What new and old media are saying about Malcolm Turnbull's train wreck of an NBN

Gizmodo, 27 November 2017

ITWire, 28 November 2017:

For months now, we've been told that fast broadband would be arriving sooner because of the change in technology that the Coalition Government decided upon, with HFC cable and fibre-to-the-node being the saviours of the project. Now that dream is unravelling.

The brakes have been well and truly slammed on by the NBN Co, with delays of six to nine months in getting any HFC connections up.

The Telstra HFC cable network is being shared by the NBN Co, Telstra and Foxtel; the NBN signal travels at a low frequency, the other two at higher frequencies. Apparently, at lower frequencies the signal does not travel all that well.

The equivalent of bandages will have to be applied. But the long-term solution will be to replace cable with fibre.

What was to have been a marathon — fibre-to-the-premises for 93%, satellite and fixed wireless for the rest — was attempted to be turned into a sprint by the agile and innovative Malcolm Turnbull.

Alas, the dream of the silver-haired visionary now seems to be dead.

His estimate of $29 billion, made in 2013, has doubled to $56 billion. His deadline of 2016 has blown out by four years. Even then, you do not know whether it will all be done.

And judging by the slow speeds on offer, the moment NBN Mark I is over, Mark II will have to start if Australia does not want to slip further into the dark ages. We are already behind countries that people here have not heard of.

All the documents that Turnbull put up on his website, claiming that the original plan would cost nearly $100 billion, have now disappeared.

Indeed, the man seems reluctant to even talk about the NBN. But that is par for the course for a politician who seems content if he can last the next 24 hours in his job. His motto seems to be taken from Holy Writ: "Sufficient unto the day is the evil thereof."

Ignoring the advice of technically competent people, Turnbull sought to sell Australians on a plan that promised build speed and less expense.

With three years still remaining for the scheduled completion, it looks like the contents of a box of free-range eggs is all over that handsome visage.

But hey, why should he bother? After all, to use the magic-pudding language of NBN Co chief executive Bill Morrow, the HFC delay is merely "NBN Co taking (its) customer experience improvement programme to new levels".

Macro Business, 28 November 2017:

Customer anger over poor service has forced the Turnbull government to halt its broadband rollout to more than 250,000 households, fuelling growing concerns over the use of pay-TV cables to deliver high-speed internet.

The temporary delay means the NBN is certain to miss its revenue goals for this year and will struggle to meet its customer connection target by the time of the next election, turning the broadband rollout into a growing political dispute.

At issue is the use of hybrid fibre coaxial cable, or HFC, to offer broadband over the lines built in the 1990s to deliver the Optus Vision and Foxtel pay-TV networks. Malcolm Turnbull was a leading advocate for the use of existing HFC connections, upgraded over time, to deliver the NBN to millions of households more quickly than laying new ­optical fibre to every home.

NBN Co chief executive Bill Morrow yesterday put an immediate stop to new services being sold over the HFC footprint, conceding that the suspension was necessary to ensure homes could receive a reliable, quality service over the cable. The decision will see 250,000 homes that were set to receive their NBN connection via HFC put on hold for the next six to nine months.

ZD Net, 28 November 2017:

The pause in rolling out hybrid fibre-coaxial (HFC) by the National Broadband Network (NBN) is due to technical issues caused by HFC not being as mature a technology as fibre, satellite, and fixed-wireless, according to Communications Minister Mitch Fifield.

"What we have in the case of HFC is some technical issues. HFC as a technology isn't as mature as fibre to the node, or satellite, or fixed-wireless," Fifield said during Radio National Breakfast on Tuesday morning.

"With those other technologies in the initial rollout, there were issues to be worked through. That's the case with HFC, there's no problem that's been identified that can't be fixed, they will be fixed, and HFC is a terrific technology. It can get gigabit speeds, people will certainly be able to get 100 megabits per second.

"In the United States, most people who are on broadband are on the HFC pay TV cable network."

Despite referencing the prevalence of cable broadband in the US, however, Fifield's statements that HFC is not as mature a technology as fibre flies in the face of the fact that US providers have been offering cable broadband access since the late '90s.

Telstra additionally rolled out its HFC network in Australia around the same time.

Shadow Communications Minister Michelle Rowland has meanwhile argued that the delay could cost between AU$420 million and AU$790 million "based on analysis previously approved by the NBN board".

While NBN CEO Bill Morrow on Monday said it is too early to calculate such costs, Fifield remained adamant that the network issues can be repaired without the network having to be abandoned.

Via @SabraLane, 28 November 2017

The Australian, 27 November 2017:

TELSTRA is assessing the damage to its revenue forecasts after the company rolling out the national broadband network abruptly altered its plans.

The trouble-plagued NBN Co announced it was halting parts of the rollout that used the telco’s pay-TV cables.

Telstra is now working out how much of the $2.5 billion it was tipped to receive from NBN Co this year will be delayed.

NBN Co wants to connect about three million Australian houses to its network over the cables Telstra uses for Foxtel and broadband.

But it halted use of those cables yesterday amid a growing number of complaints about dropouts and other problems from customers who had switched to the NBN.

Gizmodo, 27 November 017:

As pointed out by Shadow Minister for Communications Michelle Rowland and Shadow Minister for Finance Jim Chambers, a seven month delay in HFC activations profile would have a $1 billion impact on rollout funding.

"On 24 May 2017, the Senate had NBN confirm the $1 billion figure was based on a seven month delay, for three million services, with an average revenue of $47 per month," the pair said in a join statement released today.

"It has now been revealed that problems with Turnbull's second-rate NBN could further delay the HFC rollout by 6 to 9 months for up to 2.5 million premises."

“Real name of of the National Broadband Network is No Bloody Network”

Anon

Australians to own their own banking, energy, phone and internet data? How wonderful! Except.....

Read the news coming out of Canberra…..

Assistant Minister for Cities and Digital Transformation and Liberal MP for Hume Angus Taylor, media release, 26 November 2017:

Australians to own their own banking, energy, phone and internet data

The Turnbull Government will legislate a national Consumer Data Right, allowing customers open access to their banking, energy, phone and internet transactions.

Australians will be able to compare offers, get access to cheaper products and plans to help them ‘make the switch’ and get greater value for money.

Assistant Minister for Cities and Digital Transformation Angus Taylor said it was the biggest reform to consumer law in a generation.

“Government is pursuing the very simple idea that the customer should own their own data. It is a powerful idea and a very important one,” Assistant Minister Taylor said.

“Australians have been missing out because it’s too hard to switch to something better. You may be able to access your recent banking transactions, or compare this quarter’s energy bill to the last, but it sure isn’t quick or easy to work out if you can get a better deal elsewhere.”

The Consumer Data Right was one of 41 recommendations from the Productivity Commission’s Data Availability and Use Inquiry, tabled in parliament in May this year.

The Government’s formal response to the inquiry will be published in coming weeks.

“It won’t be far down the track when you can simply tap your smartphone to switch from one bank to another, to a cheaper internet plan, or between energy companies.

Government is lifting the lid on competition in consumer services and technology is the enabler,” Assistant Minister Taylor said.

Following on from the Prime Minister’s recent agreement with electricity retailers, and the Treasurer’s open banking initiative, the Consumer Data Right will be established sector-by-sector, beginning in the banking, energy and telecommunications sectors.

Utilities will be required to provide standard, comparable, easy-to-read digital information, that third parties can readily access. New Commonwealth legislation to give effect to these reforms will be brought forward in 2018. [my yellow highlighting]

Take a minute to feel good about this.

Then realise that not all the publicly or privately held digital data retained about you will actually be ‘owned’ by you.

If anything it appears that individuals will have a limited joint right to certain data and what access to data they have will probably attract a fee to view and/or download.

It is also likely that data held about you by the banking, energy, phone and internet sectors will be transferred to third parties even when you prefer this didn't happen. It may become a condition of changing service providers as it will likely give the new provider a wealth of information about you and your credit rating.

It is also highly likely that the new legislation will allow third parties to access, disclose and trade in data sets and/or consumer data - without consumers necessarily being made aware this is occurring.

Eventually the Turnbull Government's consumer data rights along with those third party rights will apply to all sectors, including the insurance industry.

If you are interested in some background reading start with the Australian Productivity Commission’s March 2017 report here.

Can anyone believe anything Australian Human Services Minister Alan Tudge and his motley crew say?

The New Daily,  21 November 2017:

The Department of Human Services flagged the illegal sale of Medicare details on the dark web almost a fortnight before the illicit trade was exposed in a bombshell media report, The New Daily can exclusively reveal.

Internal emails, obtained under freedom of information laws, reveal that department officials discussed the security issue as early as June 22 – nearly two weeks before revelations that Medicare numbers were being sold online.

On July 4, The Guardian revealed that a dark web vendor was advertising the sale of any Australian’s Medicare number for the bitcoin equivalent of just $22 after exploiting a government system vulnerability.

In the wake of the revelations, Human Services Minister Alan Tudge said that he and his department had only learned of the illicit trade when contacted by a Guardian journalist on July 3.

However, high-priority correspondence within DHS shows that senior officials discussed the trade on the dark net, which is only accessible through a customised browser, nearly two weeks before it made the news.

On June 22, Rhonda Morris, national manager for serious non-compliance, raised the issue with Kate Buggy, national manager for internal fraud control and investigations, and Mark Withnell, general manager of business integrity, as well as several unnamed officials.

In a later email on July 3, Mr Withnell apparently connected The Guardian’s inquiries to the department’s earlier discussions on the issue, writing to colleagues: “This is the one I was mentioning last week.”

It is unclear exactly what DHS knew about the sale of Medicare details on the dark web prior to July’s media report.

Citing exemptions related to law enforcement and criminal investigations, the department redacted most of the content of the emails released to The New Daily.

It refused to release numerous other related emails entirely.

A DHS spokesman denied the department had knowledge of a specific breach in June and said its internal discussions had only related to general matters……

In September, DHS told the Senate that as many as 165 people may have had their Medicare numbers sold to unknown parties, although there had been no unauthorised access of any Australian’s health records.

Last month, a seperate review commissioned by the department recommended beefing up the authentication procedures required to access the online database used by healthcare professionals.

Although the AFP is continuing to investigate the source of the breach, the government has said it was likely the result of “traditional criminal activity” rather than a cyber attack.

In February, DHS was embroiled in controversy after it released the personal information of a Centrelink recipient to a journalist in order to diffuse claims she made in the media.

Oh dear, is the Turnbull Government asking chickens to visit the digital fox's den?

“The Turnbull Government has welcomed the eSafety Commissioner’s announcement today about the delivery of the pilot for a new national portal for reporting instances of non-consensual sharing of intimate images (colloquially known as image-based abuse or revenge pornography).”  [Senator Mitch Fifield, media release,15 October 2017]

Given the dubious reputation Facebook Inc has managed to garner in relation to business ethics, transparency, consumer privacy, e-safety, data mining and data breach history, one wonders what the Minister for Communications and Liberal Senator for Victoria Mitch Fifield was thinking.

Facebook Newsroom, 9 November 2017:

Image Pilot

By Antigone Davis, Global Head of Safety

We don’t want Facebook to be a place where people fear their intimate images will be shared without their consent. We’re constantly working to prevent this kind of abuse and keep this content out of our community. We recently announced a test that’s a little different from things we’ve tried in the past. Even though this is a small pilot, we want to be clear about how it works.

This past week, in partnership with the Australian eSafety Commissioner’s Office and an international working group of survivors, victim advocates and other experts, Facebook launched a limited pilot in Australia that will help prevent non-consensual intimate images from being posted and shared anywhere on Facebook, Messenger and Instagram. Specifically, Australians who fear their intimate image may be shared without their consent can work with the eSafety Commissioner to provide that image in a safe and secure way to Facebook so that we can help prevent it from being shared on our platforms.

To be clear, people can already report if their intimate images have been shared on our platform without their consent, and we will remove and hash them to help prevent further sharing on our platform. With this new small pilot, we want to test an emergency option for people to provide a photo proactively to Facebook, so it never gets shared in the first place. This program is completely voluntary. It’s a protective measure that can help prevent a much worse scenario where an image is shared more widely. We look forward to getting feedback and learning.

Here’s how it works:

* Australians can complete an online form on the eSafety Commissioner’s official website.

* To establish which image is of concern, people will be asked to send the image to themselves on Messenger.

* The eSafety Commissioner’s office notifies us of the submission (via their form). However, they do not have access to the actual image.

* Once we receive this notification, a specially trained representative from our Community Operations team reviews and hashes the image, which creates a human-unreadable, numerical fingerprint of it.

* We store the photo hash—not the photo—to prevent someone from uploading the photo in the future. If someone tries to upload the image to our platform, like all photos on Facebook, it is run through a database of these hashes and if it matches we do not allow it to be posted or shared.

* Once we hash the photo, we notify the person who submitted the report via the secure email they provided to the eSafety Commissioner’s office and ask them to delete the photo from the Messenger thread on their device. Once they delete the image from the thread, we will delete the image from our servers……..

Political Cartoon of the Week

@roweafr

Question Time in the Australian House of Representatives reveals the arbitrary nature and downright absurdity of the National Broadband Network rollout

In Australia where the dead have better Internet access than the living……

Hansard, 16 October 2017:

Ms McBRIDE (Dobell) (14:53): My question is to the Prime Minister. We are now in the fifth year of this Prime Minister's mismanagement of the NBN. Is the Prime Minister aware that students at the Central Coast Rudolf Steiner School in Fountaindale can't connect to the NBN, even though Fountaindale has supposedly had the NBN since September last year? What sort of incompetence means that the cemetery behind the school has an NBN connection but the school doesn't? [my yellow highlighting]

Mr TURNBULL (Wentworth—Prime Minister) (14:54): I thank the honourable member for her question. I'm certainly happy, if she's able to raise the specific customer's details with me, to make sure it goes to the minister and to NBN Co. What I can say, if honourable members care to pay attention to the NBN's weekly rollout report, which I do—an example of transparency on the part of my government which had no counterpart under the Labor Party, I might say—is that every week the numbers go up, and there are currently over six million premises that are able to connect, and just under three million have services that are connected. So the rollout is going at great pace, and I'm sure the matter that the honourable member has raised will be able to be dealt with.

File this one under 'Who's guarding the guards?'

The politicians forming Australian state and federal governments assure us they are upright, ethical people with histories as pure as the driven snow. They tell us their advisors are trustworthy beyond doubt and their senior public service appointees & finance/security consultants ditto. While their big business mates like Gina, Twiggy and Co are genuinely true blue and philanthropic.

Yet, as step by step these same politicians lead us towards authoritarian governance and Big Brother mass surveillance, their feet of clay can’t help but show.

North Coast Voices readers may remember that SMEC Holdings Limited (now SMEC and Surbana Jurong) has been a favourite of Malcolm Turnbull's since he was the Minister for the Environment and Water Resouces in the Howard Government ministry.

This company provided an error-ridden desktop study for Turnbull supporting damming and diverting water from NSW North Coast river systems, with a preference for visiting this environmental vandalism on the Clarence River system.

It is now allegedly a corrupt multinational corpration.

The Age, 4 October 2017:

An arm of the company tasked with advising the Turnbull government on its signature infrastructure project, Snowy Hydro 2.0, has been banned by the World Bank for alleged bribery and corruption, prompting further calls for a federal anti-corruption watchdog……

Prime Minister Malcolm Turnbull poses for a photo during his announcement of Snowy Hydro 2.0 in March.

Photo: Alex Ellinghausen

Engineering company SMEC had five of its subsidiaries banned by the World Bank last week after an investigation into "inappropriate payments" linked to projects in Sri Lanka and Bangladesh. 

SMEC was chosen to undertake the $29 million feasibility study back in May and the work is due to be finished by the end of the year. The firm was selected by the state and federal government-owned Snowy Hydro corporation, which runs the current power plant.

Last year, Fairfax Media revealed the details of some of the allegations around improper payments involving SMEC, including allegedly corrupt dealings between the firm and Sri Lankan president Maithripala Sirisena when he was a cabinet minister in 2009.

Those dealings and others are still under investigation by the federal police.

This is one wealthy individual audited by the Australian Taxation Office - venture capitalist and independent consultant to business & government for over twelve years, Anthony ‘Tony’ Castagna.

The Sydney Morning Herald, 7 October 2017:

Anthony Castagna's company helps protect the cyber secrets and detect financial crimes within the world's most powerful institutions, including the Serious Fraud Office in Britain, US Homeland Security, the Australian defence force, ASIC, even the Office of the President of the US.

Now the Sydney-based co-founder and chairman of Nuix, majority owned by Macquarie Bank, faces a potential 20-year jail term after being charged with tax evasion and dealing with the proceeds of crime.

Dr Castagna, 70, has been the target of two of Nuix's major clients: the Australian Federal police and the Australian Tax Office through Project Wickenby, their long-running tax probe.

The charges relate to payments from Macquarie Bank which were allegedly channelled into offshore companies controlled by his cousin Robert Agius, who was sentenced to a non-parole period of 6 years and 8 months' jail in 2012 for operating unrelated tax avoidance schemes via his Vanuatu-based accountancy firm.

In addition to Dr Castagna's criminal charges, the ATO is pursuing him for unpaid taxes and penalties in excess of $10 million.

For decades, the tech guru has been a rainmaker for Macquarie Bank. The bank has ploughed millions of dollars into his cyber security and forensic services company Nuix. A totally owned Macquarie Group subsidiary owns more than 70 per cent of Nuix and over the last year Macquarie advisors have been talking up a billion-dollar float of Nuix on the Australian stock exchange....

Dr Castagna, who denies any wrongdoing and is vigorously defending the charges....

Digital Transformation Agency: of all the stupid ideas.....

Of all the stupid ideas this has to be one of the worst…….

The Courier Mail, 5 August 2017:

ONE super ID logon that will allow Australians to interact with Medicare, pay their car registration, help switch banks and buy groceries and clothes online is being developed by the Turnbull Government.

In a bid to stop identity fraud and increase competition, Digital Transformation Assistant Minister Angus Taylor revealed the blueprint centred on one user name and one password for government and private use.

Within five years, Australians may be able to order a pair of jeans online or update their address for Centrelink, their bank or energy providers by using the streamlining technology provided by the government.

The opt-in plan will give people the ability to have one logon and password, which will not be stored centrally to ensure security.

It will likely have a twostep verification process, including a text of a code being sent to a mobile phone.

He said the first step was a logon for all government agencies, which could happen reasonably quickly, and then expanding it to the private sector.

Mr Taylor said conversations were being held with states and territories and some significant private companies.

“It’s opt-in, that’s the crucial principle. Mistakes of the past were forcing people down a particular track,” he said, stressing that there would be no “number” given to Australians and it was not a version of dumped policy of an Australia Card.

He said the measure would also make it easier to change banks or open bank accounts because the Government logon would eventually be considered one of the best identification systems.

“If you update your address, you’ll only have to do it once (and it will go to all government agencies and online retailers).”

He called it the “tell us once” principle.

Yes indeed; one phishing email, re-direct hack, one malicious website or insecure mobile phone and in the space of five minutes your identity is not your own, money leaves your bank accounts or money is borrowed against your assets and your credit card notches up thousands of dollars in goods that someone else receives.

What a brill idea, Angus! Did Malcolm suggest it?

Facebook Inc still pursuing dream of spying on users through their webcams and via their touch screens or mobile phones

The Daily Dot, 8 June 2017:

Your worst internet nightmare could be on its way to becoming a reality.

A newly discovered patent application shows Facebook has come up with plans to potentially spy on its users through their phone or laptop cameras—even when they’re not turned on. This could allow it to send tailored advertisements to its nearly two billion members. The application, filed in 2014, says Facebook has thought of using “imaging components,” like a camera, to read the emotions of its users and send them catered content, like videos, photos, and ads.

“Computing devices such as laptops, mobile phones, and tablets increasingly include at least one, and often more than one, imaging component, such as a digital camera. Some devices may include a front-facing camera that is positioned on the same side of the device as a display. Thus, during normal operation, a user may be looking towards the imaging component. However, current content delivery systems typically do not utilize passive imaging information. Thus, a need exists for a content delivery solution that takes advantage of available passive imaging data to provide content to a user with improved relevancy.”

This is the US patent application to which the article is referring.

TECHNIQUES FOR EMOTION DETECTION AND CONTENT DELIVERY

United States Patent Application 20150242679

Kind Code:

A1

Techniques for emotion detection and content delivery are described. In one embodiment, for example, an emotion detection component may identify at least one type of emotion associated with at least one detected emotion characteristic. A storage component may store the identified emotion type. An application programming interface (API) component may receive a request from one or more applications for emotion type and, in response to the request, return the identified emotion type. The one or more applications may identify content for display based upon the identified emotion type. The identification of content for display by the one or more applications based upon the identified emotion type may include searching among a plurality of content items, each content item being associated with one or more emotion type. Other embodiments are described and claimed.

Publication number	US20150242679 A1
Publication type	Application
Application number	US 14/189,467
Publication date	Aug 27, 2015
Filing date	Feb 25, 2014
Priority date	Feb 25, 2014
Also published as	US9681166
Inventors	Barak Reuven Naveh
Original Assignee	Facebook, Inc.
Export Citation	BiBTeX, EndNote, RefMan
Patent Citations (9), Referenced by (2), Classifications (6),Legal Events (1)
External Links: USPTO, USPTO Assignment, Espacenet

Facebook Inc appears to have been granted this related patent, Techniques for emotion detection and content delivery (US 9681166 B2- Publication date 13 June 2017):

ABSTRACT

Techniques for emotion detection and content delivery are described. In one embodiment, for example, an emotion detection component may identify at least one type of emotion associated with at least one detected emotion characteristic. A storage component may store the identified emotion type. An application programming interface (API) component may receive a request from one or more applications for emotion type and, in response to the request, return the identified emotion type. The one or more applications may identify content for display based upon the identified emotion type. The identification of content for display by the one or more applications based upon the identified emotion type may include searching among a plurality of content items, each content item being associated with one or more emotion type. Other embodiments are described and claimed.

BACKGROUND

Users of computing devices spend increasing amounts of time browsing streams of posts on social networks, news articles, video, audio, or other digital content. The amount of information available to users is also increasing. Thus, a need exists for delivering content a user that may be of current interest to them. For example, a user's interests may be determined based upon their current emotional state. Computing devices such as laptops, mobile phones, and tablets increasingly include at least one, and often more than one, imaging component, such as a digital camera. Some devices may include a front-facing camera that is positioned on the same side of the device as a display. Thus, during normal operation, a user may be looking towards the imaging component. However, current content delivery systems typically do not utilize passive imaging information. Thus, a need exists for a content delivery solution that takes advantage of available passive imaging data to provide content to a user with improved relevancy.

Facebook also appears to have been granted a US patent in May this year for Augmenting Text Messages With Emotion Information (US 20170147202 A1).

According to CBINSIGHTS this patent would; automatically add emotional information to text messages, predicting the user’s emotion based on methods of keyboard input. The visual format of the text message would adapt in real time based on the user’s predicted emotion. As the patent notes (and as many people have likely experienced), it can be hard to convey mood and intended meaning in a text-only message; this system would aim to reduce misunderstandings.

The system could pick up data from the keyboard, mouse, touch pad, touch screen, or other input devices, and the patent mentions predicting emotion based on relative typing speed, how hard the keys are pressed, movement (using the phone’s accelerometer), location, and other factors.

Rumble in the Digital Jungle

https://ghostbin.com/paste/h4y28

Hiding behind this statement is the determined efforts to stop discussion of the alleged issue of a specific Remote Control Execution said to be vulnerable tMan-In-The-Middle (MITM) attacks, by one Simon Joseph Smith of www.evestigator.com.au &  www.cybersecurity.com.au 
who styles himself as "Australian's most elite Computer Digital Forensics Private Investigator...renowned in Australias as "Today Tonight's" Cyber-bullying Expert" .

Mr. Smith appears incensed:

https://ghostbin.com/paste/2nhwz

The resulting number of takedowns continues to grow.

As usual, getting this hissy online only results in more people having a look at the app in question's specifications and going on to make a snap judgment about the character of the hisser.

Would you trust these men with your personal health information?

The darknet vendor says they are “exploiting a vulnerability which has a much more solid foundation which means not only will it be a lot faster and easier for myself, but it will be here to stay. I hope, lol.” [The Guardian, 4 July 2017]

Left to Right: Minister for Human Services and Liberal MP for Aston, Alan Tudge

& Minister for Health and Liberal MP for Flinders, Greg Hunt

These two federal politicians have portfolio responsibility for some of the largest government databases in Australia.

One has portfolio responsibility for those sensitive e-health records which are due to be rolled out nationally on an opt-out basis by 2020.

This is how secure your personal information is on their watch…….

The Sydney Morning Herald, 4 July 2017:

The Australian Federal Police is investigating reports Australians' personal Medicare details are being accessed and sold on the dark web, an apparent breach that has been labelled an "internet catastrophe".

According to a Guardian Australia report, an online vendor can pull up the full Medicare card details of any Australian on request — and is selling them for around $30 each — indicating a security hole somewhere in the health system.

Human Services Minister Alan Tudge said the government was taking the matter seriously. 

The sales are reportedly listed on an undisclosed dark web marketplace, in which the vendor claims to be "exploiting a vulnerability" in order to run software that pulls the data. The vendor calls it "the Medicare Machine".

"Leave the first and last name, and DOB of any Australian citizen, and you will receive their Medicare patient details in full", the listing says, adding that the nature of the security hole being utilised means the vendor will be "here to stay".

In a statement, Mr Tudge said any authorised access to Medicare card numbers was "of great concern" and his department was also conducting its own investigation. 

Medicare's database was always a honeypot waiting to be exploited once governments embraced data matching, data retention and data sharing with much enthusiasm but little understanding.

Once someone decides they want your Medicare details ID theft is now just 0.0089 bitcoin away - as is your abusive former spouse/partner or that anonymous stalker or Internet troll that has been making your life a misery.

UPDATE

Anthony Baxter, 4 July 2017:

You supply the person with name, date of birth and gender and around $30 of Bitcoin they'll give you the person's Medicare number. This is pretty bad, as it allows idemtity thieves to forge them - a Medicare card is usually worth 25 points on the standard 100 point ID check here. The AU govt had no idea this was happening until the journo from The Guardian let them know.

It turns out there's a portal that any health care provider can use to look up Medicare numbers this way. In case you've lost your card or whatever. Likely it's someone who works for one of them selling access, or someone's popped a PC there (more on that to come).

When asked, the relevant government minister (the same guy who presided over the Census fuckup last year (update: I misremembered, that was a different clown), the accidental publishing of PBS data that was poorly deidentified and the ongoing Centrelink robodebt nightmare) claimed it's OK because you can't get access to someone's medical records through the shiny new online electronic health records system with just a Medicare number. Aside from ignoring the ID theft issue there's a liiiiiittle bit of an issue here.

Guess what information you need along with the Medicare number to pull someone's medical records? Did you guess "name, date of birth and gender"? Collect your prize.

According to https://www.itnews.com.au/news/govt-blames-medicare-card-breach-on-traditional-crims-467502 the folks who did the Privacy Impact Assessment on the electronic health records system were told it would be secure because you needed Medicare number as well as name/DOB/gender and weren't told you could use the latter to look up the former.

It Gets Worse.

In theory you can only look up this stuff from a secure endpoint, with a client side certificate installed. Which in practice means maybe 20K PCs scattered across every doctors office in the country. Worse still, many of these client certs were originally sent out via unencrypted email, and a nontrivial number were "lost". And you reckon all or even a significant fraction of these 20K boxes are running modern Windows with up to date patches? Me neither. I can't count the number of times I've been left alone in a room with an unlocked doctor's PC while he went to check something.

It (Incredibly) Gets Even Worse.

They have a Two Factor Auth system which doctors are supposed to use. One of the ways to get the 2FA key is, and I wish I was joking here, email.

So get access to a box running some XP/Win7 version that's ludicrously unpatched that's also logged into the doctors email, collect health care records. Australian government cannot computer.

At the moment the electronic health records thing is opt-in, at some point next year they'll be moving to an opt-out scheme with a window to opt-out. There's an email form here https://myhealthrecord.gov.au/internet/mhr/publishing.nsf/content/home where you can sign up to be notified when the window to opt the hell out is opened and I urge everyone to do so ASAP.

UPDATE

The Sydney Morning Herald, 5 July 2017:

The federal government was warned more than three years ago of security deficiencies surrounding personal Medicare data, with the Department of Human Services told it was not fully complying with spy agency rules.

Questioning the department's ability to keep the data safe from "security threats from external and internal sources", the government auditor made a series of recommendations in April 2014 but it is unclear if they were fully implemented.