November 2016 - nexa - server-nexa.polito.it

Leibniz's visions - Three centuries after (14-11-2016)

by Francesco Ruggiero

Gentilissimi, Lunedì 14 novembre si svolgerà il Convegno "*Leibniz's visions - Three centuries after*", dedicato alla figura del grande filosofo e scienziato tedesco a trecento anni esatti dalla sua scomparsa. L'evento è organizzato da *Law and Technology*, The Turin Law School project on the information revolution, e si terrà a partire dalle 9.30 presso la *Nuova Aula Magna della Cavallerizza Reale*, Università degli Studi di Torino. All'incontro parteciperanno *Anna Masera, Selmer Bringsjord**, Pompeu Casanovas, Gregory Chaitin, Giovanni Sartor, Luciano Floridi, Micheal Winter e Ugo Pagallo.* Maggiori informazioni sono disponibili all'indirizzo: http://www.lawandtechnology.net/leibnizs_visions/ In allegato la locandina con il programma dell'evento. Cordiali saluti -- Francesco Ruggiero Communication Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino web: http://nexa.polito.it mail: francesco.ruggiero(a)polito.it tel. +39 011 090 7219

Nov. 10, 2016

Biometric data on terrorists needed to activate global tripwire says INTERPOL

by Alberto Cammozzo

L'assemble generale di Interpol preme per un database biometrico (impronte e DNA) <https://www.interpol.int/en/News-and-media/News/2016/N2016-147> BALI, Indonesia – The lack of biometric data being shared on terrorists at the international level is creating a dangerous security gap for exploitation by returning foreign terrorist fighters. With at least 15,000 fighters still estimated to be within the conflict zones of which an unknown number could return home to engage in radicalization or covert cell operations, the INTERPOL General Assembly has emphasised the urgency with which this threat needs to be addressed. The proliferation of aliases, the complexity of fake travel documents, deception tactics falsely declaring individuals have died in the conflict zones, and even basic issues linked to transliteration present mounting challenges to law enforcement in the field. Information made available at the frontlines, via INTERPOL, should enable timely and effective action to properly identify suspects and equally as important, to exonerate innocent individuals and minimize disruption to legitimate travel flows. The role of biometric information focused on unique identifiers, such as fingerprints and DNA, is pivotal in this context. Although INTERPOL currently holds information on nearly 9,000 foreign terrorist fighter – including from within the conflict zone – less than 10 per cent of these files include biometric data or high resolution images which could be used for facial recognition. “Although information shared via INTERPOL has enabled national law enforcement agencies to prevent numerous terrorists and aspiring foreign terrorist fighters from travelling, the lack of biometric data remains a weak link,” said INTERPOL Secretary General Jürgen Stock. [] Alberto

Nov. 10, 2016

Three New Scandals Show How Pervasive and Dangerous Mass Surveillance is in the West, Vindicating Snowden

by Alberto Cammozzo

<https://theintercept.com/2016/11/04/three-new-scandals-show-how-pervasive-a…> [] Earlier this month, a special British court that rules on secret spying activities issued an emphatic denunciation of the nation’s domestic mass surveillance programs. The court found that “British security agencies have secretly and unlawfully collected massive volumes of confidential personal data, including financial information, on citizens for more than a decade.” Those agencies, the court found, “operated an illegal regime to collect vast amounts of communications data, tracking individual phone and web use and other confidential personal information, without adequate safeguards or supervision for 17 years.” On Thursday, an even more scathing condemnation of mass surveillance was issued by the Federal Court of Canada. The ruling “faulted Canada’s domestic spy agency for unlawfully retaining data and for not being truthful with judges who authorize its intelligence programs.” Most remarkable was that these domestic, mass surveillance activities were not only illegal, but completely unknown to virtually the entire population in Canadian democracy, even though their scope has indescribable implications for core liberties: “the centre in question appears to be the Canadian Security Intelligence Service’s equivalent of a crystal ball – a place where intelligence analysts attempt to deduce future threats by examining, and re-examining, volumes of data.” The third scandal also comes from Canada – a critical partner in the Five Eyes spying alliance along with the U.S. and UK – where law enforcement officials in Montreal are now defending “a highly controversial decision to spy on a La Presse columnist [Patrick Lagacé] by tracking his cellphone calls and texts and monitoring his whereabouts as part of a necessary internal police investigation.” The targeted journalist,Lagacé, had enraged police officials by investigating their abusive conduct, and they then used surveillance technology to track his calls and movements to unearth the identity of his sources. Just as that scandal was exploding, it went, in the words of the Montreal Gazette, “from bad to worse” as the ensuing scrutiny revealed that police had actually “tracked the calls and movements of six journalists that year after news reports based on leaks revealed Michel Arsenault, then president of Quebec’s largest labour federation, had his phone tapped.” [] Alberto

Nov. 10, 2016

Do U.S. Efforts to Deter Russian Cyberattacks Signal the End of Cyber Norms?

by Alberto Cammozzo

In un contesto in cui gli accordi internazionali vietano attacchi diretti alle infrastrutture critiche, si parla di "deterrence by leak" <http://blogs.cfr.org/cyber/2016/11/07/do-u-s-efforts-to-deter-russian-cyber…> According to a NBC News report, the United States has penetrated Russia’s electric grid, telecommunications networks, and command and control systems in order to be able to launch retaliatory cyberattacks if the Kremlin attacks critical infrastructure during the election. An unidentified senior official reportedly said that if Russia attacked critical infrastructure then Washington could shut down some Russian systems. Washington has called out China and Russia for “preparing the battlefield” by penetrating and surveilling networks in the past. Admiral Michael Rogers, head of U.S. Cyber Command and director of the National Security Agency, told the Senate Armed Services Committee in 2015, “We believe potential adversaries might be leaving cyber fingerprints on our critical infrastructure partly to convey a message that our homeland is at risk if tensions ever escalate toward military conflict.” The NBC report is confirmation (by leak) that the United States is, not surprisingly, doing the same. This is clearly an effort to create a deterrent. President Obama also reportedly warned President Putin about interference in the election at their last meeting two months ago. Like Lawfare‘s Jack Goldsmith, I am skeptical that deterrence by leak is an effective method. In previous leaks claiming the United States would respond with cyberattacks, there has been no visible follow through. While there may have been covert disruptions, there is little reason to think Moscow would take these new reports more seriously. Moreover, the Russians can easily remain below the threshold of an attack on critical infrastructure. The theft and public disclosure of the emails of the Democratic National Committee and Clinton campaign manager John Podesta have been more than effective in stirring up questions about the integrity and legitimacy of the electoral process. Russian hackers do not need to take down the power grid; brief distributed denial of service attacks on social media platforms on election day could do the trick. [] Alberto

Nov. 10, 2016

The Privacy Paradox and Europe's Way Forward on Data Protection

by Alberto Cammozzo

<http://www.liberties.eu/en/news/lithuania-privacy-data-protection> At the Digital Rights Forum 2016, experts discussed the preparedness of companies to implement the General Data Protection Regulation and debated whether we really know what type of data protection people actually need. [] According to the assistant to the European Data Protection Supervisor, Christian D'Cunha, who spoke about the competitive advantages offered by privacy protection, privacy is necessary for the enjoyment of other rights - self expression, creation, innovation and, more recently, choosing what content to access online. "Three-quarters of all people now receive their news through social media, but your experiences there are determined by algorithms. When I sought solace in Facebook after Brexit, you would've thought that 95 percent of the people voted to stay, but that was obviously untrue." D'Cunha said that 91 percent of US residents feel that they can no longer control how companies use their data. "Last year, we visited the Silicon Valley, had meetings with companies and got the impression that the dominant business model nowadays is online behaviorist tracking." According to D'Cunha, the meetings revealed that it was very difficult to gain support from investors without showing how the company could monetize data. Companies wishing to escape this model would simply not attract investment. [] In the second half of the event, Natalija Bitiukova of the Human Rights Monitoring Institute talked about the privacy paradox and presented the study on the public's perceptions of data protection. According to Bitiukova, there is a clear gap between the people's intentions regarding giving access to their data and their behavior in practice. Furthermore, despite claiming that it's important to them, most people, when faced with a violation of their privacy, choose to not report it to any institution.

Nov. 9, 2016

Fwd: CfP: Data Science trach for 'Regulating a connected world' conference

by Alberto Cammozzo

Inoltro questa call sperando sia di interesse. "How is data science influencing the social contract? And what are the opportunities for evolving international norms and rules in response to transnational practices of data science and global data markets?" *From:*L.E.M. Taylor [mailto:L.E.M.Taylor@uvt.nl] *Sent:* 9 November, 2016 12:06 PM *To:* Ines Hasselberg *Subject:* TILTing 2017 CFP At TILT we’re in the process of organising the Tilting conference (www.tilburguniversity.edu/tilting2017 <http://www.tilburguniversity.edu/tilting2017>), to take place May 17-19 2017. There’s a data science track, for which I am responsible, which I’d like to make as broad and inclusive as possible – see the outline that follows below. If any of you are interested in pulling together a panel, or making a presentation, about your current research interests or to try out new ideas, you are very welcome. It will be a very diverse crowd and we’re hoping to create good conversations and alliances. The website is now open for the submission of panel and paper ideas. I’d be grateful if you could also send this out to your networks, as I’d also very much like to reach the people you are currently talking to about your research. Best regards, Linnet Data Science track Data science —the practice of organizing, analyzing and using new sources of digital data—, is transforming societies around the world, but that transformation is largely invisible. Algorithmic sorting and categorization, machine learning and artificial intelligence, data emitted through people’s use of technology, from the internet of things and by smart environments are contributing to new types of visibility and changing power dynamics between people, corporations and governments. The use of digital data in policy and planning creates the power to understand and visualize in new ways, but also to monitor and influence to an unprecedented extent. Similarly, the use of digital traces in research is transforming many fields, but with associated shifts in power and practice. Data science therefore has implications for rights, for culture and research, for how economic growth, development and social justice are conceptualized and practiced, and also for modes of resistance and organizing. How are societies balancing the use of data analytics for economic growth, knowledge and security with the need to preserve ‘the play of everyday practice’ (Cohen 2012)? How is data science influencing the social contract? And what are the opportunities for evolving international norms and rules in response to transnational practices of data science and global data markets? Suggested themes Suggested topics for contributions include, but are not limited to: · Cybersecurity and data governance · Algorithmic cultures and related political and social dynamics, including algorithmic accountability · The global implications of data science and data markets · Social and regulatory challenges relating to the Internet of Things · The social and regulatory implications of smart environments · The effects of data science on media and communications · The interaction between data science and culture · The ethics of data science and related technologies · The implications of data science for academic research Questions For questions about possible presentation topics for this track, please contact Dr. Linnet Taylor: L.E.M.Taylor(a)tilburguniversity.edu <http://Mailto:L.E.M.Taylor@tilburguniversity.edu/>

Nov. 9, 2016

Re: [nexa] B. Schneier: Lessons From the Dyn DDoS Attack

by Alberto Cammozzo

On 11/08/2016 07:49 PM, Alessandro Mantelero wrote: > Lessons From the Dyn DDoS Attack > https://www.schneier.com/blog/archives/2016/11/lessons_from_th_5.html > > Interessante commento di B. Schneier, che induce a riflettere sul > fatto che il mercato non possa da solo adeguatamente offrire risposte > efficienti in tema di security. > Aggiungo che il problema è forse ancor più ampio e tocca i modelli di > sviluppo dei prodotti. Mossi da una sorta di bulimia digitale, abbiamo > adottato un modello che vede sovente lo sviluppo continuo ed > incessante di nuovi servizi (spesso gratuiti). In questo contesto > pretendere che prima di immettere sul mercato un prodotto si proceda > ad una valutazione del possibile impatto che lo stesso può avere sui > singoli e sulla collettività (in termini di sicurezza e diritti) è > visto come un costo o un ostacolo all’innovazione. > Eppure il modello opposto, incentrato su una preventiva attenta > analisi dei rischi potrebbe a creare un ecosistema digitale non solo > più sicuro, ma anche più rispettoso ed equo. Assolutamente d'accordo! Come già avvenuto in passato in praticamente tutte le altre industrie (eg ferroviaria), la mancanza di regolazione pesa in primis sulla sicurezza, poi sulla società (per l'impatto della mobilità automobilistica bellissimo il lavoro di Norton [1]) se non sul pianeta... Un modello precauzionale permetterebbe una maggiore sicurezza, equità e sostenibilità. In questo, con un po' di coraggio e autonomia, un modello europeo continentale potrebbe confrontarsi con quello americano. Alberto [1] Peter D. Norton, "Street Rivals: Jaywalking and the Invention of the Motor Age Street <http://muse.jhu.edu/journals/technology_and_culture/v048/48.2norton.html>," /Technology and Culture/ 48 (April 2007), 331-359 (342).

Nov. 8, 2016

B. Schneier: Lessons From the Dyn DDoS Attack

by Alessandro Mantelero

Lessons From the Dyn DDoS Attack https://www.schneier.com/blog/archives/2016/11/lessons_from_th_5.html Interessante commento di B. Schneier, che induce a riflettere sul fatto che il mercato non possa da solo adeguatamente offrire risposte efficienti in tema di security. Aggiungo che il problema è forse ancor più ampio e tocca i modelli di sviluppo dei prodotti. Mossi da una sorta di bulimia digitale, abbiamo adottato un modello che vede sovente lo sviluppo continuo ed incessante di nuovi servizi (spesso gratuiti). In questo contesto pretendere che prima di immettere sul mercato un prodotto si proceda ad una valutazione del possibile impatto che lo stesso può avere sui singoli e sulla collettività (in termini di sicurezza e diritti) è visto come un costo o un ostacolo all’innovazione. Eppure il modello opposto, incentrato su una preventiva attenta analisi dei rischi potrebbe a creare un ecosistema digitale non solo più sicuro, ma anche più rispettoso ed equo. -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri)

Nov. 8, 2016

Database TES: update

by Antonio Casilli

Qui le cose van veloci. Dopo la presa di posizione del Consiglio del digitale (CNNum), il ministro dell'interno Bernard Cazeneuve annuncia oggi pomeriggio che all'Assemblea Nazionale si terrà un "dibattito senza voto". Giudicando la sua risposta poco più di un contentino, il Consiglio del digitale ha creato e lanciato in tempo record una piattaforma internet per la consultazione pubblica sulla nuova schedatura. La trovate a questo indirizzo: http://tes.cnnumerique.fr/ Un bell'esempio di reattività politica, parole chiare: "alors que l’émergence de nouvelles tentations autoritaires est observée un peu partout dans le monde, il semble nécessaire de comprendre exactement ce que signifie l’instauration d’un tel fichier". Qui il comunicato stampa di spiegona: http://cnnumerique.fr/wp-content/uploads/2016/11/CP-Annoncelancementplatefo… (Nel frattempo il collettivo cittadino La Quadrature du Net (di cui è cofondatore Philippe Aigrain, che alcuni in lista conoscono) ha annunciato un ricorso imminente al Consiglio di Stato.) ----- Mail original ----- De: "Antonio Casilli" <antonio.casilli(a)telecom-paristech.fr> À: "nexa" <nexa(a)server-nexa.polito.it> Envoyé: Mardi 8 Novembre 2016 09:43:22 Objet: [nexa] La base dati biometrica TES La Francia cerca da circa 40 anni di mettere in atto una schedatura sistematica a base di database interconnessi di tutti i suoi cittadini. Il primo esempio era stato il tentativo di implementazione della base SAFARI che, rivelato dalla stampa, aveva portato nel 1978 alla creazione della CNIL, il garante della privacy francese. Dopo infruttuosi tentativi da parte dei governi di destra che si sono succeduti negli anni 2000 di creare un database biometrico di "cittadini onesti" (ovvero in assenza di reati o comportamenti sospetti), tocca oggi al governo "ambidestro" di François Hollande di promulgare, quasi di nascosto, il database TES (Titres Electroniques Securisés). Prontamente ribattezzato "database mostruoso" (fichier monstre) dai media d'oltralpe, questo ennesimo esempio di schedatura di massa si distingue per la maniera surrettizia della sua introduzione: un decreto pubblicato nel Journal officiel durante il ponte di fine Ottobre. Nessun dibattito parlamentare, nessuna consultazione, nessuna comunicazione a ministri o istituzioni competenti. Le reazioni non si sono fatte attendere: dichiarazioni polemiche della sottosegretaria al digitale Axelle Lemaire, critiche della CNIL, una procedura di deferimento aperta ieri presso il Consiglio del digitale (CNNum). Il ministro dell'Interno si difende e invoca la sua buona fede, ma dopo la sfilza di leggi liberticide approvate a forza negli ultimi tre anni (LPM, Loi Renseignement, Loi Terrorisme, Loi surveillance des communications électroniques internationales...) la sua posizione risulta alquanto indifendibile. Qualche link: Grande fratello alla francese, traccerà colore degli occhi e impronte http://www.repubblica.it/esteri/2016/11/07/news/grande_fratello_in_salsa_fr… In Francia dilaga la schedatura della popolazione http://www.cdt.ch/mondo/politica/165904/in-francia-dilaga-la-schedatura-del… -- Antonio A. Casilli Associate Professor, Telecom ParisTech Research Fellow, Edgar-Morin Center (EHESS) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS) _______________________________________________ nexa mailing list nexa(a)server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa

Nov. 8, 2016

Call for papers - Conference on Digital Government - 12-13 June 2017 - Lisbon

by Fernanda Faini

Carissimi, spero di fare cosa gradita segnalando la seguente call for papers. Cari saluti Fernanda Faini --- *Final call *for submissions for the *17th European Conference on Digital Government (formally ECEG) *which is being hosted by the Military Academy, Lisbon, Portugal on the 12 - 13 June 2017, Lisbon, Portugal. *The deadline for submitting abstracts* *is the **24 of November 2016.* For more information please go to: http://www.academic- conferences.org/conferences/ecdg/call-for-papers/ The conference will also host the finals of the *Digital Government Excellence Awards <http://www.academic-conferences.org/conferences/ecdg/digital-government-exc…> * a competition to identify innovative and creative application of digital government. For more information on how to enter the competition see http://www.academic-conferences.org/conferences/ecdg/digital-government- excellence-awards/ We will also be running the following *Mini Tracks* at the conference next year: - Mini Track on Global Strategy and Good Practices of Digital Governments - Mini Track on Data for Societal Challenges - Mini Track on Digital Government in developing Countries *Please feel free to circulate this message to any colleagues or contacts you think may be interested.* *Papers presented at the conference will be published in the conference proceedings, subject to author registration and payment. The proceedings have an ISBN and ECDG proceedings are listed and/or rated by multiple organisations worldwide including Thompson ISI WOS.* *Papers that have been presented at the Conference will be considered for further development and publication in the following journals:* *Electronic Journal of e-Government <http://www.ejeg.com/main.html> ISSN 1479-439X.* *The Journal of Information, Communication and Ethics in Society (JICES) <http://www.emeraldinsight.com/loi/jices> published by Emerald ISSN 1477-996X.* Follow the conference on LinkedIn <https://www.linkedin.com/company/academic-conferences> Facebook <https://www.facebook.com/academic.conferences.international> and Twitter --- Fernanda Faini *Responsabile Assistenza giuridica egov e open gov - Regione Toscana* *PhD Candidate Università di Bologna (CIRSFID) - **Cultore della materia Università di Firenze* *Presidente Circolo dei Giuristi Telematici* cell: 3385352449 mail: fernandafaini(a)gmail.com twitter: @fernandafaini facebook: www.facebook.com/fernanda.faini linkedIn: *www.linkedin.com/in/fernandafaini <https://www.linkedin.com/in/fernandafaini>* skype: fernanda_pensiero sito web: *www.fernandafaini.it <http://www.fernandafaini.it>*

Nov. 8, 2016