~/ukusa $ cat treaty-1946.txt // classified for 64 years. you weren't a party. you were the subject.
FIVE EYES
five democracies · one dragnet · zero ballots cast on it
[01] THE PACT
In 1946 five countries agreed to share everything they intercept. They told their voters in 2010. The intercepts came first by 64 years.
The UKUSA agreement grew out of wartime codebreaking: the US and UK signed, then folded in Canada, Australia, and New Zealand. The deal splits the planet into collection zones and pools the take. For decades the agreement's existence was itself secret; the text was finally declassified in June 2010, by which point the network it created had been intercepting your grandparents, your parents, and you.
You weren't supposed to learn even that much. ECHELON, the alliance's system for sifting satellite traffic, was dragged into daylight by journalists in the late 80s and 90s, and in 2001 the European Parliament ran a year-long investigation and concluded the system was real. The committee's practical advice to European citizens: use encryption. That is an elected body reviewing an allied spy network and recommending self-defense.
The club also has outer rings. Nine Eyes and Fourteen Eyes add European partners with lesser privileges, the latter formally called SIGINT Seniors Europe, which sounds like a cruise package and works like one: all-inclusive, everything shared, no refunds.
// the roster
| USA / NSA | the budget, the satellites, the cables, the appetite |
| UK / GCHQ | sits on the transatlantic fiber landings. location, location |
| Canada / CSE | quiet, polite, runs experiments on airport wifi |
| Australia / ASD | hosts Pine Gap, the southern hemisphere's ear |
| NZ / GCSB | five million people, full membership, full obligations |
| nine eyes | + denmark, france, netherlands, norway |
| fourteen eyes | + germany, belgium, italy, spain, sweden |
// "second party" is the official term for the inner five. you are third party. so is everyone you know.
[02] THE RECEIPTS
Built for the Cold War, kept for everything else. The EU Parliament's 2001 inquiry heard allegations the dragnet's take helped American firms beat European rivals, including a contested Saudi aircraft deal. National security, broadly construed, includes the order book.
GCHQ taps the fiber optic cables landing in Britain and buffers the take: days of full content, weeks of metadata, shared with the NSA. UK law is friendlier to bulk interception than US law, so the cables get tapped under the friendlier flag. The data doesn't care which.
NSA and GCHQ jointly tapped the private links between Google and Yahoo datacenters overseas, hoovering millions of records, no warrant needed because the splice sat outside the US. The leaked slide marks the spot: "SSL added and removed here :-)". Hand-drawn.
In 2013 it came out that the NSA had been monitoring the German chancellor's mobile, one leader among dozens on the list. Germany is a Fourteen Eyes partner. The tiers are real: some allies share the take, other allies are the take.
New Zealand's GCSB illegally surveilled Kim Dotcom, a NZ resident, ahead of the 2012 raid on his mansion. The prime minister apologized in parliament. Then the law was amended so the same surveillance would be legal next time. Apology accepted, loophole installed.
CBC, working from Snowden documents, revealed Canada's CSE had used a major airport's free wifi to identify travelers' devices and then tracked them through other locations for days afterward. Internally framed as a trial run of the capability. Of what, exactly, was never put to a vote.
$ ./collect --target our-citizens > DENIED: constitutional restriction. $ ssh gchq.uk "./collect --target their-citizens" && scp gchq.uk:take.tgz . > transfer complete. 0 laws broken. // it isn't domestic surveillance if an ally does the typing. // the pipeline launders jurisdiction the way banks launder money.
[03] THE LOOPHOLE
The alliance is not five agencies cooperating. It is one agency with five legal systems to choose from.
Every member operates under a domestic rule that sounds reassuring: we do not spy on our own citizens. None of them operates under a rule against spying on each other's. So the NSA, barred from warrantless collection on Americans, partners with an agency that has no Fourth Amendment to worry about. GCHQ, whose oversight regime was politely described by its own documents as "a selling point" to the Americans, taps the cables and shares. What would be a scandal collected at home arrives sanitized, as liaison product, a gift from a friend. Nobody broke their own law. The laws were simply arranged in a circle, each one facing outward.
This is why "we don't spy on our own citizens" is true the way a card trick is true. Watch the sentence carefully and every word holds. Watch the system and your data crosses three jurisdictions before lunch. The state's incentives built the machine, PRISM and friends fed it, and the alliance structure exists precisely so that no single member's courts ever see the whole picture. Oversight is national. Collection is not. That mismatch is the founding feature.
// five flags, one database, zero judges with jurisdiction over the whole thing.
[04] VERDICT
Borders don't protect packets. Math does.
Your citizenship is a legal fact, and your traffic doesn't have one. The moment a packet leaves your router it is foreign to somebody, and the alliance made sure somebody is always allowed to look. You can't vote the treaty away; it predates your vote and survived every government that inherited it. What survives contact with all five jurisdictions is encryption that none of them holds the keys to. Start with tools that work today, see what the biggest member actually built, read how we found out, and remember the companies carrying your packets were tapped too, with a smiley face in the margin. Money that travels needs the same treatment: cash that doesn't report back.
// the eyes share everything with each other. share nothing with the eyes.