Microsoft says encryption laws make companies wary of storing data in Australia

Re:Microsoft says encryption laws make companies wary of sto... by jeremija on Thursday March 28, 2019 @12:17AM (#19509204)

How exactly would this work? Let's say I have been coerced into making a back door, and my company has a policy of enforcing code reviews for every project. Surely, somebody would notice? Or would they count on me to do my best to obfuscate the back door? What if I "don't know" anything about obfuscation?

[ Parent | on HN ]

Re:Microsoft says encryption laws make companies wary of sto... by mcv on Thursday March 28, 2019 @06:27AM (#19510850)

Good question. I think nobody knows. Most likely what happens is:

  * You make the change
  * You report back that you made the change and it's now pending in code review
  * Your change gets rejected in code review
  * Australia tells you to make the change and circumvent code review
  * You tell them you have no way to do that; every change goes through code review
  * Australia wants to know who reviews your code, and if your code could be reviewed by an Australian
  * Your boss asks you why you haven't delivered any changes recently and why are you constantly on the phone explaining the code review process
  * Australia contacts a reviewer and tells them to accept your next change or else
  * You get fired before you can submit the change again

[ Parent | on HN ]

Re:Microsoft says encryption laws make companies wary of sto... by zerotolerance on Thursday March 28, 2019 @12:45PM (#19513947)

More likely:

* You make the change.

* Your peer green lights the change because they have also been independently compelled by the government.

* You and your peer never talk about it again.

[ Parent | on HN ]