October 2019 - nexa - server-nexa.polito.it

NordVPN, TorGuard, and VikingVPN VPN providers disclose security breaches

by Giacomo Tesio

https://securityaffairs.co/wordpress/92808/hacking/nordvpn-torguard-vikingv… NordVPN and TorGuard VPN firms were hacked, threat actors leaked the private keys used to secure their web servers and VPN configuration files. Hackers have breached the systems used by NordVPN and TorGuard VPN companies and leaked the private keys used to secure their web servers and VPN configuration files. The information belonging to the NordVPN company that was leaked online were stolen from the server of the VPN provider last year. [...] A bigger problem was that they weren't practicing secure PKI management because the CA private key was stupidly on the same server. With that private key, an attacker could easily generate their own server cert/key and MiTM any other server. [...] The keys could be used for a man-in-the-middle attack. In addition, it can be assumed that the attacker was able to access traffic during the hack. [...] “A few months ago, we became aware that, on March 2018, one of the datacenters in Finland we had been renting our servers from was accessed with no authorization.” reads the statement published by the VPN provider. “The attacker gained access to the server by exploiting an insecure remote management system left by the datacenter provider. We were unaware that such a system existed. [...] The incident also impacted other VPN providers using the same data center, such as VikingVPN and TorGuard. TorGuard was the only VPN provider of the three impacted by the incident to be implementing secure PKI management this means that its main CA key was not on the affected VPN server. Giacomo

Oct. 23, 2019

Facebook must face $35B facial-recognition lawsuit following court ruling | Ars Technica

by Alberto Cammozzo

<https://arstechnica.com/tech-policy/2019/10/35-billion-facial-recognition-l…> Facebook's most recent attempt to extricate itself from a potentially landmark lawsuit has come to a dead end, as a federal court declined to hear another appeal to stop the $35 billion class action. In San Francisco last week, the US Court of Appeals for the 9th Circuit denied Facebook's petition for an en banc hearing in the case. Usually, appeals cases are heard by a panel of three judges out of all the judges who work in a given circuit. An en banc hearing is a kind of appeal in which a much larger group of judges hears a case. In the 9th Circuit, 11 of the 29 judges sit on en banc cases. Facebook had requested an en banc hearing to appeal the 9th's Circuit's August ruling, in which the court determined that the plaintiffs had standing to sue, even though Facebook's alleged actions did not cause them any quantifiable financial harm. The class-action suit can now move forward. Further Reading Facebook’s new facial recognition feature finds you in untagged photos Three different Illinois residents filed suit against Facebook back in 2015. The suits, which were eventually rolled together into one single class-action complaint, argue that Facebook's collection of users' faces for tagging purposes violates the Illinois Biometric Information Privacy Act, a law that requires businesses to gather consent from state residents before their biometric data is collected or used. The penalty Facebook would face for violating the Illinois law is up to $5,000 for each knowing violation. There are about 7 million Facebook users in Illinois, meaning Facebook could face a maximum fine of around $35 billion if the case goes to trial and the company loses. Facial recognition: Far from flawless While one tech giant faces a lawsuit over facial recognition that works too well, another is facing criticism over facial recognition that doesn't work well enough. The Massachusetts branch of the American Civil Liberties Union this week released the results of a test it ran on Amazon's Rekognition software, in which it mistakenly matched many New England professional athletes to mugshots from a database. The ACLU compared images of 188 athletes from the Boston Bruins, Boston Celtics, Boston Red Sox, and New England Patriots teams against a database of about 20,000 public arrest photos. The ACLU found that 27 of the athletes, more than 14%, were falsely identified in the mugshots. [...]

Oct. 23, 2019

Re: [nexa] "Unix 50"

by Giacomo Tesio

On 23/10/2019, J.C. DE MARTIN <demartin(a)polito.it> wrote: > Preciso solo che - vista l'età - la sua partecipazione > sarà da remoto. Ops... scusate... l'entusiasmo mi ha evidentemente accecato. Sto diventando vecchio... :-) Rimane comunque una sessione molto interessante. Giacomo

Oct. 23, 2019

Re: [nexa] "Unix 50"

by J.C. DE MARTIN

Ciao Giacomo, grazie molte per la segnalazione. Sarà sicuramente possibile interagire con Brian Kernighan. Preciso solo che - vista l'età - la sua partecipazione sarà da remoto. Grazie ancora, juan carlos On 22/10/2019 22:40, Giacomo Tesio wrote: > A tal proposito, per chi non l'avesse notato (io l'ho scoperto solo ieri) Brian Kernighan sarà presente a Torino per il Festival della Tecnologia. > > https://www.festivaltecnologia.it/sessioni/milioni-miliardi-fantastiliardi-… > > Non è forse il suo campo di specialità e non vorrei essere off-topic, ma spero di avere occasione di chiedergli la sua visione sulla complessità dei linguaggi di programmazione emergenti e sull'uso del Web come surrogato di un sistema operativo distribuito. > > > Giacomo > > Il October 22, 2019 9:33:42 AM UTC, Andrea Trentini <andrea.trentini(a)unimi.it> ha scritto: >> and still people are reinventing it, badly >> >> On 22/10/2019 11:06, J.C. DE MARTIN wrote: >>> https://www.bell-labs.com/unix50/event/ >>> >>> Celebrating 50 years of Unix >>> >>> We are commemorating Unix’s anniversary with the Unix50 event, a >> two-day celebration that will >>> reflect on Unix’s past and explore the future of computing. Speakers >> and panelists include many of >>> the original team that built Unix and designed the C programming >> language, as well as luminaries in >>> the fields of computing and robotics. The event will also feature a >> gallery of Unix artifacts, a >>> coding challenge requiring students to program robots to navigate the >> industrial spaces of the >>> future, and numerous other activities drawing on Unix’s rich and >> colorful history at Bell Labs. >>> Check back soon for videos and photos captured from the event. >>> >>> _______________________________________________ >>> nexa mailing list >>> nexa(a)server-nexa.polito.it >>> https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >> -- >> |_|0|_| Andrea Trentini - http://atrent.it >> |_|_|0| Dipartimento di Informatica >> |0|0|0| Università degli Studi di Milano >> _______________________________________________ >> nexa mailing list >> nexa(a)server-nexa.polito.it >> https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa

Oct. 23, 2019

http://www.fig.net/

by Agata Lo Tauro

Perdonate la mia domanda: Posso rappresentare NEXA nel network di FIG http://www.fig.net/? Perdonate nuovamente la mia domanda, perfavore! Apologise for any inconvenience and appreciate understanding <https://forum.wordreference.com/threads/apologise-for-any-inconvenience-and…> ! Ad maiora, Agata

Oct. 23, 2019

Re: [nexa] Geomatica e AI..conoscenze da trasmettere

by Aldo Pedico

Buona sera Cristina, vorrei esprimere la mia semplice opinione in risposta al tuo messaggio. Premetto che sono un tecnico che lavora da sempre (1976) nel settore delle tecnologie informatiche. Eccola! Innanzitutto, le "aperture" sono sinonimo di emancipazione ovvero l'essere umano libero dalla schiavitù della propria volontà, da preconcetti, da pregiudizi, da schemi prefissati i quali sono obiettivi che molti vorrebbero raggiungere, alcuni ci sono riusciti ed altri ancora non sanno come incominciare. Chi non riconosce questa esigenza, forse, è inconsapevolmente in uno stato cosiddetto psicotico. Dopodiché, ti chiedo aiuto: vorrei che tu mi aiutassi a capire il tuo pensiero: "... mi sento in dovere di diffondere una realtà .... che incide necessariamente sul nostro nazionale e sovranazionale sistema giuridico. ..... Mi riferisco, a titolo esemplificativo, alle imprese, alla rete di imprese, ai nuovi diritti e alle nuove tutele anche per i singoli, alla contrattualistica, alle decisioni dei Giudici, e, in generale, alla normativa vigente e all'orientamento europeo.". Esattamente, qual è il busillis? Cordialmente, Aldo Mobile +39.3482244924 ---------------------- From: nexa <nexa-bounces(a)server-nexa.polito.it> on behalf of cristina <cristina(a)cossuavv.191.it> Sent: martedì 22 ottobre 2019 22:50 To: Agata Lo Tauro; nexa(a)server-nexa.polito.it Subject: Re: [nexa] Geomatica e AI..conoscenze da trasmettere Buona sera a tutti, scusate l'intrusione e, forse, la banalità del mio pensiero. Come avvocato e giudice onorario (con un po' di esperienza di docenza) mi sento in dovere di diffondere una realtà (che non è il "futuro", come di frequente sento dire nel mio piccolo ambiente di giuristi) che incide necessariamente sul nostro nazionale e sovranazionale sistema giuridico. Mi riferisco, a titolo esemplificativo, alle imprese, alla rete di imprese, ai nuovi diritti e alle nuove tutele anche per i singoli, alla contrattualistica, alle decisioni dei Giudici, e, in generale, alla normativa vigente e all'orientamento europeo. Vi chiedo se l'idea di "aprire" le Vostre autorevoli competenze sia un pensiero poco elegante e, se è così, mi scuso sinceramente di aver accarezzato questa idea. Lieta e onorata di poter leggere le Vostre preziose considerazioni, che quotidianamente mi arricchiscono, porgo i più cordiali saluti. m. cristina Inviato da smartphone Samsung Galaxy. -------- Messaggio originale -------- Da: Agata Lo Tauro <agatalotauro(a)gmail.com> Data: 22/10/19 19:50 (GMT+01:00) A: nexa(a)server-nexa.polito.it Oggetto: [nexa] Geomatica e AI Geomatica e AI applicate ai dati provenienti dal mondo dei Beni Culturali - Workshop a Torino 12-13 Dicembre 2019 Gentilissimi, perdonate la domanda: Hanno dato una "impostazione internazionale" all'evento? https://www.archeomatica.it/documentazione/intelligenza-artificiale-in-geom… [https://www.archeomatica.it/images/2019/10/21/ghhkfbdgjghglkon_thumbnail.jpg]<https://www.archeomatica.it/documentazione/intelligenza-artificiale-in-geom…> Geomatica e AI applicate ai dati provenienti dal mondo dei Beni Culturali - Workshop a Torino 12-13 Dicembre 2019 |Documentazione - Archeomatica<https://www.archeomatica.it/documentazione/intelligenza-artificiale-in-geom…> www.archeomatica.it L’utilizzo dell’Intelligenza Artificiale e di algoritmi di apprendimento profondo quali Machine e Deep Learning, hanno recentemente cambiato il modo di fare ricerca e analisi in molti settori scientifici, dalla medicina alla fisica, dalle scienze umane all'ingegneria.

Oct. 22, 2019

Re: [nexa] Geomatica e AI..conoscenze da trasmettere

by cristina

Buona sera a tutti,scusate l'intrusione e, forse, la banalità del mio pensiero.Come avvocato e giudice onorario (con un po' di esperienza di docenza) mi sento in dovere di diffondere una realtà (che non è il "futuro", come di frequente sento dire nel mio piccolo ambiente di giuristi) che incide necessariamente sul nostro nazionale e sovranazionale sistema giuridico.Mi riferisco, a titolo esemplificativo, alle imprese, alla rete di imprese, ai nuovi diritti e alle nuove tutele anche per i singoli, alla contrattualistica, alle decisioni dei Giudici, e, in generale, alla normativa vigente e all'orientamento europeo.Vi chiedo se l'idea di "aprire" le Vostre autorevoli competenze sia un pensiero poco elegante e, se è così, mi scuso sinceramente di aver accarezzato questa idea.Lieta e onorata di poter leggere le Vostre preziose considerazioni, che quotidianamente mi arricchiscono, porgo i più cordiali saluti.m. cristina Inviato da smartphone Samsung Galaxy. -------- Messaggio originale --------Da: Agata Lo Tauro <agatalotauro(a)gmail.com> Data: 22/10/19 19:50 (GMT+01:00) A: nexa(a)server-nexa.polito.it Oggetto: [nexa] Geomatica e AI Geomatica e AI applicate ai dati provenienti dal mondo dei Beni Culturali - Workshop a Torino 12-13 Dicembre 2019 Gentilissimi,perdonate la domanda: Hanno dato una "impostazione internazionale" all'evento? https://www.archeomatica.it/documentazione/intelligenza-artificiale-in-geom…

Oct. 22, 2019

Re: [nexa] "Unix 50"

by Giacomo Tesio

A tal proposito, per chi non l'avesse notato (io l'ho scoperto solo ieri) Brian Kernighan sarà presente a Torino per il Festival della Tecnologia. https://www.festivaltecnologia.it/sessioni/milioni-miliardi-fantastiliardi-… Non è forse il suo campo di specialità e non vorrei essere off-topic, ma spero di avere occasione di chiedergli la sua visione sulla complessità dei linguaggi di programmazione emergenti e sull'uso del Web come surrogato di un sistema operativo distribuito. Giacomo Il October 22, 2019 9:33:42 AM UTC, Andrea Trentini <andrea.trentini(a)unimi.it> ha scritto: >and still people are reinventing it, badly > >On 22/10/2019 11:06, J.C. DE MARTIN wrote: >> https://www.bell-labs.com/unix50/event/ >> >> Celebrating 50 years of Unix >> >> We are commemorating Unix’s anniversary with the Unix50 event, a >two-day celebration that will >> reflect on Unix’s past and explore the future of computing. Speakers >and panelists include many of >> the original team that built Unix and designed the C programming >language, as well as luminaries in >> the fields of computing and robotics. The event will also feature a >gallery of Unix artifacts, a >> coding challenge requiring students to program robots to navigate the >industrial spaces of the >> future, and numerous other activities drawing on Unix’s rich and >colorful history at Bell Labs. >> >> Check back soon for videos and photos captured from the event. >> >> _______________________________________________ >> nexa mailing list >> nexa(a)server-nexa.polito.it >> https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > >-- >|_|0|_| Andrea Trentini - http://atrent.it >|_|_|0| Dipartimento di Informatica >|0|0|0| Università degli Studi di Milano >_______________________________________________ >nexa mailing list >nexa(a)server-nexa.polito.it >https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa -- Inviato da un terminale mobile. Perdonate brevità ed orrori grammaticali.

Oct. 22, 2019

Geomatica e AI

by Agata Lo Tauro

Geomatica e AI applicate ai dati provenienti dal mondo dei Beni Culturali - Workshop a Torino 12-13 Dicembre 2019 Gentilissimi, perdonate la domanda: Hanno dato una "impostazione internazionale" all'evento? https://www.archeomatica.it/documentazione/intelligenza-artificiale-in-geom…

Oct. 22, 2019

We recruit a PhD researcher in economics or data science (deadline: 15 nov. 2019)

by Antonio Casilli

Ciao a tutt*, mi permetto di pubblicare qui questo annuncio per una borsa dottorale in economia o data science per il nostro nuovo progetto di ricerca su microlavoro e intelligenza artificiale fra i paesi francofoni d'Africe e l'Europa. Sede del dottorato: Parigi. Lingua: Inglese. Inizio: Gennaio 2020. Scadenza di questo annuncio: 15 nov. 2019. Se conoscete qualcuno interessato, fate girare. Cheers, ---a French elite university recruits a PhD student in digital economics to work on global micro-work and AI (deadline: Nov. 15, 2019) [ https://www.casilli.fr/french-elite-university-recruits-a-phd-researcher-in… | https://www.casilli.fr/french-elite-university-recruits-a-phd-researcher-in… ] TL;DR We are currently recruiting a PhD student in economics to join a new and exciting project in global micro-work, data supply chains and automation in French-speaking African countries and Europe. Successful applicant is an economist or a data scientist with a strong interest in digital platforms and labor economics, and with an empirical focus. Language: English (French optional). The project: “HUman Supply cHain behind smart technologies” (HUSH) The research project HUSH, funded by the French National Research Agency (ANR), is based on the observation that human inputs – namely platform-mediated work — play an important role for the production of artificial intelligence solutions. In our project, we aim to shed more light on the whole ecosystem linking platforms, workers and their clients demanding data-related and algorithmic services. The position For our project, we are looking for a PhD researcher in digital economics. The position provides the opportunity to focus very strongly on research, in a very active environment. The team has collaborations with different online platforms and has collected data sets from the web, which can be used by the applicant for their thesis. The focus of the current position is to work on the economic aspects of platform-mediated work , using quantitative analyses. Two PhD students have already been recruited for this project and work on related topics. The starting date is January 2020 (a later starting date is also possible). As per national regulations, the annual stipend will be about 1.600 euros per month, with possibility to obtain a complement for extra activities such as teaching. Social security and professional training are provided. Additional funding is available to present your research at international conferences and workshops. The position will be based at the new campus of [ https://www.telecom-paris.fr/en/campus/campus-life/our-new-buildings-in-pal… | Telecom Paris in Palaiseau ] , Paris, in the direct neighborhood of École Polytechnique and ENSAE. Your profile Applicants should have successfully completed a Master’s degree in economics, socio/economic data science or related disciplines, or expect completion at the beginning of the year 2020. They should have a strong interest in digital platforms, from the perspective of industrial organization or labor economics, and have an empirical focus (econometrics, data science). They should aim at developing programming skills and have an interest in the evaluation of internet data. Fluency in English is required; knowledge of French is advantageous, but not essential. Telecom Paris and IP Paris [ https://www.telecom-paris.fr/en/home | Telecom Paris is a top French engineering school ] . Formerly known as the École nationale supérieure des télécommunications , it prides itself as being the place where the term “telecommunications” was invented, one century ago. Telecom Paris is part of the newly founded [ https://www.polytechnique.edu/en/content/institut-polytechnique-de-paris-5-… | Institute Polytechnique de Paris (IP Paris) ] , a world-class scientific institution created together with Ecole Polytechnique, ENSTA, ENSAE and Telecom ParisSud. The department of social sciences and economics (SES) at Telecom Paris studies the impact of the digitization on economic activity and society. For more information, please see [ https://www.google.com/url?q=https%3A%2F%2Fwww.telecom-paris.fr%2Ffr%2Fleco… | https://www.telecom-paris.fr/fr/lecole/departements-enseignement-recherche/… ] The team Join a dynamic interdisciplinary team of academics and PhD students working on the HUSH project. The thesis will be supervised by [ https://www.ulrich-laitenberger.com/ | Ulrich Lainteberger ] (economist, associate professor Telecom Paris, research associate at ZTW Mannheim CRED Paris 2) and and co-supervised by [ https://www.casilli.fr/ | Antonio Casilli ] (sociologist, associate professor Telecom Paris, fellow LACI-IIAC EHESS) and [ https://databigandsmall.com/ | Paola Tubaro ] (socio-economist, researcher Laboratoire de Recherche Informatique CNRS). How to apply Please submit a cover letter, a curriculum vitae, a transcript of records (listing all subjects taken and their grades), and contact details of one to two referees by November 15, 2019 to Ulrich Laitenberger ( [ mailto:laitenberger@enst.fr | laitenberger(a)enst.fr ] ). -- Antonio A. Casilli Associate Professor (HDR), Telecom Paris (Paris School of Telecommunications) Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS) Associate Member, LACI-IIAC (EHESS) Faculty Fellow, Nexa Center for Internet & Society *We respect your right to disconnect. This email send time is due to my own workflow efficiency. You are in no obligation to take action or reply to it outside your office hours.*

Oct. 22, 2019