November 2016 - nexa - server-nexa.polito.it

Britain has passed the 'most extreme surveillance law ever passed in a democracy'
by Alberto Cammozzo Nov. 20, 2016

Nov. 20, 2016

The law forces UK internet providers to store browsing histories -- including domains visited -- for one year, in case of police investigations. <http://www.zdnet.com/article/snoopers-charter-expansive-new-spying-powers-b…> It's 2016 going on 1984. The UK has just passed a massive expansion in surveillance powers, which critics have called "terrifying" and "dangerous". The new law, dubbed the "snoopers' charter", was introduced by then-home secretary Theresa May in 2012, and took two attempts to get passed into law following breakdowns in the previous coalition government. Four years and a general election later -- May is now prime minister -- the bill was finalized and passed on Wednesday by both parliamentary houses. But civil liberties groups have long criticized the bill, with some arguing that the law will let the UK government "document everything we do online". It's no wonder, because it basically does. The law will force internet providers to record every internet customer's top-level web history in real-time for up to a year, which can be accessed by numerous government departments; force companies to decrypt data on demand -- though the government has never been that clear on exactly how it forces foreign firms to do that that; and even disclose any new security features in products before they launch. Not only that, the law also gives the intelligence agencies the power to hack into computers and devices of citizens (known as equipment interference), although some protected professions -- such as journalists and medical staff -- are layered with marginally better protections. []

1 0

... e continua a muoversi (IoT) : [EPIC NEWS] EPIC Alert 23.21
by Diego Latella Nov. 18, 2016

Nov. 18, 2016

All'informazione diffusa in precedenza riguardo al documento del DHS (Min. Interni USA) sulle questioni dei requisiti e metodologie di security per l'IoT aggiungo quanto si legge nella Newsletter di EPIC della quale trovate stralcio sotto. Mi sembra si cominci ad andare nella direzione giusta (ovviamente senza farsi troppe illusioni) D ----- Forwarded message from EPIC Alert <alert(a)epic.org> ----- Date: Thu, 17 Nov 2016 20:47:55 +0000 From: EPIC Alert <alert(a)epic.org> Reply-To: EPIC Alert <alert(a)epic.org> Subject: [EPIC NEWS] EPIC Alert 23.21 To: diego.latella(a)isti.cnr.it EPIC Alert 23.21 November 17, 2016 View this email in your browser (https://epic.org/alert/epic_alert_23.21.html) Defend Privacy. Support EPIC. (https://epic.org/support) EPIC Alert Defend Privacy. Support EPIC. (https://epic.org/donate/) [ ... OMISSIS ...] ** House Members Urge FTC to Examine Internet-of-Things ------------------------------------------------------------ In the wake of October's massive distributed denial of service attack, two members of Congress have sent a letter (https://democrats-energycommerce.house.gov/sites/democrats.energycommerce.h…) to Federal Trade Commission Chairwoman Edith Ramirez urging the FTC to protect consumers from insecure Internet of Things (https://epic.org/privacy/internet/iot/) devices. Rep. Frank Pallone, Jr. and Rep. Jan Schakowsky, senior members of the House Energy and Commerce Committee, wrote that the FTC should "immediately use all the tools at its disposal to ensure that manufacturers of IoT devices implement strong security measures." EPIC is at the forefront of policy work on the Internet of Things, recommending safeguards for connected cars (https://epic.org/privacy/edrs/EPIC-Connected-Cars-Testimony-Nov-18-2015.pdf) , "smart homes," (https://epic.org/2014/05/google-plans-advertising-on-ap.html) 'consumer products (https://epic.org/privacy/ftc/EPIC-FTC-IoT-Cmts.pdf) , and "always on" devices (https://epic.org/privacy/internet/ftc/EPIC-Letter-FTC-AG-Always-On.pdf) . EPIC recently urged (https://epic.org/apa/comments/EPIC-NTIA-on-IOT.pdf) the federal government to establish legal requirements to promote Privacy Enhancing Technologies, limit user tracking, minimize data collection, and "ensure security in both design and operation of Internet-connected devices." [ ... OMISSIS ...] ============================================================ ** (http://www.twitter.com/epicprivacy) ** (http://www.facebook.com/epicprivacy) ** (https://epic.org) You are receiving this email because you registered for biweekly Alerts at EPIC.org. The EPIC Alert mailing list is used only to mail the EPIC Alert and to send notices about EPIC activities. We do not sell, rent or share our mailing list. We also intend to challenge any subpoena or other legal process seeking access to our mailing list. We do not enhance (link to other databases) our mailing list or require your actual name. Our mailing address is: Electronic Privacy Information Center 1718 Connecticut Avenue NW, Suite 200 Washington, DC 20009 Want to change how you receive these emails? You can ** update your preferences (http://epic.us8.list-manage2.com/profile?u=21f268dd7c516fe1339a07557&id=3b1…) or ** unsubscribe from this list (http://epic.us8.list-manage.com/unsubscribe?u=21f268dd7c516fe1339a07557&id=…) Back issues are available at: ** https://www.epic.org/alert (https://www.epic.org/alert) Copyright © 2016 Electronic Privacy Information Center, All rights reserved. ** (http://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Feepurl.com%2FcpdS2j) ** Share (http://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Feepurl.com%2FcpdS2j) ** (http://twitter.com/intent/tweet?text=%5B%5BEPIC+NEWS%5D+EPIC+Alert+23.21: http%3A%2F%2Feepurl.com%2FcpdS2j) ** Tweet (http://twitter.com/intent/tweet?text=%5B%5BEPIC+NEWS%5D+EPIC+Alert+23.21: http%3A%2F%2Feepurl.com%2FcpdS2j) ** (http://us8.forward-to-friend.com/forward?u=21f268dd7c516fe1339a07557&id=836…) ** Forward (http://us8.forward-to-friend.com/forward?u=21f268dd7c516fe1339a07557&id=836…) ----- End forwarded message ----- -- Dott. Diego Latella - Senior Researcher - CNR/ISTI, Via Moruzzi 1, 56124 Pisa, IT (http:www.isti.cnr.it) FM&&T Laboratory (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - phone: +39 0506212982 - mob: +39 348 8283101 - fax +39 0506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

1 0

Facebook buys black market passwords to keep your account safe
by Alberto Cammozzo Nov. 18, 2016

Nov. 18, 2016

Pratica discutibile. Come se comperare droga migliorasse la sicurezza dei tossicodipendenti. Di sicuro incentiva il mercato della droga. <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> [] To check that Facebook members are not choosing these commonly used passwords for their accounts, Stamos revealed, the social network buys passwords hackers are selling on the black market and cross-references them with encrypted passwords used on the site. He described the task as "computationally heavy" but said that as a result of the exercise Facebook has been able to alert tens of millions of users that their passwords needed changing because they weren't strong enough. []

2 2

Chi ha fatto vincere Trump ? Non gli algoritmi, ma lo sfruttamento di milioni di micro-lavoratori globali
by Antonio Casilli Nov. 18, 2016

Nov. 18, 2016

Per coloro che leggono il francese, ho scritto un resoconto su quello che sappiamo sul ruolo delle piattaforme globali di esternalizzazione del micro-lavoro nella vittoria di Trump e più in generale nell'ondata dei fascismi attuale. --- Qui a fait élire Trump ? Pas les algorithmes, mais des millions de “tâcherons du clic” sous-payés http://www.casilli.fr/2016/11/17/qui-a-fait-elire-trump-pas-les-algorithmes… "La montée des fascismes et l’exploitation du digital labor vont de pair. Que se serait-il passé si les droits de ces travailleurs du clics avaient été protégés, s’ils avaient eu la possibilité de résister au chantage au micro-travail, s’il avaient eu une voix pour protester contre et pour refuser de contribuer aux rêves impériaux d’un homme politique clairement dérangé, suivi par une cour de parasites corrompus ? Reconnaître ce travail invisible du clic, et le doter de méthodes de se protéger, est aussi – et avant tout – un enjeux politique global." -- Antonio A. Casilli Associate Professor, Telecom ParisTech Research Fellow, Edgar-Morin Center (EHESS) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS)

1 0

Leibniz's visions - Three centuries after (14-11-2016)
by Francesco Ruggiero Nov. 18, 2016

Nov. 18, 2016

Gentilissimi, Lunedì 14 novembre si svolgerà il Convegno "*Leibniz's visions - Three centuries after*", dedicato alla figura del grande filosofo e scienziato tedesco a trecento anni esatti dalla sua scomparsa. L'evento è organizzato da *Law and Technology*, The Turin Law School project on the information revolution, e si terrà a partire dalle 9.30 presso la *Nuova Aula Magna della Cavallerizza Reale*, Università degli Studi di Torino. All'incontro parteciperanno *Anna Masera, Selmer Bringsjord**, Pompeu Casanovas, Gregory Chaitin, Giovanni Sartor, Luciano Floridi, Micheal Winter e Ugo Pagallo.* Maggiori informazioni sono disponibili all'indirizzo: http://www.lawandtechnology.net/leibnizs_visions/ In allegato la locandina con il programma dell'evento. Cordiali saluti -- Francesco Ruggiero Communication Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino web: http://nexa.polito.it mail: francesco.ruggiero(a)polito.it tel. +39 011 090 7219

2 1

Yochai Benkler on "Platform cooperativism"
by Alessandro Mantelero Nov. 17, 2016

Nov. 17, 2016

https://livestream.com/internetsociety/platformcoop2016/videos/141710602?t=… -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri)

1 0

Microsoft entra nella Linux Foundation
by Diego Giorio Nov. 17, 2016

Nov. 17, 2016

Mi sembra non sia ancora passato in lista: http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-… [http://images.techhive.com/images/article/2016/11/img_0752.jpg-100693949-la…]<http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-…> Linux has won, Microsoft joins the Linux Foundation<http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-…> www.cio.com Microsoft also released public preview of SQL Server for Linux. Saluti a tutti D.

1 0

Titanpointe, The NSA’s Spy Hub in New York, Hidden in Plain Sight
by Alberto Cammozzo Nov. 17, 2016

Nov. 17, 2016

Affascinante lettura su questo edificio, in Manhattan, senza finestre, concepito per essere abitato da macchine e cavi e resistere ad un attacco atomico. Sarebbe la sede, tra il resto, delle apparecchiature di sorveglianza di NSA del programma BLARNEY che mira anche all'Italia. <https://theintercept.com/2016/11/16/the-nsas-spy-hub-in-new-york-hidden-in-…> [] Inside 33 Thomas Street there is a major international “gateway switch,” according to a former AT&T engineer, which routes phone calls between the United States and countries across the world. A series of top-secret NSA memos suggest that the agency has tapped into these calls from a secure facility within the AT&T building. The Manhattan skyscraper appears to be a core location used for a controversial NSA surveillance program that has targeted the communications of the United Nations, the International Monetary Fund, the World Bank, and at least 38 countries, including close U.S. allies such as Germany, Japan, and France. It has long been known that AT&T has cooperated with the NSA on surveillance, but few details have emerged about the role of specific facilities in carrying out the top-secret programs. The Snowden documents provide new information about how NSA equipment has been integrated as part of AT&T’s network in New York City, revealing in unprecedented detail the methods and technology the agency uses to vacuum up communications from the company’s systems. “This is yet more proof that our communications service providers have become, whether willingly or unwillingly, an arm of the surveillance state,” said Elizabeth Goitein, co-director of the liberty and national security program at the Brennan Center for Justice. “The NSA is presumably operating under authorities that enable it to target foreigners, but the fact that it is so deeply embedded in our domestic communications infrastructure should tip people off that the effects of this kind of surveillance cannot be neatly limited to non-Americans.” [] Through this tumultuous time for American spies, the NSA established a new surveillance program under the code name BLARNEY, which was first exposed in a Snowden-leaked slide published in 2013. According to a previously unpublished document provided to The Intercept by Snowden, BLARNEY was established in the early 1970s and, in mid-2013, remained one of the agency’s most significant initiatives. BLARNEY leverages “commercial partnerships” in order to “gain access and exploit foreign intelligence obtained from global networks,” the document states <https://theintercept.com/document/2016/11/16/blarney-program-overview>. It carries out “full take” surveillance — a term that refers to the bulk collection of both content and metadata — under six different categories: counterproliferation, counterterrorism, diplomatic, economic, military, and political. As of July 2010, the NSA had obtained at least 40 court orders <https://theintercept.com/document/2016/11/16/special-source-operations-corp…> for spying under the BLARNEY program, allowing the agency to monitor communications related to multiple countries, companies, and international organizations. Among the approved targets were the International Monetary Fund, the World Bank, the Bank of Japan, the European Union, the United Nations, and at least 38 different countries, including U.S. allies such as Italy, Japan, Brazil, France, Germany, Greece, Mexico, and Cyprus. [] Notably, TITANPOINTE has played a central role in BLARNEY’s operations. NSA documents dated between 2012 and 2013 list the TITANPOINTE surveillance facility among three of BLARNEY’s “core sites” and describe it as “BLARNEY’S site in NYC.” Equipment hosted at TITANPOINTE has been used to monitor international long-distance phone calls, faxes, voice calls routed over the internet (known as Voice-Over-IP), video conferencing, and other internet traffic. Questo commento aggiunge qualche collegamento e mette in evidenza l'operazione di ingegneria legale attraverso la quale verrebbero sorvegliati gli americani non residenti in US abbassando il loro livello di tutela. <https://www.emptywheel.net/2016/11/16/nsa-conducts-704705b-collection-using…> ciao, Alberto

1 0

Google Gets a Seat on the Trump Transition Team
by Alberto Cammozzo Nov. 17, 2016

Nov. 17, 2016

rivelerebbe una strategia antitrust indulgente nel big tech <https://theintercept.com/2016/11/15/google-gets-a-seat-on-the-trump-transit…> Google is among the many major corporations whose surrogates are getting key roles on Donald Trump’s transition team. Joshua Wright has been put in charge of transition efforts at the influential Federal Trade Commission after pulling off the rare revolving-door quadruple-play, moving from Google-supported academic work to government – as an FTC commissioner – back to the Google gravy train and now back to the government. The Intercept has documented how Wright, as a law professor at George Mason University, received Google funding for at least four academic papers, all of which supported Google’s position that it did not violate antitrust laws when it favored its own sites in search engine requests and restricted advertisers from running ads on competitors. George Mason received $762,000 in funding from Google from 2011 to 2013. [] The appointment clarifies to some extent how a Trump administration will operate on antitrust policy, especially as it relates to Silicon Valley. [] Now it look as if Trump’s high-level attacks on his enemies might not flow down to the appointees inside the bureaucracy, who could be more inclined to wave through big media mergers and decline to enforce high-tech collusion. Google is currently facing antitrust allegations in Europe. In May, Politico reported that the FTC planned to take a second look at Google’s search bias, three years after they closed an investigation, despite reported recommendations to prosecute from agency staff. Having someone on the Google payroll twice doing hiring for the new Administration may halt any new investigation at the FTC.

3 3

Ma la vittoria di Donald Trump è tutta colpa di Wikileaks?
by A Dicorinto Nov. 17, 2016

Nov. 17, 2016

Hola-- vi consegno le le mie riflessioni sull'accusa ad Assange di aver fatto perdere la Clinton [...] Se una squadra di calcio perde per un rigore – e il rigore c’è, la colpa non è dell’arbitro ma di chi ha commesso il fallo. Molti dicono che tra le ragioni della sconfitta di *Hillary Clinton* alle presidenziali americane ci sia la vicenda *emailgate*. Cioè la diffusione delle email sue e dello staff elettorale democratico estorte dagli hacker e pubblicate da Wikileaks. Ma Wikileaks ha solo fischiato il fallo. Che è quello che fanno i whistleblower come Assange e Snowden: è nella loro natura, fischiare il fallo.* To blow the whistle* significa proprio “soffiare nel fischietto”. continua qui: http://www.chefuturo.it/2016/11/trump-wikileaks-clinton-emailgate/ -- Arturo Di Corinto www.dicorinto.it ---------------------------------> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003 Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003

2 2