New Zealand is Mass Spying on Friendly Neighbors and Passing the Data to the US NSA

NZ spy base

Waihopai spy base (Wikipedia)

There was a time when migrants to New Zealand cited their home countrys’ surveillance cultures, and the erosion of their civil liberties, among the reasons for their move. Not any more.

A week after New Zealand entered the war in Iraq, the whistle blowing website -The Intercept – has started to publish details of New Zealand’s spying activities as a member of the Five Eyes alliance.

What is emerging is a picture of a country that indiscriminately vacuums up private data on people living in the Pacific region, including its own citizens, and hands it all to the US National Security Agency (NSA).

The story has made the first three pages of the New Zealand Herald. Its journalists and Nicky Hager have been working with The Intercept to bring the story to New Zealanders

David Fisher, writing for the New Zealand Herald dryly observed

New Zealand won the support of the entire Pacific in its campaign for a seat on the United Nations Security Council, campaigning with the slogan “New Zealand stands up for small states”. These revelations will see comparisons between New Zealand’s claimed benevolent leadership role across the region and its actions for the Five Eyes intelligence network…more here


Here’s a copy of The Intercept’s report, published March 5, 2015

New Zealand Spies on Neighbors in Secret ‘Five Eyes’ Global Surveillance

By Ryan Gallagher 

New Zealand’s electronic eavesdropping agency is spying on its neighbors and sharing communications it intercepts in bulk with the National Security Agency through a controversial Internet mass surveillance system, according to newly revealed secret documents.

Government Communications Security Bureau, New Zealand’s equivalent of the NSA, has been sweeping up the data from across the Asia-Pacific region, targeting island nations such as Tuvalu, Nauru, Kiribati, Samoa, Vanuatu, the Solomon Islands, Fiji, Tonga and France’s overseas territories New Caledonia and French Polynesia. Each of these small nations and territories maintains friendly relations with New Zealand.

The surveillance, reported Wednesday by the New Zealand Herald in collaboration with The Intercept, is being carried out by GCSB from an intelligence base in New Zealand’s Waihopai Valley (pictured above). Intercepted data collected at the Waihopai site is being shared through an NSA surveillance system called XKEYSCORE, which is used to analyze vast amounts of emails, internet browsing sessions and online chats that are intercepted from some 150 different locations worldwide.

The documents on the spying, obtained by The Intercept from NSA whistleblower Edward Snowden, shine a light on New Zealand’s role in the so-called Five Eyes, a surveillance alliance that includes electronic eavesdropping agencies from New Zealand, the United States, the United Kingdom, Canada and Australia.

GCSB is perhaps the smallest player in the alliance in terms of its funding and number of staff, but the agency is seen as an important player because of New Zealand’s location in the world.

GCSB has been designated a geographic “area of responsibility” to monitor communications in the Southwest Pacific as part of Five Eyes efforts to maintain global surveillance coverage, according to the documents. One NSA memo notes that New Zealand provides “valuable access not otherwise available to satisfy US intelligence requirement.” This includes gathering intelligence about trading partners in the Asia-Pacific region and about governments in neighboring islands, the documents show. A New Zealand intelligence source confirmed these details, telling the New Zealand Herald that GCSB was monitoring government ministers and senior officials, government agencies, international organizations and non-government organizations in the South Pacific nations.

Last year, The Interceptreported that the New Zealand agency was planning a secret project to tap into Internet data flowing across undersea cables. The Waihopai base focuses on gathering data and communications from another source — vacuuming them up as they are being transmitted through the air between satellites. The spying station, designated the codename IRONSAND by the NSA, has previously been linked to a Five Eyes satellite surveillance network known as ECHELON.

In recent years, there has been a dramatic secret shift in the surveillance policy at the Waihopai base.

Former GCSB officials told the New Zealand Herald that, during the 1990s, Waihopai intercepted a large number of phone calls and emails from the Asia-Pacific region, but only retained and gave its allies communications collected from certain specified targets. This has now changed. In 2009, Snowden documents show, GCSB upgraded its capabilities in order to collect “full-take” data at the base and then share it directly onto XKEYSCORE. Full-take is a term used by surveillance agencies to refer to large-scale collection of both content of communications and the metadata — details showing who is contacting whom and when. Instead of targeted collection against a specific set of individuals, full-take surveillance sweeps up all communications indiscriminately.

Once the New Zealand agency makes the data accessible through the XKEYSCORE system, it can then be analyzed by spies across the Five Eyes. One secret British memo, dated from 2011, noted: “GCSB have given us access to their XKS [XKEYSCORE] deployments at IRONSAND, a GCSB comsat [communications satellite] site which is rich in data for the South Pacific region.” The memo added: “Specifically, we can access both strong selected data and full-take feed from this site.”

Following the earlier disclosures about GCSB’s surveillance last year, Snowden wrote in an op-ed for The Intercept that New Zealand citizens’ communications intercepted by the Waihopai base were among those being shared with the Five Eyes agencies. “At the NSA I routinely came across the communications of New Zealanders in my work with a mass surveillance tool we share with GCSB, called ‘XKEYSCORE,’” Snowden wrote. New Zealand’s prime minister John Key later conceded that Snowden’s allegation “may well be right,” but he refused to comment on whether the country’s spies used XKEYSCORE.

On Wednesday, GCSB declined to comment about the latest revelations. A spokesman for the agency said in a statement to The Intercept and the New Zealand Herald: “The GCSB exists to protect New Zealand and New Zealanders. We have a foreign intelligence mandate. We don’t comment on speculation about matters that may or may not be operational. Everything we do is explicitly authorized and subject to independent oversight.”

The NSA had not responded to a request for comment at time of publication.

— Freyja Richards (@FreyjaRichards) March 4, 2015

You may also be interested in

NZ customs wants to see your password (NZ Herald)

Customs is seeking new powers including requiring a person to provide a password or access to their electronic devices.

The agency has also floated other possibilities including collection of biometric information and making passengers empty their pockets if asked by an officer, even if there is no reasonable suspicion.

A discussion paper on changes to the Customs and Excise Act has been released, outlining a number of changes the agency wants considered. Currently, when Customs examines a person’s electronic device the owner is not legally obliged to provide a password or encryption key…

…NZ Council for Civil Liberties chair Thomas Beagle said there were a number of serious issues about the workability of such a change.

That included the sharing of computers by people, and that files could appear encrypted to Customs even if they were not.

Mr Beagle said if penalties for not providing a password or encryption key were too soft a real criminal would cop them rather than comply, but if they were too harsh innocent people would be victimised…read on