April 2019 - nexa - server-nexa.polito.it

Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password
by Giacomo April 10, 2019

April 10, 2019

https://thehackernews.com/2019/04/wpa3-hack-wifi-password.html The Wi-Fi Protected Access III (WPA3) protocol was launched in an attempt to address technical shortcomings of the WPA2 protocol from the ground, which has long been considered to be insecure and found vulnerable to KRACK (Key Reinstallation Attack). Though WPA3 relies on a more secure handshake, known as Dragonfly, that aims to protect Wi-Fi networks against offline dictionary attacks, security researchers Mathy Vanhoef and Eyal Ronen found weaknesses in the early implementation of WPA3-Personal, allowing an attacker to recover WiFi passwords by abusing timing or cache-based side-channel leaks. "Concretely, attackers can then read information that WPA3 was assumed to safely encrypt. This can be abused to steal sensitive transmitted information such as credit card numbers, passwords, chat messages, emails, and so on," the researchers say.

1 0

"Ethics washing made in Europe"
by J.C. DE MARTIN April 10, 2019

April 10, 2019

Ethics washing made in Europe On Tuesday, the EU has published ethics guidelines for artificial intelligence. A member of the expert group that drew up the paper says: This is a case of ethical white-washing. Thomas Metzinger /Thomas Metzinger is Professor of Theoretical Philosophy at the University of Mainz and was a member of the commission's expert group that has worked on the guidelines published on Tuesday./ /Read his op-ed in German here <https://background.tagesspiegel.de/ethik-waschmaschinen-made-in-europe>./ It's really good news: Europe has just taken the lead in the hotly contested global debate on the ethics of artificial intelligence (AI). On Monday in Brussels, the EU Commission presented its Ethics Guidelines for Trustworthy AI. The 52-member High-Level Expert Group on Artificial Intelligence (HLEG AI), of which I am a member, worked on the text for nine months. The result is a compromise of which I am not proud, but which is nevertheless the best in the world on the subject. The United States and China have nothing comparable. How does it fit together? [...] continua qui: https://www.tagesspiegel.de/politik/eu-guidelines-ethics-washing-made-in-eu…

4 8

the-coming-ai-autumn
by J.C. DE MARTIN April 10, 2019

April 10, 2019

http://jeffreybigham.com/blog/2019/the-coming-ai-autumnn.html (Sent from my wireless device; please excuse brevity and typos (if any))

2 1

Landlord 2.0: Tech’s New Rentier Capitalism – OneZero
by J.C. DE MARTIN April 10, 2019

April 10, 2019

https://onezero.medium.com/landlord-2-0-techs-new-rentier-capitalism-a0bfe4… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Election meddling by foreign powers already underway, says Canadian spy agency
by Alberto Cammozzo April 10, 2019

April 10, 2019

I servizi in Canada e Israele sono preoccupati per gli interventi (russi e cinesi) nei social che mirerebbero ad accentuare la frammentazione politica e la polarizzazione sociale. *Election meddling by foreign powers already underway, says Canadian spy agency* <https://intelnews.org/2019/04/09/01-2527/> CSE CanadaThe manipulation of social media by foreign governments aiming to sow division in Canada ahead of the country’s federal election in October is growing, according to the country’s signals intelligence agency. In a report published Monday, the Communications Security Establishment (CSE), Canada’s national communications interception agency, warns that election meddling by foreign powers is already taking place. The report, titled “2019 Update: Cyber Threats to Canada’s Democratic Process”, says that voters, as well as specific political figures, have been targeted by foreign powers since 2015 in the North American country. The foreign intelligence agencies behind the efforts to manipulate Canada’s electoral process have systematically attempted to “polarize Canadians or undermine Canada’s foreign policy goals”, says the report. These efforts will continue and intensify in the run-up to October, claims the report, and concludes by warning that Canadians should expect to “encounter some form of foreign cyber interference ahead of, and during, the 2019 federal election”. However, foreign cyber interference on the scale that was experienced in the months leading up to the 2016 presidential election in the United States is improbable, according to the CSE. Meanwhile, in an unrelated development, the former director of the Canadian Security Intelligence Service (CSIS), Canada’s primary national intelligence service, said in an interview last week that Ottawa would have to be patient in dealing with Russia and —especially— China. Speaking at a public forum hosted by the Canadian International Council in Vancouver, Richard Fadden noted that neither China nor Russia wish to go to war with the West. What they want instead is to “fragment the West” and thus increase their own influence on the international scene, said Fadden, who directed the CSIS from 2009 to 2013. It would be fair for Canada to “poke back”, he said, but would have to be “careful how [to] do it”, he added. “We need to be realistic. We’re dealing with an emergent superpower and […] we’re going to have to be patient”, Fadden concluded. Anche qui: <https://www.theguardian.com/world/2019/apr/08/canada-election-meddling-soci…> *Why Are Israeli Elections Extremely Sensitive to Fake News?* <https://www.cfr.org/blog/why-are-israeli-elections-extremely-sensitive-fake…> [...] Political, economic, and social splits are the most important elements in the creation and distribution of fake news. Malicious actors tend to use fake news in order to heighten existing tensions between political, social, or religious groups. This weakened social cohesion makes societies more vulnerable to foreign influence campaigns. Many of the Russian trolls messages on social networks during the 2016 U.S. presidential elections did not focus on the presidential candidates, but rather were aimed at increasing tensions between American voters in the various issues of American society, especially between black and white Americans. By strengthening the conflicts, the Russian trolls sought to weaken the societal unity in the United States and public confidence in the U.S. democratic structure thereby influencing voting patterns. Israel’s inherent political instability, along with the great fragmentation of Israeli society, makes the country particularly vulnerable to foreign influence activities. Those who want to influence Israeli politics and foreign policy by disseminating fake news on social networks will be able to invest relatively limited and short-term efforts to exploit the existing divisions within the country. At the end of January, the technology firm Vocativ unveiled Iranian influence efforts, mainly on Twitter, which reached an estimated target audience of half a million Israeli users a month. The bots often rephrased authentic news headlines in a controversial manner to incite divisive responses from the electorate, focusing on issues such as wealth inequality, sexual harassment, poverty in Israel, and undermining of the Supreme Court. If successful, these efforts could lead to a shift of three or four seats on the electoral map, which may be very significant for determining the winning candidate of the upcoming elections. The Israeli answer to disinformation activities Despite the fateful potential of foreign influence campaigns, Israel - the "startup nation" - is lagging behind other countries in dealing with these campaigns. While some countries have developed coherent strategies for dealing with fake news, such as Denmark’s establishment of an inter-ministerial task force to counter influence operations in 2017, the current Israeli steps against online disinformation campaigns rely only on ad-hoc measures. For example, since the beginning of the election campaign, the Ministry of Foreign Affairs has worked with Twitter to identify and block more than 400 accounts that spread fake news. But what will happen after April 9? It can be assumed that regardless of the level of the foreign involvement in the upcoming elections, proposals to establish a permanent and long-term policy for dealing with foreign disinformation campaigns will be discussed. Based on worldwide experience and taking into account the Israeli reality, there are two steps that can be considered for effective Israeli policy. In 2017, the Central Elections Committee formulated recommendations to update the Propaganda Methods Law, which had not been updated since 1959. The recommendations included creating a duty of transparency for political publications on social networks (a step now being implemented by the Chairman of the Central Elections Committee, Judge Hanan Melcer), the prohibition of advertising of sponsored ads on networks on election day, the explicit prohibition to publish racist content during the elections, and improving the transparency of published election surveys. The legislative process for approving the recommendations was stalled, so its completion is vital. The second measure should be educational. In countries such as Canada, Belgium, and Croatia, there are varied media literacy campaigns and the Luxembourgian government implemented a national digital education strategy within its education system. Online influence operations for political needs are not limited to election campaigns and are becoming increasingly sophisticated. Therefore, it is important that the Israeli government formulate and implement relevant policies as soon as possible.

1 0

Police Body Cameras Aren't Having the Effects Many Expected
by J.C. DE MARTIN April 10, 2019

April 10, 2019

https://www.governing.com/topics/public-justice-safety/gov-body-camera-effe… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

A Year Later, Cybercrime Groups Still Rampant on Facebook
by Alberto Cammozzo April 10, 2019

April 10, 2019

<https://krebsonsecurity.com/2019/04/a-year-later-cybercrime-groups-still-ra…> Almost exactly one year ago, KrebsOnSecurity reported that a mere two hours of searching revealed more than 100 Facebook groups with some 300,000 members openly advertising services to support all types of cybercrime, including spam, credit card fraud and identity theft. Facebook responded by deleting those groups. Last week, a similar analysis led to the takedown of 74 cybercrime groups operating openly on Facebook with more than 385,000 members. Researchers at Cisco Talos discovered the groups using the same sophisticated methods I employed last year — running a search on Facebook.com for terms unambiguously tied to fraud, such as “spam” and “phishing.” Talos said most of the groups were less than a year old, and that Facebook deleted the groups after being notified by Cisco. Talos also re-confirmed my findings that Facebook still generally ignores individual abuse reports about groups that supposedly violate its ‘community standards,’ which specifically forbid the types of activity espoused by the groups that Talos flagged. “Talos initially attempted to take down these groups individually through Facebook’s abuse reporting functionality,” the researchers found. “While some groups were removed immediately, other groups only had specific posts removed.” But Facebook deleted all offending groups after researchers told Facebook’s security team they were going to publish their findings. This is precisely what I experienced a year ago. Not long after Facebook deleted most of the 120 cybercrime groups I reported to it back in April 2018, many of the groups began reemerging elsewhere on the social network under similar names with the same members. Instead of reporting those emergent groups directly to people at Facebook’s public relations arm — something most mere mortals aren’t able to do — KrebsOnSecurity decided to report the re-offenders via Facebook’s regular abuse reporting procedures. What did we find? KrebsOnSecurity received a series of replies saying that Facebook had reviewed my reports but that none of the groups were found to have violated its standards. KrebsOnSecurity later found that reporting the abusive Facebook groups to a quarter-million followers on Twitter was the fastest way to get them disabled. How else have Facebook’s public statements about its supposed commitment to security and privacy been undermined by pesky facts over the past few weeks? KrebsOnSecurity broke the news that Facebook developers wrote apps which stored somewhere between 200 million and 600 million Facebook user passwords in plain text. These plaintext passwords were indexed by Facebook’s data centers and searchable for years by more than 20,000 Facebook employees. It emerged that Facebook’s new account signup page urges users to supply the password to their email account so Facebook can harvest contact details and who knows what else. Yes, that’s right: Facebook has been asking new users to share their email password, despite decades of consumer advice warning that is exactly what phishers do. Cybersecurity firm UpGuard discovered two troves of unprotected Facebook user data sitting on Amazon’s servers, exposing hundreds of millions of records about users, including their names, passwords, comments, interests, and likes. Facebook is making users searchable by marketers and others via phone number, even when that phone number was only provided solely for the purposes of multi-factor authentication. [...]

1 0

Codecademy vs. The BBC Micro
by Giacomo Tesio April 10, 2019

April 10, 2019

https://twobithistory.org/2019/03/31/bbc-micro.html In an audacious move, the BBC, a public service broadcaster funded by the government, decided that it would solve Britain’s national competitiveness problems by helping Britons everywhere overcome their aversion to computers. It launched the Computer Literacy Project, a multi-pronged educational effort that involved several TV series, a few books, a network of support groups, and a specially built microcomputer known as the BBC Micro. The project was so successful that, by 1983, an editor for BYTE Magazine wrote, “compared to the US, proportionally more of Britain’s population is interested in microcomputers.” The editor marveled that there were more people at the Fifth Personal Computer World Show in the UK than had been to that year’s West Coast Computer Faire. Over a sixth of Great Britain watched an episode in the first series produced for the Computer Literacy Project and 1.5 million BBC Micros were ultimately sold. [...] If you google “learn to code,” the first result you see is a link to Codecademy’s website. If there is a modern equivalent to the Computer Literacy Project, something with the same reach and similar aims, then it is Codecademy. “Learn to code” is Codecademy’s tagline. I don’t think I’m the first person to point this out—in fact, I probably read this somewhere and I’m now ripping it off—but there’s something revealing about using the word “code” instead of “program.”

1 0

"Does Google meet its users’ expectations around consumer privacy? This news industry research says no"
by J.C. DE MARTIN April 10, 2019

April 10, 2019

Does Google meet its users’ expectations around consumer privacy? This news industry research says no /A significant majority of consumers do not expect Google to track their activities across their lives, their locations, on other sites, and on other platforms./ By Jason Kint <https://www.niemanlab.org/author/jkint/> @jason_kint <https://twitter.com/jason_kint> April 3, 2019, 9:52 a.m. https://www.niemanlab.org/2019/04/does-google-meet-its-users-expectations-a…

1 0

Special Issue IEEE: "Machine Ethics: The Design and Governance of Ethical AI and Autonomous Systems"
by J.C. DE MARTIN April 10, 2019

April 10, 2019

PROCEEDINGS OF THE IEEE Machine Ethics: The Design and Governance of Ethical AI and Autonomous Systems Volume 107, Issue 3 | March 2019 Guest Editors Special Issue Papers Point of View: The Trolley, the Bull Bar, and Why Engineers Should Care About the Ethics of Autonomous Cars Point of View: Toward the Agile and Comprehensive International Governance of AI and Robotics Scanning Our Past: Computer Graphic Re-Visited: The Virtual Reconstruction of One of the First Computer Art Exhibitions http://proceedingsoftheieee.ieee.org/view-recent-issues/march-2019/ Special Issue Papers Scanning the Issue By A. F. Winfield, K. Michael, J. Pitt, and V. Evers Designing a Value-Driven Future for Ethical Autonomous and Intelligent Systems By G. Adamson, J. C. Havens, and R. Chatila This paper provides an overview of IEEE’s current activities related to ethics and argues that human values must drive our future autonomous systems in a way that both protects and benefits humanity. A Value-Driven Eldercare Robot: Virtual and Physical Instantiations of a Case-Supported Principle-Based Behavior Paradigm By M. Anderson, S. L. Anderson, and V. Berenz This paper describes both simulated and real-robot implementations of an eldercare robot in which ethical principles are learned, via inductive logical programming, from a set of training examples provided by a project ethicist. On Proactive, Transparent, and Verifiable Ethical Reasoning for Robots By P. Bremner, L. A. Dennis, M. Fisher, and A. F. Winfield In this paper, the authors review and update an approach to the design of ethical robots based on a simulation-based internal model, in which the ethical robot’s reasoning is both transparent and verifiable. Motivations and Risks of Machine Ethics By S. Cave, R. Nyrup, K. Vold, and A. Weller In this paper, the authors clarify various philosophical issues surrounding the concept of an ethical machine and the aims of machine ethics, outlining the potential risks that must be considered and managed. Clarifying Privacy, Property, and Power: Case Study on Value Conflict Between Communities By A. Ema, H. Osawa, R. Saijo, A. Kubo, T. Otani, H. Hattori, N. Akiya, N. Kanzaki, M. Kukita, K. Komatani, and R. Ichise Based around a case study on the “flaming” of fan fiction, this paper aims to clarify notions of privacy and draw lessons for the ethical governance of AI in the presence of value conflicts. Engineering-Based Design Methodology for Embedding Ethics in Autonomous Robots By L. J. Robertson, R. Abbas, G. Alici, A. Munoz, and K. Michael This paper explores a method for embedding ethics into the design and use of an endoscopic capsule for diagnosis and drug delivery, using a codesign approach to reduce end-user risk. Inside the Organization: Why Privacy and Security Engineering Is a Challenge for Engineers By S. Spiekermann, J. Korunovska, and M. Langheinrich This paper reports on the findings from a survey of 124 engineers in order to understand the drivers and impediments facing ethical systems development with respect to privacy and security engineering. Point of View The Trolley, the Bull Bar, and Why Engineers Should Care About the Ethics of Autonomous Cars By J. Bonnefon, A. Shariff, and I. Rahwan Point of View Toward the Agile and Comprehensive International Governance of AI and Robotics By W. Wallach and G. Marchant Scanning Our Past Computer Graphic Re-Visited: The Virtual Reconstruction of One of the First Computer Art Exhibitions By J. Horáková and J. Mucha

1 0