Book summary “The Snowden files”: summary

Introduction

You live in an era of total digital surveillance where intelligence agencies quietly record your communications, web searches, and daily movements. Governments justify this vast harvesting of data as a necessary defense against terrorism, but you rarely get to see the actual machinery of state espionage.

Luke Harding details how systems administrator Edward Snowden shattered this secrecy by stealing thousands of classified documents to expose the unprecedented global reach of the NSA and GCHQ. The book traces Snowden's path from a conservative IT contractor to an ideological whistleblower, his clandestine meetings with journalists in Hong Kong, and the resulting geopolitical fallout.

• How did a twenty-nine-year-old contractor bypass high-level security to access state secrets?
• What specific programs allow intelligence agencies to tap into major technology companies?
• How did governments and media outlets respond when the documents finally went public?

1. The Snowden Backstory and Surveillance Origins

TheTrueHOOHA and Early Ideology

Edward Snowden spent years developing his technical expertise and expressing libertarian, pro-gun, and anti-government views anonymously online under the handle TheTrueHOOHA. Between 2001 and 2009, you could find him authoring nearly 800 comments on the technology website Ars Technica. He discussed Linux servers and stock trading while voicing extreme hostility toward government leaks and state surveillance.

In 2009, TheTrueHOOHA posted a furious rant on Ars Technica expressing outrage when the New York Times published classified details about covert programs targeting Iran.

From the CIA to Contractor Work

Snowden's posting as a CIA telecommunications officer in Geneva marked a turning point where he grew deeply disillusioned with how his government functioned abroad. While maintaining computer security for US diplomats, you could observe intelligence operatives using manipulative tactics. They got a Swiss banker drunk to coerce him into driving so they could arrest and recruit him.

Snowden was 24 years old when sent to Geneva. He grew cynical after witnessing covert operations and unfair diplomatic immunity practices while living at Quai du Seujet.

After resigning from the CIA, Snowden capitalized on the post-9/11 outsourcing boom by working as a high-paying private contractor for Dell inside NSA facilities.

Because top-secret clearance and advanced IT skills were in high demand, Snowden easily transitioned through the revolving door between government intelligence and corporate tech firms. He left the CIA in 2009 and subsequently took an IT contractor job at an NSA facility in Japan. You might notice how his political ideology shaped his view of these institutions. He was deeply influenced by right-wing libertarianism, the US Constitution, and the philosophy of Ron Paul. He viewed state expansion and social programs with intense suspicion.

He supported Ron Paul's 2008 presidential campaign and argued that individuals should rely on themselves rather than running to the state for social security.

The 9/11 Catalyst and STELLAR WIND

The massive expansion of global internet and telecommunications surveillance was triggered directly by the 9/11 terrorist attacks. Frightened and angered by the attacks, the US political establishment grew willing to invade individual privacy. Simultaneously, rapid technical developments made mass eavesdropping feasible. Within 72 hours of the attacks, NSA director Michael Hayden pushed existing legal authorities to the limit by matching known terrorist numbers with international calls.

The Bush administration bypassed Congress and traditional legal oversight by secretly launching the STELLAR WIND program to collect massive amounts of communications data.

Fearing that a public debate over amending FISA would compromise intelligence sources, the White House instructed Hayden to proceed in secret. STELLAR WIND collected telephone communications, telephone metadata, internet communications like emails, and internet metadata without initial court approval.

President George W. Bush signed the authorisation for STELLAR WIND on 4 October 2001, backed by an initial outlay of $25 million.

2. The Exfiltration and Hong Kong Rendezvous

Edward Snowden moved to Hawaii in March 2012. He worked first for Dell and later for Booz Allen Hamilton as a systems administrator at the Kunia Regional Security Operations Center. This role granted him broad access to classified intranet systems and files that ordinary analysts could not see, providing the opportunity to harvest internal agency documents.

Snowden utilized his administrative privileges in Hawaii to harvest classified files and orchestrate a secure meeting with journalists in Hong Kong.

Snowden rented a modest bungalow in Waipahu, Hawaii, while his partner Lindsay Mills continued her pole-dancing and photography pursuits, remaining largely unaware of his secret plans. He earned an annual salary of $122,000 at Booz Allen Hamilton plus a housing allowance. Before joining Booz Allen Hamilton, his combined annual salary and housing allowance in Hawaii reached $200,000. He also made $250 in campaign donations to Ron Paul.

The Breaking Point

While performing administrative maintenance, Snowden found a 2009 NSA inspector general report documenting how the Bush administration ran STELLAR WIND, a program collecting millions of Americans' data without a warrant. Compounded by Director of National Intelligence James Clapper falsely testifying to the Senate that the government did not wittingly collect data on millions of Americans, Snowden concluded that democratic oversight had completely broken down.

The classified 2009 NSA inspector general report contained 51 pages detailing illegal wiretapping. In March 2013, James Clapper told the Senate intelligence committee that the US government did not wittingly collect mass data on Americans.

Establishing Contact

To prevent detection and safely transmit state secrets to journalists, Snowden used the handle Verax, meaning truth-telling, referencing historical dissenters. He attempted to contact Glenn Greenwald and Laura Poitras using encrypted channels, providing step-by-step instructions and eventually sending thumb drives with secure communication software.

Snowden sent a private YouTube tutorial to Glenn Greenwald showing how to install PGP encryption software after Greenwald initially failed to set it up.

The Exfiltration

Snowden utilized his high-level system privileges as a ghost user on NSAnet and GCHQ's GCWiki to access restricted machine lists and documents without leaving electronic footprints. Operating during off-hours when colleagues had left, he used thumb drives under the guise of system maintenance to bridge network airgaps and extract thousands of files. Approximately 1,000 NSA sysadmins were allowed to view parts of the internal system. His secondary document cache delivered to Laura Poitras held 3 to 4,000 items.

Snowden told his Booz Allen Hamilton bosses that he was feeling unwell and needed time off due to epilepsy before vanishing on May 20.

Snowden's Operational Security

Snowden was acutely aware that intelligence agencies could turn everyday devices into surveillance tools and take extreme measures to neutralize whistleblowers. He implemented rigorous physical and digital barriers in his hotel room.

Snowden piled pillows against his hotel door, placed a red hood over his head and laptop while entering passwords, put a glass of water with a marked tissue behind the door as a tamper indicator, and prohibited Ewen MacAskill from bringing an iPhone into the room.

You must follow strict op-sec protocols when handling sensitive tasks:

• stack pillows up against the hotel room door in half-columns and across the bottom to stop corridor eavesdropping;
• place a big red hood over your head and laptop when inputting computer passwords to block hidden cameras;
• put a glass of water behind the door next to a piece of tissue paper with a distinctive pattern to check if anyone enters;
• leave mobile phones outside the room to prevent agencies from turning them into microphones and tracking devices.

3. Legal Frameworks and Media Explosions

The Guardian published explosive scoops on Verizon and PRISM while the White House and intelligence agencies applied intense pressure to stop the reporting.

After the New York Times exposed warrantless wiretapping, the government shifted its legal justification for bulk metadata collection to Section 215 of the Patriot Act. Telecom providers worried about legal exposure preferred to be legally compelled by a secret FISA court order. Lawyers used the business records provision of the Patriot Act, arguing that bulk metadata was relevant to ongoing terrorism investigations.

On 24 May 2006, FISA court judge Michael Howard granted classified court orders stating there were reasonable grounds to believe the tangible things sought were relevant to authorised threat investigations.

The FISA Amendments Act of 2008 legalized mass communications interception involving Americans and foreigners. The legislation granted retroactive and prospective legal immunity to participating telecom firms. In June 2008, the House of Representatives passed the FISA Amendments Act by a 293-129 margin, followed by a 69-28 margin in the Senate, with key Democrats such as Barack Obama voting for it.

The Verizon and PRISM Scoops

The first major Snowden leak revealed a secret Foreign Intelligence Surveillance Act court order compelling Verizon to hand over daily metadata for millions of customers. On 25 April 2013, Judge Roger Vinson signed a top-secret document giving the administration unlimited authority to collect telephone metadata on an ongoing, daily basis for a 90-day period ending on 19 July, regardless of whether customers were involved in terrorism.

The Guardian published the story on June 3, 2013, proving that the NSA was operating a massive dragnet on US citizens. Senior US officials held a 20-minute conference call with Guardian editors to pressure them into delaying publication of the Verizon story.

A subsequent Snowden leak exposed PRISM, a top-secret program granting the NSA direct access to data from major US internet companies. The Guardian published three slides out of a 41-slide training deck after approaching tech companies and the White House for comment.

The Guardian Bunker and Device Destruction

The Guardian established a heavily secured and air-gapped bunker in London to review and analyse Edward Snowden's classified documents. Reporters and editors worked under strict security protocols to prevent legal injunctions, police raids, and hacking attempts. 50,000 files belonging to British intelligence were included in the leak.

You must follow strict security rules when investigating sensitive materials:

• post guards to check identities against a limited list;
• ban all phones and store them outside the workspace;
• cover windows and use air-gapped computers never connected to the internet;
• require multiple passwords where no single staff member knows more than one;
• save work exclusively on USB sticks instead of network drives.

Edward Snowden established strict conditions for handling his leaked documents to prevent them from falling into the hands of foreign adversaries. Snowden insisted that spying documents should go to the respective subjects of surveillance in each country.

You must handle leaked files according to strict operational rules:

• route NSA and GCHQ spying documents to the respective subjects of surveillance in each country;
• filter out operational details that might damage legitimate intelligence activities;
• encrypt files on memory cards using multiple passwords where no single person knows all passwords.

Corporate Collaboration and Legal Shifts

British government officials pressured The Guardian to return or destroy leaked files. Cabinet Secretary Sir Jeremy Heywood and other top officials warned the newspaper of potential legal action and closure under the Official Secrets Act. Editors agreed to smash their own hard drives and destroy the equipment under the direct supervision of GCHQ technicians.

GCHQ operatives nicknamed Ian and Chris visited the Guardian offices carrying a degausser. It took 3 hours to smash and degauss the equipment while journalists used angle-grinders and drills to smash circuit boards and chips in a concrete basement.

You must handle government demands for data surrender carefully:

• refuse direct government demands to surrender classified documents;
• negotiate an alternative resolution to destroy hardware locally under agency oversight;
• break computer components into fragments using physical force;
• feed destroyed hardware parts into a magnetic degausser to erase all data.

4. GCHQ and Global Mass Interception

British intelligence agency GCHQ operated an even more intrusive mass surveillance regime than the NSA due to lighter legal oversight and a cozy blanket of state secrecy. While the US faced Fourth Amendment constraints, Britain lacked a written constitution. The Regulation of Investigatory Powers Act provided legal carte blanche for domestic mass surveillance as long as one communication end remained foreign.

British intelligence operated an expansive eavesdropping infrastructure with deep financial backing from American counterparts.

GCHQ established an expansive eavesdropping station at Bude in North Cornwall to exploit major transatlantic fibre-optic cables. 25 per cent of the world's current internet traffic crosses British territory via submarine cables like Apollo North, TAT-8, TAT-14, and Yellow/Atlantic Crossing-2. Trainee spies on a GCHQ tour were allowed to peek inside the radar dome and climb satellite dishes nicknamed Ocean Breeze before stopping for ice cream.

The NSA poured millions of pounds into GCHQ projects to maintain mutual data-sharing and master the internet. Between 2009 and 2012, the US government paid GCHQ at least £100m, including £22.9m in 2009, £39.9m in 2010, and £34.7m in 2011/2012.

The Tempora Buffering System

GCHQ developed a massive computerised buffering system called Tempora to enable retrospective analysis of high-speed internet data. Operating at 10 gigabytes per second data speed, Tempora stored full content like emails for 3 days and metadata for 30 days. In a single 24-hour period, GCHQ processed and stored more than 39 billion events, handling 21 petabytes a day by 2012.

Corporate Partners and Targeted Espionage

Leading private telecommunications companies secretly cooperated with GCHQ to intercept cable traffic under classified operational codenames. By 2012, 200 fibre-optic cables were touched and tapped, with 46 cables processed simultaneously under Strap 2 ECI exceptionally controlled information.

• BT was codenamed REMEDY;
• Verizon Business was DACRON;
• Vodafone Cable was GERONTIC;
• Global Crossing was PINNAGE;
• Level 3 was LITTLE.

GCHQ intercepted communications and deployed key-logging software against foreign delegates during international political summits in London. Turkey's finance minister and 15 members of his delegation were targeted using key-logging software at fake internet cafes, with 45 analysts keeping a real-time log during the G20 summit.

5. Silicon Valley Backlash and Diplomatic Fallout

The Snowden revelations triggered global political scandals, corporate pushback from tech giants, and Snowden's dramatic exile to Russia.

PRISM, Upstream, and Encryption Warfare

The top-secret PRISM program allowed the US intelligence community to gain direct access to vast amounts of user communications from major technology companies. Through a tasking process using search terms called selectors, analysts could flag targets with a 51 percent confidence threshold. FBI equipment extracted matching data and transferred it to the NSA and analytical tools.

You can trace how analysts use this system through a specific workflow:

• Analysts use or task PRISM to find a new surveillance target.
• A supervisor reviews the search terms or selectors.
• The supervisor agrees with the analyst's reasonable belief that the target lives outside the US.
• FBI equipment extracts matching information and weeds out US persons data.
• The FBI passes the data to the NSA for processing by analytical tools.

Microsoft was the first to sign up for PRISM in September 2007, followed over the years by Yahoo, Google, Facebook, PalTalk, YouTube, Skype, AOL, and finally Apple in October 2012. As of April 5, 2013, the database held 117,675 active surveillance targets. The annual cost of the program reached 20 million dollars, and PRISM derived intelligence reports made up a ratio of 1 out of 7 ending up on President Obama's desk.

The UPSTREAM program gives the NSA direct access to the fiber-optic cables carrying internet and telephone traffic into, out of, and around the United States. Operating parallel to the British TEMPORA project, UPSTREAM captures communications directly as data flows past submarine cables across the Pacific and Atlantic oceans, capturing an estimated 80 percent of communications. An NSA inspector general report from 2009 acknowledged that partnerships with over 100 US companies allowed the agency to leverage America's homefield advantage as a major worldwide telecommunications hub.

The NSA and GCHQ waged an aggressive, multi-pronged war against commercial encryption software under programs like BULLRUN and EDGEHILL.

The BULLRUN program operated with a 2013 funding of 254.9 million dollars, while the agency spent 800 million dollars on SIGINT enabling since 2009. In 2006, the NSA put a back door into a NIST encryption standard used to generate random prime numbers for text encoding, eventually becoming the sole editor.

International Trauma and Political Reaction

Germany's historical trauma under the Stasi and Gestapo created a deep cultural and constitutional aversion to state surveillance, making the NSA revelations a massive political scandal. Der Spiegel revealed that the NSA harvested half a billion communications from Germans in an average month, and reports showed the agency had bugged Chancellor Angela Merkel's personal mobile phone since 2002.

Internal NSA memos revealed that the agency systematically targeted dozens of foreign heads of state and major international companies for espionage. The agency added 35 world leaders whose phone numbers were added to the surveillance system, with one eager official submitting 200 numbers for monitoring.

Airport Limbo and Life in Exile

Julian Assange and WikiLeaks orchestrated Snowden's escape plan from Hong Kong to Ecuador via Russia, leveraging contacts and safe-conduct passes. Sarah Harrison delivered Ecuadorean safe-conduct papers to Snowden, and they boarded Aeroflot flight SU213 from Hong Kong to Moscow on 23 June 2013.

Stranded in Moscow's Sheremetyevo Airport without a valid passport, Snowden spent weeks in legal limbo before receiving temporary asylum in Russia. Snowden spent 39 days from flying into Moscow until leaving the airport transit zone after applying to 20 countries for asylum on 30 June. On 1 August 2013, Snowden left the airport transit zone and entered Russia after being granted one year of temporary asylum.

10 Key Ideas

1. Edward Snowden transformed from a conservative IT contractor and libertarian believer into an ideological whistleblower after growing deeply disillusioned by government surveillance and deceptive testimony from intelligence leadership.
2. The Bush administration secretly launched the STELLAR WIND program to collect massive amounts of communications data without congressional oversight or traditional legal authorization following the 9/11 terrorist attacks.
3. Operating as a ghost user with administrative privileges at Booz Allen Hamilton in Hawaii, Snowden harvested thousands of classified files before orchestrating a secure meeting with journalists in Hong Kong.
4. Snowden implemented rigorous physical and digital barriers, such as stacking pillows against his hotel door and using a red hood for password entry, to protect his operational security from intelligence agency tracking.
5. The Guardian published explosive scoops revealing that a secret FISA court order compelled Verizon to hand over daily metadata for millions of customers.
6. Under intense pressure from British officials, Guardian editors watched GCHQ technicians and used angle-grinders to smash hard drives and destroy classified equipment in a concrete basement.
7. British intelligence agency GCHQ operated an expansive eavesdropping infrastructure, such as the Tempora buffering system, with deep financial backing from American counterparts.
8. Leading private telecommunications companies secretly cooperated with GCHQ and the NSA, allowing intelligence agencies to tap into submarine fibre-optic cables under codenames like REMEDY and DACRON.
9. Top-secret initiatives like PRISM and UPSTREAM granted the NSA direct access to data from major technology companies and the fiber-optic cables carrying internet traffic globally.
10. The Snowden revelations triggered global political scandals, corporate pushback from tech giants, and Snowden's dramatic exile to Russia after spending 39 days stranded in a Moscow airport.