News for hackers. Stuff that matters.
Re:NSA: Please Stop Mailing Us FOIA Requests by dedward on Friday June 21, 2013 @03:36PM (#5920447)
So.. they said please, didn't threaten you, and pointed out a few potential problems with the method you are using (like missing return addresses).

That seems.. helpful?

Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:45PM (#5920512)
They were certainly polite. :)

I did a quick check for people submitting things like "FUCK YOU" and "YOUR MOM" in every field and deleted those before sending. A couple I let through had things like missing city but valid ZIP code, which I assume would actually be enough to get the letter to them. 95% of what was sent had a full address.

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @03:59PM (#5920617)
A couple I let through had things like missing city but valid ZIP code, which I assume would actually be enough to get the letter to them

Did you ever read their instructions for filing a FOIA request? "If you do not include a name and complete postal address, NSA will be unable to respond."[1]

While you are here I dont understand what you mean by:

"It seems that the NSA does not quite get that this is a protest, in addition to a request for information."

How did you expect them to act? And/or what behavior would constitute recognition that this is a "protest"? NSA is required by law to respond to FOIA requests. The civil servant that emailed you was doing what her employer told her to do so that she could continue to bring a paycheck home. Are all the "protest" FOIA requests supposed to get tossed in a burn bag at the end of the day?

[1] http://www.nsa.gov/public_info/foia/submit_foia_request/foia...

Re:NSA: Please Stop Mailing Us FOIA Requests by genwin on Friday June 21, 2013 @04:18PM (#5920733)
Yes, civil servants who flout the oath they took should be just as respected as those who don't.

> I, [name], do solemnly swear (or affirm) that I will support and defend the Constitution of the United States against all enemies, foreign and domestic; that I will bear true faith and allegiance to the same...

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @04:20PM (#5920741)
These people work in the FOIA compliance department. How did they violate their oath?
Re:NSA: Please Stop Mailing Us FOIA Requests by genwin on Friday June 21, 2013 @04:29PM (#5920791)
She works for the NSA's FOIA department, hence bearing sufficient responsibility for the NSA's wrongdoing.
Re:NSA: Please Stop Mailing Us FOIA Requests by fnordfnordfnord on Friday June 21, 2013 @04:51PM (#5920909)
Well, if she's lucky, and if the NSA is competent (at being scumbags) this lady never gets anywhere near anything interesting.
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @04:19PM (#5920736)
It's not me that failed to include a full address. It is the people who submitted their information and failed to fill out the form properly. The form is dead simple, but no matter what, there will always be a small % of people who do not follow instructions.

Furthermore, the NSA does not get to make "rules" about the form of FOIA requests. If they have enough information to reply, by law, they must reply.

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @04:30PM (#5920797)
No you were not the person that failed to include a complete address. But you were the one that assumed there would be no problem with submitting incomplete addresses. Did you read 5 U.S.C. ยง 552(a)(3)(A):

  (3) 
    (A) Except with respect to the records made available under
        paragraphs (1) and (2) of this subsection, and except as provided 
        in subparagraph (E), each agency, upon any request for records which  
        (i)  reasonably describes such records and 
        (ii) is made in accordance with published rules stating the time, 
             place, fees (if any), and procedures to be followed, shall make 
             the records promptly available to any person. [1]
Or maybe you can point me to where it says that NSA is not allowed to specify the procedures for filing? It seems that NSA is not alone when it comes to requiring a complete address.[2]

You seem like an intelligent person who is genuinely interested in government. You may enjoy reading the DOJ's procedural requirements for foia[3]. It is an interesting exploration of all of the legal subtleties of FOIA.

I am still interested in hearing what behavior would constitute recognition that this is a "protest"?

[1] http://www.law.cornell.edu/uscode/text/5/552

[2] http://www.justice.gov/oip/foia-guide13/procedural-requireme...

[3] https://www.google.com/search?q=foia+%22complete+address%22+...

Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @05:41PM (#5921198)
I'm not "assuming" anything. I simply print and mail documents. I actually can't do more to review the forms, because it would be crossing the line into giving legal advice. If the form looked like it was filled out, I mailed it.
Re:NSA: Please Stop Mailing Us FOIA Requests by jack-r-abbit on Friday June 21, 2013 @06:27PM (#5921411)
Actually... you can do more. You have a web form. Process the results with some error checking. I'm pretty sure Google (maybe someone else) has an API that lets you pass them an address and they will validate it. So you could pretty easily throw an error for forms that do not have a complete address. That is not legal advice... that is "Form Processing 101".

Having said that, I think it is rather comical you are using old school snail mail to request the NSA to provide people with their digital records. Plus I'm sure the paper form is a bit more work for someone to process. I like it. I'm all about using inconvenience as a middle finger.

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @05:49PM (#5921242)
I'm sorry but rejecting form submissions that are imcomplete is not "giving legal advice."

Don't forget; I am still interested in hearing what behavior would constitute recognition that this is a "protest"?

Re:NSA: Please Stop Mailing Us FOIA Requests by intopieces on Friday June 21, 2013 @04:14PM (#5920710)
"The civil servant that emailed you was doing what her employer told her to do so that she could continue to bring a paycheck home."

So she was just following orders, huh?

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @04:32PM (#5920805)
Do you have a problem with her actions?
Re:NSA: Please Stop Mailing Us FOIA Requests by moneta on Friday June 21, 2013 @03:51PM (#5920555)
The post will deliver with a wrong city & state if you have a valid zip code. :)
Re:NSA: Please Stop Mailing Us FOIA Requests by pwenzel on Friday June 21, 2013 @04:13PM (#5920704)
Does it bother anyone else that the online FOIA Request form [1] is not protected by SSL?

Edit: I attempted to submit a request via the online form, but it responded "An error occurred while processing your request." This makes the paper request seem much more reasonable now.

[1] http://www.nsa.gov/public_info/foia/submit_foia_request/foia...

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @03:42PM (#5920480)
As far as I am concerned that email is the work product of a dedicated civil servant. I wish more companies I interact with would do something like google my name in order to learn about my needs and then email me advice on how to better utilize their service.
Re:NSA: Please Stop Mailing Us FOIA Requests by surrealize on Friday June 21, 2013 @03:25PM (#5920370)
Protesting can be great. But if a protest only affects low-level paper handlers with no decision making power, then what are you really accomplishing?
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:26PM (#5920379)
I am quite sure that the fact that they are getting so many requests will travel up higher than the paper handlers. :)
Re:NSA: Please Stop Mailing Us FOIA Requests by surrealize on Friday June 21, 2013 @03:28PM (#5920392)
I hope so. Thinking about it some more: I suppose they don't provide an efficient online form for motions to quash, do they?
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:29PM (#5920401)
Nope ;)
Re:NSA: Please Stop Mailing Us FOIA Requests by ejdyksen on Friday June 21, 2013 @03:46PM (#5920518)
What makes you so sure?
Re:NSA: Please Stop Mailing Us FOIA Requests by cinquemb on Friday June 21, 2013 @03:54PM (#5920573)
Well doing nothing is one way to be sure that it won't travel up to the higher ups.
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:52PM (#5920557)
ESP
Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @03:45PM (#5920511)
So they can augment their budget estimates for next year's FOIA compliance program?
Re:NSA: Please Stop Mailing Us FOIA Requests by gasull on Friday June 21, 2013 @04:21PM (#5920747)
Is doing nothing better?
Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @05:53PM (#5921257)
Respectfully, what is this accomplishing?
Re:NSA: Please Stop Mailing Us FOIA Requests by gasull on Friday June 21, 2013 @06:37PM (#5921474)
It makes it more expensive to run this Stasi-like surveillance program.

You can use your argument to anything. E.g. what is your previous comment accomplishing?

Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @07:07PM (#5921612)
My previous comment was describing my best guess to what information is run up the flagpole and to what end. These people think that PRISM stops terrorists you think a couple extra hundred dollars is going to convince them its not worth the effort.

I do not mean to be critical of the poster, any involvement is better than none. However I do not think the best path forward is acting as if something is being done when it is not is not.

I think that someone who can build a website like this could make a much more useful one. Instead of preaching to the choir preach to the unconverted (Elected Officials, Mom, Dad, Grocery Clerk). Let people submit address/zip and then return a phone script and the name/numbers of your senators and your representative. Or populate a pdf file with all the information so that someone can put it in an envelope, copy the address given and add a stamp

Re:NSA: Please Stop Mailing Us FOIA Requests by diminoten on Friday June 21, 2013 @03:39PM (#5920464)
What's the actual protest? That the paper FOIA requests don't include the required information to honor said request, allowing the NSA to throw out the requests entirely without having to spend time fulfilling them?

Sounds more like the ~~company~~ guy is trying to cover for ~~its~~ his fuckup filling out the forms. It's a much more effective protest to actually make the NSA follow through with the requests.

Edit: Also, from http://www.mynsarecords.com/contact/

    To reach Jon, please e-mail: jcorbett [at] fourtentech.com
Yes, how did they get your email, indeed. Probably some kind of spy technology.

This man is an idiot, please don't fill up HN with this drivel.

Re:NSA: Please Stop Mailing Us FOIA Requests by agwa on Friday June 21, 2013 @04:01PM (#5920632)
> This man is an idiot, please don't fill up HN with this drivel.

This personal insult is uncalled for. It's easy to sit around and complain about what the government is doing, but this man has actually gone out and done something - setting up infrastructure to make it easier for the average person to submit these requests, he is spreading the word, etc. He has also done great work protesting the TSA.

Re:NSA: Please Stop Mailing Us FOIA Requests by tzs on Friday June 21, 2013 @06:44PM (#5921516)
> It's easy to sit around and complain about what the government is doing, but this man has actually gone out and done something - setting up infrastructure to make it easier for the average person to submit these requests

His infrastructure does not make it easier to submit these requests. It is harder to submit them with his stuff than to use the NSA's own form:

http://www.nsa.gov/public_info/foia/submit_foia_request/foia...

Re:NSA: Please Stop Mailing Us FOIA Requests by diminoten on Friday June 21, 2013 @04:14PM (#5920709)
He muddies the water, and increases the signal/noise ratio.

Idiot may have been harsh as a judgement of character, but this post is idiotic.

Re:NSA: Please Stop Mailing Us FOIA Requests by saraid216 on Friday June 21, 2013 @04:15PM (#5920714)
The linked post is not "great work". It's ignorance piled on indignation.
Re:NSA: Please Stop Mailing Us FOIA Requests by cg410 on Friday June 21, 2013 @04:22PM (#5920752)
Piled on your mom!
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:48PM (#5920535)
- I am "the company guy" / "idiot"

- Forms were generated via script, so no "fucking up filling out forms" (by me, anyway)

- A few people entered incomplete addresses, but I sent them anyway because I thought the address was sufficient to reach them (for example, missing city but valid ZIP)

- 95% of the forms I sent had full, valid addresses

- The NSA wasn't provided with my Web site, so in order to get the e-mail, they had to stalk that down first

Re:NSA: Please Stop Mailing Us FOIA Requests by diminoten on Friday June 21, 2013 @03:54PM (#5920580)
I Googled the address you list on your website. Your name comes up. Googling your name reveals your blog.

Your blog links to the mynsarecords website.

Took me 2 minutes.

Edit: I'm not as quick as pavs though, it only took him 30s:

    https://news.ycombinator.com/item?id=5920564
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:49PM (#5920543)
Also, people who submitted obviously invalid addresses were contacted by e-mail and allowed to re-submit. Pretty stupid, right? ;)
Re:NSA: Please Stop Mailing Us FOIA Requests by diminoten on Friday June 21, 2013 @03:55PM (#5920586)
It just explains the part of the NSA's letter to you where you pretended like they lied or were being misleading.

Turns out, you were being misleading, not them.

Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @05:46PM (#5921222)
What are you smoking? Go back through my comments and point to one where I suggested that the NSA's e-mail to me was a lie. At most, I suggested it was an exaggeration since they said "many" of the requests had invalid addresses, while I contend that it was less than 5%.
Re:NSA: Please Stop Mailing Us FOIA Requests by DanBC on Friday June 21, 2013 @03:48PM (#5920537)
> It seems that the NSA does not quite get that this is a protest

I don't get it. What's it achieving?

> Imagine the NSA ending up with a desk full of a million records requests, and what a statement that would make, even if they refuse to process every one of them.

Well, they've got at least 500 so far. Only nine hundred and ninety nine thousand to go.

I wonder how many of those 500 have any records with NSA?

Re:NSA: Please Stop Mailing Us FOIA Requests by unreal37 on Friday June 21, 2013 @03:53PM (#5920566)
500.

The NSA is capturing all internet and telephone traffic for every individual on this planet with a phone or email account.

But perhaps they don't index it by person name, and so 500 becomes 0 because of that.

Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:54PM (#5920582)
We include the phone number for them so they can look it up :)
Re:NSA: Please Stop Mailing Us FOIA Requests by LaurelCrowned on Friday June 21, 2013 @04:41PM (#5920859)
Still don't see the point. You're not going to find anything like phone transcripts or what tags might be applied to your person. I'm guessing 99% of the requests will be sent back with "we don't have a folder specifically for you". Because there isn't one...specifically. We're probably all in their database as some random character string, only actually linked to our identity if needed. Unless they have an actual investigation on anyone requesting information, I doubt anyone's going to get anything more that a boilerplate response.

Also, the site sending out mail that will just be thrown out because it's not correctly filled out is a complete waste. I just don't see what the goal of this is. Just to spam snail mail? If the goal is to just clog up their office and be a general nuisance as a protest of some sort...at least the forms would not be sent if they don't have all mailing information. Otherwise it looks like really childish trolling. To me that is. You providing a phone number does nothing.

Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @05:44PM (#5921207)
In order for a record to be releasable under FOIA, it need not be in a file attached to your name. If I ask the NSA for every document that has the word "purple" in it, they are required to provide that document or claim a valid statutory exemption. Likewise, if I ask them for any record that contains 8005551212, they are required to provide it regardless of the labeling on its container.
Re:NSA: Please Stop Mailing Us FOIA Requests by dfc on Friday June 21, 2013 @06:16PM (#5921348)
It is now clear that you have not done any research about what constitutes a valid FOIA request. If you would like to do some research the DOJ Procedures guide that I have previously recommended is extremely detailed and thorough. I was serious when I said you might enjoy reading it if you are interested in FOIA. Please note, I have only included footnotes 107 and 108 because they seem to be the most relevant to this comment.

  Courts have recognized that the legislative history of the 1974 FOIA
  amendments indicates that a description of a requested record is
  sufficient if it enables a professional agency employee familiar with
  the subject area to locate the record with a "reasonable amount of
  effort."[105] Courts have also found that requests that are so broad and
  sweeping that they lack specificity are not reasonably described.[106]

  Courts have explained that "[t]he rationale for this rule is that
  FOIA was not intended to reduce government agencies to full-time
  investigators on behalf of requesters,"[107] or to allow requesters
  to conduct "fishing expeditions" through agencyfiles.108 Courts have
  recognized that an agency's FOIA staff is neither required to have
  "clairvoyant capabilities" to discern the requester's needs,[109] nor
  must they spend "countless numbers of personnel hours seeking needles in
  bureaucratic haystacks."[110]
  
  [107] Assassination Archives & Research Ctr. v. CIA, 720 F. Supp. 217,
  219 (D.D.C. 1989), aff'd in pertinent part, No. 89-5414, 1990 WL
  123924 (D.C. Cir. Aug. 13, 1990) (per curiam); accord Nurse v. Sec'y
  of the Air Force, 231 F. Supp. 2d 323, 329 (D.D.C. 2002) (quoting
  Assassination Archives & Research Ctr., 720 F. Supp. at 219); see,
  e.g., Bloeser v. DOJ, 811 F. Supp. 2d 316, 321 (D.D.C. 2011) (reasoning
  that "[b]ecause 'FOIA' was not intended to reduce government agencies
  to full-time investigators on behalf of requesters, . . . [t]o the
  extent that plaintiff can identify documents which he believes exist in
  a particular office within [DOJ], such identifying information should
  have been included as part of his original FOIA request"); Satterlee
  v. IRS, No. 05-3181, 2006 WL 3160963, at *3 (W.D. Mo. Oct. 30, 2006)
  (finding that request was improper where it would require agency to
  "conduct legal research" and answer questions "disguised as . . . FOIA
  request"); Frank v. DOJ, 941 F. Supp. 4, 5 (D.D.C. 1996) (stating that
  agency is not required to "dig out all the information that might
  exist, in whatever form or place it might be found, and to create
  a document that answers plaintiff's questions"); Lamb v. IRS, 871
  F. Supp. 301, 304 (E.D. Mich. 1994) (finding requests outside scope of
  FOIA when they require legal research, are unspecific, or seek answers
  to interrogatories); Trenerry v. Dep't of the Treasury, No. 92-5053,
  1993 WL 26813, at *3 (10th Cir. Feb. 5, 1993) (holding that agency not
  required to provide personal services such as legal research).
  
  
  [108] Immanuel v. Sec'y of the Treasury, No. 94-884, 1995 WL 464141,
  at *1 (D. Md. Apr. 4, 1995), aff'd, 81 F.3d 150 (4th Cir. 1996)
  (unpublished table decision); see also Dale v. IRS, 238 F. Supp. 2d 99,
  104-05 (D.D.C. 2002) (concluding that request seeking "'any and all
  documents . . . that refer or relate in any way'" to requester failed to
  reasonably describe records sought and "amounted to an all-encompassing
  fishing expedition of files at [agency's] offices across the country, at
  taxpayer expense").
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:52PM (#5920556)
> I wonder how many of those 500 have any records with NSA?

Probably all of them, since the NSA collects phone records on every American.

Re:NSA: Please Stop Mailing Us FOIA Requests by cg410 on Friday June 21, 2013 @03:20PM (#5920337)
They found your e-mail without you giving it to them? Sounds like NSA.
Re:NSA: Please Stop Mailing Us FOIA Requests by cschmidt on Friday June 21, 2013 @03:35PM (#5920440)
Pretty spooky. Or maybe the woman just went to his website, and looked at the contact page.
Re:NSA: Please Stop Mailing Us FOIA Requests by tsaoutourpants on Friday June 21, 2013 @03:40PM (#5920466)
Yes but... I didn't give them my Web site, either. All they had was my name as the return address.
Re:NSA: Please Stop Mailing Us FOIA Requests by pavs on Friday June 21, 2013 @03:53PM (#5920564)
took me 30 seconds...

If I have your name, which is: Jonathan Corbett.

I google searched "Jonathan Corbett NSA"

The first link is your twitter account: https://twitter.com/tsaoutourpants

Which mentions: http://www.mynsarecords.com/

I do a whois on the site: (public information)

      Corbett, Jonathan  [email protected]
      FourTen Technologies, Inc.
      407 Lincoln Road
      11th Floor
      Miami Beach, Florida 33139
      United States
      8774100410
I am assuming he emailed you either there or got your email from your website which has it in the contact section...

Not very difficult really.

Re:NSA: Please Stop Mailing Us FOIA Requests by moneta on Friday June 21, 2013 @03:53PM (#5920560)
Well at least someone at the NSA doesn't need http://lmgtfy.com/ lol
Re:NSA: Please Stop Mailing Us FOIA Requests by quackerhacker on Friday June 21, 2013 @03:56PM (#5920599)
Was your return address, the same as the one posted on your site? If so, just googling that, the first result is your site, which shows your email.
Re:NSA: Please Stop Mailing Us FOIA Requests by MysticFear on Friday June 21, 2013 @03:36PM (#5920444)
who.godaddy.com
Re:NSA: Please Stop Mailing Us FOIA Requests by ianhawes on Friday June 21, 2013 @04:37PM (#5920836)
Read receipt requested? That seems unnecessary given its the NSA.
Re:NSA: Please Stop Mailing Us FOIA Requests by spacecadet on Friday June 21, 2013 @04:05PM (#5920658)
So the NSA's secret spy tool is Google search?
Re:NSA: Please Stop Mailing Us FOIA Requests by revelation on Friday June 21, 2013 @04:06PM (#5920667)
You would think the NSA would sign outgoing communication.

Guess not.