176: NSL

Episode Summary

Executive Summary: The episode traces Nick Merrill’s fight against secret FBI National Security Letters (NSLs) after he received one demanding customer data without a warrant and under gag order. With the ACLU and later EFF, he challenged NSLs as unconstitutional, but the government repeatedly delayed, amended the law, and ultimately withdrew the letter to end standing. The episode ends by showing Merrill’s shift to privacy-by-design tech, building services that minimize data collection.

Main Topics: Origins of Nick Merrill’s privacy and tech interests (Priority: 4/5): Merrill’s early exposure to hacker culture, constitutional law, and the rise of the internet shaped his interest in technology, civil liberties, and access to communication tools. The FBI National Security Letter incident (Priority: 5/5): Merrill received a secret FBI letter demanding customer data, forbidding disclosure to anyone, and citing NSL authority under the Patriot Act and executive order. Constitutional challenge and court battles (Priority: 5/5): With the ACLU, Merrill argued NSLs violated the First, Fourth, and Fifth Amendments; the case went through multiple court rounds, stays, renamings, and government appeals. Government secrecy, gag orders, and legal maneuvering (Priority: 5/5): The transcript emphasizes how gag orders prevented public scrutiny, how the government amended the law mid-litigation, and how it withdrew the letter to eliminate standing. EFF, librarians, and broader NSL resistance (Priority: 4/5): Cindy Cohen and the EFF expanded the fight using additional cases from telecom and cloud providers, showing NSLs were widely used and often challenged only in secret. Privacy by design as the technological solution (Priority: 5/5): After the legal fights, Merrill pivoted to building privacy-focused systems—Calyx OS, Calyx hotspot, and Freely—to reduce metadata and make surveillance less effective.

Key Arguments: NSLs are constitutionally troubling because they can suppress speech, compel disclosure without a warrant, and restrict access to counsel. Secret legal authorities are vulnerable to abuse when the public cannot see how often or why they are used. The Patriot Act-era NSL process lacked meaningful judicial oversight and probable cause review, undermining Fourth Amendment principles. Government secrecy and gag orders create structural asymmetry: individuals and companies cannot publicly challenge what they cannot disclose. Mid-litigation statutory amendments can be used strategically to moot cases and avoid final judicial review. Privacy-by-design technology can reduce the amount of data available to governments and data brokers, making some surveillance demands ineffective. Data minimization, encryption, and anonymous account structures are practical defenses when legal remedies stall. NSLs appear to have been used far more broadly than terrorism cases alone would justify, suggesting overreach.

Data Points: Year of first telephone switch invention: 1889 - Story about the undertaker and operator rerouting calls inspired automation. Year of 2600 Magazine discovery context: 1980s - Merrill recalls finding the hacker magazine in Grand Central Station during his youth. Age when Merrill first met hackers: 14 - He attended early hacker gatherings while still very young. Year Merrill started ISP: 1994 - He used inheritance money to launch one of NYC’s first ISPs. Initial ISP setup: 8 modems - He filled an unused fireplace space in his East Village apartment with modems and a Linux server. T1 monthly cost: about $1,000/month - Used to illustrate early internet connectivity costs for businesses. T3 speed: 45 megabits per second - Described as astronomically huge at the time. NSL law citation: 18 U.S. Code § 2709 - Cited in the FBI letter as statutory authority. Court case year: 2004 - The ACLU filed Doe v. Ashcroft on April 9, 2004. Public reporting period in Inspector General report: 2001–2005 - Cindy Cohen references NSL use during this interval. NSLs issued: hundreds of thousands - Inspector General report cited by Cohen and Merrill. Terrorism prosecutions: 550 - Reported figure compared against the volume of NSLs. Initial gag duration under later amendments: up to 3 years - Congress later changed eternal gags to time-limited ones. Merrill’s company reach: over 100 clients - His ISP had expanded into hosting/security work for major clients.

Pivotal Quotes: "This is the first telephone switch ever invented in 1889. Invented because one guy didn't trust humans to connect the calls and decided to use technology to solve his problem." — Jack Rhysider: Opening anecdote connecting automation and distrust of intermediaries to the episode’s privacy theme. "There's no stamp on this from a court. There's no judge's signature. This isn't being issued by a court. This is just coming directly from the FBI." — Nick Merrill: His immediate reaction to the secret FBI National Security Letter demanding data. "I believe in math, I believe in encryption, I believe in all this kind of stuff. And I think that we as technologists can do something to make the problem better." — Nick Merrill: Explaining his pivot from litigation to privacy-by-design technology.

Implications: The episode shows that secrecy-enabled surveillance powers can outpace accountability, but also that litigation plus privacy-by-design tech can constrain them. For companies and users, minimizing stored data and maximizing encryption can materially reduce exposure.