~/nsa $ open us-984xn_overview.pptx // classification: TOP SECRET. audience: eventually, everyone.
PRISM
white light in · your life out · $20m a year, per the slides
[01] THE SLIDE DECK
PRISM was never a hack. It was a partnership: nine companies, one agency, and a legal instrument where the break-in used to go.
On June 6, 2013, the Washington Post and the Guardian published slides from a 41-page internal NSA presentation, courtesy of a contractor with a conscience. The deck described a program, codename PRISM, designation US-984XN, that pulled email, chats, photos, stored files, video calls, and logins from America's biggest providers under Section 702 of FISA. Targets must be non-US persons reasonably believed to be abroad. No judge signs off on any individual target. The slides bragged that PRISM was the most-cited source in the president's daily brief, and priced the whole operation at roughly $20 million a year. Your inbox, wholesale, costs less than a freeway interchange.
One slide promised "collection directly from the servers of these U.S. Service Providers." Within hours, every company on the logo slide denied giving the government "direct access" to its servers. Both statements held up. The companies were compelled by court order to deliver the data, and most built dedicated drop-boxes to hand it over. The deny-everything press release and the deliver-everything pipeline ran on the same corporate letterhead. The data flowed either way; only the preposition was in dispute.
// provider onboarding, per the slides
| 2007 | microsoft. first through the door |
| 2008 | yahoo, after losing its secret court fight |
| 2009 | google, then facebook. paltalk too, somehow |
| 2010 | youtube joins its parent |
| 2011 | skype, then aol |
| 2012 | apple, five years after microsoft |
// the slide is a product roadmap. the product is you.
[02] THE RECEIPTS
One company actually fought. Yahoo challenged the directives in the secret FISA court in 2007 and lost; the government threatened fines of $250,000 a day for noncompliance. Yahoo was gagged about all of it until the documents were declassified in 2014. Resistance was legal, futile, and unspeakable.
PRISM is the polite half: ask the provider, receive the data. The same 702 authority also feeds "upstream" collection, taps on the internet backbone itself, with telecom cooperation. One pipe asks the company, the other is the company. The allies split the cables among friends.
Targets must be foreigners abroad, but everyone they talk to comes along, Americans included. The NSA spent over a decade declining to estimate how many. The word for sweeping in your conversations without a warrant is "incidental," which is also how you'd describe rain at sea.
Data collected for foreign intelligence gets queried for Americans by name, no warrant attached. The FISA court's own opinions documented improper queries on George Floyd and January 6 protesters, 19,000 donors to a congressional campaign, a sitting member of Congress. The dragnet for them, the search bar for you.
After all the abuse reports, Congress reauthorized Section 702 in April 2024 (RISAA) and widened the definition of "electronic communication service provider," reaching businesses that merely have access to equipment carrying communications. The scandal's punishment was a bigger mandate. The ratchet only turns one way.
Within hours of publication, Google, Facebook, Microsoft, and Apple issued denials with eerily similar phrasing: no "direct access," never heard of PRISM. True on both counts. PRISM was the NSA's internal codename, and the access went through a legal letterbox. Lawyers wrote those denials to be accurate. Nobody wrote them to be honest.
$ ./request --provider yahoo --comply=false > fine schedule: $250,000/day. reconsider? [Y/y] $ ./ask-provider --do-you-participate-in-prism > we have never heard of any program called PRISM. > (true. that's our codename for them, not theirs.) // every denial was accurate. so was the collection. // when both sides are telling the truth and you still know nothing, that's the design.
[03] THE HANDSHAKE
PRISM is the merger nobody voted on: the corporate database and the state subpoena, finally on speaking terms.
The state never had to build the panopticon. The corporations built it as a business model, one quarterly earnings call at a time, and the state simply filed the paperwork to read it. That's the whole trick. Surveillance that would take an agency decades and trillions to construct gets assembled for free by companies competing to know you better, and then accessed through a court order you will never see, from a court that meets in secret, under a gag that makes the arrangement unmentionable. The subpoena is the API. Big tech is the collection infrastructure; the NSA is just its most privileged customer, and the only one that doesn't pay list price.
This arrangement breaks consent at the root. A privacy policy can disclose data sharing with advertisers, with "partners," with anyone the lawyers can name. It cannot disclose a program the company is legally forbidden to acknowledge exists. Yahoo couldn't tell you it had fought and lost. Nobody could tell you about the drop-boxes. You cannot consent to a program you are not allowed to know exists, and every checkbox you ticked between 2007 and 2013 was signed in that darkness. The companies knew. The court knew. The line item in the budget knew. The only party outside the room was the subject of the slides.
// public-private partnership: they're the public's private parts, partnered against the public.
[04] VERDICT
The provider cannot hand over what the provider cannot read.
That's the entire countermeasure, and it's not theoretical. PRISM works because the companies hold your plaintext; end-to-end encryption removes the plaintext from the building, and the $250,000-a-day fine schedule has nothing left to threaten. This is why the leak triggered an encryption boom the agency still lobbies against, why five governments at once keep asking for lawful-access backdoors, and why privacy can't be delegated to entities that answer to subpoenas before they answer to you. The tools exist today and the stack is published. Encrypt at the endpoint and the logo slide loses a logo.
// white light went in. your life came out. encrypt the light.