Clear84° WeatherClear84° Weather

Need for NSA's own database questioned

Gen. Keith B. Alexander, director of the National Security Agency and commander of U.S. Cyber Command, attends the International Conference on Cyber Security Thursday in New York.

Getty Images

Gen. Keith B. Alexander, director of the National Security Agency and commander of U.S. Cyber Command, attends the International Conference on Cyber Security Thursday in New York.

WASHINGTON — He was a San Diego cab driver who fled Somalia as a teenager, winning asylum in the United States after he was wounded during fighting among warring tribes. Today, Basaaly Moalin, 36, is awaiting sentencing after his conviction on charges that he sent $8,500 to Somalia in support of the terrorist group al-Shabab.

Moalin's prosecution, barely noticed when the case was in court, has suddenly come to the fore of a national debate about U.S. surveillance. Under pressure from Congress, senior intelligence officials have offered it as their primary example of the unique value of a National Security Agency program that collects tens of millions of phone records from Americans.

Officials have said that NSA surveillance tools have helped disrupt terrorist plots or identify suspects in 54 cases in the United States and overseas. In many of those cases, an agency program that targets the communication of foreigners, including emails, has proved critical.

But the importance of the phone logs in disrupting those plots has been less clear — and also far more controversial since it was revealed in June.

Across a dozen years of records collection, critics say, the government has offered few instances in which the massive storehouse of Americans' records contained the first crucial lead that cracked a case — and even those, they say, could have been obtained through a less intrusive method.

"There's no reason why NSA needed to have its own database containing the phone records of millions of innocent Americans in order to get the information related to Moalin," said Sen. Mark Udall, D-Colo., a Senate Intelligence Committee member who has been pressing officials for evidence of the program's effectiveness. "It could have just as easily gone directly to the phone companies with an individualized court order."

U.S. officials say the NSA's programs often work in conjunction with one another — and taking away a critical ability such as the "bulk collection" of phone records would undermine the agency's effort to prevent terrorist attacks.

"You essentially have a range of tools at your disposal — one or more of these tools might tip you to a plot, other 'tools' might then give you an exposure as to what the nature of that plot is," NSA deputy director John Inglis told a Senate panel last week. "Finally, the exercise of multiple instruments of power, to include law enforcement power, ultimately completes the picture and allows you to interdict that plot."

The NSA collects its vast digital archive of phone records under a provision of the Foreign Intelligence Surveillance Act. U.S. officials emphasize that those logs do not contain the names of customers or content — just "metadata," which includes phone numbers and the times and dates of calls. They note that they need a "reasonable, articulable suspicion" that a number they wish to check in the database is linked to a foreign terrorist group.

And they say that without having all the calls in one place and easily searchable with a keystroke, finding links to suspicious numbers would be tedious and time-consuming.

It was a tip that put Moalin on the FBI's radar in 2003. But when investigators found no link to terrorism, they closed the case. Then, in 2007, the NSA came up with a number in Somalia that it believed was linked to al-Shabab. It ran the number against its database.

Inglis said officials had no idea whether the number had ties to any number in the United States. "In order to find the needle that matched up against that number, we needed the haystack," he said.

The NSA found that the San Diego number had "indirect" contact with "an extremist outside the United States," FBI deputy director Sean Joyce told the Senate last week. The agency passed the number to the FBI, which used an administrative subpoena to identify it as Moalin's.

In 2010, three years after the bureau opened an investigation, it arrested Moalin as he was about to board a flight to Somalia to visit his wife and children.

Prosecutors alleged that Moalin was sending money to al-Shabab to finance attacks against the transitional government of Somalia and allied fighters from Ethiopia, as well as civilians. In February, a jury convicted Moalin on conspiracy to provide material support to terrorism. He faces up to life in prison.

U.S. officials argue that Moalin's number probably would not have surfaced had it not been for the database. And they draw a parallel with the period before the attacks of Sept. 11, 2001.

The NSA, targeting a safehouse in Yemen, intercepted seven calls from hijacker Khalid al-Mihdhar. But the NSA didn't know where he was calling from. "Lacking the originating phone number, NSA analysts concluded that al-Mihdhar was overseas," the Justice Department said in recently declassified reports to Congress on the phone records program.

"In fact, al-Mihdhar was calling from San Diego," the reports said. Had the intelligence community known where Mihdhar and a co-conspirator were and detained them, the "simple fact of their detention could have derailed the plan," the 9/11 Commission said. To close that gap, the government created the phone call database.

The NSA could put together a more limited dataset by going to every phone company and asking for all the numbers that have been in contact with a target number. But that takes time, and if analysts want to examine secondary contacts, they would have to go back to the phone company, officials said.

Such arguments do not persuade critics, even when the government asserts that the database helped break another case involving a co-conspirator in a plot to bomb the New York City subway system. "In both cases," Sen. Ron Wyden, D-Ore., said recently on the Senate floor, "the government had all the information it needed to go to the phone company and get an individual court order."

If time was of the essence, he said, a different court order would allow for an emergency request for the records. Wyden noted that both Moalin and the subway plot co-conspirator were arrested "months or years after they were first identified" by mining the phone logs.

The bottom line, said Rep. Adam Schiff, D-Calif., a House Intelligence Committee member, is that even if the program is "only occasionally successful, there's still no justification that I can see for obtaining that amount of data in the first place."

Need for NSA's own database questioned 08/08/13 [Last modified: Friday, August 9, 2013 12:45am]

© 2014 Tampa Bay Times

    

Join the discussion: Click to view comments, add yours

Loading...