U.S. pressed to disclose secret court's order on Yahoo email search

By Joseph Menn

SAN FRANCISCO, Oct 7 (Reuters) - A U.S. senator and civil groups critical of surveillance practices on Friday called on the government to release a 2015 order by a secret court directing Yahoo to scan all its users' incoming email, saying it appeared to involve new interpretations of at least two important legal issues.

Their concerns center on the nature of the technical assistance the court required Yahoo to provide and the scope of the search that legal experts said appeared to cover the Silicon Valley internet company's entire network.

Yahoo installed a custom software program to search messages to hundreds of millions of accounts at the behest of U.S. intelligence officials with an order from the Foreign Intelligence Surveillance Court, a secret tribunal, Reuters reported on Tuesday.

They were looking for messages containing a single piece of digital content, three former employees and a fourth person apprised of the events told Reuters.

Intelligence officials told Reuters that all Yahoo had to do was modify existing systems for stopping child pornography from being sent through its email or filtering spam messages.

But the pornography filters are aimed only at video and still images and cannot search text, as the Yahoo program did. The spam filters, meanwhile, are viewable by many employees who curate them, and there is no confusion about where they sit in the software stack and how they operate.

The court-ordered search Yahoo conducted, on the other hand, was done by a module attached to the Linux kernel - in other words, it was deeply buried near the core of the email server operating system, far below where mail sorting was handled, according to three former Yahoo employees.

They said that made it hard to detect and also made it hard to figure out what the program was doing.

How much companies can be forced to do to comply with government orders for searching data is being debated in the courts. Companies have successfully argued that changes that would degrade users' experience or force them to write new code, essentially a form of speech, would violate basic rights.

Most famously, Apple refused to write code that would unlock an iPhone belonging to a gunman in last year's mass shooting in San Bernardino, California. The FBI later dropped its demand.

In the case of Yahoo, company security staff discovered a software program that was scanning email but ended an investigation when they found it had been approved by Chief Executive Officer Marissa Mayer, the sources said.

Lawmakers are concerned about the request and whether information about it is being properly disclosed to the public.