March 2017 - nexa - server-nexa.polito.it

IFRI Report: "Japan: The Reluctant Cyberpower"

by J.C. DE MARTIN

IFRI - Institut français des relations internationales Franz-Stefan GADY *Japan: The Reluctant Cyberpower* https://www.ifri.org/en/publications/notes-de-lifri/asie-visions/japan-relu… Japan’s cyberdefenses remain underdeveloped compared to the country’s great reliance on information and communications technology. Despite Japan’s initial slow response to the security challenges emerging from cyberspace, this paper posits that cybersecurity under the administration of Japanese Prime Minister Shinzo Abe has moved to the core of the country’s national security policy. The 2020 Olympics Games are a major catalyst for this. cv_av91.jpg Over the last two years the Japanese government has indeed laid the structural and legal foundations for becoming a serious player in cyberspace. That effort, however, remains underfunded and is slowed by overly complicated intergovernmental coordination processes and stovepiping within the government. While Japan remains a reluctant cyberpower with a decidedly defensive outlook and a particularly change-resistant bureaucracy, plagued by vertical compartmentalization, recent initiatives and policies have made it clear that the country is moving in the direction of potentially becoming one of Asia’s more advanced cyberpowers in the not-too-distant future. This paper first outlines an analytical framework used to evaluate Japan’s current standing and progress as a cyberpower: from whole of government (WoG) to whole of nation (WoN) and whole of system (WoS). The following three sections discuss in detail the evolutionary stages in the development of Japan’s national cybersecurity strategy. The last section deals with the Japan Self-Defense Forces’ changing role in cyberspace and how it is slowly embracing a more militarized response to state-sponsored cyberthreats. The administration of Prime Minister Abe has been careful not to abandon the Japan Self-Defense Forces’ defensive posture in cyberspace and has not indicated that it will develop offensive cyberwar capabilities. This, however, may change should the new US administration abandon the United States’ historic solid defense commitment to Japan. In that respect, Japan’s deepening of engagement with like-minded countries will assume even greater importance over the next four years.

March 10, 2017

online le Linee guida per la qualità delle competenze digitali nelle professionalità ICT

by Mauro Alovisio

Gent.me/mi segnalo dal sito Agid interessante consultazione on line ad oggetto: "*Competenze digitali per professionisti ICT**"* Mauro Alovisio *Mercoledì, 8 Marzo, 2017* Il documento è da oggi disponibile in consultazione pubblica su Open.gov.it fino al 26 aprile 2017. [image: Competenze digitali per professionisti ICT: online le linee guida di AgID] Sono online le Linee guida per la qualità delle competenze digitali nelle professionalità ICT (link is external) <http://open.gov.it/linee-guida-competenze-ict/>. Il documento rimarrà in consultazione pubblica su Open.gov.it fino al 26 aprile, per dare la possibilità a chiunque di inviare suggerimenti, modifiche e integrazioni alle diverse sezioni di cui la prima stesura si compone. Le linee guida individuano una serie di profili - appartenenti a 6 diverse aree professionali - richiesti dall’evoluzione del mercato del lavoro e hanno l’obiettivo di fornire alle amministrazioni indicazioni trasversali sull’impiego delle nuove figure professionali, ad esempio rispetto alla standardizzazione di skill e competenze richieste e all’integrazione delle prestazioni di servizi professionali nell’ambito di contratti di servizio ICT. L’obiettivo della consultazione è quello di consentire a diversi soggetti la possibilità di fornire suggerimenti utili per l’evoluzione e la normazione dei profili secondo le necessità del mercato, con lo scopo di garantire la riconoscibilità delle competenze digitali dei professionisti del settore ICT. Le linee guida si inseriscono nel percorso di catalogazione dei profili professionali ICT che aveva portato alla produzione della norma “UNI 11621” da parte di UNINFO, l’organismo delegato alla normazione tecnica in ambito informatico. La norma, che per prima in Europa aveva stabilito le specifiche competenze professionali nel settore ICT, ha definito le “Attività professionali non regolamentate - Profili professionali per l’ICT (link is external) <http://store.uni.com/magento-1.4.0.1/index.php/catalogsearch/result/?fullte…> ”. Tag: competenze digitali <http://www.agid.gov.it/tags/competenze-digitali> - [image: Facebook logo] Facebook <http://www.facebook.com/sharer.php?u=http%3A//www.agid.gov.it/notizie/2017/…> - [image: Twitter logo] Twitter <http://twitter.com/share?url=http%3A//www.agid.gov.it/notizie/2017/03/08/co…> Ultimo aggiornamento 08 Marzo 2017

March 9, 2017

Lancio di ENDL (European Network on Digital Labour)

by Antonio Casilli

Car* tutt*, una email rapida per annunciarvi il lancio di ENDL (European Network on Digital Labour). http://www.i-3.fr/evenement/birth-of-endl-the-european-network-on-digital-l… Prossimi incontri: - Londra 30 marzo 2017: Digital Labour meetup https://www.oii.ox.ac.uk/join-our-london-digital-labour-meetup/ - Parigi 3 aprile 2017: seminario sulla commercial content moderation con Sarah T. Roberts (UCLA) http://www.i-3.fr/evenement/social-medias-clean-up-crew-commercial-content-… - Parigi 10 aprile 2017: seminario su Amazon Mechanical Turk con Mary Gray (Microsoft Research) Per saperne di più, seguite l'account twitter: @ENDL_Official Alla prossima, ---a -- Antonio A. Casilli Associate Professor, Telecom ParisTech Research Fellow, Edgar-Morin Center (EHESS) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS)

March 9, 2017

Corte di Giustizia su diritto all'oblio e pubblici registri

by Alessandro Mantelero

Corte di giustizia dell’Unione europea COMUNICATO STAMPA n. 27/17 Lussemburgo, 9 marzo 2017 Sentenza nella causa C-398/15 Camera di Commercio, Industria, Artigianato e Agricoltura di Lecce/Salvatore Manni "La Corte dichiara che non esiste diritto all’oblio per i dati personali contenuti nel registro delle imprese Tuttavia, decorso un periodo sufficientemente lungo dopo lo scioglimento della società interessata, gli Stati membri possono prevedere in casi eccezionali che l’accesso dei terzi a tali dati sia limitato" http://curia.europa.eu/jcms/upload/docs/application/pdf/2017-03/cp170027it.… Stante a queste prime note la Corte sembra aver condiviso l'opinione critica rispetto alla configurabilità di un diritto all'oblio nel caso di pubblici registri. Una conclusione che, personalmente, condivido in pieno e che avevo espresso nell'articolo che la corte riporta fra i riferimenti di dottrina al caso ("it seems likely that the ECJ, in replying to the questions posed by the Italian judges, will deny any restriction to the access to data provided by the Commercial Register [...] New and different regimes should therefore be considered, but this challenge would better be met by the lawmakers than by the courts."). http://curia.europa.eu/juris/fiche.jsf?id=C%3B398%3B15%3BRP%3B1%3BP%3B1%3BC… AM -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri) ________________________________________ Le informazioni trasmesse sono indirizzate esclusivamente alla persona o al soggetto destinatario e sono da intendersi confidenziali e riservate. Ogni trasmissione, inoltro, diffusione o altro uso di queste informazioni a terzi differenti dal destinatario è proibita. Se ricevete questa comunicazione per errore, contattate il mittente e cancellate le informazioni da ogni computer. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

March 9, 2017

consultazione on line sulla domanda di open data a partire dall'8 marzo

by Mauro Alovisio

Gent.mi/me segnalo consultazione on line sugli Open data promossa dal Ministero dello sviluppo economico Dall’ 8 marzo e per 30 giorni il Ministero lancia una consultazione pubblica on line <http://questionari.mise.gov.it/index.php/464811/lang-it> in cui gli utenti possono indicare i dati di maggiore interesse. Grazie a questa consultazione il Ministero potrà recepire gli interessi specifici dei propri utenti e costruire nuovi dataset per migliorare il servizio Open data già online sul sito. http://www.mise.gov.it/index.php/it/per-i-media/notizie/2036125-saa-2017-se… Cordiali saluti Mauro Alovisio

March 8, 2017

The CIA Campaign to Steal Apple’s Secrets

by Alberto Cammozzo

<https://theintercept.com/2015/03/10/ispy-cia-campaign-steal-apples-secrets/> RESEARCHERS WORKING with the Central Intelligence Agency have conducted a multi-year, sustained effort to break the security of Apple’s iPhones and iPads, according to top-secret documents obtained by The Intercept. The security researchers presented their latest tactics and achievements at a secret annual gathering, called the “Jamboree,” where attendees discussed strategies for exploiting security flaws in household and commercial electronics. The conferences have spanned nearly a decade, with the first CIA-sponsored meeting taking place a year before the first iPhone was released. By targeting essential security keys used to encrypt data stored on Apple’s devices, the researchers have sought to thwart the company’s attempts to provide mobile security to hundreds of millions of Apple customers across the globe. Studying both “physical” and “non-invasive” techniques, U.S. government-sponsored research has been aimed at discovering ways to decrypt and ultimately penetrate Apple’s encrypted firmware. This could enable spies to plant malicious code on Apple devices and seek out potential vulnerabilities in other parts of the iPhone and iPad currently masked by encryption. The CIA declined to comment for this story. The security researchers also claimed they had created a modified version of Apple’s proprietary software development tool, Xcode, which could sneak surveillance backdoors into any apps or programs created using the tool. Xcode, which is distributed by Apple to hundreds of thousands of developers, is used to create apps that are sold through Apple’s App Store. The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could “force all iOS applications to send embedded data to a listening post.” It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode. Researchers also claimed they had successfully modified the OS X updater, a program used to deliver updates to laptop and desktop computers, to install a “keylogger.” Other presentations at the CIA conference have focused on the products of Apple’s competitors, including Microsoft’s BitLocker encryption system, which is used widely on laptop and desktop computers running premium editions of Windows. [...] The Apple research is consistent with a much broader secret U.S. government program to analyze “secure communications products, both foreign and domestic” in order to “develop exploitation capabilities against the authentication and encryption schemes,” according to the 2013 Congressional Budget Justification. Known widely as the “Black Budget,” the top-secret CBJ was provided to /The Intercept/ by Snowden and gives a sprawling overview of the U.S. intelligence community’s spending and architecture. The White House did not respond to a request for comment. As of 2013, according to the classified budget, U.S. intelligence agencies were creating new capabilities against dozens of commercially produced security products, including those made by American companies, to seek out vulnerabilities. [..]

March 8, 2017

Google Can’t Avoid Privacy Suit Over Biometric Face Prints

by Alberto Cammozzo

Via libera anche contro Google secondo il Biometric Information Privacy Act <https://bol.bna.com/google-cant-avoid-privacy-suit-over-biometric-face-prin…> Google users who say the company’s facial recognition technology flouts their privacy rights won the first round of a court fight. A federal judge in Chicago ruled Monday that the world’s largest search engine must face claims that it violated the privacy of millions of users by gathering and storing biometric data without their consent. Facebook Inc. is fighting similar claims in San Francisco federal court. U.S. District Judge Edmond E. Chang’s decision to let the class-action case proceed might leave Google on the hook under a unique Illinois law for fines of $1,000 to $5,000 each time a person’s image is used without permission. A court victory for consumers could lead to restrictions similar to those in Europe and Canada on Google’s use of biometrics in the U.S. Courts have struggled over what qualifies as an injury to pursue a privacy case in lawsuits accusing Facebook and Google of siphoning users’ personal information from e-mails and monitoring their web-browsing habits. Suits over selling the data to advertisers have often failed. Alphabet Inc.’s Google contended the images at issue are excluded from Illinois’ Biometric Information Privacy Act because they are derived from photographs. The digital face prints wouldn’t qualify as “biometric identifiers” under the law unless they were obtained from in-person scans, the company said in a court filing. Chang rejected that argument. “A photograph is just that — a photograph, not a scan of face geometry, which is a set of biology-based measurements,” he wrote. “If Google simply captured and stored the photographs and did not measure and generate scans of face geometry, then there would be no violation of the act,” the judge said. Google spokesman William Fitzgerald didn’t immediately respond to a request for comment on Monday’s ruling after regular business hours. The judge also dismissed Google’s argument that the Illinois law violates interstate commerce protections in the U.S. Constitution by regulating conduct beyond the state’s boundaries. The company said it can’t always know whether a photo was taken in Illinois, or has some connection to the state.” Lawyers for the users said that to comply with the Illinois law, the company must stop using its scanning software to catalog the facial geometry of individuals in photographs that are uploaded within the state to the company’s cloud-based Google Photos. /The cases are Rivera v. Google, 16-cv-02714, and Weiss v. Google Inc., 16-cv-02870, U.S. District Court, Northern District of Illinois (Chicago)./

March 8, 2017

detect travellers with hostile intentions

by Alberto Cammozzo

L'aeroporto è sempre più il laboratorio autoritario biometrico-digitale: questo robot-macchina della verità è stato testato in UE, in due aeroporti romeni. Rileva iride, impronta vocale, traccia lo sguardo, fa riconoscimento facciale, pressione dei piedi sul pavimento per rilevare viaggiatori malintenzionati in base alla manifestazione di emozioni. Robot per fabbricare robot... <http://www.airport-technology.com/features/featurerobotic-detection-a-new-a…> Robotic detection: a new approach for airport security? A San Diego State University professor has developed a robotic kiosk that could help detect travellers with hostile intentions. Could this be the next wave of airport security? The only thing that’s long and cumbersome about the AVATAR system is its name: Automated Virtual Agent for Truth Assessments in Real-Time. As a physical form, it’s similar to an airport check-in or shop self-checkout kiosk. The difference comes in the technology. AVATAR is all about understanding behaviour and, crucially, detecting potential security risks. It is currently being tested by the Canadian Border Services Agency (CBSA). “What are the strategies people use when trying to manage the impression that other people have of them?” asks San Diego State University management information systems professor, Aaron Elkins, part of the team behind the invention. “It [AVATAR] is based on our understanding of the subtleties of behaviour.” Passengers are required to stand in front of the kiosk – which has a ‘face’ on the screen – to be asked questions, such as: ‘are you engaged in smuggling?’ An array of sensors judges the reply, and responds accordingly. If it believes something warrants further investigation, the individual is flagged for further questioning by a human border official or security personnel. Here, Elkins delves deeper into the development of the technology, his hopes for its future use in airports, and why AVATAR should be seen as evolutionary, not revolutionary. [...]

March 7, 2017

US government asks High Court to refuse Facebook case referral

by Alberto Cammozzo

I toni si alzano nella causa Facebook Irlanda: il governo US entra nel gioco senza troppa diplomazia. <http://www.irishtimes.com/business/technology/us-government-asks-high-court…> The US government has urged the High Court <http://www.irishtimes.com/search/search-7.1213540?tag_organisation=High%20C…> to refuse the Data Protection Commissioner’s bid to have the Court of Justice of the EU (CJEU) decide issues with potentially enormous consequences for EU-US data transfers. Eileen Barrington SC, for the US, said the commissioner’s “unique”, “unusual” and “unprecedented” application for a reference to the CJEU was based on the commissioner’s “fatally flawed” draft finding concerning adequacy of remedies available in the US for breach of data privacy rights of EU citizens. This application was of “critical significance” to the US for legal and commercial reasons and should be dismissed for reasons including that it had been “entirely overtaken by events”, particularly the 2016 agreement between the European Commission <http://www.irishtimes.com/topics/european-commission> and US on the Privacy Shield framework for EU-US data transfers. Ms Barrington was also instructed it was “inconceivable” to suggest measures governing activities of the US intelligence community could just “disappear” or be “surreptitiously revoked” by orders or measures of the US executive. She was making submissions in the continuing action by commissioner Helen Dixon <http://www.irishtimes.com/search/search-7.1213540?tag_person=Helen%20Dixon&…>, brought after she reached a draft finding in May 2016 that Austrian lawyer Max Schrems <http://www.irishtimes.com/search/search-7.1213540?tag_person=Max%20Schrems&…> had “well-founded” objections concerning transfer of his personal data by Facebook <http://www.irishtimes.com/search/search-7.1213540?tag_company=Facebook&arti…> Ireland to its US parent, Facebook Inc. [...] ciao, Alberto

March 6, 2017

Call for papers "Post-verità e odio online: verso un nuovo paradigma di responsabilità delle piattaforme digitali?"

by Bassini, Marco

Cari Tutti, mi pregio di segnalarvi la prima call for paper sul tema in oggetto di MediaLaws, di cui trovate tutti i dettagli nel flyer allegato. Cari saluti, Marco -- Marco Bassini Dipartimento di Studi Giuridici "Angelo Sraffa" Università Commerciale "L. Bocconi" Via Roentgen, 1 20136 Milano Stanza 1-C1-07 Direct +39.02.5836.5611 Mobile (ITA) +39.329.2478832 Mobile (US) +1(518)965.9671 View my SSRN page View my Academia.edu page

March 6, 2017