February 2019 - nexa - server-nexa.polito.it

Your Speech, Their Rules: Meet the People Who Guard the Internet
by J.C. DE MARTIN Feb. 27, 2019

Feb. 27, 2019

https://onezero.medium.com/your-speech-their-rules-meet-the-people-who-guar… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Portale Archivi della Scienza
by Rossana Morriello Feb. 27, 2019

Feb. 27, 2019

Segnalo la nascita del portale Archivi della Scienza, curato dal Museo Nazionale della Scienza e della Tecnologia e dallAccademia Nazionale delle Scienze con la collaborazione di diverse altre istituzioni http://www.museoscienza.org/archivi-della-scienza/ Il portale è stato presentato per la prima volta lunedì scorso a Roma e ci sarà una seconda presentazione lunedì 4 marzo a Milano (al link i dettagli). Archivi della Scienza raccoglie e rende disponibili online, con le relative descrizioni, oltre 1500 fondi di istituzioni di ricerca scientifica e carte personali di scienziati, conservati in più di 200 istituti su tutto il territorio italiano ed è aperto alla collaborazione e al contributo della comunità scientifica. Cordialità Rossana Morriello --------------------- Dott.ssa Rossana Morriello Politecnico di Torino Servizio Qualità e Valutazione Corso Duca degli Abruzzi, 24 - 10129 Torino Tel. 011 0906009 <mailto:rossana.morriello@polito.it> rossana.morriello(a)polito.it <mailto:pubblicazioni@polito.it> pubblicazioni(a)polito.it ----------------------

1 0

The Complicated Economy of Open Source Software
by Giacomo Tesio Feb. 27, 2019

Feb. 27, 2019

It was just before midnight on New Years Eve, 2011, when Stephen Henson broke the internet. The 43-year old British software developer had accepted a small change to the code for OpenSSL, an open source encryption protocol that secures a substantial portion of the web. The fact that it was open source meant that anyone could see its code online and volunteer to help write code for the project. But just because anyone could contribute didn’t mean many people did. [...] Since its inception, one of the biggest selling points of open source development was what the software developer Eric Raymond called “Linus’s Law,” or the idea that with enough people looking at some code “all bugs become shallow.” Thus, after the Heartbleed bug was patched, the biggest questions on everyone’s mind was how such a critical vulnerability could go unnoticed for so long and whether similar bugs lurked in the code for other open source projects. [...] Henson was the only OpenSSL developer working on the project full time—and for a fraction of what he could have made taking his considerable technical skills elsewhere. “These guys don’t work on OpenSSL for money,” Marquess wrote. “They don’t do it for fame. They do it out of pride in craftsmanship and the responsibility for something they believe in...knowing that [they] will be ignored and unappreciated until something goes wrong.” Clearly, something was broken with a system where the security of the global internet was almost entirely supported by the selfless efforts of one overworked and underpaid programmer. As for who was to blame, Marquess pointed to the “commercial companies and governments who use OpenSSL extensively and take it for granted.” [... Mandatory citation of Stallman at MIT...] In the midst of the orgiastic dotcom bubble, when tech companies that barely existed were able to command obscene valuations, Stallman’s ethically-driven free software movement offered a starkly alternative vision of the future. Unlike the digital castles-in-the-air being churned out in the offices of Silicon Valley venture capitalists, free software worked. Stallman and his acolytes had demonstrated that it was possible to make great software that could be modified to meet the individual needs of users by combining ethical conviction and technical chops. For a brief moment in the mid-90s, it seemed like the future of software was free—as in freedom. Then in 1997, a programmer named Eric Raymond published The Cathedral and the Bazaar, an essay that analyzed the process of developing free software. At the core of Raymond’s seminal text is an idea that he has termed “Linus’s Law,” the idea that if enough people are working on a software program, any bugs hidden in the code will be caught and patched quickly. [...] The success [of open source] after Netscape would depend on replacing the negative Free Software Foundation stereotypes with positive stereotypes of our own [...] There was just one problem: The free software movement was burdened with a major ethical component, and ethics are bad for business. [... e dopo aver speso un terzo dell'articolo a spiegare che Etica e Free Software fanno male ...] Although open source software was rapidly embraced by many of the biggest tech companies in Silicon Valley, economists struggled to explain how these projects, which bucked all the conventions of the marketplace, could be so successful. By that point, the standard explanation peddled by the free software crowd—that free software development could be sustained on the basis of the ethical imperatives of freedom and altruism—no longer seemed adequate to account for the rapid emergence and adoption of a project like Linux. To that point, no other industry in history had ever produced such a technically demanding project on that scale by relying solely on the goodwill of its contributors. Continua con analoghe buffe acrobazie logiche su https://motherboard.vice.com/en_us/article/43zak3/the-internet-was-built-on… Non sfiora lontanamente il pensiero degli autori che l'Open Source sia insostenibile proprio perché strumento di marketing (e quindi secondario agli interessi di chi lo produce) e che il Free Software funzioni COME funziona perché completamente indifferente agli aspetti commerciali e alla market share. Non li sfiora, perché la soluzione altrimenti sarebbe semplice: TASSE. Tasse sull'uso, sulla modifica e sulla distribuzione del software "bene comune". Tasse con cui finanziare il software libero. Giacomo

1 1

"Technologies of Domination and Hacker Pedagogy" - Thursday, 28th February 6:30pm, Guarini Campus
by donna d.r. Feb. 27, 2019

Feb. 27, 2019

Ciao a tutt* domani alla John Cabot University ospitiamo un talk che potrebbe essere di interesse, qui sotto le info, grazie! Donatella You are cordially invited to “*Technologies of Domination and Hacker Pedagogy”*, *C.I.R.C.E. Research Group* on *Thursday*, *28th February 2019, at 6:30pm* in the *Aula Magna, Guarini Campus*. Kindly RSVP at: https://bit.ly/2DPhetS <https://bit.ly/2DPhetS> C.I.R.C.E. Research Group "Technologies of Domination and Hacker Pedagogy" <https://bit.ly/2DPhetS> bit.ly C.I.R.C.E. Research Group <https://bit.ly/2DPhetS> *Address*: Aula Magna Regina, Guarini Campus, John Cabot University, Via della Lungara 233, 00165 Rome

2 2

Cyber-Mercenary Groups Shouldn't be Trusted in Your Browser or Anywhere Else
by Giacomo Tesio Feb. 27, 2019

Feb. 27, 2019

DarkMatter, the notorious cyber-mercenary firm based in the United Arab Emirates, is seeking to become approved as a top-level certificate authority in Mozilla’s root certificate program. Giving such a trusted position to this company would be a very bad idea. DarkMatter has a business interest in subverting encryption, and would be able to potentially decrypt any HTTPS traffic they intercepted. One of the things HTTPS is good at is protecting your private communications from snooping governments—and when governments want to snoop, they regularly hire DarkMatter to do their dirty work. [...] Browsers rely on this list of authorities, which are trusted to verify and issue the certificates that allow for secure browsing, using technologies like TLS and HTTPS. Certificate Authorities are the basis of HTTPS, but they are also its greatest weakness. Any of the dozens of certificate authorities trusted by your browser could secretly issue a fraudulent certificate for any website (such as google.com or eff.org.) A certificate authority (or other organization, such as a government spy agency,) could then use the fraudulent certificate to spy on your communications with that site, even if it is encrypted with HTTPS. [...] The companies on your browser’s trusted CA list rarely commit such fraud, since not issuing malicious certificates is the foremost responsibility for a certificate authority. But it can and does still happen. The concern in this case is that DarkMatter has made its business spying on internet communications, hacking dissidents’ iPhones, and other cyber-mercenary work. DarkMatter’s business objectives directly depend on intercepting end-user traffic on behalf of snooping governments. Giving DarkMatter a trusted root certificate would be like letting the proverbial fox guard the henhouse. [...] Other organizations have used this fact to game the system in the past and worm their way into our browsers. In 2009, Mozilla allowed CNNIC, the Chinese state certification authority, into the root CA program, after CNNIC assured Mozilla and the larger community that it would not abuse this power to create fake certificates and break encryption. In 2015 CNNIC was caught in a scandal when an intermediate CA authorized by CNNIC issued illegitimate certificates for several google-owned domains. Google, Mozilla, and others quickly revoked CNNIC’s authority in their browsers and operating systems after learning about the breach of trust. CNNIC is not the only example of this. In 2013 Mozilla considered dropping the Swedish company Teliasonera after accusations that it had helped enable government spying. Teliasonera ultimately did not get dropped, but it continues to have security problems to this day. https://www.eff.org/deeplinks/2019/02/cyber-mercenary-groups-shouldnt-be-tr… ____ Insomma, agli USA non piace la concorrenza! :-D Ma... usate HTTPS! HTTPS everywhere! HTTPS è sicuro! Let's Encrypt! :-D Giacomo PS: chi non sa quando NON usare uno strumento, non ha le competenze per usarlo.

1 0

Platform societies + Communities at a Crossroads (iniziative legate a STSItalia)
by alvise Feb. 27, 2019

Feb. 27, 2019

Ciao, ormai da circa due mesi seguo la mailing list di Nexa e devo dire che sono molto contento di farne parte visto l'interesse dei post e il respiro delle questioni affrontate. Al di là di "annunciarmi" alla lista espleto il mio ruolo quasi istituzionale di membro della Società Italiana per lo Studio Sociale della Scienza e della Tecnologia per segnalare due eventi legati agli STS italiani (di cui uno ufficiale dell'associazione) Ma ne approfitto per annunciare che per una fortuita coincidenza, oggi sono a Torino a fare esami in Via Boggio e quindi farò un salto al seminario, che peraltro mi sembra molto in linea con i miei interessi. Qui gli annunci Seminario Nazionale STS ITALIA. PLATFORM SOCIETIES AND NEW VULNERABILITIES Sapienza – Università di Roma Dipartimento di Scienze Sociali ed Economiche (DiSSE) Venerdì 8 Marzo 2018 (via Salaria 113, Aula C4, secondo piano) http://www.stsitalia.org/?p=1998&lang=en New Book out: Communities at a Crossroads: Material semiotics for online sociability in the fade of cyberculture by Annalisa Pelizza. Downloadable for free https://networkcultures.org/blog/publication/tod-28-communities-at-a-crossr… a più tardi fisicamente con alcuni e alcune di voi alvise

1 0

Make Google Do It. Interpellating digital subject/objects of desire in the gendering of artificially intelligent virtual personal assistants - Guest research seminar
by Guido Noto La Diega Feb. 26, 2019

Feb. 26, 2019

Car* NINSO (Northumbria Internet & Society Research Group) ha il piacere di invitarvi a partecipare all'incontro con Dr Rachel Adams sul tema ‘*Make Google Do It.** Interpellating digital subject/objects of desire in the gendering of artificially intelligent virtual personal assistants*.’ *Abstract. *The seminar will explore how the particular gendering of artificially intelligence virtual personal assistants as female through their names, characterisations and marketing, meets with an imperative grammar with which users are to engage with them, most notably with the call “Hey Siri!” or “Hey Alexa!” Drawing on Louis Althusser and Judith Butler’s accounts of interpellation, I discuss how the gendering of these devices coupled with the new techno-crafted grammar given to engage with them, plays into a broader history of female automata produced as both subjects to and objects of a male desire to (literally) constitute, control and command the female. Thus, expanding on the current account of female gendered virtual personal assistants as a strategy for softening the transition from a traditional past to a disruptive digital future, I argue that, more critically, this gendering re-inscribes and legitimises a historically embedded male desire which works, primarily, to ensure the female is always in a subject to/object of relationship to their male “user”/maker, without agency to attain her own status as subject. *Dove*: Faculty of Business and Law (CCE1), room 405 (ma *se non potete venire,* l'incontro sara' registrato e pubblicato sul nostro canale YouTube!) *Quando*: Wednesday 6th March 2019 alle 12 Il link per la registrazione e' https://www.eventbrite.co.uk/e/make-google-do-it-tickets-56349087638. A presto, Guido Guido Noto La Diega, PhD FHEA Senior Lecturer / European Research Partnerships Coordinator @ Northumbria Law School Director @italiot | Fellow @nexacenter | Co-convenor @NINSOrig | Co-founder @DPA2018 Northumbria Law School City Campus East, Newcastle upon Tyne NE1 8ST noto.la.diega(a)gmail.com +44(0)191 349 5562 You can access my papers on Academia.edu <http://northumbria.academia.edu/GuidoNotoLaDiega> and on the Social Science Research Network (SSRN <https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=1794950>) This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Unless necessary, please do not print this e-mail.

3 4

Segnalazione
by Cristina Iuli Feb. 26, 2019

Feb. 26, 2019

Buongiorno a tutti, mi permetto di segnalare una pubblicazione che ritengo possa essere d'interesse agli iscritti alla newsletter di Nexa. Si tratta del n. 54 della rivista McSweeney's intitolata "The End of Trust. An investigation of surveillance in the digital age". Contiene, tra le altre cose, una lunga intervista a Snowden intitolata "Edward Snowden Explains Blockchain to His Lawyer - and the Rest of Us". Saluti cordiali, Cristina Iuli Maria Cristina Iuli Lingua e Letteratura Nordamericana Dipartimento Studi Umanistici Università del Piemonte Orientale Piazza S. Eusebio, 3 13100 Vercelli ITALY Tel 0039 0161 222 8304 Fax 0039 0161 269959

1 0

67° Nexa Lunch Seminar | 27 febbraio 2019
by Nexa Media Feb. 25, 2019

Feb. 25, 2019

Nexa Center for Internet and Society Newsletter Se non visualizzi correttamente questo messaggio clicca qui <http://nexa.polito.it/lunch-67> NEXA 67° Nexa Lunch Seminar Mercoledi 27 febbraio 2019, ore 13.00 - 14.00 Politecnico di Torino http://nexa.polito.it/lunch-67 Follow the thing: li-ion battery Speaker Alberto Valz Gris (FULL - Politecnico di Torino) This event will be webcast live: https://nexa.polito.it/nexa-hangout-on-air Li-ion batteries are constructed through a complex production network spanning a significant portion of the planet. From raw materials extraction across the Southern hemisphere to cell production in the Northern one, their geographies mobilise urban theory well beyond its conventional site: cities. Through a multi-sited and relational research practice, the project aims at articulating *the role of production networks and emerging technologies in unequal processes of urbanisation at the planetary scale*. The talk will focus on broadly quantitative data describing the planetary scenario of the li-ion commodity chain as well as more detailed empirical data collected through the first of a series of mobile ethnographies across the Chilean-Argentinian lithium-rich Atacama plateau. /Ingresso libero - Sarà disponibile un leggero rinfresco per coloro che si saranno registrati su http://lunch67.eventbrite.com entro il 25 febbraio./ BIOGRAFIE - e informazioni supplementari [VAlzGris] *Alberto VALZ GRIS* is a PhD candidate in urban geography at the Polytechnic University of Turin and part of the Future Urban Legacy Lab <http://urbanlegacylab.net/>. His doctoral research focuses on emerging processes urbanisation at the planetary scale through global production networks and the automation of labour. Letture consigliate e link utili: * Merchant, B. (2017) /The One Device/. London: Bantam Press. * Frankel, T. & Whoriskey, P. (2016, December 19)/Tossed Aside in the 'White Gold' Rush/ <https://www.washingtonpost.com/graphics/business/batteries/tossed-aside-in-…>. The Washington Post. * JCook, I., Evans, J., Griffiths, H., Morris, R., & Wrathmell, S. (2007). /It’s more than just what it is’: Defetishising commodities, expanding fields, mobilising change…./ Geoforum, 38(6), 1113-1126. * Marcus, G. E. (1995)./Ethnography in/of the world system: The emergence of multi-sited ethnography/. "Annual review of anthropology", 24(1), 95-117. * Roy, A. (2009). /The 21st-century metropolis: new geographies of theory/. "Regional Studies". 43(6), 819-830. * Brenner, N. (2014)./Implosions/explosions. Towards a Study of Planetary Urbanization/. Berlin: Jovis. Che cosa sono il Centro Nexa e i cicli di incontri “Mercoledì di Nexa” e “Nexa Lunch Seminar” #lunch67 <https://twitter.com/search?f=tweets&q=%23lunch67&src=typd> #urbanisation <https://twitter.com/hashtag/urbanisation?src=hash> #lionbattery <https://twitter.com/search?f=tweets&q=%23lionbattery&src=typd> Il Centro Nexa su Internet & Società del Politecnico di Torino (Dipartimento di Automatica e Informatica) è un centro di ricerca indipendente e interdisciplinare che studia Internet e il suo effetto sulla società. Maggiori informazioni all'indirizzo: http://nexa.polito.it/about. Durante i “*Mercoledì di Nexa*”, che si tengono *ogni 2° mercoledì del mese* alle *ore 18 in punto*, il Centro Nexa su Internet e Società apre le sue porte non solo agli esperti e a tutti coloro i quali lavorano con Internet, ma anche a semplici appassionati e cittadini. Il ciclo di incontri intende approfondire, con un linguaggio preciso ma divulgativo, i temi legati alla Rete: motori di ricerca, Creative Commons, social networks, open source/software libero, neutralità della rete, libertà di espressione, privacy, file sharing, big e open data, smart cities e molto altro. Al centro di quasi tutti gli incontri un ospite pronto a dialogare con i direttori del Centro Nexa, il Prof. Juan Carlos De Martin del Politecnico di Torino e il Prof. Marco Ricolfi dell'Università di Torino, nonché lo staff e i Fellows del Centro Nexa. Maggiori informazioni sui Mercoledì di Nexa, incluso un elenco di tutti i “Mercoledì” passati, sono disponibili all'indirizzo: http://nexa.polito.it/mercoledi. Si segnala inoltre che dal maggio 2012 *ogni 4° mercoledì* del mese *dalle ore 13 alle ore 14* il Centro Nexa organizza anche i "*Nexa Lunch Seminar*". Una lista di tutti i “Lunch Seminar” passati è disponibile all'indirizzo: http://nexa.polito.it/lunch-seminars. See our events calendar <http://nexa.polito.it/events> if you're curious about future luncheons, discussions, lectures, and conferences not listed in this email. Our events are free and open to the public, unless otherwise noted. Responsabile Comunicazione Centro Nexa su Internet & Società: *Francesco Ruggiero*, tel: +39 011 090 7219, Mob: +39 349 1335082, francesco.ruggiero(a)polito.it <mailto:francesco.ruggiero@polito.it>. Maggiori informazioni sui Mercoledì di Nexa e i Nexa Lunch Seminar, sono disponibili all'indirizzo: http://nexa.polito.it/events. Weekly Events Newsletter. Sign up <http://nexa.polito.it/mailing-lists> to receive this newsletter if this email was forwarded to you. To manage your subscription preferences, please click here <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa>. Connect & get involved: Jobs, internships, and more <http://nexa.polito.it/get-involved>.

1 1

The case of the supersized shebang
by Giacomo Tesio Feb. 25, 2019

Feb. 25, 2019

The array used to hold the shebang line is defined to be 128 bytes in length. That naturally leads to the question of what happens if the line exceeds that length. In current kernels, the line will simply be truncated to fit the buffer, after which execution proceeds as normal. Or, at least, as normal as can be expected given that part of the shebang line is now missing. Recently, Oleg Nesterov decided that this behavior is wrong; it could cause misinterpreted arguments or, should the truncated line happen to be the valid name of an interpreter executable in it own right, run the wrong interpreter entirely. He put together a patch (merged for 5.0-rc1) changing that behavior; the kernel would fail the attempt to find an alternative interpreter entirely in that situation, causing a fallback to the default shell. [...] One might well wonder just how things worked before, since a truncated version of that shebang line is still wrong. It turns out that the Perl interpreter is able to detect this truncation; it rereads the first line itself and sets its arguments properly. As long as the interpreter itself is the correct one, things will work as expected. As of 5.0-rc1, though, the correct interpreter would no longer be invoked, and things went downhill from there. The kernel project's policy on this kind of change is clear, but Linus Torvalds reiterated it in this case anyway: > It doesn't matter if it "corrupted" things by truncating it. > All that matters is "it used to work, now it doesn't" > Yes, maybe it never *should* have worked. And yes, > it's sad that people apparently had cases that depended > on this odd behavior, but there we are. [...] Had that been the end of the story, it would have been just another case of a regression introduced during the merge window, then corrected during the stabilization period. But, as it happens, this change found its way into the 4.20.8, 4.19.21, 4.14.99, and 4.9.156 stable kernel updates, despite the fact that neither the author nor the maintainer who merged it (Andrew Morton) had marked it for stable backporting. [...] Nesterov's patch had been automatically selected for backporting by Sasha Levin's machine-learning system. https://lwn.net/SubscriberLink/779997/11de2bdc8dbc0d69/ Non so davvero se sia più inquietante che la sicurezza informatica dei sistemi Linux dipenda da un software che calcola quali patch distribuire come stabili o... che bug vecchi di 50 anni non vengono corretti solo perché Perl ha imparato a sopravvivere con essi. Giacomo

1 0