Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread Mark Smith
On Fri., 30 Nov. 2018, 15:52 Paul Wilkins  Apparently PJCIS may be considering limiting the Bill to exercise by ASIO
> and the AFP only, and limiting scope of crimes to only terrorism and child
> abuse related. That would be of huge assistance in allaying public concerns
> its a stalking horse for mass surveillance. Further, such limited purview
> would mean there simply isn't the industrial scale of activity as
> anticipated in the current Bill's scope. Such a light touch approach would
> greatly mitigate the security and economic impacts.
>

You really don't seem to understand the argument against this.

What the government is asking for is know as "exceptional access".

The danger of 'exceptional access'
https://www.cnn.com/2015/11/18/opinions/bellovin-encryption-debate/index.html

(The editor's note about who Steve Bellovin is doesn't do him justice.)

A longer paper on the topic, by many who's whos in infosec (including D
from DH and R from RSA).

Keys under doormats: mandating insecurity by requiring government access to
all data and communications

https://academic.oup.com/cybersecurity/article/1/1/69/2367066



> Now before people start complaining that such a move would still enable
> invasions of privacy, consider, "first they came for the terrorists and
> child abusers" said no one ever.
>

> Kind regards
>
> Paul Wilkins
>
> On Fri, 30 Nov 2018 at 15:10, Paul Wilkins 
> wrote:
>
>> Hastie, Senator Bushby, Julian Leeser, Jim Molan, some pretty
>> disappointing stuff from them all this morning. For shits and giggles, you
>> can read the proceedings and where PJCIS members ask questions, try to
>> guess their political alignment from the questions asked.
>>
>> Kind regards
>>
>> Paul Wilkins
>>
>>
>> On Fri, 30 Nov 2018 at 10:11, I  wrote:
>>
>>>
>>> Watch live
>>> https://www.aph.gov.au/Watch_Read_Listen
>>> ___
>>> AusNOG mailing list
>>> AusNOG@lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>
>> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread Mark Newton
On Nov 30, 2018, at 3:51 PM, Paul Wilkins  wrote:
> Now before people start complaining that such a move would still enable 
> invasions of privacy, consider, "first they came for the terrorists and child 
> abusers" said no one ever.

Excuse me? It’s in such common usage that it has its own wikipedia page.
https://en.wikipedia.org/wiki/Four_Horsemen_of_the_Infocalypse 


   - mark



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread Robert Hudson
https://twitter.com/samanthamaiden/status/1068357796905644032/photo/1

On Fri, 30 Nov 2018 at 15:52, Paul Wilkins  wrote:

> Apparently PJCIS may be considering limiting the Bill to exercise by ASIO
> and the AFP only, and limiting scope of crimes to only terrorism and child
> abuse related. That would be of huge assistance in allaying public concerns
> its a stalking horse for mass surveillance. Further, such limited purview
> would mean there simply isn't the industrial scale of activity as
> anticipated in the current Bill's scope. Such a light touch approach would
> greatly mitigate the security and economic impacts.
>
> Now before people start complaining that such a move would still enable
> invasions of privacy, consider, "first they came for the terrorists and
> child abusers" said no one ever.
>
> Kind regards
>
> Paul Wilkins
>
> On Fri, 30 Nov 2018 at 15:10, Paul Wilkins 
> wrote:
>
>> Hastie, Senator Bushby, Julian Leeser, Jim Molan, some pretty
>> disappointing stuff from them all this morning. For shits and giggles, you
>> can read the proceedings and where PJCIS members ask questions, try to
>> guess their political alignment from the questions asked.
>>
>> Kind regards
>>
>> Paul Wilkins
>>
>>
>> On Fri, 30 Nov 2018 at 10:11, I  wrote:
>>
>>>
>>> Watch live
>>> https://www.aph.gov.au/Watch_Read_Listen
>>> ___
>>> AusNOG mailing list
>>> AusNOG@lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>
>> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread Paul Wilkins
Apparently PJCIS may be considering limiting the Bill to exercise by ASIO
and the AFP only, and limiting scope of crimes to only terrorism and child
abuse related. That would be of huge assistance in allaying public concerns
its a stalking horse for mass surveillance. Further, such limited purview
would mean there simply isn't the industrial scale of activity as
anticipated in the current Bill's scope. Such a light touch approach would
greatly mitigate the security and economic impacts.

Now before people start complaining that such a move would still enable
invasions of privacy, consider, "first they came for the terrorists and
child abusers" said no one ever.

Kind regards

Paul Wilkins

On Fri, 30 Nov 2018 at 15:10, Paul Wilkins  wrote:

> Hastie, Senator Bushby, Julian Leeser, Jim Molan, some pretty
> disappointing stuff from them all this morning. For shits and giggles, you
> can read the proceedings and where PJCIS members ask questions, try to
> guess their political alignment from the questions asked.
>
> Kind regards
>
> Paul Wilkins
>
>
> On Fri, 30 Nov 2018 at 10:11, I  wrote:
>
>>
>> Watch live
>> https://www.aph.gov.au/Watch_Read_Listen
>> ___
>> AusNOG mailing list
>> AusNOG@lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread Paul Wilkins
Hastie, Senator Bushby, Julian Leeser, Jim Molan, some pretty disappointing
stuff from them all this morning. For shits and giggles, you can read the
proceedings and where PJCIS members ask questions, try to guess their
political alignment from the questions asked.

Kind regards

Paul Wilkins


On Fri, 30 Nov 2018 at 10:11, I  wrote:

>
> Watch live
> https://www.aph.gov.au/Watch_Read_Listen
> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] DNS problems resolving sync.deakin.edu.au

2018-11-29 Thread John Mann
Hi,

In summary ... the problem was with a lowercase domain name rewrite rule
and F5 CGNAT boxes doing case-randomised DNS queries.

Fixed with help from John Alexander, Russell Langton, Jahanzeb and team at
Belong.

Thanks,
 John

On Wed, 28 Nov 2018 at 15:59, John Mann  wrote:

> Joseph,
>
> If it was DNS propagation, then wouldn't the users be getting the old
> addresses, rather than NXDOMAIN.
>
> There is a chain of CNAMES ...
> ---
> $ host sync.deakin.edu.au
> sync.deakin.edu.au is an alias for sync.global.deakin.edu.au.
> sync.global.deakin.edu.au is an alias for sync.deakin.edu.au.edgekey.net.
> sync.deakin.edu.au.edgekey.net is an alias for e7158.dsca.akamaiedge.net.
> e7158.dsca.akamaiedge.net has address 23.53.136.100
> e7158.dsca.akamaiedge.net has IPv6 address 2001:8006:3510:1297::1bf6
> e7158.dsca.akamaiedge.net has IPv6 address 2001:8006:3510:12a9::1bf6
> ---
> but it's not longer than
> ---
> $ host www.deakin.edu.au
> www.deakin.edu.au is an alias for www.global.deakin.edu.au.
> www.global.deakin.edu.au is an alias for deakin.edu.au.edgekey.net.
> deakin.edu.au.edgekey.net is an alias for e7158.a.akamaiedge.net.
> e7158.a.akamaiedge.net has address 23.53.136.100
> ---
>
> One Aussie Broadband user reported that when they were opted out from
> CGNAT, things started working for them.
>
> Thanks,
> John
>
> On Wed, 28 Nov 2018 at 15:52, Saxton, Joseph (SYD-FED) <
> joseph.sax...@interpublic.com> wrote:
>
>> If it’s only changed recently then I’d say DNS propagation
>>
>>
>>
>> *From: *AusNOG  on behalf of John Mann <
>> j...@mannfamily.org>
>> *Date: *Wednesday, 28 November 2018 at 3:44 pm
>> *To: *"AusNOG@lists.ausnog.net" 
>> *Subject: *[EXTERNAL] [AusNOG] DNS problems resolving sync.deakin.edu.au
>>
>>
>>
>> Hi,
>>
>>
>>
>> Deakin University recently dual-stacked their Akamai cache for
>> sync.deakin.edu.au
>> 
>> .
>>
>>
>>
>> Since them, some students using a couple of ISPs can't resolve the DNS
>> name.
>>
>> For example:
>>
>> ---
>>
>> > nslookup sync.deakin.edu.au
>> 
>>
>> Server:  belong.gateway
>>
>> Address:  10.0.0.138
>>
>>
>>
>> *** belong.gateway can't find sync.deakin.edu.au
>> :
>> Non-existent domain
>>
>> ---
>>
>> "blogs.deakin.edu.au
>> "
>> is setup similarly to "sync.deakin.edu.au
>> "
>> but that does work.
>>
>>
>>
>> If the user changes their DNS server to 8.8.8.8 or 1.1.1.1 then they do
>> get through.
>>
>>
>>
>> Problematic ISPs include:
>>
>>Belong
>>
>>Aussie Broadband
>>
>>...
>>
>> I've tried the frontline technical support numbers, but didn't make much
>> headway.
>>
>>
>>
>> Does anyone know how/why this DNS problems would be happening?
>>
>>
>>
>> Can some technical support people from ABB and Belong please contact me?
>>
>>
>>
>> Thanks,
>>
>>  John Mann
>>
>>  0419 568 470
>> This message contains information which may be confidential and
>> privileged. Unless you are the intended recipient (or authorized to receive
>> this message for the intended recipient), you may not use, copy,
>> disseminate or disclose to anyone the message or any information contained
>> in the message. If you have received the message in error, please advise
>> the sender by reply e-mail, and delete the message. Thank you very much.
>>
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


[AusNOG] Looking for 2 VMs in NZ for linux.conf.au

2018-11-29 Thread Rob Thomas
I'm going to be providing free VoIP at LCA in Jan, and I'm on the scrounge
for a couple of VMs in NZ for a couple of weeks (2 cores, 4gb RAM, 40gb or
so of storage)

If anyone has some spare space, and feels like helping out, if you could
contact me off list, that would be awesome!

Thanks

--Rob
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


Re: [AusNOG] Assistance and Access Bill moves to PJCIS

2018-11-29 Thread I




Watch live https://www.aph.gov.au/Watch_Read_Listen



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog