Earlier quoted context omitted.
I’m seriously considering moving from Australia to a country that isn’t part of the Five Eyes.
I'm thinking about moving to NZ. How are they?
[deleted]
Australian parliament passes encryption laws unamended
81–90 of 415 posts
Re: Australian parliament passes encryption laws unamended
#82Is there a (non-alarmist/non-defensive/non-partisan) summary available of what the bill actually contains and what its practical effects might be?
I do not have one. I'd also love one apart from the aph one below. (It's good btw) What I believe, is that this bill is heavily influenced by the emerging UK law, by experiences failing decrypt on devices, a pervasive sense of panic and an election year. Australian police and security have form here asking big when they know the outgoing government is their last chance that gets big wins. Australia card (digital ID)…
Censorship didn't die with Conroy. Australian ISPs/DNS servers are required to block The Pirate Bay, for example. Just because it's trivial to work around doesn't mean it isn't censorship
Re: Australian parliament passes encryption laws unamended
#83Earlier quoted context omitted.
This isn't quite true. The bill allows companies to provide statistics on how many TARs, TANs, and TCNs they've been served within a 6-month window. The obvious problem is that nothing stops them from lying or just omitting that information -- because why would you admit that your software is insecure?
Employees of a company may also be served, and required not to tell their employer. So a company may not know if they are compromised.
I doubt you could introduce backdoors in big software (Messenger, iMessage, WhatsApp) using only one/a few employees - unless everyone who does code reviews happens to live in Australia.
Re: Australian parliament passes encryption laws unamended
#84I live in Australia and this is the dumbest bill I have ever seen in parliament. Australian politicians have no clue what the fuck they have just done. Rushed through in less than four days so they can go on holidays. Bigots.
To quote our last PM (well, this week anyway): "The laws of Australia prevail in Australia, I can assure you of that. The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia."
War is Peace; Freedom is Slavery; Ignorance is Strength.
Re: Australian parliament passes encryption laws unamended
#85Bill Shorten is an idiot for letting this get through.
I agree 100%, but we can assign just as much blame to Morrison for presenting the bill as well.
Re: Australian parliament passes encryption laws unamended
#86Earlier quoted context omitted.
I do not have one. I'd also love one apart from the aph one below. (It's good btw) What I believe, is that this bill is heavily influenced by the emerging UK law, by experiences failing decrypt on devices, a pervasive sense of panic and an election year. Australian police and security have form here asking big when they know the outgoing government is their last chance that gets big wins. Australia card (digital ID)…
Censorship didn't die with Conroy. Australian ISPs/DNS servers are required to block The Pirate Bay, for example. Just because it's trivial to work around doesn't mean it isn't censorship
True. Alston had a lot of this story too. Brian Harradine and redneck wowserism. But what we got was less than the moral crusade and the police wanted going in.
Re: Australian parliament passes encryption laws unamended
#87I am an Australian software developer and am currently getting https://www.lifepim.com ready for release which, funnily enough has the main selling point as "Your data is private, secure and free from adverts" - what a joke. The scary part is not knowing how the law is going to be implemented - I am hopeful that smart people work on the implementation of it in terms of practicality. If it is an on request thing "give…
Don't launch in Australia.
Or don't launch in Europe.
GDPR and this legislation are in direct conflict. Pick a market...
Re: Australian parliament passes encryption laws unamended
#88Business opportunity for EU devs provide Australian businesses with PR and code review to ensure their software isn't backdoor'd
And if it is, then what? Good idea though. Maybe some kind of Certification?
Well ideally you get in early and catch it in a mandatory PR process, all PR's pass through EU devs who are the only ones who can merge.
Otherwise yes, security certification process to review existing code and then maintain as above.
Re: Australian parliament passes encryption laws unamended
#89I am an Australian software developer and am currently getting https://www.lifepim.com ready for release which, funnily enough has the main selling point as "Your data is private, secure and free from adverts" - what a joke. The scary part is not knowing how the law is going to be implemented - I am hopeful that smart people work on the implementation of it in terms of practicality. If it is an on request thing "give…
I’m sure your customers will believe you if you say that your government did not tell you to lie about backdoors and weaknesses in your products security.
Re: Australian parliament passes encryption laws unamended
#90Earlier quoted context omitted.
I'd recommend actually reading the bill to form your own conclusions. The main problem is that it mostly is a series of amendments, and many of them are quite unrelated. Most of the discussion is about the Technical Capability Notice section (which allows the government to compel a telecommunication provider, under threat of 5 years imprisonment, to create the ability to access communications otherwise inaccessible)…
The best discussion I've found in terms of the legislation is at [1]. The most insidious part to me as a programmer, is the definition of a "Designated Communications Provider" which (amongst others) includes (S317C, item 6): "the person develops, supplies or updates software used, for use, or likely to be used, in connection with: (a) a listed carriage service; or (b) an electronic service that has one or more end-u…
[deleted]