“Im from the government and you’re here to help” – The AA Act is a hackers dream

I’ve just gotten a response from 1Password indicating that it is their current, though not yet solidified, belief that the Australian government cannot compel its overseas developers:<p>“It turns out that we picked up on a popular (mis)understanding of a previous draft of the law. It does not appear that the law could be used to force any Australians work for us to go behind our backs. The law is bad for a large number of reasons, but it does not actually have that particular problem.”<p>They went on to comment on the possibility of a rogue employee, Aussie or not, being a security risk, which I was heartened by, but I would like to ask whether the assumption that any Australian overseas can be compelled is true or not.

“Hi Norm? This is Mr. Eddie Vedder from the Federal Police. Listen, we were tracking a dangerous terrorist cell when our BLT drive just went AWOL. Could you please get me a log of all the account activity of Mr. Fred Bloggs? Australian federal law requires you to comply with this request. Thanks, Norman.&quot;