Feeds

Don’t waste time hiding NBN POI locations

‘Natsec’ too big for its boots?

Providing a secure and efficient Helpdesk

Mobiles, electricity secrets

Mobile infrastructure is another problem. Australia’s regulations are clear on this: every licensed radio transmitter is recorded in a public database administered by the ACMA. You can buy a copy of it, if you want, load it into a database, display it on a map.

If you’re bidding for the Square Kilometer Array, radio information is important: it lets you prove that a joint called Murchison in Western Australia is, in radio terms, nice and quiet (on the basis of radio silence, Australia had it hands-down over South Africa, but I’m not privy to the deliberations so I don’t know what other considerations held sway).

And Murchison was, while remote, within tolerable reach of fibre networks, which could only be known if the networks could be mapped.

Even data centres, some of which are treated as secrets by some people, leave footprints all over the place. I know journalists who have signed non-disclosure agreements before they visit facilities whose every important move – construction and extensive fit-outs – has been documented by local councils in the form of development approvals. So the journalist, self-bound by a signature, finds him- or herself forever forbidden from discussing public information.

Let’s look again at the NBN Co POIs.

The information is bound to leak, because in the end, it will be known to thousands of individuals. If, in a fit of national security paranoia, someone decides that it should not be in a convenient Telstra exchange (location not only known but emblazoned on every building), but in the data centre next door, that will become known.

The industry won’t be able to function without knowing the POI locations. It’s utterly fantastic to imagine that the information won’t leak.

I’ve focused on telecommunications infrastructure, because that's the world I'm most familiar with, but similar questions apply to other “infrastructure of national importance”.

Take the electricity grid. At a superficial level, it might seem that the location of high-voltage grid facilities should be a national secret. Except: people piloting aircraft or helicopters need to know where powerlines are. Otherwise, they’ll fly into them anytime visual navigation isn't possible. Even with maps, powerline accidents are depressingly common.

National security types are apt to chase every rabbit down every burrow – which is great for expanding their budget, personnel and powers, but does precious little to protect us from real threats. ®

Bootnote: ZDNet journalist Josh Taylor dug out the "national security" quote from the joint parliamentary committee hearing on the NBN last night, here. The ACCC professes to have "particularly strong views" on. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.