4 ms·

"This new architecture provides a way to circumvent traditional security controls by exploiting equipment in the edge of the network – exploitation which may af

by jazoom 8y ago

"This new architecture provides a way to circumvent traditional security controls by exploiting equipment in the edge of the network – exploitation which may affect overall network integrity and availability, as well as the confidentiality of customer data." Hey Australian Government. You know what also protects confidentiality of customer data? Encryption.

Jhsto 8y ago
Cellular base stations allow a database of SIM cards to be created. This could be considered a superior tracker to advertisement IDs of Apple and Google. This is because the ID is retained between user equipment changes. This information is exchanged before actual data transmission, i.e., it does not matter even if the actual data would be encrypted. I think it's inevident that the more precise geolocation data of 5G (due to an increased base station installations required by the mmWave frequencies) will be sold to advertisers. Essentially, Australia is betting that European manufacturers will respect privacy better than China - and sure, at least European companies do not need to hand over their data to authorities. Having seen surveillance implementations installed in Chinese IoT devices, it is more or less true that China is at least keeping the doors open for an intertwined database where information from various different Chinese companies can be built.
joshschreuder 8y ago
The laws of mathematics don't apply in Australia
- jazoom 8y ago
  Seems like he didn't believe the mathematics in the polls either.
  - BLKNSLVR 8y ago
    He believes in them when it suits him. "The iron laws of arithmetic confirmed my leadership," (https://www.bbc.com/news/world-australia-45266718 https://www.bbc.com/news/world-australia-45266718) He, like all politicians, also seems to believe in cakes they can both have and eat.
mkj 8y ago
Encryption doesn't prevent denial of service, which is probably one of the big concerns.
- r3bl 8y ago
  The parent comment is referencing a batshit approach of the Australian government towards encryption: https://www.theguardian.com/technology/2018/jun/06/planned-laws-to-force-tech-firms-to-reveal-encrypted-data https://www.theguardian.com/technology/2018/jun/06/planned-l... They're drafting a law that's going to require encryption backdoors. They're completely ignorant about the impossibility of having "secure backdoors", going as far as the Prime Minister saying: > The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia.
Kadin 8y ago
Encryption isn't a magic bullet. If you have good visibility into the network there's a hell of a lot you can do with traffic analysis and metadata. Plus, if you own the end-user device you can just go around the encryption since the data, by definition, has to be displayed to the user decrypted. It's a hard problem. Encryption is part of the solution, but it's not the solution.
- A2017U1 8y ago
  Excellent response, I've become quite sceptical of the Australian calls for encryption backdoors, frankly think the government knows they aren't necessary and can back down to appease the public while silently scooping up everything. Catchy lines like the laws of maths quote is a hugely successful distraction. Mandatory metadata is already retained for 2 years at the consumers expense, no one has ever released how much or what is actually kept as all freedom of information requests by journalists have been denied. It's estimated that every adult generates around 15000 data points a day, it's known that mobile phone signal strength is kept allowing triangulation within 100m or so of every citizen every few minutes. Last year alone there was over 300,000 warrantless requests made by 60 government agencies, many more are legally allowed to make requests, right down to small local councils in the middle of nowhere with 15 staff members and obscure agencies such as horse racing officials. There's absolutely no oversight, I'm stuggling to imagine how many people it would actually take to investigate around 1000 requests a day, every day of the week. It's only a matter of time before some serious abuse of the system occurs.
gonzo41 8y ago
Encryption. pfft! we're going to invest in new coal fired power plants..... But really this decision was made in a snap by Scott Morrison in a powerplay to look tough on outsiders to the conservative base. Right now Australia is doing it's 2.5 yearly cycle of deposing a prime minister and installing someone else. Like that Dutton guy from texas :P

by jazoom 8y ago

Jhsto 8y ago

Cellular base stations allow a database of SIM cards to be created. This could be considered a superior tracker to advertisement IDs of Apple and Google. This is because the ID is retained between user equipment changes. This information is exchanged before actual data transmission, i.e., it does not matter even if the actual data would be encrypted. I think it's inevident that the more precise geolocation data of 5G (due to an increased base station installations required by the mmWave frequencies) will be sold to advertisers. Essentially, Australia is betting that European manufacturers will respect privacy better than China - and sure, at least European companies do not need to hand over their data to authorities. Having seen surveillance implementations installed in Chinese IoT devices, it is more or less true that China is at least keeping the doors open for an intertwined database where information from various different Chinese companies can be built.

joshschreuder 8y ago

The laws of mathematics don't apply in Australia

jazoom 8y ago
Seems like he didn't believe the mathematics in the polls either.
- BLKNSLVR 8y ago
  He believes in them when it suits him. "The iron laws of arithmetic confirmed my leadership," (https://www.bbc.com/news/world-australia-45266718 https://www.bbc.com/news/world-australia-45266718) He, like all politicians, also seems to believe in cakes they can both have and eat.

mkj 8y ago

Encryption doesn't prevent denial of service, which is probably one of the big concerns.

r3bl 8y ago
The parent comment is referencing a batshit approach of the Australian government towards encryption: https://www.theguardian.com/technology/2018/jun/06/planned-laws-to-force-tech-firms-to-reveal-encrypted-data https://www.theguardian.com/technology/2018/jun/06/planned-l... They're drafting a law that's going to require encryption backdoors. They're completely ignorant about the impossibility of having "secure backdoors", going as far as the Prime Minister saying: > The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia.

Kadin 8y ago

Encryption isn't a magic bullet. If you have good visibility into the network there's a hell of a lot you can do with traffic analysis and metadata. Plus, if you own the end-user device you can just go around the encryption since the data, by definition, has to be displayed to the user decrypted. It's a hard problem. Encryption is part of the solution, but it's not the solution.

A2017U1 8y ago
Excellent response, I've become quite sceptical of the Australian calls for encryption backdoors, frankly think the government knows they aren't necessary and can back down to appease the public while silently scooping up everything. Catchy lines like the laws of maths quote is a hugely successful distraction. Mandatory metadata is already retained for 2 years at the consumers expense, no one has ever released how much or what is actually kept as all freedom of information requests by journalists have been denied. It's estimated that every adult generates around 15000 data points a day, it's known that mobile phone signal strength is kept allowing triangulation within 100m or so of every citizen every few minutes. Last year alone there was over 300,000 warrantless requests made by 60 government agencies, many more are legally allowed to make requests, right down to small local councils in the middle of nowhere with 15 staff members and obscure agencies such as horse racing officials. There's absolutely no oversight, I'm stuggling to imagine how many people it would actually take to investigate around 1000 requests a day, every day of the week. It's only a matter of time before some serious abuse of the system occurs.

gonzo41 8y ago

Encryption. pfft! we're going to invest in new coal fired power plants..... But really this decision was made in a snap by Scott Morrison in a powerplay to look tough on outsiders to the conservative base. Right now Australia is doing it's 2.5 yearly cycle of deposing a prime minister and installing someone else. Like that Dutton guy from texas :P