It seems with every agency with poor oversight finds some important reason to punish whistleblowers for some comparatively trivial infraction to the one they reveal. The information they reveal rarely leads to punishment but thr small (possibly made up) transgression ruins there career and gets them crucified.
By all accounts this belies a broken system.
Again: the documents on FAS suggest that he created a Hushmail account and used it to send classified documents to reporters. "Not following protocol" doesn't capture that.
It doesn't seem to invalidate the account, nor does it seem like the most important comment to give to this story.
Here's the kernel of what seems to have happened, synthesizing both the Crane reporting from the Guardian today and the Drake indictment:
1. Drake favored a competing dragnet surveillance system that was pushed aside in favor of Trailblazer.
2. Drake lodged a complaint with the NSA IG that Trailblazer was a waste of money with inadequate technical controls. He is joined in his complaint by William Binney and several other former NSA employees.
3. Concurrently, Drake began leaking to reporters --- presumably, James Risen and Eric Lichtblau, who broke the first major NSA surveillance story for the NYT --- using Hushmail.
4. In handling Drake's formal complaint, the NSA managed to leak Drake's identity to DOJ. The article is fuzzy about exactly which law this violates (it refers to the Whistleblower Protection Act, much of which does not apply to national defense and classified information, and not the ICWPA, which has different procedures and protections). Either way: the White House is apoplectic about the Risen/Lichtblau scoop and uses the leak to raid Drake.
5. In the course of investigating Drake, DOJ discovers (perhaps by first ruling out Binney and the other original complainants) Drake's Hushmail leak. Drake is prosecuted.
The Guardian article would have you believe that Drake was prosecuted directly for blowing the whistle through formal channels. But that is not at all what seems to have happened. Yes, in the process of investigating Drake's complaint, there was a procedural foul (Drake's name shouldn't have ended up at DOJ). But it wasn't Drake's formal complaint that got Drake in real trouble!
Again: I think Drake has the most sympathetic case of all the NSA whistleblowers. His leak was extraordinarily targeted, not particularly political, and clearly in the public interest. I'm not writing to litigate whether Drake was right. I'm saying: the Guardian did a poor job of reporting this story.
1. You're making Trailblazer sound similar to Drake's favored system. This is extremely misleading, and is a long discussion on its own. But making this claim paints Drake's motives as career politics and seeks to diminish his character by inferring ulterior motives. If nothing else, that isn't a productive debate.
2. Drake's complaint was not merely that it was a waste of money with inadequate technical controls. He was also not joined in his complain by William Binney.
Binney made the initial complaint, and it was to the Pentagon Inspector General, not the NSA Inspector General (if that is a thing), and he was anonymously joined by Drake and 3 others. This was in Two of the other complainants were former NSA employees who worked on the original program, and one was Diane Roark, a staff member on the House Permanent Select Committee on Intelligence, who had been trying to investigate the NSA on these matters (which is her job), and was getting stonewalled. Drake was still an NSA employee and did not want his career to be impacted, so his name was left off. Others, including Binney, who originally made the "competing system" initiated this because they felt that TrailBlazer was a modified version of ThinThread with all of the privacy protections removed and deployed domestically.
3. Drake did not concurrently leak to reporters. His contact with reporters was several years later. The first report was internally, then he went to congress, then in 2005 he finally went to the media. The Binney complaint was filed in 2012, and the internal escalations within the NSA and Congress had already been happening for years before (ultimately leading to Binney's 2001 resignation in protest).
Drake's hushmail communication was to Gorman of the WSJ about Trailblazer, not James Risen and Eric Lichtblau of NYT, who instead had a totally different story, which was the AT&T warrantless surveillance issue. He set some ground rules for his communication with Gorman, one of which was that he would not reveal anything classified. He maintains that he never did. The outcome of the trial was that he never did. Yes, this contradicts the indictment, for very obvious reasons.
Risen/NYT on the warrantless AT&T issue was a totally different story and in fact had nothing to do with Drake! The investigators of the leak thought the sources might have been the same, and they were wrong.
I bring up ThinThread because the article paints Drake as someone who was motivated to blow the whistle based on the same concerns Snowden had. But that's not what happened. Both ThinThread and Trailblazer were in large part motivated by concerns that more and more SIGINT had a nexus in the US, and that large-scale systems needed to be implemented to capture intelligence that had a US nexus.
When you look at the Drake complaint to the NSA IG through the lens of Snowden, your natural reaction is that the NSA was pushing the concern aside out of C.Y.A., to prevent the public from learning that it was monitoring US comms. But in fact, Drake's complaint is about how Trailblazer was monitoring US comms; the privacy concerns it had were procedural and not substantive. It wasn't stark, the way the article makes it out to be.
I was imprecise about the word "concurrent". My frame of reference was "between the numbered steps in my outline". You're right to correct me. Either way, the point I'm trying to make is that it isn't the IG complaint that got Drake in trouble; it was the communication with reporters.
You can believe that the communications with the press were proper (I don't agree) or in the public interest to the extent that they overrode "proper" (I do agree). But either way, you should be able to agree with me that in an article that is entirely about what happens when insiders at NSA raise concerns through official channels, the fact that Drake got in trouble primarily for what he did through unofficial channels is important to the story, and should have been prominently included.
I agree that if we're going to hold Guardian stories to the standards of Hacker News comments, I have much less of a case. That article would make a fine Hacker News comment.
Given Jacob Appelbaum's description[1] of the Guardian, this is not surprising.
[1] https://www.youtube.com/watch?v=KJValv4YQcY#t=78 (note: strong language - Jacob doesn't pull his punches)
The only classified information ever found was in Drake's house, and the court found that there was no evidence that it was passed to a reporter or anyone else. This is entirely consistent with what this article's source claims a whistleblower would be told to do.
The worst thing he did was violate a document retention policy and store classified information on uncleared devices. And if you're a whistleblower providing evidence, well...no shit?
https://www.dropbox.com/s/fgt8bg4fykz0b7x/Screenshot%202016-...
Second, whatever reasons he had for violating the NSA's process are besides the point. The lede of this story is that following NSA's internal procedures for blowing the whistle will result in NSA destroying your life. But as evidence for that argument, they marshall the story of Thomas Drake, where that is not at all what happened. It's critically important to the story that readers know that he did not simply follow protocol and then get punished for it. Instead, he followed protocol, was dissatisfied with its outcome, and then flagrantly and repeatedly broke protocol.
It's a very convenient strategy to try to hold my argument to account for what happened to Thomas Drake. But the point of my argument isn't Thomas Drake; it's the extraordinarily well-known and easily-acquired information about the Drake case that The Guardian not only left out but by repeated implication contradicted in writing this story. Just because the story lands on a conclusion you're comfortable with doesn't mean you should be comfortable with the story.
And for you the key part is that, when the protocols fail and are subverted by the IG agency, Drake is in the wrong? Wow.
Do you seriously not understand how indictments work? Why would you use them as your source for an account of the events? The whole point of an indictment, which consists entirely of unproven allegations by design, is to throw everything possible at the target and paint the worst possible picture to make your case. It's not a finding of facts and it's not an impartial document.
Lying in an indictment would not be news in any way whatsoever. Not lying in an indictment would be news. But it's not really considered lying.
What part of what I said do you think is a DOJ lie? Based on things Drake has conceded elsewhere, your claim may be more or less rebuttable. You have to actually make the claim before we can discern that.
Of all the whistleblower cases of the last 10 years, Thomas Drake has the most sympathetic. The conventional narrative about Drake appears to be mostly correct. But there are two very important details that this story not only leaves out, but implicitly contradicts.
1. Drake did not follow NSA whistleblower protocol in revealing details about Trailblazer. Unless NSA whistleblower protocol includes "create a Hushmail account and then send classified documents to journalists over it".
2. Drake was concerned about dragnet surveillance. But his concern wasn't "why" or "whether". It was "how". Drake blew the whistle on Trailblazer after a program he sponsored, ThinThread, was pushed aside for Trailblazer. ThinThread sounds a lot better in magazine articles, but it too was a large-scale dragnet surveillance system. The differences were that ThinThread was less expensive, and that ThinThread had better technical controls. But nobody on HN would be OK with ThinThread either.
For pretty much all of the whistleblower cases, you can go to the Federation of American Scientists (FAS.org) to get the original case documents.