201–210 of 415 posts
1. https://www.reddit.com/r/australia/comments/a3j466/assistanc...
2. https://docs.google.com/spreadsheets/d/1dowpZ_Xtr1N_DgkHJN8i...
Earlier quoted context omitted.
What does this mean for Zero-knowledge systems?
You must build a custom made back door. eg. Something like ProtonMail would need to inject some extra javascript so that the government could obtain a copy before encryption, I expect. If I were to write some software of this nature these days, I'd make sure that the client would be aware of any changes in the api - sort of like a personal warrant canary. (Note that a warrant canary is legal in this legislation).
(For those wondering how they can be illegal, in Australia it's illegal to state the existence or non-existence of certain kinds of secret warrants. So a statement of a canary is, itself, illegal.)
It's over. I may as well not be a programmer anymore. The government has effectively made it possible that anyone and everyone who develops software or hardware used by anyone in the country, or where they feel national security comes into play, must compromise their software, and tell no one. They can ask any intern to break the software, and not tell their employer. It's bad enough to have a gaping hole in your sec…
Isn't this pretty much the same as the US and their National Security Letters? They can compel engineers/companies to do pretty much anything, and the veil of secrecy is the same.
Earlier quoted context omitted.
the US has already been doing this stuff for a long time, without it being legal. They can always pressure you and threaten to ruin any engineer's life if they don't do what they want. and who do you think came up with this legislation? It's US Intelligence. Australia is their testing lab, just like Macca's does.
Apple stared down the FBI in a mass murder case, because it was possible for them to do so. They won't be able to do that in Australia. I don't like the US shonkiness any more than anyone else. But these situations are not precisely equivalent, especially since this bill passed.
Six of one, half dozen of the other.
Earlier quoted context omitted.
I’m sure your customers will believe you if you say that your government did not tell you to lie about backdoors and weaknesses in your products security.
That's the scary part about this - a company is not allowed to tell people when the data was accessed
Earlier quoted context omitted.
but health care
Typically included in your benefits package as part of the job. You don't have to give up Australian citizenship to get an E3, so if necessary you can fly back to Australia for treatment.
If a sickness/injury is bad enough to need to fly back to Australia, there's a pretty good chance you won't be allowed on a plane.
How can someone know whether their software is compromised by this?
Warrant canaries.
What kicked this off the front page? Note that the most-upvoted post in the past month, critical of Google, was at the time mysteriously kicked off the front page as well.
To anyone with a business from anywhere else in the world. Yes please do, publicly and loudly, cease to deal with us (Australia) due to the very real possibility that all of you private and commercially sensitive communications will be monitored and recorded (Also given the five eyes agreement shared with other countries.) Australia already have a history of using their spy services for commercial gain. https://en.m.…
While you are probably correct, the world needs to urgently stop doing any business with China first. And since it’s not going to happen, other countries beyond China unfortunately start to get some funny ideas, too...
Earlier quoted context omitted.
This isn't quite true. The bill allows companies to provide statistics on how many TARs, TANs, and TCNs they've been served within a 6-month window. The obvious problem is that nothing stops them from lying or just omitting that information -- because why would you admit that your software is insecure?
Employees of a company may also be served, and required not to tell their employer. So a company may not know if they are compromised.