July 2020 - nexa - server-nexa.polito.it

Iranian Spies Accidentally Leaked Videos of Themselves Hacking
by Giacomo Tesio July 17, 2020

July 17, 2020

In two videos IBM showed to WIRED on the condition that they not be published, the hackers demonstrate the workflow for siphoning data out of a hacked account. In one video, the hacker logs into a compromised Gmail account—a dummy account for the demonstration—by plugging in credentials from a text document, and links it to the email software Zimbra, designed to manage multiple accounts from a single interface, using Zimbra to download the account's entire inbox to the hacker's machine. Then the hacker quickly deletes the alert in the victim's Gmail that says their account permissions have been changed. Next the hacker downloads the victim's contacts and photos from their Google account too. A second video shows a similar workflow for a Yahoo account. The most telling element of the video, Wikoff says, is the speed the hacker demonstrates in exfiltrating the accounts' information in real time. The Google account's data is stolen in around four minutes. The Yahoo account takes less than three minutes. In both cases, of course, a real account populated with tens or hundreds of gigabytes of data would take far longer to download. But the clips demonstrate how quickly that download process is set up, Wikoff says, and suggest that the hackers are likely carrying out this sort of personal data theft on a mass scale. "To see how adept they are at going in and out of all these different webmail accounts and setting them up to exfiltrate, it is just amazing," says Wikoff. "It’s a well-oiled machine." [...] In other videos the IBM researchers declined to show to WIRED, the researchers say the hackers appeared to be combing through and exfiltrating data from real victims' accounts, rather than ones they created for training purposes. One victim was a member of the US Navy, and another was a two-decade veteran of the Greek Navy. The researchers say the APT35 hackers appear to have stolen photos, emails, tax records, and other personal information from both targeted individuals. Continua su http://web.archive.org/web/20200717040312/https://www.wired.com/story/iran-… Personalmente credo che in IBM si siano anzitutto sorpresi delle implicazioni economiche del video. Negli States questo tipo di operazioni è del tutto automatizzata. In Iran può essere fatta manualmente. Giacomo

2 1

Re: [nexa] Q&A: The Data Delusion
by Giuseppe Attardi July 17, 2020

July 17, 2020

The Apple case is an example. Verstrager tried to fight with swords against firearms, or cavalry against tanks. Stefano Quintarelli notes in Capitalismo immateriale: “La perdita di gettito fiscale per lo stato a causa del fatto che le multinazionali digitali erogano all’estero beni e servizi digitali sul mercato nazionale, è quindi solo un epifenomeno di una più radicale trasformazione in atto, che ha un potenziale di interferenza senza precedenti nell’informazione, nelle relazioni sociali e nell’economia”. The antitrust laws conceived in the last century are not suitable to the modern digital society and the time of reaction of legislators is not slow to catch up with new unanticipated behaviours or means to sidesteps them. A complete redesign of regulations for the digital age is needed, but as also Quintarelli notices, this would require a change of mind in the public opinion. Instead the population has been lulled by the apparent benefits of free services in exchange of giving away their minds in a faustian exchange. When Google announces it is opening two datacenters in Italy, the prime minister Conte expresses appraisal: he does not see that if Google had paid its due taxes, he would have had even more money to invest in building his own datacenters, creating infrastructure and valuable assets (CAPEX), instead of keeping spending (OPEX) and increasing Google profit. The infrastructures, that Italy desperately needs, would also have had a multiplicative effect produced by the value produced by its users and the competences that would be created. We have become addicted and accomplices. -- > On 16 Jul 2020, at 20:14, nexa-request(a)server-nexa.polito.it wrote: > > Schaake: How do you reflect on the difference in speed between technological innovations and democratic lawmaking? Some people imply this will give authoritarian regimes an advantage in setting global standards and rules. What are your thoughts on ensuring democratic governments speed up? > Tisné: Democracies cannot afford to be outpaced by technological innovation and constantly be fighting yesterday?s wars. Our laws have not changed to reflect changes in technology, which extracts value from collective data, and need to catch up. A lot of the problems stem from the fact that in government (as in companies), the people responsible for enforcement are separated from those with the technical understanding. The solution lies in much better translation between technology, policy and the needs of the public.

1 0

Mai più donne invisibili (anche grazie al digitale): intervista alla presidente di Rete per la Parità
by don Luca Peyron July 17, 2020

July 17, 2020

Buona lettura con un argomento importante e poco affrontato dl https://www.techeconomy2030.it/2020/07/16/mai-piu-donne-invisibili-anche-gr… _________________________ don Luca Peyron Direttore Ufficio per la Pastorale Universitaria Arcidiocesi di Torino www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

1 0

Q&A: The Data Delusion
by Giacomo Tesio July 16, 2020

July 16, 2020

Protecting Individual Isn't Enough When the Harm is Collective. A Q&A with Marietje Schaake and Martin Tisne on his new paper The Data Delusion. [...] Schaake: What scenario do you foresee in 10 years if collective harms are not dealt with in updates of laws? Tisné: I worry we will see two impacts. The first is a continuation of what we are seeing now: negative impacts of digital technologies on discrimination, voting rights, privacy, consumers. As people become increasingly aware of the problem there will be a corresponding increase in legal challenges. We’re seeing this already for example with the Lloyd class action case against Google for collecting iPhone data. But I worry these will fail to stick and have lasting impact because of the obligation to have these cases turn on one person, or a class of people’s, individual experiences. It is very hard for individuals to seek remedy for collective harms, as opposed to personal privacy invasions. So unless we solve the issue I raise in the paper – the collective impact of AI and automation – these will continue to fuel polarization, discrimination on the basis of age, gender (and many other aspects of our lives) and the further strengthening of populist regimes. I also worry about the ways in which algorithms will optimize on the basis of seemingly random classifications (e.g. “people who wear blue shirts, get up early on Saturday mornings, and were geo-located in a particular area of town at a particular time”). These may be proxies for protected characteristics (age, gender reassignment, disability, race, religion, sex, marriage, pregnancy/maternity, sexual orientation) and provide grounds for redress. They may also not be and sow the seeds of future discrimination and harms. Authoritarian rulers are likely to take advantage of the seeming invisibility of those data-driven harms to further silence their opponents. How can I protect myself if I don’t know the basis on which I am being discriminated against or targeted? Schaake: How do you reflect on the difference in speed between technological innovations and democratic lawmaking? Some people imply this will give authoritarian regimes an advantage in setting global standards and rules. What are your thoughts on ensuring democratic governments speed up? Tisné: Democracies cannot afford to be outpaced by technological innovation and constantly be fighting yesterday’s wars. Our laws have not changed to reflect changes in technology, which extracts value from collective data, and need to catch up. A lot of the problems stem from the fact that in government (as in companies), the people responsible for enforcement are separated from those with the technical understanding. The solution lies in much better translation between technology, policy and the needs of the public. Continua su https://cyber.fsi.stanford.edu/news/data-delusion Giacomo

1 0

Libera concorrenza nella gestione collettiva del diritto d'autore: la Corte Costituzionale si alla legittimità dell'art. 19 comma l, del decreto legge n. 148 del 2017, convertito, con modificazioni, nella legge n. 172 del 2019.
by deborah de angelis July 16, 2020

July 16, 2020

La Corte Costituzionale afferma la legittimità dell’articolo 19, comma l, del decreto legge n. 148 del 2017, convertito, con modificazioni, nella legge n. 172 del 2019. Il Tar del Lazio aveva sollevato la questione per violazione dell’articolo 77, secondo comma, della Costituzione (carenza dei presupposti di necessità e urgenza). La Corte Costituzionale ha, invece, riconosciuto l’esistenza dei presupposti di legge nell’intento del Governo di dare attuazione ai principi di libera concorrenza dettati dall’EU nella gestione collettiva del diritto d’autore, al fine di evitare una procedura di infrazione. https://www.cortecostituzionale.it/actionSchedaPronuncia.do?param_ecli=ECLI… Cari saluti DDA DDA Studio Legale ------------------------------------------------ Avv. Deborah De Angelis 00195 Roma (RM), Via Giuseppe Ferrari, 2 Tel. +39 06 59871248 www.ddastudiolegale.it info(a)ddastudiolegale.it skype: deb.dda Il presente messaggio, corredato dei relativi allegati contiene informazioni da considerarsi strettamente riservate, ed è destinato esclusivamente al destinatario sopra indicato. Chiunque ricevesse questo messaggio per errore o comunque lo leggesse senza esserne legittimato è avvertito che trattenerlo, copiarlo, divulgarlo, distribuirlo a persone diverse dal destinatario è severamente proibito e, nel caso, è pregato di rinviarlo immediatamente al mittente distruggendo l'originale. This message, together with its annexes, contains information to be deemed strictly confidential and is destined only to the addressee(s) identified above. If anyone received this message by mistake or reads it without entitlement is forewarned that keeping, copying, disseminating or distributing this message to persons other than the addressee(s) is strictly forbidden and is asked to transmit it immediately to the sender and to erase the original message received.

1 0

DIY Dongle Breathes Life Into Broken Ventilators
by Giacomo Tesio July 15, 2020

July 15, 2020

We have a new hero in the COVID-19 saga, and it’s some hacker in Poland. Whoever this person is, they are making bootleg dongles that let ventilator refurbishers circumvent lockdown software so they can repair broken ventilators bought from the secondhand market. The dongle is a DIY copy of one that Medtronic makes, which of course they don’t sell to anyone. It makes a three-way connection between the patient’s monitor, a breath delivery system, and a computer, and lets technicians sync software between two broken machines so they can be Frankensteined into a single working ventilator. The company open-sourced an older model at the end of March, but this was widely viewed as a PR stunt. This is not just the latest chapter in the right-to-repair saga. What began with locked-down tractors and phones has taken a serious turn as hospitals are filled to capacity with COVID-19 patients, many of whom will die without access to a ventilator. Not only is there a shortage of ventilators, but many of the companies that make them are refusing outside repair techs’ access to manuals and parts. These companies insist that their own in-house technicians be the only ones who touch the machines, and many are not afraid to admit that they consider the ventilators to be their property long after the sale has been made. The ridiculousness of that aside, they don’t have the manpower to fix all the broken ventilators, and the people don’t have the time to wait on them. Continua su https://hackaday.com/2020/07/15/diy-dongle-breathes-life-into-broken-ventil… Giacomo

2 1

(no subject)
by Mariella Berra July 14, 2020

July 14, 2020

https://www.wired.it/internet/web/2020/07/06/microsoft-scuola/

1 0

Conferenza EPO ed EUIPO su 3D Printing
by Diego Giorio July 13, 2020

July 13, 2020

Segnalo questa iniziativa, che è iniziata oggi e proseguirà nei prossimi giorni Hanno reso disponibili gli interventi di oggi su YOUTUBE https://youtu.be/xf2dei65e8E Qui il report https://www.epo.org/news-events/news/2020/20200713.html Saluti a tutti D.

1 0

Proposte per una Strategia italiana per l'intelligenza artificiale
by Stefano Campus July 13, 2020

July 13, 2020

salute, segnalo la pubblicazione del documento predisposto dagli esperti del MISE sulle linee di sviluppo dell'intelligenza artificiale in Italia, pubblicato il 2 luglio. https://www.mise.gov.it/index.php/it/per-i-media/notizie/2041246-intelligen… s.

1 0

80° Nexa Lunch Seminar | 22 Luglio 2020 | Modalità Telematica
by Nexa Media July 13, 2020

July 13, 2020

Gentilissimi, a seguito delle disposizioni adottate per far fronte all'emergenza da Covid-19, vi segnaliamo che l'80° Nexa Lunch Seminar, *"Bambini e digital literacy, durante e oltre l'emergenza COVID-19"*, con ospite *Fabio Nascimbeni* (Fellow Centro Nexa), si svolgerà *mercoledì 22 luglio, dalle ore 13.00 alle ore 14.00*, in *modalità telematica*, utilizzando il software open source di conference call *Jitsi Meet*. Per chi vorrà partecipare live al seminario sarà possibile accedere alla conference call attraverso il seguente link: https://meet.nexacenter.org/LunchSeminar Nexa Center for Internet and Society Newsletter Se non visualizzi correttamente questo messaggio clicca qui <https://nexa.polito.it/lunch-80> NEXA 80° Nexa Lunch Seminar Mercoledì 22 luglio 2020, ore 13.00 - 14.00 Politecnico di Torino https://nexa.polito.it/lunch-80 Bambini e digital literacy, durante e oltre l’emergenza COVID-19 Speaker Fabio Nascimbeni (Fellow Centro Nexa) This event will be webcast live: https://nexa.polito.it/nexa-hangout-on-air L'INCONTRO SI SVOLGERÀ IN MODALITÀ TELEMATICA UTILIZZANDO IL SOFTWARE DI CONFERENCE CALL *JITSI MEET*. Per partecipare all'incontro: https://meet.nexacenter.org/LunchSeminar Il tema della *Digital Literacy (DL)* è al centro del dibattito scientifico e istituzionale da molti anni, anche se le organizzazioni come l’UNESCO e la Commissione Europea tendono a concentrarsi sulla DL degli adulti, senza affrontare il tema di come le tecnologie digitali stanno influendo sui bambini e su come questi dovrebbero saper utilizzare le ICT in modo sicuro e consapevole. Nel 2019 l’*UNICEF* ha affrontato il tema della *Children Digital Literacy* attraverso un *Research Paper (Nascimbeni e Vosloo 2019)*, proponendo una definizione e un quadro concettuale per costruire le capacità dei più giovani in quanto a tecnologie digitali. L’*emergenza COVID-19*, con il conseguente boom delle tecnologie online anche per i bambini, ha reso il tema ancora più attuale, mettendo a fuoco la possibile esclusione sociale che può derivare dai problemi legati alla Digital Literacy. Durante il Lunch Seminar verrà presentato il lavoro svolto per UNICEF sul tema Digital Literacy alla luce della pandemia COVID-19, riflettendo sia su come si sia cercato di aiutare i bambini nell’uso delle tecnologie durante l’emergenza, sia sul possibile impatto a lungo termine dell’emergenza sulle future pratiche per creare *capacità di Digital Literacy critiche e inclusive*, partendo dai bambini e coinvolgendo altri attori come genitori e insegnanti. BIOGRAFIE - e informazioni supplementari [Fazio] *Fabio NASCIMBENI*, an economist with a PhD on Information and Knowledge Society, works as Assistant Professor in the Universidad Internacional de La Rioja (UNIR) in Spain, is a fellow at the Centro de Estudos sobre Tecnologia e Sociedade of the University of Sao Paulo (USP) in Brazil and a Senior Fellow of the European Distance and eLearning Network (EDEN). He has been active in the field of learning innovation and ICT for learning since 1998, working across Europe as well as in Latin America, the Caribbean, the South Mediterranean and South-East Asia. His main research interests are open education, learning innovation, digital literacy, social networking. *Letture consigliate e link utili:* * Nascimbeni, F. and Vosloo, S. (2019). /Digital Literacy for Children - Exploring definitions and frameworks/. Scoping Paper No. 01 | August 2019, Office of Global Insight and Policy. New York: UNICEF. Link <https://www.ikanos.eus/wp-content/uploads/2019/09/UNICEF-Digital-Literacy-S…> * UNICEF, /Digital Literacy for children: 10 things to know/. Link <https://www.unicef.org/globalinsight/documents/digital-literacy-children-10…> * UNESCO: /A Global Framework of Reference on Digital Literacy Skills for Indicator 4.4.2/. Link <http://uis.unesco.org/sites/default/files/documents/ip51-global-framework-r…> * Livingstone, S. (2010). /Digital learning and participation among youth: critical reflections on future research priorities/. Link <https://core.ac.uk/download/pdf/9694948.pdf> Che cosa sono il Centro Nexa e i cicli di incontri “Mercoledì di Nexa” e “Nexa Lunch Seminar” <https://www.facebook.com/nexa.center/> <https://twitter.com/nexacenter> <https://www.youtube.com/user/NexaCenter> #nexalunchseminar <https://twitter.com/search?q=%23nexalunchseminar&src=typd> #fabionascimbeni <https://twitter.com/fabionascimbeni> Il Centro Nexa su Internet & Società del Politecnico di Torino (Dipartimento di Automatica e Informatica) dal 2006 è un centro di ricerca indipendente e interdisciplinare che, in collaborazione con l'Università di Torino, studia Internet (e più in generale le Tecnologie digitali) e i suoi rapporti con la società. Maggiori informazioni all'indirizzo: http://nexa.polito.it/about. Durante i “*Mercoledì di Nexa*”, che si tengono *ogni 2° mercoledì del mese* alle *ore 18 in punto*, il Centro Nexa su Internet e Società apre le sue porte non solo agli esperti e a tutti coloro i quali lavorano con Internet, ma anche a semplici appassionati e cittadini. Il ciclo di incontri intende approfondire, con un linguaggio preciso ma accessibile, i temi legati alla Rete: motori di ricerca, Creative Commons, social networks, open source/software libero, neutralità della rete, libertà di espressione, privacy, file sharing, big e open data, smart cities e molto altro. Al centro di quasi tutti gli incontri un ospite pronto a dialogare con i direttori del Centro Nexa, il Prof. Juan Carlos De Martin del Politecnico di Torino e il Prof. Marco Ricolfi dell'Università di Torino, nonché lo staff e i Fellows del Centro Nexa. Maggiori informazioni sui Mercoledì di Nexa, incluso un elenco di tutti i “Mercoledì” passati, sono disponibili all'indirizzo: http://nexa.polito.it/mercoledi. Si segnala inoltre che dal maggio 2012 *ogni 4° mercoledì* del mese *dalle ore 13 alle ore 14* il Centro Nexa organizza anche i "*Nexa Lunch Seminar*". Una lista di tutti i “Lunch Seminar” passati è disponibile all'indirizzo: http://nexa.polito.it/lunch-seminars. See our events calendar <http://nexa.polito.it/events> if you're curious about future luncheons, discussions, lectures, and conferences not listed in this email. Our events are free and open to the public, unless otherwise noted. Responsabile Comunicazione Centro Nexa su Internet & Società: *Anita Botta*, tel: +39 011 090 7219, Mob: +39 347 131 3903, anita.botta(a)polito.it <mailto:anita.botta@polito.it>. Maggiori informazioni sui Mercoledì di Nexa e i Nexa Lunch Seminar, sono disponibili all'indirizzo: http://nexa.polito.it/events. Weekly Events Newsletter. Sign up <http://nexa.polito.it/mailing-lists> to receive this newsletter if this email was forwarded to you. To manage your subscription preferences, please click here <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa>. Connect & get involved: Jobs, internships, and more <http://nexa.polito.it/get-involved>. Cordiali saluti,   -- Anita Botta Communication Manager Nexa Center for Internet & Society Politecnico di Torino – DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino _web:_ https://nexa.polito.it/ _mail:_anita.botta@polito.it <mailto:anita.botta@polito.it> tel: 011 090 7219

1 0