November 2016 - nexa - server-nexa.polito.it

Le 9 proposte dell’Internet Governance Forum al Governo italiano sulla cybersecurity

by A Dicorinto

FYI: Il 15 novembre si è concluso l’ottavo Internet Governance Forum Italiano <http://www.isoc.it/igfitalia> a Venezia. lL’Igf italia 2016, organizzato dalla* Internet Society*, *Università di Ca’ Foscari* e *Venis Spa*, ha visto una forte partecipazione della comunità tecnico scientifica e di molte aziende, dalle più piccole come Yarix <https://www.yarix.com/> alle più grandi come Cisco <https://www.cisco.com/c/it_it/index.html> e Google. Continua qui: http://cybersecurity.startupitalia.eu/53350-20161116-igfitalia-9-proposte-c… -- Arturo Di Corinto www.dicorinto.it ---------------------------------> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003 Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003

Nov. 16, 2016

Facebook Claims Record 20Gbps Millimeter-Wave Wireless Connection

by Antonio Vetrò

"Facebook Claims Record 20Gbps Millimeter-Wave Wireless Connection” http://www.techweekeurope.co.uk/networks/carriers/facebook-claims-millimete… Ulteriore -tra i tanti- indizio al supporto del fatto che una parte della partita Facebook-Google si giocherà sulla connettività e sulla capacità di sostituirsi ai providers e alle Telcos: dal mio punto di vista questo accadrà soprattutto nei paesi in via di sviluppo, dove è concentrata la stragrande maggioranza delle persone che entreranno nella Rete nei prossimi anni. Antonio

Nov. 16, 2016

What a Trump Administration Means for U.S. Digital Trade Policy

by Alberto Cammozzo

L'analisi della posizione negativa di Trump sui trattati TTIP e TTP mette in luce il loro ruolo atteso: mantenere e rafforzare la preminenza degli USA nel mercato unico del commercio digitale. Evidenzia anche una opportunità per l'UE di dare forma a un mercato dominato da compagnie US. <http://blogs.cfr.org/cyber/2016/11/15/what-a-trump-administration-means-for…> With Donald Trump’s victory, the prospects for digital trade have dimmed. This development owes much to the hostility towards trade that Trump brings to the presidency. But it also involves shifts more fundamental than Trump’s rejection of trade agreements. The rise of digital commerce is rooted in the stability provided by international trade agreements, the global reach of the internet, and the innovations associated with digital technologies. U.S. leadership and global engagement underpinned each of these sources of digital trade’s growth. Now, Trump’s election combines with other forces afoot around the world to threaten the future of digital trade. The internet’s emergence as a global communications platform coincided in the mid-1990s with the remaking of the international economic order through the adoption of regional trade agreements (such as NAFTA), the WTO’s establishment, and the proliferation of bilateral trade and investment treaties. This web of agreements opened markets for goods and services, including those emerging from internet-based commercial activities. The internet’s global reach and the economic incentives provided by e-commerce fueled innovation in digital technologies. The U.S. government considered these developments strategically important to American interests and engaged globally to support, advance, and defend them. [] Without TTIP, the European Union has fewer incentives to moderate its intensifying scrutiny of U.S. technology companies, and the U.S. government will lack leverage to bargain on behalf of these companies. The European Union will, thus, shape e-commerce in ways that significantly change how U.S. technology companies operate in the single market.

Nov. 15, 2016

Fwd: [Creis_Terminal] Open Source Summit (16-17 nov) et Capitole du Libre (19-20 nov) thème Libertés et vie privées

by Mariella Berra

-------- Messaggio Inoltrato -------- Oggetto: [Creis_Terminal] Open Source Summit (16-17 nov) et Capitole du Libre (19-20 nov) thème Libertés et vie privées Data: Tue, 15 Nov 2016 17:20:57 +0100 Mittente: Valerie Dagrain <valerie.dagrain(a)gmx.fr> A: creis_terminal <creis_terminal(a)lecreis.org> Bonjour, Du *16 au 17 novembre 2016, à Paris* aux Docks <http://www.opensourcesummit.paris/Informations+pratiques_154_160.html?lg=en> se déroule *l'Open Source Summit*: www.opensourcesummit.paris <http://www.opensourcesummit.paris> - Le Forum mondial du libre (/Open World Forum/) est un événement annuel international, communautaire <https://fr.wikipedia.org/wiki/Communautaire> et non commercial, sur les contenus libres <https://fr.wikipedia.org/wiki/%C5%92uvre_libre> organisé en France <https://fr.wikipedia.org/wiki/France>. Il est régi par un Comité de pilotage <https://fr.wikipedia.org/wiki/Comit%C3%A9_de_pilotage> et un Comité de Programme, comprenant des représentants de plusieurs organisations internationales <https://fr.wikipedia.org/wiki/Organisations_internationales>, associations <https://fr.wikipedia.org/wiki/Associations> et communautés <https://fr.wikipedia.org/wiki/Communaut%C3%A9s>^2 <https://fr.wikipedia.org/wiki/Forum_mondial_du_libre#cite_note-2> . Il s'est rapidement imposé comme le principal forum européen sur les logiciels Libres et l'Open Source. Depuis 2015, il s'est étendu en fusionnant avec le Salon européen 'Solutions Linux' sous le nom de 'Paris Open Source Summit'. Sources <https://fr.wikipedia.org/wiki/Forum_mondial_du_libre>. - Voir le programme général <http://opensourcesummit.paris/preinscription-conferences.html?orderby=time&…> (hackaton, données personnelles, métriques, open cities, R&D, logiciel libre local à Europe) et *voir le thème Société <http://opensourcesummit.paris/Programme+Society_168_4661.html>.* Du *19 au 20 novembre 2016, à Toulouse* à l'INP-ENSEEIHT <http://www.enseeiht.fr/fr/index.html> se déroule *Capitole du Libre*, sur les logiciels libres 2016.capitoledulibre.org <https://2016.capitoledulibre.org/> - Ce sont 109 intervenant-e-s, 99 conférences, 27 ateliers et 25 stands, 14 thèmes dont*le thème Libertés et vie privées <https://2016.capitoledulibre.org/programme.html>* sur l'autohébergement, sécurité et vie privée sur l’Internet. - Je serai référente du thème Communautés du Libre <http://blog.capitoledulibre.org/2016/11-10-la-communaute-du-libre-au-capito…> avec 11 intervenants *- Voir le Programme des 99 conférences. <https://2016.capitoledulibre.org/programme.html>***Il y a 2 plénières au total. *"le web sous surveillance"* par T.Jouannic et *"t**ravailler ensemble pour la défense des libertés" *par Benjamin Bayart, Pierre-Yves GOSSET, piks3l (FDN, Framasoft, LQDN). - Pour information, on voit l'apparition du thème des *Communs <http://blog.capitoledulibre.org/2016/11-05-les-communs-au-capitole-du-libre…>* au Capitole du Libre. Une présentation mobilisatrice est organisée la veille, le 18 nov à la grande médiathèque de Toulouse. Voici le lien <http://www.bibliotheque.toulouse.fr/qu_est_ce_que_les_communs.html> (car introuvable sinon): Qu'y a-t-il de commun entre un logiciel libre, une zone de pêche, Wikipedia, un espace de coworking, un système d'irrigation? - Durant l'événement Capitole du Libre, de nombreux intervenants redescendent les expériences du Paris Open Source Summit, FOSDEM, FIC... on en parlera durant les tables-rondes! Ces 2 événements pour vous montrer aussi cette évolution: - une mobilisation de codeurs/développeurs (ubuntu, Pycon) et la nécessité d'organiser un événement local (hackaton, lien avec les fablabs...) - une volonté d'intégrer les usagers dans les thèmes (politiques locales, arts, culture, communauté), - vers un salon national (Open World Forum) - fusion d'événementiels (Paris Open Source Summit), apparition des Communs et des thèmes dédiés Logiciel Libre, villes intelligentes, contributions, R&D, etc. Valérie Dagrain

Nov. 15, 2016

17 novembre, U. Bocconi: Finding Copyright in the Pursuit of Knowledge. Elements of Control and Freedom in Digital Research

by Aura Bertoni

Cari amici della lista Nexa, giovedì 17 novembre alle ore 14.30 siete invitati all'Università Bocconi (aula Manfredini, via Sarfatti 25) all'incontro Finding Copyright in the Pursuit of Knowledge: Elements of Control and Freedom in Digital Research L'iniziativa è organizzata dal CDE (Centro di Documentazione Europea) della Biblioteca e dal centro ASK (Art, Science and Knowledge) dell’Università Bocconi nell’ambito del progetto della rete nazionale dei CDE “Un mercato unico digitale per l’Europa” in collaborazione con la Rappresentanza in Italia della Commissione Europea. In allegato il programma dell’iniziativa. La partecipazione è gratuita ma è richiesta la registrazione online https://eventi.unibocconi.it/index.php?key=ev2016100127 Per informazioni: Biblioteca Bocconi +39 02 5836.5102 library.staff(a)unibocconi.it A presto, Aura Aura Bertoni, PhD, LLM Bocconi University ASK Research Centre Department of Legal Studies Via Roentgen 1 20136 Milan Italy +39 02 5836 5771

Nov. 15, 2016

"Your WiFi-connected thermostat can take down the whole Internet. We need new regulations." (Bruce Schneier): FROM [RISKS] Risks Digest 29.90

by Diego Latella

> Begin forwarded message: > > From: RISKS List Owner <risko(a)csl.sri.com> > Subject: [RISKS] Risks Digest 29.90 > Date: 9 November 2016 at 02:58:49 GMT+1 > To: risks-resend(a)csl.sri.com > > RISKS-LIST: Risks-Forum Digest Tuesday 8 November 2016 Volume 29 : Issue 90 > > ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) > Peter G. Neumann, moderator, chmn ACM Committee on Computers and Public Policy > > ***** See last item for further information, disclaimers, caveats, etc. ***** > This issue is archived at <http://www.risks.org> as > <http://catless.ncl.ac.uk/Risks/29.90> > The current issue can also be found at > <http://www.csl.sri.com/users/risko/risks.txt> > > Contents: > "Your WiFi-connected thermostat can take down the whole Internet. > We need new regulations." (Bruce Schneier) > [ … OMISSIS …] > Abridged info on RISKS (comp.risks) > > ---------------------------------------------------------------------- > > Date: Fri, 4 Nov 2016 1:53:04 PDT > From: "Peter G. Neumann" <neumann(a)csl.sri.com> > Subject: "Your WiFi-connected thermostat can take down the whole > Internet. We need new regulations." (Bruce Schneier) > > Bruce Schneier, 3 Nov 2016, *The Washington Post*, 3 Nov 2016 > The government has to get involved in the "Internet of Things." > https://www.washingtonpost.com/posteverything/wp/2016/11/03/your-wifi-conne… > > Bruce Schneier is a security technologist and a lecturer at the Kennedy > School of Government at Harvard University. His latest book is "Data and > Goliath: The Hidden Battles to Collect Your Data and Control Your World." > > Late last month, popular websites like Twitter, Pinterest, Reddit and PayPal > went down for most of a day. The distributed denial-of-service attack that > caused the outages, and the vulnerabilities that made the attack possible, > was as much a failure of market and policy as it was of technology. If we > want to secure our increasingly computerized and connected world, we need > more government involvement in the security of the Internet of Things -- and > increased regulation of what are now critical and life-threatening > technologies. It's no longer a question of if, it's a question of when. > > First, the facts. Those websites went down because their domain name > provider -- a company named Dyn -- was forced offline. We don't know who > perpetrated that attack, but it could have easily been a lone hacker. > Whoever it was launched a distributed denial-of-service attack against Dyn > by exploiting a vulnerability in large numbers -- possibly millions -- of > Internet-of-Things devices like webcams and digital video recorders, then > recruiting them all into a single botnet. The botnet bombarded Dyn with > traffic, so much that it went down. And when it went down, so did dozens of > websites. > > Your security on the Internet depends on the security of millions of > Internet-enabled devices, designed and sold by companies you've never heard > of to consumers who don't care about your security. > > The technical reason these devices are insecure is complicated, but there is > a market failure at work. The Internet of Things is bringing computerization > and connectivity to many tens of millions of devices worldwide. These > devices will affect every aspect of our lives, because they're things like > cars, home appliances, thermostats, lightbulbs, fitness trackers, medical > devices, smart streetlights and sidewalk squares. Many of these devices are > low-cost, designed and built offshore, then rebranded and resold. The teams > building these devices don't have the security expertise we've come to > expect from the major computer and smartphone manufacturers, simply because > the market won't stand for the additional costs that would require. These > devices don't get security updates like our more expensive computers, and > many don't even have a way to be patched. And, unlike our computers and > phones, they stay around for years and decades. > > An additional market failure illustrated by the Dyn attack is that neither > the seller nor the buyer of those devices cares about fixing the > vulnerability. The owners of those devices don't care. They wanted a webcam > -- or thermostat, or refrigerator -- with nice features at a good price. Even > after they were recruited into this botnet, they still work fine -- you can't > even tell they were used in the attack. The sellers of those devices don't > care: They've already moved on to selling newer and better models. There is > no market solution because the insecurity primarily affects other people. > It's a form of invisible pollution. > > And, like pollution, the only solution is to regulate. The government could > impose minimum security standards on IoT manufacturers, forcing them to make > their devices secure even though their customers don't care. They could > impose liabilities on manufacturers, allowing companies like Dyn to sue them > if their devices are used in DDoS attacks. The details would need to be > carefully scoped, but either of these options would raise the cost of > insecurity and give companies incentives to spend money making their devices > secure. > > It's true that this is a domestic solution to an international problem and > that there's no U.S. regulation that will affect, say, an Asian-made product > sold in South America, even though that product could still be used to take > down U.S. websites. But the main costs in making software come from > development. If the United States and perhaps a few other major markets > implement strong Internet-security regulations on IoT devices, manufacturers > will be forced to upgrade their security if they want to sell to those > markets. And any improvements they make in their software will be available > in their products wherever they are sold, simply because it makes no sense > to maintain two different versions of the software. This is truly an area > where the actions of a few countries can drive worldwide change. > > Regardless of what you think about regulation vs. market solutions, I > believe there is no choice. Governments will get involved in the IoT, > because the risks are too great and the stakes are too high. Computers are > now able to affect our world in a direct and physical manner. > > Security researchers have demonstrated the ability to remotely take control > of Internet-enabled cars. They've demonstrated ransomware against home > thermostats and exposed vulnerabilities in implanted medical devices. > They've hacked voting machines and power plants. In one recent paper, > researchers showed how a vulnerability in smart lightbulbs could be used to > start a chain reaction, resulting in them all being controlled by the > attackers -- that;s every one in a city. Security flaws in these things could > mean people dying and property being destroyed. > > Nothing motivates the U.S. government like fear. Remember 2001? A > small-government Republican president created the Department of Homeland > Security in the wake of the Sept. 11 terrorist attacks: a rushed and > ill-thought-out decision that we've been trying to fix for more than a > decade. A fatal IoT disaster will similarly spur our government into action, > and it's unlikely to be well-considered and thoughtful action. Our choice > isn't between government involvement and no government involvement. Our > choice is between smarter government involvement and stupider government > involvement. We have to start thinking about this now. Regulations are > necessary, important and complex -- and they're coming. We can't afford to > ignore these issues until it's too late. > > In general, the software market demands that products be fast and cheap and > that security be a secondary consideration. That was okay when software > didn't matter -- it was okay that your spreadsheet crashed once in a while. > But a software bug that literally crashes your car is another thing > altogether. The security vulnerabilities in the Internet of Things are deep > and pervasive, and they won't get fixed if the market is left to sort it out > for itself. We need to proactively discuss good regulatory solutions; > otherwise, a disaster will impose bad ones on us. > > [ … OMISSIS …] > ------------------------------ > > Date: Wed, 17 Aug 2016 11:11:11 -0800 > From: RISKS-request(a)csl.sri.com > Subject: Abridged info on RISKS (comp.risks) > > The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is > comp.risks, the feed for which is donated by panix.com as of June 2011. > => SUBSCRIPTIONS: The mailman Web interface can be used directly to > subscribe and unsubscribe: > http://mls.csl.sri.com/mailman/listinfo/risks > > => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line that > includes the string `notsp'. Otherwise your message may not be read. > *** This attention-string has never changed, but might if spammers use it. > => SPAM challenge-responses will not be honored. Instead, use an alternative > address from which you never send mail where the address becomes public! > => The complete INFO file (submissions, default disclaimers, archive sites, > copyright policy, etc.) is online. > <http://www.CSL.sri.com/risksinfo.html> > *** Contributors are assumed to have read the full info file for guidelines! > > => OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's > searchable html archive at newcastle: > http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue. > Also, ftp://ftp.sri.com/risks for the current volume > or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume > Lindsay has also added to the Newcastle catless site a palmtop version > of the most recent RISKS issue and a WAP version that works for many but > not all telephones: http://catless.ncl.ac.uk/w/r > ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001) > <http://the.wiretapped.net/security/info/textfiles/risks-digest/> > *** NOTE: If a cited URL fails, we do not try to update them. Try > browsing on the keywords in the subject line or cited article leads. > ==> Special Offer to Join ACM for readers of the ACM RISKS Forum: > <http://www.acm.org/joinacm1> > > ------------------------------ > > End of RISKS-FORUM Digest 29.90 > ************************ > Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

Nov. 15, 2016

46° Nexa Lunch Seminar - 23 novembre 2016

by Francesco Ruggiero

Se non visualizzi correttamente questo messaggio clicca qui <http://nexa.polito.it/lunch-46> NEXA 46°Nexa Lunch Seminar Mercoledi 23 novembre 2016, ore 13.00 - 14.00 Politecnico di Torino http://nexa.polito.it/lunch-46 Immaginario e pratiche artistiche tra social network e spazio urbano /Opera viva/ di Alessandro Bulgini Speaker Roberto Mastroianni (Filosofo e Critico d'arte) This event will be webcast live: http://nexa.polito.it/upcoming-events I social network si presentano come un repertorio di "immagini" capaci di dar forma allo stesso "immaginario" contemporaneo poiché, presumibilmente, sono una raccolta delle immagini di un certo tempo e di una certa cultura oppure di un certo argomento o, infine, di una certa produzione e ambiente sociale. Da questo prospettiva, *l'immaginario si confonde con quella che Umberto Eco chiama "Enciclopedia", cioè una raccolta generale della semantica di un gruppo, di una società, di un periodo e/o di una persona *. L'immaginario è, in quest'ottica, una struttura psico-semantica attraverso la quale vengono catalogate e collezionate le immagini del tempo e dell'umano, che vigono in una certa epoca e in un certo spazio, e i prodotti culturali, effettivi e potenziali, cui l'immaginario stesso può dare forma o da cui esso deriva. In questa prospettiva, la "collezione di immagini" di una società o di un gruppo si sovrappone e intreccia sempre con la produttività di quel che si usa chiamare "immaginazione" o "fantasia", orientando le pratiche sociali, rispecchiandosi e influenzando in maniera biunivoca, quelle artistiche. A partire da "Opera Viva" di Alessandro Bulgini <https://alessandrobulgini.wordpress.com/bio/>, ormai divenuta esempio emblematico a livello nazionale e internazionale di arte relazionale, capace di unire social network, performance e produzione visuale, *l'intervento si propone di indagare il nesso tra pratiche performative, immaginario e social network nella costruzione di uno spazio comunitario* capace di tenere assieme virtualità e dimensione socio-politica. L'intervento analizzerà, inoltre, il rapporto tra le pratiche online e offline dell'artista in diversi contesti urbani italiani e stranieri, al fine di delineare la fisionomia di una pratica socio-politica capace di influenzare la percezione, la rappresentazione e l'autorappresentazione del contesto urbano, delle periferie e delle comunità locali.*I linguaggi e le dimensioni relazionali di un intervento artistico pluriennale come "Opera Viva", sfidano infatti la dimensione spaziale del tessuto metropolitano *delineando nuove pratiche di fruizione capaci di forzare i limiti dei musei, delle gallerie e del mercato dell'arte, creando una relazione diretta con ampli strati delle società. Sarà presente l'artista. /Ingresso libero - Saranno disponibili panini e bibite per coloro che si saranno registrati su http://lunch46.eventbrite.com entro il 21 novembre./ BIOGRAFIE - e informazioni supplementari [MASTROIANNI] ROBERTO MASTROIANNI è filosofo, curatore e critico d'arte, ricercatore esterno di semiotica, estetica filosofica e filosofia del linguaggio presso il C.I.RC.e- Centro Interdipartimentale Ricerche sulla Comunicazione e la Unesco Chair in Sviluppo sostenibile e management territoriale dell'Università degli Studi di Torino. Laureato in Filosofia Teoretica è dottore di Ricerca in Scienze e Progetto della Comunicazione, si occupa di Filosofia del Linguaggio, Estetica filosofica, Teoria generale della Politica, Antropologia, Semiotica, Comunicazione, Arte e Critica filosofica. Ha curato libri di teoria della politica, scritto saggi di filosofia e arte contemporanea e curato diverse esposizioni museali in Italia e all'estero. Ha tenuto seminari, lezioni e conferenze in differenti Università italiane e straniere. Letture consigliate e link utili: * M. Leone (a cura di), /Immaginario/. "Lexia. Rivista internazionale di semiotica", 7-8, Luglio 2011, Aracne Editrice, Roma. * M. Leone (a cura di), /Immagini efficaci/. "Lexia. Rivista Internazionale di Semiotica", 17-18, Novembre 2014, Aracne Editrice, Roma. * L. Manovich, /Il linguaggio dei nuovi media/, Olivares, Milano 2011. Che cosa sono il Centro Nexa e i cicli di incontri "Mercoledì di Nexa" e "Nexa Lunch Seminar" Il Centro Nexa su Internet & Società del Politecnico di Torino (Dipartimento di Automatica e Informatica) è un centro di ricerca indipendente e interdisciplinare che studia Internet e il suo effetto sulla società. Maggiori informazioni all'indirizzo: http://nexa.polito.it/about. Durante i "*Mercoledì di Nexa*", che si tengono *ogni 2° mercoledì del mese* alle *ore 18 in punto*, il Centro Nexa su Internet e Società apre le sue porte non solo agli esperti e a tutti coloro i quali lavorano con Internet, ma anche a semplici appassionati e cittadini. Il ciclo di incontri intende approfondire, con un linguaggio preciso ma divulgativo, i temi legati alla Rete: motori di ricerca, Creative Commons, social networks, open source/software libero, neutralità della rete, libertà di espressione, privacy, file sharing, big e open data, smart cities e molto altro. Al centro di quasi tutti gli incontri un ospite pronto a dialogare con i direttori del Centro Nexa, il Prof. Juan Carlos De Martin del Politecnico di Torino e il Prof. Marco Ricolfi dell'Università di Torino, nonché lo staff e i Fellows del Centro Nexa. Maggiori informazioni sui Mercoledì di Nexa, incluso un elenco di tutti i "Mercoledì" passati, sono disponibili all'indirizzo: http://nexa.polito.it/mercoledi. Si segnala inoltre che dal maggio 2012 *ogni 4° mercoledì* del mese *dalle ore 13 alle ore 14* il Centro Nexa organizza anche i "*Nexa Lunch Seminar*". Una lista di tutti i "Lunch Seminar" passati è disponibile all'indirizzo: http://nexa.polito.it/lunch-seminars. See our events calendar <http://nexa.polito.it/events> if you're curious about future luncheons, discussions, lectures, and conferences not listed in this email. Our events are free and open to the public, unless otherwise noted. Maggiori informazioni sui Mercoledì di Nexa e i Nexa Lunch Seminar, sono disponibili all'indirizzo: http://nexa.polito.it/events. Weekly Events Newsletter. Sign up <http://nexa.polito.it/mailing-lists> to receive this newsletter if this email was forwarded to you. To manage your subscription preferences, please click here <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa>. Connect & get involved: Jobs, internships, and more <http://nexa.polito.it/get-involved> Nexa Center for Internet and Society Newsletter

Nov. 15, 2016

Blue Feed, Red Feed

by Alberto Cammozzo

Bel progetto del WSJ illustra la filter bubble su Facebook per le elezioni USA Molto immediato. <http://graphics.wsj.com/blue-feed-red-feed/> See Liberal Facebook and Conservative Facebook, Side by Side Facebook’s role in providing Americans with political news has never been stronger—or more controversial. Scholars worry that the social network can create “echo chambers,” where users see posts only from like-minded friends and media sources. Facebook encourages users to “keep an open mind” by seeking out posts that don’t appear in their feeds. To demonstrate how reality may differ for different Facebook users, The Wall Street Journal created two feeds, one “blue” and the other “red.” If a source appears in the red feed, a majority of the articles shared from the source were classified as “very conservatively aligned” in a large 2015 Facebook study. For the blue feed, a majority of each source’s articles aligned “very liberal.” These aren't intended to resemble actual individual news feeds. Instead, they are rare side-by-side looks at real conversations from different perspectives. To begin, click on a topic. Be forewarned: These Facebook posts do not represent the reporting or opinion of The Wall Street Journal, and are not verified, edited or endorsed in any way. Read our Methodology. <http://graphics.wsj.com/blue-feed-red-feed/#methodology> <http://graphics.wsj.com/blue-feed-red-feed/#methodology> <http://graphics.wsj.com/blue-feed-red-feed/#methodology>

Nov. 15, 2016

Master in Internet Ecosystem: Governance e Diritti (Univ. Pisa)

by Alessandro Mantelero

Sperando di far cosa gradita, vi segnalo che sono aperte le iscrizioni alla seconda edizione del Master in "INTERNET ECOSYSTEM: GOVERNANCE E DIRITTI", che si terrà presso l’Università degli studi di Pisa. Il Master, organizzato dal Dipartimento di Giurisprudenza in collaborazione con CNR-IIT (Pisa) e CNR-ITTIG (Firenze), si articola nei seguenti 10 moduli didattici: - Internet Governance - Forme, modi e condizioni dell’accesso ad Internet - Internet e comunicazione - E-government e E-democracy - E-finance - Internet, privacy e identità digitale - Le transazioni e la rete - Internet ed Intellectual Property Rights - Cybercrime - Internet, processo e on line dispute resolution Qui maggiori dettagli circa il programma dell’edizione corrente: http://internetecosystem.it/2016/11/08/programmazione-didattica-anno-201617/ AM -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri)

Nov. 14, 2016

Why Light Bulbs May Be the Next Hacker Target: (on a bug in ZigBeee and implications on IoT; FROM [RISKS] Risks Digest 29.91)

by Diego Latella

> Begin forwarded message: > > From: RISKS List Owner <risko(a)csl.sri.com> > Subject: [RISKS] Risks Digest 29.91 > Date: 14 November 2016 at 07:26:43 GMT+1 > To: risks-resend(a)csl.sri.com > > RISKS-LIST: Risks-Forum Digest Sunday 13 November 2016 Volume 29 : Issue 91 > > ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks) > Peter G. Neumann, moderator, chmn ACM Committee on Computers and Public Policy > > ***** See last item for further information, disclaimers, caveats, etc. ***** > This issue is archived at <http://www.risks.org> as > <http://catless.ncl.ac.uk/Risks/29.91> > The current issue can also be found at > <http://www.csl.sri.com/users/risko/risks.txt> > > Contents: > Why Light Bulbs May Be the Next Hacker Target (John Markoff) > [ … OMISSIS …] > Abridged info on RISKS (comp.risks) > > ---------------------------------------------------------------------- > > Date: Sat, 5 Nov 2016 11:33:48 -0500 > From: "Alister Wm Macintyre \(Wow\)" <macwheel99(a)wowway.com> > Subject: Why Light Bulbs May Be the Next Hacker Target (John Markoff) > > John Markoff, *The New York Times*, 3 Nov 2016 > > Researchers report in a paper <http://iotworm.eyalro.net/> that they have > uncovered a flaw in a wireless technology that is often included in smart > home devices like lights, switches, locks, thermostats and many of the > components of the much-ballyhooed "smart home" of the future. The > researchers focused on the Philips Hue smart light bulb and found that the > wireless flaw could allow hackers to take control of the light bulbs, > according to researchers at the Weizmann Institute of Science near Tel Aviv > and Dalhousie University in Halifax, Canada. > <http://www.nytimes.com/topic/company/koninklijke-philips-electronics-nv?inl…> > > [I wonder how many other brand names are at similar risk.] > > Imagine thousands or even hundreds of thousands of Internet-connected > devices in close proximity. Malware created by hackers could be spread like > a pathogen among the devices by compromising just one of them. [There is > video, in the research paper, showing tests. For example, a drone hovers > next to a high rise building, and you see it taking over control of all the > lights of the building. Before the test, they had switched one light bulb on > ground floor, with one they already could hack.] > > The new risk comes from a little-known radio protocol called ZigBee. > <http://www.zigbee.org/what-is-zigbee/> > <http://www.zigbee.org/what-is-zigbee/> > <http://www.zigbee.org/what-is-zigbee/> > > The researcher said they had notified Philips of the potential vulnerability > and the company had asked the researchers not to go public with the research > paper until it had been corrected. Philips fixed the vulnerability in a > patch issued on 4 Oct and recommended that customers install it through a > smart phone application. Still, it played down the significance of the > problem. > > [I wonder how many customers learned about this, and implemented the patch.] > > http://www.nytimes.com/2016/11/03/technology/why-light-bulbs-may-be-the-nex… > http://iotworm.eyalro.net/ > > The full results technical paper can be downloaded from this link: > IoT Goes Nuclear: Creating a ZigBee Chain Reaction [PDF, 6.7MB] > <http://iotworm.eyalro.net/iotworm.pdf> > > Risks identified by the research: > * Brick the lights so they cannot be fixed vs. whatever nuisance the > malware has inflicted. > * City-wide wireless jamming. > * Attack electric grid via manipulating power consumption demands. > * Induce epileptic seizures in photosensitive people on a large scale. > > [Risks thought about by Al Mac: > > * Kill street lights, and stairwell lights, after dark, then set off > fire alarms, sirens, so people can have a hard time exiting safely. > * Airport runway lights go out, when most needed for safe landing.] > * You know those highway signs, using letters spelling out key words > for warnings to drivers, where each letter is combination of lights on & > off? The phrases could be altered. > * Do emergency responders use the same radio frequencies that can be > jammed by this hack?] > > ——————————————— > [ … OMISSIS …] > ---------------------------- > > Date: Wed, 17 Aug 2016 11:11:11 -0800 > From: RISKS-request(a)csl.sri.com > Subject: Abridged info on RISKS (comp.risks) > > The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is > comp.risks, the feed for which is donated by panix.com as of June 2011. > => SUBSCRIPTIONS: The mailman Web interface can be used directly to > subscribe and unsubscribe: > http://mls.csl.sri.com/mailman/listinfo/risks > > => SUBMISSIONS: to risks(a)CSL.sri.com with meaningful SUBJECT: line that > includes the string `notsp'. Otherwise your message may not be read. > *** This attention-string has never changed, but might if spammers use it. > => SPAM challenge-responses will not be honored. Instead, use an alternative > address from which you never send mail where the address becomes public! > => The complete INFO file (submissions, default disclaimers, archive sites, > copyright policy, etc.) is online. > <http://www.CSL.sri.com/risksinfo.html> > *** Contributors are assumed to have read the full info file for guidelines! > > => OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's > searchable html archive at newcastle: > http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue. > Also, ftp://ftp.sri.com/risks for the current volume > or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume > Lindsay has also added to the Newcastle catless site a palmtop version > of the most recent RISKS issue and a WAP version that works for many but > not all telephones: http://catless.ncl.ac.uk/w/r > ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001) > <http://the.wiretapped.net/security/info/textfiles/risks-digest/> > *** NOTE: If a cited URL fails, we do not try to update them. Try > browsing on the keywords in the subject line or cited article leads. > ==> Special Offer to Join ACM for readers of the ACM RISKS Forum: > <http://www.acm.org/joinacm1> > > ------------------------------ > > End of RISKS-FORUM Digest 29.91 > ************************ > Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

Nov. 14, 2016