[AusNOG] census issues tonight
Michael Keating
mkeating44 at gmail.com
Wed Aug 10 09:52:31 EST 2016
I think the point being made, was that the distrust of the Census has been
increased with the failure of the website, and the mainstream media taking
the 'hacking' angle. It's safe to say the stored data is ok, but there are
millions more submissions to go. If people think it was 'hacked', they
won't give a truthful answer for fear of their information being stolen
(which we know, it won't). More of a general observation than a technical
observation (which I do agree with).
On Wed, Aug 10, 2016 at 9:26 AM, Mark Andrews <marka at isc.org> wrote:
>
> In message <c7617127-36a9-f5dc-894e-727a6700e016 at spectrum.com.au>, Matt
> Perkins writes:
> > If you ask me the dataset is now terminally compromised. This is
> > essentially market research and peoples ability to answer that sort of
> > stuff truthfully goes to how much the person doing the servery is
> > trusted. With the ABS spouting stuff like Attack from overseas, people
> > are very unlikely to tell the truth on this census.
> >
> > Fellas you blew it. Cancel the census reschedule for next year and send
> > out paper form's Your collective uselessness just put us back 5 years.
> >
> > Matt
>
> A DoS attack does not make the dataset compromised.
>
> Having too small key space does. 1/100000 is not a big space for
> computers to search through. It's only ~20 bits of security. A
> extra 4 digits would have raised it to ~30 bits. A extra 8 digits
> would have raised it to ~43 bits. Entering 5 x 4 digit sequences
> is not hard. We do 4 x 4 + 3 for every visa / mastercard transaction
> we do online today.
>
> Mark
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160810/681ac8f8/attachment.html>
More information about the AusNOG
mailing list