Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Australian parliament passes encryption laws unamended

abc.net.au

Post reply on HN
Print view View original

151–160 of 415 posts

Re: Australian parliament passes encryption laws unamended

#151

Post by [deleted] »

cmroanirgo wrote: post #106
_Nat_ wrote: post #43

Some of the comments so far seem to suggest that this bill would require software to include backdoors. However, it looks like [the bill's PDF]( https://parlinfo.aph.gov.au/parlInfo/download/legislation/bi... ) includes: > Division 7—Limitations > 317ZG Designated communications provider must not be required to implement or build a systemic weakness or systemic vulnerability etc. > (1) A technical assistance notice o…

There are so many loopholes in this thing. One predominant thing to keep in mind is the legal onus that is put on a company that does not comply . The basic gems are that I got from reading the draft legislation was: - If you have server side encryption, & we want you to decrypt a particular person's data, then we expect you to do so - ad infinitum. - If you do client side encryption then we expect you to put into pl…

[deleted]

Re: Australian parliament passes encryption laws unamended

#152

Post by brokenmachine »

daemin wrote: post #131
chris_wot wrote: post #70

Earlier quoted context omitted.

No, don't geoblock us. Just refuse to do actual business in Australia. Only allow us to download apps from the U.S. where such broken legislation is not in effect.

Don't think it will help since the agencies can force telcos to mitm the store fronts.

Even this draconian bill I don't think has the power to make telcos mitm sites hosted overseas, does it?

But who knows, this bill seems to be the Christmas gift that keeps on giving! Merry Totalitarian Christmas, everyone!!

Re: Australian parliament passes encryption laws unamended

#154

Post by krautjakob »

bigiain wrote: post #149
krautjakob wrote: post #135

Earlier quoted context omitted.

ProtonMail costs 8€ per month, almost twice as much as Fastmail. I'm not sure yet if I'm willing to pay that much. I guess I'll check out the other mail services listed on privacytools.io

> I'm not sure yet if I'm willing to pay that much. So what do you value your privacy at?

Considering most of my private E-mails are amazon order confirmations and other automated crap ... I really have to think about it.

Re: Australian parliament passes encryption laws unamended

#155

Post by [deleted] »

rswail wrote: post #44
hestefisk wrote: post #9

I live in Australia and this is the dumbest bill I have ever seen in parliament. Australian politicians have no clue what the fuck they have just done. Rushed through in less than four days so they can go on holidays. Bigots.

To quote our last PM (well, this week anyway): "The laws of Australia prevail in Australia, I can assure you of that. The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia."

[deleted]

Re: Australian parliament passes encryption laws unamended

#156

Post by krautjakob »

climb_stealth wrote: post #148
krautjakob wrote: post #92

Ouch. Since I'm using Fastmail ... can anybody recommend a good alternative? I don't mind paying for a good and secure E-Mailprovider. Protonmail looks nice, but it does not seem to offer IMAP (because mails are end2end encrypted).

From what I remember fastmail has always cooperated with law enforcement. It is not zero-knowledge so they always had access to the user data already. Their promise has been to not use it for advertising purposes or share it with third parties. I don't see much changing here, but I would like to know if it is.

The Australian state now behaves exactly like an enemy of the people would. In the same way I would not use an e-mail provider in Iran, North Korea, the US or other facist regimes I will now also not use an Australian e-mail provider.

Re: Australian parliament passes encryption laws unamended

#157

Post by davedx »

dbetteridge wrote: post #61

Business opportunity for EU devs provide Australian businesses with PR and code review to ensure their software isn't backdoor'd

More like, biz opportunity to make products competing with Jira, Confluence et al.

Wonder how many banks and other security sensitive orgs use Jira and store all their tech specs in there.

All of them?

Re: Australian parliament passes encryption laws unamended

#158

Post by BigJono »

netheril96 wrote: post #109
boyter wrote: post #54

Earlier quoted context omitted.

1 billion lost from the company already. I am hoping for them to depart Australia for good on this.

> 1 billion Is that metaphorical or actual number? If latter, I am interested in the source.

Their stock is down 4.3% today and their market cap is around $20B

Re: Australian parliament passes encryption laws unamended

#159

Post by caf »

brokenmachine wrote: post #71
_Nat_ wrote: post #43

Some of the comments so far seem to suggest that this bill would require software to include backdoors. However, it looks like [the bill's PDF]( https://parlinfo.aph.gov.au/parlInfo/download/legislation/bi... ) includes: > Division 7—Limitations > 317ZG Designated communications provider must not be required to implement or build a systemic weakness or systemic vulnerability etc. > (1) A technical assistance notice o…

They were going to supply a definition of "systemic weakness", but I can't find one in the bill itself. I'm patiently waiting for their proposed method of reading end-to-end encrypted messages without introducing a systemic weakness. But the meaning of words don't seem to matter anymore in the reality distortion field that is the Australian government. This is all supposedly to somehow make us more secure for Christm…

I'm patiently waiting for their proposed method of reading end-to-end encrypted messages without introducing a systemic weakness.

I imagine that they ask for some tailored malware to be delivered to the specifically targeted device/user.

Re: Australian parliament passes encryption laws unamended

#160

Post by stonith »

shakna wrote: post #42

It's over. I may as well not be a programmer anymore. The government has effectively made it possible that anyone and everyone who develops software or hardware used by anyone in the country, or where they feel national security comes into play, must compromise their software, and tell no one. They can ask any intern to break the software, and not tell their employer. It's bad enough to have a gaping hole in your sec…

Isn't this pretty much the same as the US and their National Security Letters? They can compel engineers/companies to do pretty much anything, and the veil of secrecy is the same.
Post reply on HN