August 2019 - nexa - server-nexa.polito.it

Findings of Shift: The Commission on Work, Workers, and Technology

by J.C. DE MARTIN

https://shiftcommission.work/findings-of-shift-the-commission-on-work-worke… (Sent from my wireless device; please excuse brevity and typos (if any))

Aug. 14, 2019

The fashion line designed to trick surveillance cameras | World news | The Guardian

by Alberto Cammozzo

<https://www.theguardian.com/world/2019/aug/13/the-fashion-line-designed-to-…> Automatic license plate readers, which use networked surveillance cameras and simple image recognition to track the movements of cars around a city, may have met their match, in the form of a T-shirt. Or a dress. Or a hoodie. The anti-surveillance garments were revealed at the DefCon cybersecurity conference in Las Vegas on Saturday by the hacker and fashion designer Kate Rose, who presented the inaugural collection of her Adversarial Fashion line. Rose credits a conversation with a friend, the Electronic Frontier Foundation researcher Dave Maass, for inspiring the project: “He mentioned that the readers themselves are not very good,” she said. “They already read in things like picket fences and other junk. I thought that if they’re fooled by a fence, then maybe I could take a crack at it.” To human eyes, Rose’s fourth amendment T-shirt contains the words of the fourth amendment to the US constitution in bold yellow letters. The amendment, which protects Americans from “unreasonable searches and seizures”, has been an important defense against many forms of government surveillance: in 2012, for instance, the US supreme court ruled that it prevented police departments from hiding GPS trackers on cars without a warrant. [...]

Aug. 14, 2019

If you work for Uber or DoorDash, your boss isn't a person but an algorithm

by J.C. DE MARTIN

https://www.cbc.ca/news/technology/pringle-uber-doordash-gig-economy-1.5238… (Sent from my wireless device; please excuse brevity and typos (if any))

Aug. 13, 2019

I: OSAC's August 2019 Standards Bulletin Now Available

by Aldo Pedico

Per chi fosse interessato Mobile +39.3482244924 a.pedico(a)teleion.it<https://owa.teleion.it/OWA/redir.aspx?SURL=DUZCqLdUdoandbWpBmWHxyBfsbaJ9ubk…> TELEION s.r.l. Via Ferrero 31 – 10098 Rivoli (TO) www.teleion.it<http://www.teleion.it> ________________________________ From: National Institute of Standards and Technology (NIST) <subscriptions(a)service.govdelivery.com> Sent: martedì 6 agosto 2019 17:52 To: Aldo Pedico Subject: OSAC's August 2019 Standards Bulletin Now Available [OSAC Standards Bulletin] The Organization of Scientific Area Committees for Forensic Science (OSAC)<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> Standards Bulletin provides an update on forensic science standards that are moving through the development process at Standards Developing Organizations (SDOs) and those that are moving through OSAC's Registry Approval Process<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…>. Read the August 2019 Standards Bulletin<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> to learn about the latest forensic science standards that have been published, are open for OSAC Registry and SDO comments, and are being proposed. VIEW PDF<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> ________________________________ [NIST]<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> Questions? Contact Us<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> STAY CONNECTED: [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6493…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6492…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> [http://content.govdelivery.com/attachments/fancy_images/USNIST/2015/10/6493…] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> SUBSCRIBER SERVICES: Manage Preferences<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> | Unsubscribe<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> | Help<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…> ________________________________ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…>. Technical questions? Contact inquiries(a)nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 [GovDelivery logo] <http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkP…>

Aug. 13, 2019

ACLU: "Say No to the “Cashless Future” — and to Cashless Stores"

by J.C. DE MARTIN

*Say No to the “Cashless Future” — and to Cashless Stores* By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy, and Technology Project AUGUST 12, 2019 | 3:30 PM […] Continua qui: https://www.aclu.org/blog/privacy-technology/consumer-privacy/say-no-cashle…

Aug. 13, 2019

Re: [nexa] How I Fully Quit Google (And You Can, Too)

by Stefano Quintarelli

alla fine, sono praticamente tutti gli stessi tool che anch0io ho sperimentato.. solo che per mail e calendario preferisco una app locale sul pc per cui uso thunderbird per la mail (disabilitando il calendar lightning che e' una pena per calendari grossi) ed uso emClient (solo per il calendar) il tutto sincronizzato con un account email imap a pagamento, e nextcloud per calendar e rubrica. (aquamail e business calendar sul mobile) pero' non dice nulla per quanto riguatrda i doc condivisi. io uso collabora office (canale CODE) ciao!, s. Il 12/08/2019 09:36, don Luca Peyron ha scritto: > /This guide is to show you how I quit the Googleverse, and the > alternatives I choose based on my own research and personal needs. I’m > not a technologist or a coder, but my work as a journalist requires me > to be aware of security and privacy issues/. > > Just a joke or a trip.... > > Have a nice day > > dl > > https://medium.com/s/story/how-i-fully-quit-google-and-you-can-too-4c2f3f85… > > _________________________ > www.universitari.to.it <http://www.universitari.to.it> > via XX settembre 83, Torino > tel. 011 5156239 > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >

Aug. 12, 2019

Relazioni tra il GDPR ed il Cyber Security Act

by Aldo Pedico

Buongiorno a tutti, vi allego i documenti in cui ho analizzato i punti d'intersezione logica tra il Reg. UE 2016/679 ed il Reg. UE 2019/881, RGPD o GDPR ed il Cybersercurity Act. Aldo Mobile +39.3482244924 a.pedico(a)teleion.it<https://owa.teleion.it/OWA/redir.aspx?SURL=DUZCqLdUdoandbWpBmWHxyBfsbaJ9ubk…> TELEION s.r.l. Via Ferrero 31 – 10098 Rivoli (TO) www.teleion.it<http://www.teleion.it>

Aug. 12, 2019

bellingcat - Guccifer Rising? Months-Long Phishing Campaign on ProtonMail Targets Dozens of Russia-Focused Journalists and NGOs - bellingcat

by Alberto Cammozzo

<https://www.bellingcat.com/news/uk-and-europe/2019/08/10/guccifer-rising-mo…> A sophisticated phishing campaign targeting Bellingcat and other Russia-focused journalists has been much larger in scope than previously thought, and has lasted at least several months. Bellingcat has identified dozens of targeted individuals across Europe and the US, with the earliest reported attack dating back to April 24 2019, and some evidence suggesting the campaign was in the works since as early as March 2018. The target list of over 30 individuals using the end-to-end encrypted ProtonMail email service includes journalists, researchers, academics, employees of NGOs, and political activists. The one common denominator among them is the Russian focus of their research or activist work. Contrary to previous reporting, we have identified that at least some of the phishing attempts have been successful. Bellingcat believes that this phishing campaign formed a stage of a larger ongoing hacking operation against Russia-focused journalists and researchers, with various methods and tools – some of them without precedent – being deployed against a range of targets both within Russia and abroad. “A Most Sophisticated Phishing Campaign” The active, publicly traceable phase of the phishing operation began in early April, when the perpetrators registered 11 domains intended to impersonate ProtonMail mail-hosting sites. Bellingcat has identified five different domains that were used between April 26 and July 23 2019 when our initial reporting led to a closure of the offending websites. These domains were: my[.]secure-protonmail[.]com (April and May) actions[.]protonmail[.]team (May) mail[.]protonmail[.]systems (June and July) mail[.]protonmail[.]sh (July) mailprotonmail[.]ch (July) Based on an iterative technique termed “timestamp pivoting” , cyber-threat consultancy ThreatConnect were able to identify a further 6 domains registered by the same actor group. Timestamp-pivoting essentially scouts out domains that were registered in close temporal proximity to the known offending domains, on the assumption that cyber-crime actors purchase groups of a domains in single transactions to minimize resources and exposure. mailprotonmail[.]com protonmail[.]direct protonmail[.]gmbh prtn[.]app protonmail[.]support prtn[.]xyz Timestamp-pivoting is not a bullet-proof algorithm and is most likely to be successful with domains registered via smaller registrars. That said, ThreatConnect’s approach did identify two domains that we later confirmed to have been used for the phishing operation. We have not identified phishing traffic from any of the remaining registered domains. The phishing messages were in fact fake ProtonMail alerts suggesting the user’s email account had been compromised or subject to suspicious login attempts. The messages came in 8 different flavors, with one of the following subject lines: “Unrecognised connection was blocked”, “Unknown connection alert”, “Someone knows your Protonmail password”, “ProtonMail unusual network activity”,” ProtonMail suspicious login”, “Keep your ProtonMail account secure”, “New login from unusual place”, and “Someone exported your encryption keys”. The sender optically appeared usually as support[(a)]protonmail.ch (a legitimate Protonmail service account). However, email headers show that this sender address was spoofed, with the actual sender – visible in the Return-Path variable – being one of three external web-mail accounts hosted at the Germany-based free mail service mail.uk: kobi.genobi[(a)]mail[.]uk, notifysendingservice[(a)]mail[.]uk and xavi.alonso[(a)]mail[.]co[.]uk. We identified that the first two of these accounts have been closed by Mail.de after the initial publications about phishing campaign; however the third one is not closed as of press time. (Our detailed list of questions about the incident and the closure of the two accounts to the owner of the mail service, Mail.de GmbH, were not answered.) [...]

Aug. 12, 2019

How I Fully Quit Google (And You Can, Too)

by don Luca Peyron

*This guide is to show you how I quit the Googleverse, and the alternatives I choose based on my own research and personal needs. I’m not a technologist or a coder, but my work as a journalist requires me to be aware of security and privacy issues*. Just a joke or a trip.... Have a nice day dl https://medium.com/s/story/how-i-fully-quit-google-and-you-can-too-4c2f3f85… _________________________ www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

Aug. 12, 2019

nuova iniziativa: "The Syllabus"

by J.C. DE MARTIN

Anticipazione: https://mailchi.mp/the-syllabus/tech-week32 ----- https://the-syllabus.com/ Welcome to the Syllabus! We are only launching in September. But we are quite happy that you found us this early. *What are we about?* Let’s first tell you what we do /not/ want to do: organize /all/ of the world’s information. We leave such utopian endeavours to others. Rather, we focus on salvaging the best, the deepest, and the most important bits from the ever-growing great pile of information. We thus aspire to unearth, polish, and promote the hidden gems that often go unnoticed in today’s cacophony of ceaseless notifications, absurd listicles, and surveillance-soaked clickbait. Our credo is simple: the vital information that one needs in order to interpret and change the world is already here – it’s just not evenly distributed. Over the last six years, we have developed a novel and eclectic method that pairs humans and algorithms to discover only the best and the most relevant information. And we do this in important categories that have been neglected by other platforms in their pursuit of surveillance/advertising revenues. We thereby uncover the best and most original items on a given theme amidst all the latest academic papers, books, talks and podcasts. Given our expertise in the history, economics and politics of technology – an area of critical importance to today’s debates – it is here that we have first deployed our algorithmic and editorial powers. Now that we are satisfied with our methodology, we want to make the results of our work available to others. Ours is not a view from nowhere. We seek to read reality from a critical perspective, tilting towards research that either offers bold and intellectually risky interpretations of the problems at hand or research that offers pragmatic, original, and transformative solutions to them. We have no patience for sentences without content that are in mass production in today’s factories of the obscure. We also do not doubt that 99% of academic papers, books, and conferences put most people to sleep – we are no exception – so we focus on finding the 1% that is rich and not boring, but that gets lost amid the arcane and the unnecessary. *What does all this mean for you?* In the months to come, we will be launching weekly curated selections of our best new readings, videos and podcasts on important or emerging issues, most of them related to technology: the future of work, the political and social impact of artificial intelligence, the policy debate surrounding Big Tech, the social and philosophical consequences of digitisation, the geopolitics of technology and cybersecurity, the many uses (and abuses) of the blockchain. Editions dedicated to many other topics are being “forged” as we write this. If you are interested in receiving any of our digests or finding out more about The Syllabus, please sign up with your email address below.

Aug. 12, 2019