It\u2019s no secret that the National Security Agency (NSA) in the United States is collecting and analysing data from Internet users around the world using tools such as XKeyscore.<\/p>\n
However, new information published on Das Erste<\/a> has revealed that the NSA specifically looks for Internet traffic from users that might be interested in online security or privacy.<\/p>\n Though it may not be surprising, code published as part of the Das Erste report revealed that the NSA is monitoring connections to the Tor network, using its XKeyscore system.<\/p>\n Tor is a system that makes it easier for users to keep their browsing anonymous and private. It has also been included in a number of tutorials as a mechanism to work around geographic restrictions on websites to purchase content or products from companies that can\u2019t or won\u2019t sell to South Africa.<\/p>\n A Tor-related XKeyscore rule<\/a> that was particularly interesting involved the Tor website itself:<\/p>\n According to the report, this means that the NSA is watching for anyone who visits the Tor Project website outside the so-called \u201cFive Eyes\u201d (FVEY) countries.<\/p>\n For South Africans, this suggests that the US spy agency has made a note of anyone who has visited the Tor website, and will take note of anyone who simply clicks this link<\/a>.<\/p>\n Other Internet traffic that may have landed the curious techie in the NSA\u2019s sights includes searching for information relating to\u201cTails\u201d, going to the Tails website<\/a>, or visiting the Linux Journal website<\/a>.<\/p>\n Tails is an acronym for \u201cThe Amnesic Incognito Live System\u201d, a Linux-based live operating system that aims to preserve users\u2019 privacy and anonymity.<\/p>\n The operating system can be booted on almost any computer from a DVD, USB stick, or SD card.<\/p>\n It also forces all connections to the Internet to go through the Tor network, so using Tails is an XKeyscore double-whammy, it seems.<\/p>\n The XKeyscore rules for Tails-related traffic is shown below:<\/p>\n NSA watches regular Internet users<\/strong><\/a><\/p>\n NSA snooping smashed terrorist plots<\/strong><\/a><\/p>\n Secret document shows South Africa on NSA spying list<\/strong><\/a><\/p>\n\n
\/\/ START_DEFINITION\r\n\/*\r\nThe fingerprint identifies sessions visiting the Tor Project website from non-fvey countries.\r\n*\/\r\nfingerprint('anonymizer\/tor\/torpoject_visit')=http_host('www.torproject.org') and not(xff_cc('US' OR 'GB' OR 'CA' OR 'AU' OR 'NZ'));\r\n\/\/ END_DEFINITION<\/pre>\n<\/blockquote>\n\n
\/\/ START_DEFINITION\r\n\/*\r\nThese variables define terms and websites relating to the TAILs (The Amnesic Incognito Live System) software program, a comsec mechanism advocated by extremists on extremist forums.\r\n*\/\r\n\r\n$TAILS_terms=word('tails' or 'Amnesiac Incognito Live System') and word('linux' or ' USB ' or ' CD ' or 'secure desktop' or ' IRC ' or 'truecrypt' or ' tor ');\r\n$TAILS_websites=('tails.boum.org\/') or ('linuxjournal.com\/content\/linux*');\r\n\/\/ END_DEFINITION\r\n\r\n\/\/ START_DEFINITION\r\n\/*\r\nThis fingerprint identifies users searching for the TAILs (The Amnesic Incognito Live System) software program, viewing documents relating to TAILs, or viewing websites that detail TAILs.\r\n*\/\r\nfingerprint('ct_mo\/TAILS')=fingerprint('documents\/comsec\/tails_doc') or web_search($TAILS_terms) or url($TAILS_websites) or html_title($TAILS_websites);\r\n\/\/ END_DEFINITION<\/pre>\n<\/blockquote>\nRelated NSA news<\/h3>\n