Australians Who Won't Unlock Their Phones Could Face 10 Years In Jail (sophos.com)
An anonymous reader quotes the Sophos security blog:
The Australian government wants to force companies to help it get at suspected criminals' data. If they can't, it would jail people for up to a decade if they refuse to unlock their phones. The country's Assistance and Access Bill, introduced this week for public consultation, strengthens the penalties for people who refuse to unlock their phones for the police. Under Australia's existing Crimes Act, judges could jail a person for two years for not handing over their data. The proposed Bill extends that to up to ten years, arguing that the existing penalty wasn't strong enough...
[C]ompanies would be subject to two kinds of government order that would compel them to help retrieve a suspect's information. The first of these is a "technical assistance notice" that requires telcos to hand over any decryption keys they hold. This notice would help the government in end-to-end encryption cases where the target lets a service provider hold their own encryption keys. But what if the suspect stores the keys themselves? In that case, the government would pull out the big guns with a second kind of order called a technical capability notice. It forces communications providers to build new capabilities that would help the government access a target's information where possible. In short, the government asks companies whether they can access the data. If they can't, then the second order asks them to figure out a way....
The government's explanatory note says that the Bill could force a manufacturer to hand over detailed specs of a device, install government software on it, help agencies develop their own "systems and capabilities", and notify agencies of major changes to their systems.
"[T]he proposed legislation also creates a new class of access warrant that lets police officers get evidence from devices in secret before the device encrypts it, including intercepting communications and using other computers to access the data. It also amends existing search and seizure warrants, allowing the cops to access data remotely, including online accounts."
[C]ompanies would be subject to two kinds of government order that would compel them to help retrieve a suspect's information. The first of these is a "technical assistance notice" that requires telcos to hand over any decryption keys they hold. This notice would help the government in end-to-end encryption cases where the target lets a service provider hold their own encryption keys. But what if the suspect stores the keys themselves? In that case, the government would pull out the big guns with a second kind of order called a technical capability notice. It forces communications providers to build new capabilities that would help the government access a target's information where possible. In short, the government asks companies whether they can access the data. If they can't, then the second order asks them to figure out a way....
The government's explanatory note says that the Bill could force a manufacturer to hand over detailed specs of a device, install government software on it, help agencies develop their own "systems and capabilities", and notify agencies of major changes to their systems.
"[T]he proposed legislation also creates a new class of access warrant that lets police officers get evidence from devices in secret before the device encrypts it, including intercepting communications and using other computers to access the data. It also amends existing search and seizure warrants, allowing the cops to access data remotely, including online accounts."
Dangerous shift...
Ten years for forgetting my pin number. I have done that.
They might just as well lock everyone up in advance, just in case.
"We mustn't be caught by surprise by our own advancing technology" -- Aldous Huxley
Can one "plead the fifth" in Australia?
"[T]he proposed legislation also creates a new class of access warrant that lets police officers get evidence from devices in secret before the device encrypts it, including intercepting communications and using other computers to access the data. It also amends existing search and seizure warrants, allowing the cops to access data remotely, including online accounts."
With such capabilities, how could the courts prove the evidence was not tampered with, invented whole-cloth, planted by the police, or merely stored on the target device by a third party for purposes of framing or obfuscation?
So everyone with an interest in privacy will use steganographic tools, while everyone else has no privacy. Well done, Australia!
This is fucking awful.
I bet they wouldn't like it the public got access to THEIR phones, but its ok for them to get access to ours?
Fuckers.
Imagine a function built in to Android or IOS which re-encrypts the storage with a transient key which it then throws away.
It could be triggered by entering a special pin code or something similar.
Where are we going and why are we in a handbasket?
The phone needs two keys - one unlocks it and the other wipes it and then unlocks it.
That sound you hear is a collective middle finger from every tech company on the planet towards Mr Malcom Turnbull and buddies. In reality, Australia is too small a market for them to give two shits about and any company could withdraw from the Australian market and it wouldn't change a pixel of their bottom line. Sure, it would piss the Australian people off if they couldn't get an iPhone or decent Android, but there are only 25 million of us.
Hellstra and Optarse would release their own branded devices again, with a fully compliant mobile operating system on them and those would be the two choices of device you have.
I don't count Microsoft in the collective, they've shown time and time again, they'll screw their custo... products over at the whim of governments.
Although we might not yet have the tech to do this, I can easily imagine a password system in the not too distant future that is tied with a wetware mechanism that analyzes the state of mind of the person entering the password to determine who is entering the password and their emotional state while they are entering it. If the person is under any duress while they are entering the password, then it will not unlock.
Thus, it would be provable that you have no ability to unlock it for them.... what would they do about that, exactly?
File under 'M' for 'Manic ranting'
This was actually an issue for agents during WW2. Marks got agents to stop using memorized encryption keys and instead use one time codes written on silk, with instructions to burn each piece after use.
That way the Nazis could not torture there code out of them and then read their back traffic, which could be very serious.
... just take a shit and give it to them.
Arrest someone your government dislikes, take phone, demand pin, change pin, tell detainee their pin doesn't work so you must have lied, put in jail for 10 years.
so apple will pull out but will cave in china!
If they gave you something to artificially try and induce a cooperative state, then the tech should be able to discern that you were not in a normal frame of mind, and could still refuse access.
The principle behind using such mechanisms would be that if a would-be snoop knows in advance that such mechanism are in place, then they would not try to coerce someone to give them access in the first place because they know ahead of time that any effort they might undertake will fail.
File under 'M' for 'Manic ranting'
That's why I only use pay phones.
Just get an app that has 2 codes, one that unlocks the phone, and another that wipes the phone. If they are requiring the phone un locked to look for evidence how can they prove that it was there in the first place ? The only thing I keep on my phone is the contact list, I delete call history, received, and outgoing, as well as all my text history on a daily basis already.
errr....umm...*whooosh* *whoosh* Is this thing on ?
How ironic, someone from a country with the highest imprisonment rate in the western world calling Australia penal colony. That has not been the case for over 200 years.
Oh the irony, the current Australian government responsible for this is the conservative right wing LNP, verging on far right. If you were even reasonably informed you would know this, but your paranoia about duh Marxist does not allow you to conceive that this is the work of the right wing, as was the removal of a lot of guns by the same parties as currently in government.
Virtually nobody here cares about owning guns, and those who live in the country on farms frequently do have weapons on hand.
You are pretty much wrong in every single point, your lack of any knowledge is disturbing, tell me which part of the US are you from?
Cough, cough, for Adelaide and South Australia, it never was the case, https://en.wikipedia.org/wiki/..., only the eastern states criminal bunch that they are, trouble makers from north to south and even cross the Bass ;D.
Chaos - everything, everywhere, everywhen
Well, you basically say human society always goes for fascism. I do not see things that bleak, but you could be right, unfortunately.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
In other news, Australian authorities now requiring safe manufacturers to provide backdoor access, says they are 'too secure'.
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
Australia has jumped the Marxist shark.
This is much closer to fascist than anything else. Marxist is an economic ideology. Fascism is political/legal.
...si hoc legere nimium eruditionis habes...
tell them to join the far queue
Go well
God help you if they finally unlock the journalist's phone and find Fake News!
Australia really is just upside-down America. I thought it was just a weird coincidence of cartography, but... nope. Good thing I had no burning desire to go there. Wonder what they'll think up next? My guess is lifetime imprisonment on a giant island for just being Australian... oh, wait... they already HAVE that. LOL-Failstrailia.
Our reign has gone on long enough. Indeed. Summon the meteors.
If I can't protect my data with encryption then I have to go to other means. Data that cannot be found cannot be demanded.
Here people will say "but that isn't how I do things right now"... always the way with everything since always. We don't do things a certain way until we do.
Easy enough to do... does require pushing the data to secured remote servers or obscuring the data on the phone such that it doesn't appear to be data... at least enough so that the investigators and courts don't notice it.
I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
Next year it will be 10 years for possession of a phone.
Sent from my ASR33 using ASCII
10 years in prison. Jupiter years.
Yes, they could still do that, of course. But at that point they are arresting a person because they want to, and could not even try to make the argument that they were arresting the person because they posed any threat to public safety or security unless they had other evidence to go on.
File under 'M' for 'Manic ranting'
I like the way you think.
With all the uproar over access to private / personal data that is stored on a smartphone, I am shocked they don't simply secretly upload said data periodically to a cloud server instead and call it a backup.
Then they just have to bribe . . . . er. . . promise lucrative contracts to the Telco for access.
Then again, they may already do so and the rest of this is just misdirection.
Oh, and one more point... if you need to call emergency, then you don't need to unlock the phone in the first place. Same as it is right now.
File under 'M' for 'Manic ranting'
a country that far gone through the rabbit hole of fascism, does not need that. Just go to the culprit home and drop a bundle of child porn in mag form, photo of what "could" look like the suspect having sex with a child, et voila, and contrary to a phone that does not leave potential electronic evidence like changing the pin (which may have been logged). Or heck as xkcd said, just take a crowbar and hit them, or make them disappear in an early grave (pun intended). Frankly you are thinking of complicated solution when there is far more easier.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
This happened in Canada to Minister of Public Safety Vic Toews. Douchebag publicly advocated for invading citizens privacy. When his personal info started getting leaked, he sure didn't like it.
Really? You're willing to give up 10 years of your life? Wow.
Understand that once you're in jail your life isn't worth a nickel. Someone could end it at any time.
Better to vote the bums out. Repeal all of their failed gun control laws.
Does that mean NTFS is outlawed?
(That's a joke, Son!)
I couldn’t care less. There is nothing on my phone I care about hiding. Never will be, no phone can be trusted to be secure.
I know, I live in Adelaide you insensitive clod. :)
How ironic, someone from a country with the highest imprisonment rate in the western world calling Australia penal colony.
How dare you sir. I will not stand here while you insult the great land of freedom that is the United States. We have the highest number of prisoners, in both raw number and per capita, in the entire world, not just the Western world. Rest of the world always trying to minimize our accomplishments... We're Number 1! And not even the most oppressive authoritarian and totalitarian regimes in the world can touch our incarceration rate. Wait a second... if... Nevermind! Credit where credit is due, we take great pride in this achievement, especially in our non-violent drug user mass incarceration program.