<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:black;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;}
span.EmailStyle28
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Consider precedent to be set !<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>In the case of the ABS versus an unknown attacker……we find the attack to be an attempt, not an attack, you’re clear !<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Paul<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> James Troy [mailto:james.troy@asta.com.au] <br><b>Sent:</b> Wednesday, 10 August 2016 11:48 AM<br><b>To:</b> James Braunegg; paul+ausnog@oxygennetworks.com.au; 'Daniel'; ausnog@lists.ausnog.net<br><b>Subject:</b> RE: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>So for anyone who is bought up on hacking charges in the next 12 months their defence can be “It’s not an attack, it was an attempt and therefore should not be classified as an attack”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><p class=MsoNormal style='line-height:150%'><span lang=EN-US style='font-size:10.0pt;line-height:150%;font-family:"Arial","sans-serif";color:#1F497D'>Kind Regards,<o:p></o:p></span></p><p class=MsoNormal style='line-height:150%'><b><span lang=EN-US style='font-size:10.0pt;line-height:150%;font-family:"Arial","sans-serif";color:#1F497D'>James Troy<o:p></o:p></span></b></p><p class=MsoNormal style='line-height:150%'><span lang=EN-US style='font-size:10.0pt;line-height:150%;font-family:"Arial","sans-serif";color:#1F497D'><o:p> </o:p></span></p></div><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>James Braunegg<br><b>Sent:</b> Wednesday, 10 August 2016 11:44 AM<br><b>To:</b> <a href="mailto:paul+ausnog@oxygennetworks.com.au">paul+ausnog@oxygennetworks.com.au</a>; 'Daniel'; <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'>Meh when is an attempt an attack… durrr if you attempt something your attacking something…. And the service was denied at the end of the day… and the attack was completed by the ABS turning the site off…<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'>Gota love Australia ! Aussie Aussie Aussie Oi Oi Oi<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'>Kindest Regards<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Verdana","sans-serif";color:black'>James Braunegg<br></span></b><b><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>P:</span></b><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> 1300 769 972 | <b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>E:</span></b><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> </span><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><a href="mailto:james.braunegg@micron21.com"><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>james.braunegg@micron21.com</span></a></span><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> | <b>ABN:</b> 12 109 977 666 <br><b>W:</b> <a href="http://www.micron21.com/ddos-protection"><span style='color:black'>www.micron21.com/ddos-protection</span></a> <b>T:</b> @micron21<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>Follow us on </span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><a href="http://www.twitter.com/micron21"><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>Twitter</span></a></span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'> </span><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>for important service and system updates.<br><br></span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><img border=0 width=250 height=39 id="_x0000_i1025" src="cid:image001.jpg@01D1F2FE.48253CF0" alt=M21.jpg></span><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'><br></span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:black'>This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b><a href="mailto:paul+ausnog@oxygennetworks.com.au">paul+ausnog@oxygennetworks.com.au</a><br><b>Sent:</b> Wednesday, 10 August 2016 11:40 AM<br><b>To:</b> 'Daniel' <<a href="mailto:satellite@internode.on.net">satellite@internode.on.net</a>>; <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>What a load of crap LOL, I love seeing people who know nothing about what they are talking about try and talk about it, it’s good for a sitcom or 2….<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>It wasn’t an attack, it was just an “attempt” ROFL<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Paul<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Daniel<br><b>Sent:</b> Wednesday, 10 August 2016 11:34 AM<br><b>To:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>The relevant minister (Michael McCormack) has released a statement blaming DDoS in combination with a router hardware failure:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>“There was a large scale denial of service attempt to the census website and online form. A denial of service is an attempt to block people from accessing a website. Following, and because of this, there was a hardware failure,” he said.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>“A router became overloaded. After this, what is known as a false positive occurred. This is essentially a false alarm in some of the system monitoring information. As a result the ABS employed a cautious strategy which was to shut down the online census form to ensure the integrity of the data already submitted was protected.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>“I will be clear from the outset, this was not an attack. Nor was it a hack but rather, it was an attempt to frustrate the collection of bureau of statistics census data. ABS census security was not compromised. I repeat, not compromised and no data was lost.”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><a href="http://www.theaustralian.com.au/national-affairs/census-2016-website-crashes-under-weight-of-demand/news-story/1febee892e1ab043c0e7682c7a3485a4">http://www.theaustralian.com.au/national-affairs/census-2016-website-crashes-under-weight-of-demand/news-story/1febee892e1ab043c0e7682c7a3485a4</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>(paywalled)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Andy Taylor<br><b>Sent:</b> Wednesday, 10 August 2016 10:57 AM<br><b>To:</b> 'Nathanael Bettridge' <<a href="mailto:nathanael@prodigy.com.au">nathanael@prodigy.com.au</a>>; 'Robert Hudson' <<a href="mailto:hudrob@gmail.com">hudrob@gmail.com</a>>; 'Michael Keating' <<a href="mailto:mkeating44@gmail.com">mkeating44@gmail.com</a>><br><b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'>I noticed last night before the system crashed completely the following error:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><br>“status -1 code 101”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'>I don’t know much about .jsp, but it appears that this was an issue with the header?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'>Is it possible that this was a layer 7 attack that was being implemented?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif";color:#222222;background:white'>A<span class=apple-converted-space> </span><b>status code</b><span class=apple-converted-space> </span>of<span class=apple-converted-space> </span><b>101</b><span class=apple-converted-space> </span>indicates that the server is changing to the protocol it defines in the "Upgrade" header it returns to the client. For example, when requesting a page, a browser might receive a statis<span class=apple-converted-space> </span><b>code</b><span class=apple-converted-space> </span>of<span class=apple-converted-space> </span><b>101</b>, followed by an "Upgrade" header showing that the server is changing to a different version of HTTP.</span><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Andy Taylor<o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Technical Director<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>0424 656 973<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><img border=0 width=213 height=83 id="Picture_x0020_1" src="cid:image002.png@01D1F2FE.48253CF0" alt="ca_logo"><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://www.coastalaudio.com.au/"><span style='color:#0563C1'>www.coastalaudio.com.au</span></a> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Nathanael Bettridge<br><b>Sent:</b> Wednesday, 10 August 2016 10:53 AM<br><b>To:</b> 'Robert Hudson' <<a href="mailto:hudrob@gmail.com">hudrob@gmail.com</a>>; 'Michael Keating' <<a href="mailto:mkeating44@gmail.com">mkeating44@gmail.com</a>><br><b>Cc:</b> 'ausnog@lists.ausnog.net' <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>The validity of the data is suspect. Users in bad moods submitting info that would otherwise be trustworthy, partially completed surveys, I’m sure thousands of households that will now fall through the gaps, the spreading out of census data over a much longer than normal time frame – as a statistical snapshot the Census is effectively ruined.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Robert Hudson<br><b>Sent:</b> Wednesday, 10 August 2016 10:44 AM<br><b>To:</b> Michael Keating <<a href="mailto:mkeating44@gmail.com">mkeating44@gmail.com</a>><br><b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] census issues tonight<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p>Why is it safe to say that the stored data is OK? What evidence do we have to support that belief?<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On 10 Aug 2016 9:52 AM, "Michael Keating" <<a href="mailto:mkeating44@gmail.com">mkeating44@gmail.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><p class=MsoNormal>I think the point being made, was that the distrust of the Census has been increased with the failure of the website, and the mainstream media taking the 'hacking' angle. It's safe to say the stored data is ok, but there are millions more submissions to go. If people think it was 'hacked', they won't give a truthful answer for fear of their information being stolen (which we know, it won't). More of a general observation than a technical observation (which I do agree with).<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Wed, Aug 10, 2016 at 9:26 AM, Mark Andrews <<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><p class=MsoNormal><br>In message <<a href="mailto:c7617127-36a9-f5dc-894e-727a6700e016@spectrum.com.au" target="_blank">c7617127-36a9-f5dc-894e-727a6700e016@spectrum.com.au</a>>, Matt Perkins writes:<br>> If you ask me the dataset is now terminally compromised. This is<br>> essentially market research and peoples ability to answer that sort of<br>> stuff truthfully goes to how much the person doing the servery is<br>> trusted. With the ABS spouting stuff like Attack from overseas, people<br>> are very unlikely to tell the truth on this census.<br>><br>> Fellas you blew it. Cancel the census reschedule for next year and send<br>> out paper form's Your collective uselessness just put us back 5 years.<br>><br>> Matt<br><br>A DoS attack does not make the dataset compromised.<br><br>Having too small key space does. 1/100000 is not a big space for<br>computers to search through. It's only ~20 bits of security. A<br>extra 4 digits would have raised it to ~30 bits. A extra 8 digits<br>would have raised it to ~43 bits. Entering 5 x 4 digit sequences<br>is not hard. We do 4 x 4 + 3 for every visa / mastercard transaction<br>we do online today.<br><br>Mark<br>--<br>Mark Andrews, ISC<br>1 Seymour St., Dundas Valley, NSW 2117, Australia<br>PHONE: <a href="tel:%2B61%202%209871%204742" target="_blank">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a><o:p></o:p></p><div><div><p class=MsoNormal>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></blockquote></div></div><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="100%" align=center></div><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 width="100%" style='width:100.0%' id=container-table><tr><td style='padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 width="100%" style='width:100.0%' id=header-table><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><b><span style='font-size:9.0pt;color:#5D5F8F'>Total Control Panel<o:p></o:p></span></b></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=right style='text-align:right'><span style='font-size:9.0pt;color:black'><a href="https://antispam.avgcloud.net/login?domain=prodigy.com.au">Login</a><o:p></o:p></span></p></td></tr></table></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 width="100%" style='width:100.0%' id=main-content-table><tr><td width="30%" valign=top style='width:30.0%;padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 id=from-to-table><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:9.0pt;color:black'>To: <a href="https://antispam.avgcloud.net/address-properties?aID=1106235830&domain=prodigy.com.au">nathanael@prodigy.com.au</a><o:p></o:p></span></p></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:9.0pt;color:black'>From: <a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a><o:p></o:p></span></p></td></tr></table></td><td valign=top style='padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 id=actions-table><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:9.0pt;color:black'><a href="https://antispam.avgcloud.net/FooterAction?ver=3&un-wl-sender-domain=1&hID=1359707166&domain=prodigy.com.au">Remove</a> lists.ausnog.net from my allow list<o:p></o:p></span></p></td></tr></table></td></tr></table></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0 id=cause-stament-table><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><i><span style='font-size:9.0pt;color:black'>You received this message because the domain lists.ausnog.net is on your allow list.<o:p></o:p></span></i></p></td></tr></table></td></tr></table><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>