Dossier: The NSA and Signals
They don't need to read what you said. They only need to know you said it.
The last fifteen years of my working life were spent watching the trade I learned slowly become impossible, and a single agency stands at the centre of why. Not because anyone there ever followed me — I am not important enough — but because of what it taught the rest of them to do.
I came up in a world where the secret lived in a person. You found the person, you recruited the person, you ran the person. The whole apparatus of intelligence pointed at human beings. Then signals quietly ate the human, and the man who taught me did not live to see how completely.
What it actually does
The American signals service runs no human spies. That is the first thing to understand and it surprises people. No case officers, no recruited assets, none of the social work that the other agencies live on. It is mathematicians, linguists, and engineers in a building in Maryland, and its currency is not the recruited man. Its currency is intercepted data. It pulls communications and electronic signals off cables, off satellites, off networks; it breaks codes; it protects its own country's systems. It collects and it decrypts, at a scale that does not fit in a human head. Then it hands the take to everyone else.
It does not arrest. It does not knock. It is a collector and a code-breaker, and it feeds the people who do the rest.
The half of the message you forgot about
Now the part that matters, the part I wish every amateur understood before he picked up a phone.
Every message you send is two messages. There is the content — the words, what you actually said. And there is the metadata — the wrapping. Who you contacted. When. From where. How often. For how long.
Everyone obsesses over the content. They encrypt the content, they speak in code, they whisper. And they leave the wrapping wide open, and the wrapping is the whole story.
Metadata maps a network without a single sentence ever being read. I do not need to know what you told a man at REDACTED at two in the morning. I need to know only that you called him, that night, right after the other call, and again three days later, and that the same cluster of numbers lit up each time. The pattern is the confession. The words are almost decoration.
Encrypt the diary all you like. If you leave the calendar open on the desk, you have hidden nothing.
There was a man I was hired to locate, years back, who was disciplined about everything he said and a fool about everything around it. He never said one incriminating word on a line. Did not need to. The shape of his contact — the same numbers, the same hours, the rhythm of who he reached before he moved — drew the whole network for anyone who cared to look. He was found through his own pattern, never through his words. He could have recited poetry on every call and it would not have saved him.
What discipline against it looks like
You cannot out-encrypt this. You can only out-discipline it, and the discipline is brutal and unglamorous.
- Assume everything is read. Not might be — is. Plan from there.
- Control your emissions. The phone is a beacon that occasionally makes calls; if it is on, it is negotiating with the towers around it, telling someone where you stand.
- Break the pattern, not just the content. Vary the when, the where, the how often. A regular contact is a drawn map.
- Never let two of your devices sit together. They get logged as a pair, and the pair is forever. The cleanest move is the oldest: leave the thing behind. A device that is not with you cannot place you.
This is what killed the old craft, in the end. Not biometrics, not cameras — those came too. It was the slow realisation that the wrapping outlives the message and tells more than the message ever did. The good operative now controls his pattern the way my generation controlled its tongue.
I have changed names and shifted the particulars, as always. The lesson does not change at all. The dangerous part of what you send was never the part you were watching.
— M.