The NSA’s biggest mistake so far