Project PM Leaks Dirt on Romas/COIN Classified Intelligence Mass Surveillance

Updated note: To be clear, all analysis and documentation to expose this mass surveillance was done by Project PM.

If you are not sitting, please do so. Although I don't advocate drinking, you might also pour a double-shot of whiskey to prepare yourself for distinctly unpleasant news about immensely sophisticated mass surveillance called Romas/COIN, or soon to be replaced by a similar program known as Odyssey. The nature and extent of the "counter intelligence" operation can be glimpsed in part by closely inspecting hundreds of e-mails among the 70,000 that were stolen in February from the contracting firm HBGary Federal.

After searching through HBGary e-mails [1] for keywords and reading until I wanted to puke or scream, I decided to go ahead and run with Project PM's announcement. Barrett Brown of Project PM [2] will publish these findings in full on Project PM Wiki [3] later, but this is part of that release. According to Project PM:

For at least two years, the U.S. has been conducting a secretive and immensely sophisticated campaign of mass surveillance and data mining against the Arab world, allowing the intelligence community to monitor the habits, conversations, and activity of millions of individuals at once. And with an upgrade (Odyssey) scheduled for later this year, the top contender to win the federal contract and thus take over the program is a team of about a dozen companies which were brought together in large part by Aaron Barr - the same disgraced CEO who resigned from his own firm earlier this year after he was discovered to have planned a full-scale information war against political activists at the behest of corporate clients. The new revelation provides for a disturbing picture, particularly when viewed in a wider context. Unprecedented surveillance capabilities are being produced by an industry that works in secret on applications that are nonetheless funded by the American public - and which in some cases are used against that very same public. Their products are developed on demand for an intelligence community that is not subject to Congressional oversight and which has been repeatedly shown to have misused its existing powers in ways that violate U.S. law as well as American ideals.

Although military contractor Northrop Grumman had long held the contract for Romas/COIN, enter HBGary Federal CEO Aaron Barr in an email to Al Pisani, an executive at the much larger federal contractor TASC, with a plan related to COIN. "I met with [Mantech CEO] Bob Frisbie the other day to catch up. He is looking to expand a capability in IO [information operations] related to the COIN re-compete but more for DoD."

The layout and story is extremely long, and you'll need to read over the announcement at Project PM when it's published there. Project PM determined from the dozens of clues and references in leaked emails the unbelievable mass spying nature of Romas/COIN:

-          Mobile phone software and applications constitute a major component of the program.

-          There's discussion of bringing in a "gaming developer," apparently at the behest of Barr, who mentions that the team could make good use of "a social gaming company maybe like zynga, gameloft, etc." Lovegrove elsewhere notes: "I know a couple of small gaming companies at MIT that might fit the bill."

-          Apple [4] and Google [5] were active team partners, and AT&T may have been as well. The latter is known to have provided the NSA free reign over customer communications (and was in turn protected by a bill granting them retroactive immunity from lawsuits). Google itself is the only company to have received a "Hostile to Privacy" rating from Privacy International. Apple is currently being investigated by Congress after the iPhone was revealed to compile user location data in a way that differs from other mobile phones; the company has claimed this to have been a "bug."

-          The program makes use of several providers of "linguistic services." At one point, the team discusses hiring a military-trained Arabic linguist. Elsewhere, Barr writes: "I feel confident I can get you a ringer for Farsi if they are still interested in Farsi (we need to find that out). These linguists are not only going to be developing new content but also meeting with folks, so they have to have native or near native proficiency and have to have the cultural relevance as well."

-          Alterion and SocialEyez [6] are listed as "businesses to contact." The former specializes in "social media monitoring tools." The latter uses "sophisticated natural language processing methodology" in order to "process tens of millions of multi-lingual conversations daily" while also employing "researchers and media analysts on the ground;" its website also notes that "Millions of people around the globe are now networked as never before - exchanging information and ideas, forming opinions, and speaking their minds about everything from politics to products."

-          At one point, TASC exec Chris Clair asks Aaron and others, "Can we name COIN Saif? Saif is the sword an Arab executioner uses when they decapitate criminals. I can think of a few cool brands for this."

-          [7]A diagram attached to one of Barr's e-mails to the group depicts Magpii as interacting in some unspecified manner with "Foreign Mobile" and "Foreign Web." Magpii is a project of Barr's own creation which stands for "Magnify Personal Identifying Information," involves social networking, and is designed for the purpose of storing personal information on users. Although details are difficult to determine from references in Barr's e-mails, he discusses the project almost exclusively with members of military intelligence to which he was pitching the idea.

-          There are sporadic references such things as "semantic analysis," "Latent Semantic Indexing," "specialized linguistics," and OPS, a programming language designed for solving problems using expert systems.

-          Barr asks the team's partner at Apple, Andy Kemp (whose signature lists him as being from the company's Homeland Defense/National Programs division), to provide him "a contact at Pixar/Disney [8]."

Altogether, then, a successful bid for the relevant contract was seen to require the combined capabilities of perhaps a dozen firms - capabilities whereby millions of conversations can be monitored and automatically analyzed, whereby a wide range of personal data can be obtained and stored in secret, and whereby some unknown degree of information can be released to a given population through a variety of means and without any hint that the actual source is U.S. military intelligence. All this is merely in addition to whichever additional capabilities are not evident from the limited description available, with the program as a whole presumably being operated in conjunction with other surveillance and propaganda assets controlled by the U.S. and its partners.

Here's the team players:

-          TASC (PMO, creative services)

-          HB Gary (Strategy, planning, PMO)

-          Akamai (infrastructure)

-          Archimedes Global (Specialized linguistics, strategy, planning)

-          Acclaim Technical Services (specialized linguistics)

-          Mission Essential Personnel (linguistic services)

-          Cipher (strategy, planning operations)

-          PointAbout (rapid mobile application development, list of strategic partners)

-          Google (strategy, mobile application and platform development - long list of strategic partners)

-          Apple (mobile and desktop platform, application assistance -long list of strategic partners)

-          We are trying to schedule an interview with AT&T plus some other small app developers.

Two days after a briefing requirement meeting, the servers of HBGary and HBGary Federal were hacked by a small team of Anonymous operatives in retaliation for Barr's boasts to Financial Times that he had identified the movement's "leadership;" 70,000 e-mails were thereafter released onto the Internet. Barr resigned a few weeks later.

Also according to Project PM, along with clues as to the nature of COIN and its scheduled replacement, a close study of the HBGary e-mails also provide reasons to be concerned with the fact that such things are being developed and deployed in the way that they are. In addition to being the driving force behind the COIN recompete, Barr was also at the center of a series of conspiracies by which his own company and two others hired out their collective capabilities for use by corporations that sought to destroy their political enemies by clandestine and dishonest means, some of which appear to be illegal. None of the companies involved have been investigated; a proposed Congressional inquiry was denied by the committee chair, noting that it was the Justice Department's decision as to whether to investigate, even though it was the Justice Department itself that made the initial introductions. Those in the intelligence contracting industry who believe themselves above the law are entirely correct.

That such firms will continue to target the public with advanced information warfare capabilities on behalf of major corporations is by itself an extraordinary danger to mankind as a whole, particularly insomuch as that such capabilities are becoming more effective while remaining largely unknown outside of the intelligence industry. But a far greater danger is posed by the practice of arming small and unaccountable groups of state and military personnel with a set of tools by which to achieve better and better "situational awareness" on entire populations while also being able to manipulate the information flow in such a way as to deceive those same populations. The idea that such power can be wielded without being misused is contradicted by even a brief review of history.

[7]

History also demonstrates that the state will claim such powers as a necessity in fighting some considerable threat; the U.S. has defended its recent expansion of powers by claiming they will only be deployed to fight terrorism and will never be used against American civilians. This is cold comfort for those in the Arab world who are aware of the long history of U.S. material support for regimes they find convenient, including those of Saddam Hussein, Hosni Mubarak, and the House of Saud. Nor should Americans be comforted by such promises from a government that has no way of ensuring that they will be kept; it was just a few months ago that a U.S. general in Afghanistan ordered a military intelligence unit to use pysops on visiting senators in an effort to secure increased funding for the war, an illegal act; only a few days prior, CENTCOM spokesmen were confidently telling the public that such other psychological capabilities as persona management would never be used on Americans as that would be illegal. The fact is that such laws have been routinely broken by the military and intelligence community, who are now been joined in this practice by segments of the federal contracting industry.

It is inevitable, then, that such capabilities as form the backbone of Romas/COIN and its replacement Odyssey will be deployed against a growing segment of the world's population. The powerful institutions that wield them will grow all the more powerful as they are provided better and better methods by which to monitor, deceive, and manipulate. The informed electorate upon which liberty depends will be increasingly misinformed. No tactical advantage conferred by the use of these programs can outweigh the damage that will be done to mankind in the process of creating them.

The complete Project PM announcement about Romas/COIN has been published: http://wiki.echelon2.org:8090/wiki/Romas/COIN [3]

Like this? Here's more posts:

• What happens if you catch a hacker and must deal with the FBI? [9]
• Microsoft Approves Cybersecurity Plan, PC Health Certificate Plan Gains Support [10]
• FBI Dumpster Diving Brigade Coming Soon to Snoop in a Trashcan Near You [11]
• 'Secret Law' of Patriot Act: Geolocation Tracking & Domestic Spying on Steroids? [12]
• Having private parts is not probable cause for TSA to grope or body scan you [13]
• FaceNiff Android App Allows the Clueless to Hack Facebook in Seconds Over Wi-Fi [14]
• American Express Call Centers Open Door for Warrantless Surveillance by Gov't? [15]
• Former FBI Agent Turned ACLU Attorney: Feds Routinely Spy on Citizens [16]
• Microsoft’s automated Future Home, what can go wrong? [17]
• EFF: Microsoft abusing DMCA to eradicate competing Xbox 360 accessories [18]

Follow me on Twitter @PrivacyFanatic [19]