<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Please read all the supporting documentation before judging.</div><div><br></div><div>Break/fix does not require approval. Routine changes not affecting architecture don't require approval.</div><div><br></div><div>The law is not great but to their credit GCSB have done a good job of consulting with industry and trying to make this reasonable.<br><br><div style="font-family: UICTFontTextStyleBody; -webkit-text-size-adjust: auto;">-- </div><div style="font-family: UICTFontTextStyleBody; -webkit-text-size-adjust: auto;">Mark.</div><div><br></div><div>Sent from a mobile device.</div></div><div><br>On 14/05/2014, at 11:32, Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>> wrote:<br><br></div><blockquote type="cite"><div><span></span><br><span>In message <<a href="mailto:CAA05nen+P1zjqo5NpSdX1tBx6fsxrdLfei5JKVXz7QigtJDS2A@mail.gmail.com">CAA05nen+P1zjqo5NpSdX1tBx6fsxrdLfei5JKVXz7QigtJDS2A@mail.gmail.com</a>></span><br><span>, Ben Buxton writes:</span><br><blockquote type="cite"><span>On 14 May 2014 05:22, Lindsay Hill <<a href="mailto:lindsay.k.hill@gmail.com">lindsay.k.hill@gmail.com</a>> wrote:</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><blockquote type="cite"><span>"Well at the very least if there was even a remote chance of a Amazon /</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Azure / GoogleCompute region opening up in NZ they just blew that chance</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>clear of the water."</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Why, given that this law is more targeting ISPs (i.e. not cloud</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>providers), and those firms comply with similar interception/tapping</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>regimes in other countries they operate in?</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>I read through it, this regulation is nuts. It may not be long before they</span><br></blockquote><blockquote type="cite"><span>decide that compute providers</span><br></blockquote><blockquote type="cite"><span>also fall into this category.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Most LI requirements only specify the capability, and how you provide that</span><br></blockquote><blockquote type="cite"><span>capability is up to the SP (granted, many have rolled out identical</span><br></blockquote><blockquote type="cite"><span>implementations). This goes way beyond and actually requires you to get</span><br></blockquote><blockquote type="cite"><span>governmental approval on most aspects of your network implementation.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to deploy a new linecard? Need government approval for that.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to move your TAC/Radius servers? Ask the government first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Selling a new product or plan? Not til the government ok's it.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to roll out a new vendor? Need government approval.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- NOC want to roll out a new tool they wrote to improve monitoring? Need to</span><br></blockquote><blockquote type="cite"><span>submit for government approval first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Netflow collector changes? Hell no, ask government first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Don't dare "apt-get install" anything on your NOC workstations without</span><br></blockquote><blockquote type="cite"><span>first applying to the government.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>If you're a global provider with NZ presence, this seems to affect your ops</span><br></blockquote><blockquote type="cite"><span>teams in europe/usa/aus/etc.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>This probably doesn't matter for most incumbent local telco's as they're</span><br></blockquote><blockquote type="cite"><span>used to loads of red tape, but</span><br></blockquote><blockquote type="cite"><span>a good agile provider can go from inception to deployment of many of these</span><br></blockquote><blockquote type="cite"><span>aspects within a week - this</span><br></blockquote><blockquote type="cite"><span>requires significant documentation and a 20 day turnaround.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>[* Personal opinion, nothing to do with my employer]</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>BB</span><br></blockquote><span></span><br><span>So the next time something breaks, ring the minister and don't fix</span><br><span>it until you get approval. Keep doing this. Add a recorded message</span><br><span>to you help lines saying "We regret that the service is down. The</span><br><span>Government require us to submit all change requests to them and we</span><br><span>cannot fix the problem until the change request is approved. If</span><br><span>you do not like this policy please contact the minister for <portfolio></span><br><span><name of minister>, his/her office phone number is <office-number>".</span><br><span></span><br><span>-- </span><br><span>Mark Andrews, ISC</span><br><span>1 Seymour St., Dundas Valley, NSW 2117, Australia</span><br><span>PHONE: +61 2 9871 4742 INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a></span><br><span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></span><br><span><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a></span><br></div></blockquote></body></html>