News for hackers. Stuff that matters.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by cyphar on Saturday December 08, 2018 @12:58PM (#18636488)
It's an Australian law, so it can only affect people under Australian jurisdiction -- I didn't think that needed to be said. There are significant numbers of free software developers in Australia (I'm one of them).

The point is that all software engineers (in Australia) being able to be co-opted as saboteurs is a fairly "meaningful" problem and should be a concern to everyone...

Re:Australia’s vague anti-encryption law sets a dangerous ne... by brian-armstrong on Saturday December 08, 2018 @01:13PM (#18636561)
Well, if it comes to it, we could always choose to just blacklist all Australian devs from writing software.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by ehnto on Saturday December 08, 2018 @01:39PM (#18636718)
Which is why this bill is a complete disaster for the Australian tech industry. Every single software company in Australia just became blackmarked and could be "potentially compromised" by the government and whoever has figured out the governments likely hamfisted and boutique backdoor solutions.

Even someone's little SaaS can be asked to turn up dirt on someone. I literally couldn't comply. I don't write encryption algorithms for a living I just build websites. I can't not encrypt people's data and according to european laws I can't store most of it anyway. Here, gov, have a username, email address, and this blob of encrypted text. Enjoy the insight.

It's getting so hostile to do business in software. At least construction and engineering liabilities are clear cut. I don't even know what my risks factors are anymore and they change every month.

It took longer than expected, but the governments have finally decided it's time to ruin the internet. I am going to go be a carpenter or something.

What a shitshow.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by jen729w on Saturday December 08, 2018 @03:13PM (#18637269)
Do we know of any organised groups who are opposing this? Both of our main political parties are in bed with this disaster so we can’t leave it to the opposition.

You’re clearly smart and lucid. Me perhaps less so but I have some spare time. Who else? Where are they gathering? What can I do?

I’m talking basic communications and publicity stuff, not anything anarchistic. Helping non-tech journalists. Writing articles to help the public understand this stuff. Lobbying MPs.

Maybe I just found a way to keep myself busy...

Re:Australia’s vague anti-encryption law sets a dangerous ne... by nicwilson on Saturday December 08, 2018 @10:12PM (#18639023)
Greens, acs.org.au, possibly some of the business/legal councils
Re:Australia’s vague anti-encryption law sets a dangerous ne... by thinkloop on Saturday December 08, 2018 @02:05PM (#18636884)
> I literally couldn't comply. I don't write encryption algorithms for a living I just build websites.

I don't think you'd have to "break encryption" or do anything advanced, the main thing they're looking to ask is to circumvent encryption. For example sending the plaintext password for a specific user from the login form, or OS backdoor, etc., delivered through a special software update just for that user. Additionally the wording of the law does not allow for an inability for you to do it, I believe you would be compelled to hire someone that can.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by ehnto on Saturday December 08, 2018 @02:26PM (#18637011)
I believe you are right. What an insane proposition though.

How do you advertise for the position? Lie about the job and then once they are on board the government hits them with the no-tell paperwork? What a shitty person I would have to become to make that happen, and I would have no choice at that point.

Perhaps they would have a saboteur on staff they would be willing to lend. Very hard position to hire for, no doubt.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by incompatible on Saturday December 08, 2018 @04:08PM (#18637552)
Yeah, and I guess most contractors would refuse to have anything to do with the project once they found out what was involved.

Actually I'm not sure you could hire a contractor, since you'd probably be under a secrecy constraint and wouldn't be able to tell them what needed to be done.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by dgzl on Saturday December 08, 2018 @04:05PM (#18637533)
> It took longer than expected, but the governments have finally decided it's time to ruin the internet. I am going to go be a carpenter or something.

Honestly, not bad advice.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by ironic_ali on Saturday December 08, 2018 @04:47PM (#18637721)
I recently had some electrician, plumbing and gas work done and the bill was around my contractor rate here in NZ.

Given the politics and bs around the big corps and govt ministries my skillsets fit into (business analyst/pm) a trade has been something I've been considering seriously for a while now. The peace of mind and lack of toxic office cultures is really appealing. They're apprenticeships too, so you're paid as you learn.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by dgzl on Saturday December 08, 2018 @05:50PM (#18638004)
My father started his own house painting business when I was born. It's tough work and not great pay, but he loves the peace of mind of being his own boss. I worked with him growing up and can attest that owning your life in this way is actually very liberating.

Being in NZ, I wonder: do you know Mike Rowe, from the American TV show 'Dirty Jobs'? If not I encourage you to research him and the TV show. It's not very often I recommend television.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by brokenmachine on Sunday December 09, 2018 @11:04PM (#18645099)
This law is so entirely bad, it's literally making highly-paid software engineers, who are essential to our way of life, seriously consider revoking their citizenship, leaving the country, working in another field, and encouraging other countries to boycott dealing with Australia entirely.

Just thought I'd note that. This is crazy.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by fit2rule on Saturday December 08, 2018 @05:12PM (#18637850)
There's another alternative you maybe haven't considered: give up your Australian citizenship.

This is something I'm seriously considering. I live in Europe anyway, and at this rate I have zero interest in ever living in Australia again. I won't return, and I won't do anything to support Australia in any way, if I have to go down this path.

The Australian government has truly committed a hostile act against its own citizens.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by macdice on Saturday December 08, 2018 @05:47PM (#18637986)
Suppose there is an Australian who works on important and widely used open source infrastructural software, has commit rights, and is compelled to insert a back door by this new law. Well, obviously that would be really bad. But it seems unlikely to succeed; too many eyeballs. Something closed like a mobile communications app in an app store seems like a more plausible target, but we should already have no faith in apps in app stores in the first place, with or without such laws in existence, wherever they come from. Even with "open source" apps, there is no way to know that you're running the same code. More generally, I have no faith at all that a person or company that develops such apps in (insert other country here) is not similarly compromised, even if they don't have an explicit law like that. For example, some countries have secret courts and secret court orders, so who knows? So as an end user I wouldn't personally feel any more secure if Australian developers were banned from participating in projects I care about, and of course that'd be terrible for those developers.

On the other hand, if I were a global company developing proprietary software with development offices in Australia I'd be pretty concerned... and complain loudly and publicly and lay down what the consequences will be. Maybe there could already have been court orders and ways to compel companies to assist at the management level (in probably any country), and maybe there could potentially be moles (from any country) hiding anywhere, but if the more tinfoil hat interpretations are correct this turns every employee on that continent into a mole, and even worse, risks accidental compromises through incompetence (beyond the specific target of a warrant/order/whatever). Right?

In the late 90s I recall hearing of crypto work being done in Australia to avoid the crypto export laws of certain other countries. If I'm remembering that correctly, its software development economy may have benefited in the past from other countries making choices like these, and I suppose it will now suffer. Why would a bank or whatever want to expose itself to that? Australian offices could totally finish up blacklisted for certain software projects.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by mirimir on Sunday December 09, 2018 @01:56AM (#18639761)
Maybe you're joking, but this will arguably affect employment prospects for Australian engineers etc. And their acceptance by open-source software projects.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by spdionis on Saturday December 08, 2018 @01:20PM (#18636608)
That sounds like a reasonable outcome...
Re:Australia’s vague anti-encryption law sets a dangerous ne... by brian-armstrong on Saturday December 08, 2018 @01:43PM (#18636734)
No, not reasonable, but it's the will of the Australian people and we should respect their sovereignty.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by brokenmachine on Saturday December 08, 2018 @10:03PM (#18638994)
This was not the will of the Australian people.

There was a "consultation period" and 99.7% of the submissions were against it.

https://www.reddit.com/r/australia/comments/a3j466/assistanc... https://docs.google.com/spreadsheets/d/1dowpZ_Xtr1N_DgkHJN8i...

Re:Australia’s vague anti-encryption law sets a dangerous ne... by talaketu on Saturday December 08, 2018 @11:15PM (#18639251)
Put it this way: it was passed into law with bipartisan support by both democratically elected legislative chambers of the Commonwealth of Australia.

All it took to convince the representatives and senators was for a submission from the Australian Federal Police that it was necessary to investigate threats over Christmas.

Re:Australia’s vague anti-encryption law sets a dangerous ne... by brokenmachine on Sunday December 09, 2018 @11:15PM (#18645149)
I really wish at least one of our representatives cared about being soft on privacy.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by jakobloekke on Saturday December 08, 2018 @01:53PM (#18636809)
I honestly can’t tell if this is an honest comment, or a dark ironic reference to Trump, Brexit or current Italian politics.
Re:Australia’s vague anti-encryption law sets a dangerous ne... by TomMckenny on Saturday December 08, 2018 @02:03PM (#18636871)