The claim refers to the prosecution of Adam John Bennett (also known as "LoraxLive"), an Anonymous member and online radio host who was raided by Australian Federal Police (AFP) in May 2014 and subsequently faced prosecution [1].
**Key verified facts:**
1. **The 2012 AAPT data breach:** In July 2012, Anonymous hackers accessed a server containing AAPT (Australian telecommunications provider) customer data, obtaining approximately 40GB of information [2][3].
The breach exploited vulnerabilities in a Cold Fusion application on servers managed by Melbourne IT on behalf of AAPT [4].
2. **The Privacy Commissioner's findings:** The Office of the Australian Information Commissioner (OAIC) conducted an investigation and confirmed that AAPT had indeed breached the Privacy Act by failing to take reasonable steps to protect customer information.
The Commissioner found AAPT used a seven-year-old version of Cold Fusion with known vulnerabilities when newer versions were available [4].
3. **Prosecution of Adam Bennett:** Bennett was raided by AFP in May 2014 and faced charges related to the AAPT breach.
The prosecution experienced significant difficulties, with charges being dropped and new ones added multiple times over a 10-month period [1].
4. **The data retention policy context:** The Telecommunications (Interception and Access) Amendment (Data Retention) Act 2015 was enacted on March 26, 2015, requiring ISPs to retain telecommunications data for at least two years [5][6].
The claim contains several significant omissions that affect its accuracy and interpretation:
1. **Labor's bipartisan support for data retention:** The data retention legislation received bipartisan support from the Labor opposition.
As noted in parliamentary records, "the conservative Abbott government received bipartisan support from the Labor opposition, after it agreed to a few amendments" [5].
This was not solely a Coalition policy - the previous Gillard Labor government had first advanced the data retention plan in 2012-2013 [7].
2. **The Anonymous data breach was unauthorized hacking:** The AAPT breach in 2012 was not a responsible "white hat" disclosure - Anonymous hackers obtained and published 40GB of customer data without authorization [2][3].
The OAIC investigation confirmed this was a malicious attack, not a coordinated vulnerability disclosure [4].
3. **AAPT's security failures were confirmed:** The Privacy Commissioner found AAPT breached the Privacy Act by failing to take reasonable security steps, including using outdated software with known vulnerabilities [4].
The exposure of these flaws was legitimate, but the method (unauthorized data theft and publication) was illegal.
4. **The prosecution was plagued by procedural issues:** The prosecution against Bennett was characterized by shifting charges, last-minute evidence dumps, and delays - suggesting a weak case rather than a systematic government crackdown on security researchers [1].
**Techdirt (original source):**
- Techdirt is a technology news and opinion website with a known editorial stance strongly favoring digital rights, privacy, and opposing government surveillance [1]
- The article uses inflammatory language ("Find a security flaw, go to jail," "shooting the messenger") and frames the issue in a highly critical manner toward the government
- While Techdirt reports factual events, its framing is distinctly anti-government and pro-hacker/activist
- The article contains significant editorial opinion rather than straight news reporting
- The tone suggests the author views the prosecution as vindictive rather than legitimate law enforcement
**Assessment:** Techdirt is a credible source for basic facts but has a clear ideological bias against government surveillance and in favor of hacktivist activities.
**Did Labor do something similar?**
Search conducted: "Labor government data retention policy prosecution hackers"
**Findings:**
1. **Labor initiated the data retention policy:** The previous Labor government under Prime Minister Julia Gillard first advanced the data retention plan in 2012-2013, putting it on hold only due to public opposition before the 2013 election [7].
* * * *
When the Abbott Coalition government reintroduced the bill in 2015, Labor provided bipartisan support [5][6].
2. **Bipartisan surveillance consensus:** As the World Socialist Web Site reported, "Labor's support for the bill is hardly surprising, given that the previous Labor government... first advanced the data retention plan" [7].
This reflects a broader bipartisan consensus on national security and surveillance issues in Australia.
3. **No direct equivalent prosecution found:** No equivalent case was found of Labor prosecuting white hat hackers or security researchers who exposed vulnerabilities.
* * * * 調査 nounChousa 結果 nounKekka : : * * * *
However, this appears to be because the data retention policy wasn't enacted until 2015, not because of different approaches to cybersecurity.
However, the reality is more nuanced:
1. **The breach was unauthorized hacking:** Anonymous accessed AAPT servers without permission and published 40GB of customer data [2][3].
This was not a responsible disclosure - it was a criminal data breach that exposed real customer information.
2. **The security flaws were real and serious:** The Privacy Commissioner confirmed AAPT failed to take reasonable security steps, including using outdated software with known vulnerabilities [4].
The security concerns Anonymous raised were legitimate, even if their methods were not.
3. **Prosecution problems suggest weak case:** The prosecution's shifting charges, delays, and procedural issues suggest the government struggled to build a solid case against Bennett [1].
This undermines the narrative of a systematic crackdown on security research.
4. **Both major parties supported data retention:** The data retention law passed with bipartisan support [5][6].
This is not a Coalition-specific policy position.
5. **The "white hat" framing is misleading:** Bennett was an Anonymous member who participated in an unauthorized data breach.
While he may have had principled objections to data retention, labeling him simply as a "white hat hacker" mischaracterizes his activities and the nature of the AAPT breach.
**Key context:** The prosecution occurred in the context of a genuine data breach that exposed customer information.
The core facts are accurate: the Coalition government did prosecute Adam John Bennett, an Anonymous member associated with exposing security vulnerabilities in AAPT (an ISP that would be subject to data retention requirements).
The characterization of Bennett as a "white hat hacker" is inaccurate - he was an Anonymous member involved in an unauthorized data breach that published customer information [2][3]
2.
The core facts are accurate: the Coalition government did prosecute Adam John Bennett, an Anonymous member associated with exposing security vulnerabilities in AAPT (an ISP that would be subject to data retention requirements).
The characterization of Bennett as a "white hat hacker" is inaccurate - he was an Anonymous member involved in an unauthorized data breach that published customer information [2][3]
2.