Hacker News new | ask | show | jobs
by jazoom 2862 days ago
"This new architecture provides a way to circumvent traditional security controls by exploiting equipment in the edge of the network – exploitation which may affect overall network integrity and availability, as well as the confidentiality of customer data."

Hey Australian Government. You know what also protects confidentiality of customer data? Encryption.

5 comments

Encryption isn't a magic bullet. If you have good visibility into the network there's a hell of a lot you can do with traffic analysis and metadata. Plus, if you own the end-user device you can just go around the encryption since the data, by definition, has to be displayed to the user decrypted.

It's a hard problem. Encryption is part of the solution, but it's not the solution.

Excellent response, I've become quite sceptical of the Australian calls for encryption backdoors, frankly think the government knows they aren't necessary and can back down to appease the public while silently scooping up everything. Catchy lines like the laws of maths quote is a hugely successful distraction.

Mandatory metadata is already retained for 2 years at the consumers expense, no one has ever released how much or what is actually kept as all freedom of information requests by journalists have been denied. It's estimated that every adult generates around 15000 data points a day, it's known that mobile phone signal strength is kept allowing triangulation within 100m or so of every citizen every few minutes.

Last year alone there was over 300,000 warrantless requests made by 60 government agencies, many more are legally allowed to make requests, right down to small local councils in the middle of nowhere with 15 staff members and obscure agencies such as horse racing officials.

There's absolutely no oversight, I'm stuggling to imagine how many people it would actually take to investigate around 1000 requests a day, every day of the week.

It's only a matter of time before some serious abuse of the system occurs.

Cellular base stations allow a database of SIM cards to be created. This could be considered a superior tracker to advertisement IDs of Apple and Google. This is because the ID is retained between user equipment changes. This information is exchanged before actual data transmission, i.e., it does not matter even if the actual data would be encrypted.

I think it's inevident that the more precise geolocation data of 5G (due to an increased base station installations required by the mmWave frequencies) will be sold to advertisers. Essentially, Australia is betting that European manufacturers will respect privacy better than China - and sure, at least European companies do not need to hand over their data to authorities. Having seen surveillance implementations installed in Chinese IoT devices, it is more or less true that China is at least keeping the doors open for an intertwined database where information from various different Chinese companies can be built.

The laws of mathematics don't apply in Australia
Seems like he didn't believe the mathematics in the polls either.
He believes in them when it suits him.

"The iron laws of arithmetic confirmed my leadership," (https://www.bbc.com/news/world-australia-45266718)

He, like all politicians, also seems to believe in cakes they can both have and eat.

Encryption. pfft! we're going to invest in new coal fired power plants.....

But really this decision was made in a snap by Scott Morrison in a powerplay to look tough on outsiders to the conservative base.

Right now Australia is doing it's 2.5 yearly cycle of deposing a prime minister and installing someone else. Like that Dutton guy from texas :P

Encryption doesn't prevent denial of service, which is probably one of the big concerns.
The parent comment is referencing a batshit approach of the Australian government towards encryption: https://www.theguardian.com/technology/2018/jun/06/planned-l...

They're drafting a law that's going to require encryption backdoors. They're completely ignorant about the impossibility of having "secure backdoors", going as far as the Prime Minister saying:

> The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia.