faulty Morse code in response to its FOIA request for the secret interpretation of the FISA spying law. There were also the "sobering findings" faux-released by the NSA, which left in only enough unredacted wording to open speculation on these "sobering findings," as well as to publicly lament the surely misguided public debate on the super-secret agency's actions. Now, the news comes to us that the FBI has handed the ACLU a stack of papers that would make any toner supplier very happy.

The ACLU filed a FOIA request last July in hopes of receiving some insight into the FBI's tracking of US citizens via GPS devices. Two months later, it filed a lawsuit against the FBI, forcing the issue. At long last, the FBI has responded... with 111 pages of black ink.

Two key memos outlining the Justice Department's views about when Americans can be surreptitiously tracked with GPS technology are being kept secret by the department despite a Freedom of Information Act lawsuit filed by the ACLU to force their release. The FBI’s general counsel discussed the existence of the two memos publicly last year, yet the Justice Department is refusing to release them without huge redactions. 

The word "see" is obviously some sort of joke because there's absolutely nothing to "see" here, unless you consider To, From and Subject fields to be the "smoking gun." Oh, and this one paragraph that leads into 56 straight pages of black ink.

In United States v. Jones, 132 S. Ct. 945 (2012), the Supreme Court affirmed the suppression of location data generated by a GPS tracking device surreptitiously affixed to a car without court authorization and monitored continuously over a 28-day period.

Yep, that's the power of the FOIA. All the black ink (or blank pages) you could possibly want, delivered months after they're requested. The redactions on these two documents obviously goes far beyond simply protecting sensitive information that might jeopardize ongoing investigations. This is nothing more than the DOJ covering up unconstitutional practices.

The Justice Department's unfortunate decision leaves Americans with no clear understanding of when we will be subjected to tracking — possibly for months at a time — or whether the government will first get a warrant. This is yet another example of secret surveillance policies — like the Justice Department's secret opinions about the Patriot Act's Section 215 — that simply should not exist in a democratic society.

The ACLU is asking the court to order the DOJ to release these memos in full. The Fourth Amendment's reasonable expectation of privacy is undermined by these secret memos, which limit knowledge of law enforcement tracking efforts solely to the executive branch.

The implications of these withheld documents go even further than discussing GPS tracking. FBI General Counsel Andrew Weissman's explanation of the second memo ("Guidance Regarding the Application of United States v. Jones to Additional Investigative Techniques") leaves the door open for tracking via other technology.

[The] second memoranda [sic] is going to be about guidance about what this means for other types of techniques, beyond GPS, because there's no reason to think that this is going to just end with GPS and some of that is going to be very much a judgment call.

It's already common knowledge that law enforcement agencies are using cell phone tracking. As the ACLU points out, wireless carriers already receive 1.5 million requests for data every year, most of which is used for location tracking. Additional technology, such as drones or license plate readers, make endless surveillance a logistic reality, and all without a warrant.

A fully-redacted document doesn't seem to indicate that the FBI is operating within the constraints of United States v. Jones. It signals the very opposite and provides us with another example of how government agencies, when faced with constitutional limitations, are more than happy to simply "interpret" their way around them -- and keep these interpretations out of public view, perhaps indefinitely. It's extremely hypocritical for the FBI and DOJ to sit in a position of law enforcement when they clearly believe abiding by the law is optional.
 

 

 

 

 

 

 

We've written several times before about domestic spying being performed by the government agencies, most of which is performed under the protective guise of "national security" as part of the "War on Terror." The end result tends to be diminished rights rather than something more positive, like "terrorists caught."

The Electronic Privacy Information Center (EPIC) has been looking into the CIA's involvement in domestic surveillance, something the CIA is definitely not supposed to be doing.

Beginning in 2011, a series of investigative articles by the Associated Press ("AP") revealed that the New York Police Department ("NYPD") conducted extensive surveillance of Muslims and persons of Arab descent in New York, New Jersey, and elsewhere. The NYPD’s activities included photographing members of the Muslim community as they entered mosques, infiltrating Muslim student groups, and monitoring Muslim stores and businesses. According to the AP, the “police subjected entire neighborhoods to surveillance and scrutiny, often because of the ethnicity of the residents, not because of any accusations of crimes.” The AP also reported, “many of these operations were built with help from the CIA [Central Intelligence Agency], which is prohibited from spying on Americans but was instrumental in transforming the NYPD's intelligence unit after 9/11.”

This looks like the CIA is at the very least heavily involved with domestic surveillance, if not actually doing the surveillance itself. The "investigations" themselves are questionable enough even without the possibility of a departmental "misstep" by the CIA, generally consisting of paid informants infiltrating the Muslim community and amassing as much information as possible when not attempting to bait community members into saying something inflammatory.

This new "elite" NYPD agency has been given leeway to assemble a massive database on the Muslim community and its activities and, to date, has produced nothing in the way of useful leads. Despite this fact, the operations continue undeterred and everyone from the NYC police commissioner to various CIA spokespersons have acknowledged the CIA's ongoing "collaborative relationship" with the NYPD domestic spying program.

According to the CIA, the agency isn't performing the surveillance itself and is, therefore, staying within its legal boundaries.

In December 2011 the Associated Press described an investigation by the CIA Inspector General regarding the agency’s collaboration with NYPD. CIA spokesman Preston Golson acknowledged the existence of this investigation and stated that the agency's Inspector General concluded that no laws were broken and there was “no evidence that any part of the agency's support to the NYPD constituted 'domestic spying.”

In essence, the CIA aids with the spying, but doesn't actually perform the spying. Golson's statement in reference to the internal investigation is obviously meant to be the final word on the matter, but relies heavily on the public's credulity in regards to secretive agencies conducting in-house investigations whose results remain hidden from view. In that respect, Golson's statement failed miserably.

According to USA Today, “The revelations troubled some members of Congress and even prompted the director of national intelligence, James Clapper, to remark that it did not look good for the CIA to be involved in any city police department. Thirty-four lawmakers have asked for the Justice Department to investigate but so far that request has gone nowhere.” At a March 2012 hearing, Attorney General Holder told Congress “he's disturbed by what he's read about the New York Police Department conducting surveillance of mosques and Islamic student organizations in New Jersey.”

You know something has gone wrong when Eric Holder thinks you've gone too far. Golson's "everything's cool" statement notwithstanding, EPIC decided to look into the CIA's involvement with the NYPD's surveillance programs.

On March 28, 2012, EPIC submitted a FOIA request to CIA asking for:

• All documents related to the CIA Inspector General’s investigation regarding the agency’s collaboration with NYPD;
• All legal analyses conducted by the CIA Inspector General’s office regarding the CIA’s collaboration with the NYPD;
• All final reports issued as a result of the CIA Inspector General’s investigation;
• Any communications between the CIA Inspector General’s office and the NYPD regarding the agency’s collaboration with the NYPD.

Unsurprisingly, the CIA has been rather reluctant to hand over any of the requested information. So reluctant, in fact, that it now finds itself on the receiving end of a lawsuit filed by EPIC after "failing to disclose a single record." EPIC's complaint quotes the CIA as stating it was too busy to fulfill the requests because of a "substantial backlog." While that could very well be true, this is also information that the CIA would very likely prefer to not make public. It's also an excuse many other government agencies have used -- a built-in stalling tactic greatly aided by these agencies' preference towards only giving up information when forced to do so.

Obviously, it will be a long time before any information shakes loose from this internal investigation. EPIC still has to win the lawsuit before any "compelled" release of documents begins. There's also bound to be an appeal or two, along with the usual bureaucratic delays built into the process. And there's also the "state secret" wildcard, one that permanently removes documents from the public eye. Still, it's a worthwhile effort EPIC is making, one that will shed light on a very shady collaboration between the CIA and the NYPD, whether or not the results of this internal investigation are ever made public.

Remember all the hubbub (now there's a word I never thought I'd use; thanks a lot, aging process) over Comcast's kind of, maybe plan to spy on subscribers through their cable box as they watch TV, fold their laundry, or engage in coitus? There was quite an outcry at the time, even as Comcast said that the plan was only to have the cameras be able to recognize when different types or numbers of people were watching the tube. People just didn't feel comfortable with corporations being able to spy on them. As a result, Comcast backed away from the plan -- the people had defeated the corporation.

All, apparently, so that hackers could spy on them instead. At least, that's what some reports are saying about Samsung Smart TVs and an exploit that would allow hackers to snatch social media credentials, access any files or devices connected to the smart TV...oh, and to use the built in cameras to spy the hell out of people as they do whatever they do while watching television.

In an e-mail exchange with Security Ledger, the Malta-based firm said that the previously unknown ("zero day") hole affects Samsung Smart TVs running the latest version of the company's Linux-based firmware. It could give an attacker the ability to access any file available on the remote device, as well as external devices (such as USB drives) connected to the TV. And, in a Orwellian twist, the hole could be used to access cameras and microphones attached to the Smart TVs, giving remote attacker the ability to spy on those viewing a compromised set.

The group that reportedly discovered the vulnerability, ReVuln, proudly stated that they would not publish any information about what they'd uncovered except to paying subscribers because screw everyone else (not an actual quote). They also have a company policy, apparently, that would prevent them from working with Samsung directly on a fix or even to disclose the hole, leading me to reach the logical conclusion that Dr. Evil is apparently running that company.

Even more fun, thanks to how Samsung designed the product, chances are any fix that could be produced would be difficult to implement.

Currently, the Smart TVs offer no native security features, such as a firewall, user authentication or application whitelisting. More critically: there is no independent software update capability, meaning that, barring a firmware update from Samsung, the exploitable hole can't be patched without "voiding the device's warranty and using other exploits," ReVuln said.

The company posted a video of an attack on a Samsung TV LED 3D Smart TV online. It shows an attacker gaining shell access to the TV, copying the contents of its hard drive to an external device and mounting them on a local drive, providing access to photos, documents and other content. ReVuln said an attacker would also be able to lift credentials from any social networks or other online services accessed from the device.

In other words, customers get to wait around until Samsung can figure this thing out on their own, since ReVuln won't help them out by company policy, or risk voiding their warranty on their smart TV that has a complete lack of security features. Nicely done, everyone involved.

A couple of months ago, Julian Sanchez wrote about the ridiculous situation in which he filed a FOIA (Freedom of Information Act) request to reveal the latest semi-annual report from the Justice Department concerning how it was implementing the FISA Amendments Act of 2008. As we've been discussing, for a while, how the FISA Amendments Act broadly expanded the ability of federal law enforcement, in particular the NSA, to spy on everyone. While there is some language that suggests it's only supposed to be used on foreigners, it's been revealed that there is a secret interpretation of the bill, that likely allows them to use a loophole (plus the secret interpretation) to collect and review tons of data on Americans. The FAA is up for renewal, and it's likely that Congress will rush through a five year extension -- despite overwhelming evidence that many in Congress don't know how the NSA is interpreting the bill (and even making statements that directly contradict the evidence of how the bill is being used).

The law does require the "semi-annual" report mentioned above, and thanks to a lawsuit by the ACLU, the courts have said that the government is required to release redacted versions of those documents. Which is why it was crazy when Sanchez initially filed his FOIA request to see the most recent versions, arguing (quite reasonably) that such documents were inherently important in the debate over the FAA's renewal, that the DOJ initially told him that it had to deny his request because it could "neither confirm nor deny the existence of records in these files responsive to your request." That was obviously bullshit. Once again: the report is required by law, and the courts have already said that the content is subject to FOIA requests. Thankfully, after Sanchez went public with the ridiculousness of the situation, the DOJ quickly admitted the original response was a mistake, and promised they'd get right on finding the documents.

Sanchez now has an update of the situation, which is almost as ridiculous as the original story.

By mid-September, just under three months after my initial request went in, I was informed that they’d identified the reports I was looking for and forwarded them to the Office of the Director of National Intelligence (ODNI) for a declassification review, which they expected would be completed by early November. Joy! Would we actually get information about an intelligence program out of the government without a lawsuit? Maybe even in time to have a semi-informed public debate?

Well, no. ODNI informed me earlier this month that they were wrapping up their review and redaction Any Day Now, at which point… their redacted version would be forwarded, one at a time, to every other intelligence agency whose activities were referenced in the report. At each agency, it would go to the back of the line of FOIA requests, exactly as though it had just been submitted for the first time. Estimated time before a heavily censored version of these reports see the light of day: Another six months. At least. By which time, it won’t matter much what these reports say about NSA’s use of its sweeping powers, because Congress will have already given them another five years of spying authority.

Notice what this means in practice: Even though a court has already established, thanks to an ACLU lawsuit, that they are legally required to release redacted versions of these reports to the public on request, a cumbersome bureaucratic process effectively guarantees that it takes a solid year to get this information out, which means at best you’re working with what the assessment found two reports ago, allowing the government to assert that they’ve fixed whatever problems were found. In this case, the timing of the review process conveniently guarantees that whatever we learn will come far too late to influence this year’s vote on FAA powers, but be old news by the time Congress takes up the question again. It’s a little hard to swallow the claim that all this delay is remotely necessary: Are we really supposed to believe that the Office of the Director of National Intelligence will be so slipshod about letting sensitive classified information through that their work has to be independently double checked by every other intelligence agency? And that this process has to take six months or longer, even after ODNI has done their initial review and redaction? Of course it doesn’t: This is a bureaucratic procedure designed, not to protect national security, but to allow stalling on the release of politically inconvenient information that the courts won’t allow to be completely hidden from the public.

Once again, this seems to raise questions about the process here -- and how much of it really has to do with law enforcement officials being careful... and how much of it is purely political, seeking to hide damaging information that might impact the FAA renewal.

Furthermore, as Sanchez notes, the very idea that he had to file a FOIA for this information is troubling by itself:

What we should really be asking is why I had to submit this request at all. In his first days in office, after all, President Obama issued a directive not only urging agencies to err on the side of disclosure, but to adopt a policy of proactive release of documents likely to be of public interest. Surely if there were any doubt about the public interest in the use of sweeping surveillance powers, it should have been put to rest after the ACLU won release of the earliest compliance reports. So why didn’t the Justice Department follow President Obama’s directive and draft these reports with an eye toward preparing a declassified public version, knowing full well that civil liberties groups would come asking? Well, because then they wouldn’t be able to obfuscate and delay for months and months. Because then the public might be able to have an informed discussion about the secret surveillance powers we’ve given our spy agencies before we vote to extend them. Heaven forfend.