I am disgusted by the mostly apathetic response in Australia to this terrible legislation.
Australian Police get online account takeover, data disruption powers
21–30 of 92 posts
Re: Australian Police get online account takeover, data disruption powers
#22All in the name of safety.
Re: Australian Police get online account takeover, data disruption powers
#23I tried to tell people that this and worse would happen from the AABill but nobody actually cared. Even talking to a lot of tech-savvy people and tech-savvy lawyers, nope... at most, people raised an eyebrow but couldn't really care less. If people don't actually care, what more can someone do :(
They won't care until the stories of ordinary people suffering the consequences start emerging. But if the state can portray any victim of this legislation as a criminal, even plant digital evidence that they were conducting criminal activity, then it'll still go unheeded.
What we need is good (investigative) journalism to keep the politicians and oligarchs in check. But the business model for that got destroyed and now we just have Murdoch and clickbait.
Re: Australian Police get online account takeover, data disruption powers
#24Time to drop all Atlassian products. Fortunately they removed Server licenses (you have to pay millions for the Datacenter ones or use Cloud) just in time for these new laws.
I am interested to hear what atlassian have to say about it, they have been quite pro-australian. But.. what effort do you think the AU police are going to put in to get the data out of your JIRA tickets?
Because if you want to punish Australia for it's poor laws that seems a weak lever to pull.
And if your concern is MITM between servers, virtual machines or clients- well USA has had sufficient inference, probably by government actors, that some big players instituted SSL inside the data centers- I presume after finding taps.
This is legislation to say they can do that sort of thing- it just seems to happen elsewhere but under some seal of secrecy. At least they acknowledge it.
Re: Australian Police get online account takeover, data disruption powers
#25Time to drop all Atlassian products. Fortunately they removed Server licenses (you have to pay millions for the Datacenter ones or use Cloud) just in time for these new laws.
I am interested to hear what atlassian have to say about it, they have been quite pro-australian. But.. what effort do you think the AU police are going to put in to get the data out of your JIRA tickets? Because if you want to punish Australia for it's poor laws that seems a weak lever to pull. And if your concern is MITM between servers, virtual machines or clients- well USA has had sufficient inference, probably b…
Was more thinking about Confluence than Jira
Where there is troves of data and schematics about various companies infrastructures
Re: Australian Police get online account takeover, data disruption powers
#26FTA: "She pointed to Operation Ironside, the huge ANoM bust earlier this year that resulted in the arrests of more than 290 people, as a reason for the need for the new powers."
So a successful police operation NOW is evidence that more powers are necessary? What kind of logic is that?
Re: Australian Police get online account takeover, data disruption powers
#27Earlier quoted context omitted.
No, those were the Assistance and Access provisions that passed a few years back.
For what it's worth, I found the article I was thinking of: https://ia.acs.org.au/article/2021/help-government-hack-or-f...
Interesting, that article then links to another article discussing the amendments I was referencing: https://ia.acs.org.au/article/2021/encryption-act-has-cost-a...
Re: Australian Police get online account takeover, data disruption powers
#28FTA: “…agencies can take control of a person’s online account to gather evidence about serious offences without consent, as well as add , copy, delete or alter material to disrupt criminal activity and collect intelligence from online networks.” (emphasis added) How is adding or altering data different than planting evidence?
A list of credit card numbers could be modified so that, for example, real people are not affected, and/or to add "watermark" card numbers that identify the precise origin of the dataset if it is ever used. Hopefully there are strong guards against modified data being used to entrap, and also against modified data being used as evidence. (I'm not yet sure whether these policies are sensible; just trying to figure out…
> Hopefully
Lol. You misunderstand the Australian government's propensity for shitfuckery.
Re: Australian Police get online account takeover, data disruption powers
#29I am disgusted by the mostly apathetic response in Australia to this terrible legislation.
It's just another thing to add to the pile.
Australians have got it too good to care about this sort of thing. Like western society and climate change, taking any kind of action gets in the way of enjoying the fucking weekend; don't be such a fucking downer. More sunshine I say!
Re: Australian Police get online account takeover, data disruption powers
#30I am disgusted by the mostly apathetic response in Australia to this terrible legislation.
Sadly, people that have even a little higher emotion than apathy towards this topic are in the minority of the minority.