NSA using Google cookies, app location data to track targets

Summary:A newly-released NSA document leaked by Edward Snowden shows that the agency is using advertising cookie and location data to track individuals already under suspicion.

A report in the Washington Post cites new NSA documents leaked by Edward Snowden tells of how the agency, in collaboration with the British equivalent the GCHQ, uses commercial web site cookies to track suspects.

The NSA expresses a particular interest in Google PREFIDs, which the documents indicate they use for "remote exploitation." See the image below.

NSA.cookie.theft
Excerpts from an April 2013 National Security Agency presentation detailing signal surveillance techniques and successes. Source: Washington Post

Cookies like these cannot be used individually to identify anyone. They do not contain any specifically identifying information, but do have unique IDs which can be used to track a user (or, more specifically, a browser) from location to location, and coordinated with other data. The agency can also tell from the cookies what sites the user has visited. This can assist in determining methods with which to compromise the computer.

The documents indicate that the NSA uses the data only to track suspects they have already identified through other means. They do not appear to collect cookie data more generally.

The documents do not say how the NSA obtains the cookie data from Google or other sources, but this data is discoverable under FISA court orders.

The documents also indicate that the agency, in a program named HAPPYFOOT, is also using location tracking information gathered by smartphone apps. Location data is often tied to advertising information collected by apps because advertisements associated with location data are more valuable than those without.

Topics: Security, Government : UK, Government : US, Privacy

About

Larry Seltzer has long been a recognized expert in technology, with a focus on mobile technology and security in recent years. He was most recently Editorial Director of BYTE, Dark Reading and Network Computing at UBM Tech. Prior to that he spent over a decade consulting and writing on technology subjects, primarily in the area of sec... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.