they represented real al Qaeda traffic. As far as she knew, no e-mail had ever been rated 9—certain. Only a few had ever been classified as 8, extremely likely.
“I wouldn’t have bothered you otherwise,” Shafer said.
Like any surveillance tool, Echelon was most useful when it could be targeted, sifting through a million e-mails instead of a trillion. So NSA paid very close attention to the handful of al Qaeda–affiliated Web sites that received anonymous postings calling for jihad and hinting at attacks. The CIA and NSA didn’t particularly care about what was said on the postings themselves. Everyone assumed al Qaeda would be too smart to give up an ongoing operation on a public Web site.
What the bad guys did not know, or so the agencies hoped, was that the United States had convinced Jordan and several other countries to let the NSA tap into the Web-hosting companies that ran the sites. Thanks to those taps, the NSA could catalogue the Internet addresses of anyone who posted to or even just viewed the pages. Echelon looked for e-mails sent from the hot addresses, then targeted the people who received those e-mails, tracing a steadily widening web of connections. The NSA hoped to find nexuses, e-mail accounts that were hubs of suspect traffic, hidden connections that might reveal the path of al Qaeda’s orders.
Exley and Shafer worried that al Qaeda was deliberately using e-mail as a source of misinformation. The same Arab intelligence agencies that had let the NSA install the taps might have tipped the bad guys to what the United States had done. Still, the taps had turned up enough interesting tidbits that the CIA and NSA took them seriously. In the absence of decent human intelligence on al Qaeda, Echelon was the most consistent source of information the United States had.
AS SHAFER PROMISED, the last e-mail was the most important—and the shortest. Five letters and three numbers, nothing more. Echelon would have ignored it as spam, except that it had come from a hot address. U 9 1 9 A L H R. United Airlines flight 919. London Heathrow. The NSA had rated it a 6/7—likely/highly likely.
“What do you think?” Shafer said.
“I think if I was on that plane I wouldn’t be paying much attention to the movie,” she said. “Why’d the Brits let it leave?”
“The flight number was only sent today. NSA caught it two hours ago.” Shafer pointed to the e-mail’s time stamp. “They were already in the air.” He handed her another piece of paper, the flight’s passenger manifest: 307 names. Not quite full.
“How many matches?” Exley said. How many passengers on the flight had names that matched the Terrorist Threat Integration Center’s combined watch list?
“Two. Maybe three. You know how it is.”
She knew how it was. Most Arab names could be transliterated into English a dozen ways. Mohammed Abdul Lattif. Mohamad Abdullattif. Mohamed Abdullatif. Muhammad Abdul Laitef. The NSA hadn’t found a foolproof way to cover all the possible translations without making the list too big to be useful.
Making matters worse, all the agencies had built separate watch lists over the years. Melding them into a master list was a top priority for the threat center. But the project, like so much else in the terror war, had not gone smoothly. The agencies had different secrecy classifications, different thresholds for inclusion. Some used photographs and fingerprints when available, others didn’t. So far only about half the names on the lists had been combined.
Again Shafer wagged his finger at her. “Anyone jump out?”
“I’m looking,” she said. Jim Bates…nope…Edward Faro…not likely…
What went unsaid was the fact that the government’s various divisions, including the CIA, didn’t want to share everything they had. Like the fact that the agency was paying close attention to several guys who were confidential informants for the FBI. If the snitches’ names wound up on a combined list,
Alissa Callen
Mary Eason
Carey Heywood
Mignon G. Eberhart
Chris Ryan
Boroughs Publishing Group
Jack Hodgins
Mira Lyn Kelly
Mike Evans
Trish Morey