Australian draft law requires tech companies to hand over encrypted messages
18 replies, posted
https://www.homeaffairs.gov.au/about/consultations/assistance-and-access-bill-2018
Encryption and other forms of electronic protection are vital security measures that protect private, commercial and Government data and make the communications and devices of all people more secure. However, these security measures are also being employed by terrorists, child sex offenders and criminal organisations to mask illegal conduct. The exploitation of modern communications technology for illicit ends is a significant obstacle to the lawful access of communications by Australia’s law enforcement and national security agencies. To address these threats, the Government has developed the Telecommunications and Other Legislation Amendment (Assistance and Access) Bill 2018 (1.13MB PDF)
(the Assistance and Access Bill) to secure critical assistance from the communications industry and enable law enforcement to effectively investigate serious crimes in the digital era.
Encryption impacts at least nine out of every ten of ASIO’s priority cases.
The communications industry is a crucial partner for law enforcement and security authorities. The Assistance and Access Bill establishes a model for Australian agencies to engage with domestic and international communications providers.
That and it's just like
https://www.zdnet.com/article/the-laws-of-australia-will-trump-the-laws-of-mathematics-turnbull/
I can't take any of these guys seriously
yeah, no, fuck off. this shit effects stuff outside Australia.
Even if it passes it wouldn't be observed tbh. Breaking encryption also weakens the defence force and our security partners. This also is hella shit for journalist who use apps like telegram and wickr in getting their sources.
I just...what?
Laws of math aren't what what they are because we say they are, they are because we have found no other possibility. Math doesn't give two fucks about human laws. Typical politician trying to govern something they don't know anything about, the most dangerous CIPWTTKT.
Besides, smart criminals aren't using encryption that these companies control. Yeah they can be forced to comply, and then they hand over a file of incoherent gibberish because the company has no control of the encryption.
Without having to pay for it. Let's not forget that the companies affected by this are more than willing to sell access to that information, they only oppose the government because they don't pay up.
For sending files, if you just use PGP (or anything asymmetric), not even you can decrypt that data. Would love to see some legal fuckwit try to subpoena those files.
Just going to post this video again of when the UK did the same thing...
https://www.youtube.com/watch?v=D2fSXp6N-vs
I'm not a cryptographer, but what we are seeking to do is to secure
their assistance," Turnbull said. "They have to face up to their
responsibility. They can't just, you know, wash their hands of it and
say it's got nothing to do with them." "I am sure they know morally they should. Morally they should."
In recent weeks, as Australia has ramped up its rhetoric around encryption, Turnbull has repeatedly stated the country is not interested in backdoors.
Under questioning from journalists, Turnbull gave his definition of a backdoor.
"A back door is typically a flaw in a software program that perhaps the
-- you know, the developer of the software program is not aware of and
that somebody who knows about it can exploit," he said. "And, you know,
if there are flaws in software programs, obviously, that's why you get
updates on your phone and your computer all the time."
"So we're not talking about that. We're talking about lawful access."
https://files.facepunch.com/forum/upload/249570/b188fc11-0587-4839-9c89-79bb6fad62bb/50d4b9fc0cf91460c47ac8153d910d22d77962cecff0a2a9c2df981b79d5da0a.webm
This is beyond stupid. if you implement a way for your data to be decrypted on a whim by law enforcement then that just opens another avenue of attack for anyone wanting to get at that data illegally. This defeats the entire purpose of encrypting user data in the first place.
Can we, globally, stop electing old fuckwits who have literally no idea what they're talking about when making laws related to technology?
Don't forget guys, Turnbull practically invented the internet, he obviously knows what he's talking about.
Haha yeah nice try "laws of physics" but the only law that applies here is the Humans Are Now Capable Of Flight Act so get used to it
"A back door is typically a flaw in a software program that perhaps the
-- you know, the developer of the software program is not aware of and
that somebody who knows about it can exploit,"
They don't even get the definition right. Backdoors are typically placed by developers in the first place, they are flaws because they can be exploited by others.
What they want is a literal backdoor.
You can not get "lawful access" without putting a backdoor in, thats not how encryption works.
What a joke.
Its funny though. These same companies would probably even sell the data your messages contain anyway to third parties for big data collection.
The liberals can fuck off with this but its already probably happening and they just want to also put their dick in the pie.
> I'm not a cryptographer, but what we are seeking to do is to secure
Does he mean a cryptologist?
Also to anyone who even remotely knows the Australian government, you will know that this is a bad idea. Under the assumption this passes, it will start off fine and then they will start to use it for some bullshit completely unrelated to terrorism.
even if companies implemented the perfect encryption, they're still at risk at being bumfucked by governments with absolutely cancerous laws like these.
Sorry, you need to Log In to post a reply to this thread.