August 2017 - nexa - server-nexa.polito.it

Nuovi documenti GAO e Chatham House
by Diego Latella Aug. 9, 2017

Aug. 9, 2017

Carissimi, Alla pagina Computers: National security, War, and Civil Rights <http://uspid.org/compwa.html> del sito web dell’USPID (www.uspid.org <http://www.uspid.org/>) ho appena inserito i link ai seguenti documenti che, spero, siano di vostro interesse: Information Security: OPM Has Improved Controls, but Further Efforts Are Needed <http://www.gao.gov/products/GAO-17-614?utm_medium=email&utm_source=govdeliv…> GAO-17-614 GAO <http://www.gao.gov/> August 3, 2017 Defense Cybersecurity: DOD's Monitoring of Progress in Implementing Cyber Strategies Can Be Strengthened <http://www.gao.gov/products/GAO-17-512?utm_medium=email&utm_source=govdeliv…> GAO-17-512 GAO <http://www.gao.gov/> August 1, 2017 INTERNET OF THINGS: Enhanced Assessments and Guidance Are Needed to Address Security Risks in DOD <http://www.gao.gov/assets/690/686204.pdf> GAO-17-668 GAO <http://www.gao.gov/> August 1, 2017 How vulnerable are nuclear weapons to cyber-attacks? <https://www.facebook.com/ChathamHouse/videos/10154932955922689/?utm_source=…> Beyza Unal Chatam House <https://www.chathamhouse.org/> August 1, 2017 The Internet of Things Will Be Even More Vulnerable to Cyber Attacks <https://www.chathamhouse.org/expert/comment/internet-things-will-be-even-mo…> Hannah Bryce <https://www.chathamhouse.org/expert/hannah-bryce> Chatam House <https://www.chathamhouse.org/> May 18, 2017 Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

1 0

GAO Report on "Aviation Security : TSA Does Not Have Valid Evidence Supporting Most of the Revised Behavior al Indicators Used in Its Behavior Detection Activities"
by Diego Latella Aug. 9, 2017

Aug. 9, 2017

Maybe you might be interested in the GAO Report on "Aviation Security : TSA Does Not Have Valid Evidence Supporting Most of the Revised Behavior al Indicators Used in Its Behavior Detection Activities”: This is what GAO faund: The Transportation Security Administration (TSA) does not have valid evidence that most of the revised behavioral indicators (28 of 36) used in its behavior detection activities can be used to identify individuals who may pose a threat to aviation security. GAO defined valid evidence as original research that meets generally accepted research standards and presents evidence that is applicable in supporting the specific behavioral indicators in TSA's revised list. Original research sources presenting valid evidence are important because the data and conclusions they present are derived from empirical research that can be replicated and evaluated. In GAO's review of all 178 sources TSA cited as support for its revised list, GAO found that 98 percent (175 of 178) of the sources do not provide valid evidence that is applicable to the specific behavioral indicators TSA cited them as supporting. Specifically, Seventy-seven percent of the sources TSA cited (137 of 178) are news articles, opinion pieces, presentations created by law enforcement entities and industry groups, and screen shots of online medical websites that do not meet GAO's definition of valid evidence. Twelve percent of the sources TSA cited (21 of 178) are journal articles, books reviewing existing literature, and other publications that may reference original research in the text, but do not themselves present original analysis, methods, or data whose reliability and validity can be assessed. Eleven percent of the sources TSA cited (20 of 178) are original research sources reporting original data and methods. However, 5 of these sources do not meet generally accepted research standards. Of the 15 sources that meet generally accepted research standards, 12 do not present information and conclusions that are applicable to the specific behavioral indicators TSA cited these sources as supporting. In total, GAO found that 3 of the 178 total sources cited could be used as valid evidence to support 8 of the 36 behavioral indicators in TSA's revised list. More specifically, TSA has one source of valid evidence to support each of 7 indicators, 2 sources of valid evidence to support 1 indicator, and does not have valid evidence to support 28 behavioral indicators. GAO makes no new recommendations in this report. The following is some context information (from the GAO report introduction): Over the past 10 years, the Transportation Security Administration (TSA) has employed thousands of trained behavior detection officers (BDO) to identify passengers exhibiting behaviors indicative of stress, fear, or deception at airport screening checkpoints. According to TSA, certain verbal and nonverbal cues and behaviors—TSA’s behavioral indicators—may indicate malintent, such as the intent to carry out a terrorist attack. These behavioral indicators include, for example, assessing the way an individual swallows or the degree to which an individual’s eyes are open. According to TSA, such indicators provide a means for identifying passengers who may pose a risk to aviation security and referring them for additional screening. Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

1 0

GDPR: ecco l'implementazione nel Regno Unito
by Guido Noto La Diega Aug. 8, 2017

Aug. 8, 2017

Di ieri lo statement of intent inglese. Si segnalano, inter alia - new offence of altering records with intent to prevent disclosure following a subject access request <https://www.facebook.com/hashtag/dpa2018?source=feed_text&story_id=18077726…>- new criminal offence of intentionally or recklessly re-identifying individuals from anonymised or pseudonymised data <https://www.facebook.com/hashtag/dpa2018?source=feed_text&story_id=18077719…> V. https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/6… -- Guido Dr Guido Noto La Diega Lecturer in Law @ Northumbria University CEO @italiot | Fellow @ Nexa Center for Internet & Society | Founder @DPA2018 Northumbria Law School City Campus East, Newcastle upon Tyne NE1 8ST noto.la.diega(a)gmail.com +44(0)191 349 5562 Twitter @guidonld You can access my papers on Academia.edu <http://northumbria.academia.edu/GuidoNotoLaDiega> and on the Social Science Research Network (SSRN <https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=1794950>) This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Unless necessary, please do not print this e-mail.

1 0

Global Network Initiative Releases 2016 Annual Report
by avv. Monica A. Senor Aug. 8, 2017

Aug. 8, 2017

Press release: https://www.globalnetworkinitiative.org/news/global-network-initiative-rele… The full report: http://globalnetworkinitiative.org/sites/default/files/GNI-Annual-Report-20… Un caro saluto e buona estate a tutti, Monica

1 0

Secrets of Silicon Valley review – are we sleepwalking towards a technological apocalypse?
by Alberto Cammozzo Aug. 7, 2017

Aug. 7, 2017

<https://www.theguardian.com/tv-and-radio/2017/aug/07/> The first of two episodes of Secrets of Silicon Valley (BBC2, Sunday) was a sobering look at how tech is going to change society quickly and dramatically. The presenter, technology writer Jamie Bartlett, with his scruffy beard and manbun, seems comfortingly analogue compared with the hoodied inventors and venture capitalists he meets. One tells him that anyone who questions the wisdom of where we are heading is “anti-progress”, and finishes with a long and chilling stare. It wasn’t all dystopia. Bartlett visited a Silicon Valley mansion, where young engineers mostly had idealistic visions – one was inventing a way to reverse climate change, another was coming up with a plant-based burger. They tell themselves what all Silicon Valley inhabitants do – that making the world better, and making billions of dollars in the process, are not mutually exclusive. Airbnb executives claim to be connecting people across the world and helping people earn money to pay the rent; the effect is to push up housing costs for locals in cities such as Barcelona. A man from Uber says something vague about how the app is changing the way we use cars to save the world. But the programme shows how it has affected the livelihoods of taxi drivers, and worse, it claimed that, in Hyderabad in India, three Uber drivers have killed themselves. Bartlett does an emotional interview with the widow of one of them ....

1 0

Weinberger: "Pointing at the Wrong Villain: Cass Sunstein and Echo Chambers"
by J.C. DE MARTIN Aug. 7, 2017

Aug. 7, 2017

*Pointing at the Wrong Villain: Cass Sunstein and Echo Chambers* By David Weinberger JULY 20, 2017 HARVARD LAW professor, member of President Obama’s White House, and the most-cited constitutional law professor in the country, Cass Sunstein first addressed the internet’s role in the polarization of our culture 15 years ago. His argument has become an accepted part of any discussion about the net’s failings. Yet, he has now written the same book about this issue for the third time. To be sure, his persistence is laudable, but the problems with his assumptions are only becoming more obvious. The first appearance of this book was as Republic.com in 2001, which Sunstein updated in 2007 as Republic.com 2.0. The latest version, #Republic, retains most of the text from these prior versions with a shift in evidence and examples from websites (2001) and blogs (2007) to social media (2017). The new edition includes elaborations inessential to his argument. Why three times? Perhaps Sunstein is the prophet still unheard in his own land — although, given the prominence of his views, that’s not very plausible. Or perhaps the sins he decries have not become dire enough for us to act. Or perhaps we have failed to achieve the old ideals of civil discourse that he espouses because our new network is exposing a weakness in them. […] Continua qui: https://lareviewofbooks.org/article/pointing-at-the-wrong-villain-cass-suns…

1 0

Licenze open data: CC-BY 4.0 e sono compatibili? Per EDP si, per OSMF no.
by Maurizio Napolitano Aug. 4, 2017

Aug. 4, 2017

European Data Portal ha pubblicato un sito con le licenze open data e relative compatibilità. https://www.europeandataportal.eu/en/content/show-license Si nota una compatibilità fra CC-BY 4.0 e ODbL https://www.europeandataportal.eu/en/content/show-license?license_id=CC-BY4… Cosa che, invece, la Open Street Map Foundation - dopo aver discusso con creative commons - dice non essere del tutto vera. https://blog.openstreetmap.org/2017/03/17/use-of-cc-by-data/ Mi viene confermato anche in questo thread da Simon Pool - coordinatore del Legal Working Group di OpenStreetMap Foundation https://lists.openstreetmap.org/pipermail/talk/2017-August/078385.html Cosa ne pensate? Addenda: EDP dichiara anche che la licenza ODC-BY è una licenza di tipo share alike e non di tipo attribuzione https://www.europeandataportal.eu/en/content/show-license?license_id=ODC-BY

1 0

Due recensioni di "Platform Capitalism" di Nick Srnicek
by J.C. DE MARTIN Aug. 3, 2017

Aug. 3, 2017

(HT Antonio Aloisi) * Notes on Platform Capitalism** *By Mark Carrigan on February 16, 2017 http://sociologicalimagination.org/archives/19138 *Book Review: Platform Capitalism by Nick Srnicek** *By Sin Yee Koh http://blogs.lse.ac.uk/lsereviewofbooks/2017/06/05/book-review-platform-cap… /If you are interested in this book, you may also like to read Nick Srnicek’s short essay on Platform Capitalism, published on LSE RB on 24 February 2017, or listen to a recording of his LSE Lit Fest panel discussion with Luke Dormehl and Laurie Penny on ‘The Future of Humanity’ ./

1 0

Paper: "Algorithmic Transparency for the Smart City"
by J.C. DE MARTIN Aug. 2, 2017

Aug. 2, 2017

Algorithmic Transparency for the Smart City 58 Pages Posted: Robert Brauneis <https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=329492> George Washington University - Law School Ellen P. Goodman <https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=333377> Rutgers Law School Date Written: August 2, 2017 Abstract Emerging across many disciplines are questions about algorithmic ethics – about the values embedded in artificial intelligence and big data analytics that increasingly replace human decisionmaking. Many are concerned that an algorithmic society is too opaque to be accountable for its behavior. An individual can be denied parole or denied credit, fired or not hired for reasons she will never know and cannot be articulated. In the public sector, the opacity of algorithmic decisionmaking is particularly problematic both because governmental decisions may be especially weighty, and because democratically-elected governments bear special duties of accountability. Investigative journalists have recently exposed the dangerous impenetrability of algorithmic processes used in the criminal justice field – dangerous because the predictions they make can be both erroneous and unfair, with none the wiser. We set out to test the limits of transparency around governmental deployment of big data analytics, focusing our investigation on local and state government use of predictive algorithms. It is here, in local government, that algorithmically-determined decisions can be most directly impactful. And it is here that stretched agencies are most likely to hand over the analytics to private vendors, which may make design and policy choices out of the sight of the client agencies, the public, or both. To see just how impenetrable the resulting “black box” algorithms are, we filed 42 open records requests in 23 states seeking essential information about six predictive algorithm programs. We selected the most widely-used and well-reviewed programs, including those developed by for-profit companies, nonprofits, and academic/private sector partnerships. The goal was to see if, using the open records process, we could discover what policy judgments these algorithms embody, and could evaluate their utility and fairness. To do this work, we identified what meaningful “algorithmic transparency” entails. We found that in almost every case, it wasn’t provided. Over-broad assertions of trade secrecy were a problem. But contrary to conventional wisdom, they were not the biggest obstacle. It will not usually be necessary to release the code used to execute predictive models in order to dramatically increase transparency. We conclude that publicly-deployed algorithms will be sufficiently transparent only if (1) governments generate appropriate records about their objectives for algorithmic processes and subsequent implementation and validation; (2) government contractors reveal to the public agency sufficient information about how they developed the algorithm; and (3) public agencies and courts treat trade secrecy claims as the limited exception to public disclosure that the law requires. Although it would require a multi-stakeholder process to develop best practices for record generation and disclosure, we present what we believe are eight principal types of information that such records should ideally contain

1 0

Sweden scrambles to tighten data security as scandal claims two ministers
by Alberto Cammozzo Aug. 2, 2017

Aug. 2, 2017

<https://www.theguardian.com/technology/2017/aug/01/sweden-scrambles-to-tigh…> Sweden’s government has sought urgent assurances on data security from national agencies including the health, education and pensions services after a huge leak of private and sensitive information that has cost two ministers their jobs. Amid reports by the Dagens Nyheter newspaper that confidential medical details were being handled by unscreened IT workers in Romania, the national broadcaster SVT said data outsourcing arrangements at six state agencies were being checked. ...

1 0

Germania: "Center for Advanced Internet Studies"
by J.C. DE MARTIN Aug. 2, 2017

Aug. 2, 2017

In UK e Germania si moltiplicano i centri studi dedicati a Internet - l'ultimo di cui sono venuto a conoscenza è questo: *Center for Advanced Internet Studies* http://www.cais.nrw/ *Our goals* /The Center for Advanced Internet Studies (CAIS) aims at playing an active role in the shaping of the rapid social, political and economic changes brought about by digitalization and is dedicated to promoting an ongoing dialogue between science and society.// // //CAIS sees itself as a place of innovative and interdisciplinary research and as an initiator of critical public debate among stakeholders who face the challenges and opportunities of digitalization and are committed to developing a normative framework for life in a digital society./ Ma noi italiani stiamo a posto con il pistacchio di Bronte e i ristoranti per turisti. juan carlos

2 1

Italy plans to extend telecoms data retention and increase censorship powers
by Fabio Pietrosanti - Lists Aug. 1, 2017

Aug. 1, 2017

Una sintesi in inglese di quanto è stato inserito nella "Legge europea 2017" che ha un impatto sui digital rights https://edri.org/italy-plans-extend-telecoms-data-retention-increase-censor… (Our first contribution as EDRi Observer) Fabio

1 0

Palantir: the ‘special ops’ tech giant that wields as much real-world power as Google
by Alberto Cammozzo Aug. 1, 2017

Aug. 1, 2017

<https://www.theguardian.com/world/2017/jul/30/palantir-peter-thiel-cia-data…> Palantir, the CIA-backed startup, is Minority Report come true. It is all-powerful, yet no one knows it even exists. Palantir does not have an office, it has a “SCIF” on a back street in Palo Alto, California. SCIF stands for “sensitive compartmentalised information facility”. Palantir says its building “must be built to be resistant to attempts to access the information within. The network must be ‘airgapped’ from the public internet to prevent information leakage.” ... In 2004, Peter Thiel – the billionaire PayPal co-founder, Facebook investor and and latter-day Trump ally – created Palantir alongside Nathan Gettings, Joe Lonsdale, Stephen Cohen and Alex Karp. Their intention was to create a company that took Big Data somewhere no one else dared to go. In 2013, Karp, Palantir’s CEO, announced that the company would not be pursuing an IPO, as going public would make “running a company like ours very difficult”. This is why. Palantir watches everything you do and predicts what you will do next in order to stop it. As of 2013, its client list included the CIA, the FBI, the NSA, the Centre for Disease Control, the Marine Corps, the Air Force, Special Operations Command, West Point and the IRS. Up to 50% of its business is with the public sector. In-Q-Tel, the CIA’s venture arm, was an early investor. ... Palantir does not just provide the Pentagon with a machine for global surveillance and the data-efficient fighting of war, it runs Wall Street, too. Palantir is exactly what it says it is: a giant digital eye like Saruman’s seeing stone in The Lord of the Rings. On the streets of Chicago and Los Angeles, Palantir is getting closest to Philip K Dick’s vision of the future, now. In the film, a premonition of an Orwellian thought-police state, crime rates drop to zero as the pre-crime unit successfully imprisons thousands of individuals for merely thinking of committing a felony. ... One could argue that sophisticated pre-crime algorithms are not necessary when being black and male is seen as reason enough for the police to swoop. What predictive policing has done is militarise American cities, creating a heightened culture of suspicion and fear in areas where tensions are highest and policing is already most difficult. Officers being led to certain neighbourhoods solely because of an algorithm is enough to cause tension; enough to ignite a powder keg and push a delicate policing situation over the edge. ...

7 7

GPL e` un contratto
by Guido Noto La Diega Aug. 1, 2017

Aug. 1, 2017

"Defendant contends that Plaintiff’s reliance on the unsigned GNU GPL fails to plausibly demonstrate mutual assent, that is, the existence of a contract. Not so. The GNU GPL, which is attached to the complaint, provides that the Ghostscript user agrees to its terms if the user does not obtain a commercial license. Plaintiff alleges that Defendant used Ghostscript, did not obtain a commercial license, and represented publicly that its use of Ghostscript was licensed under the GNL GPU. These allegations sufficiently plead the existence of a contract.” Un commento qua http://www.technollama.co.uk/us-court-declares-gpl-is-a-contract -- Guido Dr Guido Noto La Diega Lecturer in Law @ Northumbria University CEO @italiot | Fellow @ Nexa Center for Internet & Society | Founder @DPA2018 Northumbria Law School City Campus East, Newcastle upon Tyne NE1 8ST noto.la.diega(a)gmail.com +44(0)191 349 5562 Twitter @guidonld You can access my papers on Academia.edu <http://northumbria.academia.edu/GuidoNotoLaDiega> and on the Social Science Research Network (SSRN <https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=1794950>) This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Unless necessary, please do not print this e-mail.

1 0

The chiefs of Facebook, Google and other tech giants aren’t committing to testify to the U.S. Congress on net neutrality
by J.C. DE MARTIN Aug. 1, 2017

Aug. 1, 2017

They had until today to tell a key House committee, which is extending its deadline. BY TONY ROMM ON JULY 31, 2017 3:17 PM https://www.recode.net/platform/amp/2017/7/31/16070176/amazon-facebook-goog… (Sent from my wireless device; please excuse brevity and typos (if any))

2 3