3 ms·
The census fiasco was a truly special kind of incompetence. The best inside analysis was from the folks behind the Risky Business infosec podcast: https://risk
by SyneRyder 8y ago
The census fiasco was a truly special kind of incompetence. The best inside analysis was from the folks behind the Risky Business infosec podcast:
https://risky.biz/censusfail/ https://risky.biz/censusfail/
Summary: The project was outsourced to IBM (that alone probably says it all), who didn't purchase any DDoS protection. A small attack crashed the first firewall, and the backup firewall didn't have rules loaded. That caused IBM's monitoring tools to flag system logs as exfiltration, so they called in the Australian Signals Directorate (ie national security) and turned everything off until intelligence agencies completed an investigation of the false positive.
- Namidairo 8y agoAll the marketing calling it "Census night" and encouraging people to do it on the same evening instead of over the week probably didn't help spreading the load out.
- halchion 8y agoFurthermore, although it's true that IBM didn't purchase DDOS protection, neither did the government pay them to purchase it. IBM is incompetent but in this particular case I can't blame them for attempting to make a meager profit out of the pittance the Australian government chose to spend on their first act of digital governance.