### Issue 2114 - Friday 21st June, 2024

Emails from The Sizzle have been unreliable this week because one of my shared IPs was added to a spam list and Mailgun hasn't done anything about it for 3 days. I posted a more detailed explanation up on the forums but that's the core problem. My options are wait for Mailgun to remove that IP from their pool, the IP gets removed from the blocklists, or I waste a weekend changing mail provider. Ugh. In the meantime, you can visit the Sizzle Archive to catch up on any issues you may have missed.

## In Today's Issue

- ACMA gives a bit of technical detail on Optus data breach, it's as dumb as you think
- EU drops Chat Control proposal at last minute
- eSafety Commissioner clarifies companies don't have to break E2EE to meet new industry codes
- YouTube scrubbing Premium subs purchased via VPN, Kaspersky to be banned in the US, 1Password adds Recovery Codes
- Friday Forum Update
- Cheap PS5 & PSVR2, Sony camera lens, ThinkPad T16 Gen 2, AirPods Pro, Anker USB charger, Lenovo monitor, Moto G54 phone

## The News

### ACMA gives a bit of technical detail on Optus data breach, it's as dumb as you think

ACMA has confirmed in a filing with the Federal Court that it was Optus' incompetence that lead to one of the biggest data breaches in Australian history. It wasn't sophisticated hackers, foreign actors or a criminal gang's fault, it was a "coding error" that lead to the access controls for api.www.optus.com.au "vulnerable for attack" for two years and "was not decommissioned despite the lack of any need for it". This API end point happened to return customers personal identifying information. ACMA even says "the cyberattack was not highly sophisticated or one that required advanced skills or proprietary or internal knowledge of Optus' processes of systems".

⬆ Share or Discuss

### EU drops Chat Control proposal at last minute

Some good news - the EU's proposed Regulation to Prevent and Combat Child Sexual Abuse (aka Chat Control) has been withdrawn. According to a spokesperson, the proposal couldn't get a majority to approve it to be on the agenda so in the bin it goes. Don't get complacent however, as something similar is likely pop up next year when Hungary takes over Presidency of the EU Council as they've said in the past they're keen for this kinda thing. If you've forgotten, Chat Control would have made it mandatory for platforms to scan all communications for CSAM and report it to the police, including end-to-end encrypted messages. I don't think I need to explain why breaking end-to-end encryption is a bad idea.

⬆ Share or Discuss

### eSafety Commissioner clarifies companies don't have to break E2EE to meet new industry codes

The eSafety Commissioner had a rare moment of common sense, clarifying in the final two industry codes (Designated Internet Services & Relevant Electronic Services) to specifically state that "companies will not be required to break encryption and will not be required to undertake measures not technically feasible or reasonably practical". A change from previous wording where it was vague if "feasible" meant financially or technically, because for a company like Apple or Google, there really is no financial limit as to what they can spend as they have more money than God. You can read more about the changes to these two industry standards on eSafety's website.

⬆ Share or Discuss

## Something I Saw On The Internet

### YouTube scrubbing Premium subs purchased via VPN, Kaspersky to be banned in the US, 1Password adds Recovery Codes

- YouTube is starting to crack down on accounts that purchased Premium subscriptions using a VPN. They're detecting if the billing account is in a different country than the majority of its use and cancelling the subscription. I'm still paying full price for YouTube Premium. One of the best bang for buck subscriptions I have, along with Spotify.
- According to a report from Reuters, "US businesses and consumers will be blocked from buying new software from Kaspersky starting on or around July 24, 2024". If you sell Kaspersky software in the US after the ban kicks in, you will be fined. Makes sense considering Kasperksy is based in Moscow and Russia isn't exactly mates with the US hegemony right now.
- 1Password has a new way to get access to your account if you lose your Secret Key and/or the Master Password. You can set up an optional Recovery Code, store it somewhere safe, then use that Recovery Code to gain access again. Seems like it would be useful if someone's changed your Master Password somehow and you want to get back in to your account.

⬆ Share or Discuss

## Friday Forum Update

Here's five interesting discussions over on The Sizzle's paid subscriber forum for you to enjoy over the weekend. If you are not a paid subscriber but want to get involved, visit https://thesizzle.com.au/payme to get onboard.

- Tung is after some cheaper alternatives to Google Drive for storing almost 3TB of data
- Igneato has some not-so-old Ubiquiti networking gear that they want to use for something interesting
- tintinaujapon is struggling to get 250mbps out of their existing router after upgrading their NBN plan
- andrewh's mid-life crisis activity seems to be building guitar pedals as a hobby
- Various punters are professing their love for Plex after I mentioned Kyoo earlier this week

## Bargains

- PlayStation VR2 - $679.95 from Amazon
- PlayStation 5 Slim Disc Version - $628.83 from Dick Smith's eBay store
- Sony FE 200-600mm F5.3-6.3 OSS Lens - $2,107.95 after cashback from digiDirect
- Lenovo ThinkPad T16 Gen 2 21K7001KAU (16" 1920x1200, Ryzen 7540U, 16GB RAM, 512GB SSD) - $1299 from Emporium Electronics
- Apple AirPods Pro 2nd Gen with Magsafe Case USB‑C - $299 from Amazon (can get OW to price beat too)
- Anker 735 GaNPrime 65W PD Charger - $59.95 from Anker Australia
- Lenovo Legion R45w-30 44.5" Curved 5120x1440 170Hz monitor - $779.22 from Lenovo's eBay store
- Motorola Moto G54 5G - $173.85 from Sydney Mobiles eBay store

## Image Of The Day

A colour poster featuring a photograph of a woman in a red jumper standing in front of a mainframe computer equipment. Photograph is cropped in a keyhole shape and set on a black background to suggest the viewer is looking through a keyhole. [Australia] : Department of Defence, [1980-1990?] (National Library of Australia)

## The End

📻 Gimme! Gimme! Gimme! (A Man After Midnight) - ABBA

😎 The Sizzle is curated by Anthony "decryption" Agius and emailed every weekday afternoon.

💬 Checked out the paid subscriber only forum? It's a tidy little place to discuss tech with like minded Aussies.

👋 Forums not your thing? The Sizzle has a Slack group you can procrastinate in and chat with other nerds bored at work.

💳 Paid subscriber looking to manage your billing info, change email address or cancel your subscription? Visit the customer portal.

🎁 Make someone's day and buy them a 12 month gift subscription to The Sizzle.

📚 Browse The Sizzle Archive. A few issues are missing and it's not searchable, but it's better than nothing.

🫂 Friends of The Sizzle is a small group of businesses or organisations operated by Sizzle subscribers. Support your fellow Sizzler!

💔 Tired of my bullshit? Unsubscribe and I'll never speak to you again.

## Always Was, Always Will Be Aboriginal Land

The Sizzle is created on Wathaurong land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. I pay my respect to them and their cultures and to elders both past and present.