Of course it's focused: they almost certainly used their web traffic to pre-screen.
We already know from the slides that they do searches of their ill-gotten web traffic against a laundry list of keywords. Probably, every single remotely terrorist-sounding keyword.
I'd imagine "Ruby Ridge" and "fertilizer bomb" and "jihad" are in there as well. But the agents only need to mention "pressure cooker bombs" because that's what they'd actually gotten hits on.
The question is whether it makes more sense for this visit to have been the result of google alone (unlikely-to-implausible) or was the result of being pre-targetted for other reasons, which then brought their web activity under scrutiny (which fits everything we already know about the NSA's processes and policies and the facts in this case).
Comments
Of course it's focused: they almost certainly used their web traffic to pre-screen.
We already know from the slides that they do searches of their ill-gotten web traffic against a laundry list of keywords. Probably, every single remotely terrorist-sounding keyword.
I'd imagine "Ruby Ridge" and "fertilizer bomb" and "jihad" are in there as well. But the agents only need to mention "pressure cooker bombs" because that's what they'd actually gotten hits on.
The question is whether it makes more sense for this visit to have been the result of google alone (unlikely-to-implausible) or was the result of being pre-targetted for other reasons, which then brought their web activity under scrutiny (which fits everything we already know about the NSA's processes and policies and the facts in this case).