November 2016 - nexa - server-nexa.polito.it

Britain has passed the 'most extreme surveillance law ever passed in a democracy'

by Alberto Cammozzo

The law forces UK internet providers to store browsing histories -- including domains visited -- for one year, in case of police investigations. <http://www.zdnet.com/article/snoopers-charter-expansive-new-spying-powers-b…> It's 2016 going on 1984. The UK has just passed a massive expansion in surveillance powers, which critics have called "terrifying" and "dangerous". The new law, dubbed the "snoopers' charter", was introduced by then-home secretary Theresa May in 2012, and took two attempts to get passed into law following breakdowns in the previous coalition government. Four years and a general election later -- May is now prime minister -- the bill was finalized and passed on Wednesday by both parliamentary houses. But civil liberties groups have long criticized the bill, with some arguing that the law will let the UK government "document everything we do online". It's no wonder, because it basically does. The law will force internet providers to record every internet customer's top-level web history in real-time for up to a year, which can be accessed by numerous government departments; force companies to decrypt data on demand -- though the government has never been that clear on exactly how it forces foreign firms to do that that; and even disclose any new security features in products before they launch. Not only that, the law also gives the intelligence agencies the power to hack into computers and devices of citizens (known as equipment interference), although some protected professions -- such as journalists and medical staff -- are layered with marginally better protections. []

Nov. 20, 2016

... e continua a muoversi (IoT) : [EPIC NEWS] EPIC Alert 23.21

by Diego Latella

All'informazione diffusa in precedenza riguardo al documento del DHS (Min. Interni USA) sulle questioni dei requisiti e metodologie di security per l'IoT aggiungo quanto si legge nella Newsletter di EPIC della quale trovate stralcio sotto. Mi sembra si cominci ad andare nella direzione giusta (ovviamente senza farsi troppe illusioni) D ----- Forwarded message from EPIC Alert <alert(a)epic.org> ----- Date: Thu, 17 Nov 2016 20:47:55 +0000 From: EPIC Alert <alert(a)epic.org> Reply-To: EPIC Alert <alert(a)epic.org> Subject: [EPIC NEWS] EPIC Alert 23.21 To: diego.latella(a)isti.cnr.it EPIC Alert 23.21 November 17, 2016 View this email in your browser (https://epic.org/alert/epic_alert_23.21.html) Defend Privacy. Support EPIC. (https://epic.org/support) EPIC Alert Defend Privacy. Support EPIC. (https://epic.org/donate/) [ ... OMISSIS ...] ** House Members Urge FTC to Examine Internet-of-Things ------------------------------------------------------------ In the wake of October's massive distributed denial of service attack, two members of Congress have sent a letter (https://democrats-energycommerce.house.gov/sites/democrats.energycommerce.h…) to Federal Trade Commission Chairwoman Edith Ramirez urging the FTC to protect consumers from insecure Internet of Things (https://epic.org/privacy/internet/iot/) devices. Rep. Frank Pallone, Jr. and Rep. Jan Schakowsky, senior members of the House Energy and Commerce Committee, wrote that the FTC should "immediately use all the tools at its disposal to ensure that manufacturers of IoT devices implement strong security measures." EPIC is at the forefront of policy work on the Internet of Things, recommending safeguards for connected cars (https://epic.org/privacy/edrs/EPIC-Connected-Cars-Testimony-Nov-18-2015.pdf) , "smart homes," (https://epic.org/2014/05/google-plans-advertising-on-ap.html) 'consumer products (https://epic.org/privacy/ftc/EPIC-FTC-IoT-Cmts.pdf) , and "always on" devices (https://epic.org/privacy/internet/ftc/EPIC-Letter-FTC-AG-Always-On.pdf) . EPIC recently urged (https://epic.org/apa/comments/EPIC-NTIA-on-IOT.pdf) the federal government to establish legal requirements to promote Privacy Enhancing Technologies, limit user tracking, minimize data collection, and "ensure security in both design and operation of Internet-connected devices." [ ... OMISSIS ...] ============================================================ ** (http://www.twitter.com/epicprivacy) ** (http://www.facebook.com/epicprivacy) ** (https://epic.org) You are receiving this email because you registered for biweekly Alerts at EPIC.org. The EPIC Alert mailing list is used only to mail the EPIC Alert and to send notices about EPIC activities. We do not sell, rent or share our mailing list. We also intend to challenge any subpoena or other legal process seeking access to our mailing list. We do not enhance (link to other databases) our mailing list or require your actual name. Our mailing address is: Electronic Privacy Information Center 1718 Connecticut Avenue NW, Suite 200 Washington, DC 20009 Want to change how you receive these emails? You can ** update your preferences (http://epic.us8.list-manage2.com/profile?u=21f268dd7c516fe1339a07557&id=3b1…) or ** unsubscribe from this list (http://epic.us8.list-manage.com/unsubscribe?u=21f268dd7c516fe1339a07557&id=…) Back issues are available at: ** https://www.epic.org/alert (https://www.epic.org/alert) Copyright © 2016 Electronic Privacy Information Center, All rights reserved. ** (http://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Feepurl.com%2FcpdS2j) ** Share (http://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Feepurl.com%2FcpdS2j) ** (http://twitter.com/intent/tweet?text=%5B%5BEPIC+NEWS%5D+EPIC+Alert+23.21: http%3A%2F%2Feepurl.com%2FcpdS2j) ** Tweet (http://twitter.com/intent/tweet?text=%5B%5BEPIC+NEWS%5D+EPIC+Alert+23.21: http%3A%2F%2Feepurl.com%2FcpdS2j) ** (http://us8.forward-to-friend.com/forward?u=21f268dd7c516fe1339a07557&id=836…) ** Forward (http://us8.forward-to-friend.com/forward?u=21f268dd7c516fe1339a07557&id=836…) ----- End forwarded message ----- -- Dott. Diego Latella - Senior Researcher - CNR/ISTI, Via Moruzzi 1, 56124 Pisa, IT (http:www.isti.cnr.it) FM&&T Laboratory (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - phone: +39 0506212982 - mob: +39 348 8283101 - fax +39 0506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

Nov. 18, 2016

Re: [nexa] Facebook buys black market passwords to keep your account safe

by Alberto Cammozzo

Credo sia molto probabile che gli aquirenti siano multipli. Non è chiaro dall'articolo se comprino dizionari di sole password o credenziali complete di username. Le prime si trovano facilmente fuori dal mercato nero, mentre non è chiaro a che cosa se ne farebbe FB delle seconde. Ciao, A On 11/18/2016 02:23 PM, Diego Giorio wrote: > > O come pagare un killer perchè non uccida: si fa aumentare il prezzo e > si genera una specie di asta. > > > Ma quel che mi sconcerta di più è un altro aspetto. Posto che > normalmente questi soggetti non sono propriamente rispettosi della > legge e delle condizioni contrattuali, chi assicura che le stesse > informazioni non vengano comunque vendute a più acquirenti? > > > Saluti a tutti > > > D. > > > > ------------------------------------------------------------------------ > *From:* nexa <nexa-bounces(a)server-nexa.polito.it> on behalf of Alberto > Cammozzo <ac+nexa(a)zeromx.net> > *Sent:* Friday, November 18, 2016 1:05 PM > *To:* nexa(a)server-nexa.polito.it > *Subject:* [nexa] Facebook buys black market passwords to keep your > account safe > > Pratica discutibile. Come se comperare droga migliorasse la sicurezza > dei tossicodipendenti. Di sicuro incentiva il mercato della droga. > > <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> > > <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> > > Facebook buys black market passwords to keep your account safe > <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> > www.cnet.com > The company's security chief says account safety is about more than > just building secure software. > > > > [] > To check that Facebook members are not choosing these commonly used > passwords for their accounts, Stamos revealed, the social network buys > passwords hackers are selling on the black market and cross-references > them with encrypted passwords used on the site. He described the task as > "computationally heavy" but said that as a result of the exercise > Facebook has been able to alert tens of millions of users that their > passwords needed changing because they weren't strong enough. > [] > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > nexaInfo Page - Polito > <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa> > server-nexa.polito.it > nexa -- Public list for news and information sharing of the NEXA > Center for Internet & Society (Politecnico di Torino) About nexa > > > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa

Nov. 18, 2016

Re: [nexa] Facebook buys black market passwords to keep your account safe

by Diego Giorio

O come pagare un killer perchè non uccida: si fa aumentare il prezzo e si genera una specie di asta. Ma quel che mi sconcerta di più è un altro aspetto. Posto che normalmente questi soggetti non sono propriamente rispettosi della legge e delle condizioni contrattuali, chi assicura che le stesse informazioni non vengano comunque vendute a più acquirenti? Saluti a tutti D. ________________________________ From: nexa <nexa-bounces(a)server-nexa.polito.it> on behalf of Alberto Cammozzo <ac+nexa(a)zeromx.net> Sent: Friday, November 18, 2016 1:05 PM To: nexa(a)server-nexa.polito.it Subject: [nexa] Facebook buys black market passwords to keep your account safe Pratica discutibile. Come se comperare droga migliorasse la sicurezza dei tossicodipendenti. Di sicuro incentiva il mercato della droga. <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> [https://www.bing.com/th?id=OVP.Vd5e2a84c2e258f056a1956f7d751e08e&pid=Api]<https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> Facebook buys black market passwords to keep your account safe<https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> www.cnet.com The company's security chief says account safety is about more than just building secure software. [] To check that Facebook members are not choosing these commonly used passwords for their accounts, Stamos revealed, the social network buys passwords hackers are selling on the black market and cross-references them with encrypted passwords used on the site. He described the task as "computationally heavy" but said that as a result of the exercise Facebook has been able to alert tens of millions of users that their passwords needed changing because they weren't strong enough. [] _______________________________________________ nexa mailing list nexa(a)server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa nexaInfo Page - Polito<https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa> server-nexa.polito.it nexa -- Public list for news and information sharing of the NEXA Center for Internet & Society (Politecnico di Torino) About nexa

Nov. 18, 2016

Facebook buys black market passwords to keep your account safe

by Alberto Cammozzo

Pratica discutibile. Come se comperare droga migliorasse la sicurezza dei tossicodipendenti. Di sicuro incentiva il mercato della droga. <https://www.cnet.com/news/facebook-chief-security-officer-alex-stamos-web-s…> [] To check that Facebook members are not choosing these commonly used passwords for their accounts, Stamos revealed, the social network buys passwords hackers are selling on the black market and cross-references them with encrypted passwords used on the site. He described the task as "computationally heavy" but said that as a result of the exercise Facebook has been able to alert tens of millions of users that their passwords needed changing because they weren't strong enough. []

Nov. 18, 2016

Chi ha fatto vincere Trump ? Non gli algoritmi, ma lo sfruttamento di milioni di micro-lavoratori globali

by Antonio Casilli

Per coloro che leggono il francese, ho scritto un resoconto su quello che sappiamo sul ruolo delle piattaforme globali di esternalizzazione del micro-lavoro nella vittoria di Trump e più in generale nell'ondata dei fascismi attuale. --- Qui a fait élire Trump ? Pas les algorithmes, mais des millions de “tâcherons du clic” sous-payés http://www.casilli.fr/2016/11/17/qui-a-fait-elire-trump-pas-les-algorithmes… "La montée des fascismes et l’exploitation du digital labor vont de pair. Que se serait-il passé si les droits de ces travailleurs du clics avaient été protégés, s’ils avaient eu la possibilité de résister au chantage au micro-travail, s’il avaient eu une voix pour protester contre et pour refuser de contribuer aux rêves impériaux d’un homme politique clairement dérangé, suivi par une cour de parasites corrompus ? Reconnaître ce travail invisible du clic, et le doter de méthodes de se protéger, est aussi – et avant tout – un enjeux politique global." -- Antonio A. Casilli Associate Professor, Telecom ParisTech Research Fellow, Edgar-Morin Center (EHESS) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS)

Nov. 18, 2016

Re: [nexa] Leibniz's visions - Three centuries after (14-11-2016)

by Ugo Pagallo

Cari tutti, sperando fare cosa gradita, ecco i link al convegno leibniziano dello scorso lunedì: - Leibniz’s Visions - Three Centuries After - Sessione mattutina http://www.serviziweb.unito.it/media/?content=8106 - Leibniz’s Visions - Three Centuries After - Sessione pomeridiana http://www.serviziweb.unito.it/media/?content=8108 Cheers u.p. Il giorno 10 novembre 2016 12:56, Francesco Ruggiero < francesco.ruggiero(a)polito.it> ha scritto: > Gentilissimi, > > Lunedì 14 novembre si svolgerà il Convegno "*Leibniz's visions - Three > centuries after*", dedicato alla figura del grande filosofo e scienziato > tedesco a trecento anni esatti dalla sua scomparsa. > L'evento è organizzato da *Law and Technology*, The Turin Law School > project on the information revolution, e si terrà a partire dalle 9.30 > presso la *Nuova Aula Magna della Cavallerizza Reale*, Università degli > Studi di Torino. > > All'incontro parteciperanno *Anna Masera, Selmer Bringsjord**, Pompeu > Casanovas, Gregory Chaitin, Giovanni Sartor, Luciano Floridi, Micheal > Winter e Ugo Pagallo.* > > Maggiori informazioni sono disponibili all'indirizzo: > http://www.lawandtechnology.net/leibnizs_visions/ > > In allegato la locandina con il programma dell'evento. > > Cordiali saluti > > -- > Francesco Ruggiero > Communication Manager > > Nexa Center for Internet & Society > Politecnico di Torino - DAUIN > Corso Duca degli Abruzzi, 24 - 10129 Torino > > web: http://nexa.polito.it > mail: francesco.ruggiero(a)polito.it > tel. +39 011 090 7219 > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > >

Nov. 18, 2016

Yochai Benkler on "Platform cooperativism"

by Alessandro Mantelero

https://livestream.com/internetsociety/platformcoop2016/videos/141710602?t=… -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri)

Nov. 17, 2016

Microsoft entra nella Linux Foundation

by Diego Giorio

Mi sembra non sia ancora passato in lista: http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-… [http://images.techhive.com/images/article/2016/11/img_0752.jpg-100693949-la…]<http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-…> Linux has won, Microsoft joins the Linux Foundation<http://www.cio.com/article/3141918/linux/linux-has-won-microsoft-joins-the-…> www.cio.com Microsoft also released public preview of SQL Server for Linux. Saluti a tutti D.

Nov. 17, 2016

Titanpointe, The NSA’s Spy Hub in New York, Hidden in Plain Sight

by Alberto Cammozzo

Affascinante lettura su questo edificio, in Manhattan, senza finestre, concepito per essere abitato da macchine e cavi e resistere ad un attacco atomico. Sarebbe la sede, tra il resto, delle apparecchiature di sorveglianza di NSA del programma BLARNEY che mira anche all'Italia. <https://theintercept.com/2016/11/16/the-nsas-spy-hub-in-new-york-hidden-in-…> [] Inside 33 Thomas Street there is a major international “gateway switch,” according to a former AT&T engineer, which routes phone calls between the United States and countries across the world. A series of top-secret NSA memos suggest that the agency has tapped into these calls from a secure facility within the AT&T building. The Manhattan skyscraper appears to be a core location used for a controversial NSA surveillance program that has targeted the communications of the United Nations, the International Monetary Fund, the World Bank, and at least 38 countries, including close U.S. allies such as Germany, Japan, and France. It has long been known that AT&T has cooperated with the NSA on surveillance, but few details have emerged about the role of specific facilities in carrying out the top-secret programs. The Snowden documents provide new information about how NSA equipment has been integrated as part of AT&T’s network in New York City, revealing in unprecedented detail the methods and technology the agency uses to vacuum up communications from the company’s systems. “This is yet more proof that our communications service providers have become, whether willingly or unwillingly, an arm of the surveillance state,” said Elizabeth Goitein, co-director of the liberty and national security program at the Brennan Center for Justice. “The NSA is presumably operating under authorities that enable it to target foreigners, but the fact that it is so deeply embedded in our domestic communications infrastructure should tip people off that the effects of this kind of surveillance cannot be neatly limited to non-Americans.” [] Through this tumultuous time for American spies, the NSA established a new surveillance program under the code name BLARNEY, which was first exposed in a Snowden-leaked slide published in 2013. According to a previously unpublished document provided to The Intercept by Snowden, BLARNEY was established in the early 1970s and, in mid-2013, remained one of the agency’s most significant initiatives. BLARNEY leverages “commercial partnerships” in order to “gain access and exploit foreign intelligence obtained from global networks,” the document states <https://theintercept.com/document/2016/11/16/blarney-program-overview>. It carries out “full take” surveillance — a term that refers to the bulk collection of both content and metadata — under six different categories: counterproliferation, counterterrorism, diplomatic, economic, military, and political. As of July 2010, the NSA had obtained at least 40 court orders <https://theintercept.com/document/2016/11/16/special-source-operations-corp…> for spying under the BLARNEY program, allowing the agency to monitor communications related to multiple countries, companies, and international organizations. Among the approved targets were the International Monetary Fund, the World Bank, the Bank of Japan, the European Union, the United Nations, and at least 38 different countries, including U.S. allies such as Italy, Japan, Brazil, France, Germany, Greece, Mexico, and Cyprus. [] Notably, TITANPOINTE has played a central role in BLARNEY’s operations. NSA documents dated between 2012 and 2013 list the TITANPOINTE surveillance facility among three of BLARNEY’s “core sites” and describe it as “BLARNEY’S site in NYC.” Equipment hosted at TITANPOINTE has been used to monitor international long-distance phone calls, faxes, voice calls routed over the internet (known as Voice-Over-IP), video conferencing, and other internet traffic. Questo commento aggiunge qualche collegamento e mette in evidenza l'operazione di ingegneria legale attraverso la quale verrebbero sorvegliati gli americani non residenti in US abbassando il loro livello di tutela. <https://www.emptywheel.net/2016/11/16/nsa-conducts-704705b-collection-using…> ciao, Alberto

Nov. 17, 2016