I agree, those releases are meant to cover up more than actually reveal anything. If it stops at that, then they will achieve nothing. But I have hope that it will go farther than that for the first time in a decade.
I watched the entire Judiciary Committee hearings and they were more than just the normal political posturing. There was a lot of that of course, but there is an undercurrent of deep concern that congress has been had by the executive and judicial branches. That is a good thing. The more documentation that comes out, the more likely there will be real change. Especially if Congress becomes convinced that thousands of analysts across the intelligence community have the technical ability to bypass any legally required procedures and do what Snowden said they can do, and that the technical auditing of that access is less than complete. Looking at the architecture of the system that the NSA has built, and hearing that the number of system administrators with access similar to Snowden's is in the "hundreds", then I suspect the truth is that there are hundreds of people who have total access to all the data the NSA has and that they can access that data in a way that would be very hard to detect unless someone in command was looking for a specific case of abuse. And even then, how could you trust the audit trail when at some level at least some system admins have to have full access to that data too?
But that will not really solve the global problem for the tech community since Congress will never prevent the NSA from monitoring foreign traffic. It will be interesting to see how Google handles encrypting Google Drive. The only hope they have of gaining back the trust of international users in the long term is to make it easy to ensure that this sort of wholesale surveillance is much less likely to bear fruit. Google has conflicting incentives in this area though since they want to be able to read the content to serve relevant ads.
I still think it is highly unlikely that we'll get any real reform. But I have more hope than I have in years, and that is great.
At the end of the day, we need more tech like Tor. And we need the tech community to actively resist restrictions that governments will always want to place on the effectiveness of such systems. I personally would like to see a requirement that data centers in the US must allow users to host Tor relays and exit nodes on their networks without hassle or restriction. That is unlikely to ever happen, but that would go a long way in really protecting users since it would allow users to fund a network that would actually protect their privacy. At a minimum, there needs to be legal protection for users who do choose to host relays and exits. Short of a requirement that all DCs allow Tor exit nodes, as a community we need to actively support companies that allow users to host Tor exit nodes. And we should set up a legal fund to fight any battles that result from the hosting of relays and exits.