[AusNOG] "All your router devices are belong to us"

[Bevan Slattery]

***NOT FOR NON-LIST CONSUMPTION OR REFERENCE***

Macca,

Come on - seriouslyŠ :)

Yes - people should have an understanding that their traffic can be forked
if in the case of lawful interception.  That is commonly understood.
No - people don't expect their telco to fork traffic to third parties
without your EXPRESS permission (not some bubble-wrapped user agreement).
That is not commonly accepted and has legal hairs all over it without an
interception requirement (Geoff Huston has pointed this out)
No - people don't generally understand that Cisco and all US organisations
are covered by the Patriot Act and potentially they maybe required to
lawfully enforced to intercept customer data/control devices from afar
without the user ever knowing and regardless of what the Australian laws
state.  I'm not saying this is a bad thing, just saying this is how it is.
No - the US (and Australia for that matter) would not allow its Government
to have certain Asian companies manager their routers and switches for
them so I wonder how this is going to get managed when same Asian
manufacturers offer the same thing to the tens of millions residential
modems of all the Government employees at home.  I'm not saying this is a
bad thing, just that this is how it is.
No - Society hasn't yet woken from the sleep walk into privacy
obliteration through the use of bubble-wrapped user agreements providing
corporations with all the rights, including washing away consumer
protection laws in the name of progress.  I am saying this is a bad thing.

People have certain expectations in terms of privacy regardless of the
protections (or lack of) afforded by law.  It's time some serious consumer
protections get implemented here in Australia so that the law catches up
with reasonable expectations of the punter.  The use of bubble-wrapped
end-user agreements are great, but not when privacy protection is
steam-rolled in the process.

Cheers

[b]

PS:  These are my personal views.


On 30/06/12 7:14 PM, "McDonald Richards" <macca at vocus.com.au> wrote:

>You do realise most ISPs maintain the ability to fork your data anyway as
>part of their lawful intercept requirements right?
>
>This just looks like managed CPE to me, at a lower price point.
>
>You don't have admin on your cable modem or Foxtel box :)
>
></tinfoil hat>
>
>Macca
>
>
>On 30/06/2012, at 11:56 AM, Heinz N <ausnog at equisoft.com.au> wrote:
>
>> I just saw this on slashdot. Get the tin foil hats out.
>>
>>
>>http://tech.slashdot.org/story/12/06/29/1425210/cisco-pushing-cloud-conne
>>ct-router-firmware-allows-web-history-tracking
>>
>> and
>>
>>
>>http://www.reddit.com/r/technology/comments/vptu9/linksys_just_pushed_and
>>_installed_without_my
>>
>> Seems CISCO is disallowing local admin to their low end home/SOHO
>>routers. Admin can apparently now only be done through their cloud
>>(since when does a cloud ever fail!!?)...... Their conditions also state
>>that they can monitor your traffic as they wish (and the "patriot act"
>>NSA, FBI etc etc). No telling what the bandwidth implications of this
>>are: and who will pay for the extra unauthorised traffic?
>>
>> You may want to rethink your equipment for SOHO clients.
>>
>> The whole issue with Telstra tracking HTTP traffic is just the start.
>>How long before your new "trusted computing" motherboard reflashes
>>itself and starts reporting all your stuff to Redmond (or China).
>>
>> I am happy to stick with my dumb bridged modem talking to a Linux
>>router running iptables. Very cheap and with all the functionality of
>>the most expensive routers and it doesn't report to some mothership
>>cloud.
>>
>> Heinz N.
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>_______________________________________________
>AusNOG mailing list
>AusNOG at lists.ausnog.net
>http://lists.ausnog.net/mailman/listinfo/ausnog



The information contained in this email and any attachments may be confidential. This email and any attachments are also subject to copyright. No part of them may be reproduced, adapted or transmitted without the written permission of the copyright owner. If you are not the intended recipient, any use, interference with, disclosure or copying of this information is unauthorised and prohibited. If you have received this email in error, please immediately advise the sender by return email and delete the message from your system. All email communications to and from NEXTDC Limited are recorded for the purposes of archival and storage.