Usage of haveibeenpwned.com
Dear Australian Signals Directorate,
I know ASD isn't required under the FOI Act to response, however I'd like to ask a simple question: Does does ACSC (or ASD) pay for their usage of haveibeenpwned.com (it might be referred to as HIBP)?
The usage isn't secret as it's published on https://www.troyhunt.com/the-uk-and-aust...
Whilst the linked document from 2018 states the answer is no, I would like to enquire on the current state.
Yours faithfully,
Rex Banner
OFFICIAL
Good evening Rex,
Your request has been forwarded to the appropriate team for consideration.
Kind regards,
Australian Cyber Security Centre
Australian Signals Directorate
☎ 1300 292 371
✉ [ASD request email]
cyber.gov.au @cybergovau
To report a cyber security incident, visit cyber.gov.au or call 1300 292 371 (1300 CYBER1)
IMPORTANT: This email remains the property of the Department of Defence. Unauthorised communication and dealing with the information in the email may be a serious criminal offence. If you have received this email in error, you are requested to contact the sender and delete the email immediately.
-----Original Message-----
From: Rex Banner <[FOI #9951 email]>
Sent: Saturday, 18 February 2023 2:46 PM
To: ASD Assist <[ASD request email]>
Subject: Freedom of Information request - Usage of haveibeenpwned.com
EXTERNAL EMAIL: Do not click any links or open any attachments unless you trust the sender and know the content is safe.
Dear Australian Signals Directorate,
I know ASD isn't required under the FOI Act to response, however I'd like to ask a simple question: Does does ACSC (or ASD) pay for their usage of haveibeenpwned.com (it might be referred to as HIBP)?
The usage isn't secret as it's published on https://www.troyhunt.com/the-uk-and-aust...
Whilst the linked document from 2018 states the answer is no, I would like to enquire on the current state.
Yours faithfully,
Rex Banner
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #9951 email]
Is [ASD request email] the wrong address for Freedom of Information requests to Australian Signals Directorate? If so, please contact us using this form:
https://www.righttoknow.org.au/change_re...
This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will be delayed.
If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
OFFICIAL
Good morning Rex,
In respect of your request for documents under the Freedom of Information Act 198 (FOI Act), Australian intelligence agencies, including ASD, are exempt from the FOI Act under section 7 of that Act.
Kind regards,
IMPORTANT: This email remains the property of the Department of Defence. Unauthorised communication and dealing with the information in the email may be a serious criminal offence. If you have received this email in error, you are requested to contact the sender and delete the email immediately.
Australian Cyber Security Centre
Australian Signals Directorate
☎ 1300 292 371
✉ [ASD request email]
cyber.gov.au @cybergovau
To report a cyber security incident, visit cyber.gov.au or call 1300 292 371 (1300 CYBER1)
-----Original Message-----
From: Rex Banner <[FOI #9951 email]>
Sent: Saturday, 18 February 2023 2:46 PM
To: ASD Assist <[ASD request email]>
Subject: Freedom of Information request - Usage of haveibeenpwned.com
EXTERNAL EMAIL: Do not click any links or open any attachments unless you trust the sender and know the content is safe.
Dear Australian Signals Directorate,
I know ASD isn't required under the FOI Act to response, however I'd like to ask a simple question: Does does ACSC (or ASD) pay for their usage of haveibeenpwned.com (it might be referred to as HIBP)?
The usage isn't secret as it's published on https://www.troyhunt.com/the-uk-and-aust...
Whilst the linked document from 2018 states the answer is no, I would like to enquire on the current state.
Yours faithfully,
Rex Banner
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #9951 email]
Is [ASD request email] the wrong address for Freedom of Information requests to Australian Signals Directorate? If so, please contact us using this form:
https://www.righttoknow.org.au/change_re...
This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will be delayed.
If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
Dear ASD Assist,
Thank you for your response, I note you stated ASD is exempt from the FOI Act, however,
Is ASD willing to disclose whether or not ACSC (or ASD) pay for their usage of haveibeenpwned.com outside of the FOI Act?
The usage of such service is public knowledge and as of 2018 it was free.
https://www.troyhunt.com/the-uk-and-aust...
Yours sincerely,
Rex Banner