Revealed: NSA program collects ‘nearly everything a user does on the internet’
• XKeyscore gives ‘widest-reaching’ collection of online data — • NSA analysts require no prior authorization for searches — • Sweeps up emails, social media activity and browsing history
Context & Ripple Effects
This lands at the peak of the Snowden cascade: within a month the Guardian's sources had already forced out PRISM's traffic-tapping (per the corpus, overseas companies were pulling back from US cloud providers over it), revealed the NSA's push to obtain master encryption keys from large internet firms, and put the Utah data center on a September completion clock — though blueprints reported in late July suggested it would hold less than assumed.
What XKeyscore adds is the analyst-facing layer beneath those stories: per the Guardian, a tool that collects emails, social media activity and browsing history 'nearly everything', with searches requiring no prior authorization. It converts earlier collection claims into a working search engine, and it arrives while the NSA runs an internal damage assessment over the leaks and senior officials concede misinformation has muddied public statements about the programs.
First-order effects
- Confirmed by the reporting: NSA analysts can query XKeyscore without prior authorization, making near-total internet collection directly searchable at the desk rather than gated case-by-case.
- US cloud and web-service providers take a further reputational hit on top of the PRISM fallout, since the same foreign enterprise customers already spooked now learn browsing and social media data are swept up too.
Second-order effects
- Foreign governments and enterprises have added reason to move workloads onto non-US infrastructure or push domestic-data-localization rules, accelerating the de facto split of the cloud market along jurisdictional lines.
- Encryption becomes the defensive battleground: with the NSA separately seeking master keys from large internet companies, HTTPS adoption and key-custody practices turn into competitive differentiators for US platforms trying to retain overseas users.
Third-order effects
- If the pattern holds — collection tools revealed faster than oversight can respond, amid an internal damage review and admitted official misinformation — the structural pressure shifts to Congress and courts to re-legislate bulk collection authority rather than rely on classified program rules.
- The Utah data center's reported capacity shortfall hints that the binding constraint on this kind of surveillance is becoming analysis and search tooling like XKeyscore, not raw storage.
The trend: The 2013 Snowden disclosures are moving bulk internet surveillance from secret program design to a global policy fight over where data lives and who can search it.