Aug 13 2014

Another brick in the (falling) REAL-ID wall

July 21, 2014 marked “Phase 2” of implementation of the REAL-ID Act.

What does this mean, and does it matter?

As of July 21, drivers’ licenses and other state ID credentials issued by US states or territories that haven’t been certified by the DHS to comply with the REAL-ID Act cannot be accepted by Federal agencies for access to ID-controlled “restricted” areas of Federal facilities (“i.e., areas accessible by agency personnel, contractors, and their guests”).

Because Federal agencies typically issue their own ID credentials to their own employees and regular contractors, this will mostly affect occasional visitors to Federal facilities. NASA, for example, which has facilities in states that have not been certified by DHS as sufficiently compliant, has issued this advice to would-be visitors:

Effective July 21, 2014, the implementation of Phase II of the Real-ID Act (2005) restricts the use of state ID from non-compliant states (including New York) as an acceptable form of identification for federal facilities (including NASA GISS). If you are intending to visit GISS and only have a standard drivers license from a non-compliant state, please ensure that you have a second form of ID (passport, military ID, etc.) to avoid unnecessary complications.

It isn’t clear from this notice, or others we’ve seen, what these “unnecessary complications” will amount to. Visitors with ID credentials from non-compliant states will, presumably, be treated as visitors without “valid” state ID credentials, but that begs the questions of whether or on what basis they will be allowed entry after additional scrutiny or some form of alternate ID verification, allowed entry but only if escorted by staff and not allowed unescorted, or denied entry entirely.

In its eseence, the REAL-ID Act was intended to mandate the creation of a distributed national identity card system. The key “compliance” requirement for states and territories is participation in a linked, distributed database of ID-card and biometric information about all ID cardholders nationwide.

The intent of the Federal law is to force states to particpate in (and absorb the cost of) this scheme, sparing the Feds the costs and hassle of issuing national ID cards and providing (implausible) deniability as to whether it’s a “national ID” at all: “See, it’s not a ‘national’ ID card. It’s still issued by your state.”

But since the Feds probably don’t have jurisdiction over state issuance of drivers’ licenses or state ID cards, the REAL-ID Act relies on threats, rather than direct orders, to extort compliance by states resistant to registering their citizens and residents in a national ID database.

Read More

Aug 05 2014

One million people are on watchlists, but all travelers are being watched

A million people around the world were listed in the US government’s “Terrorist Identities Datamart Environment” (TIDE) as of August 2013, of whom 680,000 were included in the “Terrorist Screening Database” (TSDB), according to a classified breakdown of watchlist entries and uses published today by The Intercept.

Two weeks ago, The Intercept made public the US government’s watchlisting/witchhunting manual. Now the same publication from the aptly named First Look Media has provided a first look at how many people are affected by “watchlisting” practices, and who these people are.

(Ironically, these revelations come at the same time that the National Counter-Terrorism Center (NCTC) is advertising “Watchlisting” jobs.)

The internal government documents published by The Intercept categorize TSDB entries by “group affiliation”, rather than by what (if any) threat these people are believed to pose. But 280,000 of the 680,000 people listed in the TSDB were described as having “no recognized terrorist group affiliation”.

Of the entries on the watchlists in the TSDB, 47,000 were on the no-fly list, and 16,000 were on the “selectee” list of people subjected to more intrusive “screening” whenever they fly.  Five thousand “US persons” (US citizens and permanent residents or green-card holders) were on watchlists, including 800 on the no-fly list and 1,200 on the “selectee” list.

As of August 2013, according to these documents, 240 new names were “nominated” to these lists each day, while only 60 entries were removed. That means the million-entry TIDE list was growing at the rate of 180 entries per day, or 65,000 entries per year.

But don’t be misled by the government’s Orwellian use of the term “watchlist” into thinking that “only” a million people are being “watched” by the government or treated as supected terrorists when they travel. US government surveillance of travelers is a dragnet that affects all travelers, not just those on watchlists.

All air travelers are “watched” and our movements and associations are recorded in secret, permanent government dossiers.  All travelers are profiled and assigned secret “risk assessment” scores each time we fly.  All travelers must obtain individualized, per-passenger per-flight government permission before any airline is allowed to issue a boarding pass.

The million people on US government watchlists (as of August 2013) are those who are subjected, on the basis of this blacklisting and dragnet surveillance, to even more intrusive surveillance and/or other restrictions on the exercise of fundamental rights, such as the rights to freedom of association and freedom of movement.

Jul 28 2014

US government’s witchhunting manual made public

The Intercept has published the March 2013 edition of the US government’s Watchlisting Guidance. This 166-page document, previously kept secret as Sensitive Security Information (SSI), provides standardized but not legally binding “guidance” to Federal executive agencies as to how, on what basis, and by whom entries are to be added to or removed from terrorism-related government “watchlists”, and what those agencies are supposed to do when they “encounter” (virtually or in the flesh) people who appear to match entries on those lists.

The Intercept didn’t say how it obtained the document.

The “Watchlisting Guidance” is the playbook for the American Stasi, the internal operations manual for a secret political police force.  As such, it warrants careful and critical scrutiny.

Most of the initial reporting and commentary about the “Watchlisting Guidance” has focused on the substantive criteria for adding individuals and groups to terrorism watchlists.  Entire categories of people can be added to watchlists without any basis for individualized suspicion, as discussed in Section 1.59 on page 26 of the PDF.

These criticisms of the watchlisting criteria are well-founded. But we think that there are at least as fundamental problems with what this document shows about the watchlisting procedures and the watchlist system as a whole.

Read More

Jul 14 2014

Is it a “state secret” that the no-fly list is unfair?

Faced with a series of decisions by federal District Court judges that the procedures for putting names on the “no-fly” list lack the due process of law required by the Constitution, and with more no-fly and “watchlist” (blacklist) cases on track toward trial, the government is trying to claim that the basis (if any) for putting a US citizen on the no-fly list is a “state secret” exempt from judicial review.

The case of Gulet Mohamed, a Virginia teenager who was placed on the US no-fly list while he was visiting family members overseas, is one of the most egregious examples of the FBI’s systematic abuse of the no-fly list. It appears that Mr. Mohamed was placed on the no-fly list in order to pressure him to become an FBI informer, as was done with many other US citizens. When Mr. Mohamed’s visa expired and he couldn’t fly home to the USA, he was taken into immigration detention in Kuwait, where he “was repeatedly beaten and tortured by his interrogators,” one of whom spoke “perfect American English.”

After a series of government attempts to get Mr. Mohamed’s complaint dismissed for on jurisdictional and other grounds were rejected, the case was set for the first trial ever on the merits of a no-fly order. (The government had avoided such a trial in the case of Dr. Rahinah Ibrahim by conceding, on the eve of trial, that her initial placement on the no-fly list had been an FBI mistake.)

At this point, however, the government has invoked the “nuclear option” by moving to dismiss Mr. Mohamed’s complaint on the basis of a declaration by Attorney General Eric Holder that the reason (if any) why Mr. Mohamed is on the no-fly list is a “state secret” and that it would endanger national security to allow the court to review the no-fly decision or the evidence (if any) supporting it.

Read More

Jun 26 2014

Court rules “no-fly” review procedures lack due process

In a significant reaffirmation of the decision earlier this year in Ibrahim v. DHS, another federal District Court has now found that the US government’s administrative procedures for reviewing and appealing “no-fly” decisions violate both Constitutional standards of due process and the requirements of the Administrative Procedure Act.

The ruling this week by Judge Anna J. Brown of the US District Court for the District of Oregon, in Portland, comes in the case of Latif, et al. v. Holder, et al. This lawsuit was brought in 2010 by the ACLU on behalf of ten US citizens and permanent residents (green card holders). Their stories, as summarized in Judge Brown’s latest ruling, vary, but all of them have been prevented from boarding international flights to or from the US, and/or overflying US airspace.

Some of the plaintiffs in Latif v. Holder have been trapped in the US, separated from family and/or employment opportunities abroad, while others are trapped overseas, unable to return home. At least one of the plaintiffs who booked passage on a passenger-carrying ocean freighter to return to Europe from the USA was denied boarding by the ship’s captain as a result of a “recommendation” from the US Customs and Border Protection division of DHS.

In 2012, the 9th Circuit Court of Appeals overturned the government’s effort to prevent the District Court from hearing this case. Last year, finally beginning to consider the merits of the complaint, Judge Brown ruled that international travel by air is a right that can only be restricted in accordance with due process of law.

Judge Brown’s latest ruling addresses whether the government’s current procedures, particularly the DHS “Traveler Redress Inquiry Program” (TRIP), provide such due process. Judge Brown has now decided that they do not, and must be changed to provide the subjects of no-fly orders with:

  1. Notice (at least after they have been denied boarding on an international flight and sought redress) of whether they are on the US government’s no-fly list.
  2. At least a summary of the nature of the “suspicion” and the evidentiary basis for the administrative decision to place them on the no-fly list.
  3. An opportunity for some sort of in-person hearing to present evidence to rebut the allegations and evidence against them.

Echoing Judge Alsup’s finding in Ibrahim v. DHS, Judge Brown found that the opportunity to submit exculpatory or rebuttal evidence through the TRIP program is meaningless without notice of what allegations have been made, on what evidentiary basis, and thus of what needs to be rebutted.

Read More

Jun 01 2014

The rights of migrants, refugees, and asylum seekers

At the invitation of the U.N. Office of the High Commissioner for Human Rights (OHCHR), we’ve submitted the following recommendations concerning the right to freedom of movement as it relates to migrants, refugees, and asylum seekers at ports, airports, borders, and checkpoints:

As an NGO primarily concerned with the right to freedom of movement, the Identity Project (PapersPlease.org) welcomes the invitation and opportunity to provide this information to the Office of the High Commissioner for Human Rights, for your use in preparing your report to the General Assembly concerning the human rights of migrants while in transit, including in ports and airports and at borders and checkpoints.

We are pleased that Resolution A/RES/68/179, as adopted by the General Assembly on 18 December 2013,  “Reaffirm[s] that everyone has the right to freedom of movement and residence within the borders of each State and the right to leave any country, including his or her own, and to return to his or her country,” in accordance with Article 12 of the International Covenant on Civil and Political Rights (ICCPR).

Unfortunately, that right, and in particular the right to leave any country, is routinely and systematically violated. These violations have especially grave consequences for asylum seekers who are prevented from fleeing countries where they are experiencing, are at risk of, and/or have a well-founded fear of persecution.

Airlines routinely prevent refugees and asylum seekers from boarding flights on which they seek to depart from countries where they are being persecuted.  In many of these cases, these refugees and asylum seekers would be eligible for admission and asylum on arrival in other countries, if they were allowed to travel to places of refuge.

Read More

May 27 2014

Ars Technica asks DHS for PNR data, but gets none of it

Cyrus Farivar, Senior Business Editor at Ars Technica, reports today on the initial response to his Freedom Of Information Act (FOIA) request to US Customs and Border Protection (CBP) for CBP’s records about his travel history, including CBP’s copies of airline Passenger Name Records (PNRs).

Nine months after making his request (seven months longer than the maximum allowed by law), Mr. Farivar received 72 pages from the CBP TECS database including a log of his exits and entries from the US for the last 20 years, beginning in 1994 when he was 12 years old.  He also received one report of a “secondary inspection”. He didn’t even remember the incident, but one of the CBP agents who questioned him recorded in his permanent CBP file that he was a journalist, in apparent violation of the prohibition in the Privacy Act on keeping records of how US citizens like Mr. Farivar exercise rights protected by the First Amendment.

Most significantly, despite explicitly requesting “any and all Passenger Name Records,” Mr. Farivar received none of them, even though CBP requires all airlines operating flights to, from, or through the airspace of the US to provide them to CBP, in their entirety including any information collected by airlines or their agents for their own business purposes, or entered into PNRs by other travel companies for their business purposes.

CBP’s response to Mr. Farivar was typical. As we’ve noted previously, two New York Times reporters are suing the DHS (the parent department of CBP) for failing to provide records about their travel which they requested, including PNR data.  CBP Every response we have seen to a request to CBP for its travel history records about an individual has been obviously incomplete, in one or another way.  We’ve seen other CBP secondary inspection records recording a traveler’s profession, what book a traveler was reading, and other information about activities protected by the First Amendment.  See the examples in our reports here and here and this presentation.

Mr. Farivar has filed an administrative appeal, as should anyone who receives such a response. CBP claimed to have lost all record of one of our appeals, and of the person who signed the certified mail receipt for it. We had to sue before we received much of our PNR data. While our request was pending CBP retroactively exempted most of the data in its “Automated Targeting System” from the access requirements of the Privacy Act, but some PNR data should still be available, albeit partially redacted, in response to a FOIA request.

If you’d like to find out some of what records CBP has about you, we’ve provided forms here.  Please let us know if you’d like help interpreting responses.

May 23 2014

TSA includes all air travelers in pre-crime profiling

Since late last year, we’ve gotten several inquires from readers wondering why they got a boarding pass marked “TSA Pre-Check” or were sent through the “Pre-Check” lane at a TSA checkpoint even though they hadn’t participated in the “TSA Pre-Check Application Program”.

The confusion stems from the TSA’s own misleading publicity about the program, which tries to persuade travelers “voluntarily” to provide additional information to be used by the TSA, in exchange for the hope of being subjected to slightly less intrusive searches at TSA checkpoints.

The logical (but wrong) inferences are that TSA Pre-Check is a members-only program, and that the Pre-Check lane at a TSA checkpoint is only for those travelers who have “applied” and been “accepted” into the program.

There are actually three distinct components to “TSA Pre-Check” as a pre-crime scheme:

  1. “Voluntary” submission and collection of additional personal information about those travelers who chose to participate in the TSA Pre-Check Application Program.
  2. Pre-crime profiling of all travelers and determination of a “risk assessment” score for each traveler, based on all information available to the TSA including the information, if any, submitted through the TSA Pre-Check Application Program.
  3. Graduated treatment of travelers at TSA checkpoints, including searches of varied intrusiveness and potential total denial of passage, on the basis of these risk assessments and other secret algorithms.

Only the application component of the program — the submission of additional personal information by travelers to the TSA — is voluntary.  The TSA obtains information from various sources about all travelers. All travelers are profiled. All travelers are assigned risk assessment (pre-crime) scores based on whatever information is available to the TSA.  All travelers are subjected to a more or less intrusive search, and may or may not be allowed to pass through the checkpoint, on the basis of these scores and other secret factors.

Some travelers who are assigned sufficiently low risk assessment scores and meet other secret criteria are directed to the “Pre-Check” lane and subjected to slightly less intrusive searches, regardless of whether they participated in the TSA Pre-Check Application Program.  The TSA calls this process “managed inclusion” in TSA Pre-Check.

A traveler whose risk assessment score is low enough, and who meets the other secret criteria (again, regardless of whether they participated in the TSA Pre-Check Application Program) can be selected for less intrusive search when she applies for a boarding pass.  The TSA’s assignment of such a traveler to the Pre-Check lane is sent to the airline with, or as part of, the permission message or Boarding Pass Printing Result (BPPR) for that traveler sent to the airline by the TSA.

The TSA’s Pre-Check designation is printed on the boarding pass and included in a 2D bar code in IATA-standard format. “For flights originating in the USA, the digital signing of barcodes and the management of security certificates and key pairs is required by the TSA.”

The TSA also assigns some travelers to Pre-Check lanes on the spot at its checkpoints, using secret criteria and techniques including a randomizer app (like the magical Sorting Hat at Hogwarts) to determine how intrusively to search each person.

Through this process, the TSA chooses one of four basic levels of search and seizure for each traveler:

  1. “TSA Pre-Check” (slightly less intrusive search)
  2. “Standard screening” (including virtual strip-search or manual groping)
  3. “Secondary screening” (more intrusive search including more thorough groping)
  4. “No-fly” (denial of the right to travel by common carrier, possibly accompanied by other adverse actions)

There are refinements within these basic categories. In a document filed with the court following the trial of Dr. Rahinah Ibrahim’s lawsuit challenging her placement on the no-fly list, the government disclosed that that each entry in the Terrorist Screening Database (which includes the no-fly list and the list of “selectees” for secondary screening) includes a “handling code” indicating what airline and checkpoint personnel should do if that person attempts to check in for a flight or pass though a TSA checkpoint.

We don’t know how many handling codes there are. But according to the government’s court filing:

[FBI Agent] Kelley designated Dr. Ibrahim as “handling code 3.” … [T]he majority of individuals in the TSDB were assigned handling codes 3 or 4…. Defendants state that the advantages of Handling Code 3 include allowing law enforcement officers to ask the individual probing but non-alerting questions, and searching the individual’s passport [REDACTED].”

Presumably, other handling codes include those that tell airline or checkpoint personnel to attempt to detain the traveler and contact local law enforcement agencies, the FBI, or the Terrorist Screening Center.

You can’t “opt out” of pre-crime profiling by choosing not to participate in the TSA Pre-Check Application Program.  You will be profiled, on a per-flight basis, every time you try to fly.

“Anything you say may be used against you,” although the TSA doesn’t say this on the TSA Pre-Check application forms.  If you participate in the Pre-Check Application Program, the additional information you provide will be added to the other inputs to the TSA’s black box. It might result in the TSA assigning you a lower risk score, and subjecting you to a less intrusive search.  Or it might result in the TSA assigning you a higher score, and searching you more intrusively or preventing you from traveling by air.

May 22 2014

Albuquerque Journal investigates DHS “Mission Creep”

For many years after 9/11,  the Department of Homeland Security got a “free pass” from most mainstream media. This has been especially true of the largely unreported negative impact of the DHS and the homeland security industrial complex at the state and local level.

We’re pleased to call the attention of our readers to one of the most notable exceptions to date: a recent series of articles by Michael Coleman, Washington correspondent for the Albuquerque Journal, on what the DHS and its contractors and state and local accomplices are actually doing “on the ground” in New Mexico:

  1. Homeland Security a ‘runaway train’ (April 27, 2014)
  2. NM footprint grows: ‘We’ve up-armored’ (April 28, 2014)
  3. Feds help militarize police agencies (April 29, 2014)
  4. Editorial: Homeland’s ‘mission creep’ works on 3 levels (May 4, 2014)
  5. Follow-up: New DHS head says agency needs change (May 4, 2014)

We’ve been paying particular attention to events in Albuquerque, of course, as part of our work with Phil Mocek, whose lawsuit against DHS and Albuquerque police personnel is currently on appeal from the US District Court for the District of New Mexico to the Court of Appeals for the 10th Circuit.

But we suspect that what the Albuquerque Journal uncovered in New Mexico is a typical case study that could usefully be repeated in any other state or metropolitan area.  We hope that national and other local journalists are inspired by this example to look into DHS activities throughout the country.

May 08 2014

Court to “review” TSA’s use of virtual strip-search machines

As we’ve noted previously, the US Court of Appeals for the 11th Circuit has scheduled oral arguments June 4th in Miami as part of its “review” of the TSA’s use of virtual strip-search machines. The Court may decide on the day to close portions of the argument to the public, but has overruled the latest objections of the TSA, which claimed that any oral argument would necessarily reveal “secrets” that would jeopardize aviation security.

Jonathan Corbett will be speaking for himself, pro se, before the Court of Appeals, as he has done throughout the tortured history of his lawsuit.  Mr. Corbett has posted the latest round of appellate briefs in Corbett v. TSA, which provide a case study of how the TSA has sought to evade judicial review of its actions even when they involve extra-judicial restrictions on the fundamental rights of US citizens, residents, and visitors.

Corbett v. TSA charges that the TSA is engaging in unreasonable, suspicionless, warrantless, and unconstitutional searches of travelers. The case was originally filed in 2010 in U.S. District Court. But the TSA successfully argued that challenges to the Constitutionality of TSA orders, such as those requiring travelers to submit to either naked scanners (“advanced imaging technology”) or manual groping of their genitals (“enhanced pat-downs”), can only be heard by the Courts of Appeals. After the Supreme Court declined to review that jurisdictional finding, Mr. Corbett refiled his case in the Court of Appeals as a “petition for review” of the TSA’s (secret) orders.

The TSA’s claim is that the Court of Appeals can only review the “administrative record” submitted by the TSA itself. There is no trial, discovery, cross-examination, or adversary fact-finding process in the appellate court. The TSA can pick and choose what evidence to submit for review.  Portions of that evidence have been shown to Mr. Corbett (on condition that he not discuss them publicly), but other portions have been submitted to the Court of Appeals ex parte and under seal. Mr. Corbett doesn’t know what they allege, and has no way to know what secret arguments or allegations he should be trying to rebut.

In a separate case, the Court of Appeals for the D.C. Circuit ruled that the TSA had violated the Administrative Procedure Act by failing to conduct a formal “rulemaking” concerning its use of virtual strip-search machines. Such a rulemaking must include notice of the proposed rules, an opportunity for the public to comment on them, and consideration of those public comments by the TSA before the rules are finalized.

Twenty months after being ordered to do so by D.C. Circuit Court, the TSA published proposed vitrtual strip-search “rules” and provided an opportunity for public comments.  More than 5,000 people and organizations submitted comments, including the Identity Project. Almost all of the commenters objected to the TSA’s virtual strip-searches and groping of travelers.

More than a year after the close of the comment period, the TSA has yet to publish any analysis or response to these public comments, or any final “rules”. And although the TSA is required by the Administrative Procedure Act to consider these public comments as part of its rulemaking, the agency doesn’t appear to have submitted any of them to the 11th Circuit as part of the “administrative record” to be reviewed in Corbett v. TSA.  This appears to be either an admission that the public comments have been ignored in the TSA’s decision-making, in flagrant violation of the APA, or an equally blatant attempt to deceive the 11th Circuit about the actual content of the record before the TSA.