April 2023 - nexa - server-nexa.polito.it

Tesla workers shared ‘intimate’ car camera images, ex-employees allege: ‘Massive invasion of privacy’
by Alberto Cammozzo April 7, 2023

April 7, 2023

<https://www.theguardian.com/technology/2023/apr/07/tesla-intimate-car-camer… Tesla assures its millions of electric car owners that their privacy “is and will always be enormously important to us”. The cameras it builds into vehicles to assist driving, it notes on its website, are “designed from the ground up to protect your privacy”. But between 2019 and 2022, groups of Tesla employees privately shared via an internal messaging system sometimes highly invasive videos and images recorded by customers’ car cameras, according to interviews by Reuters with nine former employees. Some of the recordings caught Tesla customers in embarrassing situations. One ex-employee described a video of a man approaching a vehicle completely naked. Also shared: crashes and road-rage incidents. One crash video in 2021 showed a Tesla driving at high speed in a residential area hitting a child riding a bike, according to another ex-employee. The child flew in one direction, the bike in another. The video spread around a Tesla office in San Mateo, California, via private one-on-one chats, “like wildfire”, the ex-employee said. I saw some scandalous stuff sometimes - scenes of intimacy, a lot of stuff that I wouldn’t want anybody to see about my life Other images were more mundane, such as pictures of dogs and funny road signs that employees made into memes by embellishing them with amusing captions or commentary, before posting them in private group chats. While some postings were only shared between two employees, others could be seen by scores of them, according to several ex-employees. Tesla states in its online customer privacy notice that its “camera recordings remain anonymous and are not linked to you or your vehicle”. But seven former employees told Reuters the computer program they used at work could show the location of recordings, which potentially could reveal where a Tesla owner lived. One ex-employee also said that some recordings appeared to have been made when cars were parked and turned off. Several years ago, Tesla would receive video recordings from its vehicles even when they were off, if owners gave consent. It has since stopped doing so. “We could see inside people’s garages and their private properties,” said another former employee. “Let’s say that a Tesla customer had something in their garage that was distinctive, you know, people would post those kinds of things.” Tesla didn’t respond to detailed questions sent to the company for this report. About three years ago, some employees stumbled upon and shared a video of a unique submersible vehicle parked inside a garage, according to two people who viewed it. Nicknamed Wet Nellie, the white Lotus Esprit sub had been featured in the 1977 James Bond film, The Spy Who Loved Me. The vehicle’s owner: Tesla chief executive Elon Musk, who had bought it for about $968,000 at an auction in 2013. It is not clear whether Musk was aware of the video or that it had been shared. Musk didn’t respond to a request for comment. To report this story, Reuters contacted more than 300 former Tesla employees who had worked at the company over the past nine years and were involved in developing its self-driving system. More than a dozen agreed to answer questions, all speaking on condition of anonymity. Employees passed around images captured by a Tesla camera of a James Bond vehicle owned by Elon Musk. Reuters wasn’t able to obtain any of the shared videos or images, which ex-employees said they hadn’t kept. The news agency also wasn’t able to determine if the practice of sharing recordings, which occurred within some parts of Tesla as recently as last year, continues today or how widespread it was. Some former employees contacted said the only sharing they observed was for legitimate work purposes, such as seeking assistance from colleagues or supervisors. Labeling pedestrians and street signs The sharing of sensitive videos illustrates one of the less-noted features of artificial intelligence systems: they often require armies of human beings to help train machines to learn automated tasks such as driving. Since about 2016, Tesla has employed hundreds of people in Africa and later the United States to label images to help its cars learn how to recognize pedestrians, street signs, construction vehicles, garage doors, and other objects encountered on the road or at customers’ houses. To accomplish that, data labelers were given access to thousands of videos or images recorded by car cameras that they would view and identify objects. Tesla increasingly has been automating the process, and shut down a data-labeling hub last year in San Mateo, California. But it continues to employ hundreds of data labelers in Buffalo, New York. In February, Tesla said the staff there had grown 54% over the previous six months to 675. Two ex-employees said they weren’t bothered by the sharing of images, saying that customers had given their consent or that people long ago had given up any reasonable expectation of keeping personal data private. Three others, however, said they were troubled by it. “It was a breach of privacy, to be honest. And I always joked that I would never buy a Tesla after seeing how they treated some of these people,” said one former employee. Another said: “I’m bothered by it because the people who buy the car, I don’t think they know that their privacy is, like, not respected. We could see them doing laundry and really intimate things. We could see their kids.” One former employee saw nothing wrong with sharing images, but described a function that allowed data labelers to view the location of recordings on Google Maps as a “massive invasion of privacy”. David Choffnes, executive director of the Cybersecurity and Privacy Institute at Northeastern University in Boston, called the sharing of sensitive videos and images by Tesla employees “morally reprehensible”. “Any normal human being would be appalled by this,” he said. He noted that circulating sensitive and personal content could be construed as a violation of Tesla’s own privacy policy, potentially resulting in intervention by the US Federal Trade Commission (FTC), which enforces federal laws relating to consumers’ privacy. A spokesperson for the FTC said it doesn’t comment on individual companies or their conduct. To develop self-driving car technology, Tesla collects a vast trove of data from its global fleet of several million vehicles. The company requires car owners to grant permission on the cars’ touchscreens before Tesla collects their vehicles’ data. “Your Data Belongs to You,” states Tesla’s website. In its customer privacy notice, Tesla explains that if a customer agrees to share data, “your vehicle may collect the data and make it available to Tesla for analysis. This analysis helps Tesla improve its products, features, and diagnose problems quicker.” It also states that the data may include “short video clips or images”, but isn’t linked to a customer’s account or vehicle identification number, “and does not identify you personally”. A camera on a Tesla electric vehicle. A camera on a Tesla electric vehicle. Photograph: Aly Song/Reuters Carlo Piltz, a data privacy lawyer in Germany, told Reuters it would be difficult to find a legal justification under Europe’s data protection and privacy laws for vehicle recordings to be circulated internally when it has “nothing to do with the provision of a safe or secure car or the functionality” of Tesla’s self-driving system. In recent years, Tesla’s car-camera system has drawn controversy. In China, some government compounds and residential neighborhoods have banned Teslas because of concerns about its cameras. In response, Musk said in a virtual talk at a Chinese forum in 2021: “If Tesla used cars to spy in China or anywhere, we will get shut down.” Elsewhere, regulators have scrutinized the Tesla system over potential privacy violations. But the privacy cases have tended to focus not on the rights of Tesla owners but of passersby unaware that they might be being recorded by parked Tesla vehicles. In February, the Dutch Data Protection Authority (DPA) said it had concluded an investigation of Tesla over possible privacy violations regarding “sentry mode”, a feature designed to record any suspicious activity when a car is parked and alert the owner. The watchdog determined it wasn’t Tesla, but the vehicles’ owners, who were legally responsible for their cars’ recordings. It said it decided not to fine the company after Tesla said it had made several changes to sentry mode, including having a vehicle’s headlights pulse to inform passersby that they may be being recorded. A DPA spokesperson declined to comment on Reuters’ findings, but said in an email: “Personal data must be used for a specific purpose, and sensitive personal data must be protected.” Tesla calls its automated driving system “autopilot”. Introduced in 2015, the system included such advanced features as allowing drivers to change lanes by tapping a turn signal and parallel parking on command. To make the system work, Tesla initially installed sonar sensors, radar and a single front-facing camera at the top of the windshield. A subsequent version, introduced in 2016, included eight cameras all around the car to collect more data and offer more capabilities. Musk’s future vision is eventually to offer a “full self-driving mode” that would replace a human driver. Tesla began rolling out an experimental version of that mode in October 2020. Although it requires drivers to keep their hands on the wheel, it currently offers such features as the ability to slow a car down automatically when it approaches stop signs or traffic lights. In February, Tesla recalled more than 362,000 US vehicles to update their full self-driving software after the National Highway Traffic Safety Administration said the software could allow vehicles to exceed speed limits and cause crashes at intersections. A driver died in a 2018 crash in California while riding in a Tesla vehicle operating on ‘autopilot’. Tesla said the driver was not using the feature properly. A driver died in a 2018 crash in California while riding in a Tesla vehicle operating on ‘autopilot’. Tesla said the driver was not using the feature properly. Photograph: AP As with many artificial-intelligence projects, to develop autopilot, Tesla hired data labelers to identify objects in images and videos to teach the system how to respond when the vehicle was on the road or parked. Tesla initially outsourced data labeling to a San Francisco-based nonprofit then known as Samasource, people familiar with the matter told Reuters. The organization had an office in Nairobi, Kenya, and specialized in offering training and employment opportunities to disadvantaged women and youth. In 2016, Samasource was providing about 400 workers there for Tesla, up from about an initial 20, according to a person familiar with the matter. By 2019, however, Tesla was no longer satisfied with the work of Samasource’s data labelers. At an event called Tesla AI Day in 2021, Andrej Karpathy, then senior director of AI at Tesla, said: “Unfortunately, we found very quickly that working with a third party to get datasets for something this critical was just not going to cut it. Honestly, the quality was not amazing.” A former Tesla employee said of the Samasource labelers: “They would highlight fire hydrants as pedestrians. They would miss objects all the time. Their skill level to draw boxes was very low.” Samasource, now called Sama, declined to comment on its work for Tesla. Tesla decided to bring data labeling in-house. “Over time, we’ve grown to more than a 1,000-person data labeling [organization] that is full of professional labelers who are working very closely with the engineers,” Karpathy said in his August 2021 presentation. Karpathy didn’t respond to requests for comment. Tesla’s own data labelers initially worked in the San Francisco Bay area, including the office in San Mateo. Groups of data labelers were assigned a variety of different tasks, including labeling street lane lines or emergency vehicles, ex-employees said. At one point, Teslas on autopilot were having difficulty backing out of garages and would get confused when encountering shadows or objects such as garden hoses. So some data labelers were asked to identify objects in videos recorded inside garages. The problem eventually was solved. In interviews, two former employees said in their normal work duties they were sometimes asked to view images of customers in and around their homes, including inside garages. “I sometimes wondered if these people know that we’re seeing that,” said one. “I saw some scandalous stuff sometimes, you know, like I did see scenes of intimacy but not nudity,” said another. “And there was just definitely a lot of stuff that like, I wouldn’t want anybody to see about my life.” As an example, this person recalled seeing “embarrassing objects”, such as “certain pieces of laundry, certain sexual wellness items and just private scenes of life that we really were privy to because the car was charging”. Memes in the San Mateo office Tesla staffed its San Mateo office with mostly young workers, in their 20s and early 30s, who brought with them a culture that prized entertaining memes and viral online content. Former staffers described a free-wheeling atmosphere in chatrooms with workers exchanging jokes about images they viewed while labeling. According to several ex-employees, some labelers shared screenshots, sometimes marked up using Adobe Photoshop, in private group chats on Mattermost, Tesla’s internal messaging system. There they would attract responses from other workers and managers. Participants would also add their own marked-up images, jokes or emojis to keep the conversation going. Some of the emojis were custom-created to reference office inside jokes, several ex-employees said. Knowing how much data those vehicles are capable of collecting definitely made folks nervous Former Tesla employee One former labeler described sharing images as a way to “break the monotony”. Another described how the sharing won admiration from peers. “If you saw something cool that would get a reaction, you post it, right, and then later, on break, people would come up to you and say, ‘Oh, I saw what you posted. That was funny,’” said the former labeler. “People who got promoted to lead positions shared a lot of these funny items and gained notoriety for being funny.” Some of the shared content resembled memes on the internet. There were dogs, interesting cars, and clips of people recorded by Tesla cameras tripping and falling. There was also disturbing content, such as someone being dragged into a car seemingly against their will, said one ex-employee. Video clips of crashes involving Teslas were also sometimes shared in private chats on Mattermost, several former employees said. Those included examples of people driving badly or collisions involving people struck while riding bikes, such as the one with the child, or motorcycles. Some data labelers would rewind such clips and play them in slow motion. At times, Tesla managers would crack down on inappropriate sharing of images on public Mattermost channels since they claimed the practice violated company policy. Still, screenshots and memes based on them continued to circulate through private chats on the platform, several ex-employees said. Workers shared them one-on-one or in small groups as recently as the middle of last year. One of the perks of working for Tesla as a data labeler in San Mateo was the chance to win a prize – the use of a company car for a day or two – according to two former employees. But some of the lucky winners became paranoid when driving the electric cars. “Knowing how much data those vehicles are capable of collecting definitely made folks nervous,” one ex-employee said.

1 0

seminario venerdì 21 aprile 2023 " La protezione dei dati personali e la transizione digitale: le sfide attuali e future"
by Mauro Alovisio April 7, 2023

April 7, 2023

Gent.mi ho il piacere di segnalare il seminario di presentazione della quinta edizione del corso di perfezionamento in materia di protezione dei dati personali dell'Università degli studi di Torino in sinergia con l'Unione Industriale di Torino*, *che si svolgerà *venerdì 21 aprile 2023 alle ore 17 presso l'aula magna del Campus Luigi Einaudi a Torino * *ad oggetto: "La protezione dei dati personali e la* *transizione digitale: le sfide attuali e future*" *.* Parteciperanno come relatori: il prof. *Francesco Pizzetti, il prof. Sergio Foà,* il *dott Agostino Ghiglia* dell'*Autorità Garante per la protezione* dei dati personali e rappresentanti dell'Unione Industriale e degli ordini professionali. Durante la presentazione saranno esaminate alcune delle problematiche di forte attualità di questi ultimi mesi: l'intelligenza artificiale, il ruolo del Garante, gli attacchi informatici e data breach, il trasferimento di dati extra Ue. Il seminario è accreditato per la formazione obbligatoria per gli avvocati Per informazioni (borse di studio under 29, calendario e scadenze) > > https://www.giurisprudenza.unito.it/do/home.pl/View?doc=data_protection_off… > Un caro saluto > Mauro Alovisio

1 0

30 under 30-year sentences: why so many of Forbes’ young heroes face jail
by Alberto Cammozzo April 7, 2023

April 7, 2023

<https://www.theguardian.com/business/2023/apr/06/forbes-30-under-30-tech-fi…> ust a few years ago, Charlie Javice was riding high. In 2019 the tech CEO landed a spot on Forbes’s 30 Under 30 list for her work on a startup called Frank, which she described as “Amazon for higher education”. What does that catchy but completely empty phrase mean? It means Frank helped students navigate the financial aid process. It was apparently so successfully at doing this that JPMorgan Chase acquired the company for $175m in 2021 and Javice was made a managing partner at the bank. [...] The problem here isn’t Forbes, of course; the problem is the vision of success that we’ve been sold and the fetishizing of youth. 30 Under 30 isn’t just a list, it’s a mentality: a pressure to achieve great things before youth slips away from you. The pressure can lead certain ambitious people to take shortcuts. And, in fact, shortcuts are encouraged: millennials, after all, grew up being told to “fake it ’til you make it”, cash in now until you become a withered, irrelevant, 30-year-old prune. If you exaggerate a little bit, that’s not fraud, that’s hustle! Until, of course, the justice department comes knocking.

1 0

Re: [nexa] incontro OpenAI e Garante privacy
by Giuseppe Attardi April 6, 2023

April 6, 2023

Comunicato a seguito dell’incontro: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9872832 Il Garante si riserva di valutare le misure proposte dalla società, anche riguardo al provvedimento adottato nei confronti di OpenAI. Tradotto: ancora non sanno bene come uscire dal pasticcio che hanno provocato. — Beppe > On 4 Apr 2023, at 22:15, nexa-request(a)server-nexa.polito.it wrote: > > From: Mauro Alovisio <mauro.alovisio(a)gmail.com <mailto:mauro.alovisio@gmail.com>> > To: Diego Giorio <dgiorio(a)hotmail.com <mailto:dgiorio@hotmail.com>> > Cc: Giacomo Tesio <giacomo(a)tesio.it <mailto:giacomo@tesio.it>>, Guido Vetere > <vetere.guido(a)gmail.com <mailto:vetere.guido@gmail.com>>, "nexa(a)server-nexa.polito.it <mailto:nexa@server-nexa.polito.it>" > <nexa(a)server-nexa.polito.it <mailto:nexa@server-nexa.polito.it>> > Subject: [nexa] incontro OpenAI e Garante privacy > Message-ID: > <CAEJR+62R32YyXbi=nXid3e-Jitqp4mkJM4fqF7nH84pk0y3vuA(a)mail.gmail.com <mailto:CAEJR+62R32YyXbi=nXid3e-Jitqp4mkJM4fqF7nH84pk0y3vuA@mail.gmail.com>> > Content-Type: text/plain; charset="utf-8" > > dal sito del Garante > ChatGPT: domani incontro tra OpenAI e Garante privacy > > *ChatGPT: domani incontro tra OpenAI e Garante privacy* > > E’ previsto per domani sera un incontro, in videoconferenza, tra i > rappresentanti di OpenAI e il Garante per la protezione dei dati personali, > che nei giorni scorsi ha imposto alla piattaforma > di limitare temporaneamente il trattamento dei dati degli utenti italiani > finché non si sarà messa in regola con la normativa privacy italiana e > europea. > > L’iniziativa, apprezzata dal Garante, fa seguito alla lettera con cui ieri > la società statunitense ha risposto al Garante per esprimere la propria > disponibilità immediata a collaborare con l’Autorità italiana al fine di > rispettare la disciplina privacy europea e giungere a una soluzione > condivisa in grado di risolvere i profili critici sollevati dall’Autorità > in merito al trattamento dei dati dei cittadini italiani. > > *Roma, 4 aprile 2023* > > > *Un caro saluto* > > > *Mauro*

4 3

Re: [nexa] ChatGPT disabled for users in Italy (Marco A. Calamari)
by karlessi April 6, 2023

April 6, 2023

Il 05/04/23 10:33, nexa-request(a)server-nexa.polito.it ha scritto: > Send nexa mailing list submissions to > > Message: 1 > Date: Wed, 5 Apr 2023 06:58:04 +0200 > From: Guido Vetere <vetere.guido(a)gmail.com> > To: Nexa <nexa(a)server-nexa.polito.it> > > Aveva proprio ragione quel filosofo viennese che diceva che i problemi > filosofici sono problemi linguistici, e in particolare perché il linguaggio > suggestiona, come la musica. > > Tutte le tecnologie hanno un padrone, tutti i padroni sono cattivi, quindi > tutte le tecnologie sono cattive, no? Buongiorno, quel filosofo aveva senz'altro ragione nel ristretto mondo dei suoi problemi filosofici, che non sono TUTTI i problemi filosofici. ad esempio il problema filosofico di chi debba (ammesso che debba...) governare e in che modo non è un problema linguistico. così come il problema filosofico di chi abbia il diritto o meno di far qualcosa: non è un problema linguistico. IMHO. non mi risulta di aver scritto qualcosa del genere. ad ogni modo, no. un sillogismo del genere non lo sottoscriverei. Non tutti i padroni sono cattivi. alcuni sono semplicemente padroni. non tutte le tecnologie hanno un padrone: il software libero, per esempio, non ne ha. Se ne ha, non è più libero. Non tutte le tecnologie sono cattive: alcune sono semplicemente inutili sprechi di risorse, altre sono nocive (iatrogene, per esempio, avrebbe detto Illich); alcune sono pensate, modificate, messe a punto ed evolute per sostenere la convivialità, il benessere personale e collettivo. insomma direi che la questione è un attimo più complessa, e non mi pare saggio ricorrere ai sillogismi. no, nemmeno alla filosofia analitica, ce n'è fin troppa in giro fatta maluccio e, appunto, il mondo non si risolve tutto in giochi linguistici. opinione mia, s'intende. talmente minoritaria che trovo curiosa la reazione, il mondo va in tutt'altra direzione mi pare. Quello che ho cercato di sottolineare è che queste tecnologie non solo non sono affatto neutre (Latour ecc ecc ecc ecc), ma incarnano e promuovono delle ideologie. il fatto di non dichiararlo e di far finta che no, non sono mosse ideologicamente fondate, rende, questo sì, il "dibattito" grottescamente orientato. dalla parte della *tecnocrazia*, che è l'ideologia dominante (sempre opinione mia) di questi attori che propongono ChatGPT et similia. OpenAI è un nome senza riferimenti ideologici? Aver raccontato la favoletta della ricerca disinteressata non a fini di lucro è un approccio non ideologico? Chiedere una "moratoria" adesso è una mossa non ideologicamente fondata? Direi l'opposto, porta l'acqua a un certo mulino, quello della concentrazione di potere tecnico nelle mani di pochi, sempre più pochi e sempre più ricchi. sempre più nella posizione di non rendere mai conto a nessuno di quel che fanno. questo intendevo dire: che ogni uso di questi sistemi si scontra inevitabilmente con il modo industriale gerarchizzato di produzione, ecc ecc con cui sono strutturati. non ho alternative da proporre a ChatGPT - non ne vedo la necessità, è un giocattolo più nocivo che inutile. opinione mia. l'ho detto senz'altro rozzamente, ma purtroppo mi esprimo da hacker rozzo, senza la chiarezza telegrafica dei sillogismi analitici; e sono senz'altro animato da un'ideologia chiara, libertaria, cioè l'idea che la libertà è questione di relazione, e quindi di relazioni di potere, perciò non si compra e non si vende, né si può garantire per decreto, così come l'uguaglianza. Avere a che fare con ChatGPT comporta accettare una serie di dati di fatto rispetto a come quel sistema è stato concepito e messo in funzione, che ci piaccia o meno, e che NON dipendono solo da noi e dalle leggi che potremo o vorremo far rispettare. a me sembra che un approccio laico sia un approccio ideologico, e non c'è nulla di male in questo. un approccio religioso è altrettanto ideologico: diversa ideologia, certo. le ideologie si evolvono, insieme ai loro elementi costituivi (Freeden mi pare un buon punto di partenza in merito). la scienza, in questo senso, è una forma di ideologia... poi ci si può, volendo, accordare sui termini. intendo con ideologia una cosa diversa, non necessariamente malvagia. la democrazia liberale è un'ideologia, per intenderci. le decisioni equilibrate e corrette, nella mia visione ideologica del mondo, difficilmente verranno implementate se si lascia campo libero ai padroni delle tecnologie di cui sopra. questi fenomeni tipo IA distraggono l'attenzione dal mondo stesso, ma non sono certo la "fine del mondo". solo tasselli di un sistema sempre più polarizzato e sbilanciato. grazie per l'occasione di chiarimento! k. > > Per quanto mi riguarda questo thread finisce qui, ho imparato tante cose e > ho le idee più chiare. Grazie! > >> -- "tecnologie appropriate - https://alekos.net" "pedagogia hacker - https://circex.org"

7 8

MEMENTO | 161° Mercoledì di Nexa | 12 aprile 2023, ore 17.00
by Nexa Media April 6, 2023

April 6, 2023

Gentilissime, gentilissimi, Vi ricordiamo che *mercoledì 12 aprile*, alle ore 17.00, si terrà il *161° Mercoledì di Nexa* con ospite *Enrico Nardelli* (Università di Roma "Tor Vergata") che presenterà il suo ultimo libro: /*"La rivoluzione informatica. Conoscenza, consapevolezza e potere nella società digitale"*/, Themis, 2022. _L'incontro si terrà IN PRESENZA e ONLINE._ _SEDE FISICA_ dell'incontro: Centro Nexa su Internet e Società, Politecnico di Torino, Via Boggio 65/a, Torino (1° piano). Per accedere alla sala si raccomanda di suonare al citofono portineria e di seguire le indicazioni segnalate dai cartelli apposti all'ingresso e lungo il percorso. QUI <https://nexa.polito.it/contatti> maggiori informazioni su come raggiungerci. _STANZA VIRTUALE_ dell'incontro: https://didattica.polito.it/VClass/NexaEvent Per maggiori informazioni è possibile consultare la pagina: https://nexa.polito.it/mercoledi-161 Cordiali saluti, -- Anita Botta Communication Manager Nexa Center for Internet & Society Politecnico di Torino – DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino web: https://nexa.polito.it/ mail: anita.botta(a)polito.it tel: 011 090 7219

1 0

Ancora su ChatGPT e Garante
by Diego Giorio April 6, 2023

April 6, 2023

Segnalo questo articolo https://www.corrierecomunicazioni.it/privacy/chatgpt-la-provocazione-del-pd… [https://d110erj175o600.cloudfront.net/wp-content/uploads/2023/02/17180239/c…]<https://www.corrierecomunicazioni.it/privacy/chatgpt-la-provocazione-del-pd…> ChatGpt, la "provocazione" del Pd: proposta di legge scritta dall’AI - CorCom<https://www.corrierecomunicazioni.it/privacy/chatgpt-la-provocazione-del-pd…> Atteso in serata l’incontro del Garante Privacy con OpenAi che sostiene di rispettare la privacy e chiede la riattivazione del servizio in Italia. Boom di accesso alle Vpn dopo il blocco: +400%. Intanto l’Autorità britannica multa TikTok per 14,5 milioni: uso illecito dei dati dei minori. L’azienda “esulta” per il dimezzamento della sanzione e assicura: “Under 13 non possono accedere, garantiamo sicurezza” www.corrierecomunicazioni.it Buona giornata e buona Pasqua a tutti D.

1 0

Welcome to noyb’s Meta Opt-Out Tool!
by Alberto Cammozzo April 5, 2023

April 5, 2023

<https://meta-out.noyb.eu/> Welcome to noyb’s Meta Opt-Out Tool! The European Data Protection Board (EDPB) has found that Meta has violated the European Data Protection Law (GDPR) by claiming that their personal data collection for advertisement is 'necessary for the performance of a contract' between them and their users. Meta has now announced that it will use another unlawful basis for processing your personal data. Legitimate interests? Instead of giving users a yes / no option, Meta now claims that it has a ‘legitimate interest’ in tracking you, merging your data with the data of others, or analysing your behavior to send you advertisements. This legitimate interest of Meta shall (allegedly) override your right to data protection and privacy – as protected in the Charter of Fundamental Rights of the EU. In simple terms, Meta claims that their interest in making a profit from your personal data overrides your rights. Regulators have previously rejected this approach. Legitimate interests requires option to “opt-out” Under Articles 21(1) and (2) GDPR users can send on “objection” to companies who claim that they have a “legitimate interest” for the processing of their personal data. Basically, this means that users can do an “opt-out”. Meta is providing an opt-out option, but if yo u want to make sure that you send a broad objection that covers the various claims of Meta in one go, you may use this tool to do so. To provide this tool noyb must collect limited information from you, connect with Meta services to verify your account details, and send them to Meta. Meta processes some of your personal data outside of the EU/EEA (including the USA). Read more details here.

1 0

Users fume after My Cloud network breach locks them out of their data
by 380° April 5, 2023

April 5, 2023

Buongiorno, non di sola AI l'IT vive :-D richiesta: siccome il mio avatar non ha (ancora) accesso a un apparecchio WD My Cloud [1] - quindi non posso verificare - e leggendo il manuale utente [2] del modello base e un articolo del supporto [3] pare che l'accesso ai dati con protocollo SMB3 (Windows Network) via rete locale sia supportato, ma l'articolo sostiene che per accedere localmente occorre comunque "loggarsi" al servizio esterno MyCloud.com, che da giorni è (stato) bloccato, sarei grato se qualcuno con esperienza diretta in merito chiarisse questo punto. «Users fume after My Cloud network breach locks them out of their data» https://arstechnica.com/information-technology/2023/04/users-fume-after-my-… --8<---------------cut here---------------start------------->8--- The compromise allowed hackers to steal data, raising the specter of ransomware. Users of the Western Digital My Cloud service are fuming after a network breach has locked them out of their data for more than 24 hours and has put company-handled information into the hands of currently unknown hackers. The inability to access data stored in My Cloud was reported on social media by multiple users, including this one, who indicated the outage started sometime on Saturday. Since then, the number of users (and their anxiety levels) have only ratcheted up. By early morning California time on Monday, Western Digital issued a release [4] saying that a week ago Sunday the company learned that an “unauthorized third party gained access to a number of the Company’s systems.” The release added: “Based on the investigation to date, the Company believes the unauthorized party obtained certain data from its systems and is working to understand the nature and scope of that data.” The status page for My Cloud was updated on Sunday to show that services including My Cloud, My Cloud Home, My Cloud Home Duo, My Cloud OS5, SanDisk ibi, and SanDisk Ixpand Wireless Charger are completely down. The page provided no estimate on when service may be restored. The outage means that users cannot access any data they stored in My Cloud. Many users took to social media to report that the outage locked them out of data they needed to perform work tasks. “The login service for WD My Cloud Home is unavailable,” one user wrote on Sunday. “Thank you @westerndigital for not letting me access my data that I have in the living room.” On Monday morning, another user wrote: “@westerndigital When are you gonna fix the 503 error? I need to access the information 🥲 Since Saturday i cannot enter in the cloud.” While Western Digital provides customers with a storage device that stores data locally, the accompanying My Cloud service allows them to back it up to an off-premises server and to access the contents remotely over the Internet. According to posts like this one on Western Digital’s customer support pages, users by default must authenticate themselves on MyCloud.com to enable local network access to My Cloud data. With home.mycloud.com delivering a 503 error, many users are effectively locked out. Western Digital representatives didn’t respond to an email asking what the current status of the outage is and what, if any, steps users can take to regain access to their data while it continues. Western Digital is warning that the incident “has caused and may continue to cause disruption to parts of the Company’s business operations." The company also said it is “implementing proactive measures” and is working to restore affected infrastructure and services. The company added that it retained an unnamed security firm to investigate and is also coordinating with law enforcement. --8<---------------cut here---------------end--------------->8--- saluti, 380° [1] https://www.westerndigital.com/support/product-list?productName=3779 [2] https://products.wdc.com/library/UM/ENG/4779-705147.pdf [3] https://support-en.wd.com/app/answers/detailweb/a_id/34991/~/how-to-enable-… [4] https://www.businesswire.com/news/home/20230402005076/en/Western-Digital-Pr… -- 380° (Giovanni Biscuolo public alter ego) «Noi, incompetenti come siamo, non abbiamo alcun titolo per suggerire alcunché» Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about <https://stallmansupport.org>.

1 0

Parlamento: recepita la Direttiva UE sulle denuncie di irregolarità (whistleblowing) | Dottrina Per il Lavoro
by Mauro Alovisio April 5, 2023

April 5, 2023

Ciao Segnalo finalmente dopo un grave ritardo rispetto agli altri paesi europei il decreto che tutela i segnalanti di violazione di legge all'interno dei contesti lavorativi. https://www.dottrinalavoro.it/notizie-c/parlamento-recepita-la-direttiva-ue… Un caro saluti Mauro

1 1