The Signpost

In focus

WMF to NSA: "stop spying on Wikipedia users"

A slide leaked by Edward Snowden detailing intelligence interest in Wikipedia.
"This dedicated global community of users is united by their passion for knowledge, their commitment to inquiry, and their dedication to the privacy and expression that makes Wikipedia possible. We file today on their behalf."

In an effort to protect and maintain the privacy of Wikipedia's thousands of editors, the Wikimedia Foundation (WMF) has filed a lawsuit against the United States' National Security Agency (NSA), Department of Justice (DOJ), and the Attorney General. This action takes aim at the so-called "upstream surveillance" practiced by the NSA, whose broad scope can include the communications between and edits made by Wikipedia users. The WMF has been joined by eight other organizations, including Amnesty International USA, Global Fund for Women, and Human Rights Watch. They are all being represented by the American Civil Liberties Union (ACLU), which is supplying much of the lawsuit's financial backing.

The move comes as the latest chapter in the WMF's long-standing opposition to government intrusion on the Internet, including the unprecedented one-day SOPA blackout in 2012 and Jimmy Wales' high-profile Wikimania speech in 2013.

The lawsuit states that "seizing and searching Wikimedia's communications is akin to seizing and searching the patron records of the largest library in the world—except that Wikimedia's communications provide a more comprehensive and detailed picture of its users' interests than any previous set of library records ever could have offered" (clause 67). It asserts that confidential communications among Wikipedia volunteers and staffers are being intercepted, and that "there is a substantial likelihood that the NSA retains, reads, and disseminates Wikimedia's international communications because Wikimedia is communicating with or about persons the government has targeted" (clause 71).

Edward Snowden, from the recently released documentary by Laura Poitras

The upstream surveillance targeted by the WMF includes four different processes, laid out in clause 43 of the lawsuit: copying, filtering, content review, and retention and use. As alleged by the WMF, this means, respectively, that

  1. The NSA is copying nearly all Internet traffic between the US and foreign countries, in addition to its substantial intra-US monitoring;
  2. Automatic filtering and discarding of purely domestic US communication, although much of it is actually kept for various reasons;
  3. A content review program detects instances of an unknown number of key words ("selectors") related to NSA foreign intelligence targets, a broad category that includes far beyond suspected agents or terrorists;
  4. The remaining information is retained and used; the NSA saves any communications it believes are relevant to its mission, as well as any information that was bundled with it.

Moreover, the lawsuit states that there are few restrictions on the use of the information from (4):

The NSA's legal justification for this is in the Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2008, 50 U.S.C. § 1881a.

The WMF's standing rests in the Edward Snowden leaks. On a PowerPoint slide detailing the NSA's interest in HTTP, Wikipedia is listed; it also remarks that "nearly everything a typical user does on the Internet uses HTTP." This was a major factor in hurrying the deployment of HTTP Secure (https) by default to all Wikimedia projects. Beyond this solitary slide, the lawsuit declares that Wikimedia communications "are intercepted, copied, and reviewed" by the NSA. Katherine Maher, the WMF's chief communications officer, wrote in an email to the Signpost that this line was "based on what we know about how the NSA has interpreted FAA and the breadth of the surveillance practices the NSA implemented under the authority of the FAA. The slide helped confirm that conclusion. We will present further information as the case moves forward."

The NSA's headquarters in Fort Meade. Due to its massive amounts of data processing, the NSA is the largest electricity consumer in Maryland.
The UK's Menwith Hill facility, which has the largest NSA presence in the country.

The WMF claims that such intelligence gathering is harmful to their mission, such as in countering systemic bias—the tilt of focus when, for instance, a broadly white, educated, middle-to-upper class male group writes an encyclopedia. In the Foundation's view, non-US editors could justifiably fear that their Wikimedia-related contributions, emails, and even page views will be intercepted by the NSA and shared with their own governments. In a related New York Times op-ed, Wikipedia co-founder Jimmy Wales and WMF executive director Lila Tretikov contend that given the long-standing links between American and Egyptian intelligence, a hypothetical Egyptian editor would "surely be less likely to add her knowledge or have that conversation, for fear of reprisal." Maher echoed these points, writing that these "dragnet mass surveillance practices create a chilling effect on free expression and association."

The lawsuit rhetorically echoes the idea that the NSA "undermines" the plaintiffs:

In the New York Times op-ed, titled "Stop Spying on Wikipedia Users," Wales and Tretikov assert that Wikimedia editors should be free to edit and email without fear of government oversight: "Privacy is an essential right. It makes freedom of expression possible, and sustains freedom of inquiry and association. It empowers us to read, write and communicate in confidence, without fear of persecution. Knowledge flourishes where privacy is protected."

In a similar vein, the WMF published a blog post emphasizing privacy as "the bedrock of individual freedom" and "a universal right that sustains the freedoms of expression and association." The post decried the NSA's activities, which they said "rightfully alarmed" the Wikipedia community when disclosed (see previous Signpost coverage). At the conclusion of the post, the WMF legal team answered many frequently asked questions, which were reproduced on Meta for convenience. Of note, however, is that while the WMF correctly identifies that individuals can register anonymous accounts—"we don't require real names, email addresses, or any other personally identifying information, and we never sell your data"—they do not mention that those who edit without one are publicly identified, in on-wiki records, with their individual IP address.

The ACLU is representing the plaintiffs pro bono, so no Wikimedia donor funds will be devoted to the lawsuit beyond those already budgeted for the legal team and regular staff time. This is significant, given that a similarly scoped case, Clapper v. Amnesty, took years to wind its way through the US legal system before it was dismissed by the Supreme Court in 2013. We asked Maher if the WMF was prepared to fight a case that could last just as long:

"The Foundation is prepared and committed for the duration."

Andrew Lih and Tony1 assisted in editing this story.

















Wikipedia:Wikipedia Signpost/2015-03-11/In_focus