Follow us on social

Shutterstock_1330708832-scaled

The CIA's hypocrisy on 'sources and methods'

The Agency’s carelessness in protecting its own agents reveals the cynicism of the US government’s treatment of whistleblowers.

Analysis | North America

Reuters recently published new reporting on the story of one of the worst U.S. intelligence failures in decades. From approximately 2010 to 2013, dozens of CIA informants in China, Iran, and elsewhere were rounded up and executed, jailed, or flipped to double agents. In Iran and China, almost the entirety of the CIA’s network in two of its top-priority countries are reported to have been exposed.

Some in the U.S. government seemed to try to pin much of the blame on a betrayal by CIA officer Jerry Lee, who was later prosecuted and pleaded guilty to spying on behalf of the Chinese government. But Lee’s alleged espionage could not account for all the sources blown.

In a series of articles published by the New York Times, Foreign Policy, and Yahoo! News, another explanation emerged: an astonishing laxity of source protection at the CIA itself. The reporting outlined several lapses in basic tradecraft (which included sending new recruits to meet at locations known to be under close foreign surveillance), but most catastrophic was the (not so) secret communications system the CIA used with these sources. Even if there had not been a mole, it seems hard to believe that the slapdash system could have long evaded the sophisticated counter-intelligence capabilities of the Chinese and Iranian governments.

Essentially, the CIA had set up a system to embed a messaging function hidden in the search box of hundreds of cheaply produced fake websites. The word “hidden” should be used loosely here — the new Reuters reporting found more than three hundred of the sites and showed that a cursory look at their publicly available HTML source code revealed labels such as “message,” “compose,” and “password.” And because the agency purchased the domain names in bulk, the websites were assigned sequential IP addresses — making it almost trivially easy to identify the whole network once a few were discovered.

In other words, simply entering the correct operators into a Google search might have led to dozens of informants rounded up and executed. This level of sloppiness is deeply shocking and inexcusable for a spy service with the resources and expertise available to the CIA. But there are additional layers of hypocrisy and bitter irony that have been less discussed.

This episode coincided with the Department of Justice ramping up its war on whistleblowers. The government used “sources and methods” as a cudgel in these unprecedented Espionage Act prosecutions: they claimed to assign the gravest weight to the protection of sources — so much so that no concern of public interest, no matter how great, could ever be weighed against the secrecy. But those sources were treated as utterly disposable: the agency couldn’t even be bothered to obscure the HTML on its communications system.

In a pattern common to the intelligence community’s most catastrophic self-owns, no one seems to have yet been held accountable. Well, except one person. As you may have guessed, there was a whistleblower. In 2008, a CIA contractor named John Reidy started sounding the alarm through internal channels that these grave flaws in the system were a ticking time bomb. Reidy was fired in retaliation, and his complaint to the Inspector General went uninvestigated until well after dozens of informants had already been jailed or killed. As Reidy tried to fight the retaliation, the government even prohibited him from telling his own attorney anything about the nature of his disclosures.

At the same time when the CIA’s carelessness was burning its own assets, it became fashionable for the critics of whistleblowers who went public to condemn them for not sticking to “internal channels.” Those channels didn’t do much for John Reidy, or for the scores of intelligence sources he tried to save.

The cruel irony would surely not be lost on former CIA officer John Kiriakou, who became a whistleblower when he discussed the CIA’s torture program in a media interview at a time when the CIA was still denying it. Kiriakou was sentenced to 30 months in prison after pleading guilty to inadvertently confirming the name of one CIA officer to a journalist — even though the journalist never published the name.

Again, it’s worth stating clearly: it was not the leaks of conscientious whistleblowers that caused the sky to fall, but the intelligence community’s own chronic mismanagement, virtually guaranteed by the very secrecy it always claims to need to protect those sources.


Image: PabloLagarto via shutterstock.com
Analysis | North America
Emmanuel Macron,  Keir Starmer, Friedrich Merz
Top image credit: TIRANA, ALBANIA - MAY 16: France's President Emmanuel Macron, Britain's Prime Minister Keir Starmer and Germany's Chancellor Friedrich Merz speak during a Ukraine security meeting at the 6th European Political Community summit on May 16, 2025 at Skanderbeg Square in Tirana, Albania. Leon Neal/Pool via REUTERS

The EU's pathetic response to Trump's Iran attack

Middle East

The European Union’s response to the U.S. strikes on Iran Saturday has exposed more than just hypocrisy — it has revealed a vassalization so profound that the European capitals now willingly undermine both international law and their own strategic interests.

The statement by the E3, signed by German Chancellor Friedrich Merz, British Prime Minister Keir Starmer, and French President Emmanuel Macron, following similar statements by the president of the European Commission Ursula von der Leyen, and its high representative for foreign affairs Kaja Kallas, perfectly encapsulates this surrender.

keep readingShow less
iran war tehran
Top photo credit:A man reads a newspaper at a newsstand, amid the Israel-Iran conflict, in Tehran, Iran, June 22, 2025. Majid Asgaripour/WANA (West Asia News Agency) via REUTERS

Israel and US have chosen war, unleashing fresh economic pain

Middle East

The United States has finally entered Israel’s escalating war against Iran, launching targeted strikes on Iran’s nuclear facilities to obliterate Tehran’s nuclear threat, a goal once more effectively achieved through the 2015 Iran deal.

President Trump warned Iran that there will be peace or a tragedy far greater than what Iran has witnessed in recent days, signaling that there were “other targets” if Iran wished to escalate.

keep readingShow less
Trump iran strikes
Top photo credit: A man on an e-scooter passes a giant billboard, where U.S. President Donald Trump appears, in Tel Aviv, Israel, June 22, 2025. REUTERS/Violeta Santos Moura

Short, sharp shock? Trump's idea of quick victory is illusory

Middle East

With the decision to bomb three of Iran’s nuclear sites, President Trump has put the United States on a reckless path that risks another Middle East war — precisely the kind he repeatedly promised to avoid.

Even if the strikes achieved short-term tactical success, they have turned a challenge that could have been managed diplomatically into a military crisis. Hitting a few facilities will not dismantle Iran’s nuclear program; it will only push it further underground and harden Tehran’s resolve, closing the door on a negotiated agreement with monitoring mechanisms like those in the JCPOA —the deal Trump abandoned after taking office the first time.

keep readingShow less

LATEST

QIOSK

Newsletter

Subscribe now to our weekly round-up and don't miss a beat with your favorite RS contributors and reporters, as well as staff analysis, opinion, and news promoting a positive, non-partisan vision of U.S. foreign policy.