NSA Web Site Plants 'Cookies' on Computers

troy2000 · 12-29-2005, 11:15 PM

By ANICK JESDANUN

NEW YORK // The National Security Agency's Internet site has been placing files on visitors' computers that can track their Web surfing activity despite strict federal rules banning most of them.

These files, known as "cookies," disappeared after a privacy activist complained and The Associated Press made inquiries this week, and agency officials acknowledged Wednesday they had made a mistake. Nonetheless, the issue raises questions about privacy at a spy agency already on the defensive amid reports of a secretive eavesdropping program in the United States.

"Considering the surveillance power the NSA has, cookies are not exactly a major concern," said Ari Schwartz, associate director at the Center for Democracy and Technology, a privacy advocacy group in Washington, D.C. "But it does show a general lack of understanding about privacy rules when they are not even following the government's very basic rules for Web privacy."

Until Tuesday, the NSA site created two cookie files that do not expire until 2035 -- likely beyond the life of any computer in use today.

Don Weber, an NSA spokesman, said in a statement Wednesday that the cookie use resulted from a recent software upgrade. Normally, the site uses temporary, permissible cookies that are automatically deleted when users close their Web browsers, he said, but the software in use shipped with persistent cookies already on.

"After being tipped to the issue, we immediately disabled the cookies," he said.

Cookies are widely used at commercial Web sites and can make Internet browsing more convenient by letting sites remember user preferences. For instance, visitors would not have to repeatedly enter passwords at sites that require them.

But privacy advocates complain that cookies can also track Web surfing, even if no personal information is actually collected.

In a 2003 memo, the White House's Office of Management and Budget prohibits federal agencies from using persistent cookies -- those that aren't automatically deleted right away -- unless there is a "compelling need."

A senior official must sign off on any such use, and an agency that uses them must disclose and detail their use in its privacy policy.

Peter Swire, a Clinton administration official who had drafted an earlier version of the cookie guidelines, said clear notice is a must, and `vague assertions of national security, such as exist in the NSA policy, are not sufficient."

Daniel Brandt, a privacy activist who discovered the NSA cookies, said mistakes happen, "but in any case, it's illegal. The (guideline) doesn't say anything about doing it accidentally."

The Bush administration has come under fire recently over reports it authorized NSA to secretly spy on e-mail and phone calls without court orders.

Since The New York Times disclosed the domestic spying program earlier this month, President Bush has stressed that his executive order allowing the eavesdropping was limited to people with known links to al-Qaida.

But on its Web site Friday, the Times reported that the NSA, with help from American telecommunications companies, obtained broader access to streams of domestic and international communications.

The NSA's cookie use is unrelated, and Weber said it was strictly to improve the surfing experience "and not to collect personal user data."

Richard M. Smith, a security consultant in Cambridge, Mass., questions whether persistent cookies would even be of much use to the NSA. They are great for news and other sites with repeat visitors, he said, but the NSA's site does not appear to have enough fresh content to warrant more than occasional visits.

The government first issued strict rules on cookies in 2000 after disclosures that the White House drug policy office had used the technology to track computer users viewing its online anti-drug advertising. Even a year later, a congressional study found 300 cookies still on the Web sites of 23 agencies.

In 2002, the CIA removed cookies it had "inadvertently" placed at one of its sites after Brandt called it to the agency's attention.

--I added the quotation marks around inadvertantly...

Rave · 12-30-2005, 12:47 AM

Yup,cookies that aren't deleted right away,kinda like those background checks,right,I say you give them an inch and they take a mile.
Come to think of it,you don't have to give them an inch,they take what they want when they want and that's the way it is.
I know,it could be worse,but in a country that is going around forcing "Democracy" down others throats,you would think they could give us a break.

inuyasha · 12-30-2005, 01:28 AM

*looks around shifty eyed* they're just trying to find out where i get good deals on guns, and codes for games... evil scum are trying to copy off my college homework via cookies >.< next they will be reading forums i post to an.... er... crap :S

Rufus Rhastus J · 12-30-2005, 09:50 AM

you already know what I think.....But, in case you forgot....I think everyone who is envolved with this should be in jail for many years...some should be shot! this sucks and is just plain wrong.

Dale · 12-30-2005, 10:48 AM

Some time back we had a thread that centered around spying, I believe.

At any rate in that thread I pointed out the vast number of ways the government could legally (or perhaps covertly is a more appropriate term) spy on you as it is right now.

I'm NOT saying we should give anyone carte blanch to do whatever they want with our rights and liberties. I'm simply pointing out there are security cameras everywhere you look these days.

GM products have On-Star and I would be willing to bet with some high-tech tele-communications modifications a relatively benign system could be converted to an effective tracking device.

Your credit and debit card magnetic strips have more information than one might think and shortly every clinic, Doctor's Office and hospital will require a magnetic read card with ALL of your medical and medically related personal history.

ANY brush with the law is subject to computer archive retrival by whomever can access the system or has the "authority" to such information.
Court records, for the most part, are public information.

I don't know of too many places where a registered sex offender's residence is not known, or at least the ability to learn it is there.

Before long most, if not all, states will require you to have a drivers license or state identification card with enough information on you to choke a liberal democrapt.

Cookies on your computer have been around since the earlier days of personal computing so who's to know if the cookies have been a dark source of information and we just haven't realized it?

The abilities to spy on us are there...many more avenues than I listed.
I'm sure they are being used but that's not to say we shouldn't protest..and protest loudly.

My question is what good does kicking and screaming get you sometimes? Sore and hoarse.

I just wish our out-cries would be listened to more by those who have the power to demand and bring about changes in the way the government entities treat us.

In short if there are not severe legal penalities against the entities that do wrong...and the courts need to support and act on issues...then the powers to be will just continue to do what they please.

Dang...now my blood pressure is up! But I'm trying to keep my cool so this thread doesn't get locked because of me. (smiles)

Shaun · 12-30-2005, 12:45 PM

The funny thing about this is that commercial businesses have been doing this very thing for many years to find out more information regarding marketing campaigns.

BattleRifleG3 · 12-30-2005, 02:31 PM

Hmm, what if they served cookies at the agency locations during Christmas time, and used them to plant tracking devices in those who had them? That would give them some valuable intel - where the sorts of people go who eat free cookies served at government buildings.

pball942 · 12-30-2005, 03:33 PM

That would be something.
Who ate all the oatmeal cookies!?
Oh my terminl says agent BattleRifleG3

Dale · 12-30-2005, 09:59 PM

Quote:

Originally Posted by pball942

That would be something.
Who ate all the oatmeal cookies!?
Oh my terminl says agent BattleRifleG3

HUH??????????????

12-29-2005, 11:15 PM	#1
troy2000 Resident Armed Liberal Join Date: Dec 2004 Location: Southern California Posts: 10,017 Images: 9	NSA Web Site Plants 'Cookies' on Computers By ANICK JESDANUN NEW YORK // The National Security Agency's Internet site has been placing files on visitors' computers that can track their Web surfing activity despite strict federal rules banning most of them. These files, known as "cookies," disappeared after a privacy activist complained and The Associated Press made inquiries this week, and agency officials acknowledged Wednesday they had made a mistake. Nonetheless, the issue raises questions about privacy at a spy agency already on the defensive amid reports of a secretive eavesdropping program in the United States. "Considering the surveillance power the NSA has, cookies are not exactly a major concern," said Ari Schwartz, associate director at the Center for Democracy and Technology, a privacy advocacy group in Washington, D.C. "But it does show a general lack of understanding about privacy rules when they are not even following the government's very basic rules for Web privacy." Until Tuesday, the NSA site created two cookie files that do not expire until 2035 -- likely beyond the life of any computer in use today. Don Weber, an NSA spokesman, said in a statement Wednesday that the cookie use resulted from a recent software upgrade. Normally, the site uses temporary, permissible cookies that are automatically deleted when users close their Web browsers, he said, but the software in use shipped with persistent cookies already on. "After being tipped to the issue, we immediately disabled the cookies," he said. Cookies are widely used at commercial Web sites and can make Internet browsing more convenient by letting sites remember user preferences. For instance, visitors would not have to repeatedly enter passwords at sites that require them. But privacy advocates complain that cookies can also track Web surfing, even if no personal information is actually collected. In a 2003 memo, the White House's Office of Management and Budget prohibits federal agencies from using persistent cookies -- those that aren't automatically deleted right away -- unless there is a "compelling need." A senior official must sign off on any such use, and an agency that uses them must disclose and detail their use in its privacy policy. Peter Swire, a Clinton administration official who had drafted an earlier version of the cookie guidelines, said clear notice is a must, and `vague assertions of national security, such as exist in the NSA policy, are not sufficient." Daniel Brandt, a privacy activist who discovered the NSA cookies, said mistakes happen, "but in any case, it's illegal. The (guideline) doesn't say anything about doing it accidentally." The Bush administration has come under fire recently over reports it authorized NSA to secretly spy on e-mail and phone calls without court orders. Since The New York Times disclosed the domestic spying program earlier this month, President Bush has stressed that his executive order allowing the eavesdropping was limited to people with known links to al-Qaida. But on its Web site Friday, the Times reported that the NSA, with help from American telecommunications companies, obtained broader access to streams of domestic and international communications. The NSA's cookie use is unrelated, and Weber said it was strictly to improve the surfing experience "and not to collect personal user data." Richard M. Smith, a security consultant in Cambridge, Mass., questions whether persistent cookies would even be of much use to the NSA. They are great for news and other sites with repeat visitors, he said, but the NSA's site does not appear to have enough fresh content to warrant more than occasional visits. The government first issued strict rules on cookies in 2000 after disclosures that the White House drug policy office had used the technology to track computer users viewing its online anti-drug advertising. Even a year later, a congressional study found 300 cookies still on the Web sites of 23 agencies. In 2002, the CIA removed cookies it had "inadvertently" placed at one of its sites after Brandt called it to the agency's attention. --I added the quotation marks around inadvertantly... Last edited by troy2000; 12-29-2005 at 11:44 PM.

12-30-2005, 12:47 AM	#2
Rave Senior Member Join Date: Mar 2002 Location: Tampa Posts: 7,053	Yup,cookies that aren't deleted right away,kinda like those background checks,right,I say you give them an inch and they take a mile. Come to think of it,you don't have to give them an inch,they take what they want when they want and that's the way it is. I know,it could be worse,but in a country that is going around forcing "Democracy" down others throats,you would think they could give us a break. __________________ USAF '62-'66 .

12-30-2005, 09:50 AM	#4
Rufus Rhastus J Senior Member Join Date: Apr 2003 Location: West, Central Florida, Third World America Posts: 6,339 Images: 1	you already know what I think.....But, in case you forgot....I think everyone who is envolved with this should be in jail for many years...some should be shot! this sucks and is just plain wrong. __________________ "They cannot be trusted.....The Romulans (our politicos) are without honor." Worf

12-30-2005, 10:48 AM	#5
Dale Senior Member Join Date: Mar 2002 Location: Too Dang Hot, Arizona Posts: 4,284	Some time back we had a thread that centered around spying, I believe. At any rate in that thread I pointed out the vast number of ways the government could legally (or perhaps covertly is a more appropriate term) spy on you as it is right now. I'm NOT saying we should give anyone carte blanch to do whatever they want with our rights and liberties. I'm simply pointing out there are security cameras everywhere you look these days. GM products have On-Star and I would be willing to bet with some high-tech tele-communications modifications a relatively benign system could be converted to an effective tracking device. Your credit and debit card magnetic strips have more information than one might think and shortly every clinic, Doctor's Office and hospital will require a magnetic read card with ALL of your medical and medically related personal history. ANY brush with the law is subject to computer archive retrival by whomever can access the system or has the "authority" to such information. Court records, for the most part, are public information. I don't know of too many places where a registered sex offender's residence is not known, or at least the ability to learn it is there. Before long most, if not all, states will require you to have a drivers license or state identification card with enough information on you to choke a liberal democrapt. Cookies on your computer have been around since the earlier days of personal computing so who's to know if the cookies have been a dark source of information and we just haven't realized it? The abilities to spy on us are there...many more avenues than I listed. I'm sure they are being used but that's not to say we shouldn't protest..and protest loudly. My question is what good does kicking and screaming get you sometimes? Sore and hoarse. I just wish our out-cries would be listened to more by those who have the power to demand and bring about changes in the way the government entities treat us. In short if there are not severe legal penalities against the entities that do wrong...and the courts need to support and act on issues...then the powers to be will just continue to do what they please. Dang...now my blood pressure is up! But I'm trying to keep my cool so this thread doesn't get locked because of me. (smiles) __________________ "It confuses me how some people can vigorously go against the 2nd. Amendment and still call themselves patriotic"-me Last edited by Dale; 12-30-2005 at 10:53 AM.

12-30-2005, 12:45 PM	#6
Shaun Super Moderator Join Date: Mar 2002 Location: Nashville, TN Posts: 8,619 Images: 1	The funny thing about this is that commercial businesses have been doing this very thing for many years to find out more information regarding marketing campaigns. __________________ "Homeland Security is the responsibility of an armed citizen" ME http://webpages.charter.net/s.s.v/

12-30-2005, 01:28 AM	#3
inuyasha Senior Member Join Date: Apr 2005 Location: US occupied territories of "south dakota" Posts: 357	looks around shifty eyed they're just trying to find out where i get good deals on guns, and codes for games... evil scum are trying to copy off my college homework via cookies >.< next they will be reading forums i post to an.... er... crap :S

12-30-2005, 02:31 PM	#7
BattleRifleG3 Super Moderator Join Date: Mar 2002 Location: Western PA Posts: 11,454 Images: 13	Hmm, what if they served cookies at the agency locations during Christmas time, and used them to plant tracking devices in those who had them? That would give them some valuable intel - where the sorts of people go who eat free cookies served at government buildings. __________________ Trust is earned, not... GIVEN away. - Worf

12-30-2005, 03:33 PM	#8
pball942 Senior Member Join Date: Dec 2005 Location: Kansas Posts: 256	That would be something. Who ate all the oatmeal cookies!? Oh my terminl says agent BattleRifleG3 __________________ Running is not a plan. Running is what you do when your plan fails.