3 ms·

What's the impact on you going to be like?

jjcm 8y ago
Hard to say. The final text of the bill with the amendments that got added this week haven't been published officially yet (https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r6195 https://www.aph.gov.au/Parliamentary_Business/Bills_Legislat... only the first reading is available). Once it is we'll have to do a full review from legal - it's something a bunch of us are wondering internally right now. There are a lot of loopholes in the bill, so it's hard to say what things we'll be required to do, if any. The bigger impact will be on the world view of the tech scene in Australia. Needless to say this is very damaging, and there are concerns that we wont be able to handle any European data in Australia as it could be a potential violation of GDPR. Again though, that will have to wait until we finish the legal review of the bill and how it impacts us. In talking with some other companies, some of them are looking at potentially moving any role that would have the ability to compromise encryption outside of the country. That way there'd be no way any employee could be legally forced to implement any backdoors or weakening of encryption. That's an extreme measure and is probably overkill right now as the loophole that states you don't have to do anything to weaken your security will likely be used as a challenge against building in any backdoors. We'll have to wait and see how things pan out.
- dunpeal 8y ago
  > That's an extreme measure and is probably overkill right now as the loophole that states you don't have to do anything to weaken your security will likely be used as a challenge against building in any backdoors. I saw that, but another part of the bill that I've seen (on a cursory review, and as a non-professional) is the sweeping, extreme secrecy measures surrounding the execution of any part of the bill. Basically, my understanding is that you can't tell me as a customer if you've been required to compromise my privacy. So say you even take the extreme measure and ship some sensitive roles overseas. If for any reason that's not enough, and your government requires you to surrender some of my data, then you will be legally unable to tell me. That will destroy all trust. I like Atlassian and am extremely sorry to see this happening to you.
- komali2 8y ago
  Any internal discussions about moving out of Australia? I've read an interpretation that indicates that all Australian citizen employees are now essentially compromised, as they could be compelled under penalty of jail time to insert backdoors into an application without informing their employers.

jjcm 8y ago

Hard to say. The final text of the bill with the amendments that got added this week haven't been published officially yet (https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r6195 https://www.aph.gov.au/Parliamentary_Business/Bills_Legislat... only the first reading is available). Once it is we'll have to do a full review from legal - it's something a bunch of us are wondering internally right now. There are a lot of loopholes in the bill, so it's hard to say what things we'll be required to do, if any. The bigger impact will be on the world view of the tech scene in Australia. Needless to say this is very damaging, and there are concerns that we wont be able to handle any European data in Australia as it could be a potential violation of GDPR. Again though, that will have to wait until we finish the legal review of the bill and how it impacts us. In talking with some other companies, some of them are looking at potentially moving any role that would have the ability to compromise encryption outside of the country. That way there'd be no way any employee could be legally forced to implement any backdoors or weakening of encryption. That's an extreme measure and is probably overkill right now as the loophole that states you don't have to do anything to weaken your security will likely be used as a challenge against building in any backdoors. We'll have to wait and see how things pan out.

dunpeal 8y ago
> That's an extreme measure and is probably overkill right now as the loophole that states you don't have to do anything to weaken your security will likely be used as a challenge against building in any backdoors. I saw that, but another part of the bill that I've seen (on a cursory review, and as a non-professional) is the sweeping, extreme secrecy measures surrounding the execution of any part of the bill. Basically, my understanding is that you can't tell me as a customer if you've been required to compromise my privacy. So say you even take the extreme measure and ship some sensitive roles overseas. If for any reason that's not enough, and your government requires you to surrender some of my data, then you will be legally unable to tell me. That will destroy all trust. I like Atlassian and am extremely sorry to see this happening to you.
komali2 8y ago
Any internal discussions about moving out of Australia? I've read an interpretation that indicates that all Australian citizen employees are now essentially compromised, as they could be compelled under penalty of jail time to insert backdoors into an application without informing their employers.