>Are they going to somehow swear all the devs in a department to secrecy? Yes. >How do they enforce this? How they usually enforce laws. Jail. In Australia

>Are they going to somehow swear all the devs in a department to secrecy? Yes. >How do they enforce this? How they usually enforce laws. Jail. In Australia it's up to 10 years. https://www.comparitech.com/blog/information-security/assistance-access-bill/ https://www.comparitech.com/blog/information-security/assist... >These orders can force people to hand over their passwords, their biometric data, or knowledge of any relevant systems and devices. They don’t just target the person suspected of a crime, but can also cover their associates, owners of the devices in question, systems administrators and those who have used the devices. >Not complying with these requests under the SD Act can lead to up to 10 years imprisonment and an A$126,000 (US$88,212) fine. >In a similar manner, the changes to the ASIO Act enable the Director-General to petition the Attorney-General to force individuals to provide the same kind of data. Refusing to comply can lead to up to 5 years of jail, or an A$63,000 (US$44,106) penalty. One of the biggest issues with the new powers under the ASIO Act is that there is no judicial oversight – the authorities never have to go before a judge to get permission. >It’s worth noting that these powers can be used in the investigation of any crime with a maximum penalty of three years or more. It seems heavy-handed that someone who refuses to comply could potentially end up with a sentence that exceeds the penalty for the original crime. >I wouldn't feel any obligation to not inform the press. Worth noting that anyone who reported on it would face jail time as well.