Terrorists love Gmail but we made the Internet: ex-NSA and CIA director

  • Liam Tung (CSO Online)
  • — 16 September, 2013 11:12

Terrorists could use any one of several free US-based Web email services but they prefer Gmail, according to former NSA and CIA director Michael Hayden.

The former US intelligence boss who retired in 2008 and now speaks as security consultant made the claim at a speech in Washington DC on Sunday, referring to Gmail as an “Internet service provider” rather than a Web-based email service provided by Google.

A Washington Post tech blog reported on Sunday Hayden saying, "Gmail is the preferred Internet service provider of terrorists worldwide".

"I don't think you're going to see that in a Google commercial, but it's free, it's ubiquitous, so of course it is," he added.

Hayden made the comments as he defended the amendments in 2008 to the Foreign Surveillance Intelligence Act (FISA) which cleared the NSA to legally tap servers located in the US so long as it only gathered intelligence on non-US citizens.

Hayden told the [[xref:http://www.afr.com/p/national/transcript_interview_with_former_KnS7JDIrw73GWlljxA7vdK |Australian Financial Review|]] in July the amendments dealt with an “anomaly” in FISA that treated all communications routed through the US as though they were its own citizens, therefore preventing the agency from spying on them.

Hayden sees the US government’s surveillance capabilities as a by-product of the platform being built there: America could be remembered “the way the Romans are remembered for their roads”.

As a “quintessentially American” platform, information flows through servers located in the US and it just happens that the government “takes a picture of it for intelligence purposes”, he said.

Hayden’s comments come amidst speculation that knowledge of the NSA’s PRISM program could chill consumption by non-US users of US cloud services.

A recent survey by industry organisation Cloud Security Alliance found that 10 per cent of 207 non-US members had cancelled contracts with US service providers following revelations of the program. A subsequent report claimed it could cost US cloud providers up to $35 billion by 2016 in forgone income.

But despite the potential impact on some US providers, as CSO Australia reported in July, some claim to have benefited, such as US-based secure cloud-storage provider SpiderOak.

Follow @CSO_Australia and sign up to the CSO Australia newsletter.

Tags: Gmail, internet, securty

Microsoft confirms HTTP Strict Transport Security for IE 12

READ THIS ARTICLE
DO NOT SHOW THIS BOX AGAIN [ x ]
Comments are now closed.
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Endpoint Management Solutions

Endpoint Security Management

Latest Jobs
Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.