I still remember Larry page's denial and Mark Zuckerberg's denial.
We can never trust them again.
We can never trust them again.
Also, given the name "PRISM," isn't it pretty obvious how this program worked? Think about it... What does a prism do?
Meanwhile, Verizon and ATT have been completely silent and government representatives are making up new definitions for the term perjury.
It's obvious a spy agency isn't trying to communicate how their program works to everyone who stumbles across their codename.
The amount of trust we grant these people and companies in the first place may not be the root of the problems we're facing lately, but our collective naivete about other people's motivations and scruples has most certainly contributed to the lengths at which our rights and privacy can readily be violated by both the people we're throwing our data at and the governments that want access.
What exactly do you think Facebook and Google have done wrong?
There are a few problems with that theory when you consider that these companies are using SSL now. They cannot MiTM data from a beam splitter and we know they are not actively MiTM'ing traffic from a spliced cable with their own private key signed by a cooperating CA (doing this would be noticed quickly if they tried it en masse). If they have the companies private keys then they could be passively decrypting the traffic, unless DHE/ECDHE were being used. If that was the case then they would need the companies private key and the ability to do an active MiTM.
I don't doubt that they are doing something, but I don't think we have enough information yet to say what. Hopefully further releases will shed more light on this.
The thing that is most frustrating about this leak is we only get 4 slides out of a 41 slide deck, and are left to fill the gaps with paranoid worst-case assumptions. And the Internet is a great echo chamber of paranoid assumptions.
Really, we just don't know. We don't know anything, except that it sure seems that something is going on. The documents are not getting the same treatment as the fabricated documents of a raving lunatic anonymous coward on Slashdot.
It seems fairly prudent to assume the worse case scenario, better safe than sorry, but it is important to not confuse that assumption with knowledge.
Dr. Charlie Miller, former NSA global network exploitation analyst, @0xcharlie: While I was at the NSA (2000-2005) we were told it was against the law to spy on Americans and if you did it you'd be terminated. In retrospect, it was going on even then. I'm not surprised the heads there lie to Americans, but I'm surprised they lied even to their own employees.
Imagine if I was sending copies of everything (emails, internet uploads, photos, videos, skype recordings, aws server snapshots) to China's Ministry of State Security... I'd have the FBI at my doorstep in no time.