- NZNOG - lists.nznog.org

Internet Surveillance / Swain anti-hacking bill
by Lin Nah 28 Nov '00

28 Nov '00

Hi All, As mentioned, there's to be a seminar on the Swain bill. Lech Janczewski will be conducting the seminar. He has been on a fact finding mission, talking to as many people who know anything about this as he can. He wished to present the information gathered "straight from the horses mouth". When I spoke to Lech, he was quite candid in his concerns over this. He didn't know whether the hype was due to media playing it up or whether some of the concerns are true. Lech has had a keen interest in Data security. He was my lecturer in information security a couple of years back and is still teaching the paper. He is also the organiser for the Information Security Forum. He has also been teaching the Data Communications paper ever since I have known him (and probably before that too) in 1990. I am not sure if he's still teaching this paper as I did remember him trying to reduce his workload. The Abstract was in a word document which I will obviously not forward. I have cut and pastes the text into the bottom of this email. Please contact lech if you wish to attend or to find out more about it. regards Lin From: "Aoki, Reiko" <r.aoki(a)auckland.ac.nz> Subject: E-Com Workshop (29/11) Internet Security Date: Sun, 19 Nov 2000 13:29:58 +1300 Next E-Commerce Workshop will be on 29 November (Wed) from noon. Continuing with the theme of internet security, Lech Janczewski (MSIS and New Zealand Information Security Forum) will present the facts and lead a discussion on the plans for a new law announced recently by Hon. Paul Swain, Information Technology Minister (please see attached abstract). The workshop will be at Vice-Chancellor's Room (OGH ground floor). Because of great public interest in the topic, we are inviting experts from outside the University to the workshop. We have asked them to pay for lunch since the Team Development Grant is limited. But please don't be confused...lunch is free to members of the University community as usual. For catering purposes, please reply to Lech ( lech(a)auckland.ac.nz <mailto:lech(a)auckland.ac.nz> ) via email (from university address) by 28 November (Tues) noon. This is the last workshop for this year. The first workshop of the new year will be lead by Ian King (Economics). He will be talking about different methods of selling goods on the internet (auctions and posting prices) and how revenues differ according the market conditions. You can find his working paper (related but not the content of his discussion) on the Workshop website. (Website will be updated as soon as I can figure out how to under the new regime. There is a link from economics department site.) See you on 29th. Thank you. Reiko and Mia << From Janczweski Abstract.doc>> Government power to intercept electronic communication Lech Janczweski (MSIS) Hon. Paul Swain, Information Technology Minister revealed plans of introducing a law giving power to government agencies, like police or the Security Intelligence Service, to intercept electronic communications. Presumably, this legislation will be similar to that existing already in the UK. For a quick reference look into NZ Herald form 16.11.2000 ("Big brother eying your e-mail", [Herald] and "Cyber world fears snoop law", [Business Herald]) That decision would have a significant impact on citizens of this country, our trading partners, as well as law enforcement agencies. We believe that such an important law necessitates a wide discussion not necessary limited to the NZ government and parliamentary circles. Especially electronic commerce and information security specialists need to voice their opinion. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Jobs and stuff
by James Tyson 27 Nov '00

27 Nov '00

Hey all. I am just posting to see if anyone has any jobs available at the moment, I realise this is a bad time of year to be trying to find a job, but when your broke your broke. Anyway, my resume is available at http://www.samizdat.co.nz/resume.pdf I am looking for something sysadminly at an ISP or similar, or possibly some (interesting) web-dev. I would prefer not to work with NT and want to work somewhere where I can tweak routers and unix boxen, and not be pushed into the "router guy" or "unix guy" boxes. Thanks for your time. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Auck. Seminar on Swain anti-hacking/internet surveillance bil l
by David Katz 27 Nov '00

27 Nov '00

Would it be at all possible for somebody to do an mp3 recording or the likes of tommorow's discussion? I know it would be much appreciated... David Katz -----Original Message----- From: Lin Nah [mailto:lin(a)darkmere.gen.nz] Sent: Tuesday, November 28, 2000 12:18 PM To: nznog(a)list.waikato.ac.nz Subject: Auck. Seminar on Swain anti-hacking/internet surveillance bill Due to the big interest in this topic, I am posting this for the 2nd (and last time). The seminar is TOMORROW! Only a short thing - ie won't drag on. There will be opportunity for Q&A between audience and speaker(s). After that we have to see if there are questions, discussions etc we need to cover in another session. The seminar will be at Old Govt House. RSVP due to catering ($10 for lunch is all this will cost IIRC). Hope to see a few there. regards Lin On Wed, 22 Nov 2000, Lin Nah wrote: > Hi All, > > As mentioned, there's to be a seminar on the Swain bill. > > Lech Janczewski will be conducting the seminar. He has been on a fact > finding mission, talking to as many people who know anything about this > as he can. He wished to present the information gathered "straight from > the horses mouth". > > When I spoke to Lech, he was quite candid in his concerns over this. > He didn't know whether the hype was due to media playing it up or whether > some of the concerns are true. > > Lech has had a keen interest in Data security. He was my lecturer in > information security a couple of years back and is still teaching the > paper. He is also the organiser for the Information Security Forum. > He has also been teaching the Data Communications paper ever since I have > known him (and probably before that too) in 1990. I am not sure if he's > still teaching this paper as I did remember him trying to reduce his workload. > > The Abstract was in a word document which I will obviously not forward. > I have cut and pastes the text into the bottom of this email. > > Please contact lech if you wish to attend or to find out more about it. > > > regards > Lin > > > From: "Aoki, Reiko" <r.aoki(a)auckland.ac.nz> > Subject: E-Com Workshop (29/11) Internet Security > Date: Sun, 19 Nov 2000 13:29:58 +1300 > > Next E-Commerce Workshop will be on 29 November (Wed) from noon. Continuing > with the theme of internet security, Lech Janczewski (MSIS and New Zealand > Information Security Forum) will present the facts and lead a discussion on > the plans for a new law announced recently by Hon. Paul Swain, Information > Technology Minister (please see attached abstract). > > The workshop will be at Vice-Chancellor's Room (OGH ground floor). Because > of great public interest in the topic, we are inviting experts from outside > the University to the workshop. We have asked them to pay for lunch since > the Team Development Grant is limited. But please don't be confused...lunch > is free to members of the University community as usual. > For catering purposes, please reply to Lech ( lech(a)auckland.ac.nz > <mailto:lech(a)auckland.ac.nz> ) via email (from university address) by 28 > November (Tues) noon. > > This is the last workshop for this year. The first workshop of the new year > will be lead by Ian King (Economics). He will be talking about different > methods of selling goods on the internet (auctions and posting prices) and > how revenues differ according the market conditions. You can find his > working paper (related but not the content of his discussion) on the > Workshop website. (Website will be updated as soon as I can figure out how > to under the new regime. There is a link from economics department site.) > > See you on 29th. Thank you. > > Reiko and Mia > > << From Janczweski Abstract.doc>> > > Government power to intercept electronic communication > > Lech Janczweski (MSIS) > > Hon. Paul Swain, Information Technology Minister revealed plans of > introducing a law giving power to government agencies, like police or > the Security Intelligence Service, to intercept electronic communications. > Presumably, this legislation will be similar to that existing already in > the UK. For a quick reference look into NZ Herald form 16.11.2000 ("Big > brother eying your e-mail", [Herald] and "Cyber world fears snoop law", > [Business Herald]) > > That decision would have a significant impact on citizens of this country, > our trading partners, as well as law enforcement agencies. We believe that > such an important law necessitates a wide discussion not necessary limited > to the NZ government and parliamentary circles. Especially electronic > commerce and information security specialists need to voice their opinion. > > > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Aus problems.
by Simon Lyall 21 Nov '00

21 Nov '00

According to the word Telstra have had a cable cut near Singapore which is badly affecting them and some other Aussie ISPs. Nothing on the outages page of course, but it's been happening all evening. "Telstra expect to have their core routers operational within approximately two hours" Also bad flooding in NSW. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Fwd: Swain's anti-hacking Bill to Select Committee - Paul Swain
by Andy Linton 21 Nov '00

21 Nov '00

>From: Ministerial Announcements <announce(a)ministers.govt.nz> >To: "All Ministerial releases" <all-releases(a)executive.govt.nz> >Subject: Swain's anti-hacking Bill to Select Committee - Paul Swain >Date: Tue, 21 Nov 2000 09:18:32 +1300 >List-Unsubscribe: <mailto:leave-swain-releases-15379N(a)executive.govt.nz> >List-Unsubscribe: <mailto:leave-all-releases-8282Y(a)executive.govt.nz> >Reply-To: "All Ministerial releases" <all-releases(a)executive.govt.nz> >Sender: owner-nznog(a)list.waikato.ac.nz > >17 November 2000 >Swain's anti-hacking Bill to Select Committee - Paul Swain > >Associate Minister of Justice Paul Swain has welcomed the passage of his >'anti-hacking' bill to the Law and Order Select Committee. I'm not happy that this is spammed to the NZNOG list. It's interesting but it's not an operational issue. It's a press release and I'd be quite happy to read about this in the press. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Swain's anti-hacking Bill to Select Committee - Paul Swain
by Ministerial Announcements 21 Nov '00

21 Nov '00

17 November 2000 Swain's anti-hacking Bill to Select Committee - Paul Swain Associate Minister of Justice Paul Swain has welcomed the passage of his 'anti-hacking' bill to the Law and Order Select Committee. This afternoon Parliament voted to send the Supplementary Order Paper to Crimes Amendement Bill (Number 6) to the Law and Order Select Committee for submissions and deliberation. "The overarching purpose of this SOP is to make hacking illegal in New Zealand - I think that is vital for every New Zealander who owns a computer. We need to send a strong message that hacking is not cool, it is not clever, it is a serious crime," Paul Swain said. "If it proceeds, this legislation would make accessing a computer system without authorisation a criminal offence punishable by a maximum of two years imprisonment. "At the moment computer hacking is not an offence in New Zealand. "The process now is for the Law and Order Select Committee to hear submissions on the SOP and make deliberations, this is a vital part of the process. This is the stage when the public get to have their say about the Bill. " For that reason I have ensured that there is a lengthy process for consideration by, and submission to the select committee. I propose asking the select committee to report back by the 30th May, which should give ample time for this process. "I have given an absolute assurance that law abiding citizens who are not involved in criminal activity have nothing to fear from this legislation. People will be looking for proof of that assurance when the select committee reports back," Paul Swain said. --- You are currently subscribed to swain-releases as: all-releases(a)executive.govt.nz To unsubscribe send a blank email to leave-swain-releases-15379N(a)executive.govt.nz --- You are currently subscribed to all-releases as: EpistlesFromTheState(a)Hamish.MacEwan.gen.nz To unsubscribe send a blank email to leave-all-releases-8282Y(a)executive.govt.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZ Broadband mailing list
by Dan Langille 19 Nov '00

19 Nov '00

I send this message was sent to nz.comp last night. I figured more than one list member would be interested: I've just created the New Zealand broadband mailing list. Given that the ADSL mailing list has grown quite a bit, it's time to split the list. adsl(a)unixathome.org will continue to deal with ADSL. broadband(a)unixathome.org will deal with broadband in general and delivery methods such as ISDN, satellite, Saturn cable, chello, IHUG Ultra, etc. Those who wish to subscribe to the new list should send a message to majordomo(a)unixathome.org with "subscribe broadband" in the body of the message. The archives for the new list, once there is something to archive, will go online later this week at http://unixathome.org/broadband/ cheers -- Dan Langille The FreeBSD Diary - http://www.freebsddiary.org/ FreshPorts - http://freshports.org/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Internet Surveillance
by Joe Abley 15 Nov '00

15 Nov '00

Hi, ISOCNZ have a working group looking at Internet Surveillance, and are attempting to decide on a position from which to make recommendations to the Government. It hasn't been running long. http://listserver.actrix.co.nz/mailman/listinfo/isocnz-iswg There was some noise in the press about police powers with respect to internet surveillance recently (although not much signal). I'm trying to look at the operational impact of legislation in this area. Ignoring the philosophical debate about what is and what isn't appropriate about surveillance in general, or about police powers to gather evidence from ISPs: + suppose the police have sufficient cause to be suspicious about the antics of one of your customers that they obtain a court order which entitles them to "tap their internet traffic". Suppose you decided (or were compelled) to facilitate the "tap". o what is reasonable for them to tap? Incoming (to-customer) e-mail? Outgoing (from-customer) e-mail? A complete packet dump? o If you have customers who don't have static IP addresses, is it feasible to collect data from an individual subscriber without collecting it from a whole bunch of others at the same time? o would you be happy letting someone from the police connect her own equipment to your network in order to gather the evidence the court order entitled them to collect? Would you prefer to do it yourself? o would your company expect to be reimbursed for the time spent facilitating the "tap"? o how easy would it be for you to insert something in your network to capture all packets to/from one of your customers? (scale of 1 [trivial] to 10 [impossible]) o assuming it was possible, how much inconvenience would it cause to other customers to put the tap in place? (scale of 1 [none] to 10 [take them off the air for the duration of the tap]) + suppose all interception of network traffic was prohibited across the board without a court order; i.e. you were compelled to shift your customers' traffic blindfolded, and were absolutely not allowed to look at it. Would this be feasible? How much troubleshooting would be impossible under these kinds of conditions? + do you have a clause in your contract with your customers which permits you to inspect customer traffic for operational (or other) purposes? + are you aware of hooks in your network hardware which are designed to allow customer traffic to be intercepted? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

16 21

RE: Internet Surveillance
by David Katz 15 Nov '00

15 Nov '00

One just needs to look at the US and the whole fiasco that Carnivore has created to find out that this will be much more difficult than it appears... ;) -----Original Message----- From: Michael Newbery [mailto:Michael.Newbery(a)telstrasaturn.co.nz] Sent: Thursday, November 16, 2000 3:58 PM To: nznog(a)list.waikato.ac.nz Subject: Re: Internet Surveillance At 11:22 AM -0500 6/11/00, Joe Abley wrote: > >I'm trying to look at the operational impact of legislation in >this area. Ignoring the philosophical debate about what is and >what isn't appropriate about surveillance in general, or about >police powers to gather evidence from ISPs: [After not a lot of people responded, Joe attempted to shame us into replying. For the record, I'm too busy (excuse #2)] > > + suppose the police have sufficient cause to be suspicious > about the antics of one of your customers that they obtain > a court order which entitles them to "tap their internet > traffic". Suppose you decided (or were compelled) to > facilitate the "tap". > > o what is reasonable for them to tap? Incoming (to-customer) > e-mail? Outgoing (from-customer) e-mail? A complete packet > dump? Email, probably. A complete packet dump could present problems. I would be unwilling to do anything that would cost us money--without appropriate recompense---or that would impact network performance---in any event. I am unwilling to slow my STM-1024 down to V.24 speeds so I can wiretap. > o would you be happy letting someone from the police connect > her own equipment to your network in order to gather the > evidence the court order entitled them to collect? Would > you prefer to do it yourself? In general, no. I doubt their laptop has a suitable STM-1024 interface. Where possible, yes, under our supervision. > > o would your company expect to be reimbursed for the time > spent facilitating the "tap"? Of course. Actually, I'd expect that my company could and therefor should just write the cost off to civic welfare, but I think that a struggling ISP might not appreciate having to stump up overtime for several people to make the tap work. > > o how easy would it be for you to insert something in your > network to capture all packets to/from one of your customers? > (scale of 1 [trivial] to 10 [impossible]) 1-10. It depends on which customer and where in the network. > + suppose all interception of network traffic was prohibited > across the board without a court order; i.e. you were compelled > to shift your customers' traffic blindfolded, and were absolutely > not allowed to look at it. Would this be feasible? How much > troubleshooting would be impossible under these kinds of > conditions? Depends on how it's worded. In the extreme case, if I can't look at my customers' packets, I (my routers) can't read the address headers and the packets never make it past the first RJ-45! I would consider the wording in the current radio regs for amateurs has the right flavour. In the event that you intercept communications not intended for you, you are required to act as if you had not in fact intercepted the communications. In particular you must not communicate them to a third party. What's the statement? "Hard cases make bad law"? I shudder to think how to draught legislation that accurately and unambiguously sets out the rights and obligations of all parties and also keep up with technology. Let's just promote PGP a lot :-) -- Michael Newbery Technical Specialist Telstra Saturn Tel: +64-4-939 5102 Mobile:02-939 5102 Fax:+64-4-939 5100 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

FBI responds to Carnivore criticism will deploy "Childsaver"
by Hamish MacEwan 15 Nov '00

15 Nov '00

WASHINGTON, D.C. (Routers) -- FBI Director Louis Freeh announced today that the Federal Bureau of Investigation takes the criticism of its wiretapping computer sniffer Carnivore "very seriously." In a hastily-called press conference, he acknowledged that the FBI had "underestimated the importance of the Constitution to the citizen-units.' "We are withdrawing Carnivore at this time," he said to an assembled audience of journalists, activists, and visiting death squad officials from South America. "Simply put, we expected citizen-units to simply shrug off our latest surveillance measures. That, and the name. Apparently we insulted the vegetarian and vegan contingent," he joked. Director Freeh announced that while Carnivore was being withdrawn, the FBI would go ahead with deployment of a much more powerful system called "Childsaver." "Childsaver is our next-generation "first mover advantage" product," said Freeh, adopting the FBI's new dotcom-friendly jargon. "Childsaver is a best-of-breed product. It gives us a powerful edge in the surveillance space, and we think our investors will be happy." Childsaver, as Director Freeh explained it, will require suppliers of browsers and mail programs to install the Childsaver plug-in in every program shipped. "Childsaver will allow the legitimate needs of law enforcement by enabling lawful surveillance orders to be carried out swiftly and undetectably." When asked by a reporter if Carnivore had always been intended as a sacrifice move, to be abandoned and replaced by the better-sounding Childsaver, Director Freeh referred all such questions to the Ministry of Truth. Check the source. Hamish. -- We are each of us angels with only one wing, and we can only fly by embracing one another. -Luciano de Crescenzo --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0