The government had a few years to sort this out, but as usual, the final call came down to the last minute. Shortly after Section 702 expired at midnight, April 19, the Senate pushed through a two-year reauthorization — one pretty much free of any reforms.

This happened despite there being a large and vocal portion of the Republican party seeking to curb the FBI’s access to these collections because some of their own had been subjected to the sort of abuse that has become synonymous with the FBI’s interaction with this particular surveillance program.

The reauthorization passed to the Senate from the House had been stripped of a proposed warrant requirement and saddled with an especially expansive definition of the term “electronic communication service provider.” Here’s how Senator Ron Wyden explained it while speaking out against the amendment:

Now, if you have access to any communications, the government can force you to help it spy. That means anyone with access to a server, a wire, a cable box, a wifi router, a phone, or a computer. Think about the millions of Americans who work in buildings and offices in which communications are stored or pass through.

After all, every office building in America has data cables running through it. These people are not just the engineers who install, maintain and repair our communications infrastructure; there are countless others who could be forced to help the government spy, including those who clean offices and guard buildings. If this provision is enacted, the government could deputize any one of these people against their will, and force them to become an agent for Big Brother.

For example, by forcing an employee to insert a USB thumb drive into a server at an office they clean or guard at night.

This could all happen without any oversight. The FISA Court won’t know about it. Congress won’t know about it. The Americans who are handed these directives will be forbidden from talking about it. And unless they can afford high priced lawyers with security clearances who know their way around the FISA Court, they will have no recourse at all.

So, instead of reform, we’re getting an even worse version of what’s already been problematic, especially when the FBI’s involved. As the clock ticked down on this vote (but not really: the FISA court had already granted the Biden administration’s request to keep the program operable as-is until 2025), attempts were made to strip the bill of this dangerous addition and add back in the warrant requirement amendment that had failed in the House.

None of this worked, as Gaby Del Valle reports for The Verge:

Sens. Ron Wyden (D-OR) and Josh Hawley (R-MO) introduced an amendment that would have struck language in the House bill that expanded the definition of “electronic communications service provider.” Under the House’s new provision, anyone “who has access to equipment that is being or may be used to transmit or store wire or electronic communications.” The expansion, Wyden has claimed, would force “ordinary Americans and small businesses to conduct secret, warrantless spying.” The Wyden-Hawley amendment failed 34-58, meaning that the next iteration of the FISA surveillance program will be more expansive than before.

Both Sens. Paul and Dick Durbin (D-IL) introduced separate amendments imposing warrant requirements on surveilling Americans. A similar amendment failed in the House on a 212-212 vote. Durbin’s narrower warrant requirement wouldn’t require intelligence agencies to obtain a warrant to query for those communications, though it requires one to access them.

The version headed to the president’s desk is the worst version. The rush to push this version of the bill through possibly gained a little urgency when two unnamed service providers informed the government they would stop complying with FISA orders pretty much immediately if the Senate didn’t renew the program.

One communications provider informed the National Security Agency that it would stop complying on Monday with orders under Section 702 of the Foreign Intelligence Surveillance Act, which enables U.S. intelligence agencies to gather without a warrant the digital communications of foreigners overseas — including when they text or email people inside the United States.

Another provider suggested that it would cease complying at midnight Friday unless the law is reauthorized, according to the people familiar with the matter, who spoke on the condition of anonymity to discuss sensitive negotiations.

We’ll never know how empty these threats might have been or if the Intelligence Community would have even noticed the brief interruption in the flow of communications. Section 702 has been given a two-year extension in the form approved by the Senate, superseding the FISA Court’s blessing of one more year of uninterrupted spying if discussions over renewal blew past the April 19, 2024 deadline.

If you’re a fan of bipartisan efforts — no matter the outcome — well… enjoy your victory, I guess. But there’s nothing about this renewal debacle that can actually be called a win. Unless you’re the FBI, of course. Then it’s all gravy.

Tech companies and First Amendment groups are calling attention to a provision in a domestic spying bill that they say would significantly expand the federal government's power to snoop on Americans' digital communications—potentially by forcing employees of private businesses to become informants.

The Information Technology Industry Council (ITI), a global trade group that represents major tech companies including Google and Microsoft, is calling for last-minute changes to the Reforming Intelligence and Securing America Act (RISAA), which could get a final vote in the Senate on Friday. The bill's primary purpose is to extend Section 702 of the Foreign Intelligence Surveillance Act (FISA), which allows U.S. intelligence agencies to scoop up communications between Americans and individuals abroad.

But the bill also includes a provision that "vastly expands the U.S. government's warrantless surveillance capabilities, damaging the competitiveness of U.S. technology companies large and small, and arguably imperiling the continued global free flow of data between the U.S. and its allies," the ITI said in a statement this week.

As Reason reported in December, that provision means that nearly any business or entity with access to telecom or internet equipment could be forced to participate in the federal government's digital spying regime. The big target, as Wired noted this week, is likely to be the owners and operators of data centers.

Under the current FISA law, Section 702 only applies to telecommunications companies and internet service providers. But the amendment included in the RISAA would expand that definition to cover "any service provider" with "access to equipment that is being or may be used to transmit or store" electronic communications.

"The practical impact of the revised definition is significant and means any company, vendor, or any of their employees who touch the physical infrastructure of the internet could now be swept under FISA's scope and compelled to assist with FISA surveillance," the ITI warns. "If this amendment were to become law, any electronic communications service equipment provider or others with access to that equipment, including their employees or the employees of their service providers, would be subject to compelled FISA disclosure or assistance."

In short, even someone like a custodian could be legally compelled to assist in the federal government's spying efforts.

Marc Zwillinger, an attorney who has experience arguing before the Foreign Intelligence Surveillance Court (FISC), wrote this week on his personal blog that the RISAA would "permit the government to compel the assistance of a wide range of additional entities and persons in conducting surveillance under FISA 702."

The newest version is less broad than what was initially proposed in December—for example, gathering places like hotels and coffee shops have been specifically excluded from the law. But, as Zwillinger writes, the revised definition would cover "the owners and operators of facilities that house equipment used to store or carry data, such as data centers and buildings owned by commercial landlords, who merely have access to communications equipment in their physical space," as well as "other persons with access to such facilities and equipment, including delivery personnel, cleaning contractors, and utility providers."

Because newsrooms and other places where journalists work are not specifically exempted, some First Amendment groups are also worried about how the expansion of digital spying authority could affect journalism.

"This bill would basically allow the government to institute a spy draft," Seth Stern, director of advocacy at Freedom of the Press Foundation (FPF), said in a statement on Thursday. "If this bill becomes law, sources will rightly suspect that American newsrooms are bugged by the government. And journalists won't be able to reassure them that they're not, because, for all they know, the building maintenance worker is an involuntary government spy."

The reactions from tech companies, legal experts, and free press advocates come on the heels of objections raised by various civil libertarian groups. As Reason's J.D. Tuccille covered earlier this week, some opponents of the FISA reauthorization bill have taken to calling it "the 'Everyone Is a Spy' provision, since potentially anybody with access to a laptop or WiFi router could be compelled to help the government conduct surveillance."

If the RISAA is approved by the Senate on Friday, as expected, and signed by President Joe Biden, Americans will have little recourse except to hope that the Justice Department is telling the truth when it says it won't use the broad authority contained in the bill. In a letter to senators on Thursday, Attorney General Merrick Garland wrote that his department "commits to applying" the new definition of electronic communications service providers in a narrow fashion. "The number of technology companies" covered by the new provision, he wrote, "is extremely small."

Of course, anyone with a working knowledge of the history of federal surveillance programs—or any government initiative, for that matter—is probably right to be skeptical of that assurance.

"Even if the bill is intended to target data centers, it doesn't say that," Stern said in a statement. "And, even if one trusts the Biden administration to honor its pinky swears, they're not binding on any future administrations."

The post How the FISA Reauthorization Bill Could Force Maintenance Workers and Custodians To Become Government Spies appeared first on Reason.com.

At press time, the U.S. Senate is debating whether to not only renew the U.S. government's spying powers under Section 702 of the Foreign Intelligence Surveillance Act (FISA) but dramatically expand them. That's because the House, in reauthorizing the expiring powers last week after an extended battle, adopted language that broadens the definition of those who can be forced to help the government snoop. That leaves the Senate as the last check on already controversial legislation that just became more dangerous before it's signed by a president eager to exercise its power.

Unchecked Surveillance Authority

"The legislation coming from the House gives the government unchecked authority to order millions of Americans to spy on behalf of the government," warns Sen. Ron Wyden (D–Ore.). "Under current law—section 702 of the Foreign Intelligence Surveillance Act—the government can order the telephone companies and email and internet service providers to hand over communications. This bill expands that power dramatically. It says that the government can force cooperation from, quote, 'any other service provider who has access to equipment that is being or may be used to transmit or store wire or electronic communications.'"

The problem, point out privacy advocates, is that even before the House of Representatives debated the provisions of the Reforming Intelligence and Securing America Act (RISAA)—rejecting (on a tie vote) a requirement that government agents get a warrant before searching records about Americans, and ultimately settling on a two-year renewal of surveillance powers—members of the House Intelligence Committee inserted new and troubling language.

Their intention, according to Charlie Savage of The New York Times, was to clarify that cloud-computing data centers must cooperate with government spooks. But that's not what they confined themselves to in their changes to the text. As Wyden emphasizes, the bill now broadly applies to service providers with access to communication equipment. After much protest, exceptions were written in for hotels, restaurants, dwellings, and community centers. But everybody else is subject to the law.

Everyone Is a Spy

"An enormous range of businesses would still be fair game," protests a coalition of privacy, civil liberties, and civil rights groups in a letter to Senate leadership from both parties, "including grocery stores, department stores, hardware stores, laundromats, barber shops, fitness centers, and—perhaps most disturbingly—commercial landlords that rent out the office space where tens of millions of Americans go to work every day, including news media headquarters, political campaign offices, advocacy and grassroots organizations, lobbying firms, and law offices."

The coalition, which includes groups of widely varying political views, refers to this language as the "Everyone Is a Spy" provision, since potentially anybody with access to a laptop or WiFi router could be compelled to help the government conduct surveillance. Given how broadly the word access can be defined, that might even include cable installers, repairmen, and house cleaners.

"If this became law, millions of American small business owners would have a legal obligation to hand over data that runs through their equipment," caution former Rep. Bob Goodlatte (R–Va.) and former Sen. Mark Udall (D–Colo.), both now with the Project for Privacy and Surveillance Accountability. "And when they're done with doing their part in mass surveillance, these small businesses would then be placed under a gag order to hide their activities from their customers."

RISAA's Section 702 reauthorization is pending in the Senate, though the White House is pushing lawmakers "to swiftly pass this bill before the authority expires on April 19," so abuses of the new language are hypothetical. But it's a fact that the law's existing surveillance power, without the broadened scope of the "Everyone Is a Spy" provision, has already been misused against a great many Americans.

Surveillance Abuse Under Existing Law

In 2023, the House Judiciary Committee held two hearings to examine "the FBI's abuses of its Foreign Intelligence Surveillance Act (FISA) authorities." Declassified documents offered glimpses of misuses of surveillance power including FBI spying on a U.S. senator, a state lawmaker, and a judge.

"Section 702 poses significant privacy and civil liberties risks, most notably from U.S. person queries and batch queries" in which multiple search terms are run through the system as part of a single action, according to a report published last September by the federal Privacy and Civil Liberties Oversight Board (PCLOB). That report revealed that roughly three million queries on Americans were run just in 2021.

"Significant privacy and civil liberties risks also include the scope of permissible targeting," added the PCLOB review.

If the scope of permissible targeting is already risky, expanding the law's language to compel cooperation from "any other service provider who has access to equipment that is being or may be used to transmit or store wire or electronic communications" would seem to dramatically compound the risks.

Government Itself Is a Threat

"No democracy should give its government the Orwellian power contained in the House bill," cautions Elizabeth Goitein of the Brennan Center for Justice at NYU Law. "The Senate must take the time it needs to get this right, or our democracy will pay the price."

Fortunately, Ron Wyden isn't the Senate's only skeptic when it comes to Section 702 and domestic surveillance. Sen. Rand Paul (R–Ky.) opposed extending the law even before its language was broadened to include the "Everyone Is a Spy" provision.

"Using 702, Americans' communications content and metadata is inevitably swept up and kept in government databases without a warrant. Law enforcement agencies then access Americans' communications without a warrant," Paul warned in December. "Those who make the lazy and predictable argument that government is your only shield from threats always fail to mention that government itself often is the threat."

Civil libertarians were right about the dangers of Section 702 before it was amended to apply to landlords and cable installers. Last year's House hearings demonstrated that the law's power has already been abused by government officials. There's no reason to believe they'll be more restrained in their snooping when the law is less so.

The post Revised Section 702 Surveillance Authority Poses More Danger Than Ever appeared first on Reason.com.

I’m normally not a “ends justifies the means” sort of guy, but ever since some House Republicans started getting shitty about Section 702 surveillance after some of their own got swept up in the dragnet, I’ve become a bit more pragmatic. Section 702 is long overdue for reform. If it takes a bunch of conveniently angry legislators to do it, so be it.

The NSA uses this executive authorization to sweep up millions of “foreign” communications. But if one side of these communications involves a US person, the NSA is supposed to keep its eyes off of it. The same thing goes for the FBI. But the FBI has spent literal decades ignoring these restraints, preferring to dip into the NSA’s data pool as often as possible for the sole reason of converting a foreign-facing surveillance program into a handy means for domestic surveillance.

The FBI’s constant abuse of this program has seen it scolded by FISA judges, excoriated by legislators actually willing to stand up for their constituents’ rights, and habitually abused verbally at internet sites like this one.

Not that it has mattered. For years, the NSA (and, by extension, the FBI) has been given a blanket blessing of their spy programs by legislators who have been convinced nothing but a clean re-authorization is acceptable in terrorist times like these.

Fortunately for all of us, the future of Section 702 remains in a particularly hellish limbo. As Dell Cameron reports for Wired, Republicans are going to war against other Republicans, limiting the chances of Section 702 moving forward without significant alteration.

The latest botched effort at salvaging a controversial US surveillance program collapsed this week thanks to a sabotage campaign by the United States House Intelligence Committee (HPSCI), crushing any hope of unraveling the program’s fate before Congress pivots to prevent a government shutdown in March.

An agreement struck between rival House committees fell apart on Wednesday after one side of the dispute—represented by HPSCI—ghosted fellow colleagues at a crucial hearing while working to poison a predetermined plan to usher a “compromise bill” to the floor.

This makes it sound like this is a bad thing. It isn’t, even if those thwarting a clean re-auth have extremely dirty hands. Legislators should definitely take a long look at this surveillance power, especially when it’s been abused routinely by the FBI to engage in surveillance of US persons who are supposed to be beyond the reach of this foreign-facing dragnet.

Some in the House want the FBI to pay for what it did to Trump loyalists. Some in the House want the FBI to do whatever it wants, so long as it can claim it’s doing (our?) God’s work in its counterterrorism efforts. Excluded from the current infighting are people who actually give a damn about limiting surveillance abuses, shunted to the side by political opportunists, loudmouths, and far too many legislators who refuse to hold the FBI accountable.

What’s odd about this scuttling is the reason it happened. It had nothing to do with Section 702 and everything to do with the government’s predilection for buying data from brokers to avoid warrant requirements erected by Supreme Court rulings.

The impetus for killing the deal, WIRED has learned, was an amendment that would end the government’s ability to pay US companies for information rather than serving them with a warrant. This includes location data collected from cell phones that are capable in many cases of tracking people’s physical whereabouts almost constantly. The data is purportedly gathered for advertising purposes but is collected by data brokers and frequently sold to US spies and police agencies instead.

Senior aides say the HPSCI chair, Mike Turner, personally exploded the deal while refusing to appear for a hearing on Wednesday in which lawmakers were meant to decide the rules surrounding the vote. A congressional website shows that HPSCI staff had not filed one of the amendments meant to be discussed before the Rules Committee, suggesting that at no point in the day did Turner plan to attend.

And that’s where we are now: legislators refusing to authorize one form of domestic surveillance because it would rather give the feds a pass on a much more prevalent form of domestic surveillance. The former once ensnared some of Trump’s buddies. The latter has yet to do so.

The infighting continues, with one side being rallied by none of than Fox News, which prefers to cater to its base, rather than provide any reporting or analysis that might accurately portray current events. The spin being pushed by Fox claims the alterations added to the bill would somehow prevent the NSA (and, by extension, the FBI) from surveilling foreign terrorists.

A Fox News report published Thursday morning, while accurately noting that it was Turner’s threat that forced Johnson to cancel the vote, goes on to cite “sources close to the Intelligence Committee” who offered analysis of the events. The sources claimed that Turner was compelled to abandon the deal because the “compromise bill” had been sneakily altered in a manner that “totally screws FISA in terms of its ability to be a national security tool.”

While redirecting blame away from Turner and his cohorts, the claim is both false and deceptive, relying on assertions that, while farcical perhaps to legal experts, would be impossible for the public at large (and most of the press) to parse alone.

Section 702 still has a good chance to survive intact. This infighting actually makes it much less likely any true reform will take place. Grandstanding has replaced oversight. But, at least for now, we can be assured the surveillance program will remain one step away from being ditched until House Republicans can reconcile their desire to protect people like Carter Page with their desire to treat everyone a little bit on the brown side as a potential terrorist.