I.
MY CONCLUSION HAS NOT CHANGED......................................................1
II.
INTRODUCTION.................................................................................................1
III.
DR. SCHULZRINNE’S WIKIMEDIA-AVOIDANCE THEORY
CONFLICTS WITH WHAT IS PUBLICLY KNOWN ABOUT
UPSTREAM COLLECTION...............................................................................5
A. The four key foundations of my conclusion in my original declaration............5
1. Foundation 1: To conduct upstream collection of international
public Internet communications traversing a circuit, the NSA
must be copying, reassembling, and reviewing transactions on
that circuit..............................................................................................5
2. Foundation 2: Wikimedia communications are transported on
all international circuits originating or terminating in the
United States..........................................................................................6
3. Foundation 3: The NSA conducts upstream collection on at
least one international Internet link........................................................6
4. Foundation 4: The NSA is copying, reassembling, and
reviewing Wikimedia communications on the international
Internet links it is monitoring.................................................................9
B. Why the NSA is copying, reassembling, and reviewing all
communications on the international Internet links it is monitoring...............10
1. The NSA has acknowledged that, on international Internet
links it is monitoring, it does not apply IP filters.................................10
2. The PCLOB has explained that upstream collection has been
implemented in a technological manner designed to
“comprehensively” acquire the communications of the NSA’s
targets...................................................................................................13
3. Other technical and practical necessities make clear that the
NSA is copying, reassembling, and reviewing Wikimedia’s
communications...................................................................................17
IV.
DR. SCHULZRINNE’S WIKIMEDIA-AVOIDANCE THEORY
ASSUMES THE IMPLAUSIBLE USE OF WHITELIST AND
BLACKLIST FILTERS......................................................................................19
A. Whitelist and blacklist filters...........................................................................19
1. Filters on international Internet circuits...............................................20
2. Whitelist filters are incompatible with the government’s public
descriptions of the upstream collection program.................................20
a. Whitelist filters are almost useless in the upstream
collection program because using them would require
that the NSA know unknowable information..........................21
b. Dr. Schulzrinne’s proposed whitelisting is based on
other assumptions or simplifications that are also
inconsistent with what is known about the upstream
collection program...................................................................23
i. Number of NSA targets......................................................24
ii. Impossible targeting...........................................................25
iii. Whitelist complexity and dynamism...................................27
c. Whitelist filters assume that the NSA wants to avoid
almost all of the world’s communications...............................28
3. Blacklist filters are incompatible with the government’s public
descriptions of the upstream collection program.................................29
a. Improbable non-targeting.........................................................29
b. Blacklist filters would not guarantee that the NSA
would avoid copying, reassembling, and reviewing
Wikimedia communications....................................................31
4. Still copying packets............................................................................33
5. Probing for blind spots.........................................................................33
B. “About” communications.................................................................................35
V.
DR. SCHULZRINNE’S WIKIMEDIA-AVOIDANCE THEORY IS
IMPLAUSIBLE FOR NUMEROUS OTHER TECHNICAL AND
PRACTICAL REASONS....................................................................................37
A. Copy-then-filter vs. in-line filter......................................................................37
1. Fiber-optic splitter................................................................................38
2. Configuring the ISP router to mirror communications........................40
3. All packets are copied..........................................................................41
4. Configuring the ISP router to filter before mirroring..........................41
B. Collecting “web activity”.................................................................................44
C. Collecting web communications......................................................................45
D. Collecting encrypted communications.............................................................46
E. GCHQ surveillance..........................................................................................48
F. ISP-operated copy device................................................................................52
G. EINSTEIN........................................................................................................52
VI.
SUMMARY..........................................................................................................53
