[AusNOG] Interesting

[Karl Hardisty]

Mark,

The GCSB isn’t the issue - it’s the inanity of the law itself. 

Essentially; they want it to be too hard to comply - this makes it easy to nail anyone they feel like if the 'need’ arises, as the law has been broken. It’s the trump card they’re keeping up their sleeves.

k.

lE karl at mothership.co.nz lW mothership.co.nz  lA PO Box 99814, Newmarket  lM 021 999 990 lP 974 3171 

On 14/05/2014, at 11:51 am, Mark Foster <blakjak at blakjak.net> wrote:

> Please read all the supporting documentation before judging.
> 
> Break/fix does not require approval. Routine changes not affecting architecture don't require approval.
> 
> The law is not great but to their credit GCSB have done a good job of consulting with industry and trying to make this reasonable.
> 
> -- 
> Mark.
> 
> Sent from a mobile device.
> 
> On 14/05/2014, at 11:32, Mark Andrews <marka at isc.org> wrote:
> 
>> 
>> In message <CAA05nen+P1zjqo5NpSdX1tBx6fsxrdLfei5JKVXz7QigtJDS2A at mail.gmail.com>
>> , Ben Buxton writes:
>>> On 14 May 2014 05:22, Lindsay Hill <lindsay.k.hill at gmail.com> wrote:
>>> 
>>>> "Well at the very least if there was even a remote chance of a Amazon /
>>>> Azure / GoogleCompute region opening up in NZ they just blew that chance
>>>> clear of the water."
>>>> 
>>>> Why, given that this law is more targeting ISPs (i.e. not cloud
>>>> providers), and those firms comply with similar interception/tapping
>>>> regimes in other countries they operate in?
>>>> 
>>> 
>>> I read through it, this regulation is nuts. It may not be long before they
>>> decide that compute providers
>>> also fall into this category.
>>> 
>>> Most LI requirements only specify the capability, and how you provide that
>>> capability is up to the SP (granted, many have rolled out identical
>>> implementations). This goes way beyond and actually requires you to get
>>> governmental approval on most aspects of your network implementation.
>>> 
>>> - Want to deploy a new linecard? Need government approval for that.
>>> 
>>> - Want to move your TAC/Radius servers? Ask the government first.
>>> 
>>> - Selling a new product or plan? Not til the government ok's it.
>>> 
>>> - Want to roll out a new vendor? Need government approval.
>>> 
>>> - NOC want to roll out a new tool they wrote to improve monitoring? Need to
>>> submit for government approval first.
>>> 
>>> - Netflow collector changes? Hell no, ask government first.
>>> 
>>> - Don't dare "apt-get install" anything on your NOC workstations without
>>> first applying to the government.
>>> 
>>> If you're a global provider with NZ presence, this seems to affect your ops
>>> teams in europe/usa/aus/etc.
>>> 
>>> This probably doesn't matter for most incumbent local telco's as they're
>>> used to loads of red tape, but
>>> a good agile provider can go from inception to deployment of many of these
>>> aspects within a week - this
>>> requires significant documentation and a 20 day turnaround.
>>> 
>>> [* Personal opinion, nothing to do with my employer]
>>> 
>>> BB
>> 
>> So the next time something breaks, ring the minister and don't fix
>> it until you get approval.  Keep doing this.  Add a recorded message
>> to you help lines saying "We regret that the service is down.  The
>> Government require us to submit all change requests to them and we
>> cannot fix the problem until the change request is approved.  If
>> you do not like this policy please contact the minister for <portfolio>
>> <name of minister>,  his/her office phone number is <office-number>".
>> 
>> -- 
>> Mark Andrews, ISC
>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
>> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140514/a8754fe6/attachment.html>