The conversation

skissaneHNSource author
Lessons learnedExperience excerpt · English

> Australians can be legally compelled in secret courts to install backdoors in the companies in …

> Australians can be legally compelled in secret courts to install backdoors in the companies in which they are employed, and gagged from telling the company itself or any journalists (see the Access and Assistance Bill). My thoughts on this as an Australian software engineer: how could they possibly “order” me to “install a backdoor”? To change a production system, I need an issue in the issue tracker, I need a PR, I need a colleague to review and approve it-if I’m not allowed to call it “install backdoor at Australian government’s demand”, what am I going to call it? How am I suppose to justify it to the reviewer? How do I respond to their questions? How do I convince them to approve it? “I’m sorry I’m not allowed to tell you why this PR is needed” is not going to get it approved And in the (I think highly implausible) event the government did order me to do such a thing-first I’d insist it was impossible (due to the kind of internal controls I’ve already mentioned), and if they wouldn’t accept that answer, then I’d resign rather than do it. …

Original discussionNorth Korean IT workers have infiltrated the Fortune 500153 source comments · at import
2

What was this responding to?

Parent context · original excerpt

PL
plsbenice34HN

What about Australia in comparison? Australians can be legally compelled in secret courts to install backdoors in the companies in which they are employed, and gagged from telling the company itself or any journalists (see the Access and Assistance Bill). That doesn't cross the same 'agents of the state' line?

Full original

Community replies 0

No community replies yet. Add your perspective.

Replies from the source 2

Direct replies available in this import. Original-language excerpts.

DO
donnachangsteinHN

Everyone was blaming the Chinese/Russians/Israelis for the xz backdoor.... maybe it was the bloody Australians the whole time and no one suspected it!

Full original
DM
dmurrayHN

I suppose you'd do it the same way any North Korean operative would. They'd offer you training on how to bypass the controls. They'd get you to exfiltrate the code and the product roadmap. They'd have someone more skilled suggest a plausible backdoor as part of an innocent change, like the xzutils one. As for how they'd force you, just like any intelligence agency, they'd start with carrots. They'd offer you money, or the chance to feel you were serving your country (both are free to the Australian government, and likely more effective than a double ration of wheat). They'd have you do very innocent, justifiable things at first. They'd work their way up to higher demands. If you got cold feet, they'd tell you you were in too deep. They'd then consider the sticks. They'd threaten to expose your spying, or release some other compromat. They'd arrest you or a family member on a he-said-the-…

Full original
Continue on Hacker News

Respect different perspectives. Share concrete experiences.

Sign in to post, reply, repost, and quote.