3 ms·

Aus gov has a terrible track record with information systems. Data leaks & breaches, flaky IT services, mass robo-debt claims of which 600,000 needed to be re-e

Aus gov has a terrible track record with information systems. Data leaks & breaches, flaky IT services, mass robo-debt claims of which 600,000 needed to be re-evaluated. Not to mention rushing through privacy destroying laws citing "Islamist terrorism, paedophile networks and organised crime". If you are who I think you are you're probably more knowledgable of the particular 2018 law than me. And now they're "rushing out" an app that is intended to track everyone in the country's precise location and who they interact with? I'll wait for the source thank you. The gov only has themselves to blame for this reputation. Apple and Google are releasing official APIs for this, we're doing amazingly well in Australia, can it not wait a week? > Remind them how little time they think before they download dozens of free, adware crap games that are likely far worse for their data & privacy than this ever would be! Isn't it an interesting point that these people would rather trust foreign companies they've never heard of with their location, rather than their own gov? https://www.theguardian.com/australia-news/2016/jul/29/australian-bureau-of-statistics-reports-14-data-breaches-since-2013 https://www.theguardian.com/australia-news/2016/jul/29/austr... https://www.abc.net.au/news/2016-08-09/abs-website-inaccessible-on-census-night/7711652 https://www.abc.net.au/news/2016-08-09/abs-website-inaccessi... https://www.theguardian.com/australia-news/2019/nov/22/pay-the-money-back-robodebt-the-coalitions-backflip-and-how-it-hounded-welfare-recipients https://www.theguardian.com/australia-news/2019/nov/22/pay-t... https://www.techdirt.com/articles/20181208/14440541184/australian-government-passes-law-forcing-tech-companies-to-break-encryption.shtml https://www.techdirt.com/articles/20181208/14440541184/austr...

lysp 6y ago
Assistance and Access Bill: https://www.zdnet.com/article/whats-actually-in-australias-encryption-laws-everything-you-need-to-know/ https://www.zdnet.com/article/whats-actually-in-australias-e... Telecommunications (Interception and Access) Amendment (Data Retention) Bill: https://www.bbc.com/news/world-australia-32061421 https://www.bbc.com/news/world-australia-32061421 Peter Dutton's proposed "give me your password" law: https://www.sydneycriminallawyers.com.au/blog/peter-dutton-proposes-prison-for-refusing-to-provide-passwords/ https://www.sydneycriminallawyers.com.au/blog/peter-dutton-p... > Under the proposals, people who are not even suspected of a crime would face a fine of up to $50,000 and up to five years’ imprisonment for declining to provide a password to their smartphone, computer or other electronic devices. > Furthermore, anyone (an IT professional, for example) who refuses to help the authorities crack a computer system when ordered will face up to five years in prison. If the crime being investigated is terrorism-related then the penalty for non-compliance increases to 10 years in prison and/or a $126,000 fine. > Tech companies who refuse to assist authorities to crack encryption when asked to do so, will face up to $10 million in fines. What’s more, if any employee of the company tells anyone else they have been told to do this, they will face up to five years in gaol.
- friendlybus 6y ago
  Data retention is what GCHQ has been doing for years regardless of laws. Dutton is an ultra conservative border protector type, don’t expect all his proposals to pass. How many DEFCons and CCC conferences do you have to go to before you hear a rubber hose cryptography joke? Dan Greer’s realpolitik talk in 2015 mentions that cyber security is all aggression little defence. If it were a soccer game it would be 421-420 at the 20minute mark. The best of the best in the US struggle with this stuff behind closed doors, seeing Australia take the flak in public is fine, but don’t pretend US and UK are innocent. These proposals are not the leading edge of privacy invasion.
- sjy 6y ago
  It’s inaccurate to call it “Peter Dutton’s give me your password law” – it’s been around since 2001 (although the maximum penalty was increased from 2 to 10 years in 2018), and there are equivalent laws in most developed countries. As far as I am aware, only in the US have people actually spent years in prison solely for refusing to disclose a password: https://arstechnica.com/tech-policy/2020/02/man-who-refused-to-decrypt-hard-drives-is-free-after-four-years-in-jail/ https://arstechnica.com/tech-policy/2020/02/man-who-refused-...

lysp 6y ago

Assistance and Access Bill: https://www.zdnet.com/article/whats-actually-in-australias-encryption-laws-everything-you-need-to-know/ https://www.zdnet.com/article/whats-actually-in-australias-e... Telecommunications (Interception and Access) Amendment (Data Retention) Bill: https://www.bbc.com/news/world-australia-32061421 https://www.bbc.com/news/world-australia-32061421 Peter Dutton's proposed "give me your password" law: https://www.sydneycriminallawyers.com.au/blog/peter-dutton-proposes-prison-for-refusing-to-provide-passwords/ https://www.sydneycriminallawyers.com.au/blog/peter-dutton-p... > Under the proposals, people who are not even suspected of a crime would face a fine of up to $50,000 and up to five years’ imprisonment for declining to provide a password to their smartphone, computer or other electronic devices. > Furthermore, anyone (an IT professional, for example) who refuses to help the authorities crack a computer system when ordered will face up to five years in prison. If the crime being investigated is terrorism-related then the penalty for non-compliance increases to 10 years in prison and/or a $126,000 fine. > Tech companies who refuse to assist authorities to crack encryption when asked to do so, will face up to $10 million in fines. What’s more, if any employee of the company tells anyone else they have been told to do this, they will face up to five years in gaol.

friendlybus 6y ago
Data retention is what GCHQ has been doing for years regardless of laws. Dutton is an ultra conservative border protector type, don’t expect all his proposals to pass. How many DEFCons and CCC conferences do you have to go to before you hear a rubber hose cryptography joke? Dan Greer’s realpolitik talk in 2015 mentions that cyber security is all aggression little defence. If it were a soccer game it would be 421-420 at the 20minute mark. The best of the best in the US struggle with this stuff behind closed doors, seeing Australia take the flak in public is fine, but don’t pretend US and UK are innocent. These proposals are not the leading edge of privacy invasion.
sjy 6y ago
It’s inaccurate to call it “Peter Dutton’s give me your password law” – it’s been around since 2001 (although the maximum penalty was increased from 2 to 10 years in 2018), and there are equivalent laws in most developed countries. As far as I am aware, only in the US have people actually spent years in prison solely for refusing to disclose a password: https://arstechnica.com/tech-policy/2020/02/man-who-refused-to-decrypt-hard-drives-is-free-after-four-years-in-jail/ https://arstechnica.com/tech-policy/2020/02/man-who-refused-...