Skip to main content

Tech companies reportedly built 'secure portals' for government surveillance in lieu of 'direct access' to servers

Tech companies reportedly built 'secure portals' for government surveillance in lieu of 'direct access' to servers

Share this story

Ethernet / Internet (stock)
Ethernet / Internet (stock)

The nine tech companies implicated in the PRISM data-collecting operation yesterday have refuted the allegations by stating that they provide no "direct access" to their servers — but according to The New York Times, the wording is just an artful dodge around the way the systems do in fact work. The Times reports that the government approached companies like Google, Apple, Microsoft, and Facebook about building what were essentially digital secure rooms: separate portals into which the companies would drop data that the government could later access.

Google and Facebook discussed building the portals

According to the Times' sources, most of the tech companies involved resisted implementing this kind of service at first, though many acquiesced to varying degrees (Twitter declined to participate). Both Google and Facebook are named as having discussed plans to build the separate "secure portals" — and according to the report Facebook did in fact build such a system, despite CEO Mark Zuckerberg's outraged post today. The talks about building systems have reportedly continued this year, with the chairman of the Joint Chiefs of Staff, Martin E. Dempsey, travelling to Silicon Valley to meet with executives at various companies.

The denials were consistent for a reason

The PR statements today now seem to be a case of several entities threading a needle just so. The statements from Apple, Google's Larry Page, and others contained a noticeable consistency in their language. Most claimed that they had never heard of PRISM, that they did not offer direct access to their servers, and that they complied with individual court orders for information. Given these new revelations, those statements could very easily be technically correct. The companies wouldn't need to be informed of the "PRISM" moniker to build these systems — and the Times reports that those who had knowledge of the systems wouldn't be legally allowed to discuss them in any case. A separate data storehouse isn't "direct access" or a "back door," and handing off data through said data storehouses would be covered under access that is granted by specific requests under the Foreign Intelligence Surveillance Act (FISA).

A careful dance of language

This careful dance of language may have also been the result of sloppy work on the part of the creator of the leaked PRISM slides as well. As Forbes points out, the Washington Post has since amended its PRISM report, noting that in additional documents it acquired "the arrangement is described as allowing 'collection managers [to send] content tasking instructions directly to equipment installed at company-controlled locations,' rather than directly to company servers." In this case, the installed equipment appears to refer to the secure portals the Times describes.

The Times reports that there were over 1,800 FISA orders last year, and in one such case the NSA dispatched an agent to the headquarters of an unnamed tech company to monitor a cyberattack. There the agent installed government-created software on the company's server and downloaded information to a laptop over a period of several weeks. The NSA can also reportedly receive real-time data from companies when requested.

We've reached out to the companies involved and will let you know their responses. Thus far Microsoft and Twitter have declined to comment on the latest report.

Update: Yahoo has issued a new statement, and unlike the one it released yesterday there is no mention of direct access to the company's servers.

Yahoo! complies with U.S. law and in accordance with those laws, the government can request data about a specific individual. In order to preserve our users privacy, Yahoo! scrutinizes each request and only responds as absolutely required, and then does so in the narrowest and strictest interpretation. Yahoo! wishes to reassure its users that their data is held in the utmost confidence on Yahoo!'s servers and is only disclosed in the rare case that a specific request is made that complies with U.S. law.

Today’s Storystream

Feed refreshed 42 seconds ago Not just you

T
Thomas Ricker42 seconds ago
The Simpsons pays tribute to Chrome’s dino game.

Season 34 of The Simpsons kicked off on Sunday night with an opening credits “couch gag” based on the offline dino game from Google’s Chrome browser. Cactus, cactus, couch, d’oh! Perfect.


T
Youtube
Thomas Ricker7:29 AM UTC
Table breaks before Apple Watch Ultra’s sapphire glass.

”It’s the most rugged and capable Apple Watch yet,” said Apple at the launch of the Apple Watch Ultra (read The Verge review here). YouTuber TechRax put that claim to the test with a series of drop, scratch, and hammer tests. Takeaways: the titanium case will scratch with enough abuse, and that flat sapphire front crystal is tough — tougher than the table which cracks before the Ultra fails — but not indestructible.


E
Twitter
Emma RothSep 25
Rihanna’s headlining the Super Bowl Halftime Show.

Apple Music’s set to sponsor the Halftime Show next February, and it’s starting out strong with a performance from Rihanna. I honestly can’t remember which company sponsored the Halftime Show before Pepsi, so it’ll be nice to see how Apple handles the show for Super Bowl LVII.


E
Twitter
Emma RothSep 25
Starlink is growing.

The Elon Musk-owned satellite internet service, which covers all seven continents including Antarctica, has now made over 1 million user terminals. Musk has big plans for the service, which he hopes to expand to cruise ships, planes, and even school buses.

Musk recently said he’ll sidestep sanctions to activate the service in Iran, where the government put restrictions on communications due to mass protests. He followed through on his promise to bring Starlink to Ukraine at the start of Russia’s invasion, so we’ll have to wait and see if he manages to bring the service to Iran as well.


E
External Link
Emma RothSep 25
We might not get another Apple event this year.

While Apple was initially expected to hold an event to launch its rumored M2-equipped Macs and iPads in October, Bloomberg’s Mark Gurman predicts Apple will announce its new devices in a series of press releases, website updates, and media briefings instead.

I know that it probably takes a lot of work to put these polished events together, but if Apple does pass on it this year, I will kind of miss vibing to the livestream’s music and seeing all the new products get presented.


Welcome to the new Verge

Revolutionizing the media with blog posts

Nilay PatelSep 13
E
External Link
Emma RothSep 24
California Governor Gavin Newsom vetoes the state’s “BitLicense” law.

The bill, called the Digital Financial Assets Law, would establish a regulatory framework for companies that transact with cryptocurrency in the state, similar to New York’s BitLicense system. In a statement, Newsom says it’s “premature to lock a licensing structure” and that implementing such a program is a “costly undertaking:”

A more flexible approach is needed to ensure regulatory oversight can keep up with rapidly evolving technology and use cases, and is tailored with the proper tools to address trends and mitigate consumer harm.


A
Youtube
Andrew WebsterSep 24
Look at this Thing.

At its Tudum event today, Netflix showed off a new clip from the Tim Burton series Wednesday, which focused on a very important character: the sentient hand known as Thing. The full series starts streaming on November 23rd.


A
The Verge
Andrew WebsterSep 24
Get ready for some Netflix news.

At 1PM ET today Netflix is streaming its second annual Tudum event, where you can expect to hear news about and see trailers from its biggest franchises, including The Witcher and Bridgerton. I’ll be covering the event live alongside my colleague Charles Pulliam-Moore, and you can also watch along at the link below. There will be lots of expected names during the stream, but I have my fingers crossed for a new season of Hemlock Grove.