NSA Snoops Extend Ops to Online Games
World of Warcraft and other games have been viewed by the NSA and its British twin as potentially fertile ground for intelligence gathering. BitTorrent and hacking websites "are simply already monitored too much to make much sense for terrorists and serious criminals," noted Alan Webber, principal analyst with Asymmetric Insight. "Games provide a different way for the exchange of information."
The U.S. National Security Agency and British counterpart GCHQ have monitored the activities of online gamers, according to documents published Monday that were leaked by whistleblower Edward Snowden.
The two agencies gained access to the online Xbox Live console network, the documents suggest, as well as deploying real-life agents into the virtual realms of Blizzard's World of Warcraft and Linden Labs' Second Life. Once inside, agents monitored the activity of some gamers as well as recruiting potential informants.
Obtained by The Guardian, the files date back to 2008 and were published in partnership with The New York Times and ProPublica.
The NSA did not respond to our request for further information.
Digital 'Dead Drop'
The agencies were motivated by a fear that terrorists and criminal networks could use online games to communicate secretly, move money or even plot attacks while hiding in plain sight.
"Today it is more difficult than ever not to be seen on the internet, so the game becomes one of finding ways not to stand out," Jim Purtilo, associate professor with the computer science department, at the University of Maryland, told TechNewsWorld.
"For a while, people interested in anonymity would communicate with one another via a digital 'dead drop' -- some innocuous electronic place where one party can leave information for another," Purtilo explained. "You might recall that is how General Petraeus famously exchanged messages with a paramour, for example, but as also shown by that case, the technique only works for so long.
"So many records are preserved for traffic analysis these days that investigators can work back to reconstruct social networks just as soon as one party becomes of interest," he added.
Indeed, BitTorrent and hacking websites "are simply already monitored too much to make much sense for terrorists and serious criminals," noted Alan Webber, principal analyst with Asymmetric Insights. "Games provide a different way for the exchange of information."
Virtual Goods Transmit Real Information
Online gaming worlds are also filled with objects that can often be shared among players, and this creates possibilities that go way beyond a dead drop.
"Think of that virtual map," Webber told TechNewsWorld. "What else can it contain? Information can be stored inside those objects."
Given the Internet's scope, "the cat-and-mouse game thus continues, with one group looking for increasingly obscure ways to message one another, and the other group working to preserve increasingly invasive mounds of data," said Purtilo.
Of course, observed in a gaming context, it could be difficult for a government agency to tell whether an online discussion is about a real-world plot or in-game strategy. That, however, may ultimately be secondary.
"Honestly, this isn't really what the NSA and the Brits are doing," said Webber. "They're not really monitoring those conversations as much as looking to see whether disenfranchised youth might be recruited by these criminal or terrorist organizations.
"Gamers have technical skills, and many disenfranchised people find solace in these games," he added. "The games can become a recruiting ground."
So far, there have been no reports indicating that the two agencies' game-monitoring efforts have produced any beneficial results, noted Webber.
"We all hope investigators are effective in ferreting out real dangers, but the more aggressive the tactics, such as trolling game rooms on the Web, the more the danger that innocent, even if incautious, speech might needlessly bring people under police suspicion," Purtilo said.
"If officials look hard for violent-sounding speech, they're going to find it, but its discovery does not automatically translate into a public safety benefit," he concluded. "We should also all hope that casting such a broad net for data simply doesn't become a job security policy for agencies."