Summary of 176: NSL

Overview of Darknet Diaries Episode 176: NSL

This episode tells the story of Nick Merrill, a New York internet entrepreneur who became the first known person to challenge a National Security Letter (NSL) in court. What starts as a personal fight over one secret FBI demand turns into a years-long constitutional battle involving the ACLU, the EFF, and multiple rounds of litigation over the First, Fourth, and Fifth Amendments. The episode also explores how that fight shaped Merrill’s later work building privacy-first technology to make government surveillance harder by design.

What Are National Security Letters?

National Security Letters are secret FBI demands for customer data, often issued without a normal warrant or immediate judicial review.

Why NSLs are controversial

• They can be issued in secret.
• Recipients are often gagged from telling anyone they received one.
• They can demand data without the usual court oversight.
• Before reforms, some gag orders were effectively indefinite.

The core issue

The episode argues that NSLs can bypass the usual constitutional checks and balances, creating a system ripe for abuse because:

• the public can’t see how often they’re used,
• recipients can’t warn others,
• and there’s often no meaningful opportunity to challenge them.

Nick Merrill’s Background and the Setup

Nick Merrill grew up in New York City, got into hacking and computing early, and became immersed in the internet’s early culture through hacker communities and magazines like 2600.

His early internet work

• Studied computer science and philosophy
• Started one of New York City’s early ISPs, Calix
• Originally served activists, nonprofits, and civil liberties groups
• Later grew into hosting larger corporate clients like Mitsubishi Motors of America, IKEA, and Snapple/Ice-T

Despite growing into a commercial hosting business, Merrill stayed committed to supporting organizations trying to create social change.

The FBI Letter That Changed Everything

Merrill received a phone call and then a visit from an FBI agent delivering a letter demanding data about one of his customers.

What made the letter alarming

• It required him to hand over information without a court warrant.
• It told him not to tell anyone about the request.
• It cited authority under:
  • Executive Order 12333
  • 18 U.S.C. § 2709 (the NSL statute)

He believed the letter violated multiple constitutional protections:

• First Amendment: gag order suppressing speech
• Fourth Amendment: warrantless search/seizure of records
• Fifth Amendment: restriction on legal counsel and due process

The Legal Fight: Doe v. Ashcroft and Beyond

Merrill consulted a lawyer and then the New York Civil Liberties Union, which quickly connected him with the ACLU. The ACLU recognized the case as a rare chance to challenge an NSL because Merrill actually had proof that one had been issued.

Major developments in the lawsuit

• The first case was filed under John Doe because Merrill could not reveal his identity.
• The case became Doe v. Ashcroft.
• A district court ruled NSLs unconstitutional.
• The government appealed.
• The case later expanded to include four Connecticut librarians who had also received an NSL.
• The lawsuit went through several renamed versions as the Attorney General changed:
  • Doe v. Gonzalez
  • Doe v. Mukasey
  • Doe v. Holder
  • Merrill v. Lynch

How the government responded

• The DOJ repeatedly appealed losses.
• At times, the government changed the law mid-fight, forcing the case to restart.
• The government ultimately withdrew Merrill’s NSL, which removed his legal “standing” and ended his ability to continue the challenge.
• Merrill later reached a settlement that lifted his gag order, allowing him to finally speak publicly.

Why the Case Mattered

The episode frames Merrill’s case as a major civil liberties battle because it exposed how NSLs worked behind closed doors.

Constitutional arguments

The case centered on the idea that:

• the government should not be able to demand records without judicial oversight,
• speech restrictions imposed by gag orders resemble prior restraint,
• and secrecy prevents meaningful public accountability.

Historical context

The episode connects the Fourth Amendment to colonial abuses, especially writs of assistance, which allowed broad, suspicionless searches by British authorities. That history helps explain why the founders built in warrant requirements and court oversight.

The EFF, Credo Mobile, and Cloudflare

The episode then shifts to Cindy Cohn and the Electronic Frontier Foundation (EFF), who continued challenging NSLs after Merrill’s case opened the door.

Key points from the EFF battles

• The EFF received a report showing the FBI had issued hundreds of thousands of NSLs between 2001 and 2005.
• That number contrasted sharply with the relatively small number of terrorism prosecutions.
• The EFF fought on behalf of clients including:
  • Credo Mobile
  • Cloudflare

What the EFF found

• Even when the EFF won at trial, the government often appealed.
• Congress later amended the law to:
  • allow some communication with lawyers,
  • limit gag orders to three years initially,
  • and require periodic review.

Still, the reforms were seen as incomplete.

The Bigger Lesson: Why Technology Matters

One of the strongest themes in the episode is that legal challenges alone may not be enough. Merrill ultimately turned toward technology as a way to reduce surveillance risk.

His privacy-by-design approach

He argues that if law and courts don’t fully protect privacy, technologists should build systems that make spying harder in the first place.

Merrill’s newer privacy-focused projects

• CalyxOS: a privacy-centered Android-based operating system that removes Google telemetry and minimizes data collection
• Calyx hotspot service: privacy-conscious internet access with minimal identity linkage
• Freely: a mobile phone service designed to collect as little identifying information as possible

The philosophy behind it

• Encrypt by default
• Collect the minimum necessary data
• Make customer identity hard to link to communications metadata
• Reduce the value of NSLs by not retaining useful data in the first place

Main Takeaways

• NSLs are powerful and secretive surveillance tools that can be issued without normal public scrutiny.
• Nick Merrill’s case was a landmark fight against warrantless data demands and lifetime gag orders.
• The legal system improved some aspects of NSLs, but didn’t eliminate the underlying privacy concerns.
• The government can change tactics mid-litigation, which can make lawsuits difficult to sustain.
• Privacy-by-design technology is a practical response when law and policy lag behind surveillance powers.

Notable Themes and Insights

Surveillance often looks “normal”

The episode opens by noting that modern attacks and surveillance can appear mundane—using standard tools, logs, and account access rather than dramatic hacking.

Secrecy weakens accountability

If people cannot talk about NSLs, then:

• the public can’t assess abuse,
• Congress hears less about the problem,
• and courts are slower to see the full scale of the issue.

Data minimization is a defense

If a company does not store identifying data, then even a lawful demand may have little value.

Recommended Follow-Ups

• Learn more about Privacy’s Defender by Cindy Cohn.
• Explore privacy-focused tools and services such as:
  • CalyxOS
  • Freely
  • privacy-respecting communication and encryption tools
• Support organizations fighting digital surveillance, especially the EFF and similar civil liberties groups.

Final Thought

This episode is both a legal history lesson and a privacy warning: once surveillance powers are granted in secret, they can be used far more broadly than intended. Merrill’s response was not just to fight in court, but to build systems that make mass surveillance less effective from the start.