May 2018 - nexa - server-nexa.polito.it

Mobile Giants: Please Don’t Share the Where

by Alberto Cammozzo

In seguito alla questione LocationSmart, è in evidenza il fatto che la posizione degli utenti negli USA viene venduta dei servizi telefonici. Nulla di nuovo. Qualcuno sa come siamo messi in Italia/EU? <https://krebsonsecurity.com/2018/05/mobile-giants-please-dont-share-the-whe…> Your mobile phone is giving away your approximate location all day long. This isn’t exactly a secret: It has to share this data with your mobile provider constantly to provide better call quality and to route any emergency 911 calls straight to your location. But now, the major mobile providers in the United States — AT&T, Sprint, T-Mobile and Verizon — are selling this location information to third party companies — in real time — without your consent or a court order, and with apparently zero accountability for how this data will be used, stored, shared or protected. Think about what’s at stake in a world where anyone can track your location at any time and in real-time. Right now, to be free of constant tracking the only thing you can do is remove the SIM card from your mobile device never put it back in unless you want people to know where you are. It may be tough to put a price on one’s location privacy, but here’s something of which you can be sure: The mobile carriers are selling data about where you are at any time, without your consent, to third-parties for probably far less than you might be willing to pay to secure it. The problem is that as long as anyone but the phone companies and law enforcement agencies with a valid court order can access this data, it is always going to be at extremely high risk of being hacked, stolen and misused. Consider just two recent examples. Earlier this month The New York Times reported that a little-known data broker named Securus was selling local police forces around the country the ability to look up the precise location of any cell phone across all of the major U.S. mobile networks. Then it emerged that Securus had been hacked, its database of hundreds of law enforcement officer usernames and passwords plundered. We also found out that Securus’ data was ultimately obtained from a California-based location tracking firm LocationSmart. On May 17, KrebsOnSecurity broke the news of research by Carnegie Mellon University PhD student Robert Xiao, who discovered that a LocastionSmart try-before-you-buy opt-in demo of the company’s technology was wide open — allowing real-time lookups from anyone on anyone’s mobile device — without any sort of authentication, consent or authorization. Xiao said it took him all of about 15 minutes to discover that LocationSmart’s lookup tool could be used to track the location of virtually any mobile phone user in the United States. [...]

May 24, 2018

FYI: mailing lists nuovamente online

by Giovanni Garifo

A tutti gli iscritti alle mailing lists del Centro Nexa, vi informo che tutte le mailing lists ospitate dal Centro Nexa sono nuovamente online. Cordiali saluti -- Giovanni Garifo IT Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Via Pier Carlo Boggio, 65/A - 10138 Torino w. nexa.polito.it/people/ggarifo l. linkedin.com/in/giovannigarifo

May 24, 2018

"UK.gov's use of black box algorithms to decide stuff needs watching"

by J.C. DE MARTIN

*UK.gov's use of black box algorithms to decide stuff needs watching* /PS: Don't forget to try to cash in on public data – MPs/ By Rebecca Hill 23 May 2018 at 12:40 Increased use of algorithms in decision-making risks disproportionately affecting certain groups, MPs have said, urging the government to boost transparency and tackle bias - but not forget the value of public data. In a report on algorithmic decision-making, published today, the House of Commons Science and Technology Committee said the tech has the potential to improve public services and drive wider innovation in a range of sectors, from transport to healthcare. It said the data held by public authorities could be a potentially lucrative asset, urging the government to ensure it negotiates good deals for its use by private companies. However, the MPs also sounded a strong note of caution - emphasising that algorithms should not be seen as a magic formula; rather they have the potential to be biased and need to operate in a strong regulatory and ethical framework. […] Continua qui: https://www.theregister.co.uk/2018/05/23/ukgov_told_to_treat_algorithms_wit…

May 24, 2018

Doctorow: The emerging split in modern trustbusting: Alexander Hamilton’s Fully Automated Luxury Communism vs Thomas Jefferson’s Redecentralization – Boing Boing

by J.C. DE MARTIN

https://boingboing.net/2018/05/22/too-big-to-fail-2.html/ The emerging split in modern trustbusting: Alexander Hamilton's Fully Automated Luxury Communism vs Thomas Jefferson's Redecentralization 2 days ago Cory Doctorow From the late 1970s on, the Chicago School economists worked with the likes of Ronald Reagan, Margaret Thatcher, Augusto Pinochet and Brian Mulroney to dismantle antitrust enforcement, declaring that the only time government should intervene is when monopolists conspired to raise prices -- everything else was fair game. Some 40 years later, a new generation of trustbusters have emerged, with their crosshairs centered on Big Tech, the first industry to grow up under these new, monopoly-friendly rules, and thus the first (but far from the only) example of an industry in which markets, finance and regulatory capture were allowed to work their magic to produce a highly concentrated sector of seemingly untame-able giants who are growing bigger by the day. The new anti-monopolism is still in its infancy but a very old division has emerged within its ranks: the Jeffersonian ideal of decentralized power (represented by trustbusters who want to break up Big Tech into small, manageable firms that are too small to crush emerging rivals or capture regulators) versus the Hamiltonian ideal of efficiency at scale, tempered by expert regulation that forces firms to behave in the public interest (with the end-game sometimes being "Fully Automated Luxury Communism" in which the central planning efficiencies of Wal-Mart and Amazon are put in the public's hands, rather than their shareholders'). (....) (Sent from my wireless device; please excuse brevity and typos (if any))

May 24, 2018

Ce la faranno i nostri eroi? http://openlettertomogherini.world/

by Roberto Dolci

http://openlettertomogherini.world/

May 24, 2018

FYI: domani 24 maggio - mailing lists non raggiungibili

by Giovanni Garifo

A tutti gli iscritti alle mailing lists del Centro Nexa, vi informo che domani, 24 maggio, le mailing lists ospitate presso i nostri server non saranno raggiungibili per l'intera giornata a causa di interventi tecnici. Riceverete comunicazione mediante la mailing list una volta che tutti i servizi saranno tornati online. Cordiali saluti -- Giovanni Garifo IT Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Via Pier Carlo Boggio, 65/A - 10138 Torino w. nexa.polito.it/people/ggarifo l. linkedin.com/in/giovannigarifo

May 23, 2018

Fwd: I: EXPERT GROUP ON THE IMPACT OF THE DIGITAL TRANSFORMATION ON EU LABOUR MARKETS - CALL FOR APPLICATIONS (Deadline 4th June)

by Margot Bezzi

fyi ------------------------------ *Da:* iesicommunity(a)iesi.eu <iesicommunity(a)iesi.eu> per conto di Gianluca Misuraca <gianluca.misuraca(a)ec.europa.eu> *Inviato:* martedì 22 maggio 2018 20:40 *A:* IESI Community *Oggetto:* [iesi_community] EXPERT GROUP ON THE IMPACT OF THE DIGITAL TRANSFORMATION ON EU LABOUR MARKETS - CALL FOR APPLICATIONS (Deadline 4th June) Dear colleagues, The Commission is setting up a high-level expert group (HLG) on the impact of the digital transformation on EU labour markets, in the context of its broader activities on the future of work. See https://ec.europa.eu/esf/ transnationality/content/call-applications-expert-group- impact-digital-transformation-eu-labour-markets Call for applications – Expert group on the impact of the ... <https://ec.europa.eu/esf/transnationality/content/call-applications-expert-…> ec.europa.eu Call for applications – Expert group on the impact of the digital transformation on EU labour markets - EUROPEAN SOCIAL FUND A *call for applications <http://ec.europa.eu/transparency/regexpert/index.cfm?do=calls.calls_for_app> *to select the 9 members of the expert group was published on 4 May and *applications can be submitted until 4 June 2018*. The goal of the expert group is to *analyse and advise* the Commission on the impact of the digital transformation on EU labour markets, and *explore policy options* in this regard. It will, among other things: - analyse how to shape the transformation and what framework conditions to be put in place to make it smooth and human-centric, - identify the potential social impacts (risks and opportunities) of digitalisation and artificial intelligence, - assess to what extent current systems (such as social security, tax and benefits, lifelong learning) are fit for purpose, and - make suggestions on a way forward. The expert group will report on its *analysis and findings by early 2019*. *Context* Digitalisation is transforming the world of work at unprecedented speed. Technological change has the potential to create jobs, increase the productivity of labour, and boost innovation, investment, and economic prosperity. However, these benefits are not automatic, nor are they evenly distributed among European regions and citizens. Europe must steer these developments to foster well-being and economic growth, ensuring decent working conditions, social protection and equal opportunities for all. More information available here <http://ec.europa.eu/transparency/regexpert/index.cfm?do=news.open_doc&id=14…> . You are receiving this message because you are a member of the community IESI Community <http://iesi.eu/iesi_community>. View this contribution on the web site <http://iesi.eu/_/j9r1f4ab> A reply to this message will be sent to all members of IESI Community. Reply to sender <gianluca.misuraca(a)ec.europa.eu> | Unsubscribe <leave.iesicommunity(a)iesi.eu>

May 23, 2018

I: EXPERT GROUP ON THE IMPACT OF THE DIGITAL TRANSFORMATION ON EU LABOUR MARKETS - CALL FOR APPLICATIONS (Deadline 4th June)

by Margot Bezzi

fyi ________________________________ Da: iesicommunity(a)iesi.eu <iesicommunity(a)iesi.eu> per conto di Gianluca Misuraca <gianluca.misuraca(a)ec.europa.eu> Inviato: martedì 22 maggio 2018 20:40 A: IESI Community Oggetto: [iesi_community] EXPERT GROUP ON THE IMPACT OF THE DIGITAL TRANSFORMATION ON EU LABOUR MARKETS - CALL FOR APPLICATIONS (Deadline 4th June) Dear colleagues, The Commission is setting up a high-level expert group (HLG) on the impact of the digital transformation on EU labour markets, in the context of its broader activities on the future of work. See https://ec.europa.eu/esf/transnationality/content/call-applications-expert-… Call for applications – Expert group on the impact of the ...<https://ec.europa.eu/esf/transnationality/content/call-applications-expert-…> ec.europa.eu Call for applications – Expert group on the impact of the digital transformation on EU labour markets - EUROPEAN SOCIAL FUND A call for applications<http://ec.europa.eu/transparency/regexpert/index.cfm?do=calls.calls_for_app> to select the 9 members of the expert group was published on 4 May and applications can be submitted until 4 June 2018. The goal of the expert group is to analyse and advise the Commission on the impact of the digital transformation on EU labour markets, and explore policy options in this regard. It will, among other things: * analyse how to shape the transformation and what framework conditions to be put in place to make it smooth and human-centric, * identify the potential social impacts (risks and opportunities) of digitalisation and artificial intelligence, * assess to what extent current systems (such as social security, tax and benefits, lifelong learning) are fit for purpose, and * make suggestions on a way forward. The expert group will report on its analysis and findings by early 2019. Context Digitalisation is transforming the world of work at unprecedented speed. Technological change has the potential to create jobs, increase the productivity of labour, and boost innovation, investment, and economic prosperity. However, these benefits are not automatic, nor are they evenly distributed among European regions and citizens. Europe must steer these developments to foster well-being and economic growth, ensuring decent working conditions, social protection and equal opportunities for all. More information available here<http://ec.europa.eu/transparency/regexpert/index.cfm?do=news.open_doc&id=14…>. You are receiving this message because you are a member of the community IESI Community<http://iesi.eu/iesi_community>. View this contribution on the web site<http://iesi.eu/_/j9r1f4ab> A reply to this message will be sent to all members of IESI Community. Reply to sender<mailto:gianluca.misuraca@ec.europa.eu> | Unsubscribe<mailto:leave.iesicommunity@iesi.eu>

May 23, 2018

Convegno "L'entrata in vigore del Regolamento (UE) 2016/679: la riforma alla prova dela prassi in Italia e in Spagna"- Università di Pisa, 8 e 9 giugno 2018

by Dianora Poletti

Gentilissimi, seguo da tempo le interessanti segnalazioni e discussioni in lista, dalle quali traggo molti stimoli. Sperando di fare cosa gradita, intervengo per segnalare a mia volta il Convegno "L'entrata in vigore del Regolamento (UE) 2016/675: la riforma alla prova della prassi in Italia e in Spagna", che si terrà presso l'Università di Pisa nei giorni 8 e 9 giugno p.v. L'ingresso è libero, previa conferma della propria partecipazione all'indirizzo scuolalegale(a)mail.jus.unipi.it <mailto:datagovernance@unimi.it>. Trametto in allegato la locandina dell'iniziativa. Con molti cordiali saluti Dianora Poletti /Ordinario di Diritto Privato e Diritto dell'Informatica - Università di Pisa Direttrice Master II livello in Internet Ecosystem: Governance e Diritti / --- Questa e-mail è stata controllata per individuare virus con Avast antivirus. https://www.avast.com/antivirus

May 22, 2018

Re: [nexa] Ex-Intel security expert: This new Spectre attack can even reveal firmware secrets

by Giacomo Tesio

2018-05-22 11:34 GMT+02:00 gabriele elia <gabriele.elia(a)live.com> > non ci può essere sicurezza nazionale senza "indipendenza" e controllo > della industria dei processori e dei semiconduttori > Non ci può essere sicurezza informatica. Nazionale, aziendale, familiare o personale. Ma non è solo un problema hardware. Qualche tempo fa ho chiesto chi risponde e sotto quale sistema giuridico di un reato compiuto da un javascript eseguito da un pc in Italia ma ricevuto da un host (o da un proxy) in Cina, in Russia o negli Stati Uniti. La risposta più esauriente l'ha fornita Guido Noto La Diega Come punto generale, il diritto regole le persone, non le tecnologie. Per > il resto *l'applicazione extraterritoriale del diritto è spesso > problematica * > In termini informatici traduco "Diritto + Internet = Undefined Behaviour". Il panico che mi raccontano i miei amici dagli stati uniti per il GDPR e le manovre intraprese da alcune aziende per spostare petabyte di dati dai server europei, sono molto molto indicative. Dunque tutti gli stack software mainstream che conosco (Windows, iOS, Linux, BSD, Android...) sono strutturalmente insicuri (pur se in modi diversi). Il fatto che lo sia anche l'hardware non peggiora la situazione poi così tanto. Per affrontare il problema bisogna mettere profondamente in discussione lo status quo. A livello tecnologico e politico, ancor prima che economico e legale. Con la certezza di scontentare TUTTI gli operatori del settore. In pratica, siamo spacciati. Giacomo

May 22, 2018