Snowden Document Exposes Extensive List of British Spying Tools

Comment

Image Credits: Frerk Meyer (opens in a new window)

The Government Communication Headquarters (GCHQ) — Britain’s National Security Agency (NSA) equivalent — commands a wide-ranging set of tools that enable it to hack into popular social media and communications outlets and plant false information on the Internet, according to a document published by The Intercept Monday. The long list of options ranges from inflating the results of online polls to allowing the agency to monitor Skype communications in real time, though the details of that capability remain murky.

The full document, which is dated from 2012, detailing the code names of various capabilities is the latest revelation from the trove of classified information leaked to reporters by former government contractor Edward Snowden. Journalist Glenn Greenwald published the list of GCHQ capabilities in the same publication that revealed the NSA and FBI were targeting several Muslim American leaders last week under the Foreign Intelligence Service Act.

As Greenwald puts it, the tools “allow GCHQ to seed the internet with false information.” Created by the the GCHQ’s Joint Research Threat Intelligence Group (JRTIG), the arsenal of hacking options can falsely impact page view counts. Another tool called Silver Specter allows for scanning over TOR, software intended to protect users privacy online. The NSA attempted to attack TOR users, according to an October Guardian based on the Snowden files.

The JRTIG tools go beyond what we’ve seen in the past, targeting particular social networking outlets. It is unclear from the document how complicit companies were in the programs, like the program that targeted Skype. Microsoft uses advanced encryption in Skype, and the company has said it only complies with legal requests to turn over information to authorities when they refer to specific accounts. But the report claims JRTIG was capable of accessing user’s contact lists and providing real time call and instant messaging records of targets.

Another operative tactic allows the agency to find photos of specific targets on Facebook that were not available to the public. The agency also claims to have the ability to amplify messages on popular multimedia websites, such as YouTube. Facebook and Google did not immediately respond to a request for comment, and it is unclear from Greenwald’s report if the companies are aware of or complicit in such practices.

The code names for the programs are listed in a page that looks similar to a Wikipedia page as Greenwald says. It was updated as recently as July 2012, and the long list is apparently not a comprehensive catalog.

“If you don’t see it here, it doesn’t mean we can’t build it,” JTRIG says at the top of the list of programs, which includes the following code names and descriptions:

  • UNDERPASS – “Change the outcome of online polls.”
  • SILVERLORD- “Disruption of video-based websites hosting extremist content through concerted target discovery and content removal.”
  • CHANGELING- “Ability to spoof any email address and send email under that identity.”
  • IMPERIAL BARAGE- “For connecting two target phone together in a call”

I sent a list of questions to GCHQ about The Intercept revelations, and as seems to be typical intelligence agency practice, it simply responded with a vague, blanket response. The agency deflected my questions about how GCHQ obtains permission to use these particular tools on targets or if the companies these programs target like Microsoft or Facebook are aware of the tools’ existence.

“It is a longstanding policy that we do not comment on intelligence matters,” the GCHQ said. “Furthermore, all of GCHQ’s work is carried out in accordance with a strict legal and policy framework which ensures that our activities are authorised, necessary and proportionate, and that there is rigorous oversight, including from the Secretary of State, the Interception and Intelligence Services Commissioners and the Parliamentary Intelligence and Security Committee. All our operational processes rigorously support this position.”

The statement appears to be the same as the one the agency issued to The Intercept. Greenwald expresses skepticism that the agency is subject to “rigorous oversight,” citing a former cabinet minister Chris Huhne who has insisted that the ministers were in “utter ignorance” about one of the largest GCHQ programs Tempora, which allows the UK to collect, store and analyze communications much like the American PRISM program.

The document was revealed as the British parliament is set to consider an emergency surveillance law. The law would require telecom companies to retain customer data for a year, a practice that had previously been in place but was thrown out by a European Union court in the spring. Privacy groups and Snowden have denounced the legislation, saying it is happening too fast without enough of a public debate about human rights.

Today’s revelations in the Intercept cast further doubt on the U.K. spy agency’s concern for privacy rights and free speech, given the particularly invasive nature of the techniques detailed here.  It is unclear from Greenwald’s report whether all of these programs were used and how often they are used. The document notes that sometimes the tools can’t be used because of operational requirements. It goes into some details about why some tactics may not be operational and, almost as an after thought, says “There may also be legal restrictions.”

More TechCrunch

Ahead of the AI safety summit kicking off in Seoul, South Korea later this week, its co-host the United Kingdom is expanding its own efforts in the field. The AI…

UK opens office in San Francisco to tackle AI risk

Companies are always looking for an edge, and searching for ways to encourage their employees to innovate. One way to do that is by running an internal hackathon around a…

Why companies are turning to internal hackathons

Featured Article

I’m rooting for Melinda French Gates to fix tech’s broken ‘brilliant jerk’ culture

Women in tech still face a shocking level of mistreatment at work. Melinda French Gates is one of the few working to change that.

10 hours ago
I’m rooting for Melinda French Gates to fix tech’s  broken ‘brilliant jerk’ culture

Blue Origin has successfully completed its NS-25 mission, resuming crewed flights for the first time in nearly two years. The mission brought six tourist crew members to the edge of…

Blue Origin successfully launches its first crewed mission since 2022

Creative Artists Agency (CAA), one of the top entertainment and sports talent agencies, is hoping to be at the forefront of AI protection services for celebrities in Hollywood. With many…

Hollywood agency CAA aims to help stars manage their own AI likenesses

Expedia says Rathi Murthy and Sreenivas Rachamadugu, respectively its CTO and senior vice president of core services product & engineering, are no longer employed at the travel booking company. In…

Expedia says two execs dismissed after ‘violation of company policy’

Welcome back to TechCrunch’s Week in Review. This week had two major events from OpenAI and Google. OpenAI’s spring update event saw the reveal of its new model, GPT-4o, which…

OpenAI and Google lay out their competing AI visions

When Jeffrey Wang posted to X asking if anyone wanted to go in on an order of fancy-but-affordable office nap pods, he didn’t expect the post to go viral.

With AI startups booming, nap pods and Silicon Valley hustle culture are back

OpenAI’s Superalignment team, responsible for developing ways to govern and steer “superintelligent” AI systems, was promised 20% of the company’s compute resources, according to a person from that team. But…

OpenAI created a team to control ‘superintelligent’ AI — then let it wither, source says

A new crop of early-stage startups — along with some recent VC investments — illustrates a niche emerging in the autonomous vehicle technology sector. Unlike the companies bringing robotaxis to…

VCs and the military are fueling self-driving startups that don’t need roads

When the founders of Sagetap, Sahil Khanna and Kevin Hughes, started working at early-stage enterprise software startups, they were surprised to find that the companies they worked at were trying…

Deal Dive: Sagetap looks to bring enterprise software sales into the 21st century

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI moves away from safety

After Apple loosened its App Store guidelines to permit game emulators, the retro game emulator Delta — an app 10 years in the making — hit the top of the…

Adobe comes after indie game emulator Delta for copying its logo

Meta is once again taking on its competitors by developing a feature that borrows concepts from others — in this case, BeReal and Snapchat. The company is developing a feature…

Meta’s latest experiment borrows from BeReal’s and Snapchat’s core ideas

Welcome to Startups Weekly! We’ve been drowning in AI news this week, with Google’s I/O setting the pace. And Elon Musk rages against the machine.

Startups Weekly: It’s the dawning of the age of AI — plus,  Musk is raging against the machine

IndieBio’s Bay Area incubator is about to debut its 15th cohort of biotech startups. We took special note of a few, which were making some major, bordering on ludicrous, claims…

IndieBio’s SF incubator lineup is making some wild biotech promises

YouTube TV has announced that its multiview feature for watching four streams at once is now available on Android phones and tablets. The Android launch comes two months after YouTube…

YouTube TV’s ‘multiview’ feature is now available on Android phones and tablets

Featured Article

Two Santa Cruz students uncover security bug that could let millions do their laundry for free

CSC ServiceWorks provides laundry machines to thousands of residential homes and universities, but the company ignored requests to fix a security bug.

2 days ago
Two Santa Cruz students uncover security bug that could let millions do their laundry for free

TechCrunch Disrupt 2024 is just around the corner, and the buzz is palpable. But what if we told you there’s a chance for you to not just attend, but also…

Harness the TechCrunch Effect: Host a Side Event at Disrupt 2024

Decks are all about telling a compelling story and Goodcarbon does a good job on that front. But there’s important information missing too.

Pitch Deck Teardown: Goodcarbon’s $5.5M seed deck

Slack is making it difficult for its customers if they want the company to stop using its data for model training.

Slack under attack over sneaky AI training policy

A Texas-based company that provides health insurance and benefit plans disclosed a data breach affecting almost 2.5 million people, some of whom had their Social Security number stolen. WebTPA said…

Healthcare company WebTPA discloses breach affecting 2.5 million people

Featured Article

Microsoft dodges UK antitrust scrutiny over its Mistral AI stake

Microsoft won’t be facing antitrust scrutiny in the U.K. over its recent investment into French AI startup Mistral AI.

2 days ago
Microsoft dodges UK antitrust scrutiny over its Mistral AI stake

Ember has partnered with HSBC in the U.K. so that the bank’s business customers can access Ember’s services from their online accounts.

Embedded finance is still trendy as accounting automation startup Ember partners with HSBC UK

Kudos uses AI to figure out consumer spending habits so it can then provide more personalized financial advice, like maximizing rewards and utilizing credit effectively.

Kudos lands $10M for an AI smart wallet that picks the best credit card for purchases

The EU’s warning comes after Microsoft failed to respond to a legally binding request for information that focused on its generative AI tools.

EU warns Microsoft it could be fined billions over missing GenAI risk info

The prospects for troubled banking-as-a-service startup Synapse have gone from bad to worse this week after a United States Trustee filed an emergency motion on Wednesday.  The trustee is asking…

A US Trustee wants troubled fintech Synapse to be liquidated via Chapter 7 bankruptcy, cites ‘gross mismanagement’

U.K.-based Seraphim Space is spinning up its 13th accelerator program, with nine participating companies working on a range of tech from propulsion to in-space manufacturing and space situational awareness. The…

Seraphim’s latest space accelerator welcomes nine companies

OpenAI has reached a deal with Reddit to use the social news site’s data for training AI models. In a blog post on OpenAI’s press relations site, the company said…

OpenAI inks deal to train AI on Reddit data

X users will now be able to discover posts from new Communities that are trending directly from an Explore tab within the section.

X pushes more users to Communities