<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Also does this mean that the custom firmware for one or a handful
      of targets is not a systemic weakness, but if (when) the custom
      firmware leaks out publicly and can be used criminally, it
      suddenly does become a systemic weakness?</p>
    <p>So a request can become illegal after it's already been executed?</p>
    <p>Note: I say "when" because by it's very nature, a copy of the
      firmware must be provided to the targeted criminals.<br>
      Smart people being targeted could detect and make a copy of it, do
      a diff and hey presto they know exactly what's going on.<br>
      It's like DVD encryption - you encrypt the content and then hand
      over the keys so the DVD can be viewed.<br>
    </p>
    <div class="moz-cite-prefix">On 5/12/18 7:12 am, Scott Weeks wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:20181204121209.57FC84F2@m0117566.ppops.net">
      <pre class="moz-quote-pre" wrap="">

--- <a class="moz-txt-link-abbreviated" href="mailto:me@chrishawker.com.au">me@chrishawker.com.au</a> wrote:
From: Christopher Hawker <a class="moz-txt-link-rfc2396E" href="mailto:me@chrishawker.com.au"><me@chrishawker.com.au></a>

<a class="moz-txt-link-freetext" href="https://apple.news/AOnumlAB9THOmg_8mnMS9DA">https://apple.news/AOnumlAB9THOmg_8mnMS9DA</a>
-------------------------------------------------


"Custom firmware built to address one notice or request 
is not a systemic weakness unless it is deployed to 
users other than the intended targeted user."

I don't understand.  They're going to write encryption 
software with a weakness they can exploit and then force 
the criminal to put it on his computer?  How do they get 
this malware only on "the intended targeted user('s)" 
computer and no one elses???
  


"So long as the capability is held in reserve it does 
not jeopardise the security of other users and is not 
a systemic weakness," the department stated.

Um, it compromises "the security of other users" in 
that any computer interacting with the malware infected 
computer is compromised by the interaction.


scott






















</pre>
      <blockquote type="cite">
        <blockquote type="cite">
          <blockquote type="cite">
            <pre class="moz-quote-pre" wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><a class="moz-txt-link-rfc2396E" href="mailto:AusNOG@lists.ausnog.net"><mailto:AusNOG@lists.ausnog.net></a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
          </blockquote>
        </blockquote>
        <pre class="moz-quote-pre" wrap="">
_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><a class="moz-txt-link-rfc2396E" href="mailto:AusNOG@lists.ausnog.net"><mailto:AusNOG@lists.ausnog.net></a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
      </blockquote>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><a class="moz-txt-link-rfc2396E" href="mailto:AusNOG@lists.ausnog.net"><mailto:AusNOG@lists.ausnog.net></a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>


_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>


_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
    </blockquote>
    <div class="moz-signature">-- <br>
      <table style="width:100%; font-family:Arial, Helvetica,
        sans-serif; font-size:9pt; color:#666;" cellspacing="0"
        cellpadding="0">
        <tbody>
          <tr>
            <td style="font-size:12pt; font-weight:bold; color:#00ccff;">Nick
              Stallman</td>
          </tr>
          <tr>
            <td style="padding:5pt 0 8pt; font-weight:bold;">TECNICAL
              DIRECTOR</td>
          </tr>
          <tr>
            <td style="padding:7pt 0 10pt; border-top:1px solid
              #eaeaea;">
              <table style="font-family:Arial, Helvetica, sans-serif;
                font-size:9pt;" cellspacing="0" cellpadding="0">
                <tbody>
                  <tr>
                    <td style="padding-right:5pt;"><img
                        style="display:block;"
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_icon_email.png"
                        alt="Email" width="16" height="auto"></td>
                    <td><a style="color:#9a9a9a; text-decoration:none;"
                        href="mailto:nick@agentpoint.com"
                        title="nick@agentpoint.com">nick@agentpoint.com</a></td>
                  </tr>
                  <tr>
                    <td style="padding-right:5pt;"><img
                        style="display:block;"
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_icon_globe.png"
                        alt="Website" width="16" height="auto"></td>
                    <td><a style="color:#9a9a9a; text-decoration:none;"
                        href="https://www.agentpoint.com.au/"
                        title="Agentpoint" target="_blank">www.agentpoint.com.au</a></td>
                  </tr>
                </tbody>
              </table>
            </td>
          </tr>
          <tr>
            <td style="padding:5pt; background:#66CCFF;">
              <table style="width:100%; vertical-align:middle"
                cellspacing="0" cellpadding="0">
                <tbody>
                  <tr>
                    <td align="left"><a
                        href="https://www.agentpoint.com.au/"
                        title="Agentpoint"><img style="display:block;"
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_logo_agentpoint_white.png"
                          alt="Agentpoint" width="100" height="auto"
                          border="0"></a></td>
                    <td align="right"> <a
                        href="https://www.instagram.com/Agentpoint/"
                        title="Instagram" target="_blank"><img
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_icon_instagram.png"
                          alt="Instagram" border="0"></a> <a
                        href="https://twitter.com/agentpoint"
                        title="Twitter" target="_blank"><img
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_icon_twitter.png"
                          alt="Twitter" border="0"></a> <a
                        href="https://www.facebook.com/agentpoint/"
                        title="Facebook" target="_blank"><img
src="https://www.agentpoint.com.au/wp-content/uploads/2016/12/e_icon_facebook.png"
                          alt="Facebook" border="0"></a> </td>
                  </tr>
                </tbody>
              </table>
            </td>
          </tr>
        </tbody>
      </table>
    </div>
  </body>
</html>