Where are the Tao units?
There are now TAO units in Wahiawa, Hawaii; Fort Gordon, Georgia; at the NSA's outpost at Buckley Air Force Base, near Denver, Colorado; at its headquarters in Fort Meade; and, of course, in San Antonio.
Der Spiegel contacted the NSA for a response to its article, which is based on documents it received. Here's the statement the NSA sent back:
"Tailored Access Operations is a unique national asset that is on the front lines of enabling NSA to defend the nation and its allies." The statement added that TAO's "work is centered on computer network exploitation in support of foreign intelligence collection." The officials said they would not discuss specific allegations regarding TAO's mission.
As for who TAO hires to do its business:
Their job is breaking into, manipulating and exploiting computer networks, making them hackers and civil servants in one. Many resemble geeks -- and act the part, too.
In a related article, Der Spiegel describes ANT, which presumably stands for "Advanced or Access Network Technology" -- which it describes as a unit that functions as a carpenter to TAO, building its tools. ANT has a 50 page "catalog" of its offerings, described as an "NSA toolbox."
In cases where TAO's usual hacking and data-skimming methods don't suffice, ANT workers step in with their special tools, penetrating networking equipment, monitoring mobile phones and computers and diverting or even modifying data.
You can view many of ANT's offerings here.
The Der Spiegel article on ANT was written by Jacob Applebaum. Jacob was a presenter at this week's 30th Chaos Computer Club conference in Hamburg (Glenn Greenwald was the keynote speaker.) In Applebaum's talk, he showed slides of how the NSA has compromised Dell business servers, Apple's iPhone, the sim cards of GSM phones, and much much more.
More from Applebaum: The NSA can hijack your wifi from 8 miles away.
Among those taking the Der Spiegel articles seriously: Cisco.
"On Monday, December 30th, Der Spiegel magazine published additional information about the techniques allegedly used by NSA TAO to infiltrate the technologies of numerous IT companies," wrote senior VP John Stewart. "As a result of this new information coming to light, the Cisco Product Security Incident Response Team (PSIRT) has opened an investigation."
Other allegations: The NSA is intercepting laptops bought online to install spy malware.
According to Der Spiegel, the NSA's TAO group is able to divert shipping deliveries to its own "secret workshops" in a method called interdiction, where agents load malware onto the electronics or install malicious hardware that can give US intelligence agencies remote access.