Edward Snowden Answers Some Questions

CFi1KuUWEAAdB5d.png

With a little help from his friends at the American Civil Liberties Union, Edward Snowden conducted a Reddit "Ask Me Anything" session.
The ex-spy spoke about reforms to the National Security Agency and the Patriot Act. Section 215 of the act, which the NSA uses as the legal justification for the data collection program that Snowden revealed two years ago, is set to expire in June unless Congress extends it.
In his answers, he expressed significant skepticism that the government will stop spying on US citizens altogether, but he encouraged users to call their member of Congress and urge them to vote against the Patriot Act extension.
Q: What're your thoughts on Rand Paul's filibuster against the renewal of the Patriot Act?
A: It represents a sea change from a few years ago, when intrusive new surveillance laws were passed without any kind of meaningful opposition or debate. Whatever you think about Rand Paul or his politics, it's important to remember that when he took the floor to say "No" to any length of reauthorization of the Patriot Act, he was speaking for the majority of Americans—more than 60% of whom want to see this kind of mass surveillance reformed or ended.
He was joined by several other senators who disagree with the Senate Majority leader's efforts to sneak through a reauthorization of what courts declared was a comprehensively unlawful program, and if you notice that yours did not take to the floor with him, you should call them right now and ask them to vote against any extension of the Patriot Act, because right now it looks like they're going to force the reauthorization vote to occur during the dark of a holiday weekend.
Q: Even if Section 215 is not renewed, do you believe that the NSA/US government will still accomplish phone surveillance without approval and in secret?
A: There are always reasons to be concerned that regardless of the laws passed, some agencies in government (FBI, NSA, CIA, and DEA, for example, have flouted laws in the past) will misconstrue the intent of Congress in passing limiting laws—or simply disregard them totally. For example, the DOJ's internal watchdog, the Office of the Inspector General (OIG) released a report claiming, among other abuses, that it could simply refuse to tell government oversight bodies what exactly it was doing, so the legality or illegality of their operations simply couldn't be questioned at all.
However, that's no excuse for the public or Congress to turn a blind eye to unlawful or immoral operations—and the kind of mass surveillance happening under Section 215 of the Patriot Act right now is very much unlawful: the Courts ruled just two weeks ago that not only are these activities illegal, but they have been since the day the programs began.
Q: In your opinion, do you think that a majority of American Citizens care enough that they will call Congress and sign petitions? I think a large issue in America is Political Apathy.
A: Jameel Jaffer, deputy legal director of the ACLU] probably has a better answer, but we know from very recent, non-partisan polling that Americans (and everyone else around the world) care tremendously about mass surveillance.
The more central question, from my perspective, is "why don't lawmakers seem to care?" After all, the entire reason they are in office in our system is to represent our views. The recent Princeton Study on politicians' responsiveness to the policy preferences of different sections of society gives some indication of where things might be going wrong: Out of all groups expressing a policy preference within society, the views of the public at large are given the very least weight, whereas those of economic elites (think bankers, lobbyists, and the people on the Board of Directors at defense contracting companies) exercise more than ten times as much influence on what laws get passed -- and what laws don't.
Q: What’s your opinion about the UK government giving GCHQ spies immunity from anti-hacking laws and does that make them worse than the NSA?
I think it's revealing that the UK government has chosen to change the law without any debate or public declaration. It's a clear red flag.
Reddit users also had some soul-searching questions for Snowden.
"Do you miss pizza?" one user asked.
"This guy gets it," Snowden responded. "Russia has Papa John's. For real."
NextGov:  http://bit.ly/1ctBBg6

« US Needed Snowden to Open the Door on NSA’s Spying
NSA Powers Expire as US Rolls Back Surveillance »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Cybsecurity Foundation (CSF)

Cybsecurity Foundation (CSF)

Cybsecurity is a non-profit NGO, which aims to work on improvement of security levels in the Polish cyberspace.

Coalfire

Coalfire

Coalfire specialises in cyber risk management and compliance. Our services span the cybersecurity lifecycle from advisory and compliance, to testing and engineering, monitoring and optimization.

Mimecast

Mimecast

Mimecast delivers cloud-based email management for Microsoft Exchange and Microsoft Office 365 including archiving, continuity and security.

Centripetal Networks

Centripetal Networks

Centripetal Networks was founded with one vision - to protect networks from advanced threats by simplifying intelligence-driven security.

Guidewire

Guidewire

Guidewire Cyence™ Risk Analytics is a cloud-native economic cyber risk modeling solution built to help the insurance industry quantify cyber risk exposures.

Fyde

Fyde

Fyde helps companies with an increasingly distributed workforce mitigate breach risk by enabling secure access to critical enterprise resources.

Fortalice

Fortalice

Fortalice provide customizable consulting services built on proven methodology to strengthen your business cyber security defenses.

Neovera

Neovera

Neovera is a trusted provider of managed services including cyber security and enterprise cloud solutions, committed to delivering results through the innovative use of scalable enterprise-grade tech.

Data Protection Commission (DPC) - Ireland

Data Protection Commission (DPC) - Ireland

The Data Protection Commission (DPC) is the national independent authority responsible for upholding the fundamental right of individuals in the EU to have their personal data protected.

Resilience Cyber insurance

Resilience Cyber insurance

Resilience helps to improve cyber resilience by connecting cyber insurance coverage with advanced cybersecurity visibility and a shared plan to reinforce great cyber hygiene.

Guardz

Guardz

Guardz helps small and growing businesses to go from zero or low cyber protection to having comprehensive security – in the quickest and most straightforward way.

Sequentur

Sequentur

Sequentur is an award-winning Managed IT Services company. We are SOC 2 certified and provide Managed IT Services and Cybersecurity services to businesses nationwide.

TetherView

TetherView

TetherView provides leading virtual desktop and email security technology to help businesses stand up and manage digital workspaces.

Databarracks

Databarracks

Databarracks deliver award winning IT resilience and continuity services. We help organisations get the most out of the cloud and protect their data, wherever it lives.

Operant AI

Operant AI

Operant AI is the only Runtime AI Application Defense Platform that actively protects every layer of live cloud and AI applications from infra to APIs.

Empirical Security

Empirical Security

Empirical builds mathematical models for security data. We maintain the world’s most advanced global models for cybersecurity, and we build local models that respond to your specific context.