Former National Security Agency contractor Edward Snowden said today at Austin's South by Southwest festival that two NSA directors harmed the United States' cyber-security more than any other individual. Keith Alexander and Michael Hayden – the current and former NSA directors, respectively – "elevated offensive operations over defense of our communications," according to Snowden. In so doing, they weakened encryption standards that the entire Internet relies on, creating a "big back door, world wide that anyone can walk into." Added Snowden, "America has more to lose when every [cyber-security] attack succeeds."
Snowden is currently living in Russia, which granted him temporary asylum after he was charged with espionage for leaking classified documents about the NSA's surveillance programs to the press. The former contractor appeared at SXSW via Google Hangout, routed through several proxies for security reasons. "The irony that we're using Google Hangout to talk with Ed Snowden is not lost on me," said co-panelist Christopher Soghoian, the ACLU's principal technologist. Google is regularly criticized by cryptographers for not taking the necessary steps to protect its users' private information.
Much of the conversation at Snowden's panel revolved around how to make encryption easier to use for ordinary users, as well as for journalists, activists and others who may need to communicate securely. "So many of the services we're relying on are not secure by default…We need to lock things down," said Soghoian, adding that developers need to make products that are "secure out of the box."
The goal for civil liberties advocates, Soghoian said, is to use cryptography to make bulk collection prohibitively expensive for the government, a goal often touted by other security experts. The theory behind this thinking is that the NSA is powerful enough to hack individual machines if they really want to get the data contained therein – but that hacking encrypted communication on a bulk level would cost too much and require too much computing power.
The address comes days after Snowden told members of the European Parliament that he "reported these clearly problematic programs to more than 10 distinct officials, none of whom took any action to address them." A presidential policy directive issued by President Obama in 2012 to protect whistleblowers doesn't cover government contractors, and therefore likely wouldn't have protected Snowden.
British computer scientist Tim Berners-Lee, the creator of the World Wide Web, had the privilege of asking Snowden the first audience question. He began by thanking Snowden for his disclosures, saying that they were "profoundly in the public interest." Berners-Lee asked how Snowden how he would design the Internet to protect individuals from surveillance if he could do so from scratch.
Snowden said that the existing U.S. system of constitutional checks and balances could work if those tasked with oversight were doing their jobs properly, and took the opportunity to criticize Congress and the courts, who he said had abandoned their roles. "The problem is when overseers aren't interested in oversight," Snowden said. Ben Wizner, who serves as an attorney for Snowden and also hosted the panel, said Snowden's actions are the answer for what to do when Congress fails to act.
The U.S. government, meanwhile, is desperate to stop future would-be Snowdens before they leak. The Associated Press reported on Monday that "U.S. intelligence officials are planning a sweeping system of electronic monitoring that would tap into government, financial and other databases to scan the behavior of many of the 5 million federal employees with secret clearances." Officials justified the program by citing national security concerns, but critics warn that such a widespread system could have a chilling effect on whistleblowers and those who leak to the press.
McClatchy reported on a similar Obama initiative in June, called the Insider Threat Program.
Asked if his sacrifice was worth it and whether he'd make the same choices again, Snowden said that he would. "I took an oath to support and defend the constitution and what I saw was the constitution being violated on a massive scale," he said at the end of the panel.
"Thank you all very much," Snowden finished with a sheepish smile. "Thank you, Austin!"