Donate for the Cryptome archive of files from June 1996 to the present

29 October 2013

NSA Boundless Informant Images Explicated

Related:

2013-1457.htm  NSA Spied 125 Billion Phone Calls in a Month  October 24, 2013


Date: Mon, 28 Oct 2013 23:36:25 -0700 (PDT)
From: xxxxx[at]efn.org
To: cryptome[at]earthlink.net
Subject: The Boundless Informant Images

Due to international press coverage, particularly in Italy and the Middle East, I have decided to enclose the images from BOUNDLESSINFORMANT. And explain in more detail what I know about them.

Heatmaps:

The three "heatmaps" show the data represented 3 different ways: DNR (telephony metadata), DNI (internet metadata), and Aggregate (the total of the two).

DNI and DNR are actually broader terms meaning Digital Network Intelligence, and Dialed Number Recognition). The BOUNDLESSINFORMANT tool however, is only capable of displaying metadata.

When: In all heatmap images there is a declassification date (20320108), from which you can calculate the date of the capture (January 8, 2013). This is only legible in the image published in Le Monde.

How Long: Also on all heatmaps, a gray box with green text reading "Top 5 countries (last 30 days from today) is shown. Again only legible in the Le Monde image.

How Many Records: On all heatmap images, the United States is always shown. In the "Top 5 countries" frame there are also DNI and DNR Totals by country, a grand total is given in the "Overview" frame. Because the "top five" list is represented three different ways, we wind up with more than five countries once we have examined the images.

The heatmaps have appeared in various papers: Le Monde, The Guardian, Der Spiegel, and The Hindu. The Le Monde images are of excellent quality, the others are not as sharp. The names of the countries can be determined, in part, by looking at the map. Not all of the digits of all the numbers can be determined with certainty, so I have only attempted to read the first few. Some countries and their totals appear on multiple image, which is an excellent help when dealing with low-quality images.

Bar Graphs:

The bar graphs show daily totals, the last 30 days, from December 10, 2012, to January 8, 2013 (which just happens to match the map view). A graph of France has been produced by Le Monde, and 30 Aggregate (DNI+DNR) totals day totals are given 2 different ways: The "Most Volume" box, and the sum of the "top 5 techs" boxes. In the case of France, there is no DNI to deal with, so the Aggregate reflects only DNR. One might think i could save a lot of time by not measuring this graph, but in fact I need it as a check to determine if the bars are in fact precisely scaled, and to validate the accuracy of my methods. Because this is a high quality image, it allows for a higher degree of precision than the other images.

The remainder of the graphs were published in Der Spiegel, including a second copy of the French map (with the bottom bit cropped). The German graph, which Der Spiegel annotated, shows the bottom bit. But it is not as helpful as the French one. It does not allow me to check my DNI and DNR totals individually. And the sum of the top 5 techs is less than the sum of the 2 "most volume" SIGADs. I can still check my Aggregate sums against the sum of the 2 SIGADs. My aggregate total for Germany works out to be 1.4 million lower than the known true aggregate total. In addition, there are graphs for Italy, Spain, and the Netherlands. A small partial graph, belonging to Germany was also published in the Guardian, for the XKEYSCORE article.

Der Spiegel mentions, but does not show an additional graph for Poland. "In Poland, which is also under surveillance, the numbers varied between 2 million and 4 million in the first three weeks of December".   Without seeing the Poland image, we can still estimate a range (2 million*21 days=42 million; 4 million*21 days=84 million) It doesn't state whether this is DNI, DNR, or Both, nor is it precisely clear why there are 21 days described, and not 30.

Greenwald has written in El Mundo that the total for Spain is 60.5 million. I am unable to determine whether he has gotten his number from my analysis (which appeared well before his article) or if he has a separate total. If it's the latter, it speaks well for my tallies in Italy and Netherlands.

Methodology:

Simple enough: measure the scale on the graph, measure the bars. I used GIMPs Measuring Tool to count pixels. Enter the pixels into a spreadsheet, and let it calculate the approximate number. Accuracy: this depends on the scale, one pixel for measurement, multiplied by the scale, which varies from graph to graph. Don't be confused because the scaled number appears to be precise, it is a calculation. In general terms, you will get no more than 2 significant figures.

Clarifications to various media reports:

* 1 phone call may generate multiple metadata records. For reasons I have already mentioned. Nor is it necessarily the case that each call has had the contents recorded. That will depend on other factors: for example whether the person has been "tasked" (ie targeted), and which infrastructure the call has been routed through. All calls routed through the UK will pass through Tempora; this means the the CONTENT will indeed be stored for about 3 days, and the metadata for 30. All calls routed through the United States will have the metadata recorded for about five years, and for those unfortunate enough to encounter AT&T's Hemisphere project, possibly as far back as the mid 1980s. I do not know how much content will be stored, and for how long in that case. Duncan Campbell writes in the Independent that a facility similar similar to and associated with Tempora exists somewhere in the Middle East, but does not specify where. Nor is it clear precisely how he obtained Snowden information, other than it wasn't through Mr Snowden himself. I SPECULATE he may have gotten it from Suddeutsche Zeitung, which had published a similar story. What happens in the rest of the world, I do not have information on and decline to speculate. Any people who have been "tasked" could have their calls potentially memorialized indefinitely.

* I am not Cryptome

* I am not a second NSA mole, I am an independent analyst, without portfolio. I work for no one and have no secret knowledge beyond the media reports. I have compiled this analysis on my own time.

* There is not "no evidence" I am particularly concerned by this statement, by Italian intelligence officials. These graphs should have prompted pan-European concern from the moment they appeared on Der Spiegel. Somebody in each intelligence agency should have done precisely what I have, and sooner. If they have not done so, it does not bode well for their capabilities and credibility as intelligence agencies. They should have been checking this through Diplomatic channels, and via their own means. For the sake of their credibility, I hope they are simply dissembling.

* I would appreciate if any political editorializing is attributed to the appropriate source, and not either Cryptome, or me. My goal in this forum is simply to inform, and give correct information, the only true basis for correct decisions.

* For my one bit of political editorializing, I would very much appreciate it if this analysis does not lead me to be put on the No Fly List, or become "tasked" myself. And need to remind appropriate parties just where this information comes from in the first place.

Additional Sources:

http://www.theguardian.com/world/2013/jun/06/nsa-phone-records-verizon-court-order

http://www.spiegel.de/international/world/secret-documents-nsa-targeted-germany-and-eu-buildings-a-908609-2.html

http://www.independent.co.uk/news/uk/politics/exclusive-uks-secret-mideast-internet-surveillance-base-is-revealed-in-edward-snowden-leaks-8781082.html

http://www.theguardian.com/uk/2013/jun/21/gchq-cables-secret-world-communications-nsa

http://www.nytimes.com/interactive/2013/09/02/us/hemisphere-project.html?_r=0

http://www.elmundo.es/espana/2013/10/28/526dcbad61fd3d07678b456b.html

[Image]
[Image]
[Image]
Image above and for France below:
http://cryptome.org/2013/10/nsa-boundless-informant.pdf
[Image]
[Image]