~/langley $ cat ./family-jewels.txt // permission denied. try again in 2007.
THE CIA
burn after reading · the receipts survived anyway
[01] THE AGENCY
Chartered in 1947 to collect foreign intelligence. The word "foreign" turned out to be a suggestion.
The National Security Act built it for human intelligence and analysis, and within a year it had picked up covert action as a hobby: coups, front companies, proprietary airlines, the occasional poisoned cigar. In 2015 it added a directorate for digital innovation, which is the polite name for an in-house hacking shop. Spies with malware budgets, what could go wrong. Section two has the changelog.
The honest record exists because the agency once wrote it down itself. In 1973 the director ordered a compilation of everything the agency had done that violated its own charter: the "family jewels," 693 pages of domestic surveillance, mail opening, wiretaps, and drug experiments. It stayed locked up for 34 years. They knew it was illegal. The proof is that they made a list.
And it never stopped being a startup guy. Since 1999 the agency has run In-Q-Tel, its own venture capital arm, seeding data-mining and surveillance startups whose products flow back to Langley and out into the commercial stack you use every day. The trench coat was always optional. The cap table wasn't.
// the file header
| 1947 | chartered by the national security act. foreign intelligence only, allegedly |
| hq | langley, virginia. the campus is named after george bush |
| 1973 | the "family jewels": an internal list of its own illegal domestic ops. released 2007 |
| 1975 | church committee drags the jewels into daylight, invents intelligence oversight |
| 1999 | in-q-tel: the agency's own VC fund, investing in data and surveillance startups |
| 2015 | gets a dedicated hacking directorate. the arsenal leaks two years later |
// a spy agency with a venture fund and a malware shop. what it doesn't have is a conviction rate.
[02] THE RECEIPTS
Mind-control experiments on unwitting citizens: LSD in drinks, hypnosis, prisoners, hospital patients. The director ordered the records destroyed in 1973. What we know survives because of the Church Committee and a misfiled box of financial paperwork that a 1977 FOIA request shook loose. The shredder missed the invoices.
The CIA and Germany's BND secretly owned the Swiss cipher-machine company selling "secure" encryption to more than 120 governments, for decades, reading the traffic the whole time. The agency's own internal history called it "the intelligence coup of the century." Revealed in 2020, long after everyone responsible had retired.
The hacking directorate's toolbox, published: exploits for phones, routers, cars under study, and Weeping Angel, which turned Samsung smart TVs into microphones that record while pretending to be off. The agency built cyberweapons and lost custody of them. Your TV's threat model includes its former owners.
92 videotapes of detainee interrogations, including waterboarding, destroyed by the agency in 2005 while courts and the 9/11 commission were asking about exactly that material. The justice department investigated. Nobody was charged. The man who ordered it wrote a memoir.
While the senate intelligence committee investigated the torture program, agency personnel searched the committee's own computers. Director Brennan: "nothing could be further from the truth." The inspector general confirmed it months later. Brennan apologized, kept his job, and the oversight body learned what oversight is worth.
From 1953 to 1973 the agency opened more than 215,000 letters of Americans, photographed the contents, and built watchlists from the correspondence. Illegal from day one, known to be illegal internally, run for twenty years anyway. The ratchet does not require permission.
$ cat ./mkultra/* > not found. destroyed by director's order, 1973. $ cat ./interrogation-tapes/* > not found. shredded 2005. (92 files) $ cat ./crypto-ag/ownership.txt > [REDACTED] until a newspaper does it for you. // the filesystem has two states: classified and destroyed. // transparency happens to this agency. never by it.
[03] RUBICON
Crypto AG is the lesson that never expires: a backdoored encryption product, sold with a straight face, for half a century.
Run the numbers on it. A respected Swiss firm, neutral flag, glossy brochures, real engineers, satisfied customers on every continent. The machines worked. The ciphers ran. Diplomats and generals in over 120 countries trusted their most sensitive traffic to a product whose actual owner was reading it before breakfast. Switzerland's reputation was the marketing. The rigged algorithm was the product. It worked perfectly. It just worked for the seller.
This is why "trust us, it's secure" is a threat model. Every closed-source messenger, every proprietary "military-grade" gadget, every cloud that promises privacy from inside a black box is asking you to believe that RUBICON could never happen again, from the people who already did it once, for fifty years, and called it the coup of the century in their own files. The only crypto that deserves trust is math you can check: open source, audited code, end-to-end keys that you hold. Everything else is a Crypto AG brochure with better fonts.
And note what didn't happen afterward: no reckoning, no prosecutions, no structural change. The BND got queasy and pulled out in the early 90s; the CIA stayed in the business until the 2010s. The institution that did it is intact, funded, and now shares a mission space with an agency that taps the backbone. The incentive structure that produced RUBICON has never been touched. Assume it is producing something right now.
// the scandal isn't that they did it. it's that doing it cost them nothing.
[04] VERDICT
Trust open math, audited code, and nothing that ships from a closed room.
The record is consistent across seventy years: experiment, destroy the evidence, deny under oath, apologize a generation later, repeat. You can't vote this away and you can't FOIA it in time to matter. What you can do is refuse the product category. Encryption that you can verify is the one thing RUBICON proves they can't fake at scale, which is why the state keeps asking for the keys and its bigger sibling taps the wire instead. Pick tools with published source and published audits, assume everything else is a brochure, and read the manifesto for why this was always the only answer.
// they stamped it burn after reading. read it anyway. then go encrypt something.