July 2021 - nexa - server-nexa.polito.it

Varoufakis: "Techno-Feudalism Is Taking Over"
by J.C. DE MARTIN July 10, 2021

July 10, 2021

*Techno-Feudalism Is Taking Over* Yanis Varoufakis 28 June 2021 This is how capitalism ends: not with a revolutionary bang, but with an evolutionary whimper. Just as it displaced feudalism gradually, surreptitiously, until one day the bulk of human relations were market-based and feudalism was swept away, so capitalism today is being toppled by a new economic mode: techno-feudalism. This is a large claim that comes on the heels of many premature forecasts of capitalism’s demise, especially from the left. But this time it may well be true. [...] continua qui: https://www.yanisvaroufakis.eu/2021/07/05/techno-feudalism-is-taking-over-p…

2 1

GPDP: Linee guida cookie e altri strumenti di tracciamento - 10 giugno 2021
by Roberto Resoli July 9, 2021

July 9, 2021

Appena uscito e in pubblicazione su G.U.: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb… "... il titolare dovrà garantire che, per impostazione predefinita, siano trattati solo i dati personali necessari in relazione a ciascuna specifica finalità del trattamento e che, in particolare, la quantità dei dati raccolti e la durata della loro conservazione non eccedano il minimo necessario per il conseguimento delle finalità perseguite, in modo che l’utilizzo di informazioni per l’accesso ad un sito sia inizialmente limitato al minimo indispensabile per consentirne la fruizione e che sia rimesso interamente all’interessato un effettivo, concreto potere di scelta in ordine alla possibilità di consentire o meno un utilizzo eventualmente più ampio dei suoi dati. Il rispetto di tali regole impone dunque che, per impostazione predefinita, al momento del primo accesso dell’utente a un sito web, nessun cookie o altro strumento diverso da quelli tecnici venga posizionato all’interno del suo dispositivo, né che venga utilizzata alcuna altra tecnica attiva o passiva di tracciamento. ..." rob

1 0

"cloud-nazionale": l'AD di SeeWeb mette qualche puntino sullo "i"....
by Damiano Verzulli July 9, 2021

July 9, 2021

A proposito del tema del cloud-nazionale (spesso dibattuto in questi spazi), ho appena finito di leggere l'intervista di Raffaele Barberio / Key4biz ad Antonio Baldassarra, CEO di Seeweb, sul tema del cosiddetto cloud nazionale. Parlo di questa: - PNRR. A. Baldassarra: “Cloud nazionale? Il governo rifiuti una narrativa sbagliata che penalizza imprese e competenze italiane” https://www.key4biz.it/pnrr-a-baldassarra-cloud-nazionale-il-governo-rifiut… È la prima volta che trovo affrontato con chiarezza, lucidità e profondità il tema del "cloud nazionale" rispetto alle implicazioni che puo' comportare per l'ecosistema ICT del nostro Paese. È la prima volta che leggo, chiaramente, passaggi del tipo: "[...] il mondo della ricerca e delle università, un settore, quest’ultimo, che potrebbe essere mortificato e desertificato irrimediabilmente da tale narrativa. [....]" "[...] Occorre però fare un appunto sulle esigenze IT della Pubblica Amministrazione italiana. Non sempre queste esigenze richiedono enormi architetture ridondate su scala mondiale o con capacità di archiviazione infinita e necessità di CDN [...]" "[...] al contesto Cloud che [...] men che meno è il “toccasana” capace di risolvere problemi che si annidano su altri piani, prevalentemente non tecnologici. [...]" Relativamente agli operatori cloud italiani ed alle soluzioni Iaas: "[...]Tutti gli operatori sono in “eccesso di offerta e scarsità di domanda”, non il contrario come si vorrebbe fare credere.[...]" "[...] Nell’ambito del software, poi, il mondo open source consentirebbe, con modesti investimenti, di “farsi da sé tutto quello che serve” in ambito di Pubbliche Amministrazioni, senza necessità dei Big Tech [...]" Insomma, finalmente qualcuno --al di fuori di questa ML-- inizia a descrivere correttamente uno scenario che, finora, è apparso fin troppo..... nuvoloso. Un saluto, DV -- Damiano Verzulli e-mail: damiano(a)verzulli.it --- possible?ok:while(!possible){open_mindedness++} --- "...I realized that free software would not generate the kind of income that was needed. Maybe in USA or Europe, you may be able to get a well paying job as a free software developer, but not here [in Africa]..." -- Guido Sohne - 1973-2008 http://ole.kenic.or.ke/pipermail/skunkworks/2008-April/005989.html

1 0

"A Remarkable Silence: Media Blackout After Key Witness Against Assange Admits Lying"
by J.C. DE MARTIN July 9, 2021

July 9, 2021

*A Remarkable Silence: Media Blackout After Key Witness Against Assange Admits Lying* 1 July 2021 As we have pointed out since Media Lens began in 2001, a fundamental feature of corporate media is propaganda by omission <https://www.medialens.org/2021/propaganda-by-omission-libya-syria-venezuela…>. Over the past week, a stunning example has highlighted this core property once again. A major witness in the US case against Julian Assange has just admitted fabricating key accusations in the indictment against the Wikileaks founder. These dramatic revelations emerged in an extensive article <https://stundin.is/grein/13627/key-witness-in-assange-case-admits-to-lies-i…> published on 26 June in Stundin, an Icelandic newspaper. The paper interviewed the witness, Sigurdur Ingi Thordarson, a former WikiLeaks volunteer, who admitted that he had made false allegations against Assange after being recruited by US authorities. Thordarson, who has several convictions for sexual abuse of minors and financial fraud, began working with the US Department of Justice and the FBI after receiving a promise of immunity from prosecution. He even admitted to continuing his crime spree while working with the US authorities. [...] continua qui: https://www.medialens.org/2021/a-remarkable-silence-media-blackout-after-ke…

3 3

Chatcontrol: European Parliament approves mass surveillance of private communications
by Roberto Resoli July 9, 2021

July 9, 2021

https://www.patrick-breyer.de/en/chatcontrol-european-parliament-approves-m… "The European Commission has already announced a follow-up regulation to make chat control mandatory for all email and messaging providers. Previously secure end-to-end encrypted messenger services such as Whatsapp or Signal would be forced to install a backdoor. There is a considerable backlash against these plans: A public consultation carried out by the EU Commission revealed that 51% of all respondents oppose chat control for e-mail and messaging providers. 80% of respondents do not want chat control to be applied to encrypted messages. [4] Due to the resistance, EU Commissioner for Home Affairs Ylva Johannson has postponed the proposal until September 2021. " serve mobilitazione... rob

3 2

AI Act diagrams
by VETRO' ANTONIO July 9, 2021

July 9, 2021

Riassunto visuale della bozza di regolamento europeo pubblicata lo scorso aprile: https://threadreaderapp.com/thread/1413139322396581903.html A.

1 0

EDRI report on mass surveillance in some European countries
by Enrico Nardelli July 8, 2021

July 8, 2021

(From the foreword) ... This latest research, conducted on behalf of EDRi by independent researchers at the EIJI, demonstrates that *the scale of the problem of abusive and unlawful biometric mass surveillance practices in the EU goes even deeper than we knew*. In line with wider trends that we have been following across the EU and beyond, these reports on Germany, the Netherlands, and Poland are emblematic of an ideology of mass biometric data collection and processing that is accelerating towards becoming systematic for how people are able to exist in Europe. Without being willing to have their highly sensitive biometric data captured and processed constantly – and contrary to important principles such as data minimisation as well as legal rules that are supposed to prohibit the unnecessary processing of biometric data - *people across these countries will find it increasingly difficult to access civic services, to travel, and even to go to the shops, without being tracked, profiled, and monitored via their biometric characteristics*. In both the Netherlands and Germany, *such systems are being used repeatedly for petty and disproportionate reasons, especially given the high level of intrusion that they entail*. The numbers of matches are low and the impact even when matches occur is negligible on public interests. That is to say that *even when they work as intended, these systems are not capable of achieving their stated purpose(s)*. As the researchers put it, current practices show that the tools are: *“[D]eployed less in response to specific and evidentiary threats but rather indiscriminately as a precautionary or deterrent measure.”* ... https://edri.org/wp-content/uploads/2021/07/EDRI_RISE_REPORT.pdf -------- Messaggio Inoltrato -------- Oggetto: Fwd: Mass surveillance Data: Thu, 8 Jul 2021 07:58:29 +0200 Mittente: Gerhard Schimpf <00000108a7861c5b-dmarc-request(a)LISTSERV.ACM.ORG> Rispondi-a: Gerhard Schimpf <gerhard.schimpf(a)GOOGLEMAIL.COM> A: EUROPETPC(a)LISTSERV.ACM.ORG Dear all, The attached report summarizes what’s going on in terms of face recognition and surveillance in Europe. Very disturbing. Best Gerhard > *Von:* Gerhard Schimpf <gerhard.schimpf(a)googlemail.com> > *Datum:* 7. Juli 2021 um 15:17:20 MESZ > *An:* "Schimpf Gerhard (SMF)" <gerhard.schimpf(a)googlemail.com> > *Betreff:* *Mass surveillance* > > > https://edri.org/wp-content/uploads/2021/07/EDRI_RISE_REPORT.pdf > > Unsubscribe <https://optout.acm.org/unsubscribe.cfm?rl=EUROPETPC&RE=&UEMAIL;> -- EN ===================================================================== Prof. Enrico Nardelli Dipartimento di Matematica - Universita' di Roma "Tor Vergata" Via della Ricerca Scientifica snc - 00133 Roma tel: +39 06 7259.4204 fax: +39 06 7259.4699 mobile: +39 335 590.2331 e-mail: nardelli(a)mat.uniroma2.it home page: http://www.mat.uniroma2.it/~nardelli blog: http://www.ilfattoquotidiano.it/blog/enardelli/ http://link-and-think.blogspot.it/ ===================================================================== --

2 1

Microsoft admits to signing rootkit malware in supply-chain fiasco
by Giacomo Tesio July 8, 2021

July 8, 2021

Microsoft has now confirmed signing a malicious driver being distributed within gaming environments. This driver, called "Netfilter," is in fact a rootkit that was observed communicating with Chinese command-and-control (C2) IPs. G Data malware analyst Karsten Hahn first took notice of this event last week and was joined by the wider infosec. community in tracing and analyzing the malicious drivers bearing the seal of Microsoft. This incident has once again exposed threats to software supply-chain security, except this time it stemmed from a weakness in Microsoft's code-signing process. [...] "Since Windows Vista, any code that runs in kernel mode is required to be tested and signed before public release to ensure stability for the operating system." "Drivers without a Microsoft certificate cannot be installed by default," states Hahn. [...] According to Microsoft, the threat actor has mainly targeted the gaming sector specifically in China with these malicious drivers, and there is no indication of enterprise environments having been affected so far. Microsoft has refrained from attributing this incident to nation-state actors just yet. Falsely signed binaries can be abused by sophisticated threat actors to facilitate large-scale software supply-chain attacks. The multifaceted Stuxnet attack that targeted Iran's nuclear program marks a well-known incident in which code-signing certificates were stolen from Realtek and JMicron to facilitate the attack. This particular incident, however, has exposed weaknesses in a legitimate code-signing process, exploited by threat actors to acquire Microsoft-signed code without compromising any certificates. Continua, con qualche informazione più tecnica e link ad approfondimenti, su http://web.archive.org/web/20210708084042/https://www.bleepingcomputer.com/… Giacomo

1 0

piano nazionale francese per la scienza aperta 2021-2024
by Stefano Zacchiroli July 8, 2021

July 8, 2021

Il piano nazionale francese per la scienza aperta è stato aggiornato per il periodo 2021-2024 e contiene moltissimi spunti e raccomandazioni su software libero, dati aperti, e ovviamente pubblicazioni scientifiche aperte. Una versione corta in inglese è disponibile qui: https://www.ouvrirlascience.fr/second-national-plan-for-open-science/ Quella completa in francese è invece qui: https://www.ouvrirlascience.fr/deuxieme-plan-national-pour-la-science-ouver… https://www.ouvrirlascience.fr/wp-content/uploads/2021/06/Deuxieme-Plan-Nat… Buona lettura -- Stefano Zacchiroli . zack(a)upsilon.cc . upsilon.cc/zack . . o . . . o . o Computer Science Professor . CTO Software Heritage . . . . . o . . . o o Former Debian Project Leader & OSI Board Director . . . o o o . . . o . « the first rule of tautology club is the first rule of tautology club »

1 0

Fwd: Fully funded PhD Position in Paris on Open Data Licensing
by Melanie Dulong de Rosnay July 7, 2021

July 7, 2021

Dear colleagues, We're hiring a PhD candidate to work on Open Data Licensing as part of a Marie Curie International Training Network. Among the 15 Early Career Researchers of this distributed and interdisciplinary programme on open data, one will be a graduate in law: https://odeco-research.eu/#training Please forward the offer to your local mailing-lists or recent master students who might be interested: https://www.euraxess.fr/jobs/659192 To comply with European funding rules, the candidate must not have resided or carried out their main activity (work, studies, etc.) in France for more than 12 months in the 3 years immediately before the recruitment date (January 2022) and only applications through Euraxess portal can be considered Many thanks, Melanie -- Melanie Dulong de Rosnay Associate research professor, CNRS https://cis.cnrs.fr/melanie-dulong/ Center for Internet and Society of CNRS <https://cis.cnrs.fr/about/> -- OFFER DESCRIPTION This fully funded PhD position is part of the EU Horizon 2020 Marie Sklodowska Curie ITN project entitled "ODECO: Towards a Sustainable Open Data ECOsystem" (https://odeco-research.eu/) ODECO is a four-year project involving 15 PhD projects covering each a specific part of the open data ecosystem. The central aim of the ODECO consortium network is to train the next generation of creative and innovative early stage open data researchers, to unlock their creative and innovative potential to address current and future challenges in the creation of user driven, circular and inclusive open data ecosystems. Current developments in the field of open data are characterised as highly fragmented. Open data ecosystems are often developed in different domains in isolation of each other and with little involvement of potential users, resulting in approaches that significantly limit open data reusability for users. This reduces innovation and the ability to create new valued added goods and services. Isolated domains also undermine interoperability for users acting as a barrier to data sharing. Efforts are also uncoordinated in open data training and research, where multidisciplinary approaches are scant. Bringing together different sectors (research, private sector, government, non-profit) and different perspectives (public administration, law, business, engineering), ODECO aims to address the central challenge of realizing a user driven, circular and inclusive open data ecosystem. Through its novel research and training programme, ODECO will provide early-stage researchers with relevant open data knowledge, skills and research experience. The offered PhD position on “Open Licensing of Non-Government Data” is to design new legal instruments to include private actors as producers and sharers of (open) data and data generated by private companies and users on private platforms, by: - Investigating from a legal perspective novel value distribution and incentive mechanisms and design how a new sustainable distribution of value in the open data ecosystem may be implemented in licenses based on alternative values defined in collaboration with other PhDs and members of the ODECO project teams working in other disciplines. - Investigating whether commons-based approaches can be developed to openly license commercial data and data volunteered by citizens on public, commons, and private platforms, and ported from other environments (e.g., medical and microbial commons, data pools). - Exploring legal mechanisms that will facilitate and incentivise the release of non-government data as open data in open data commons, data pools or data collaboratives) as well as private and user-generated data contributed to public and private platforms (e.g., social media). - Ensuring compatibility between commercial, and individual (data protection, privacy and sharing) interests. During the PhD, the candidate will conduct this research, prepare scientific articles presenting the research at conferences and in journals, and contribute to deliverables of the project with the project team. To enable the candidate to do this successfully, the candidate will be supervised by Professor Lucie Cluzel-Metayer at the University Paris Nanterre Center for Research on Public Law (CRDP, see https://crdp.parisnanterre.fr/) and Dr. Mélanie Dulong de Rosnay at the CNRS Center for Internet and Society (CIS, see https://cis.cnrs.fr/) This is a joint appointment: the candidate will be enrolled at University Paris Nanterre doctoral law school which will deliver the PhD degree, and be part of the CIS team at CNRS which will provide a full-time employment contract. In addition to academic co-supervision, the candidate will be enrolled in the University of Paris Nanterre doctoral law school programme activities, with conferences and personal and professional training courses with other PhD candidates in law. The candidate will take part to the ODECO interdisciplinary training activities with the other teams including 14 other PhD candidates of the project, and benefit from a career development plan. The candidate will work in an environment allowing mentoring as a full member of the CIS team, hosted in a CNRS shared office in Paris 17ème arrondissement with colleagues in sociology of technology involved in French-based, European and international projects (among others: a lab on open science pioneered by the Minister of Research, the SoBigData++ H2020 project) and hosting a network of 350 researchers working in the Internet and Society field, including working groups on open science and digital commons policy. As a Marie Curie ITN researcher, the candidate will have the opportunity to conduct practical internships at universities and case studies at excellent open data intermediaries through the EU ITN network, in your case, at the University of Delft co-supervised by Prof. Ploeger and at Doctrine, a French-based legaltech company). Contract duration: 36 months Monthly gross salary: 3452 euros + 600 euros of Marie Curie mobility + 500 euros if the candidate has family dependents. (About 3400 euros net after taxes, up to about 4000 euros if the candidate has family dependents.) CNRS will recruit prospective talented researchers of any nationality, gender, culture, religion, sexual orientation or age. Mobility requirements: Since this PhD position is part of a Horizon Marie Curie ITN project, several hard selection criteria apply to be eligible: • You comply with the early-stage researcher definition: at the time of recruitment (January 2022), you must be in the first four years (full‐time equivalent research experience) of your research career and have not been awarded a doctoral degree. • You comply with the mobility rule, meaning that you must not have resided or carried out your main activity (work, studies, etc.) in France for more than 12 months in the 3 years immediately before the recruitment date (January 2022). Travel requirements: You will be expected to work for 5 months at two other organizations in the consortium as part of secondments: 2 months in the Netherlands at the University of Delft (around Month 19 and 20 of the project) and 3 months in Paris at Doctrine (around Month 26 to 28 of the project). During the 36 months of your appointment, you will be expected to participate to the ODECO project meetings hosted by the European partners and conferences. Prior education and experience: The candidate must have a master's degree in law or a similar degree with an academic level equivalent to the master's degree in law such as LLM or JD. Prior knowledge of Information Technology law is required. Familiarity with public sector information, contract law, intellectual property, open licensing and/or information technologies is 'nice to have'. Language: A good command of spoken and written English is required and a good reading knowledge of French is highly desired. Skills required: Writing skills, ability to formulate/work on a scientific project Ability to work in a team Ability to work independently, organisational ability and ability to account for one’s own actions Ability to communicate, analyse and argue a case, summary and critical evaluation To apply, you should submit: • A short cover letter explaining your personal motivation in pursuing a PhD as part of ODECO, including how you see the PhD fitting into your career trajectory • A CV, which should include details of your eligibility (degree and residency) • Diploma • Transcripts of records (bachelor and master) • The master thesis with a one-page summary in English • If available, another sample of writing, e.g., scientific publications, professional or popular science writing • English language certificate(s) • 2–3 recent recommendation letters if you already have them, or the email contact details and affiliation of 2-3 academic or professional references we may contact. Please submit your application package in one single PDF file entitled as “Lastname_Odeco_Application.pdf”. Applications need to be submitted online through the Euraxess 'application button'. Only applications submitted through the portal can be considered. Please note that incomplete applications will not be processed and that your application cannot be considered if you don’t comply with the mobility rules, in particular you must not have resided or carried out your main activity (work, studies, etc.) in France for more than 12 months in the 3 years immediately before the recruitment date (January 2022). Contact of both supervisors odecoparisPhD(a)protonmail.com Closing date for application on the portal before August 30. Selected candidates will be invited to an online interview scheduled between September 06-24. Results to be expected by September 30. Administrative hiring process in October/November.

1 0