Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated:
1
00:00:57,125 --> 00:01:01,541
[beeps] [voicemail] Tuesday, 9:47 a.m.
2
00:01:01,541 --> 00:01:05,083
[female] Hi, baby. I'm-- baby, you have to listen
3
00:01:01,541 --> 00:01:05,083
to me carefully.
4
00:01:05,083 --> 00:01:07,666
I'm on a plane that's been hijacked.
5
00:01:05,083 --> 00:01:07,666
I'm on the plane.
6
00:01:07,666 --> 00:01:10,333
I'm calling from the plane. I want to tell you I love you.
7
00:01:10,333 --> 00:01:13,791
Please tell my children that I love them very much.
8
00:01:13,791 --> 00:01:16,166
And I'm so sorry, babe.
9
00:01:16,166 --> 00:01:18,791
I don't know what to say. There's three guys.
10
00:01:18,791 --> 00:01:21,333
They've hijacked the plane. I'm trying to be calm.
11
00:01:21,333 --> 00:01:24,333
We're turned around, and I've heard that
12
00:01:21,333 --> 00:01:24,333
there's planes
13
00:01:24,333 --> 00:01:27,250
that have been flown into the world trade center.
14
00:01:27,250 --> 00:01:30,791
I hope to be able to see your face again, baby.
15
00:01:30,791 --> 00:01:33,166
I love you. Good-bye.
16
00:01:40,333 --> 00:01:42,625
Voicemail: End of message.
17
00:01:47,166 --> 00:01:49,916
Well, the images I saw, the ones that, of course, uh,
18
00:01:49,916 --> 00:01:55,791
affected me the most were the people diving off the building
19
00:01:49,916 --> 00:01:55,791
when it was burning.
20
00:01:55,791 --> 00:01:59,291
You know, to be put in such a desperate state, you know,
21
00:01:59,291 --> 00:02:02,250
that shows you the human--
22
00:02:02,250 --> 00:02:06,875
human reaction to those kinds of conditions.
23
00:02:06,875 --> 00:02:10,208
It just, uh, it was just revolting.
24
00:02:12,875 --> 00:02:17,000
And disgusting that we allowed it, basically, to happen.
25
00:02:22,125 --> 00:02:24,125
ThinThread was a program
26
00:02:24,125 --> 00:02:27,458
that absolutely would have prevented 9/11.
27
00:02:30,416 --> 00:02:32,750
So it all went back to that program.
28
00:03:44,125 --> 00:03:46,916
[Radack] The first time
29
00:03:44,125 --> 00:03:46,916
I met Bill Binney,
30
00:03:46,916 --> 00:03:50,166
the first thing he said to me was,
31
00:03:50,166 --> 00:03:56,000
"I need you to know that I would never deliberately
32
00:03:50,166 --> 00:03:56,000
commit suicide."
33
00:04:00,375 --> 00:04:03,666
I thought he was being a little overdramatic,
34
00:04:03,666 --> 00:04:06,958
but then when I started to hear what he had to say
35
00:04:06,958 --> 00:04:09,166
about what our country was doing,
36
00:04:09,166 --> 00:04:13,750
I worried about his safety, too.
37
00:04:13,750 --> 00:04:17,000
[Binney] I wanted to make one thing
38
00:04:13,750 --> 00:04:17,000
very certain up front,
39
00:04:17,000 --> 00:04:21,541
that she could be assured that I would not commit suicide.
40
00:04:21,541 --> 00:04:24,625
And I said that because I knew that some of the people involved
41
00:04:21,541 --> 00:04:24,625
in this activity,
42
00:04:24,625 --> 00:04:27,041
and it was a pretty serious thing
43
00:04:27,041 --> 00:04:29,041
because people at the highest levels
44
00:04:29,041 --> 00:04:31,041
of the US government were involved
45
00:04:31,041 --> 00:04:33,958
in all departments.
46
00:04:33,958 --> 00:04:36,458
So I wanted to make sure that she understood
47
00:04:36,458 --> 00:04:39,750
that if something happened to me, it was not suicide
48
00:04:39,750 --> 00:04:41,875
because I was going to be in this with her
49
00:04:41,875 --> 00:04:44,125
and everybody else to the end.
50
00:05:31,458 --> 00:05:34,541
I grew up in central western Pennsylvania.
51
00:05:34,541 --> 00:05:37,125
It was basically the wilderness of Pennsylvania.
52
00:05:37,125 --> 00:05:40,416
It was out in the hills, in the Appalachia hills
53
00:05:40,416 --> 00:05:42,833
just before the mountains.
54
00:06:38,166 --> 00:06:40,416
This is my father's grave.
55
00:06:43,833 --> 00:06:45,875
At one time, I asked him, I said, uh,
56
00:06:45,875 --> 00:06:50,541
"in your service in war time, how many men did you kill?"
57
00:06:50,541 --> 00:06:53,416
And he said, "maybe one."
58
00:06:53,416 --> 00:06:55,125
So, but that's all he said.
59
00:06:55,125 --> 00:06:57,458
He didn't really talk about it.
60
00:07:01,166 --> 00:07:04,833
I think that was pretty typical of World War II veterans.
61
00:07:04,833 --> 00:07:07,250
They did what they had to do and they didn't really
62
00:07:07,250 --> 00:07:11,875
think that that was anything different than anyone else did
63
00:07:07,250 --> 00:07:11,875
in World War II.
64
00:07:13,875 --> 00:07:17,000
Nobody thought they were heroes. They just thought they did
65
00:07:13,875 --> 00:07:17,000
their duty.
66
00:07:19,166 --> 00:07:22,166
One of the worst things about war is those who start it
67
00:07:22,166 --> 00:07:25,666
force others to be as vicious as they are to stop it.
68
00:07:25,666 --> 00:07:27,500
That's what I'm sure he was feeling.
69
00:07:27,500 --> 00:07:29,500
He just didn't want to talk about having to do
70
00:07:29,500 --> 00:07:31,666
what he had to do when in the war.
71
00:07:34,291 --> 00:07:38,125
One of the main reasons we get into war is by mistakes
72
00:07:34,291 --> 00:07:38,125
by leadership
73
00:07:38,125 --> 00:07:40,083
because they're informed incorrectly
74
00:07:40,083 --> 00:07:43,083
or they're uniformed about events, you know, totally.
75
00:07:43,083 --> 00:07:46,458
So the principle I thought that I was working under
76
00:07:46,458 --> 00:07:48,125
was to make sure that the information
77
00:07:48,125 --> 00:07:51,208
that I could arrive at through the work I did
78
00:07:51,208 --> 00:07:55,083
was informative to leadership so they didn't make mistakes.
79
00:08:17,333 --> 00:08:19,916
[woman] Watch out, watch out.
80
00:08:27,083 --> 00:08:30,250
Recapping now for you once again if you've just joined us,
81
00:08:30,250 --> 00:08:32,625
an explosion underground in the garage section
82
00:08:32,625 --> 00:08:34,958
of the World Trade Center in New York City
83
00:08:34,958 --> 00:08:38,250
has killed now three people according to the New York
84
00:08:34,958 --> 00:08:38,250
Port Authority
85
00:08:38,250 --> 00:08:40,875
and has injured at least 150 people.
86
00:08:40,875 --> 00:08:43,333
Hundreds of people as we speak are still being evacuated
87
00:08:43,333 --> 00:08:45,541
from the twin story towers of the structure
88
00:08:45,541 --> 00:08:49,833
at the southern tip of Manhattan Island.
89
00:08:49,833 --> 00:08:51,791
There was no hope whatsoever.
90
00:08:51,791 --> 00:08:53,958
Trapped on 94 floors all the way up.
91
00:08:53,958 --> 00:08:57,500
The walls just blew in and everything went blank
92
00:08:53,958 --> 00:08:57,500
after that.
93
00:08:57,500 --> 00:09:00,208
Walls collapsed, furniture's down.
94
00:09:00,208 --> 00:09:02,750
It's a mess downstairs.
95
00:09:02,750 --> 00:09:06,041
[Binney] The first attack
96
00:09:02,750 --> 00:09:06,041
on the Trade Centers in '93,
97
00:09:06,041 --> 00:09:08,500
that was the first thing that woke everybody up
98
00:09:08,500 --> 00:09:11,708
in terms of the threat of terrorism.
99
00:09:21,291 --> 00:09:23,541
They took truck bombs into the basement
100
00:09:23,541 --> 00:09:27,708
and tried to place the bombs next to the supports
101
00:09:23,541 --> 00:09:27,708
for the building
102
00:09:27,708 --> 00:09:29,875
and set them off to try to shake the building
103
00:09:29,875 --> 00:09:32,500
or break the supports so the building would fall.
104
00:09:35,250 --> 00:09:37,458
Technically, that didn't function that way,
105
00:09:37,458 --> 00:09:40,250
but it killed a lot of people,
106
00:09:40,250 --> 00:09:43,375
and CIA really did start pounding the drums
107
00:09:43,375 --> 00:09:47,666
across the entire intelligence community
108
00:09:43,375 --> 00:09:47,666
to go after the terrorism,
109
00:09:47,666 --> 00:09:50,125
and that's what we did at NSA.
110
00:10:13,291 --> 00:10:14,958
We were looking also at the same time
111
00:10:14,958 --> 00:10:17,041
with the explosion in the digital age,
112
00:10:17,041 --> 00:10:19,875
ballooning of communications in the internet and the phones,
113
00:10:19,875 --> 00:10:23,000
and the terrorists were burying themselves inside
114
00:10:23,000 --> 00:10:26,500
that ballooning communications network worldwide.
115
00:10:31,625 --> 00:10:35,000
So we had to face that as a new technical problem
116
00:10:35,000 --> 00:10:37,041
that we had to solve to figure out
117
00:10:37,041 --> 00:10:39,375
who was communicating with whom and who were the terrorists
118
00:10:39,375 --> 00:10:43,916
and try to extract that information out of that flow
119
00:10:39,375 --> 00:10:43,916
of information.
120
00:11:02,333 --> 00:11:05,208
When I first took on the duty of technical director
121
00:11:05,208 --> 00:11:08,458
of the world geopolitical and military analysis
122
00:11:05,208 --> 00:11:08,458
and reporting shop,
123
00:11:08,458 --> 00:11:13,041
I pulled together analysts from all over the agency
124
00:11:08,458 --> 00:11:13,041
around the world...
125
00:11:15,291 --> 00:11:17,541
And I said, "okay, we're going to start
126
00:11:15,291 --> 00:11:17,541
this little project here,
127
00:11:17,541 --> 00:11:21,666
and here's what we're gonna do.
128
00:11:21,666 --> 00:11:23,458
We're going to graph relationships
129
00:11:23,458 --> 00:11:26,208
of everybody in the phone network in the world.
130
00:11:30,250 --> 00:11:32,125
All we have to do is map all the relationships
131
00:11:32,125 --> 00:11:34,500
between two and a half billion phones."
132
00:11:38,625 --> 00:11:42,500
And somebody in the back says, "you can't do that."
133
00:11:42,500 --> 00:11:44,458
And I said, "why not?"
134
00:11:44,458 --> 00:11:47,500
And they said, "because all the combinations are infinite."
135
00:11:51,125 --> 00:11:54,166
So I said, "okay, think of it this way.
136
00:11:56,750 --> 00:12:01,000
At any instantaneous point in time
137
00:12:01,000 --> 00:12:04,916
the numbers of atoms in the universe are finite.
138
00:12:10,083 --> 00:12:12,125
The relationship to 2.5 billion phones
139
00:12:12,125 --> 00:12:15,458
is simply a smaller subset of that.
140
00:12:15,458 --> 00:12:17,000
That's nothing.
141
00:12:19,416 --> 00:12:21,333
Now you can get your mind around it.
142
00:12:25,958 --> 00:12:28,666
That was the whole idea of the ThinThread program.
143
00:12:37,166 --> 00:12:41,458
[Wiebe] Of all the analysts I ever knew
144
00:12:41,458 --> 00:12:45,583
in my entire career, spanning from US air force
145
00:12:45,583 --> 00:12:47,791
through my career at NSA,
146
00:12:47,791 --> 00:12:53,541
Bill was by far the most astute,
147
00:12:53,541 --> 00:12:56,625
the most capable,
148
00:12:56,625 --> 00:12:58,166
accurate.
149
00:13:00,333 --> 00:13:03,125
He used all the tools necessary,
150
00:13:03,125 --> 00:13:05,750
not only to find the story,
151
00:13:05,750 --> 00:13:08,166
but to complete it.
152
00:13:10,500 --> 00:13:16,083
Where we weren't able to actually read messages,
153
00:13:16,083 --> 00:13:18,041
they were encrypted,
154
00:13:18,041 --> 00:13:23,708
Bill found ways to leverage indicators
155
00:13:23,708 --> 00:13:27,208
that I'd never seen anyone else do.
156
00:13:27,208 --> 00:13:30,791
Bill was Mr. Externals at the NSA.
157
00:13:30,791 --> 00:13:33,875
He was the person in the agency
158
00:13:33,875 --> 00:13:36,791
who knew the most about what we now call
159
00:13:36,791 --> 00:13:38,958
in the digital age, metadata.
160
00:13:44,541 --> 00:13:47,541
If something was encrypted and you couldn't decrypt it,
161
00:13:47,541 --> 00:13:51,125
you could still get information out of the external signals,
162
00:13:51,125 --> 00:13:53,458
and that was Bill's forte.
163
00:13:58,083 --> 00:14:01,875
Bill would find ways around the encryption
164
00:14:01,875 --> 00:14:05,500
to see things that people didn't even look for...
165
00:14:08,000 --> 00:14:10,791
Able to work almost any problem,
166
00:14:10,791 --> 00:14:12,833
almost any challenge,
167
00:14:12,833 --> 00:14:14,750
and draw upon mathematics
168
00:14:14,750 --> 00:14:18,333
and other inherent analytical skills
169
00:14:18,333 --> 00:14:20,625
and the willingness to be open-minded,
170
00:14:20,625 --> 00:14:23,291
not close-minded.
171
00:14:23,291 --> 00:14:25,250
He had a good B.S. detector
172
00:14:25,250 --> 00:14:30,250
and he could tell when somebody was blowing smoke.
173
00:14:30,250 --> 00:14:35,375
And he was the agency's
174
00:14:35,375 --> 00:14:39,583
best traffic analyst, bar none.
175
00:15:07,416 --> 00:15:10,000
[Binney] In '65, I was coming out
176
00:15:07,416 --> 00:15:10,000
of school
177
00:15:10,000 --> 00:15:12,666
and the Vietnam war was cranking up.
178
00:15:17,041 --> 00:15:19,083
That was when we still had the draft,
179
00:15:19,083 --> 00:15:23,125
and so people were getting drafted out of my community.
180
00:15:24,083 --> 00:15:25,666
And since in the country,
181
00:15:25,666 --> 00:15:28,291
you're usually pretty good with a rifle,
182
00:15:28,291 --> 00:15:31,125
and if you go into the army, you end up in the front lines
183
00:15:31,125 --> 00:15:34,333
doing sweeps through the jungles in Vietnam
184
00:15:34,333 --> 00:15:36,458
and shooting people...
185
00:15:41,416 --> 00:15:45,875
I simply did not want to participate in any of that
186
00:15:41,416 --> 00:15:45,875
at all.
187
00:15:48,166 --> 00:15:51,625
I even stopped hunting because I didn't like to kill animals.
188
00:15:53,708 --> 00:15:57,375
So why would I want to get involved with Vietnam?
189
00:15:59,916 --> 00:16:03,500
I had the option to volunteer for the army to go to Europe.
190
00:16:03,500 --> 00:16:05,708
They gave me a whole battery of tests,
191
00:16:05,708 --> 00:16:09,708
and they said, "gee, you have a fairly high aptitude
192
00:16:05,708 --> 00:16:09,708
for analysis."
193
00:16:09,708 --> 00:16:11,500
So they said, "hey, you're a prime candidate
194
00:16:11,500 --> 00:16:13,541
for the army's security agency,"
195
00:16:13,541 --> 00:16:16,416
and they sent me to Turkey.
196
00:16:31,000 --> 00:16:35,541
We had just come through the Cuban Missile Crisis
197
00:16:31,000 --> 00:16:35,541
in 1962,
198
00:16:35,541 --> 00:16:37,375
which was probably the closest time
199
00:16:37,375 --> 00:16:39,500
we ever came to nuclear war,
200
00:16:39,500 --> 00:16:44,041
and that kind of sensitized everybody to the real threat.
201
00:16:44,041 --> 00:16:46,916
Turkey was looking at the southern part
202
00:16:44,041 --> 00:16:46,916
of the Soviet Union.
203
00:16:46,916 --> 00:16:50,541
They had a lot of areas where they developed
204
00:16:46,916 --> 00:16:50,541
military technology.
205
00:16:52,458 --> 00:16:56,000
I was working a rather large military data system,
206
00:16:56,000 --> 00:17:01,083
a Soviet data system, that had not been solved
207
00:16:56,000 --> 00:17:01,083
at that point.
208
00:17:03,541 --> 00:17:06,000
So they would look at things like manual Morse
209
00:17:06,000 --> 00:17:10,125
or speech broadcasts or satellite communication.
210
00:17:12,041 --> 00:17:14,541
Those kinds of things produced information
211
00:17:14,541 --> 00:17:18,583
which they called traffic.
212
00:17:18,583 --> 00:17:22,583
Some of it you would record, some of it you would either
213
00:17:18,583 --> 00:17:22,583
get directly translated
214
00:17:22,583 --> 00:17:25,625
or converted into character streams.
215
00:17:27,416 --> 00:17:29,916
Some of it would be continuously encrypted data,
216
00:17:29,916 --> 00:17:31,833
which you wouldn't be able to read,
217
00:17:31,833 --> 00:17:34,625
but you could look at durations and things like that.
218
00:17:34,625 --> 00:17:39,208
It was probably a 20th of the Russian military,
219
00:17:39,208 --> 00:17:41,375
so I was looking at a small segment of it
220
00:17:41,375 --> 00:17:43,833
trying to develop the techniques that were necessary
221
00:17:43,833 --> 00:17:46,166
to see into what they were doing.
222
00:17:53,083 --> 00:17:56,625
It was me sitting at the desk, looking at this abstract data,
223
00:17:56,625 --> 00:17:59,708
struggling to understand what it really meant.
224
00:18:11,041 --> 00:18:13,333
As I was going through there, it became clear to me
225
00:18:13,333 --> 00:18:16,416
that there were mathematical patterns involved.
226
00:18:19,958 --> 00:18:22,375
I started to see systems and relationships,
227
00:18:22,375 --> 00:18:25,375
so I started building things.
228
00:18:25,375 --> 00:18:29,041
It was allowing me then to begin to understand and interpret
229
00:18:29,041 --> 00:18:32,458
the things that we were getting in terms of communications...
230
00:18:35,291 --> 00:18:38,000
And relating that then to real world events
231
00:18:38,000 --> 00:18:40,583
and what was really happening in the field.
232
00:18:46,000 --> 00:18:49,291
When I got to that point, the whole thing started
233
00:18:46,000 --> 00:18:49,291
to fall in place
234
00:18:49,291 --> 00:18:52,208
and so then you can reconstruct the entire system,
235
00:18:52,208 --> 00:18:54,916
their entire system of command and control
236
00:18:54,916 --> 00:18:57,375
and everything they were doing.
237
00:19:08,500 --> 00:19:11,958
Everything is human behavior.
238
00:19:11,958 --> 00:19:14,666
Human behavior is extremely patterned.
239
00:19:16,000 --> 00:19:18,416
How do people operate? How do they interact?
240
00:19:18,416 --> 00:19:20,541
And how does that manifest or appear
241
00:19:20,541 --> 00:19:24,541
in this abstract set of communications
242
00:19:20,541 --> 00:19:24,541
you're looking at?
243
00:19:26,875 --> 00:19:30,541
It's a matter of getting to a point where you can
244
00:19:26,875 --> 00:19:30,541
understand the patterns
245
00:19:30,541 --> 00:19:32,833
and interpret them properly.
246
00:19:38,250 --> 00:19:40,250
When you sit there and look at a problem like that
247
00:19:40,250 --> 00:19:45,875
and you see-- you can see the pattern and the break,
248
00:19:45,875 --> 00:19:47,833
that's exhilarating when you do.
249
00:19:47,833 --> 00:19:49,666
It really is.
250
00:19:52,208 --> 00:19:56,125
Which is basically what we call metadata analysis now.
251
00:19:57,291 --> 00:19:59,541
Nobody seemed to be doing that.
252
00:20:02,458 --> 00:20:05,958
So that ended up NSA requesting me to be reassigned
253
00:20:05,958 --> 00:20:08,291
to NSA headquarter.
254
00:20:08,291 --> 00:20:14,833
I got a letter from what we termed "God"
255
00:20:08,291 --> 00:20:14,833
in February of '67.
256
00:20:37,291 --> 00:20:41,375
[Loomis] Metadata is actually just data
257
00:20:37,291 --> 00:20:41,375
about the data.
258
00:20:43,125 --> 00:20:47,291
And as a traffic analyst,
259
00:20:47,291 --> 00:20:51,500
you don't care about what's in the conversation.
260
00:20:51,500 --> 00:20:54,000
You care about who's talking to whom,
261
00:20:54,000 --> 00:20:57,416
how often are they talking, when are they talking,
262
00:20:57,416 --> 00:20:59,708
what's their pattern of talking,
263
00:20:59,708 --> 00:21:01,958
who are they talking down to,
264
00:21:01,958 --> 00:21:03,500
who are they talking up to,
265
00:21:03,500 --> 00:21:05,375
what's the subordination,
266
00:21:05,375 --> 00:21:09,125
the command and control structure of the organization?
267
00:21:15,250 --> 00:21:17,666
[Binney] In May of '68,
268
00:21:15,250 --> 00:21:17,666
I got transferred
269
00:21:17,666 --> 00:21:20,791
into the current reporting shop.
270
00:21:20,791 --> 00:21:24,875
In the early summer, the Russians started to train
271
00:21:24,875 --> 00:21:28,333
or having exercise along the border of Czechoslovakia.
272
00:21:32,041 --> 00:21:34,541
I started looking at the communications
273
00:21:34,541 --> 00:21:36,500
they were using to move around.
274
00:21:38,708 --> 00:21:40,291
And that's where I started to pick out
275
00:21:40,291 --> 00:21:42,708
some very small number of unique things
276
00:21:42,708 --> 00:21:46,291
that was different from a normal training program.
277
00:21:49,458 --> 00:21:52,041
So I started to capture that.
278
00:21:55,000 --> 00:21:59,250
And I said, "it's obvious that they're going to invade."
279
00:22:05,333 --> 00:22:08,416
It was only two days later that they actually invaded.
280
00:22:16,250 --> 00:22:19,000
That was the first occurrence that I had
281
00:22:19,000 --> 00:22:22,875
direct personal experience with a real world activity
282
00:22:22,875 --> 00:22:27,500
that let me see what was different between that
283
00:22:22,875 --> 00:22:27,500
and the training.
284
00:22:34,958 --> 00:22:40,458
That gave me the idea of what were the real warning indicators
285
00:22:34,958 --> 00:22:40,458
of impending action.
286
00:22:44,166 --> 00:22:47,333
The real warning indicators, there were only five.
287
00:22:47,333 --> 00:22:50,416
Five, that's all. Just five warning indicators.
288
00:22:50,416 --> 00:22:54,208
I mean, they had maybe a hundred warning indicators
289
00:22:50,416 --> 00:22:54,208
on the list,
290
00:22:54,208 --> 00:22:56,166
but none of them meant anything.
291
00:22:56,166 --> 00:22:59,041
The five that were real weren't even on the list.
292
00:22:59,041 --> 00:23:01,666
Okay, so I had my five
293
00:23:01,666 --> 00:23:03,541
and the rest of them were meaningless to me.
294
00:23:03,541 --> 00:23:05,708
So I simply watched for those five.
295
00:23:05,708 --> 00:23:09,958
And it was just case after case over time, over decades,
296
00:23:09,958 --> 00:23:12,916
you could see every time they were going to do something.
297
00:23:12,916 --> 00:23:14,708
One of these or more of these,
298
00:23:14,708 --> 00:23:16,958
one or two of these would show up at least.
299
00:23:34,458 --> 00:23:39,250
When the Yom Kippur War came along in '73,
300
00:23:39,250 --> 00:23:43,500
again, those warning indicators started showing up.
301
00:23:49,500 --> 00:23:53,541
And then again in '79 with Afghanistan.
302
00:23:55,333 --> 00:23:57,958
That was about a week before the invasion.
303
00:23:57,958 --> 00:24:00,833
It was very close to the Christmas holiday.
304
00:24:00,833 --> 00:24:04,416
So at that time, I said, "well, they're gonna go in at close
305
00:24:00,833 --> 00:24:04,416
to midnight on Christmas Eve
306
00:24:04,416 --> 00:24:08,666
because that's when everybody's gonna be asleep
307
00:24:04,416 --> 00:24:08,666
in the free world."
308
00:24:08,666 --> 00:24:11,333
And that's exactly what they did.
309
00:24:11,333 --> 00:24:13,750
I was off by an hour.
310
00:24:28,333 --> 00:24:32,208
I couldn't understand why a lot of people couldn't see
311
00:24:28,333 --> 00:24:32,208
what I could see.
312
00:24:34,916 --> 00:24:36,750
I didn't look at that understanding
313
00:24:36,750 --> 00:24:41,541
as anything more than just a greater understanding
314
00:24:41,541 --> 00:24:44,458
of people and how they operate.
315
00:24:53,500 --> 00:24:55,625
[Drake] I sat on the terrorism desk
316
00:24:55,625 --> 00:24:59,708
in the Pentagon in 1993.
317
00:24:59,708 --> 00:25:02,416
I was on that desk when they attempted to drop
318
00:25:02,416 --> 00:25:05,333
the World Trade Center towers the first time with truck bombs.
319
00:25:06,833 --> 00:25:09,875
That's when I first learned about Osama bin Laden.
320
00:25:12,375 --> 00:25:17,333
I distinctly remember issuing reports
321
00:25:17,333 --> 00:25:21,583
in which we said this is a serious matter.
322
00:25:21,583 --> 00:25:26,541
This is not a one-time event.
323
00:25:26,541 --> 00:25:28,416
There is a larger movement here,
324
00:25:28,416 --> 00:25:31,458
and they're planning on doing more.
325
00:25:31,458 --> 00:25:33,500
Al-Qaeda, the base,
326
00:25:33,500 --> 00:25:35,416
and Osama bin Laden as their leader
327
00:25:35,416 --> 00:25:37,458
weren't just issuing pronouncements,
328
00:25:37,458 --> 00:25:40,958
they were actually calling for action.
329
00:25:43,041 --> 00:25:45,708
The senior military officer, the J2,
330
00:25:45,708 --> 00:25:47,375
reports to the joint chiefs of staff,
331
00:25:47,375 --> 00:25:49,791
comes down to our alert center
332
00:25:49,791 --> 00:25:52,833
in the National Military Joint Intelligence Center,
333
00:25:52,833 --> 00:25:54,791
and he says, "yeah, I'm reading your reports.
334
00:25:54,791 --> 00:25:58,125
Who cares about some raghead spouting off fatwas
335
00:25:58,125 --> 00:26:01,041
in the desert underneath a fig tree?
336
00:26:01,041 --> 00:26:02,875
Who cares?
337
00:26:02,875 --> 00:26:04,333
Not a threat."
338
00:26:15,291 --> 00:26:19,666
[Roark] The National Security Agency
339
00:26:15,291 --> 00:26:19,666
traditionally has been
340
00:26:19,666 --> 00:26:25,416
one of the most productive of US intelligence agencies.
341
00:26:25,416 --> 00:26:31,583
We relied very heavily on it ever since World War II
342
00:26:25,416 --> 00:26:31,583
at least.
343
00:26:34,916 --> 00:26:38,833
When I got the National Security Agency account,
344
00:26:38,833 --> 00:26:42,875
I had heard that they were in pretty good shape.
345
00:26:42,875 --> 00:26:46,541
I went for intensive rounds of briefings,
346
00:26:46,541 --> 00:26:48,750
and after about three months,
347
00:26:48,750 --> 00:26:53,208
I was shocked at the poor condition of the agency.
348
00:26:54,666 --> 00:26:58,833
We were very ill-prepared for the digital age.
349
00:26:58,833 --> 00:27:03,916
But National Security Agency management continued to think
350
00:27:03,916 --> 00:27:06,000
that they were the best in the world
351
00:27:06,000 --> 00:27:07,750
and had the best technology
352
00:27:07,750 --> 00:27:11,375
because this had always been their reputation
353
00:27:11,375 --> 00:27:12,958
and they were convinced
354
00:27:12,958 --> 00:27:15,541
that there were no fundamental problems.
355
00:27:15,541 --> 00:27:18,500
I was convinced that there were fundamental problems,
356
00:27:18,500 --> 00:27:22,500
both technical and especially cultural,
357
00:27:22,500 --> 00:27:26,833
and I became very worried very quickly.
358
00:27:26,833 --> 00:27:30,833
[Loomis] See, they were drowning
359
00:27:26,833 --> 00:27:30,833
in garbage.
360
00:27:30,833 --> 00:27:36,083
The processes that were in place before ThinThread came along
361
00:27:36,083 --> 00:27:40,250
were wild carded garbage collectors,
362
00:27:40,250 --> 00:27:42,541
and they were dumping all the stuff
363
00:27:42,541 --> 00:27:44,541
into a huge storage system
364
00:27:44,541 --> 00:27:47,833
and the analysts were floundering trying to find out,
365
00:27:47,833 --> 00:27:51,250
well, you know, "what's important to me?"
366
00:28:08,958 --> 00:28:13,458
[Binney] ThinThread was our way of trying
367
00:28:08,958 --> 00:28:13,458
to address the digital age.
368
00:28:16,583 --> 00:28:20,833
It was a question of being able to manage the volume of data.
369
00:28:20,833 --> 00:28:23,541
The terrorists are using all the cell phones,
370
00:28:23,541 --> 00:28:28,000
all the land line phones, all of the internet connections
371
00:28:23,541 --> 00:28:28,000
to communicate.
372
00:28:30,541 --> 00:28:33,541
So the new Cold War, if you will,
373
00:28:33,541 --> 00:28:37,000
was the worldwide explosion of the digital age.
374
00:28:38,958 --> 00:28:41,583
The NSA took the different perspective that says,
375
00:28:41,583 --> 00:28:43,500
"let's just collect everything
376
00:28:43,500 --> 00:28:46,166
and then we'll have our analysts figure it out later."
377
00:28:50,500 --> 00:28:52,083
The problem is, once they collected everything,
378
00:28:52,083 --> 00:28:54,166
your analysts couldn't figure it out.
379
00:28:54,166 --> 00:28:56,833
There was too much. They couldn't get through it
380
00:28:54,166 --> 00:28:56,833
every day.
381
00:28:56,833 --> 00:29:01,208
They'd make their database pulls and they've got hundreds
382
00:28:56,833 --> 00:29:01,208
of thousands of returns.
383
00:29:01,208 --> 00:29:04,458
Well, you could not get through it.
384
00:29:04,458 --> 00:29:07,333
You're burying your analysts with meaningless data.
385
00:29:13,125 --> 00:29:17,458
That's when I started looking at what we had to do
386
00:29:17,458 --> 00:29:20,500
to solve the problem of the volume of data
387
00:29:20,500 --> 00:29:25,083
and how could we isolate things that were important
388
00:29:20,500 --> 00:29:25,083
for our analysts to look at.
389
00:29:25,083 --> 00:29:27,375
And the key was metadata.
390
00:29:30,000 --> 00:29:34,291
Just using the metadata in terms of relationships
391
00:29:30,000 --> 00:29:34,291
across the network.
392
00:29:38,750 --> 00:29:41,125
So you don't have to look internally at the content.
393
00:29:41,125 --> 00:29:43,166
You look more at the relationships
394
00:29:43,166 --> 00:29:44,958
of the people communicating
395
00:29:44,958 --> 00:29:47,708
or organizations communicating in the world.
396
00:29:47,708 --> 00:29:51,708
So that's a way you can see into large amounts of data
397
00:29:47,708 --> 00:29:51,708
fairly quickly,
398
00:29:51,708 --> 00:29:54,125
effectively, and pull out data
399
00:29:51,708 --> 00:29:54,125
that's relevant
400
00:29:54,125 --> 00:29:56,375
to targets you want to analyze.
401
00:30:11,250 --> 00:30:13,791
My biggest fear throughout all of my work at NSA
402
00:30:13,791 --> 00:30:17,708
was the fear of human inaccuracy and human failure
403
00:30:17,708 --> 00:30:19,708
in terms of interpreting things properly
404
00:30:19,708 --> 00:30:22,750
or in terms of recognizing things.
405
00:30:24,333 --> 00:30:27,541
I felt that that process needed to be fully automated
406
00:30:27,541 --> 00:30:30,291
as much as possible so that the information coming in
407
00:30:30,291 --> 00:30:33,041
was untouched by human hands.
408
00:30:37,791 --> 00:30:39,291
Oops.
409
00:30:47,625 --> 00:30:50,416
Many people called me things like "the great Satan,"
410
00:30:50,416 --> 00:30:55,208
or, you know, "the evil one," I think,
411
00:30:55,208 --> 00:30:57,458
and many other names, you know.
412
00:31:12,625 --> 00:31:15,291
So I had whole groups of people that didn't want to talk to me
413
00:31:15,291 --> 00:31:17,250
or be involved with me
414
00:31:17,250 --> 00:31:21,833
because they felt if they did, they would lose their jobs.
415
00:31:30,208 --> 00:31:33,541
I was sitting at my desk with pencil and paper
416
00:31:33,541 --> 00:31:36,583
trying to build a structure of the Soviet military
417
00:31:36,583 --> 00:31:41,000
command and control system, of all the forces.
418
00:31:43,208 --> 00:31:48,208
In order to do it, I needed a little help
419
00:31:43,208 --> 00:31:48,208
from the cryptologists.
420
00:31:48,208 --> 00:31:52,666
So I went to them to get the bits that they had
421
00:31:48,208 --> 00:31:52,666
in possession.
422
00:31:52,666 --> 00:31:56,416
And they came back with a miniscule answer,
423
00:31:56,416 --> 00:32:00,291
and I said, "if you don't want to work this problem,
424
00:32:00,291 --> 00:32:04,375
just give me the bits and I'll do it."
425
00:32:04,375 --> 00:32:06,791
I couldn't wait for them.
426
00:32:13,333 --> 00:32:17,458
For a nuclear intercontinental ballistic missile to be fired,
427
00:32:17,458 --> 00:32:19,458
it takes it no more than 30 minutes
428
00:32:19,458 --> 00:32:21,750
to go from one continent to the other.
429
00:32:28,625 --> 00:32:31,416
That means whether or not you wish to fire back
430
00:32:31,416 --> 00:32:33,083
before the weapons start landing,
431
00:32:33,083 --> 00:32:35,791
you have 30 minutes to make that decision.
432
00:32:55,375 --> 00:32:58,416
It was at a point in time where the civilization
433
00:32:58,416 --> 00:33:01,583
could wipe themselves out in an hour
434
00:33:01,583 --> 00:33:04,000
by nuclear exchange. For the longest time
435
00:33:38,958 --> 00:33:41,375
in my career there at NSA,
436
00:33:41,375 --> 00:33:45,583
I was trying to work-- this is probably on
437
00:33:41,375 --> 00:33:45,583
the order of 13 years,
438
00:33:45,583 --> 00:33:48,541
I was trying to work with the computer people
439
00:33:48,541 --> 00:33:50,791
because I wanted them to do certain programs
440
00:33:50,791 --> 00:33:54,000
that would assist me in what I was attempting to do.
441
00:33:56,500 --> 00:33:59,833
Every time I would ask them to do something for me,
442
00:33:59,833 --> 00:34:02,916
they would say, "okay, please send us a memo
443
00:34:02,916 --> 00:34:05,416
saying you had this requirement request."
444
00:34:08,416 --> 00:34:11,750
So I'd send them memo after memo.
445
00:34:11,750 --> 00:34:14,416
That gave them a requirement.
446
00:34:14,416 --> 00:34:16,833
That requirement gave them the justification
447
00:34:16,833 --> 00:34:20,500
to go to congress or others internally in NSA
448
00:34:16,833 --> 00:34:20,500
and ask for money.
449
00:34:20,500 --> 00:34:23,416
So that helped them build their empire, you know?
450
00:34:23,416 --> 00:34:25,750
But in the meantime, they would never solve my problem.
451
00:34:25,750 --> 00:34:30,375
They would just take the money and keep asking me for
452
00:34:25,750 --> 00:34:30,375
another requirement.
453
00:34:37,250 --> 00:34:39,375
At one time in 1983,
454
00:34:39,375 --> 00:34:43,291
miraculously this PC came up on my desk.
455
00:34:47,000 --> 00:34:48,625
I had a friend who was probably
456
00:34:48,625 --> 00:34:51,208
the best C language programmer at NSA.
457
00:34:51,208 --> 00:34:53,583
His name was Bill, too, and I said, "Bill,
458
00:34:53,583 --> 00:34:55,500
what do you think we could do with this PC?
459
00:34:55,500 --> 00:34:57,250
If I could get an algorithm together,
460
00:34:57,250 --> 00:34:59,291
do you think you could program that into this
461
00:34:59,291 --> 00:35:02,166
two disk drive, 64k ram pc?
462
00:35:02,166 --> 00:35:04,333
He says, "yeah, I think I could do that."
463
00:35:04,333 --> 00:35:06,500
I said, "great."
464
00:35:09,458 --> 00:35:14,083
So we would type in the query from unresolved issues
465
00:35:09,458 --> 00:35:14,083
out of the database...
466
00:35:16,750 --> 00:35:20,041
And up would pop the answer.
467
00:35:20,041 --> 00:35:23,208
Where the mainframe's eight acres of computers
468
00:35:23,208 --> 00:35:25,375
could not figure out what this data was,
469
00:35:25,375 --> 00:35:28,166
I would take it and put it in my little two disk drive pc
470
00:35:28,166 --> 00:35:30,541
and get the answer right away.
471
00:35:32,750 --> 00:35:36,291
So I had to tell the computer people,
472
00:35:36,291 --> 00:35:38,625
and I said, "you know, I have this little program
473
00:35:36,291 --> 00:35:38,625
down here.
474
00:35:38,625 --> 00:35:40,291
You might want to see this."
475
00:35:40,291 --> 00:35:42,791
And I had this printout from the database,
476
00:35:42,791 --> 00:35:44,625
and I was going through, "see, it didn't resolve this here.
477
00:35:42,791 --> 00:35:44,625
Watch this here."
478
00:35:44,625 --> 00:35:46,125
And I'd type it in to my little PC,
479
00:35:46,125 --> 00:35:48,625
and up would come the answer.
480
00:35:48,625 --> 00:35:51,500
There's another one, and I'd type it in there,
481
00:35:48,625 --> 00:35:51,500
and up would pop the answer.
482
00:35:51,500 --> 00:35:54,166
They started sweating, I could see.
483
00:35:54,166 --> 00:35:56,416
And I said, "don't you think that's neat?"
484
00:35:56,416 --> 00:35:58,458
He said, "yeah, don't you think that should
485
00:35:56,416 --> 00:35:58,458
be in the mainframe?"
486
00:35:58,458 --> 00:36:00,541
I said, "sure. I think it should be
487
00:35:58,458 --> 00:36:00,541
in the mainframe.
488
00:36:00,541 --> 00:36:02,958
Why don't you send me a memo and I'll give it to you?"
489
00:36:02,958 --> 00:36:05,083
I thought that was great.
490
00:36:07,458 --> 00:36:10,750
In this process, of course, I learned, very simply put,
491
00:36:10,750 --> 00:36:13,458
if you want something done, you have to just go do it.
492
00:36:13,458 --> 00:36:17,916
You never ask for permission, only ask for forgiveness,
493
00:36:13,458 --> 00:36:17,916
if you have to.
494
00:36:17,916 --> 00:36:20,166
In the end, sometimes you don't have to.
495
00:36:20,166 --> 00:36:23,500
Once you solve the problem, it's no longer a problem.
496
00:36:32,416 --> 00:36:34,666
My philosophy was very simple.
497
00:36:34,666 --> 00:36:36,708
If somebody says something is impossible,
498
00:36:36,708 --> 00:36:39,375
that's something you have to do.
499
00:36:39,375 --> 00:36:41,958
It's like open-ended thinking. You don't bound your thinking.
500
00:36:41,958 --> 00:36:45,416
You let it float anywhere it wants to go.
501
00:36:45,416 --> 00:36:49,916
So that gives you the idea of how you can be creative
502
00:36:45,416 --> 00:36:49,916
in any environment.
503
00:36:49,916 --> 00:36:51,750
And so that's what I was after,
504
00:36:51,750 --> 00:36:54,291
being creative anywhere I went.
505
00:36:54,291 --> 00:36:57,750
And that's what the SARC, the Sigint Automation
506
00:36:54,291 --> 00:36:57,750
Research Center,
507
00:36:57,750 --> 00:36:59,625
was all about.
508
00:37:28,750 --> 00:37:31,750
[Drake] The SARC was this
509
00:37:28,750 --> 00:37:31,750
Skunkworks organization,
510
00:37:31,750 --> 00:37:34,166
about a dozen people.
511
00:37:34,166 --> 00:37:37,333
Bill Binney was of the co-founders of that.
512
00:37:37,333 --> 00:37:39,750
Ed Loomis was the integrator.
513
00:37:39,750 --> 00:37:43,833
Kirk Weibe at that time was like a business manager
514
00:37:39,750 --> 00:37:43,833
and analyst.
515
00:37:43,833 --> 00:37:47,291
And they had other support people as well.
516
00:37:43,833 --> 00:37:47,291
And they had a few contractors.
517
00:37:47,291 --> 00:37:51,958
The SARC prided themselves on having a very small team
518
00:37:51,958 --> 00:37:57,125
that was very creative and flexible.
519
00:37:57,125 --> 00:37:59,416
They didn't want a lot of bureaucracy.
520
00:37:59,416 --> 00:38:03,041
They had so low a profile that when I asked for
521
00:37:59,416 --> 00:38:03,041
a briefing from them,
522
00:38:03,041 --> 00:38:05,791
the management didn't even know about them.
523
00:38:05,791 --> 00:38:09,416
They had to scramble to find out who they were.
524
00:38:09,416 --> 00:38:15,000
They were kind of hiding until they had their system perfected.
525
00:38:16,875 --> 00:38:20,666
[Drake] It was an extraordinary
526
00:38:16,875 --> 00:38:20,666
organization.
527
00:38:20,666 --> 00:38:23,833
And Bill, he was the algorithm brain.
528
00:38:23,833 --> 00:38:27,875
He was the crypto-mathematician behind the algorithms
529
00:38:27,875 --> 00:38:30,250
of what became known as ThinThread.
530
00:38:38,833 --> 00:38:41,500
People are telling me, "you gotta fear Bill."
531
00:38:44,583 --> 00:38:46,416
And the reason you have to fear Bill
532
00:38:46,416 --> 00:38:49,333
is he's like this super crypto-mathematician.
533
00:38:49,333 --> 00:38:52,708
And if there's anything wrong, he'll shred you.
534
00:38:54,791 --> 00:38:58,541
So I end up calling him up, we made arrangements to meet,
535
00:38:58,541 --> 00:39:00,875
and I end up showing up in his office one morning.
536
00:39:00,875 --> 00:39:03,541
I spent a couple of hours with him,
537
00:39:00,875 --> 00:39:03,541
and it was immediately clear
538
00:39:03,541 --> 00:39:06,916
within the first 15 minutes that we were going to hit it off
539
00:39:03,541 --> 00:39:06,916
really, really well.
540
00:39:06,916 --> 00:39:11,583
Because the entire first part of our conversation
541
00:39:11,583 --> 00:39:13,125
was all mathematically based.
542
00:39:13,125 --> 00:39:16,583
The thing that Bill loves most is math.
543
00:39:16,583 --> 00:39:19,791
As soon as anybody raises anything mathematical,
544
00:39:19,791 --> 00:39:22,416
his eyes literally light up and he perks up
545
00:39:22,416 --> 00:39:24,750
and he'll start talking about it, you know?
546
00:39:24,750 --> 00:39:26,500
He just loves math.
547
00:39:26,500 --> 00:39:30,125
And it's wonderful that he found his profession,
548
00:39:30,125 --> 00:39:32,250
you know, the thing that he was really meant to do.
549
00:39:34,875 --> 00:39:37,833
[Binney] The beauty of math
550
00:39:34,875 --> 00:39:37,833
is that it's an attempt
551
00:39:37,833 --> 00:39:41,833
to structure common sense
552
00:39:41,833 --> 00:39:44,833
and consistencies in the universe.
553
00:39:48,333 --> 00:39:50,750
That's all it is.
554
00:39:54,083 --> 00:39:56,041
There is no chaos.
555
00:39:56,041 --> 00:39:59,958
There is nothing that's infinite.
556
00:39:59,958 --> 00:40:03,125
Everything is structured.
557
00:40:05,541 --> 00:40:08,541
And it's just a matter of finding that structure.
558
00:40:29,541 --> 00:40:32,208
I basically envisioned the graph
559
00:40:32,208 --> 00:40:36,500
as a very large globe of the earth, see?
560
00:40:43,416 --> 00:40:47,666
With a total of about 7 billion nodes in it, or dots.
561
00:40:50,125 --> 00:40:52,750
Each representing an individual.
562
00:40:54,500 --> 00:40:57,791
And having all the connections of all those individuals
563
00:40:57,791 --> 00:41:01,250
with all the other connections they have anywhere in the world.
564
00:41:12,750 --> 00:41:16,250
Think of yourselves as drifting into the globe.
565
00:41:20,333 --> 00:41:22,041
So you're going inside the globe
566
00:41:22,041 --> 00:41:25,250
and you can go to any point in the globe
567
00:41:25,250 --> 00:41:28,208
and look at any given point to see the relationships
568
00:41:28,208 --> 00:41:31,333
they have with all the other dots in the globe.
569
00:41:36,541 --> 00:41:39,791
When you go into the globe, you pick out a dot,
570
00:41:39,791 --> 00:41:43,291
and you can pull it out of that relationship graph,
571
00:41:43,291 --> 00:41:45,166
and with it will come all of the nodes
572
00:41:45,166 --> 00:41:49,125
that it has a relationship with.
573
00:41:49,125 --> 00:41:51,916
When you pull that node out and its community, if you will,
574
00:41:51,916 --> 00:41:53,375
the social network it had,
575
00:41:53,375 --> 00:41:55,166
you pulled all of the backup data
576
00:41:55,166 --> 00:41:58,416
that created those relationships to begin with
577
00:41:58,416 --> 00:42:01,291
so that you can now timeline those relationships
578
00:42:01,291 --> 00:42:04,000
and see the interactions over a period of time
579
00:42:04,000 --> 00:42:07,041
whatever you wanted to find.
580
00:42:07,041 --> 00:42:10,291
So that's how I envisioned the graph.
581
00:42:24,958 --> 00:42:29,333
[Loomis] My interest was
582
00:42:24,958 --> 00:42:29,333
in making Bill Binney happy.
583
00:42:29,333 --> 00:42:32,375
Bill Binney is a traffic analyst.
584
00:42:32,375 --> 00:42:38,166
So my focus was really on creating the metadata for him
585
00:42:38,166 --> 00:42:42,500
that he could do his traffic analytic thing.
586
00:42:45,083 --> 00:42:49,458
You can extract an awful lot about a person's life
587
00:42:49,458 --> 00:42:52,250
just by looking at metadata.
588
00:42:52,250 --> 00:42:57,333
And today, when you take all the metadata
589
00:42:57,333 --> 00:43:01,041
that's being popped around the world
590
00:43:01,041 --> 00:43:03,958
by GPS, by your cell phones,
591
00:43:03,958 --> 00:43:07,208
by your transponders
592
00:43:07,208 --> 00:43:10,541
for your E-Zpass on the highways,
593
00:43:10,541 --> 00:43:15,375
by your credit card when you insert it into an ATM machine
594
00:43:15,375 --> 00:43:19,125
or when you insert it into a cash register,
595
00:43:19,125 --> 00:43:21,500
a check-out line,
596
00:43:21,500 --> 00:43:24,416
all that data gets all brought together
597
00:43:24,416 --> 00:43:29,708
and it all traces back to you, the individual.
598
00:43:31,416 --> 00:43:34,625
Doesn't matter what you said in an e-mail
599
00:43:34,625 --> 00:43:40,291
or what website you went to or what you downloaded.
600
00:43:40,291 --> 00:43:45,833
What matters is what pattern your digital behavior is taking
601
00:43:45,833 --> 00:43:48,333
and what fingerprints does that leave
602
00:43:48,333 --> 00:43:50,416
of what you've been up to.
603
00:44:06,791 --> 00:44:11,041
I first started to build on my portion of what I considered
604
00:44:06,791 --> 00:44:11,041
the ThinThread program,
605
00:44:11,041 --> 00:44:14,916
which was the backend for analysis of the data
606
00:44:11,041 --> 00:44:14,916
once it was acquired.
607
00:44:14,916 --> 00:44:17,125
Ed was doing the front end, doing the sessionizer
608
00:44:17,125 --> 00:44:18,666
getting the data together
609
00:44:18,666 --> 00:44:21,708
and assembling it for me to look at.
610
00:44:27,083 --> 00:44:29,083
Ed's sessionizer was our starting point
611
00:44:29,083 --> 00:44:33,791
to access and scan the internet for important information.
612
00:44:38,500 --> 00:44:43,083
I was convinced that the internet was the new way
613
00:44:38,500 --> 00:44:43,083
of communications
614
00:44:43,083 --> 00:44:45,166
for terrorists and criminals.
615
00:44:45,166 --> 00:44:47,125
And we knew at that point that some of them
616
00:44:47,125 --> 00:44:49,333
had been moving that way.
617
00:44:54,333 --> 00:44:57,041
[Drake] The internet exploded.
618
00:44:57,041 --> 00:44:59,291
The NSA was actually playing catch-up.
619
00:44:59,291 --> 00:45:02,791
They were so way behind the time.
620
00:45:02,791 --> 00:45:07,250
NSA management seriously considered, no kidding,
621
00:45:07,250 --> 00:45:12,000
as to whether or not they would actually give people
622
00:45:07,250 --> 00:45:12,000
e-mail technology.
623
00:45:12,000 --> 00:45:16,000
And the reason is that we don't know what they're going
624
00:45:12,000 --> 00:45:16,000
to send to each other.
625
00:45:18,708 --> 00:45:22,208
And there were no secrets worth knowing on the internet.
626
00:45:22,208 --> 00:45:24,875
It's all open. It's not secret.
627
00:45:24,875 --> 00:45:28,083
There's no effort. We want real secrets.
628
00:45:28,083 --> 00:45:29,500
We don't-- internet?
629
00:45:29,500 --> 00:45:31,166
You can't have a secret internet.
630
00:45:39,083 --> 00:45:41,875
In about 1996, I believe it was,
631
00:45:41,875 --> 00:45:45,458
we discovered Osama bin Laden's Inmarsat phone number,
632
00:45:45,458 --> 00:45:48,416
and so we used that to follow his movements
633
00:45:48,416 --> 00:45:52,583
and his intentions from '96 to '98.
634
00:45:52,583 --> 00:45:55,083
Until someone compromised the fact
635
00:45:55,083 --> 00:45:58,000
that we had his specific phone number,
636
00:45:55,083 --> 00:45:58,000
and he gave the number.
637
00:45:58,000 --> 00:46:02,791
And so after that, we lost that as a source
638
00:45:58,000 --> 00:46:02,791
of intelligence.
639
00:46:20,625 --> 00:46:24,000
[Koppel] More than 80 dead,
640
00:46:20,625 --> 00:46:24,000
more than 1,700 injured
641
00:46:24,000 --> 00:46:28,000
in two bomb blasts today, which exploded just minutes
642
00:46:28,000 --> 00:46:30,625
and 450 miles apart.
643
00:46:30,625 --> 00:46:33,875
Those explosions set to go off at the US embassies
644
00:46:33,875 --> 00:46:36,625
in Dar es Salaam, Tanzania, and Nairobi, Kenya,
645
00:46:36,625 --> 00:46:39,041
were clearly a part of someone's war
646
00:46:39,041 --> 00:46:42,250
against the United States, although it is still unclear
647
00:46:42,250 --> 00:46:44,791
at this hour who our enemy is.
648
00:46:44,791 --> 00:46:47,125
[man] There was smoke
649
00:46:44,791 --> 00:46:47,125
and debris everywhere.
650
00:46:47,125 --> 00:46:50,333
We immediately left the office because we didn't know
651
00:46:47,125 --> 00:46:50,333
what had happened.
652
00:46:50,333 --> 00:46:52,250
And there were people laying about,
653
00:46:52,250 --> 00:46:57,291
and everybody that we came to was just covered in blood.
654
00:46:57,291 --> 00:46:59,583
[newscaster] We're joined now
655
00:46:57,291 --> 00:46:59,583
from the White House
656
00:46:59,583 --> 00:47:02,708
by US national security advisor Sandy Burger.
657
00:47:02,708 --> 00:47:06,000
Was this a failure of US intelligence?
658
00:47:06,000 --> 00:47:08,416
[Burger] Well, the investigation
659
00:47:06,000 --> 00:47:08,416
is going on.
660
00:47:08,416 --> 00:47:10,666
I don't believe that's the case, and I think it would be
661
00:47:10,666 --> 00:47:13,666
inappropriate for me to comment on
662
00:47:13,666 --> 00:47:17,000
what we know, what we don't know.
663
00:47:25,416 --> 00:47:27,958
[Binney] In August of 1998,
664
00:47:27,958 --> 00:47:33,166
we successfully got our sessionizer running
665
00:47:27,958 --> 00:47:33,166
at the fiber-optic rates.
666
00:47:35,125 --> 00:47:37,541
Ed gave a copy of that sessionizer
667
00:47:37,541 --> 00:47:39,791
to our friends out at Bad Aibling,
668
00:47:39,791 --> 00:47:44,500
one of our echelon sites for collecting data
669
00:47:39,791 --> 00:47:44,500
in southern Germany.
670
00:47:44,500 --> 00:47:47,166
We just wanted to say, "here, why don't you try this
671
00:47:47,166 --> 00:47:50,000
and see what you think and give us some feedback."
672
00:47:50,000 --> 00:47:54,875
And he said, "gee, this sessionizer looks really
673
00:47:50,000 --> 00:47:54,875
great and works really great."
674
00:47:54,875 --> 00:47:58,375
He says, you know, "I think I'll put it on the whole site."
675
00:48:04,458 --> 00:48:09,166
They put it on their system Friday night.
676
00:48:09,166 --> 00:48:11,250
And when they did that,
677
00:48:11,250 --> 00:48:14,500
it started producing so much information
678
00:48:14,500 --> 00:48:18,083
and feeding it back to NSA
679
00:48:18,083 --> 00:48:20,458
that by Saturday morning it was about to crash
680
00:48:20,458 --> 00:48:23,958
the entire storage system inside NSA.
681
00:48:26,708 --> 00:48:31,625
It was too much data coming in. They couldn't handle it.
682
00:48:31,625 --> 00:48:36,875
[Loomis] We were told it was bringing
683
00:48:31,625 --> 00:48:36,875
the storage system to its knees.
684
00:48:38,125 --> 00:48:41,125
And we were to turn it off.
685
00:48:41,125 --> 00:48:44,083
So one of the programmers had to come in over the weekend
686
00:48:44,083 --> 00:48:46,500
and turn off the sessionizer.
687
00:48:55,916 --> 00:48:58,500
[Binney] This particular test
688
00:48:55,916 --> 00:48:58,500
clearly showed
689
00:48:58,500 --> 00:49:00,500
that there was so much more data there
690
00:49:00,500 --> 00:49:04,041
that was much more valuable as a source of information
691
00:49:04,041 --> 00:49:08,083
than anybody realized at NSA.
692
00:49:08,083 --> 00:49:09,875
This was kind of a wake-up call
693
00:49:09,875 --> 00:49:11,583
that I thought made it clear to them
694
00:49:11,583 --> 00:49:13,458
that they needed to open up their thinking
695
00:49:13,458 --> 00:49:16,041
to a much larger scale than they were thinking at.
696
00:49:16,041 --> 00:49:19,208
[beeping]
697
00:49:35,000 --> 00:49:39,458
[Wiebe] I had heard about Bill Binney,
698
00:49:35,000 --> 00:49:39,458
but hadn't actually met him.
699
00:49:42,000 --> 00:49:45,291
I called him up. I said, "Bill,
700
00:49:45,291 --> 00:49:47,041
can I come down and see you
701
00:49:47,041 --> 00:49:50,291
and what your organization are doing?"
702
00:49:52,083 --> 00:49:55,666
He said, "sure. Come on down."
703
00:49:55,666 --> 00:49:58,666
So I go down, I join Bill Binney
704
00:49:58,666 --> 00:50:02,666
in the Sigint Automation Research Center.
705
00:50:02,666 --> 00:50:06,875
And I look around, and as I meet these guys
706
00:50:02,666 --> 00:50:06,875
and talk to them
707
00:50:06,875 --> 00:50:09,708
and interview them, find out who's doing what,
708
00:50:09,708 --> 00:50:14,541
and begin to see the results of their efforts,
709
00:50:14,541 --> 00:50:17,750
I become literally excited.
710
00:50:19,875 --> 00:50:24,041
In terms of facing the challenges of big data,
711
00:50:24,041 --> 00:50:28,041
digital communications, and the internet,
712
00:50:28,041 --> 00:50:31,333
I saw the answer right before me.
713
00:50:33,041 --> 00:50:36,083
This little research organization
714
00:50:36,083 --> 00:50:40,125
had the keys to NSA's future.
715
00:50:40,125 --> 00:50:44,041
My concern immediately was
716
00:50:44,041 --> 00:50:47,416
does anybody else know that?
717
00:50:47,416 --> 00:50:49,833
Do they even recognize--
718
00:50:49,833 --> 00:50:53,458
does anybody in any position of influence or power
719
00:50:53,458 --> 00:50:57,875
even recognize what they have?
720
00:51:16,083 --> 00:51:18,250
[Roark] I was aware of the technology
721
00:51:18,250 --> 00:51:21,916
that went into ThinThread from 1997.
722
00:51:26,291 --> 00:51:30,458
I got a formal briefing from Bill and Ed and their team,
723
00:51:30,458 --> 00:51:32,916
and I thought it was pretty impressive
724
00:51:32,916 --> 00:51:36,208
compared to what else I had heard at NSA.
725
00:51:37,666 --> 00:51:41,125
I thought it looked very promising.
726
00:51:41,125 --> 00:51:43,416
I started giving them money.
727
00:51:43,416 --> 00:51:45,833
And I would get Congress to agree
728
00:51:45,833 --> 00:51:50,666
to make sure that they were funded to develop
729
00:51:45,833 --> 00:51:50,666
their systems...
730
00:51:55,375 --> 00:51:59,625
Because the agency was admitting they had to update
731
00:51:59,625 --> 00:52:03,375
to the digital age from the analog age.
732
00:52:03,375 --> 00:52:06,208
They had not started it yet.
733
00:52:06,208 --> 00:52:08,250
And even under the analog systems,
734
00:52:08,250 --> 00:52:12,333
there is this deluge of data coming in.
735
00:52:12,333 --> 00:52:14,041
And once you get the digital data,
736
00:52:14,041 --> 00:52:16,125
you get these high capacity pipelines,
737
00:52:16,125 --> 00:52:18,375
it was going to be far worse.
738
00:52:18,375 --> 00:52:22,458
So it was going to be essential that there was some way
739
00:52:22,458 --> 00:52:24,375
to pick out the targets out of this.
740
00:52:24,375 --> 00:52:27,083
Some way far better than the keyword system
741
00:52:27,083 --> 00:52:30,208
that NSA was using at that point.
742
00:52:43,333 --> 00:52:45,416
[Binney] Shortly after
743
00:52:43,333 --> 00:52:45,416
the Bad Aibling test,
744
00:52:45,416 --> 00:52:47,500
we had the whole system running,
745
00:52:47,500 --> 00:52:51,541
and then from there on, we just took in more and more data
746
00:52:51,541 --> 00:52:55,000
of large numbers of phones and large numbers of computers.
747
00:53:01,458 --> 00:53:07,083
We started consolidating that into my big graph,
748
00:53:07,083 --> 00:53:09,500
which we called the big ass graph.
749
00:53:14,375 --> 00:53:16,500
We started pulling in such a massive amount of data
750
00:53:16,500 --> 00:53:18,166
and the system was working so well,
751
00:53:18,166 --> 00:53:20,958
we could see no limit to it...
752
00:53:25,333 --> 00:53:28,958
Building relationships between billions of people.
753
00:53:34,000 --> 00:53:37,958
I mean, we're talking trillions of transactions.
754
00:53:39,291 --> 00:53:41,583
It was pretty clear that we were building
755
00:53:41,583 --> 00:53:46,250
the most powerful analysis tool that had been developed
756
00:53:41,583 --> 00:53:46,250
in history
757
00:53:46,250 --> 00:53:50,916
to monitor, basically, the entire world
758
00:53:50,916 --> 00:53:53,083
in near real time.
759
00:54:08,916 --> 00:54:13,500
This is monitoring every member of the population automatically.
760
00:54:16,083 --> 00:54:19,583
You invade everybody's privacy.
761
00:54:22,625 --> 00:54:24,458
That's not compatible with a democracy.
762
00:54:24,458 --> 00:54:27,250
That simply is not compatible.
763
00:54:29,750 --> 00:54:32,041
That's like the stasi on super steroids
764
00:54:32,041 --> 00:54:34,958
or the KGB on super steroids, you know?
765
00:54:34,958 --> 00:54:38,333
This is things that they couldn't even dream of.
766
00:54:43,625 --> 00:54:46,333
That's where I, in particular, said we have to do something
767
00:54:46,333 --> 00:54:48,291
to protect the individuals here,
768
00:54:48,291 --> 00:54:50,291
especially those who are innocent
769
00:54:50,291 --> 00:54:52,958
of any wrong-doing whatsoever.
770
00:54:52,958 --> 00:54:57,500
There's no reason to even have this data about them.
771
00:55:14,791 --> 00:55:19,375
[Roark] General Hayden came on
772
00:55:14,791 --> 00:55:19,375
as a new director of NSA.
773
00:55:19,375 --> 00:55:22,375
By that time, the congressional intelligence staff
774
00:55:22,375 --> 00:55:24,958
had become very disillusioned
775
00:55:24,958 --> 00:55:28,500
with the NSA's ability to manage modernization.
776
00:55:30,291 --> 00:55:33,041
He was somewhat forthcoming in a sense
777
00:55:33,041 --> 00:55:35,208
that he was willing to make changes,
778
00:55:35,208 --> 00:55:38,333
although not necessarily in the areas
779
00:55:38,333 --> 00:55:41,250
that congress was focused on,
780
00:55:41,250 --> 00:55:44,375
and he was a very fast talker.
781
00:55:44,375 --> 00:55:47,166
When he would brief the members, he would talk very rapidly.
782
00:55:47,166 --> 00:55:52,000
He would use all kinds of similes and analogies
783
00:55:52,000 --> 00:55:55,500
and everything that left you scratching your head
784
00:55:52,000 --> 00:55:55,500
while he plowed ahead,
785
00:55:55,500 --> 00:55:58,750
and he would get by with a lot that way.
786
00:55:58,750 --> 00:56:00,958
I think the members,
787
00:56:00,958 --> 00:56:04,041
this being a difficult enough topic to understand
788
00:56:00,958 --> 00:56:04,041
to begin with,
789
00:56:04,041 --> 00:56:06,458
he left the members in the dust.
790
00:56:09,333 --> 00:56:13,041
[Binney] When Michael Hayden came in
791
00:56:09,333 --> 00:56:13,041
as director of NSA,
792
00:56:13,041 --> 00:56:14,750
one of the first things he said was
793
00:56:14,750 --> 00:56:18,500
the NSA was going deaf and blind.
794
00:56:18,500 --> 00:56:22,625
So he created the NSA transformation office, the NTO.
795
00:56:24,375 --> 00:56:27,083
A friend of mine became the chief of the NTO,
796
00:56:27,083 --> 00:56:29,125
and he realized what we were doing with ThinThread,
797
00:56:29,125 --> 00:56:31,625
and he thought that was great.
798
00:56:31,625 --> 00:56:34,916
So he sent his deputy down, and he said,
799
00:56:34,916 --> 00:56:39,000
"what can you guys do with $1.2 billion?"
800
00:56:39,000 --> 00:56:44,125
Well, to be offered all of a sudden 1.2 billion
801
00:56:39,000 --> 00:56:44,125
was flabbergasting, you know?
802
00:56:44,125 --> 00:56:46,125
It was kind of hard to deal with.
803
00:56:46,125 --> 00:56:50,333
We had been operating with just a couple million dollars.
804
00:56:50,333 --> 00:56:52,583
So we asked them to give us a little bit of time
805
00:56:52,583 --> 00:56:56,125
to try to figure out what we might be able
806
00:56:52,583 --> 00:56:56,125
to do with that.
807
00:56:56,125 --> 00:56:57,791
So when he came back in,
808
00:56:57,791 --> 00:57:02,541
we said we could upgrade the entire world--
809
00:57:02,541 --> 00:57:04,291
everything we have in the world,
810
00:57:04,291 --> 00:57:06,875
and everything back here in the United States,
811
00:57:06,875 --> 00:57:08,833
but in the process, we could only spend
812
00:57:08,833 --> 00:57:13,083
maybe a little over $300 million to do it.
813
00:57:13,083 --> 00:57:15,500
So he said, "that's really great."
814
00:57:17,791 --> 00:57:19,625
A few days later, he comes back down.
815
00:57:19,625 --> 00:57:21,541
He says, "you guys did such a great job
816
00:57:21,541 --> 00:57:23,125
with 1.2 billion offer.
817
00:57:23,125 --> 00:57:27,708
Now what can you do with 1.4 billion?"
818
00:57:27,708 --> 00:57:33,375
It was very shortly after that that my friend in the NTO
819
00:57:27,708 --> 00:57:33,375
was replaced.
820
00:57:33,375 --> 00:57:35,208
He was basically fired.
821
00:57:35,208 --> 00:57:41,083
And Hayden proposed a program called Trailblazer.
822
00:57:41,083 --> 00:57:43,791
And that was a multi-billion dollar program
823
00:57:43,791 --> 00:57:45,666
that was going to be basically outsourced
824
00:57:45,666 --> 00:57:49,416
and run by contractors and developed by contractors.
825
00:58:03,458 --> 00:58:06,708
[Roark] When the NSA started on
826
00:58:03,458 --> 00:58:06,708
Trailblazer,
827
00:58:06,708 --> 00:58:11,291
I asked them if they would send down the design paper
828
00:58:11,291 --> 00:58:14,041
and let me read it.
829
00:58:14,041 --> 00:58:16,750
After I read it, I called NSA
830
00:58:16,750 --> 00:58:22,083
and I asked if I could speak to the Trailblazer management.
831
00:58:22,083 --> 00:58:28,041
And I said, "I want to make sure I understand this paper."
832
00:58:28,041 --> 00:58:30,583
I said, "from what I understand,
833
00:58:30,583 --> 00:58:33,208
to modernize digitally, what you want to do
834
00:58:33,208 --> 00:58:36,083
is start with your analog system
835
00:58:36,083 --> 00:58:40,375
and evolve that into a digital system
836
00:58:40,375 --> 00:58:43,750
by putting out one part at time
837
00:58:43,750 --> 00:58:46,333
and upgrading and adding more parts."
838
00:58:46,333 --> 00:58:49,041
And they said, "yes, that's it exactly."
839
00:58:49,041 --> 00:58:52,625
And I said, "it will never work.
840
00:58:52,625 --> 00:58:55,750
It's a non-starter. It will never work."
841
00:58:59,333 --> 00:59:03,083
Why would we start from outmoded analog technology
842
00:59:03,083 --> 00:59:07,166
and try to evolve that into digital technology?
843
00:59:03,083 --> 00:59:07,166
It just-- it made no sense.
844
00:59:07,166 --> 00:59:11,583
You had to go with the new modern digital technology
845
00:59:07,166 --> 00:59:11,583
from the outset.
846
00:59:14,625 --> 00:59:17,916
One of the reasons that I supported ThinThread
847
00:59:17,916 --> 00:59:21,375
was that I thought it was far more innovative
848
00:59:21,375 --> 00:59:25,666
and much more simple and elegant in design
849
00:59:25,666 --> 00:59:27,708
than what they were considering,
850
00:59:27,708 --> 00:59:32,208
therefore probably posing fewer problems.
851
00:59:51,500 --> 00:59:53,625
[Binney] From our tests
852
00:59:51,500 --> 00:59:53,625
with our big ass graph,
853
00:59:53,625 --> 00:59:56,291
it was pretty clear to us that we had to protect
854
00:59:56,291 --> 00:59:58,916
the privacy rights of individuals.
855
01:00:00,791 --> 01:00:04,500
So we devised a way to build in protections
856
01:00:04,500 --> 01:00:07,541
and make it possible to encrypt all their attributes
857
01:00:07,541 --> 01:00:09,291
so you couldn't tell who they were
858
01:00:09,291 --> 01:00:11,250
and you couldn't analyze what they were doing
859
01:00:11,250 --> 01:00:14,750
because you couldn't identify them.
860
01:00:14,750 --> 01:00:17,500
And in cases where they weren't even in zones of suspicion,
861
01:00:17,500 --> 01:00:20,041
which we would define within the graph,
862
01:00:20,041 --> 01:00:22,416
their data wouldn't even be taken in,
863
01:00:22,416 --> 01:00:26,541
so that no one would have an opportunity to abuse
864
01:00:22,416 --> 01:00:26,541
their privacy.
865
01:00:28,166 --> 01:00:31,666
This is also metadata coming in.
866
01:00:35,083 --> 01:00:37,583
The FISA filtering tool that we had
867
01:00:37,583 --> 01:00:42,083
filtered out any American citizen
868
01:00:42,083 --> 01:00:46,291
or party that was in America
869
01:00:46,291 --> 01:00:51,583
unless it was a specific target.
870
01:00:52,958 --> 01:00:55,166
But even then, you would have to get a warrant
871
01:00:55,166 --> 01:00:57,500
to reveal the identity.
872
01:01:03,458 --> 01:01:05,750
[Binney] By 2000, we had it all connected
873
01:01:05,750 --> 01:01:09,833
and everything together and running from one end
874
01:01:05,750 --> 01:01:09,833
to the other
875
01:01:11,791 --> 01:01:13,375
in 24 hours a day
876
01:01:13,375 --> 01:01:18,583
in three different sites focused on Asia.
877
01:01:18,583 --> 01:01:21,791
The only sites that agreed
878
01:01:21,791 --> 01:01:25,083
to cooperate with us
879
01:01:25,083 --> 01:01:29,416
were those sites that were known as research sites.
880
01:01:41,333 --> 01:01:45,083
You know, I never called it a test site, but...
881
01:01:47,750 --> 01:01:50,791
I mean, they were existing sites, I mean.
882
01:01:50,791 --> 01:01:53,291
And they were producing intelligence from that
883
01:01:53,291 --> 01:01:55,958
for a long period of time.
884
01:02:13,208 --> 01:02:18,500
[Roark] We went to NSA
885
01:02:13,208 --> 01:02:18,500
and asked for a briefing.
886
01:02:20,041 --> 01:02:24,375
The SARC team came in and to my great surprise,
887
01:02:24,375 --> 01:02:29,250
the entire Trailblazer team came to the briefing uninvited.
888
01:02:30,791 --> 01:02:32,750
Bill and Ed started the briefing,
889
01:02:32,750 --> 01:02:36,541
and what was astounding was that it went all the way
890
01:02:36,541 --> 01:02:41,125
from the point of collection all the way through reporting,
891
01:02:41,125 --> 01:02:44,083
and including automated reporting.
892
01:02:44,083 --> 01:02:46,875
So I turned to the Trailblazer people,
893
01:02:46,875 --> 01:02:48,875
"are you going to incorporate this into Trailblazer?
894
01:02:48,875 --> 01:02:50,833
Wouldn't this help you?"
895
01:02:50,833 --> 01:02:54,958
And they were pretty much noncommittal and stony-faced.
896
01:02:54,958 --> 01:02:59,041
And it turns out that SARC got in a lot of trouble
897
01:02:54,958 --> 01:02:59,041
for this
898
01:02:59,041 --> 01:03:03,541
after I and other congressional staff left.
899
01:03:07,583 --> 01:03:11,416
General Hayden called in the entire SARC team,
900
01:03:11,416 --> 01:03:14,458
lined them up in his office, dressed them down,
901
01:03:14,458 --> 01:03:20,041
berated them without letting them have a chance to speak.
902
01:03:20,041 --> 01:03:24,208
And then issued a dir-gram
903
01:03:24,208 --> 01:03:26,416
telling the entire NSA
904
01:03:26,416 --> 01:03:29,583
that once a corporate decision had been made,
905
01:03:29,583 --> 01:03:32,541
that they were not to undermine it with Congress.
906
01:03:34,666 --> 01:03:39,833
In other words, they were to cover up
907
01:03:34,666 --> 01:03:39,833
any adverse information.
908
01:03:41,750 --> 01:03:45,375
It was, to me, an absolute clarion call
909
01:03:45,375 --> 01:03:47,125
to keep Congress in the dark.
910
01:03:47,125 --> 01:03:49,375
I thought it was very brazen.
911
01:03:58,375 --> 01:04:01,125
[Binney] General Hayden basically said
912
01:04:01,125 --> 01:04:04,000
ThinThread was no contribution to the Trailblazer program.
913
01:04:04,000 --> 01:04:08,166
Trailblazer is the program, and we're not gonna have
914
01:04:04,000 --> 01:04:08,166
any other program.
915
01:04:11,916 --> 01:04:14,458
ThinThread, in my view, once we had it all together,
916
01:04:14,458 --> 01:04:18,416
solved all the problems of volume, velocity, and variety.
917
01:04:20,083 --> 01:04:23,125
We had solved all those problems
918
01:04:23,125 --> 01:04:26,583
that they were claiming were problems.
919
01:04:28,291 --> 01:04:34,208
But they rejected it as even a risk mitigation process.
920
01:04:34,208 --> 01:04:36,458
I mean, that's the kind of experience I had
921
01:04:36,458 --> 01:04:40,333
with generals back in 1968 when just prior
922
01:04:40,333 --> 01:04:42,750
to the Tet Offensive we were predicting
923
01:04:42,750 --> 01:04:45,500
that offensive two months in advance.
924
01:04:54,291 --> 01:04:56,958
Some people came to me and showed me some reports
925
01:04:56,958 --> 01:05:01,041
on activity in Vietnam,
926
01:05:01,041 --> 01:05:04,000
and they said that they were preparing a major offensive
927
01:05:04,000 --> 01:05:08,125
that would go from the delta all the way up north Vietnam.
928
01:05:08,125 --> 01:05:11,083
It was all reported to all the major commanders in the field
929
01:05:11,083 --> 01:05:15,333
as well as the pentagon and everybody,
930
01:05:15,333 --> 01:05:20,291
but nobody in a position of authority paid attention to it.
931
01:05:22,625 --> 01:05:26,166
General Westmoreland was again saying to the people
932
01:05:22,625 --> 01:05:26,166
in the United States
933
01:05:26,166 --> 01:05:27,750
that we were winning.
934
01:05:27,750 --> 01:05:30,958
We're watching the situation carefully.
935
01:05:30,958 --> 01:05:36,125
And I'm confident that any further initiatives
936
01:05:30,958 --> 01:05:36,125
can be blunted.
937
01:05:38,791 --> 01:05:41,041
[Binney] I basically looked at that as
938
01:05:41,041 --> 01:05:43,833
a philosophy of the arrogance of power.
939
01:05:45,916 --> 01:05:49,958
They felt they had so much power that they were invincible.
940
01:05:55,291 --> 01:05:59,458
I had friends who were stationed in Vietnam.
941
01:05:59,458 --> 01:06:02,833
One colonel that I knew had a battalion
942
01:06:02,833 --> 01:06:06,083
stationed on the road from Saigon to Cambodia,
943
01:06:06,083 --> 01:06:08,458
which was a major point of attack.
944
01:06:12,125 --> 01:06:14,041
He, of course, had the reporting, too.
945
01:06:14,041 --> 01:06:20,041
So he had 50% of his men in the trenches all the time,
946
01:06:20,041 --> 01:06:22,208
24 hours a day...
947
01:06:24,125 --> 01:06:26,291
Until the attack.
948
01:06:29,250 --> 01:06:34,125
He was ready, and he lost one man
949
01:06:29,250 --> 01:06:34,125
on the first day,
950
01:06:34,125 --> 01:06:36,916
and he stopped them cold.
951
01:06:42,708 --> 01:06:45,708
The problem was that all the forces on either side of him
952
01:06:45,708 --> 01:06:49,458
had fallen back because they couldn't hold
953
01:06:45,708 --> 01:06:49,458
their position on the line
954
01:06:49,458 --> 01:06:51,083
because they weren't ready.
955
01:06:51,083 --> 01:06:53,541
They didn't listen to the intelligence.
956
01:06:53,541 --> 01:06:56,041
So he had to eventually withdraw.
957
01:07:00,750 --> 01:07:02,666
The point was if they were ready,
958
01:07:02,666 --> 01:07:06,166
that offensive would have gotten absolutely nowhere,
959
01:07:06,166 --> 01:07:09,333
but they didn't pay attention.
960
01:07:09,333 --> 01:07:10,791
This was a deceitful
961
01:07:10,791 --> 01:07:15,208
and treacherous act by the enemy.
962
01:07:15,208 --> 01:07:17,625
[Binney] We thought they were all idiots.
963
01:07:17,625 --> 01:07:23,125
I thought every general in the country should be fired
964
01:07:17,625 --> 01:07:23,125
after that offensive.
965
01:07:23,125 --> 01:07:25,291
All of them.
966
01:07:28,958 --> 01:07:31,166
They should have been drummed out of the service.
967
01:07:31,166 --> 01:07:33,708
I mean, we got rid of generals and all that during World War II
968
01:07:33,708 --> 01:07:36,083
for very similar kinds of negligence,
969
01:07:36,083 --> 01:07:40,250
so I don't understand why we didn't get rid of them then.
970
01:07:42,375 --> 01:07:46,166
And in terms of Americans, I think there were a little
971
01:07:42,375 --> 01:07:46,166
over 2,000 lives lost
972
01:07:46,166 --> 01:07:49,083
in that offensive.
973
01:07:49,083 --> 01:07:52,458
That doesn't count how many were wounded.
974
01:07:55,375 --> 01:07:57,291
That's why I looked at it as they were treating us
975
01:07:57,291 --> 01:08:00,333
as simply meat on the line.
976
01:08:00,333 --> 01:08:03,000
You know, throw more meat on the line.
977
01:08:28,041 --> 01:08:30,041
We begin our special coverage tonight
978
01:08:30,041 --> 01:08:31,791
with the latest on the terror attack
979
01:08:31,791 --> 01:08:34,791
against the US guided-missile destroyer Cole.
980
01:08:34,791 --> 01:08:37,458
The navy says it has recovered the bodies of seven sailors
981
01:08:37,458 --> 01:08:41,541
and is searching the mangled interior
982
01:08:37,458 --> 01:08:41,541
of the ship for ten more.
983
01:08:41,541 --> 01:08:44,125
About 35 other sailors were injured.
984
01:08:47,000 --> 01:08:49,125
[newscaster] In dreary weather
985
01:08:47,000 --> 01:08:49,125
fitting the occasion,
986
01:08:49,125 --> 01:08:51,666
the first bodies of sailors killed aboard the Cole
987
01:08:51,666 --> 01:08:54,208
arrived in Germany this afternoon.
988
01:08:54,208 --> 01:08:55,708
The blast which took their lives
989
01:08:55,708 --> 01:08:57,375
is estimated to have been caused
990
01:08:57,375 --> 01:08:59,583
by several hundred pounds of explosives
991
01:08:59,583 --> 01:09:03,083
in a new and deadly terrorist tactic.
992
01:09:05,375 --> 01:09:07,291
[newscaster] Immediately after the attack
993
01:09:07,291 --> 01:09:10,208
there was nothing left of the small local harbor craft
994
01:09:10,208 --> 01:09:13,208
which the navy says had carried the explosives.
995
01:09:13,208 --> 01:09:16,000
Despite instability in the immediate region,
996
01:09:16,000 --> 01:09:20,416
the strategic port of Aden has been used as a refueling stop
997
01:09:16,000 --> 01:09:20,416
for two years
998
01:09:20,416 --> 01:09:23,500
and the Cole was on a heightened state of alert.
999
01:09:23,500 --> 01:09:25,833
But there was no defense it seems
1000
01:09:25,833 --> 01:09:29,125
against suicide bombers in a small boat.
1001
01:09:49,666 --> 01:09:53,958
[Binney] We decided to continue
1002
01:09:49,666 --> 01:09:53,958
developing ThinThread
1003
01:09:53,958 --> 01:09:57,083
to try to insure that we had something that would
1004
01:09:53,958 --> 01:09:57,083
functionally work
1005
01:09:57,083 --> 01:09:59,250
by the end of 2000
1006
01:09:59,250 --> 01:10:02,708
so that we could address the terrorism problem
1007
01:09:59,250 --> 01:10:02,708
in the real world, not in the wish world
1008
01:10:02,708 --> 01:10:06,166
of Trailblazer, for example.
1009
01:10:11,541 --> 01:10:14,250
That's when I went to our terrorism analysis center
1010
01:10:14,250 --> 01:10:17,208
and said, "okay, what sites do you have that will--
1011
01:10:17,208 --> 01:10:19,875
that produce any meaningful information for you
1012
01:10:19,875 --> 01:10:22,166
to analyze the terrorism targets around the world?"
1013
01:10:22,166 --> 01:10:24,583
And so they gave me a list of 18 sites,
1014
01:10:24,583 --> 01:10:28,083
and so I took that as the target set to go against terrorism.
1015
01:10:28,083 --> 01:10:30,291
And then I came in November of 2000
1016
01:10:30,291 --> 01:10:34,250
and made a proposal that we do a deployment of ThinThread
1017
01:10:34,250 --> 01:10:38,750
to those 18 sites starting in January of 2001.
1018
01:10:42,041 --> 01:10:45,208
But it came back rejected.
1019
01:10:47,166 --> 01:10:49,125
So I don't know exactly who rejected it.
1020
01:10:49,125 --> 01:10:53,583
I assumed it was the chief of SID, Maureen Baginski.
1021
01:10:53,583 --> 01:10:58,708
She was the third person in rank in the agency.
1022
01:10:58,708 --> 01:11:02,291
There was the director, the deputy director, then her.
1023
01:11:09,125 --> 01:11:12,083
[Loomis] General Hayden
1024
01:11:09,125 --> 01:11:12,083
hired Bill Black
1025
01:11:12,083 --> 01:11:17,250
to come in and take over the deputy directorship.
1026
01:11:17,250 --> 01:11:22,375
Once Bill Black was brought in from SAIC,
1027
01:11:22,375 --> 01:11:25,458
where he had been the vice president,
1028
01:11:25,458 --> 01:11:27,791
the following spring, he brought in
1029
01:11:27,791 --> 01:11:32,166
another senior vice president from SAIC,
1030
01:11:32,166 --> 01:11:36,583
and that person was Sam Visner.
1031
01:11:36,583 --> 01:11:42,083
And who gets the contract to develop Trailblazer?
1032
01:11:42,083 --> 01:11:45,583
SAIC.
1033
01:11:45,583 --> 01:11:48,125
What's wrong with this picture?
1034
01:11:50,250 --> 01:11:52,750
[Binney] SAIC was a private company.
1035
01:11:52,750 --> 01:11:57,125
It is made up basically of retired NSA individuals.
1036
01:11:57,125 --> 01:12:01,166
People from NSA retire and they'll go into a company
1037
01:11:57,125 --> 01:12:01,166
like SAIC,
1038
01:12:01,166 --> 01:12:04,125
and then they'll use their contacts back at NSA
1039
01:12:04,125 --> 01:12:07,583
to get contracts back to SAIC.
1040
01:12:12,583 --> 01:12:14,708
So when Sam Visner came in to take over
1041
01:12:14,708 --> 01:12:16,625
the NSA transformation office,
1042
01:12:16,625 --> 01:12:20,291
the first thing he did was to call me to his office.
1043
01:12:20,291 --> 01:12:22,208
So I went up to his office to talk to him,
1044
01:12:22,208 --> 01:12:24,333
and when I went in there, the senior developer
1045
01:12:24,333 --> 01:12:26,583
for the Trailblazer program was there.
1046
01:12:26,583 --> 01:12:29,000
And the first thing Sam told me,
1047
01:12:29,000 --> 01:12:34,666
he said, "I do not want you briefing ThinThread
1048
01:12:29,000 --> 01:12:34,666
to anybody again."
1049
01:12:34,666 --> 01:12:36,500
And the reason he said that, of course,
1050
01:12:36,500 --> 01:12:38,875
was because we had already set up an appointment
1051
01:12:38,875 --> 01:12:41,083
to brief Charlie Allen.
1052
01:12:41,083 --> 01:12:43,041
He was the senior collection officer
1053
01:12:43,041 --> 01:12:44,458
for the intelligence community,
1054
01:12:44,458 --> 01:12:47,083
so he had a lot of influence.
1055
01:12:47,083 --> 01:12:51,125
So I asked him if he wanted me to cancel that appointment,
1056
01:12:51,125 --> 01:12:52,750
and he said, "no, no, don't do that.
1057
01:12:52,750 --> 01:12:54,208
You go ahead and finish that briefing."
1058
01:12:54,208 --> 01:12:56,291
I said, "okay, I'll do that."
1059
01:12:56,291 --> 01:12:58,208
When Charlie Allen got in there,
1060
01:12:58,208 --> 01:13:00,291
the first thing he sat down and said to us,
1061
01:13:00,291 --> 01:13:03,583
even before we started to show him anything about ThinThread,
1062
01:13:03,583 --> 01:13:06,875
he said, "I hear you have a cheap Trailblazer here,
1063
01:13:06,875 --> 01:13:09,125
and I'm here to see it."
1064
01:13:09,125 --> 01:13:10,916
Well, I mean, I had been invited.
1065
01:13:10,916 --> 01:13:12,375
Maureen Baginski had come up
1066
01:13:12,375 --> 01:13:13,833
'cause Maureen knew Charlie Allen.
1067
01:13:13,833 --> 01:13:15,875
They were friends for a long--
1068
01:13:15,875 --> 01:13:18,041
they had known each other for a number of years, I think.
1069
01:13:18,041 --> 01:13:20,083
And she was there, and she said--
1070
01:13:20,083 --> 01:13:22,416
at that point, she said, "yes, Charlie,
1071
01:13:22,416 --> 01:13:24,833
but we still need the money."
1072
01:13:26,375 --> 01:13:29,791
That was the end of our briefing on ThinThread.
1073
01:13:37,041 --> 01:13:41,208
[Loomis] On August 20th of 2001,
1074
01:13:41,208 --> 01:13:47,041
Maureen baginski called me and asked to speak with me
1075
01:13:41,208 --> 01:13:47,041
and Bill Binney
1076
01:13:47,041 --> 01:13:49,875
at 4:30 in the afternoon that day.
1077
01:13:49,875 --> 01:13:53,333
And she said to meet her in her office,
1078
01:13:53,333 --> 01:13:56,041
so Bill and I went down to her office.
1079
01:13:56,041 --> 01:14:00,708
And it was in this meeting with her that she advised us
1080
01:14:00,708 --> 01:14:03,666
that she was terminating ThinThread.
1081
01:14:03,666 --> 01:14:08,083
And she said that her decision was made because
1082
01:14:08,083 --> 01:14:09,666
she had to decide whether or not
1083
01:14:09,666 --> 01:14:12,208
she wanted to make six people unhappy
1084
01:14:12,208 --> 01:14:15,041
or almost 500 unhappy.
1085
01:14:15,041 --> 01:14:18,500
So she chose to make the six people unhappy.
1086
01:14:18,500 --> 01:14:22,041
So her decision was what I basically call
1087
01:14:22,041 --> 01:14:24,333
happiness management.
1088
01:14:35,416 --> 01:14:37,583
[newscaster] They are letting us stay up.
1089
01:14:35,416 --> 01:14:37,583
I'm not sure why.
1090
01:14:37,583 --> 01:14:39,875
Newark is allowing us to stay up.
1091
01:14:39,875 --> 01:14:44,000
We're-- only the news helicopters are allowed up
1092
01:14:39,875 --> 01:14:44,000
of the entire country.
1093
01:14:44,000 --> 01:14:47,083
We're, like, five people in the air, that's it.
1094
01:14:57,041 --> 01:14:59,416
Oh, my god, what's going on?
1095
01:15:01,833 --> 01:15:04,958
It's like the side of the building just blew out, Chad,
1096
01:15:01,833 --> 01:15:04,958
on the other side.
1097
01:15:04,958 --> 01:15:07,166
The side we can't see.
1098
01:15:07,166 --> 01:15:09,458
Look at it.
1099
01:15:15,875 --> 01:15:19,166
Oh, my God!
1100
01:15:19,166 --> 01:15:21,083
The whole tower collapsed.
1101
01:15:21,083 --> 01:15:24,541
The whole building is gone. The whole building.
1102
01:15:25,791 --> 01:15:27,708
Oh!
1103
01:15:35,458 --> 01:15:38,125
Daniela, did you hear me? The entire building collapsed.
1104
01:15:38,125 --> 01:15:40,458
It is gone.
1105
01:16:01,500 --> 01:16:03,916
The second tower is gone.
1106
01:16:23,625 --> 01:16:26,291
Oh, those poor people. Oh, God.
1107
01:16:30,125 --> 01:16:33,291
On 9/11, I had taken my father-in-law
1108
01:16:33,291 --> 01:16:35,416
to the eye doctor for an examination,
1109
01:16:35,416 --> 01:16:39,083
so I was sitting in the waiting room
1110
01:16:35,416 --> 01:16:39,083
watching television
1111
01:16:39,083 --> 01:16:41,708
while he was getting examined.
1112
01:16:41,708 --> 01:16:44,541
And that's when I saw the first plane
1113
01:16:44,541 --> 01:16:48,125
hit the tower in New York.
1114
01:16:48,125 --> 01:16:51,166
And immediately that said to me
1115
01:16:51,166 --> 01:16:54,125
that we as an agency had failed to give warning
1116
01:16:54,125 --> 01:16:57,541
of this terrorist attack.
1117
01:17:18,875 --> 01:17:21,208
When my father-in-law was done with his examination,
1118
01:17:21,208 --> 01:17:24,208
I took him home and then tried to get back into NSA
1119
01:17:24,208 --> 01:17:25,750
to see what I could do
1120
01:17:25,750 --> 01:17:29,583
to maybe help in getting information
1121
01:17:29,583 --> 01:17:31,916
about who did this and all.
1122
01:17:31,916 --> 01:17:35,625
And they wouldn't let me back in simply because
1123
01:17:35,625 --> 01:17:38,250
director Hayden had sent everybody home
1124
01:17:38,250 --> 01:17:40,375
that wasn't necessary for the job,
1125
01:17:40,375 --> 01:17:43,041
and so the guards were keeping everybody out,
1126
01:17:43,041 --> 01:17:45,666
so we couldn't get back in that day.
1127
01:17:45,666 --> 01:17:47,541
So the day after 9/11,
1128
01:17:47,541 --> 01:17:51,125
I came in dressed like I was going to sweep the floor,
1129
01:17:51,125 --> 01:17:52,916
so the guards let me in.
1130
01:17:52,916 --> 01:17:54,791
Otherwise they would have kept me out then, too,
1131
01:17:54,791 --> 01:17:57,250
because that day,
1132
01:17:57,250 --> 01:17:59,750
General Hayden had ordered everybody out
1133
01:17:57,250 --> 01:17:59,750
of the building, too.
1134
01:17:59,750 --> 01:18:03,500
So when I got in there, I went up to the SARC
1135
01:18:03,500 --> 01:18:09,750
And while in there trying to look at the material
1136
01:18:03,500 --> 01:18:09,750
on my computer,
1137
01:18:09,750 --> 01:18:12,166
my contracting--
1138
01:18:12,166 --> 01:18:14,333
president of the contracting group
1139
01:18:14,333 --> 01:18:16,500
that I had working on ThinThread
1140
01:18:16,500 --> 01:18:18,500
came over to me and said that he'd just been
1141
01:18:18,500 --> 01:18:21,500
in a contractor meeting with Sam Visner.
1142
01:18:21,500 --> 01:18:27,333
And in that meeting, Sam Visner had told him that--
1143
01:18:27,333 --> 01:18:32,083
he said to him, "do not embarrass large companies.
1144
01:18:32,083 --> 01:18:34,291
You do your part, you'll get your share.
1145
01:18:34,291 --> 01:18:36,666
There's plenty for everybody."
1146
01:18:40,500 --> 01:18:43,875
And he also said that Sam had said that,
1147
01:18:43,875 --> 01:18:47,333
"we could milk this cow for 15 years."
1148
01:18:50,125 --> 01:18:53,916
We began to go out to the workforce
1149
01:18:55,250 --> 01:18:59,541
and I would accompany Maureen Baginski.
1150
01:18:59,541 --> 01:19:04,333
The workforce took this extraordinarily hard.
1151
01:19:04,333 --> 01:19:08,125
People would ask her, "what are you gonna do?"
1152
01:19:08,125 --> 01:19:10,291
I still remember her saying,
1153
01:19:10,291 --> 01:19:14,416
"9/11 is a gift to NSA.
1154
01:19:14,416 --> 01:19:17,083
We're gonna get all the money we need and then some."
1155
01:19:17,083 --> 01:19:18,833
Direct quote.
1156
01:19:23,416 --> 01:19:26,958
"9/11 was a gift to NSA."
1157
01:19:26,958 --> 01:19:31,083
All she saw was dollars coming from congress,
1158
01:19:31,083 --> 01:19:34,916
and we would get to spend freely.
1159
01:19:34,916 --> 01:19:37,958
[Binney] It was not what
1160
01:19:34,916 --> 01:19:37,958
we were supposed to be about.
1161
01:19:37,958 --> 01:19:39,583
It wasn't about making money,
1162
01:19:39,583 --> 01:19:41,125
it was about protecting the country
1163
01:19:41,125 --> 01:19:43,125
and the free world. It wasn't-- you know,
1164
01:19:45,125 --> 01:19:47,250
wasn't how big of an empire we could build
1165
01:19:47,250 --> 01:19:49,666
or how much money we could make, you know?
1166
01:19:52,166 --> 01:19:54,458
It was just sickening.
1167
01:20:00,416 --> 01:20:02,958
In late September or early October,
1168
01:20:02,958 --> 01:20:08,291
we in the SARC were watching as all this
1169
01:20:02,958 --> 01:20:08,291
equipment started coming in
1170
01:20:08,291 --> 01:20:11,083
and piling up in the hallways and outside the SARC
1171
01:20:11,083 --> 01:20:13,875
and inside the SARC in the walkways
1172
01:20:13,875 --> 01:20:16,875
between the partitions for the desks.
1173
01:20:16,875 --> 01:20:20,791
We knew something was going on because of all this equipment
1174
01:20:16,875 --> 01:20:20,791
coming in.
1175
01:20:20,791 --> 01:20:23,750
And then later on in early October,
1176
01:20:23,750 --> 01:20:25,458
it started to disappear.
1177
01:20:25,458 --> 01:20:27,458
That meant they were assembling the hardware
1178
01:20:27,458 --> 01:20:29,625
somewhere down the corridor
1179
01:20:29,625 --> 01:20:33,250
a little bit down from where we were.
1180
01:20:33,250 --> 01:20:37,250
And then by mid-October, the second week in October,
1181
01:20:37,250 --> 01:20:39,791
some of the people who used to do the--
1182
01:20:39,791 --> 01:20:43,583
who I had under contract to do the software for us in SARC,
1183
01:20:43,583 --> 01:20:47,166
came to me and said that,
1184
01:20:47,166 --> 01:20:49,541
"you know what they're doing down there?
1185
01:20:49,541 --> 01:20:55,958
They're taking in data on every US citizen in the country."
1186
01:21:04,333 --> 01:21:06,708
To do the spying on US citizens,
1187
01:21:06,708 --> 01:21:11,083
they had to use the only software that managed
1188
01:21:06,708 --> 01:21:11,083
large-scale operations,
1189
01:21:11,083 --> 01:21:13,541
which was the software that I put together,
1190
01:21:13,541 --> 01:21:15,291
which was the backend of ThinThread,
1191
01:21:15,291 --> 01:21:16,791
that part that does the graphing
1192
01:21:16,791 --> 01:21:18,166
and the management of information
1193
01:21:18,166 --> 01:21:19,791
indexing to the graph.
1194
01:21:19,791 --> 01:21:22,166
And one of the first things they did
1195
01:21:22,166 --> 01:21:25,875
to make that process work efficiently, of course,
1196
01:21:22,166 --> 01:21:25,875
according to them,
1197
01:21:25,875 --> 01:21:31,541
was to remove of all the encryption algorithms
1198
01:21:25,875 --> 01:21:31,541
we put into it...
1199
01:21:33,000 --> 01:21:35,875
To protect the privacy rights and the identity
1200
01:21:35,875 --> 01:21:40,333
of US citizens or any other citizens
1201
01:21:35,875 --> 01:21:40,333
in that database.
1202
01:21:40,333 --> 01:21:42,708
Well, I mean, after I was told
1203
01:21:42,708 --> 01:21:45,125
that they were pulling in all this data on US citizens
1204
01:21:45,125 --> 01:21:47,625
and basically graphing the relationships
1205
01:21:47,625 --> 01:21:52,083
of every US citizen that uses a telephone
1206
01:21:47,625 --> 01:21:52,083
or anything electronic,
1207
01:21:52,083 --> 01:21:55,791
well I-- it was clear to me that I had to leave the agency.
1208
01:21:55,791 --> 01:21:58,791
I couldn't stay there, so I had to get out
1209
01:21:55,791 --> 01:21:58,791
as fast as I could.
1210
01:21:58,791 --> 01:22:03,166
Bill, Ed, and kirk became so disgusted
1211
01:22:03,166 --> 01:22:06,083
with all the resistance they were getting,
1212
01:22:06,083 --> 01:22:09,916
and with some of the personal attacks on them,
1213
01:22:06,083 --> 01:22:09,916
I think also,
1214
01:22:09,916 --> 01:22:14,250
that they decided to take an offer to retire
1215
01:22:14,250 --> 01:22:16,166
at the end of October,
1216
01:22:16,166 --> 01:22:19,875
and they told me that they planned to do that.
1217
01:22:19,875 --> 01:22:25,500
Our last breath at NSA was October 31st, 2001.
1218
01:22:25,500 --> 01:22:28,291
Halloween day. Kind of fitting.
1219
01:22:59,375 --> 01:23:02,208
[Binney] After 9/11,
1220
01:22:59,375 --> 01:23:02,208
and after we left,
1221
01:23:02,208 --> 01:23:05,666
Tom took over running ThinThread.
1222
01:23:09,000 --> 01:23:14,291
And he said, "well, let's take the software
1223
01:23:09,000 --> 01:23:14,291
in ThinThread
1224
01:23:14,291 --> 01:23:17,083
and run it against the database
1225
01:23:17,083 --> 01:23:19,625
that we've accumulated inside NSA
1226
01:23:19,625 --> 01:23:23,291
to find out if there's any information on the 9/11 attack
1227
01:23:23,291 --> 01:23:26,666
that we should have known about, but didn't.
1228
01:23:30,000 --> 01:23:35,041
[Drake] We let it run-- it was somewhere
1229
01:23:30,000 --> 01:23:35,041
around 24 to 36 hours.
1230
01:23:38,250 --> 01:23:40,166
I remember my program manager coming back
1231
01:23:40,166 --> 01:23:43,791
with the initial results
1232
01:23:43,791 --> 01:23:47,208
and they were just devastating.
1233
01:23:48,375 --> 01:23:51,125
We discovered critical intelligence,
1234
01:23:51,125 --> 01:23:53,083
Al-Qaeda and associate movement intelligence
1235
01:23:53,083 --> 01:23:54,958
that had never been discovered by NSA.
1236
01:23:54,958 --> 01:23:58,458
They didn't even know they had it in their databases.
1237
01:24:03,041 --> 01:24:07,875
But also the specific details
1238
01:24:07,875 --> 01:24:11,000
of numbers and movement
1239
01:24:11,000 --> 01:24:14,541
and times and locations--
1240
01:24:14,541 --> 01:24:17,125
travel.
1241
01:24:17,125 --> 01:24:20,125
And you're seeing the dispersal patterns
1242
01:24:20,125 --> 01:24:23,041
that occurred after it happened.
1243
01:24:23,041 --> 01:24:25,416
You're also seeing that there was parts of the plot
1244
01:24:25,416 --> 01:24:28,833
in which they weren't successful.
1245
01:24:30,375 --> 01:24:33,041
There was multiple planes that had been targeted.
1246
01:24:33,041 --> 01:24:35,833
And for a number of reasons,
1247
01:24:35,833 --> 01:24:39,583
those particular planes were not actually hijacked.
1248
01:24:44,625 --> 01:24:48,125
You can imagine the horror of realizing
1249
01:24:48,125 --> 01:24:50,416
what had not been discovered
1250
01:24:50,416 --> 01:24:54,000
and the confirmation of what was known
1251
01:24:54,000 --> 01:24:56,166
sitting in these databases.
1252
01:25:00,333 --> 01:25:05,250
What if this was discovered prior to 9/11?
1253
01:25:05,250 --> 01:25:09,708
We had the information in the databases.
1254
01:25:12,875 --> 01:25:14,333
NSA's response?
1255
01:25:14,333 --> 01:25:16,083
Completely shut the program down.
1256
01:25:25,583 --> 01:25:28,041
[Roark] 9/11 would have been avoided.
1257
01:25:28,041 --> 01:25:30,541
We would have caught the people
1258
01:25:30,541 --> 01:25:34,041
who were communicating from San Diego
1259
01:25:34,041 --> 01:25:37,416
with people abroad, with known terrorists abroad.
1260
01:25:37,416 --> 01:25:39,541
There was no way we wouldn't have caught that.
1261
01:25:53,125 --> 01:25:57,041
[Binney] After Ed and kirk
1262
01:25:53,125 --> 01:25:57,041
and I left NSA,
1263
01:25:57,041 --> 01:26:00,041
we formed a little company, a consulting company
1264
01:26:00,041 --> 01:26:03,041
we called Entity Mapping, LLC.
1265
01:26:03,041 --> 01:26:08,500
We decide to try to bring the concepts of ThinThread
1266
01:26:08,500 --> 01:26:11,000
to other agencies and government
1267
01:26:11,000 --> 01:26:14,750
and bring it to the US government
1268
01:26:11,000 --> 01:26:14,750
through another door.
1269
01:26:17,708 --> 01:26:19,458
[Binney] We were requested by
1270
01:26:19,458 --> 01:26:21,208
the Senate Intelligence Committee staffer
1271
01:26:21,208 --> 01:26:24,166
to go to the National Reconnaissance Office.
1272
01:26:24,166 --> 01:26:29,208
They manage all the satellites and reconnaissance
1273
01:26:24,166 --> 01:26:29,208
kinds of missions.
1274
01:26:29,208 --> 01:26:31,166
We were working there on a program,
1275
01:26:31,166 --> 01:26:33,500
but NSA found out about it.
1276
01:26:33,500 --> 01:26:36,958
They got the whole program terminated.
1277
01:26:40,500 --> 01:26:44,083
Then we went to customs and border protection.
1278
01:26:44,083 --> 01:26:48,083
They got us fired from that one.
1279
01:26:48,083 --> 01:26:50,791
Bill and Kirk were just infuriated by every time
1280
01:26:50,791 --> 01:26:56,333
we went to get a contract with a promising customer,
1281
01:26:56,333 --> 01:26:59,750
at the last minute, it would be shut off.
1282
01:26:59,750 --> 01:27:02,208
Happened with INSCOM, it happened with the pentagon,
1283
01:27:02,208 --> 01:27:06,166
it happened with NRO, it happened with CIA.
1284
01:27:06,166 --> 01:27:10,208
We are stopped at each one of those,
1285
01:27:10,208 --> 01:27:14,041
even though were are successful.
1286
01:27:14,041 --> 01:27:16,166
- Okay, I think we got it. - Yeah.
1287
01:27:16,166 --> 01:27:19,625
[Wiebe] Including one
1288
01:27:19,625 --> 01:27:23,958
where we were given a set of data
1289
01:27:23,958 --> 01:27:26,041
and asked to analyze it
1290
01:27:26,041 --> 01:27:29,916
even though NSA had already analyzed it.
1291
01:27:29,916 --> 01:27:34,291
We found extremely valuable material in that data
1292
01:27:34,291 --> 01:27:36,500
where NSA had not.
1293
01:27:36,500 --> 01:27:41,083
We wrote up a report, sent it up the chain.
1294
01:27:41,083 --> 01:27:43,666
A senior executive in that agency said,
1295
01:27:43,666 --> 01:27:48,333
"my god, these guys are going to embarrass Michael Hayden
1296
01:27:48,333 --> 01:27:50,250
and the people at the fort.
1297
01:27:50,250 --> 01:27:52,458
We have to stop this program."
1298
01:27:52,458 --> 01:27:56,375
And it stopped immediately. We were told to stop work.
1299
01:27:56,375 --> 01:27:58,041
Don't do anything else.
1300
01:27:58,041 --> 01:28:01,125
And they proceeded to dismantle the computers
1301
01:28:01,125 --> 01:28:02,625
that we were working with
1302
01:28:02,625 --> 01:28:05,416
and the data that we had discovered
1303
01:28:05,416 --> 01:28:08,250
and all of the intelligence
1304
01:28:08,250 --> 01:28:11,666
was wiped off the disks.
1305
01:28:21,500 --> 01:28:24,541
[Binney] NSA attempted to keep
1306
01:28:21,500 --> 01:28:24,541
the principles of ThinThread
1307
01:28:24,541 --> 01:28:27,208
being applied anywhere in the US government
1308
01:28:27,208 --> 01:28:29,125
so that no other agency in the US government
1309
01:28:29,125 --> 01:28:31,041
could take advantage of it either.
1310
01:28:31,041 --> 01:28:34,416
So in essence, they wanted to keep the US population
1311
01:28:34,416 --> 01:28:36,916
and the free world's population vulnerable,
1312
01:28:36,916 --> 01:28:39,041
which is what they did.
1313
01:28:42,875 --> 01:28:46,208
And that's why we filed the DoD IG complaint
1314
01:28:46,208 --> 01:28:50,083
in September of 2002 against NSA
1315
01:28:50,083 --> 01:28:53,291
for corruption, fraud, waste, and abuse.
1316
01:28:59,041 --> 01:29:04,416
[Loomis] Kirk drafted up
1317
01:28:59,041 --> 01:29:04,416
a very strong fraud complaint
1318
01:29:04,416 --> 01:29:07,250
and we said, "let's go with it."
1319
01:29:07,250 --> 01:29:10,166
And Diane was also a party to this as well.
1320
01:29:10,166 --> 01:29:12,083
She agreed to go along.
1321
01:29:12,083 --> 01:29:16,041
So there was Kirk, Bill, Diane, and myself,
1322
01:29:16,041 --> 01:29:20,166
and then Kirk was actually floating this by Tom Drake.
1323
01:29:20,166 --> 01:29:22,083
I was not aware that he was,
1324
01:29:22,083 --> 01:29:23,875
but he was sharing it with Tom Drake.
1325
01:29:23,875 --> 01:29:27,125
And Tom, since he was still working at NSA,
1326
01:29:27,125 --> 01:29:31,750
said that he would support us from the inside.
1327
01:29:34,333 --> 01:29:38,916
[Drake] I had access
1328
01:29:34,333 --> 01:29:38,916
to critical information
1329
01:29:38,916 --> 01:29:43,166
that clearly NSA was hiding.
1330
01:29:43,166 --> 01:29:45,833
Because of all these investigations
1331
01:29:43,166 --> 01:29:45,833
that were ongoing,
1332
01:29:45,833 --> 01:29:49,041
NSA said, "let's find where the skeletons are,
1333
01:29:49,041 --> 01:29:53,250
capture it all, and then bury the report
1334
01:29:49,041 --> 01:29:53,250
as deep as possible."
1335
01:29:53,250 --> 01:29:55,625
This was actually something that Bill Black,
1336
01:29:55,625 --> 01:29:59,291
the deputy director, was doing.
1337
01:29:59,291 --> 01:30:00,750
And the order went out,
1338
01:30:00,750 --> 01:30:04,166
"no one will ever see that report.
1339
01:30:04,166 --> 01:30:07,000
We can't show anybody
1340
01:30:07,000 --> 01:30:11,416
what ThinThread discovered that we hadn't discovered.
1341
01:30:11,416 --> 01:30:15,541
We can't show ThinThread had confirmed
1342
01:30:15,541 --> 01:30:18,958
what was clearly a failure."
1343
01:30:23,041 --> 01:30:26,000
So I was contacted officially
1344
01:30:26,000 --> 01:30:30,000
and arrangements were made for me to meet
1345
01:30:26,000 --> 01:30:30,000
with the investigators.
1346
01:30:34,458 --> 01:30:37,583
And so the DoD IG's office took that investigation on
1347
01:30:37,583 --> 01:30:39,916
with about 12 investigators,
1348
01:30:39,916 --> 01:30:42,750
and took them about two and half years to do it.
1349
01:30:42,750 --> 01:30:44,458
They finally published their report
1350
01:30:44,458 --> 01:30:47,875
in, I think it was, January of 2005.
1351
01:30:47,875 --> 01:30:52,083
And at the time, about 98% of it was redacted
1352
01:30:52,083 --> 01:30:55,541
because it was so damning to NSA.
1353
01:31:07,250 --> 01:31:09,708
[Loomis] Many of the redactions
1354
01:31:07,250 --> 01:31:09,708
are on paragraphs
1355
01:31:09,708 --> 01:31:12,041
that are marked unclassified.
1356
01:31:14,833 --> 01:31:16,666
So it was clear to me
1357
01:31:16,666 --> 01:31:21,125
that the dirty laundry was blackwashed.
1358
01:31:23,083 --> 01:31:27,416
[Binney] This was our justice department
1359
01:31:23,083 --> 01:31:27,416
covering up for those crimes.
1360
01:31:35,583 --> 01:31:37,541
[Wiebe] In 2005,
1361
01:31:37,541 --> 01:31:42,083
Trailblazer was declared an abject failure,
1362
01:31:42,083 --> 01:31:46,375
having wasted billions of dollars.
1363
01:31:46,375 --> 01:31:49,666
A lot of millionaires were made during that time,
1364
01:31:49,666 --> 01:31:53,666
but not much intelligence got done.
1365
01:31:53,666 --> 01:31:59,916
It was the largest failure in NSA history.
1366
01:31:59,916 --> 01:32:02,125
People don't realize that.
1367
01:32:02,125 --> 01:32:04,000
And yet, general Hayden,
1368
01:32:04,000 --> 01:32:08,458
who presided over the largest failure in NSA history,
1369
01:32:08,458 --> 01:32:12,875
was promoted to a higher position of authority,
1370
01:32:12,875 --> 01:32:16,541
made deputy director of National Intelligence,
1371
01:32:16,541 --> 01:32:19,166
and then promoted again
1372
01:32:19,166 --> 01:32:23,083
and made director of Central Intelligence.
1373
01:32:23,083 --> 01:32:27,791
It is odd when mankind promotes failure.
1374
01:32:27,791 --> 01:32:29,958
Something is wrong.
1375
01:32:36,166 --> 01:32:39,083
On the 26th of July of 2007,
1376
01:32:39,083 --> 01:32:41,333
the FBI decided to raid four people.
1377
01:32:41,333 --> 01:32:44,166
That was Kirk Weibe, Ed Loomis,
1378
01:32:44,166 --> 01:32:46,083
Diane Roark, and myself.
1379
01:32:50,958 --> 01:32:52,458
So they fabricated evidence
1380
01:32:52,458 --> 01:32:55,208
to get a warrant signed by a judge
1381
01:32:55,208 --> 01:32:58,208
to go in and raid our houses and take our material.
1382
01:32:58,208 --> 01:33:01,416
Specifically, they were after all the material
1383
01:33:01,416 --> 01:33:03,875
that was related to ThinThread.
1384
01:33:09,500 --> 01:33:11,166
My son answered the door and let them in,
1385
01:33:11,166 --> 01:33:12,833
and they came in with their guns drawn
1386
01:33:12,833 --> 01:33:14,875
and pushed him out of the way at gunpoint,
1387
01:33:14,875 --> 01:33:17,125
and came into the bedroom where my wife was getting dressed
1388
01:33:17,125 --> 01:33:19,041
and pointed guns at her, and then came into the bathroom
1389
01:33:19,041 --> 01:33:22,916
where I was taking a shower and pointed a gun at me.
1390
01:33:28,666 --> 01:33:31,750
I didn't hear them at first, apparently.
1391
01:33:31,750 --> 01:33:33,666
By the time I heard them,
1392
01:33:33,666 --> 01:33:35,875
it sounded like they were going to break down the door.
1393
01:33:35,875 --> 01:33:40,083
They were rattling it madly and banging it back and forth.
1394
01:33:40,083 --> 01:33:42,041
When the raid occurred here,
1395
01:33:42,041 --> 01:33:46,208
it was such a shock to my inner core.
1396
01:33:46,208 --> 01:33:49,333
I couldn't believe it was happening.
1397
01:33:49,333 --> 01:33:52,250
[Roark] I went to call
1398
01:33:49,333 --> 01:33:52,250
my attorney first.
1399
01:33:52,250 --> 01:33:54,041
She told me to ask for the affidavit
1400
01:33:54,041 --> 01:33:56,166
that justified the raid.
1401
01:33:56,166 --> 01:33:59,000
I asked them, they said it was classified
1402
01:33:56,166 --> 01:33:59,000
and I couldn't see it.
1403
01:33:59,000 --> 01:34:02,416
As soon as I got off the phone, I realized they had gone
1404
01:33:59,000 --> 01:34:02,416
to the office
1405
01:34:02,416 --> 01:34:06,666
and picked up all the most relevant information,
1406
01:34:06,666 --> 01:34:10,083
all of the stuff about NSA that was on the shelves,
1407
01:34:10,083 --> 01:34:12,625
which was, I think, a first indication
1408
01:34:12,625 --> 01:34:15,958
that they had entered the home previously.
1409
01:34:15,958 --> 01:34:20,666
When all that equipment was taken from my house,
1410
01:34:20,666 --> 01:34:24,041
my computers, my data, my newspapers,
1411
01:34:24,041 --> 01:34:30,083
my memorandums that I had shared with friends of mine,
1412
01:34:30,083 --> 01:34:33,083
I just could not believe
1413
01:34:33,083 --> 01:34:37,166
that I was perceived as an enemy
1414
01:34:37,166 --> 01:34:39,000
by my own country.
1415
01:34:39,000 --> 01:34:42,666
I think-- I keep thinking if this happened to us,
1416
01:34:42,666 --> 01:34:45,583
and we were educated people,
1417
01:34:45,583 --> 01:34:49,250
sophisticated in government ways,
1418
01:34:49,250 --> 01:34:52,125
who could get some help,
1419
01:34:52,125 --> 01:34:55,333
what happens to the man on the street?
1420
01:34:55,333 --> 01:34:58,791
What happens to the 18-year-old kid?
1421
01:35:33,041 --> 01:35:37,250
[Binney] When I found out that all
1422
01:35:33,041 --> 01:35:37,250
the things that we were doing
1423
01:35:37,250 --> 01:35:40,250
as a result of that 9/11,
1424
01:35:40,250 --> 01:35:44,416
and I heard vice president Cheney's statement about,
1425
01:35:44,416 --> 01:35:46,500
"we have to go to the dark side,"
1426
01:35:46,500 --> 01:35:50,708
I've looked at it as a total destruction
1427
01:35:46,500 --> 01:35:50,708
of our society,
1428
01:35:50,708 --> 01:35:53,333
and we lost all moral standing in the world
1429
01:35:53,333 --> 01:35:57,041
as a result of going to the dark side.
1430
01:35:59,708 --> 01:36:01,708
It was just sad.
110675
Can't find what you're looking for?
Get subtitles in any language from opensubtitles.com, and translate them here.