April 2016 - nexa - server-nexa.polito.it

Indagine su privacy ed Internet delle cose

by Mauro Alovisio

*Gent.me /mi * *segnalo dal sito del Garante privacy (www.garanteprivacy.it <http://www.garanteprivacy.it>)* *"Internet delle cose" sotto la lente delle Autorità garanti privacy* *Parte il "Privacy Sweep 2016", l'indagine a tappeto in 29 Paesi del mondo* Prende oggi l'avvio il "Privacy Sweep 2016", un'indagine a carattere internazionale dedicata quest'anno a verificare il rispetto della privacy nell' Internet delle cose - Iot (Internet of Things). L'iniziativa è coordinata dalla Global Privacy Enforcement Network <https://www.privacyenforcement.net/> (GPEN) - la rete internazionale nata per rafforzare la cooperazione tra le Autorità della privacy di diversi Paesi - e prenderà in esame dispositivi molto diversi: dai contatori intelligenti ai termostati regolabili via web, dalle smart car agli orologi intelligenti che misurano il battito cardiaco e la pressione sanguigna, dal controllo a distanza degli ascensori ai frigoriferi che segnalano la scadenza dei cibi. Il Garante italiano concentrerà la sua azione in particolare sulla domotica per verificare il grado di trasparenza nell'uso delle informazioni personali dei consumatori e il rispetto delle norme sulla protezione di dati da parte delle aziende, anche multinazionali, operanti nel settore. Oltre a quella italiana, altre 28 Autorità garanti della privacy di altrettanti Paesi del mondo parteciperanno all'indagine. Le Autorità valuteranno anche i possibili interventi nei confronti delle aziende cui dispositivi o servizi risulteranno in violazione delle norme sulla protezione dei dati. I risultati dell'indagine saranno resi pubblici il prossimo settembre. Lo "Sweep" ("indagine a tappeto") sull'Iot fa seguito ad analoghe indagini effettuate negli anni scorsi che hanno preso in esame i servizi online destinati a minori, le informative privacy su siti web e le app per la telefonia mobile. "L'Internet delle Cose è carico di promesse, che vanno da una migliore *assistenza sanitaria ad un sempre maggiore efficientamento delle nostre abitazioni *- sottolinea Antonello Soro, Presidente del Garante per la protezione dei dati personali - *Ma questi obiettivi devono essere raggiunti in piena trasparenza, informando chiaramente e le persone sull'utilizzo che viene fatto dei loro dati personali, proteggendo questi dati da violazioni e usi impropri con adeguate misure di sicurezza e rispettando la libertà delle persone. E' essenziale adottare un approccio internazionale alla questione Iot: un'azienda se opera in modo non corretto nei confronti degli utenti può violare, ovunque essa si trovi, le norme sulla protezione dei dati e minare la fiducia nei nuovi oggetti intelligenti che dialogano e interagiscono tra loro"*. *Roma, 11 aprile 2016* *cordiali saluti * *Mauro Alovisio *

April 11, 2016

Re: [nexa] La questione dei captatori all'esame della Sezioni Unite

by Diego Giorio

Ne abbiamo parlato diffusamente nell'ultimo e-privacy: http://e-privacy.winstonsmith.org/ Per una volta, pur con sfumature ed aperture maggiori o minori, tutti i relatori erano concordi: l'uso del captatore a volte è necessario, ma è importante che avvenga solo dietro ordine della magistratura e, per quanto possibile, limitatamente allo scopo dell'indagine: se si vuole sentire una conversazione non si devono monitorare gli spostamenti, se si deve controllare i file non si devono attivare altre funzioni. Inoltre è importante la possibilità di un controllo democratico, per cui, ad indagine conclusa, si deve poter verificare le ragioni che hanno portato all'installazione, che deve avvenire in modo mirato e non facendo "pesca a strascico" ad esempio cercando di inoculare tutti i membri di un circolo o di un'associazione religiosa perchè potenzialmente due o tre membri sono pericolosi. Infine, e questo è uno dei punti più difficili perchè i software sono proprietari, per garantire il diritto di difesa occorrerebbe che l'avvocato difensore potesse accedere ai sorgenti per poter verificare, tramite un esperto, che le prove dell'accusa sono fondate. Questo in estrema sintesi, gli atti del convegno sono tutti disponibili. Saluti a tutti D. > To: nexa(a)server-nexa.polito.it > From: stefano(a)quintarelli.it > Date: Mon, 11 Apr 2016 13:04:28 +0200 > Subject: Re: [nexa] La questione dei captatori all'esame della Sezioni Unite > > ciao a tutti > secondo noi, quali sarebbero i ccasi di ammissibilita' e quali i > principi che dovrebbero implementare/rispettare ? > ciao, s. > > On 11/04/2016 08:50, Diego Giorio wrote: > > Segnalo questo articolo sui captatori informatici, o, secondo la > > dicitura della Corte, sull'utilizzo dell'agente intrusore. > > > > http://www.ilquotidianodellapa.it/_contents/news/2016/aprile/1460281042872.… > > > > Sintetizza alcuni punti problematici della questione, sottolineandone al > > contempo la necessità in alcuni casi. > > > > Buona settimana a tutti > > > > D. > > > > > > _______________________________________________ > > nexa mailing list > > nexa(a)server-nexa.polito.it > > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa

April 11, 2016

Re: [nexa] La questione dei captatori all'esame della Sezioni Unite

by Stefano Quintarelli

ciao a tutti secondo noi, quali sarebbero i ccasi di ammissibilita' e quali i principi che dovrebbero implementare/rispettare ? ciao, s. On 11/04/2016 08:50, Diego Giorio wrote: > Segnalo questo articolo sui captatori informatici, o, secondo la > dicitura della Corte, sull'utilizzo dell'agente intrusore. > > http://www.ilquotidianodellapa.it/_contents/news/2016/aprile/1460281042872.… > > Sintetizza alcuni punti problematici della questione, sottolineandone al > contempo la necessità in alcuni casi. > > Buona settimana a tutti > > D. > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >

April 11, 2016

La questione dei captatori all'esame della Sezioni Unite

by Diego Giorio

Segnalo questo articolo sui captatori informatici, o, secondo la dicitura della Corte, sull'utilizzo dell'agente intrusore. http://www.ilquotidianodellapa.it/_contents/news/2016/aprile/1460281042872.… Sintetizza alcuni punti problematici della questione, sottolineandone al contempo la necessità in alcuni casi. Buona settimana a tutti D.

April 11, 2016

Re: [nexa] Atlantic: "How a Cashless Society Could Embolden Big Brother"

by David Orban

La demonizzazione dell'implementazione dell'anonimato nel digital cash, con lo spauracchio dei cavalieri dell'apocalisse del terrorismo, riciclaggio del denaro sporco, traffico di droga e pedofilia, è significativo. Ci sono iniziative valide come Z Cash per riguadagnare le proprietà del contante nelle monete matematiche, superando le limitazioni pseudonime di Bitcoin. https://z.cash/ David Orban "What is the question that I should be asking?" twitter, linkedin, etc: davidorban 2016-04-10 17:29 GMT+02:00 J.C. DE MARTIN <demartin(a)polito.it>: > E' qualche anno che mi preoccupa come > molte persone accettino in maniera totalmente > acritica la prospettiva di una società senza contanti > (o di contanti tracciabili in maniera fine grazie > a RFID). > > Certo che dobbiamo combattere l'evasione > e la criminalità. > > Ma pensare di farlo eliminando il "cash" > significa sovravvalutare gli effetti positivi > e sottovalutare i potenziali gravi effetti negativi. > > Vedere anche > http://blog.francetvinfo.fr/classe-eco/2016/02/22/faut-il-eliminer-les-gros… > > juan carlos > > How a Cashless Society Could Embolden Big Brother > > > http://www.theatlantic.com/technology/archive/2016/04/cashless-society/4774… > > But wherever information gathers and flows, two predators follow > closely behind it: censorship and surveillance. The case of > digital money is no exception. Where money becomes a series of > signals, it can be censored; where money becomes information, it > will inform on you. > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >

April 10, 2016

Atlantic: "How a Cashless Society Could Embolden Big Brother"

by J.C. DE MARTIN

E' qualche anno che mi preoccupa come molte persone accettino in maniera totalmente acritica la prospettiva di una società senza contanti (o di contanti tracciabili in maniera fine grazie a RFID). Certo che dobbiamo combattere l'evasione e la criminalità. Ma pensare di farlo eliminando il "cash" significa sovravvalutare gli effetti positivi e sottovalutare i potenziali gravi effetti negativi. Vedere anche http://blog.francetvinfo.fr/classe-eco/2016/02/22/faut-il-eliminer-les-gros… juan carlos How a Cashless Society Could Embolden Big Brother http://www.theatlantic.com/technology/archive/2016/04/cashless-society/4774… But wherever information gathers and flows, two predators follow closely behind it: censorship and surveillance. The case of digital money is no exception. Where money becomes a series of signals, it can be censored; where money becomes information, it will inform on you.

April 10, 2016

buona lettura

by Mariella Berra

http://www.economist.com/news/leaders/21696521-mark-zuckerberg-prepares-fig… -- Prof.ssa Mariella Berra Dipartimento di Culture, Politica e Società Università di Torino tel.+390116702606

April 10, 2016

NYT: "Congratulations! You’ve Been Fired"

by J.C. DE MARTIN

*Congratulations! You’ve Been Fired* By DAN LYONS APRIL 9, 2016 AT HubSpot, the software company where I worked for almost two years, when you got fired, it was called “graduation.” We all would get a cheery email from the boss saying, “Team, just letting you know that X has graduated and we’re all excited to see how she uses her superpowers in her next big adventure.” One day this happened to a friend of mine. She was 35, had been with the company for four years, and was told without explanation by her 28-year-old manager that she had two weeks to get out. On her last day, that manager organized a farewell party for her. It was surreal, and cruel, but everyone at HubSpot acted as if this were perfectly normal. We were told we were “rock stars” who were “inspiring people” and “changing the world,” but in truth we were disposable. Many tech companies are proud of this kind of culture. Amazon keeps getting called out for its bruising environment, most notably in a long exposé in this newspaper last year. On Tuesday, Jeff Bezos, the founder of Amazon, said that people who didn’t like the company’s grueling environment were free to work elsewhere. “We never claim that our approach is the right one — just that it’s ours — and over the last two decades, we’ve assembled a group of like-minded people,” he wrote in a letter to shareholders. […] Continua qui: http://www.nytimes.com/2016/04/10/opinion/sunday/congratulations-youve-been…

April 10, 2016

Fwd: [New post] RightsCon 2016: Corporate Accountability Enters the Mainstream

by J.C. DE MARTIN

-------- Forwarded Message -------- Subject: [New post] RightsCon 2016: Corporate Accountability Enters the Mainstream Resent-Date: Fri, 08 Apr 2016 19:20:54 +0200 Resent-From: d004620(a)polito.it Date: Fri, 8 Apr 2016 17:20:38 +0000 From: Ranking Digital Rights <donotreply(a)wordpress.com> To: demartin(a)polito.it WordPress.com Priya Kumar posted: "Issues of transparency, encryption, and corporate accountability played a central role at last week’s RightsCon conference in San Francisco, and RDR’s Index and data helped inform many discussions at the annual technology and human rights conference. Part" New post on *Ranking Digital Rights* <https://rankingdigitalrights.org/?author=7> RightsCon 2016: Corporate Accountability Enters the Mainstream <https://rankingdigitalrights.org/2016/04/08/rightscon-2016-corporate-accoun…> by Priya Kumar <https://rankingdigitalrights.org/?author=7> Issues of transparency, encryption, and corporate accountability played a central role at last week’s RightsCon conference in San Francisco, and RDR’s Index and data helped inform many discussions at the annual technology and human rights conference. Participants in various panels and workshops highlighted the value of RDR’s Index. Three public sessions organized by RDR, including a standing room-only session focused on terms of service enforcement <http://rightscon.sched.org/event/6Ih6/opening-the-black-box-understanding-h…>, demonstrated how research-based advocacy can push companies to better respect users’ rights and help to inform policy solutions. rights-con-logoIn a panel about data breaches <http://rightscon.sched.org/event/6Igk/big-data-breaches-the-tipping-point-f…>, security expert Bruce Schneier called RDR’s Index “very valuable,” since the prospect of performing poorly on a public ranking can make companies think twice about the cost of collecting too much user information. In a session on institutionalizing human rights commitments <http://rightscon.sched.org/event/6Mhp/privacy-free-expression-institutional…> at companies, Nicole Karlebach and Katie Shay from Yahoo’s Business and Human Rights Program described how engaging with civil society and research organizations, including RDR, gives them useful perspectives to share with other staff at Yahoo. At a session on remedy <https://rightscon.sched.org/event/6K13/remedying-wrongs-ensuring-enabling-a…>, Yves Nissim from the French telecom Orange said the company is using the RDR Index and methodology as a guide in its efforts to disclose more information about its practices. In addition, representatives from companies not included in the Index said they used RDR’s methodology to evaluate their own policies. Many discussions at RightsCon highlighted the need for more transparency about company practices that relate to freedom of expression and privacy. For example, while some companies publish rules or community standards that explain what content is and is not permitted on their service, users are left in the dark about how companies enforce those rules. Panelists discuss terms of service enforcement at a public session organized by RDR. Panelists discuss terms of service enforcement at a public session organized by RDR. Panelists at RDR’s session on terms of service enforcement <http://rightscon.sched.org/event/6Ih6/opening-the-black-box-understanding-h…> explained that this lack of clarity means that users can be locked out of their accounts for reasons they don’t understand. Such uncertainty can erode user trust in companies, they added. A few company representatives at the session shared the difficulties they face in reporting such information, which include providing enough context so the public understands what the data means. This mix of participants provided meaningful dialogue on a concern where disclosure is sorely lacking <https://rankingdigitalrights.org/index2015/indicators/f9>. Several projects in addition to RDR’s Index are pushing for greater respect for users’ rights. At RightsCon, researchers from the Center for Technology and Society at FGV-Rio de Janeiro discussed their draft findings on how the terms of service of 50 online platforms comply with the human rights of freedom of expression, privacy, and due process. In addition, OnlineCensorship.org released its first report <https://onlinecensorship.org/news-and-analysis/onlinecensorship-org-launche…>, which found that users whose content is removed may not understand why and that users are either unaware or unsatisfied with appeal mechanisms. While corporate transparency regarding terms of enforcement is nearly non-existent, reporting on government requests for user information has emerged as a standard practice. The Transparency Reporting Toolkit <https://www.newamerica.org/oti/the-transparency-reporting-toolkit/>, a project by the Open Technology Institute and Berkman Center, also launched at RightsCon. It identified best practices and aims to develop a platform that companies can use to standardize their reports, enabling greater comparison and more in-depth analysis of the reports. Throughout the conference, RDR connected with members of these projects as well as others from civil society, academia, companies, and the investor community. We organized a private session to discuss possible revisions to the Index methodology <https://rankingdigitalrights.org/project-documents/2015-indicators/>. Participants described how the Index has informed their work and provided feedback about how the indicators relate to the human rights concerns that users face when using such products and services. This feedback helps ensure that RDR’s Index remains a relevant measure to push for greater respect for users’ rights. At a session on incorporating software and device companies <http://rightscon.sched.org/event/6Igc/ranking-tech-companies-part-2-softwar…> in the Index, technologists and other experts brainstormed how to frame indicators on such topics as encryption and the privacy practices of apps in app stores. The conversation helped highlight the types of public disclosure RDR can evaluate for software and device companies. While RDR plans <https://rankingdigitalrights.org/2016/03/24/next-steps-rdr/> to expand the types of companies its Index covers, one project alone can’t cover the full global universe of companies in this sector. RDR has encouraged other civil society and research organizations to use the methodology to conduct national or regional versions of the Index. To promote such projects, we teamed up with EFF on a session to share lessons learned <http://rightscon.sched.org/event/6Ihb/ranking-ict-companies-on-digital-righ…> about ranking companies in different parts of the world. Participants discussed the importance of considering local culture when conducting such research efforts. For example, in regions where where companies are not used to engaging with civil society or academic researchers about digital rights issues, researchers can provide examples of other companies in other countries and regions that have changed in response to public pressure. This can underscore the positive intentions of such research. The RDR team at RightsCon The RDR team at RightsCon RDR team members also participated in several other panels and workshops at the event. Rebecca MacKinnon spoke at sessions aboutcybersecurity and human rights <http://rightscon.sched.org/event/6IhM/driving-a-paradigm-shift-toward-human…> and multi-stakeholder processes <http://rightscon.sched.org/event/6Ihn/the-new-policymakers-the-benefits-and…>. Allon Bar spoke about global perspectives on privacy <http://rightscon.sched.org/event/6Igl/what-do-privacy-and-transparency-mean…> as well asuniversal principles for the internet <http://rightscon.sched.org/event/6MhU/following-connecting-the-dots-how-to-…>. Priya Kumar discussed data breaches <http://rightscon.sched.org/event/6Igk/big-data-breaches-the-tipping-point-f…>, terms of service and human rights <http://rightscon.sched.org/event/6IhA/assessing-terms-of-service-compliance…>, and freedom of assembly online <http://rightscon.sched.org/event/6IhH/protest-privacy-and-the-private-sector>. Ciprian Iancu presented on digital literacy and digital security training <http://rightscon.sched.org/event/6QMT/digital-trainer-fest-3#>. Priya’s comments on data breaches and privacy were quoted in a Consumer Reports blog post <http://www.consumerreports.org/privacy/how-to-prevent-data-breaches/>. Allon’s comments on internet openness were included in a UNESCO article <http://www.unesco.org/new/en/communication-and-information/resources/news-a…>. The Committee to Protect Journalists also highlighted RDR’s involvement with RightsCon in a blog post <https://www.cpj.org/blog/2016/03/how-rightscon-brings-press-freedom-technol…>. Overall, RightsCon was an exciting opportunity to connect with stakeholders, share our insights, and learn from others. We look forward to reconvening at RightsCon 2017 in Brussels! *Priya Kumar <https://rankingdigitalrights.org/?author=7>* | April 8, 2016 at 1:20 pm | Categories: Blog <https://rankingdigitalrights.org/?taxonomy=category&term=blog>, Events <https://rankingdigitalrights.org/?taxonomy=category&term=events> | URL: https://rankingdigitalrights.org/?p=1537 Comment <https://rankingdigitalrights.org/2016/04/08/rightscon-2016-corporate-accoun…> See all comments <https://rankingdigitalrights.org/2016/04/08/rightscon-2016-corporate-accoun…> <https://subscribe.wordpress.com/?key=0050f54bb578252e5c763e7edea9462a&email…> *Trouble clicking?* Copy and paste this URL into your browser: https://rankingdigitalrights.org/2016/04/08/rightscon-2016-corporate-accoun…

April 9, 2016

Parere dell'avvocato generale sul link a siti pirata

by Diego Giorio

http://curia.europa.eu/juris/document/document.jsf?text=&docid=175626&pageI… Segnalo questo parere, secondo cui il link a siti con contenuti pirata di per sè non sarebbe reato Saluti e buon WE a tutti D.

April 9, 2016