4 ms·

The Australian legislation makes no such distinction. If the government wants to spy on someone or requires you to make a backdoor, you must do it, no matter th

The Australian legislation makes no such distinction. If the government wants to spy on someone or requires you to make a backdoor, you must do it, no matter the consequences (or even compatibility if they are providing the backdoor software). This legislation applies to all citizens, even if they have migrated to another country, btw. I'm sure other developed nations have similar power to compel their citizens.

shrimpx 4y ago
What happens if you can't comply due to sheer difficulty? Like if your design simply does not allow you to target a specific user at a technical level. Are you forced to shut down your company or something?
- jimmydorry 4y ago
  >tech firms and businesses may be penalized up to $7.2 million USD if they don’t respond to the government's requests [1] >The legislation ... creates a new framework for law enforcement agencies to request or compel technical assistance from tech companies, even to create new capabilities such as backdoors to get around the encryption in some of their products. [2] They request a backdoor in the encryption and if the cooperator does not cooperate, then fine the company / Australian citizen and if they enter the country again, they can go to jail. [1] https://fee.org/articles/australia-s-unprecedented-encryption-law-is-a-threat-to-global-privacy/ https://fee.org/articles/australia-s-unprecedented-encryptio... [2] https://www.theguardian.com/australia-news/2020/jul/09/australias-world-first-anti-encryption-law-should-be-overhauled-independent-monitor-says https://www.theguardian.com/australia-news/2020/jul/09/austr... Since googling a bit more, this is the best overview of the legislation: https://carnegieendowment.org/2021/03/31/encryption-debate-in-australia-2021-update-pub-84237 https://carnegieendowment.org/2021/03/31/encryption-debate-i...
em-bee 4y ago
the EU is debating similar laws right now, which means they don't have that yet, and neither does the US as far as i know. this is quite different from laws that allow to push a specifically crafted app to a particular individual. and even the australian law apparently states that companies cannot be compelled to introduce a "systemic weakness" or a "systemic vulnerability" https://arstechnica.com/tech-policy/2018/12/australia-passes-new-law-to-thwart-strong-encryption/ https://arstechnica.com/tech-policy/2018/12/australia-passes... https://www.schneier.com/blog/archives/2018/12/new_australian_.html https://www.schneier.com/blog/archives/2018/12/new_australia...
- jimmydorry 4y ago
  > Technical Capability Notices (TCNs), which are compulsory notices for a designated communication provider to build a new capability, so that it can fulfil subsequent Technical Assistance Notices and Requests >The current law prohibits the creation of a “systemic weakness” or “systemic vulnerability” in encryption and other systems of “electronic protection,” terms that have proved difficult to define. They can be compelled to introduce decryption and interception capability. It's just sophistry for them to say that this can't introduce weakness or vulnerability in the underlying system. [1] https://carnegieendowment.org/2021/03/31/encryption-debate-in-australia-2021-update-pub-84237 https://carnegieendowment.org/2021/03/31/encryption-debate-i...

shrimpx 4y ago

What happens if you can't comply due to sheer difficulty? Like if your design simply does not allow you to target a specific user at a technical level. Are you forced to shut down your company or something?

jimmydorry 4y ago
>tech firms and businesses may be penalized up to $7.2 million USD if they don’t respond to the government's requests [1] >The legislation ... creates a new framework for law enforcement agencies to request or compel technical assistance from tech companies, even to create new capabilities such as backdoors to get around the encryption in some of their products. [2] They request a backdoor in the encryption and if the cooperator does not cooperate, then fine the company / Australian citizen and if they enter the country again, they can go to jail. [1] https://fee.org/articles/australia-s-unprecedented-encryption-law-is-a-threat-to-global-privacy/ https://fee.org/articles/australia-s-unprecedented-encryptio... [2] https://www.theguardian.com/australia-news/2020/jul/09/australias-world-first-anti-encryption-law-should-be-overhauled-independent-monitor-says https://www.theguardian.com/australia-news/2020/jul/09/austr... Since googling a bit more, this is the best overview of the legislation: https://carnegieendowment.org/2021/03/31/encryption-debate-in-australia-2021-update-pub-84237 https://carnegieendowment.org/2021/03/31/encryption-debate-i...

em-bee 4y ago

the EU is debating similar laws right now, which means they don't have that yet, and neither does the US as far as i know. this is quite different from laws that allow to push a specifically crafted app to a particular individual. and even the australian law apparently states that companies cannot be compelled to introduce a "systemic weakness" or a "systemic vulnerability" https://arstechnica.com/tech-policy/2018/12/australia-passes-new-law-to-thwart-strong-encryption/ https://arstechnica.com/tech-policy/2018/12/australia-passes... https://www.schneier.com/blog/archives/2018/12/new_australian_.html https://www.schneier.com/blog/archives/2018/12/new_australia...

jimmydorry 4y ago
> Technical Capability Notices (TCNs), which are compulsory notices for a designated communication provider to build a new capability, so that it can fulfil subsequent Technical Assistance Notices and Requests >The current law prohibits the creation of a “systemic weakness” or “systemic vulnerability” in encryption and other systems of “electronic protection,” terms that have proved difficult to define. They can be compelled to introduce decryption and interception capability. It's just sophistry for them to say that this can't introduce weakness or vulnerability in the underlying system. [1] https://carnegieendowment.org/2021/03/31/encryption-debate-in-australia-2021-update-pub-84237 https://carnegieendowment.org/2021/03/31/encryption-debate-i...