Go Back   IceInSpace > General Astronomy > General Chat
Register FAQ Calendar Today's Posts Search

Reply
 
Thread Tools Rate Thread
  #261  
Old 10-08-2016, 09:03 AM
lazjen's Avatar
lazjen (Chris)
PI cult member

lazjen is offline
 
Join Date: Dec 2012
Location: Flaxton, Qld
Posts: 2,078
It's also a bit of a misdirection to say that a DDOS (as I expected) is not a form of hack. Some attack vectors use DDOS as a means to discover other weaknesses and/or hide the real attack vector within the traffic load. We may never know if anyone got through unless they publish data.

I expect in this case though that it was a combination of legitimate load, plus disgruntled activists (probably Australians) that did most of the damage.
Reply With Quote
  #262  
Old 10-08-2016, 09:21 AM
AndrewJ
Watch me post!

AndrewJ is offline
 
Join Date: Mar 2006
Location: Melbourne
Posts: 1,905
Lunchtime: It cant happen
Mid Afternoon: Its not down, just keep trying
Evening: Minor overload, no problems, just keep trying
Morning: Yes we were attacked from overseas, but your data is safe
Pls try again

I am with Chris. What got through in the confusion???

Andrew ( still waiting for my paper copy )
Reply With Quote
  #263  
Old 10-08-2016, 09:24 AM
doppler's Avatar
doppler (Rick)
Registered User

doppler is offline
 
Join Date: Nov 2012
Location: Mackay
Posts: 1,690
There would have been a lot logging in through VPN's as well. They were not blocking Au vpn addresses last night but that may change from now.
Reply With Quote
  #264  
Old 10-08-2016, 09:38 AM
dimithri86 (Dimithri)
Registered User

dimithri86 is offline
 
Join Date: Jan 2015
Location: Hornsby
Posts: 141
I didn't bother doing it last night, because I knew this problem was 100% going to happen. I have little faith in the govt to pull off such a project
Reply With Quote
  #265  
Old 10-08-2016, 09:50 AM
Stonius's Avatar
Stonius (Markus)
Registered User

Stonius is offline
 
Join Date: Mar 2015
Location: Melbourne
Posts: 1,508
To make an analogy, a sieve with its holes plugged is never going to hold water as well as a bucket. That being said, they would have entered the data onto computer systems anyway. It's a matter of whether the method of collection opened the door to unauthorized access.

Markus
Reply With Quote
  #266  
Old 10-08-2016, 09:51 AM
glend (Glen)
Registered User

glend is offline
 
Join Date: Jun 2013
Location: Lake Macquarie
Posts: 7,121
As of 9:50am this morning it still appears to be down, same message coming up.
Reply With Quote
  #267  
Old 10-08-2016, 09:53 AM
bojan's Avatar
bojan
amateur

bojan is offline
 
Join Date: Jul 2006
Location: Mt Waverley, VIC
Posts: 7,112
Judging by this fiasco, hopefully we will not have online elections very soon.. or perhaps we will???
Reply With Quote
  #268  
Old 10-08-2016, 10:00 AM
glend (Glen)
Registered User

glend is offline
 
Join Date: Jun 2013
Location: Lake Macquarie
Posts: 7,121
Quote:
Originally Posted by bojan View Post
Judging by this fiasco, hopefully we will not have online elections very soon.. or perhaps we will???
Ha ha, in relation to the federal election, I am all for 'Denial of Choice' attacks. Perhaps a vote for "None of the Above", or 'Drovers Dog' could be part of the pick list.
Reply With Quote
  #269  
Old 10-08-2016, 10:06 AM
AndrewJ
Watch me post!

AndrewJ is offline
 
Join Date: Mar 2006
Location: Melbourne
Posts: 1,905
Gday Markus

Quote:
It's a matter of whether the method of collection opened the door to unauthorized access.
I worry more re their stated future aims to link this data ( as required ) with other datasets. That will require them to open portals for data transfer with lots of different entities, and i have no faith that they will be secure. All this info in one pot is going to be irresistable.

Andrew
Reply With Quote
  #270  
Old 10-08-2016, 10:26 AM
Stonius's Avatar
Stonius (Markus)
Registered User

Stonius is offline
 
Join Date: Mar 2015
Location: Melbourne
Posts: 1,508
Quote:
Originally Posted by AndrewJ View Post
Gday Markus
I worry more re their stated future aims to link this data ( as required ) with other datasets. That will require them to open portals for data transfer with lots of different entities, and i have no faith that they will be secure. All this info in one pot is going to be irresistable.

Andrew
I agree, but I also think in this day and age the pretense at privacy is futile. There is no such thing anymore, when simply to live you are required to give this information to all and sundry who offer promises of privacy which none of them can keep. The new technologies have transformed society into a panopticon.
Reply With Quote
  #271  
Old 10-08-2016, 10:51 AM
AndrewJ
Watch me post!

AndrewJ is offline
 
Join Date: Mar 2006
Location: Melbourne
Posts: 1,905
Gday Markus
Again, i would note that the census database is the only one that has everyone. All the other databases have subsets of the population, and most ( other than farcebook ) have very little info re family relations etc.
Storing name and address in the census is making it too easy.

Andrew

PS Interesting reading some of the security sites early analysis of what happened. Several sites so far ( who monitor international DDOS attempts around the world ) have noted nothing odd for Australia yesterday??
http://www.pcauthority.com.au/News/4...he-census.aspx
Wheres Scully and Mulder when you need em???
Reply With Quote
  #272  
Old 10-08-2016, 10:55 AM
multiweb's Avatar
multiweb (Marc)
ze frogginator

multiweb is offline
 
Join Date: Oct 2007
Location: Sydney
Posts: 22,080
The census site timeout doesn't look like a DDOS. Most people use private VPN these days so it might look like O/S traffic when they hit the site. I reckon they didn't do their homework when it comes to load and got caught out short of resources or bandwidth. Bit complacent. As usual the media will beat it to death. Nothing gets in the way of a good story. Lots of misinformation. This has nothing to do with security. It's an outage. Standard stuff.
Reply With Quote
  #273  
Old 10-08-2016, 11:26 AM
el_draco (Rom)
Politically incorrect.

el_draco is offline
 
Join Date: Apr 2009
Location: Tasmania (South end)
Posts: 2,315
Quote:
Originally Posted by glend View Post
Ha ha, in relation to the federal election, I am all for 'Denial of Choice' attacks.
We already have that...
Reply With Quote
  #274  
Old 10-08-2016, 11:27 AM
el_draco (Rom)
Politically incorrect.

el_draco is offline
 
Join Date: Apr 2009
Location: Tasmania (South end)
Posts: 2,315
Quote:
Originally Posted by AndrewJ View Post
PS Interesting reading some of the security sites early analysis of what happened. Several sites so far ( who monitor international DDOS attempts around the world ) have noted nothing odd for Australia yesterday??
http://www.pcauthority.com.au/News/4...he-census.aspx
Wheres Scully and Mulder when you need em???
...er, not filing out their census online, or anywhere else!
Reply With Quote
  #275  
Old 10-08-2016, 11:31 AM
el_draco (Rom)
Politically incorrect.

el_draco is offline
 
Join Date: Apr 2009
Location: Tasmania (South end)
Posts: 2,315
Remember folks...
It wasn't an attack, it wasn't an attack, it wasn't an attack... (Someone just parked a truck over our driveway... and we don't know where it came from either...)
You can trust the ABS..., You can trust the ABS... You can trust the ABS...
You can trust politicians... You can trust politicians... You can trust politicians...

Watch the watch..., watch the watch..., Watch the watch...

Last edited by el_draco; 10-08-2016 at 11:50 AM.
Reply With Quote
  #276  
Old 10-08-2016, 11:32 AM
Pinwheel's Avatar
Pinwheel (Doug)
Registered User

Pinwheel is offline
 
Join Date: May 2010
Location: Wimmera victoria
Posts: 512
As a polling official (2ic) & with years of experience there is a thing call a ¨silent elector¨ this is a person who´s name is on the electoral roll but no address i.e a judge, politician or even a person in police protection. So I ask this, How is it possible to have this type of person on the Census roll in the first place?
Reply With Quote
  #277  
Old 10-08-2016, 11:37 AM
lazjen's Avatar
lazjen (Chris)
PI cult member

lazjen is offline
 
Join Date: Dec 2012
Location: Flaxton, Qld
Posts: 2,078
They spent $500K on load testing and $10M on the census (so far). Thank you for wasting my money. To be expected by the government, really.

Whoever did the load testing... complete fraud.
Reply With Quote
  #278  
Old 10-08-2016, 11:55 AM
AndrewJ
Watch me post!

AndrewJ is offline
 
Join Date: Mar 2006
Location: Melbourne
Posts: 1,905
Gday Doug

Quote:
So I ask this, How is it possible to have this type of person on the Census roll in the first place?
They probably hoover up all the addresses from the councils rates databases, and cross check that with what they have registered.
The judge still has to pay rates , and the council probably doesnt know or care what the "residents" occupation is, as long as they pay.
I would guess there is then a way for these "special people" to bypass having to answer questions or have their private details registered.
"All animals are equal, but some animals are more equal than others"

Andrew
Reply With Quote
  #279  
Old 10-08-2016, 12:09 PM
rally
Registered User

rally is offline
 
Join Date: Sep 2007
Location: Australia
Posts: 896
I find Michael McCormack's news release comments about the problem simply unbelievable.

He says “There was a large scale denial of service attempt to the census website and online form. A denial of service is an attempt to block people from accessing a website. Following, and because of this, there was a hardware failure,”

And then in the next sentence says “I will be clear from the outset, this was not an attack. Nor was it a hack but rather, it was an attempt to frustrate the collection of bureau of statistics census data."

Does the man actually understand what a Denial of Service Attack is - by definition its an ATTACK !
Maybe we should refer him to the same source most schoolkids use to complete their homework assignments across the world - Wikipedia
https://en.wikipedia.org/wiki/Denial-of-service_attack
. . . so he can do his own homework before telling lies to the public to try and push this under the carpet.

But its much much worse than this - a DOS attack (as has been stated) is often either a cover or a part of a mechanism that is used to penetrate a system's normal securities - and of course he goes on to deny that there was any compromise - like he knows what even happened in simple terms let alone what actually really went on !

He is a fool to say an attack is not an attack !
Its laughable, except that its so serious.

But I must admit I think Marc is probably right too - their systems just could never cope with a majority of the population all trying to use it at the same time.

I tried about 100 times and gave up - I wont be using the system full stop, but I was also was never going to allow them to breach 110 years of legal intent and tradition of anonymous statistical information collection not to collect to names and addresses.
Reply With Quote
  #280  
Old 10-08-2016, 12:54 PM
xelasnave's Avatar
xelasnave
Gravity does not Suck

xelasnave is offline
 
Join Date: Mar 2005
Location: Tabulam
Posts: 17,003
There was nothing on the front page of the newspapers, that seems odd.
Its all about Rio.
Is no one others than the few here concerned.
Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +10. The time is now 03:13 PM.

Powered by vBulletin Version 3.8.7 | Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Advertisement
Astrophotography Prize
Advertisement
Bintel
Advertisement