<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Mark,<div><br></div><div>The GCSB isn’t the issue - it’s the inanity of the law itself. </div><div><br></div><div>Essentially; they want it to be too hard to comply - this makes it easy to nail anyone they feel like if the 'need’ arises, as the law has been broken. It’s the trump card they’re keeping up their sleeves.</div><div><br></div><div>k.</div><div><br><div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 15px;"><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0);"><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-weight: normal;"><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0);">l</span></b><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);">E</span></b><span style="font-size: 10pt; font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);"> <a href="mailto:karl@mothership.co.nz">karl@mothership.co.nz</a> </span><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0);">l</span></b><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);">W <font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; font-weight: normal;"><a href="http://mothership.co.nz">mothership.co.nz</a> </span></font></span></b></span>l</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);">A</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><span lang="EN-GB" style="font-size: 10pt; font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);"> PO Box 99814, Newmarket</span></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><span lang="EN-GB"> </span></span><span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 15px;"><b><span lang="EN-GB" style="color: rgb(192, 0, 0); font-family: 'Gill Sans MT', sans-serif;">l</span><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif;"><font color="#4a442a">M </font></span></b></span><span style="color: rgb(74, 68, 42); font-family: 'Gill Sans MT', sans-serif; font-size: 13px;">021 999 990 </span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0);">l</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42);">P</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); font-size: 10pt;"> 974 3171</span></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px;"><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif;"> </span></b></span></div>
</div>
<br><div><div>On 14/05/2014, at 11:51 am, Mark Foster <<a href="mailto:blakjak@blakjak.net">blakjak@blakjak.net</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="content-type" content="text/html; charset=utf-8"><div dir="auto"><div>Please read all the supporting documentation before judging.</div><div><br></div><div>Break/fix does not require approval. Routine changes not affecting architecture don't require approval.</div><div><br></div><div>The law is not great but to their credit GCSB have done a good job of consulting with industry and trying to make this reasonable.<br><br><div style="font-family: UICTFontTextStyleBody; -webkit-text-size-adjust: auto;">-- </div><div style="font-family: UICTFontTextStyleBody; -webkit-text-size-adjust: auto;">Mark.</div><div><br></div><div>Sent from a mobile device.</div></div><div><br>On 14/05/2014, at 11:32, Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>> wrote:<br><br></div><blockquote type="cite"><span></span><br><span>In message <<a href="mailto:CAA05nen+P1zjqo5NpSdX1tBx6fsxrdLfei5JKVXz7QigtJDS2A@mail.gmail.com">CAA05nen+P1zjqo5NpSdX1tBx6fsxrdLfei5JKVXz7QigtJDS2A@mail.gmail.com</a>></span><br><span>, Ben Buxton writes:</span><br><blockquote type="cite"><span>On 14 May 2014 05:22, Lindsay Hill <<a href="mailto:lindsay.k.hill@gmail.com">lindsay.k.hill@gmail.com</a>> wrote:</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><blockquote type="cite"><span>"Well at the very least if there was even a remote chance of a Amazon /</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Azure / GoogleCompute region opening up in NZ they just blew that chance</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>clear of the water."</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Why, given that this law is more targeting ISPs (i.e. not cloud</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>providers), and those firms comply with similar interception/tapping</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>regimes in other countries they operate in?</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>I read through it, this regulation is nuts. It may not be long before they</span><br></blockquote><blockquote type="cite"><span>decide that compute providers</span><br></blockquote><blockquote type="cite"><span>also fall into this category.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Most LI requirements only specify the capability, and how you provide that</span><br></blockquote><blockquote type="cite"><span>capability is up to the SP (granted, many have rolled out identical</span><br></blockquote><blockquote type="cite"><span>implementations). This goes way beyond and actually requires you to get</span><br></blockquote><blockquote type="cite"><span>governmental approval on most aspects of your network implementation.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to deploy a new linecard? Need government approval for that.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to move your TAC/Radius servers? Ask the government first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Selling a new product or plan? Not til the government ok's it.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Want to roll out a new vendor? Need government approval.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- NOC want to roll out a new tool they wrote to improve monitoring? Need to</span><br></blockquote><blockquote type="cite"><span>submit for government approval first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Netflow collector changes? Hell no, ask government first.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>- Don't dare "apt-get install" anything on your NOC workstations without</span><br></blockquote><blockquote type="cite"><span>first applying to the government.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>If you're a global provider with NZ presence, this seems to affect your ops</span><br></blockquote><blockquote type="cite"><span>teams in europe/usa/aus/etc.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>This probably doesn't matter for most incumbent local telco's as they're</span><br></blockquote><blockquote type="cite"><span>used to loads of red tape, but</span><br></blockquote><blockquote type="cite"><span>a good agile provider can go from inception to deployment of many of these</span><br></blockquote><blockquote type="cite"><span>aspects within a week - this</span><br></blockquote><blockquote type="cite"><span>requires significant documentation and a 20 day turnaround.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>[* Personal opinion, nothing to do with my employer]</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>BB</span><br></blockquote><span></span><br><span>So the next time something breaks, ring the minister and don't fix</span><br><span>it until you get approval. Keep doing this. Add a recorded message</span><br><span>to you help lines saying "We regret that the service is down. The</span><br><span>Government require us to submit all change requests to them and we</span><br><span>cannot fix the problem until the change request is approved. If</span><br><span>you do not like this policy please contact the minister for <portfolio></span><br><span><name of minister>, his/her office phone number is <office-number>".</span><br><span></span><br><span>-- </span><br><span>Mark Andrews, ISC</span><br><span>1 Seymour St., Dundas Valley, NSW 2117, Australia</span><br><span>PHONE: +61 2 9871 4742 INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a></span><br><span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></span><br><span><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a></span><br></blockquote></div>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote></div><br></div></body></html>