Australian ISPs Not Ready For Mandatory Data Retention (abc.net.au)
ferrisoxide.com writes: October 13 marks the day Australian ISPs are required by law to track all web site visits and emails of their users, but according to an article on the Australian Broadcasting Corporation's news site the majority of ISPs are not ready to begin mandatory data retention. The article's author, Will Ockenden, had previously released his own metadata to readers in an experiment to see how effectively this kind of data reveals personal habits of online users. The majority of Australians appear unconcerned with this level of scrutiny of their lives, given the minimal reaction to this and proposed tougher legislation designed to deal with the threats of crime and terrorism.
marks the day australian internet users start using vpn for everything, and not just netflix and hulu.
This sounds like it will be fun to exploit.
"What do you mean the servers are already full?!"
So who isn't going to VPN out of the country and hosting their emails outside AU after this?
So they will pay millions (through ISP sub fees) to track all the useless noise while maybe catching some really really stupid people?
What is in the "significant amount of new data" aspect? ... at 6 am until 9am. :) :)
A user had an ip of
Collection covers the given ip connected with a url, domain name, any terms or words that are not encrypted?
The subscriber id, source of a communication, destination of a communication, date, time and duration of a communication, type or relevant service used, equipment used.
Thats a lot of computer searchable data for two years and human readable words been kept
Only the contents or substance of a communication gets filtered from the logging
Domestic spying is now "Benign Information Gathering"
While I'm certain the politicos who came up with this idea had nothing but the best intentions in mind they have in fact mandated sites keep a trove of data that will prove irresistible to blackhats. How many people will be blackmailed or have their lives turned upside down ala Ashley Madison over retained data that falls into nefarious hands before this ill conceived plan meets its Waterloo?
I don't know that we Australians were "unconcerned with this level of scrutiny of their lives" so much as constantly distracted by horror at the continual appalling actions, stuff ups and general inability to govern of the Abbott government. Given a few moments to think about things other than government officials chartering helicopters to go to party functions, rape and other abuses of asylum speakers in our care, blackmailing of the academic community to support legislation, an incompetent Minister for Defence amongst many others ministers, bashing of the Muslim community, awarding Prince Philip a knighthood, abuse of the Royal Commission system to go after political adversaries, attacks on the state broadcaster for not towing the line, and on and on every week for 2 years, then perhaps we'd have had time to kick up a fuss about data retention. Now that Abbott has been kicked out by his own party we'll have a chance to have a proper think about data retention and what it means, though it's probably too late.
VPN's are cheap. Thank goodness terrorists and criminals don't know they exist. http://bit.do/australian-vpn
Thankful I'm not Australian. Worse than America almost. Maybe they're trying to be like Britain.
-- I ignore anonymous replies to my comments and postings.
For some reason, Estonia is heralded as something special and progressive when it comes to IT. It's far form it, when it come to privacy and basic human rights.
Telcos are forced to keep EVERYTHING for 7 years. All your activities in the web are logged and so are all your phone calls and mobile data activities.
If you look close, Estonia is a fucking privacy nightmare.
Didint know Australia has such huge issues with terrorism that it forces them to spy all their citizens... Sounds more like something East-Germany might have had in place to enforce conforming with official truth.
The biggest problem is shown in the ABC article in the summary. At this time, ISPs are starting to do it but in a grace period (until April 2017). 84% of ISPs are storing data in plain text, right now, because of the "costs" of encryption. 61% of ISPs have applied to be permanently exempt from encrypting this data. Just looking at this, you already know this shit is going to get stolen. You just know it. Some ISPs will certainly have this data directly accessible from their corporate LANs and some will even have it accessible from the internet. You know it without even needing to be told. Because this shit happens all the time. Many of these ISPs will not have done much to get ready and they'll have shoddily made, inhouse systems that were made as quickly and cheaply as possible. So it's a certainty that this data is going to get stolen. And when that happens, who knows what information will be leaked, that someone really didn't want leaked. It'll make Ashley Madison look trivial.
What would the government do then? Shut down the internet by forcing the ISPs to shut down? Put the owners in prison? Torture? Murder? It seems to be that unless the government is able and willing to supply internet service to the entire population there isn't much they can do to everyone.
I mean, everyone in Australia was already using a VPN so that they'd actually have something to watch on Netflix, so I can't see how this new law would work at all.
My real issue is globally the loss of the small ISP. Back in the dialup days even outside major cities, we had access to dozens of ISP's we could pick the big global names just as AOL, Prodigy and Compuserve. But we we had access to a bunch of smaller ISP's who may have offered less services, but also were more affordable. 56.6k dial up for $8.50 a month was a good deal, or $20 for 100 Megabytes with no backout, there was also pricing like $25 for 50 hours. There were a lot of options and we could pick a style that was best for us. The ISP could offer these low prices (at the time) because they needed to cover the cost of a T1 line (about $1,000 a month) and x amount of LAN Lines, usually between 8-24. They could run the ISP with a small business of 1 person. They were not responsible for what their users did, or what they viewed. Nor did they really care to try, as logging all such traffic would fill up expensive Drive storage, which they often would rather keep for email and personal web hosting.
Today ISP also own the infrastructure and have increasing requirements which makes them more expensive and worse customer experience.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
"Australians appear unconcerned with this level of scrutiny of their lives" Sad. Just sad.
Why are the Aussies so hell bent in turning back into a prison colony? Must be Stockholm syndrome
Block all non-encrypted traffic and record per-flow stats into a compressed store. It may be a little difficult for customers to find secure alternatives at first... helpful hints in an information packet snail mailed to your customers could go a long way to making the arrangement workable for your users.
In the mean time Australian ISP associations should use every second they have left to make it clear to the world non-encrypted communications will no longer be accepted by Australian ISPs. If the world does not want to be cut off from Australia it should stop using insecure protocols.
The metadata retention scheme requires the storage of:
- Connection open time and duration
- Your location
- Total amount of data sent/received during the connection
- Your IP address
- * Does not require collecting the destination IP address, but it will be more effort to strip this out with lots of tools
So if you're web browsing lots from home or making lots of connections to servers an ISP has to store lots of records. However, they only need one database row for your VPN connection!
Then ISPs could offer discounts to VPN users as they reduce the amount of metadata needing to be collected.
Want communications without data retention? Join a community network like the wireless groups.
https://en.wikipedia.org/wiki/...
Air-Stream in South Australia http://air-stream.org/
WACAN in Western Australia http://www.wacan.asn.au/
Melbourne Wireless in Victoria http://melbourne.wireless.org....
Canberra Wireless http://www.cwn.net.au/
If there isn't one near you start your own and put up an access point for others to see.