Usage of haveibeenpwned.com
Dear Australian Signals Directorate,
I know ASD isn't required under the FOI Act to response, however I'd like to ask a simple question: Does does ACSC (or ASD) pay for their usage of haveibeenpwned.com (it might be referred to as HIBP)?
The usage isn't secret as it's published on https://www.troyhunt.com/the-uk-and-aust...
Whilst the linked document from 2018 states the answer is no, I would like to enquire on the current state.
Yours faithfully,
Rex Banner
OFFICIAL
Good evening Rex,
Your request has been forwarded to the appropriate team for consideration.
Kind regards,
Australian Cyber Security Centre
Australian Signals Directorate
☎ 1300 292 371
✉ [ASD request email]
cyber.gov.au @cybergovau
To report a cyber security incident, visit cyber.gov.au or call 1300 292 371 (1300 CYBER1)
IMPORTANT: This email remains the property of the Department of Defence. Unauthorised communication and dealing with the information in the email may be a serious criminal offence. If you have received this email in error, you are requested to contact the sender and delete the email immediately.
OFFICIAL
Good morning Rex,
In respect of your request for documents under the Freedom of Information Act 198 (FOI Act), Australian intelligence agencies, including ASD, are exempt from the FOI Act under section 7 of that Act.
Kind regards,
IMPORTANT: This email remains the property of the Department of Defence. Unauthorised communication and dealing with the information in the email may be a serious criminal offence. If you have received this email in error, you are requested to contact the sender and delete the email immediately.
Australian Cyber Security Centre
Australian Signals Directorate
☎ 1300 292 371
✉ [ASD request email]
cyber.gov.au @cybergovau
To report a cyber security incident, visit cyber.gov.au or call 1300 292 371 (1300 CYBER1)
Dear ASD Assist,
Thank you for your response, I note you stated ASD is exempt from the FOI Act, however,
Is ASD willing to disclose whether or not ACSC (or ASD) pay for their usage of haveibeenpwned.com outside of the FOI Act?
The usage of such service is public knowledge and as of 2018 it was free.
https://www.troyhunt.com/the-uk-and-aust...
Yours sincerely,
Rex Banner