I’ve got a write-up of this weekend’s spying bill up at Ars Technica. It’s pretty bad:

Before undertaking surveillance activities, intelligence officials would need to obtain a certification from the Attorney General and the Director of National Intelligence—both subordinates of the president—that there were “reasonable procedures” in place for ensuring that the eavesdropping “concerns” persons located outside the United States, and that the foreign intelligence is a “significant purpose” of the surveillance activities. That certification would only be reviewed after the fact, and only to determine if the procedures were, in fact, “reasonable.” A single certification could approve a broad surveillance program covering numerous individuals, and no judge would review the list of individual targets.

Moreover, the requirement that surveillance “concern” non‑U.S. persons could plausibly permit spying on the relatives, friends, and business associates of a foreign target. Indeed, the administration might argue that the only way to obtain all information regarding foreign targets is to conduct dragnet surveillance of American communications and sift through them to find relevant information.

The legislation empowers the administration to “direct” individuals to “provide the government with all information, facilities, and assistance necessary” to carry out foreign surveillance. These quasi-subpoenas would not be subject to judicial review before they were issued. The targets of such orders—who will typically be telecom company executives, not terrorism suspects—have the option of appealing the order to the FISA court, but given the broad scope of surveillance activities authorized by the legislation, it seems unlikely that such challenges would succeed. Moreover, the legislation offers legal immunity to those who comply with such orders, so telecom providers will have little incentive to resist them.

The only real bright spot is that the legislation sunsets after six months. That will give Congress the opportunity to do what it should have done this weekend: require that no surveillance of domestic communications occur without prior judicial approval of each surveillance target. I’m not going to hold my breath.