Aussie Spies Spooked By Cyberwar 72
An anonymous reader writes "Wikileaks cables released overnight revealed that Australia's top cyber spy agency (akin to the NSA) was unprepared for cyberwar in the view of other intelligence agencies in 2008. Australian agencies were so concerned they asked US intelligence to provide the framework to defend the country's critical information infrastructure, modelling on the Comprehensive National Cybersecurity Initiative. Spooks also discussed how Israel was preparing to take down Iran's nuclear program and how to stay relevant when so much information that was classified was now open source and available to anyone."
This isn't surprising. (Score:2)
Re:This isn't surprising. (Score:4, Insightful)
Re:This isn't surprising. (Score:4, Funny)
Australia would freely admit that they could be taken down by Anonymous, and therefore Anonymous would leave us alone.
It's only if we were to taunt them that we would be in real trouble...
Re:This isn't surprising. (Score:5, Funny)
Australia would freely admit that they could be taken down by Anonymous, and therefore Anonymous would leave us alone.
It's only if we were to taunt them that we would be in real trouble...
Sounds like Anonymous Cowardice to me ;-)
Re: (Score:2)
Anonymous seems to mostly go for websites, however (although they did manage to take out Mastercard's transaction server, which was an interesting touch).
If they only went for Australian government websites, it's no big loss. I don't know why the press went so nuts last year when the Dept of Comms webserver went down - meh, it's hardly important.
Re: (Score:2)
Ok, I'm not quite right, it's Securecode that went down: http://www.bbc.co.uk/news/technology-11935539 [bbc.co.uk]. Apparently prevented some web transactions from going through.
Re: (Score:2)
It's the first time I hear they hit the transaction server. Source?
Maybe they have source now.
Re: (Score:1)
It is more serious than that.
Some of the actual details of Australia's "unpreparedness" are common knowledge trhought the industry at least in telecoms. 2008 is _AFTER_ the disastrous outsourcing of most of the backroom functions of Telstra to Satyam.
It is a very rude awakening for the so called security forces to suddenly wake up and realise that the switch for the nation's communications infrastructure is located in company in another country, that company is a fraud and on top of that key functions have
Re: (Score:1)
Sheep: The trick is to stand perfectly still at all times.
Re: (Score:3)
Actually I think the subs are pretty good. Didn't they pwn a US carrier fleet a few years back? But I wouldn't trust the DSD to secure my backups or lock my front door. That would be silly. Describing them as our top cyber spy agency is a bit like describing the Victorian public transport corporation as our top electronic ticketing agency.
Re: (Score:1)
They are quite good. They had a few very expensive glitches when they started out, predominately computer related if memory serves me correctly, however the subs are very quiet even with being one of the largest, if not the largest, diesel electrics in the world.
Re: (Score:1)
What, during the US-Australia War of 2006?
T'was noisy pollies not noisy subs (Score:5, Informative)
It's not just subs, there was the purchase of the sprightly old Sea Sprites which were not safe to fly over water and had been considered obsolete in the 1970s. It had to be corruption because stupidity of that level would be inconsistant with making it to an adult age alive.
Re: (Score:2)
Re: (Score:1)
In retrospect... (Score:5, Insightful)
...asking the US for tips on information security wasn't probably the best idea.
Re: (Score:3)
If you compare the news article to the secret document released, the journalist really, really stretched one paragraph. To quote "Australian intelligence would need to stay engaged with its US counterparts to share lessons learned in the cyber arena", certainly the US has demonstrated many things not to do and Australian Intelligence has likely learned from them.
Likely Australia is far better off expanding the role of ACMA http://www.acma.gov.au/WEB/HOMEPAGE/pc=HOME [acma.gov.au], to investigate 'cybercrime' and make
Re: (Score:3)
1. ACMA (Australian Communications and Media Authority - the FCC of Australia) starts investigating cybercrime.
2. ACMA lobbies government for more powers to more effectively investigate cybercrime.
3. ACMA granted powers to wiretap in the name of national security.
4. ACMA lobbied by the ARIA (Australian Record Industry Association - self explanatory) to investigate copyright infringement.
5. ???
Re: (Score:2)
The idea is ACMA remains civilian and thus is a more acceptable place of employment for computer geeks and nerds, rather than the authoritarian structure of military and police forces. So the only thing the do is investigate and analyse system break-ins and suspicion of system break ins, as well as of course assist in the design of secure system.
The warrants, wire taps et al are still done by the same authorities they just go to ACMA for the technical resource. The main reason to do it that what, is pure
Re: (Score:2)
What makes you think that one place is or isn't an acceptable workplace, and that they can or can't foster the correct training environment? It's all a matter of technical knowhow, and the only thing I can see is downsides given how the AFP is already set up for this kind of
Re: (Score:2)
Re:In retrospect... (Score:4, Funny)
Same situation (Score:1)
"...to stay relevant when so much information that was classified was now open source and available to anyone."
They are now in much the same situation with cables such as this being "open source and available to anyone".
Heh. (Score:4, Insightful)
Spooks also discussed how Israel was preparing to take down Iran's nuclear program and how to stay relevant when so much information that was classified was now open source and available to anyone.
Well, they got *that* part right.
Re: (Score:2)
Spooks also discussed how Israel was preparing to take down Iran's nuclear program and how to stay relevant when so much information that was classified was now open source and available to anyone.
Well, they got *that* part right.
They did? What part did they get right? The part about "open source" being synonymous with "leaked"? Or the part about classified information no longer being classified once it's leaked?
Re: (Score:2)
Redundant solution, any of their secure computers are fully isolated from the net, along with protocols in place that no removable media are allowed near them and any old hard drives are put through an incinerator.
That's not the problem they have, its mainly to do with having the infrastructure that keeps a country 'working' being attacked, power, water, emergency services, etc.
Re:Complete solution in five words (Score:4, Interesting)
I think the root cause with the DSD is that they don't pay very well. I looked at it as a grad and it wasn't too bad. These days grads are probably pretty good in the crypto department but I doubt they get listened too inside the first twenty years. By that time the good ones have left.
Ask yourself: why didn't they hire Julian Assange? I am sure the cultural reasons will fill several pages for a start.
Re: (Score:2)
Ask yourself: why didn't they hire Julian Assange? I am sure the cultural reasons will fill several pages for a start.
Wait... Julian Assange has actual skills?!
Re:Complete solution in five words (Score:5, Informative)
Ask yourself: why didn't they hire Julian Assange? I am sure the cultural reasons will fill several pages for a start.
Wait... Julian Assange has actual skills?!
Yes [1] [inria.fr] [2] [iq.org]
Re: (Score:2)
Re: (Score:2)
I imagine the fact that he is a felon in Australia with a history of mental breakdowns would top the list.
Hasn't always been the case. The fact is that the brightest people don't go to places like the DSD.
Re:Complete solution in five words (Score:4, Insightful)
Any organization that deals with information security has an obvious (and paradoxical) problem when hiring talent: The most talented (if not experienced) people in information technology as well as security are hackers. Hackers are young, curious, idealistic, independent and anti-authoritarian. The very traits that comprise their talent also make them a potential liability in a rigid command structure.
Re: (Score:2, Insightful)
Ask yourself: why didn't they hire Julian Assange? I am sure the cultural reasons will fill several pages for a start.
He most likely never applied?
Intelligence agencies are arguably disadvantaged with hiring because of the high level of secrecy involved. Some thoughts on why this may be the case:
Re: (Score:2)
Complete solution in one word (Score:2)
Analysts were required to be efficient intelligence processing units whose effectiveness was "determined by the speed and efficiency by which [they] can sift through the volume to highlight 'what is important' and put it into context for decision makers"
Perl [xkcd.com]
Wikileaks releases stuff about Australia (Score:2)
Re: (Score:2)
I don't follow you.
Re: (Score:1)
so we all need to work together to get rid of him, how about we frame him for a crime, lock him up a bit ....
To give the american gov time to come up with something to charge him with
Commit Crime with Impunity (Score:1)
Re:Commit Crime with Impunity (Score:5, Funny)
There is more than enough talent being trained in Australia, what we lack is a communication and "digital economy" minister that actually knows something about IT. They guy got locked out of his own iphone FFS.
http://apcmag.com/how-conroys-daughter-wrecked-his-unsecured-iphone.htm [apcmag.com]
They guy is clueless and just keeps pushing his censorship agenda. Oh and the useless NBN.
http://www.itnews.com.au/News/154249,nbn-useless-without-subsea-investment.aspx [itnews.com.au]
Re: (Score:2)
So? Good for them. (Score:1)
I'm not sure why this is news? They realized a weakness and asked someone they thought had more knowledge for help. Thats what I EXPECT them to do.
When I know I'm out of my league and well beyond my knowledge base I ask someone else who's been doing it longer or more for some input.
Go on ya, Aussies, hope we gave you something useful. Maybe one day you can return the favor for some of the things you're better than us at.
As the song goes, Thats what friends are for.
Re: (Score:1)
except that the "more knowledgable expert", has had their power grid given the how you doing
Their pentagon email routed to another country and have their confidential files published on the internet.
kind of like going to a boxer that mike tyson (in his prime), wiped the floor with and asking him to train you .....
or
asking GM how to run a successful car making company
faith-based security (Score:2)
Consensus seems to be appointing a knowledgeable minster or whatever they have over there would resolve the problem. Instead they got some dummo with a political agenda to push.
cyber here cyber there (Score:1)
Re: (Score:1)