15 October 2014
Bruce Schneier Censored by Snowden Censors
Censoring Snowden's NSA technical documents to prevent devising countermeasures
is criminally negligent.
October 15, 2014
by Bruce Schneier
CTO, Co3 Systems, Inc.
FOXACID Operations Manual
A few days ago, I saw this tweet: "Just a reminder that it is now *a full
year* since Schneier cited it, and the FOXACID ops manual remains unpublished."
The citation is this: "According to a top-secret operational procedures manual
provided by Edward Snowden, an exploit named Validator might be the default,
but the NSA has a variety of options. The documentation mentions United Rake,
Peddle Cheap, Packet Wrench, and Beach Head--all delivered from a FOXACID
subsystem called Ferret Cannon."
Back when I broke the QUANTUM and FOXACID programs, I talked with the Guardian
editors about publishing the manual. In the end, we decided not to, because
the information in it wasn't useful to understanding the story. It's been
a year since I've seen it, but I remember it being just what I called it:
an operation procedures manual. It talked about what to type into which screens,
and how to deal with error conditions. It didn't talk about capabilities,
either technical or operational. I found it interesting, but it was hard
to argue that it was necessary in order to understand the story.
It will probably never be published. I lost access to the Snowden documents
soon after writing that essay -- Greenwald broke with the Guardian, and I
have never been invited back by the Intercept -- and there's no one looking
at the documents with an eye to writing about the NSA's technical capabilities
and how to securely design systems to protect against government surveillance.
Even though we now know that the same capabilities are being used by other
governments and cyber criminals, there's much more interest in stories with
QUANTUM and FOXACID: