Manjit KaurNov 22, 2022
J👀

Why #Australia is going through so many #CyberAttacks, many resulting in #dataleaks, lately?

According to cryptographer Prof. Vanessa Teague from the Australian National University:

'We've had a decade of anti-security policy. We've had laws that required the acquisition of data that didn't need to be acquired, laws that demand the retention of data that didn't need to be retained'.

Nov 22, 2022 at 4:40amWeb
Show threadIan W Roberts 🎺🚴🏽‍♂️😷💉Nov 22, 2022
@j Slack, corporate-aligned government eager to give their rapacious mates an easy run.
Show threadMarie WalshNov 22, 2022
@j 😡😠🤬
Show threadQuokka 🇦🇺Nov 22, 2022
@j yep, pretty much. I've still no idea why telcos need a 100 point ID check for a mobile service. And especially to keep it for years after a customer has left/died/whatever.
But we as consumers just need to stop giving them this info. Buying something at a shop? They ask for your postcode or mobile number? The correct response is "no".
They don't need it. They shouldn't have it.
Apply this everywhere.
Show threadJust Another AmyNov 23, 2022
@Quokka @j The correct response when it’s not legally required information is lying 👍
Show threadMarie WalshNov 22, 2022
@j
A Decade of Liberals lining their Own & their Donor "mates" pockets..
NO Forward Planning NO thoughts, beyond today
Show threadJ👀Nov 22, 2022
@Mariewalsh18 But let's not forget that the Data Retention Laws received full support from Labor in 2015. Same with the 'backdoor laws' (The Assistance and Access Act) in 2018.
Show threadProf West Wing Chicken ShackNov 22, 2022
@j And a bunch of incompetent dickheads running the show
Show threadProf West Wing Chicken ShackNov 22, 2022

@j To be fair, I suspect that beancounters are making decisions that are truly beyond their realm and scope.

Cutting costs, as too often occurs, often leads to shortcuts that create other issues, and we're now seeing the real costs starting to emerge

Show threadPtapooNov 22, 2022
@garystark @j
Yes, this is absolutely a big part of it.
Show threadChristopher PrinceNov 22, 2022
@j absolutely spot on. Optus was exempt. We shut down a business because CEOs didn't care. They care now. So bringing the business out of mothballs. #cybersecurity #lostintime
Show threadMax HardwoodNov 22, 2022

@j On the bright side, they're actively trying to do something about it.

https://news.yahoo.com/australia-plans-triple-offensive-cyber-130000709.html

Yahooist Teil der Yahoo Markenfamilie

Show threadsortiusNov 22, 2022

@j yep, us techies and security experts were warning of this every time Labor voted for said legislation. We were always shouted down by Labor supporters and told "they'll fix it when they get into power". Apparently Labor didn't understand the legislation enough to fend off being wedged, so voted for it anyway.

Still waiting on the plethora of shitty intrusive anti-privacy legislation to be repealed.

Show threadspmatich vk3spm Dec 2, 2022
@j previous Australian governments actually legislated an infosec antipattern. They had the help of Labor to do this. Also they did not stop at infosec.
https://www.theguardian.com/australia-news/2018/dec/05/coalitions-deal-with-labor-on-cracking-encrypted-messages-what-it-means-for-you
Coalition's deal with Labor on cracking encrypted messages – what it means for you

Australia is about to give law enforcement the ability to demand decrypted versions of messages

The Guardian
Show threadJ👀Dec 3, 2022
@spmatich Plus the data retention laws in 2015 (I think), which Labor supported.
And what about the Internet filter Labor tried to impose a few years earlier?