Slashdot Mirror


Apple Rebukes Australia's 'Dangerously Ambiguous' Anti-Encryption Bill (techcrunch.com)

Apple has strongly criticized Australia's anti-encryption bill, calling it "dangerously ambiguous" and "alarming to every Australian." From a report: The Australian government's draft law -- known as the Access and Assistance Bill -- would compel tech companies operating in the country, like Apple, to provide "assistance" to law enforcement and intelligence agencies in accessing electronic data. The government claims that encrypted communications are "increasingly being used by terrorist groups and organized criminals to avoid detection and disruption," without citing evidence. But critics say that the bill's "broad authorities that would undermine cybersecurity and human rights, including the right to privacy" by forcing companies to build backdoors and hand over user data -- even when it's encrypted. Now, Apple is the latest company after Google and Facebook joined civil and digital rights groups -- including Amnesty International -- to oppose the bill, amid fears that the government will rush through the bill before the end of the year. In a seven-page letter to the Australian parliament, Apple said that it "would be wrong to weaken security for millions of law-abiding customers in order to investigate the very few who pose a threat." The company adds, "We appreciate the government's outreach to Apple and other companies during the drafting of this bill. While we are pleased that some of the suggestions incorporated improve the legislation, the unfortunate fact is that the draft legislation remains dangerously ambiguous with respect to encryption and security. This is no time to weaken encryption. Rather than serving the interests of Australian law enforcement, it will just weaken the security and privacy of regular customers while pushing criminals further off the grid."

87 comments

  1. Encryption is math by DontBeAMoran · · Score: 5, Insightful

    Either everyone is secure, or nobody is.

    --
    #DeleteFacebook
    1. Re:Encryption is math by forkfail · · Score: 2

      Why youze think youze need dis fire extinguisher when weez'll sell youze dis great insurance?

      Cause sure would be a shame if sumthingz was to happen to dis nice shop here.

      --
      Check your premises.
    2. Re: Encryption is math by saloomy · · Score: 4, Insightful

      Anyone and everyone in tech understands the nature of encryption. It's so sad that politicians don't. At some point, some government is going to pass a shitty version of this law, and then, the real show down begins.

    3. Re: Encryption is math by forkfail · · Score: 4, Insightful

      Oh, I think they understand it. Easier to get away with certain things when they can claim ignorance, though.

      --
      Check your premises.
    4. Re: Encryption is math by Kjella · · Score: 1

      The goal of politicians is to appeal to the voters, they make a lot of proposals that won't get a majority or that aren't actually feasible to do just for appearances. Saying there's nothing to be done is never appealing, even when it's the truth.

      --
      Live today, because you never know what tomorrow brings
    5. Re: Encryption is math by MrKaos · · Score: 1

      Anyone and everyone in tech understands the nature of encryption. It's so sad that politicians don't.

      Like a hammer, the politician's only tool is law.

      At some point, some government is going to pass a shitty version of this law, and then, the real show down begins.

      As Australia does not have a bill of human rights this law is being trialed here to see if it can be passed in the UK,US,NZ and Canada, so the real showdown is now. If you are in one of these countries then this law will be heading your way next if it is passed in Australia.

      My advice to you, if you are in one of these countries is to examine the law for yourself. It seems to be crafted well enough to avoid constitutional objections of the US and UK.

      --
      My ism, it's full of beliefs.
    6. Re: Encryption is math by MrKaos · · Score: 1

      The goal of politicians is to appeal to the voters

      Exactly. They scream this is for the pedophiles and terrorists to appeal to the emotional reaction, then high five each other when the electorate realizes the politicians were talking about the entire population.

      --
      My ism, it's full of beliefs.
    7. Re: Encryption is math by idji · · Score: 1

      Politicians do understand, they just don't care about reality, they just want to be able to cynically boast to their voters they are fighting the Evil Terrorists and Evil Corporations "for the children".

  2. Australia has terrorists? by Anonymous Coward · · Score: 1

    Or just an aspiring police state like everywhere else?

    1. Re:Australia has terrorists? by DontBeAMoran · · Score: 1

      I thought Australia was colonized by 164000 convicts because they wanted to get away from the authorities?

      --
      #DeleteFacebook
    2. Re:Australia has terrorists? by jonwil · · Score: 1

      If a guy holding people hostage in a Cafe, waiving terrorist flags around and making claims about ties to Islamic State counts as a terrorist attack, Australia absolutely does have terrorists.

    3. Re:Australia has terrorists? by Anonymous Coward · · Score: 0

      Holding people hostage to get attention would count as terrorism, yes.

    4. Re:Australia has terrorists? by Anonymous Coward · · Score: 0

      how does a terrorist flag look like? I am genuinely curios

  3. Sure apple by Anonymous Coward · · Score: 3, Insightful

    yet you will roll over for China. I guess the market there is bigger.
     

  4. Australia is practically a Chinese province by Anonymous Coward · · Score: 0

    Good luck with your "privacy" fight.

  5. Organized criminals by Anonymous Coward · · Score: 0

    AKA: the government

  6. Whatever. Fuck Apple by Anonymous Coward · · Score: 0

    Maybe we can get the Australian government's help in getting apps approved

  7. For a fictional take on this... by Anonymous Coward · · Score: 0

    See Netflix's "Secret City" (from the folks who brought you "House of Cards",
    for whatever that's worth).

  8. Tie my encryption down mate, tie my privacy down by JoeyRox · · Score: 1

    At least they gave us the wonder of the world that is Margot Robbie.

  9. I must agree... by Anonymous Coward · · Score: 0

    As much as I dislike Apple and their products, I must agree on this issue. Either encryption is unbreakable, or its useless! This is a fact! You can't have it both ways. If there are back doors or other access for law enforcement, then the encryption is not worth a shit! Why? Because of the fact that encryption is unbreakable or it provides no security at all. If law enforcement or government agencies can get access, then so will hackers! And then there is the fact that whenever law enforcement or governments have had that access in the past, there has been massive abuse of that access!!

    The only way to prevent abuse of people's privacy is UNBREAKABLE ENCRYPTION!!!!!!!!!

    1. Re:I must agree... by Anonymous Coward · · Score: 0

      The underlying encryption remains unbreakable with key escrow. The only threat would be theft of keys, but theft of keys is a problem even without key escrow. So I support key escrow.

    2. Re:I must agree... by Anonymous Coward · · Score: 0

      You do understand that there is a difference between stealing 1 key from 1,000,000,000 sources, vs stealing 1,000,000,000 keys from 1 source, right?

    3. Re:I must agree... by Anonymous Coward · · Score: 2, Informative

      Key escrow would result in each device having 2 keys: 1 unique key for you, and 1 unique key held by the device manufacturer (e.g., Apple). Apple's key is different for each device, it's not some "master" key that decrypts all devices. Apple keeps the key in escrow.

      If Apple is served with a lawful court order, Apple would provide its key for your device to law enforcement, who would then decrypt your device. Or law enforcement could turn the device over to Apple and Apple could perform the decryption. That's irrelevant to the discussion however.

      At that point, it should be considered game over for your device and you would need to rekey or replace the device if you wanted to keep using it.

    4. Re:I must agree... by Anonymous Coward · · Score: 0

      So if I break into Apple's escrow account (or am the person who's job it is to pull a key out of escrow under whatever conditions that is done) I can break into any Apple device.

      Single point of failure, juicy as hell target. I give it a month.

    5. Re:I must agree... by Anonymous Coward · · Score: 0

      Yes, I'm sure they would set it up that way

      Just like your bank. Break into one master account and you can access anyone's cash. /sarcasm

      We're done here, Einstein. You've devolved into nonsense, which is not surprising. Zealots often do when they are proven wrong.

    6. Re:I must agree... by Anonymous Coward · · Score: 0

      What's a "master account" at a bank?

      We know exactly what an escrow encryption key is, and we know how even "trusted" people who have undergone background checks (Snowden, Manning) can betray their employers. How long do you really think it will take before someone with access to the escrow store decides to sell a bunch of keys?

      I bet a Trump phone key would be leaked "accidentally" within days.
      No doubt China would have a list of all the keys they wanted inside a year - and probably not illegally, either.

    7. Re:I must agree... by MrKaos · · Score: 1

      How long do you really think it will take before someone with access to the escrow store decides to sell a bunch of keys?

      No doubt China would have a list of all the keys they wanted inside a year - and probably not illegally, either.

      This is precisely the point that government miss. Fraud committed against ordinary citizens in pursuit of their intelligence objective. Fraud has no impact on the government and they don't care if you are defrauded.

      --
      My ism, it's full of beliefs.
    8. Re:I must agree... by sjames · · Score: 1

      So instead of having to break into 1 million devices most of which contain nothing of value to get a million keys, just break one extremely high value target (Apple's keystore) and get millions of keys.

    9. Re:I must agree... by Dare+nMc · · Score: 1

      Keep in mind, apple got law enforcement requests for data from 500,000 devices just last year, even without the ability to get into many of their devices. And would then have to keep track of, and keep secure the device keys for the 200 million iphones it sells each year.

      The more access they have, you would then expect even more requests.

    10. Re:I must agree... by ras · · Score: 2

      Either encryption is unbreakable, or its useless!

      Actually, there is a third option: unbreakable and useless. And that is the one the Australian Government is going for. They don't want Apple to break encryption. The bill allows the government to force Apple to download spyware to the phone via the autoupgrades, so said spyware can send the data back while it's unencrypted.

      The only mystery is why Apple says the bill is ambiguous. It outright says the expect to be able to silently download the app, they expect Apple to provide them with the mechanism will hide it from the user (and that includes up to and including writing the app for them), they expect the app will send whatever data it collects (keystrokes, phone calls, GPS position, photos) silently and in real time back to the cops offices. And it doesn't just cover phones - it covers all devices like Apple TV's, Macbooks, and watches. This is all laid out in relatively simple terms in the explanatory notes they released with the bill.

      If Apple thinks it's ambiguous and could somehow be worse, I've love to know what could be worse than what they have already asked for.

  10. Cast it in Isildur! by HeckRuler · · Score: 1

    I have a general concern or worry that the existing powerful institutions in our nation aren't accepting the democratic decisions of the nation when we tell them that their plan to break encryption is butt-fucking stupid. That they're simply take another approach and get it in passed elsewhere, so they can utalize Parrallel Construction with their allies to effectively violate the 4th admendment. Case point, both Australia and the USA are part of the 5 eyes intelligence community alliance. This sort of disregard for the existing power structure, our democracy, lends weight to the argument that they no longer have the best interests of the masses at heart and that they're simply doing it to expand their own power. You know, if they really did help their Australian counter-parts to come up with this bill. But how would we ever know?

    ECHELON turned out to be a real thing. It had good intentions. Hey, I'm all for our cops working together to catch bad guys. Thwarting Soviet Russia was, you know, a good thing. Their system sucked and if they took over we'd all likely starve. But it evolved past that initial purpose into a global surveillance of private and commercial communications. Power corrupts. And this sort of power can't be trusted with anyone. We need to cast it into mt. Doom.

    1. Re:Cast it in Isildur! by Anonymous Coward · · Score: 0

      ...butt-fucking stupid...

      Butt-fucking is actually pretty smart if your goal is to avoid having children. Maybe there's another term that more succinctly helps make your point... how about "Trump-voter stupid"? Yes, that's better, I see an image immediately... if there were only a way to have them always butt-fuck each other so that they don't reproduce so much... goddamn stupid rabbits eating and shitting everywhere...

    2. Re:Cast it in Isildur! by MrKaos · · Score: 2

      Exactly! Though you might be interested to know that all of the five eyes countries have had their anti-terrorism acts (like patriot and homeland security) lifted from the Soviet criminal code but go far further than the soviets ever could because our technology is more capable and ubiquitous.

      These laws are a complete betrayal of any notion of democracy that our grandfathers fought for in the world wars. This is the stuff they fought against. Our governments don't have to ask for our "Papers Please" because they already have more than they need.

      --
      My ism, it's full of beliefs.
    3. Re: Cast it in Isildur! by Cmdln+Daco · · Score: 1

      Not really. There are many other pleasant forms of having sex that don't involve a lot of direct contact with feces.

  11. Terrorists can code too by Anonymous Coward · · Score: 1

    The encryption libraries are easy to get and just a pinky swear will get you unlimited key length libraries.

  12. Re:Dangerous to ignore this by Anonymous Coward · · Score: 0

    Just under that, check out Table 43B, "Arrests Under 18". There, blacks constitute 60.6% of arrests for murder and non-negligent homicide. Must be those "teenagers" after all.

  13. Stop selling in Australia by Amigori · · Score: 1

    They just need to hint that they'll stop selling iPhones in Australia, and the people will start making phone calls to government people

    --
    "The quality of life is determined by its activites."--Aristotle
    1. Re: Stop selling in Australia by Cmdln+Daco · · Score: 1

      Apple can then more than make up for the lost sales in Australia with increased sales in China. The PR angle in this is awesome.

  14. Does this really need evidence? by Stewie241 · · Score: 1

    > The government claims that encrypted communications are "increasingly being used by terrorist groups and organized criminals to avoid detection and disruption," without citing evidence

    I know it isn't popular to say that a claim should be accepted without evidence, but I think it would be ignorant to assume that more and more terrorist groups and organized criminals are not using encrypted communications.

    1. Re:Does this really need evidence? by Anonymous Coward · · Score: 0

      ...which is a red herring, as the real intent of this legislation is to take privacy from all of us.

    2. Re:Does this really need evidence? by XxtraLarGe · · Score: 5, Insightful

      The government claims that encrypted communications are "increasingly being used by terrorist groups and organized criminals to avoid detection and disruption," without citing evidence

      I know it isn't popular to say that a claim should be accepted without evidence, but I think it would be ignorant to assume that more and more terrorist groups and organized criminals are not using encrypted communications.

      Isn't it also ignorant to assume that terrorist groups and organized criminals are going to stop using encrypted communications just because somebody passed a law? And that they won't jailbreak their phones, install encryption software that circumvents "back doors", and then the tech companies will still be helpless to assist in any case? It doesn't take a genius to see that one coming.

      --
      Taking guns away from the 99% gives the 1% 100% of the power.
    3. Re:Does this really need evidence? by pr0fessor · · Score: 3, Insightful

      This is the problem criminals don't follow the laws so yes they could get a phone and install encryption on it that doesn't have a back door but even worse they will absolutely use any weakness in encryption to take advantage of the rest of us.

      Same with guns the bad guys don't go to a sporting goods store and buy and register a gun that can be traced they get illegal guns.

    4. Re:Does this really need evidence? by Anonymous Coward · · Score: 0

      Seems like you're *dramatically* overestimating the intelligence, technical capability, and initiative of the average criminal. You're lucky if any random thief/gangbanger/whatever is smart enough to not livestream his crime on periscope.

      Sure the smart ones will figure out how to use encryption anyway, just like they might speak in code over the phone back in the day, but that's a tiny minority, and even so they'll probably fuck up somehow sooner or later.

    5. Re:Does this really need evidence? by MrKaos · · Score: 1

      > The government claims that encrypted communications are "increasingly being used by terrorist groups and organized criminals to avoid detection and disruption," without citing evidence

      I know it isn't popular to say that a claim should be accepted without evidence, but I think it would be ignorant to assume that more and more terrorist groups and organized criminals are not using encrypted communications.

      The point is that the law won't stop those groups as they will simply write their own software and use their own encryption methods. It is the ordinary citizen trying to manage their life that is the target for these laws despite the government's claims to the contrary.

      --
      My ism, it's full of beliefs.
    6. Re: Does this really need evidence? by Anonymous Coward · · Score: 0

      Oh I don't dispute that at all. Just seemed like a weird thing to nitpick.

    7. Re: Does this really need evidence? by Cmdln+Daco · · Score: 1

      However, it then becomes a no-brainer to find the criminals. Simply search the data stream for encrypted content.

    8. Re: Does this really need evidence? by Cmdln+Daco · · Score: 1

      Actually it will become trivial to find the crooks. They will be the only ones trafficking encrypted messages. Remember, Al Capone was busted for tax evasion.

    9. Re:Does this really need evidence? by CrimsonAvenger · · Score: 1

      Isn't it also ignorant to assume that terrorist groups and organized criminals are going to stop using encrypted communications just because somebody passed a law?

      Or they'll go back to the good old, reliable, Code Book. "Jean has a long mustache" can mean anything from "Get me some hummus while you're out casing the joint" to "kill the President's Analyst".

      Even better, it can mean different things to different people, since not every member of your terrorist organization has to have exactly the same codebook....

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    10. Re:Does this really need evidence? by sjames · · Score: 1

      And even more ignorant to assume they won't just layer another actually secure crypto system over the tissue paper provided by a compliant phone.

    11. Re: Does this really need evidence? by sjames · · Score: 1

      Everyone will have encrypted traffic. You'd have to search everyonme for encrypted traffic that doesn't decrypt with the escrowed keys. But then you'd have to break the law since there's no way they would be able to get a warrant for everyone all the time.

      Add to that, If I understand correctly, the law doesn't cover additional crypto the end user adds, so it wouldn't be illegal.

    12. Re:Does this really need evidence? by ras · · Score: 2

      Isn't it also ignorant to assume that terrorist groups and organized criminals are going to stop using encrypted communications just because somebody passed a law?

      Yep, it would be ignorant to assume that. Which is why they aren't assuming it.

      The bill doesn't allow them to ask Apple to break encryption. It allows them to force Apple to write some spyware for them, download via auto upgrades to any device they nominate, force Apple to make said spyware undetectable to the user or virus scanners, and says the spyware must send back all data in the device in realtime while it's unencrypted (which it must be when the user sees it). This isn't just the data the user has encrypted - it's additional data the user things completely safe because he didn't know it was being recorded - like his voice, keystrokes, and GPS position.

      So my friend, they are not ignorant. Criminally reckless and power hungry perhaps - but not ignorant or stupid.

    13. Re: Does this really need evidence? by Anonymous Coward · · Score: 0

      You're talking about finding a needle in a needle stack. A majority of web traffic uses SSL (according to Mozilla in 2016). Encryption can be layered, as in TOR, or even just with Pigdin with OTR, on top of the already nominally encrypted Facebook or Google chat, with no known backdoors. If law enforcement will need authorization to just crack the first layer, that's a lot of paperwork for very little success.

    14. Re: Does this really need evidence? by pr0fessor · · Score: 1

      Are you saying that online banking and shopping isn't encrypted?

      We don't need to fund a study to let us know that a lot of people bank online and shop on amazon and that if the encryption on all of that data was suddenly broken it would be a very bad thing. Laws that intend to weaken encryption make that a very scary possibility.

  15. Politicians need to be reined in by fyngyrz · · Score: 4, Insightful

    It's so sad that politicians don't.

    I'll tell you what's sad. It's sad that Apple hasn't got the balls to say "if you do this, we will no longer make or sell any products subject to these insecurities in your country."

    If politicians are not prevented by economic and other (legal, not suggesting otherwise) means from destroying liberty, they will do so - because they are, for the most part, powerful and often rich, and this kind of behavior inevitably makes them more so.

    Either we prevent that result, or we prevent the action that leads to that result — otherwise our liberties will continue to erode in favor of benefits for the rich and/or powerful.

    --
    I've fallen off your lawn, and I can't get up.
    1. Re:Politicians need to be reined in by thegarbz · · Score: 2

      It's sad that Apple hasn't got the balls to say

      Otherwise known as a net win for the government, a net loss for Apple and a net loss for the people. Every time someone suggests some company should "have balls" to completely pull out of a market that person completely ignores the actual impacts and how no government ever calls a bluff, or even gives a shit when it isn't just a bluff.

       

    2. Re: Politicians need to be reined in by sjames · · Score: 1

      They are betting that their customers in the rest of the world won't figure out that if Apple can subvert iPhone security to satisfy one country, they will probably subvert it everywhere to make things easy.

    3. Re:Politicians need to be reined in by Anonymous Coward · · Score: 0

      The Australian market should then be abandoned by American companies, and Australia can buy their phones and networking equipment from communist China, and do some real damage to their citizens.
      Fuck Australia and their fascist leanings. If Islam is suspected of being a political system, that wants to overthrow all other systems, deal with it as violent foreign invasion, like Ferdinand and Isabella. Send the muslims back to their beloved autocracies they came from, like Ferdinand and Isabella.

    4. Re:Politicians need to be reined in by Anonymous Coward · · Score: 0

      If politicians are not prevented by economic and other (legal, not suggesting otherwise) means from destroying liberty, they will do so - because they are, for the most part, powerful and often rich, and this kind of behavior inevitably makes them more so.

      Then you will suffer. Why? Because the politicians create the laws. A.K.A They define and enforce what is considered "legal".

      If the politicians are to the point of destroying liberty, then liberty itself will be made "illegal" by their decree. Of course they won't do it all at once, as that would provoke outrage, but rather they will make it "illegal" slowly so that by the time people are outraged the trap is sprung and the people are helpless.

      tl;dr: To ensure liberty remains "legal", society will inevitably be forced to commit acts against those who would consider protecting liberty "illegal."

    5. Re:Politicians need to be reined in by Anubis+IV · · Score: 1

      It's so sad that politicians don't.

      I'll tell you what's sad. It's sad that Apple hasn't got the balls to say "if you do this, we will no longer make or sell any products subject to these insecurities in your country."

      Who says they won’t? It’s immature to threaten the nuclear option at the first whiff of trouble, particularly when you’d rather be on good terms with the other party. Instead, you call them out for their misdeeds and ask them to fix it on their own first, that way everyone can save face.

    6. Re:Politicians need to be reined in by Anonymous Coward · · Score: 0

      Apple should just leave Australiahigh and dry. So should Google and other tech companies. Australia only has 25 million people in the entire country. That's 15 million less than the state of California alone. They don't need Australia.

  16. Re:Dangerous to ignore this by Anonymous Coward · · Score: 0

    You mean that white account for 67.5% of rape and 68.9% of all crime. Looking down the list other than a few instances where blacks outrank whites in crime section...

    So, we'd get a bigger bang for our bucks accord to the FBI dealing with crimes by whites. And after all the whites are managed then go after the blacks..

  17. Re:Dangerous to ignore this by Anonymous Coward · · Score: 1

    Nice cherry picking there. Us Whites take the lead in almost every other category (go us!). Using the statistics you provided, there were about 5k murders attributed to Black people, and literally over a million other violent crimes committed by White people. Sounds like we're actually safer with Black people!

    Try correlating with economic level or other relevant factors if you want accurate answers- if you just want data that supports your conclusions, keep doing what you're doing so well.

  18. Go back to using banks by seoras · · Score: 1

    We should organise a mass boycott of banking apps in protest.
    To pay for anything turn up at you bank and use up the bank's employee's time to make payments.
    That should get the message across by proxy.
    Governments (five eyes anyway) don't listen to tech companies or the public. They do listen to the money men though.

    1. Re: Go back to using banks by Cmdln+Daco · · Score: 1

      I am definitely in on this 'protest,' I already have no banking apps whatsoever. Every few months I buy another booklet of stamps, and use checks to pay my bills. Why would I carry around a gadget that can be broken into to steal my money?

  19. Re:Dangerous to ignore this by Anonymous Coward · · Score: 0

    You mean that white account for 67.5% of rape and 68.9% of all crime. Looking down the list other than a few instances where blacks outrank whites in crime section...

    So, we'd get a bigger bang for our bucks accord to the FBI dealing with crimes by whites. And after all the whites are managed then go after the blacks..

    So 65% of the population accounts for 68.9% of all crime.

    Meanwhile 13% accounts for most violent crime. More like 6.5% when you consider it's overwhelmingly black males committing the violent crimes. Hmm... with limited police resources, do you go after the 6.5% and have a HUGE imapct, or the 65%? Math must be tough for you.

  20. How about don't... by Anonymous Coward · · Score: 0

    ...rape or murder anyone and so don't get arrested, ever think to see how that would work out?

  21. Australia? LOLzzzz! by Anonymous Coward · · Score: 1

    As much grandstanding and high handedness they try to do the fact of the matter is that Australia is the bitch of the United States. It's been a known and open fact since the US bent Whitlam over their knee and gave him a spanking.

    Australians take it up the ass from the US and their holier than thou attitude is just another shit-scam to try to comfort themselves.

    1. Re:Australia? LOLzzzz! by Anonymous Coward · · Score: 0

      nice troll account. try to improve your english if you want anyone to take you seriously

    2. Re:Australia? LOLzzzz! by MrKaos · · Score: 1

      As much grandstanding and high handedness they try to do the fact of the matter is that Australia is the bitch of the United States. It's been a known and open fact since the US bent Whitlam over their knee and gave him a spanking.

      I hate to agree with your trolling truth, but you are right. Whitlam was Australia's Washington and still managed to pass over 200 peices of legislation in the time he had.

      The question is what the US uses Australia for? and the answer is to trial methods and laws to subvert US citizens. So whilst you are right to criticise Austalian's many of them aren't willing participants to the US finding ways to rape them and US citizens as a result. So you maybe watching Australian's getting raped now, but your next.

      --
      My ism, it's full of beliefs.
    3. Re: Australia? LOLzzzz! by Cmdln+Daco · · Score: 1

      but your next.

      What about my next? It's unclear what you meant.

    4. Re: Australia? LOLzzzz! by MrKaos · · Score: 1

      but your next.

      What about my next? It's unclear what you meant.

      Fair call. You're next!

      --
      My ism, it's full of beliefs.
  22. apple does not do the same in china by Joe_Dragon · · Score: 1

    apple does not do the same in china

    1. Re: apple does not do the same in china by Cmdln+Daco · · Score: 1

      Australia is an English speaking country where Apple's virtue signaling measures can be transmitted back to the US without even needing translation. China? Not so much.

  23. Talking points for people who need them by MrKaos · · Score: 1

    After my initial submission to parliament I've continued to analyze this Bill. My friends are interested in this however many of them didn't know what they could do, so I wrote this for them, detailing progress so far. I hope this helps anyone else trying to fight this really bad law.

    Greetings Friends,
    Thank you all for your good will and support in replying to my first email. Thank you for tolerating a mass email. Considering some of the question I got back I thought I would update you all about how this bad law is progressing. I'll attempt to answer your questions so that everyone is kept informed.

    Questions
    One friend suggested that he left the Communist states to escape this kind of surveillance.
    Where it differs is that the Stasi only had capability to monitor 40 phone calls at a time. With modern technology it is quite easy to monitor every person by adapting the apps on our phones we use, when we talk to an AI (like Siri) or, friends on them.

    Another friend pointed out that our Attorney General is making representations to the UK,US,NZ and Canadian Governments to pass these laws.
    The issue for us is that corporate information technology has no interest in investing in countries that can potentially interfere with their operations. This is a direct attack on employment opportunities in Australia and will drive a lot of investment in Australia's economy to Singapore. This is a direct attack on employment opportunities in Australia.

    https://www.zdnet.com/article/...

    What can these guys do with this law?
    Well I haven't completed all of the analysis however this is what I've learned so far. Your phone, computer, tablet, home router and any vehicle computers can all be utilised to gather data on an individual. The telecommunications providers, the companies behind the websites you use can all be compelled to spy on you. Everything you do can be monitored. These are Front Door security holes, intended and by design.

    This law also exposes Australian citizens to the laws from other countries, I've still getting my head around to how far it goes.

    How will this affect my business?
    Your business can be compelled to cooperate with the government to monitor individual. If you take a position where you protect privacy of your clients you are exposed to the liability for the government's actions. The govt can compel you to alter project deployments and comply with in a deadline. They can alter scope at will and your business is responsible for maintaining govt infrastructure until they no longer need it. Penalties exceed $250,000 per instance in addition to liability.

    Is anyone else involved in this?
    Yes, to my relief more and more people and organisations are becoming aware of this. Privacy focused organisations have started shifting their attention, which attracted the attention of some companies like Google and Apple. To my surprise Telstra, the NBN joined in the fight so that gives you some idea about the level of interference they anticipate. Some State government departments also starting to raise objections. I was in among the other private citizens that wrote objections to this bill. We need all the help we can get.

    What can I do?
    I think the best description is with Digital Rights Watch:

    https://digitalrightswatch.org...

    They provide a short script on how you can interact with Labor Senators and voice your concerns. Feel free to use any of the information I've provided.

    Youtube:
    https://www.youtube.com/watch?

    --
    My ism, it's full of beliefs.
  24. Breaking the Key escrow paradigm by MrKaos · · Score: 1

    I'm sure that Apple, like Google, has more than one set of master keys. However under this law Apple would be compelled to comply which would then result in law enforcement is all five eyes countries having access to that "key group" under the Echelon agreement. Over time, intelligence agencies would continue to gather and share those keys.

    Under this law if an American comes to Australia, the US can request an investigation of that individual and secure keys for key groups in the states. An American citizen can be jailed until they co-operate and Apple fined repeatedly until they do as well.

    The stakes are high, if this law is passed in Australia, it will affect all western countries signed to intelligence sharing agreement.

    --
    My ism, it's full of beliefs.
  25. bigbrother by Anonymous Coward · · Score: 0

    Australia has always belonged to China.

  26. Legislation Amendment by Anonymous Coward · · Score: 0

    It's full title is "Telecommunications and Other Legislation Amendment (Assistance and Access) Bill". The "other legislation" bit means that, in the future, other online services can be forced to install a back-door.

    ... tech companies operating in the country ...

    Here's the flaw in the law: The USA pretends to own the internet so Australian politicians can't order-around offshore corporations. This means Facebook and Apple can disable government spying by closing their Australian offices and serving Australian customers from a place that doesn't enact Australian law.

    ... hand-over user data -- even when it's encrypted.

    Facebook and Apple should design their services to pass through a third-party encryptor/decryptor application; thus they will be unable to provide the encryption keys used by a device. They will also have to enact a method of receiving the public key from the encryptor/decryptor application.

    1. Re:Legislation Amendment by scottragen · · Score: 1

      It's full title is "Telecommunications and Other Legislation Amendment (Assistance and Access) Bill". The "other legislation" bit means that, in the future, other online services can be forced to install a back-door.

      I've read most of the legislation draft, and if you read division 7 it says:

      Division 7 — Limitations 317ZG Designated communications provider must not be required to implement or build a systemic weakness or systemic vulnerability etc.
      (1) A technical assistance notice or technical capability notice must not have the effect of:
      a requiring a designated communications provider to implement or build a systemic weakness, or a systemic vulnerability, into a form of electronic protection; or
      b preventing a designated communications provider from rectifying a systemic weakness, or a systemic vulnerability, in a form of electronic protection.
      (2) The reference in paragraph 1 a to implement or build a systemic weakness, or a systemic vulnerability, into a form of electronic protection includes a reference to implement or build a new decryption capability in relation to a form of electronic protection.
      (3) The reference in paragraph 1 a to implement or build a systemic weakness, or a systemic vulnerability, into a form of electronic protection includes a reference to one or more actions that would render systemic methods of authentication or encryption less effective.
      (4) Subsections (2) and (3) are enacted for the avoidance of doubt.
      (5) A technical assistance notice or technical capability notice has no effect to the extent (if any) to which it would have an effect covered by paragraph

      Wouldn't that mean that they cannot ask companies to build backdoors as that would weaken their systems?

      Please use fewer 'junk' characters?? I've had to remove a lot of parenthesis from the legislation, so that's why it looks a little "off".

    2. Re:Legislation Amendment by MrKaos · · Score: 1

      Wouldn't that mean that they cannot ask companies to build backdoors as that would weaken their systems?

      No. First of all they don't want back door access through flaws, the law is essentially demand individuals and business to give them front door access designed into the hardware and software stack. It is blatant stupidity because it will be impossible for them to protect their systems from being compromised by black hats and eventually organised crime. The Government is proposing powers of such gargantuan scope it will be impossible for them to keep it under control, how imposing and intrusive it is, how utterly lazy the government is to even ask for these powers. Essentially this what I see that is relevant to what you are asking:

      Division 1 Items list the entire OSI stack and the hardware stack. Whoever was advising them on the law had enough technical know how to include everything. There were no gaps in either hardware or software stack were the govt is demanding powers. No manufacturer or software supplier escapes. They can get access to the keyboard hardware if they wish, but they want it easy. All O.S vendors will have to comply.

      No website escapes if you interact with any mass group of people or a customer base that the govt wants information about if you are a designated communications communications provider.

      In terms of actions business will have to comply with if they have eligible activities every part of the supply chain is covered from creating components to installers. They can all be issues with a Technical assistance request or Technical Capability Notice. In the "Listed acts or things" Govt can demand removal of encryption, proprietary design information about your software and how it works, demand you install their servers, force data formats and integration assistance finally leaving business to maintain their servers. After that the business is then responsible for maintaining access to intercept equipment whilst hiding it and concealing access.

      Jail time, heavy fines and exposure to liability for businesses and individuals who don't co-operate.

      Division 2 discusses exactly how government will disrupt the businesses who co-operate and the specific steps that have to executed to comply. They can change the specification, the scope and responsibilities of those assigned, demands assistance and has anti by-pass clauses. The fine imposed are quite high as I go through my notes, this is only 40 pages in around 317ZB.

      So in essence it doesn't matter what Limitations 317ZG has because all it is asking you to do is not do something that you wouldn't do in the first place: Knowingly design a weakness into your hardware or software. They don't want backdoor access, they want to be completely integrated into your software and hardware stack. Orwellian isn't enough to describe it.

      Onto the AC's point.

      Here's the flaw in the law: The USA pretends to own the internet so Australian politicians can't order-around offshore corporations. This means Facebook and Apple can disable government spying by closing their Australian offices and serving Australian customers from a place that doesn't enact Australian law.

      As you start to get to the end of the legislation you will find the hooks where the other four eyes can request access to these powers and exert them over business under intelligence sharing agreements where other Acts are modified. It goes like this.

      As Australia does not have a Bill of Human Rights it has traditionally relied on the activism of its populace to not slip into a police state as a consequence of being a participatory democracy. This has allowed the Australian Government to pass laws that could not constitutionally pass in the US,UK,NZ or Canada, thus gradually chipping away at the intrinsic rights Australians had.

      So, the way those other countries can access those powers is by requesting A

      --
      My ism, it's full of beliefs.
  27. Australia's intelligence overseer frets decryption by bug1 · · Score: 1

    Even the government appointed overseer of the government is concerned.
    https://www.itnews.com.au/news...

  28. The bigger picture by jasonharrop · · Score: 1

    Here is mine... pity I sent it before Krebs wrote https://krebsonsecurity.com/20...

    This is a submission to the Parliamentary Joint Committee on Intelligence and Security (PJCIS) review of the Telecommunication and Other Legislation Amendment (Assistance and Access) Bill 2018 [0].

    Chinese surveillance society [1] offers a chilling vision of a society I never want to live in.

    Just as Apple differentiates itself [2] clearly from Google and Facebook by saying we will never sell your data (you aren't the product), I think Western democracies ought to clearly differentiate themselves from China.

    Currently we're heading towards a local optima that will look more and more like China. Because of certain problems (paedophiles, drug dealers, terrorists), government wants weak encryption. Then in large part because of weak encryption, we can't use Chinese components in our networks [3].

    Well, the truth is that paedophiles/drug dealers/terrorists will all wake up to the fact that comms on common services can be intercepted, and will use their own encryption (routed over TOR or similar, so you can't tell who the endpoints are). Phantom Secure is evidence that this horse has already bolted[4]. Though I guess you might make any private encryption technology illegal? Why not?!!

    The net result being that only people with "nothing to hide" will be using services that you can surveil.

    Thinking more broadly, if drugs such as marijuana and MDMA were legal, then probably 95% of the so-called encryption problem goes away. And lots of other problems as well... Count on certain relatively benign recreational drugs being legalized soon after self-driving cars become common.

    And then I'd argue that you catch the paedophiles and terrorists with creative policing[5]. You don't absolutely need this kind of legislation to then get into their phones [6].

    In summary, a much better approach would be to support strong encryption (the global optimum), and say clearly we don't want to follow China. With strong encyption right across our telecomms networks, we'd be able to source equipment from Huwaie and ZTE ... Of course, there's the additional concern that the Chinese could stop packet transmission entirely (ie a kill switch), or make it unreliable, but that's a different problem to "they might read our stuff".

    The real concern would then be any laptop server[7] or phone made in China (ie most of them) - the terminal devices where stuff must be decrypted for the user to see.

    Of course, the problem is that embracing "strong encryption" is anathema to the received wisdom from the rest of the Five Eyes [8], and you need to take a broader perspective to realise it is the right choice for an open society.

    [0] https://www.aph.gov.au/Parliam...

    [1] http://www.abc.net.au/news/201...

    [2] https://www.washingtonpost.com...

    [3] https://www.itnews.com.au/news... https://www.itnews.com.au/news...

    [4] http://www.abc.net.au/news/201... https://www.theregister.co.uk/...

    [5]

    1. Re:The bigger picture by MrKaos · · Score: 1

      Thank you!

      --
      My ism, it's full of beliefs.
  29. Re:Australia's intelligence overseer frets decrypt by MrKaos · · Score: 1

    Even the government appointed overseer of the government is concerned. https://www.itnews.com.au/news...

    Thank you!

    --
    My ism, it's full of beliefs.
  30. Re:Dangerous to ignore this by Anonymous Coward · · Score: 0

    Us Whites

    Nice try, Moishe.