<div dir="ltr">I also wonder whether they retained only say Driver's Licence number and not the expiry date. (Same for passport). At least that might limit the damage if those that now need to verify ID info at least can ask if you have those dates - a potential misuser of that data wouldn't have those dates. (I know my DL number and the day and month by heart, but I had to check which year it expires from the actual card)<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Regards, Martin<br><br><a href="mailto:MartinVisser99@gmail.com" target="_blank">MartinVisser99@gmail.com</a></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 27 Sept 2022 at 11:02, <<a href="mailto:glenn.satchell@uniq.com.au">glenn.satchell@uniq.com.au</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">My understanding was that the data included the 100 points of ID info. <br>
Why are they retaining this? Surely after confirming the 100 points <br>
there only needs to be a record "100 points provided"=true and not <br>
retain the actual details. This goes back to only keeping the private <br>
data you need.<br>
<br>
regards,<br>
Glenn<br>
<br>
On 2022-09-27 10:49, Damien Gardner Jnr wrote:<br>
> Personally, I find putting Authentication on my API endpoints to be a<br>
> FANTASTIC first step towards API security. And then not even using<br>
> public IP addresses in test environments is a pretty good second<br>
> step.. </onlyhalfsarcasticherewhydoesthiskeephappening><br>
> <br>
> On Tue, 27 Sept 2022 at 10:46, Bevan Slattery <<a href="mailto:bevan@slattery.net.au" target="_blank">bevan@slattery.net.au</a>><br>
> wrote:<br>
> <br>
>> Hi everyone,<br>
>> <br>
>> Obviously a big week in telco and cybersecurity. As part of my work<br>
>> I am on the Australian Cyber Security Industry Advisory Committee as<br>
>> an industry representative.<br>
>> <br>
>> I am keen to look at opening up a dialogue with more and more telco,<br>
>> DC and Cloud CISO’s on what they are doing around this issue and<br>
>> looking to take a proactive step towards best practice on customer<br>
>> data and system security.<br>
>> <br>
>> There will be some pretty serious consequences of this hack on the<br>
>> industry and importantly we need to make sure we are as best placed<br>
>> to help each other continually increase in security posture through<br>
>> best practice, but also working with each other as an industry.<br>
>> <br>
>> Are people keen on having a online/VC session sometime in the next<br>
>> few weeks where like-minded industry participants get together and<br>
>> discuss security, retention, encryption, threat detection etc.? If<br>
>> so, just ping me directly and if there is enough interest I will<br>
>> send out an invitation to the list for a call.<br>
>> <br>
>> Cheers<br>
>> <br>
>> [b]<br>
>> <br>
>> _______________________________________________<br>
>> AusNOG mailing list<br>
>> <a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
>> <a href="https://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
> <br>
> --<br>
> <br>
> Damien Gardner Jnr<br>
> VK2TDG. Dip EE. GradIEAust<br>
> <a href="mailto:rendrag@rendrag.net" target="_blank">rendrag@rendrag.net</a> - <a href="http://www.rendrag.net/" rel="noreferrer" target="_blank">http://www.rendrag.net/</a><br>
> --<br>
> We rode on the winds of the rising storm,<br>
> We ran to the sounds of thunder.<br>
> We danced among the lightning bolts,<br>
> and tore the world asunder<br>
> _______________________________________________<br>
> AusNOG mailing list<br>
> <a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
> <a href="https://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div>