[AusNOG] NBN requesting personal information

[Nathan Brookfield]

I should always say, when they insist on a copy of a lease document or utility bill, we have a company policy to remove all identifying information.

Nathan Brookfield
General Manager

p: 1300 592 330  |  m: 0412 266 008 | w: https://Iperium.com.au

Level 7, 82 Elizabeth Street, Sydney NSW 2000<x-apple-data-detectors://4>

Your Connectivity Team



DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email.

On 30 Sep 2022, at 11:04, Giles Pollock <glp71s at gmail.com> wrote:


Its NBNCo... With what I've experienced over the last near six years of dealing with them over a failure in infrastructure planning, I am quite prepared to expect a future severe data breach from them.

There are whole slabs of design and implementation elements of the NBN both at wholesaler and RSP levels which leave me deeply concerned about the privacy elements of things, especially the apparent decision to push all RSPs to use TR069 autoprovisioning systems for end users. Some in the know might know of how one little mistake with those particular systems could turn into a pretty hefty data breach in its own rights...

On Fri, Sep 30, 2022 at 11:37 AM Graham Maltby <graham at maltby.id.au<mailto:graham at maltby.id.au>> wrote:
Hi All,

In light of the current Optus debacle, can anyone explain NBN's constant demands for Proof of Occupancy Documentation (POD) in relation to the most trivial of request. I accept they want to ensure requests are legitimate for creating and modifying LOCIDs, but surely that should be limited to addressing details only, with the onus of vetting the end user left to the RSP.

What possible reason can they have to demand end user names and contact information?

In my mind, they are overstepping their wholesale role and, creating the opportunity for another needless future compromise.

Cheers,
Graham

_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net<mailto:AusNOG at ausnog.net>
https://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20220930/a5062e5b/attachment.htm>