- nexa - server-nexa.polito.it

[CDT:L5] [CDT:L6] AI as Sensemaking for Public Comments
by 380° July 8, 2023

July 8, 2023

Buongiorno, https://www.schneier.com/blog/archives/2023/06/ai-as-sensemaking-for-public… «AI as Sensemaking for Public Comments» June 20, 2023 - by Bruce Schneier and Nathan Sanders pubblicato anche qui: https://theconversation.com/ai-could-shore-up-democracy-heres-one-way-207278 con il più "modesto" titolo «AI could shore up democracy – here’s one way» --8<---------------cut here---------------start------------->8--- [...] Many groups have started demonstrating the potential [beneficial] uses of AI for governance. A key constructive-use case for AI in democratic processes is to serve as [discussion moderator] and [consensus builder]. To help democracy [scale better] in the face of growing, increasingly interconnected populations—as well as the wide availability of AI language tools that can generate reams of text at the click of a button—the US will need to leverage AI’s capability to rapidly digest, interpret and summarize [this content]. There are two different ways to approach the use of generative AI to improve civic participation and governance. Each is likely to lead to drastically different experience for public policy advocates and other people trying to have their voice heard in a future system where AI chatbots are both the dominant readers and writers of public comment. For example, consider individual letters to a representative, or comments as part of a regulatory rulemaking process. In both cases, we the people are telling the government what we think and want. For more than [half a century], agencies have been using human power to read through all the comments received, and to generate summaries and responses of their major themes. To be sure, digital technology has helped. In 2021, the Council of Federal Chief Data Officers [recommended modernizing] the comment review process by implementing natural language processing tools for removing duplicates and clustering similar comments in processes governmentwide. These tools are simplistic by the standards of 2023 AI. They work by assessing the semantic similarity of comments based on metrics like word frequency (How often did you say “personhood”?) and clustering similar comments and giving reviewers a sense of what topic they relate to. Think of this approach as collapsing public opinion. They take a big, hairy mass of comments from thousands of people and condense them into a tidy set of essential reading that generally suffices to represent the broad themes of community feedback. This is far easier for a small agency staff or legislative office to handle than it would be for staffers to actually read through that many individual perspectives. But what’s lost in this collapsing is individuality, personality, and relationships. The reviewer of the condensed comments may miss the personal circumstances that led so many commenters to write in with a common point of view, and may overlook the arguments and anecdotes that might be the most persuasive content of the testimony. Most importantly, the reviewers may miss out on the opportunity to recognize committed and knowledgeable advocates, whether interest groups or individuals, who could have long-term, productive relationships with the agency. These drawbacks have real ramifications for the potential efficacy of those thousands of individual messages, undermining what all those people were doing it for. Still, practicality tips the balance toward of some kind of summarization approach. A passionate letter of advocacy doesn’t hold any value if regulators or legislators simply don’t have time to read it. There is another approach. In addition to collapsing testimony through summarization, government staff can use modern AI techniques to explode it. They can automatically recover and recognize a distinctive argument from one piece of testimony that does not exist in the thousands of other testimonies received. They can discover the kinds of constituent stories and experiences that legislators love to repeat at hearings, town halls and campaign events. This approach can sustain the potential impact of individual public comment to shape legislation even as the volumes of testimony may rise exponentially. In computing, there is a rich history of that type of automation task in what is called [outlier detection]. Traditional methods generally involve finding a simple model that explains most of the data in question, like a set of topics that well describe the vast majority of submitted comments. But then they go a step further by isolating those data points that fall outside the mold—comments that don’t use arguments that fit into the neat little clusters. State-of-the-art AI language models aren’t necessary for identifying outliers in text document data sets, but using them could bring a greater degree of sophistication and flexibility to this procedure. AI language models can be tasked to identify novel perspectives within a large body of text through prompting alone. You simply need to tell the AI to [find them]. In the absence of that ability to extract distinctive comments, lawmakers and regulators have no choice but to prioritize on other factors. If there is nothing better, “[who donated the most to our campaign]” or “[which company employs the most of my former staffers]” become reasonable metrics for prioritizing public comments. AI can help elected representatives do much better. If Americans want AI to help revitalize the country’s ailing democracy, they need to think about how to align the incentives of elected leaders with those of individuals. Right now, as much as 90% of constituent communications are [mass emails] organized by advocacy groups, and they go largely ignored by staffers. People are channeling their passions into a vast digital warehouses where algorithms box up their expressions so they don’t have to be read. As a result, the incentive for citizens and advocacy groups is to fill that box up to the brim, so someone will notice it’s overflowing. A talented, knowledgeable, engaged citizen should be able to articulate their ideas and share their personal experiences and distinctive points of view in a way that they can be both included with everyone else’s comments where they contribute to summarization and recognized individually among the other comments. An effective comment summarization process would extricate those unique points of view from the pile and put them into lawmakers’ hands. --8<---------------cut here---------------end--------------->8--- [beneficial] <https://www.nytimes.com/2023/04/05/opinion/artificial-intelligence-democrac…> [discussion moderator] <https://www.npr.org/2023/03/05/1161192417/a-new-ai-tool-can-moderate-your-t…> [consensus builder] <https://arxiv.org/abs/2211.15006> [scale better] <https://cyberscoop.com/rethinking-democracy-ai/> [this content] <https://www.brookings.edu/research/robotic-rulemaking/> [half a century] <https://core.ac.uk/download/pdf/144232278.pdf> [recommended modernizing] <https://resources.data.gov/resources/cdoc_comment_analysis/> [outlier detection] <https://scikit-learn.org/stable/modules/outlier_detection.html> [find them] <https://andrewmayneblog.wordpress.com/2021/04/18/the-gpt-3-zero-shot-approa…> [who donated the most to our campaign] <https://doi.org/10.1111/lsq.12266> [which company employs the most of my former staffers] <https://doi.org/10.1086/698931> [mass emails] <https://www.congressfoundation.org/news/blog/1637> -- 380° (Giovanni Biscuolo public alter ego) «Noi, incompetenti come siamo, non abbiamo alcun titolo per suggerire alcunché» Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about <https://stallmansupport.org>.

1 0

anatomia di uno zero-day: il caso dell'ultimo baco di WebKit (Safari et al)
by 380° July 7, 2023

July 7, 2023

Buongiorno, grazie al DSA 5449-1 [1] ricevuto via email scopro che: --8<---------------cut here---------------start------------->8--- The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-32439 An anonymous researcher discovered that processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. --8<---------------cut here---------------end--------------->8--- Per chi non lo sapesse WebKit è **software libero** ed è la "web engine" (la libreria software che interpreta e visualizza il contenuto delle pagine web) usata da moltissimi browser: Safari, quelli di iOS e iPadOS, Gnome Web ma anche su console Playstation, Nintendo e televisori con WebOS [2]. La notizia era già stata data sotto forma di _propaganda_ /un tanto al chilo/ da diversi giornali "generalisti" nazionali [3] e non, senza dare il benché minimo riferimento (nemmeno in successivi articoli di aggiornamento, AFAIU) ai report tecnici che descrivono il problema. Il baco riportato sopra fa parte di una serie di vulnerabilità descritte come zero-day in questo interessante articolo di The Hacker News: https://thehackernews.com/2023/06/zero-day-alert-apple-releases-patches.html «Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari» --8<---------------cut here---------------start------------->8--- [...] This includes a pair of zero-days that have been weaponized in a mobile surveillance campaign called Operation Triangulation [https://thehackernews.com/2023/06/new-zero-click-hack-targets-ios-users.html] that has been active since 2019. The exact threat actor behind the activity is not known. * CVE-2023-32434 - An integer overflow vulnerability in the Kernel that could be exploited by a malicious app to execute arbitrary code with kernel privileges. * CVE-2023-32435 - A memory corruption vulnerability in WebKit that could lead to arbitrary code execution when processing specially crafted web content. The iPhone maker said it's aware that the two issues "may have been actively exploited against versions of iOS released before iOS 15.7," crediting Kaspersky researchers Georgy Kucherin, Leonid Bezvershenko, and Boris Larin for reporting them. The advisory comes as the Russian cybersecurity vendor dissected the spyware implant used in the zero-click attack campaign targeting iOS devices via iMessages [...] The sophisticated implant, called TriangleDB [https://thehackernews.com/2023/06/new-report-exposes-operation.html] operates solely in the memory, leaving no traces of the activity following a device reboot. It also comes with diverse data collection and tracking capabilities. This includes "interacting with the device's file system (including file creation, modification, exfiltration, and removal), managing processes (listing and termination), extracting keychain items to gather victim credentials, and monitoring the victim's geolocation, among others." [...] Also patched by Apple is a third zero-day CVE-2023-32439, which has been reported anonymously and could result in arbitrary code execution when processing malicious web content. The actively exploited flaw, described as a type confusion issue, has been addressed with improved checks. --8<---------------cut here---------------end--------------->8--- La pagina dedicata al CVE-2023-3249 dal NIST [4] riporta alcuni link di riferimento a "release notes" di aggiornamento emesse da Apple, alcune delle quali [5] indicano che il bug sul sistema di bug tracking di WebKit è il numero 256567: https://bugs.webkit.org/show_bug.cgi?id=256567 «EnumeratorNextUpdateIndexAndMode and HasIndexedProperty should have different heap location kinds» --8<---------------cut here---------------start------------->8--- Status: RESOLVED FIXED Alias: CVE-2023-32439 Product: WebKit Component: JavaScriptCore (show other bugs) Version: WebKit Nightly Build Hardware: Unspecified Unspecified Importance: P2 Normal Assignee: Yijia Huang URL: Keywords: InRadar Depends on: Blocks: Reported: 2023-05-09 18:26 PDT by Yijia Huang Modified: 2023-06-22 08:44 PDT (History) CC List: 2 users (show) --8<---------------cut here---------------end--------------->8--- Il tipo di bug viene definito "type confusion" in [4] :-D Il bug è quindi relativo al sottosistema che interpreta i Javascript (ma dai?!?), viene classificato come di importanza normale mentre il NIS nel CVE gli da un "base score" di 8.8 (su 10). La descrizione del bug credo sia stata redatta per eliminare ogni riferimento all'**anonimo** che ha segnalato il baco, strano perché di solito queste cose "fanno curriculum" :-O Il bug è stato risolto con il commit 52fe95e580 [6] il 10 Maggio scorso (zero-day what?). Tutti i nostri dispositivi sono letteralmente dei colabrodo, parlo di quelli di cui almeno si può verificare la corrispondeza tra sorgente e binario; il resto sono ovviamente irrimediabilmente compromessi. É stata una svista o un sapiente hack? Qualcuno™ lo sapeva e ha fatto finta di niente per anni? Saluti, 380° [1] Debian Security Advisory, non ancora pubblicato via web qui: https://www.debian.org/security/2023/ [2] https://en.wikipedia.org/wiki/WebKit [3] presi a caso: Il Fatto Quotidiano: https://archive.is/HX7aL Il Tempo: https://archive.is/2PloD Punto Informatico: https://web.archive.org/web/20230707111337/https://www.punto-informatico.it… non ho avuto tempo di consultare i FAT checkers [4] https://nvd.nist.gov/vuln/detail/CVE-2023-32439 [5] queste: https://support.apple.com/en-us/HT213813 https://support.apple.com/en-us/HT213814 https://support.apple.com/en-us/HT213816 [6] https://github.com/WebKit/WebKit/commit/52fe95e5805c735cc1fa4d6200fcaa1912e… -- 380° (Giovanni Biscuolo public alter ego) «Noi, incompetenti come siamo, non abbiamo alcun titolo per suggerire alcunché» Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about <https://stallmansupport.org>.

1 0

Domicilio digitale e recaptcha
by Alberto Cammozzo July 7, 2023

July 7, 2023

Il nuovo servizio nazionale pubblico (AGID) del domicilio digitale richiede Google recaptcha attivo. Vedi allegato lo schema di permessi richiesti per umatrix. A.

1 0

Piattaforme digitali e censura: un questionario per la raccolta di casi di censura online
by Maurizio Borghi July 6, 2023

July 6, 2023

Gentili partecipanti alla lista Nexa, Vi segnalo il progetto Piattaforme digitali e censura online: la moderazione dei contenuti tra libertà di pensiero e contrasto alla disinformazione e hate speech in rete <https://nexa.polito.it/piattaforme-digitali-censura-online>, da me coordinato e condotto dalla dott.ssa Beatrice Balzola. Il progetto si propone di raccogliere *evidenza empirica* sulle politiche di censura adottate dalle principali piattaforme di condivisione, con particolare riferimento ai tipi di intervento, alla natura dei contenuti oggetto di provvedimenti e al livello di trasparenza nei confronti degli utenti. A questo scopo, il progetto intende raccogliere un cospicuo numero di “casi studio” di censura online attraverso la compilazione di un *questionario*: *https://survey.nexacenter.org/index.php/637786?lang=it* <https://survey.nexacenter.org/index.php/637786?lang=it> Se avete subito un *provvedimento di censura* – ad esempio la sospensione dell’account, la rimozione di contenuti o il loro oscuramento (“shadowbanning”) – o se siete a conoscenza di persone che hanno subito tali provvedimenti, Vi chiediamo anzitutto di compilare il questionario e poi di *condividerlo *con altre persone attraverso le vostre reti di conoscenza. Il vostro contributo sarà fondamentale per la buona riuscita del progetto. Cordialmente, -- _______________ *Maurizio Borghi* Università di Torino https://www.dg.unito.it/persone/maurizio.borghi Co-Director Nexa Center for Internet & Society <https://nexa.polito.it/>

3 3

Social media could be as harmful to children as smoking or gambling – why is this allowed? | Devi Sridhar | The Guardian
by Alberto Cammozzo July 6, 2023

July 6, 2023

<https://www.theguardian.com/commentisfree/2023/jul/04/smoking-gambling-chil… WhatsApp is for old people. That is, people over 30. At least that’s what my first-year medical students tell me. WhatsApp has become the realm of government backchats about Covid-19 policy, or family groups sharing graduation photos and past-their-prime memes. Young people, especially teenagers, communicate through Snapchat, an app that reaches 90% of 13- to 24-year-olds and 75% of 13- to 34-year-olds across the UK. It has more than 21 million active users in Britain per month, which is almost one-third of the population, and each accesses the app on average more than 50 times a day. If we go back to the 1980s and 1990s, parenting was often about keeping children physically safe. A moody 14-year-old wanting to be alone in their room was a normal thing– in fact this was sufficient to protect them. Parents had clear oversight over who their kids were around at home, and the physical materials they were consuming. Fast-forward to 2023 and children are in their rooms at home, but while physically safe, they’re exposed to an entire virtual world with almost no regulation over the content they see, how much time they’re spending on devices or the boundary between necessary social communication with friends and a much darker world of harmful or pornographic material, and predatory influencers. Compounding the problems facing teenagers and parents is the fact that apps are often designed deliberately to be addictive, or used compulsively. They regularly turn social interactions into games – like Snapchat’s “Snapstreak” feature that scores a user for the number of consecutive days they share a picture with each contact, encouraging them to be available on the app constantly. Apps also come with many safety and oversight concerns. Snapchat popularised disappearing messages, meaning parents can’t check what their child has been viewing or posting, and many apps share the user’s location with others by default. Teenagers and children may not even know that they’re sharing live data on their location throughout the day. The potential harms of these apps are increasingly being called out. The US surgeon general, Vivek Murthy, issued an “advisory” last month on the effects social media use has on young people’s mental health. He said: “The most common question parents ask me is, ‘is social media safe for my kids?’ The answer is that we don’t have enough evidence to say it’s safe, and in fact, there is growing evidence that social media use is associated with harm to young people’s mental health. We are in the middle of a national youth mental health crisis, and I am concerned that social media is an important driver of that crisis.” The president of the American Medical Association, Jack Resneck Jr, used even stronger words: “With near-universal social media use by America’s young people, these apps and sites introduce profound risk and mental health harms in ways we are only now beginning to fully understand.” The evidence of its mental health impact is concerning. The latest Centers for Disease Control Youth Risk Behaviour survey in 2021 illustrates the scale of the problem: 42% of high school students surveyed had experienced persistent feelings of sadness over the last year, while 22% had seriously contemplated suicide. Research cited by Murthy shows that adolescents who spend more than three hours per day on social media have double the risk of depression and anxiety. Furthermore, 46% of adolescents aged between 13 and 17 say social media makes them feel worse about their body image, and 64% of that age group are “often” or “sometimes” exposed to hate-based content. Yet children themselves feel unsure of how to cope: one-third or more of girls aged 11 to 15 say they feel “addicted” to certain apps, and more than half of teenagers say they would find it hard to give up social media. A study by researchers at the University of Bath looked at the mental health effects of a week-long social media break, which on average freed up about nine hours of their week. Even after only seven days, participants had significant improvements in wellbeing, depression and anxiety compared to a control group. There is growing consensus among health experts about the negative chronic health effects of social media use. And yet we are largely leaving it up to parents, and other concerned adults, to find solutions to a side-effect of universal smartphones. The burden is on the government to recognise the negative health impact that certain social media apps have, create policies to regulate companies to ensure they’re not selling a dangerous product to children, and work towards collective solutions. This could include working with these companies to make design and development decisions in their product that prioritise safety and health. Companies may resist this because it’s in their financial interest to keep users on their platforms for as long as possible. Screen time is their revenue stream: 99% of Snapchat revenue is from displaying advertising to its users; the figure for Meta, which owns Facebook and Instagram, is about 98%. The longer that kids spend on their platform, the more money they make. And the cost, maybe, is paid in the mental health of the next generation of society. In April 2023, a bipartisan group of senators in the US put forward new legislation, the protecting kids on social media bill, which would require a minimum age of social media use at 13, parental consent for children between 13 and 18, and would ban platforms from using certain algorithms on young users. As one of the senators proposing the US legislation, Brian Schatz, said: “The growing evidence is clear: social media is making more kids more depressed and wreaking havoc on their mental health. While kids are suffering, social media companies are profiting. This needs to stop.” This is exactly what public regulation is for. Like policies for tobacco, alcohol or gambling, it can ensure that when private companies sell a product with potential negative health impacts, they do so in a way that follows certain guidelines and protects vulnerable users from being completely exposed. Devi Sridhar is chair of global public health at the University of Edinburgh

8 22

Francia. Come si può fare integrazione in una società che si disintegra?
by don Luca Peyron July 6, 2023

July 6, 2023

Un pezzo che mi ha fatto riflettere, che tocca i nostri temi solo in modo tangenziale, ma forse neppure troppo se ci pensiamo. Buona lettura a chi lo desidera dl https://www.avvenire.it/opinioni/pagine/come-si-pu-fare-integrazione-in-una… _________________________ don Luca Peyron Direttore Ufficio per la Pastorale Universitaria Arcidiocesi di Torino www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

1 0

Una bocciatura intelligente
by de petra giulio July 5, 2023

July 5, 2023

Vi segnalo questa intervista che racconta che cosa sta avvenendo al liceo Albertelli di Roma https://centroriformastato.it/piano-scuola-4-0-avrei-preferenza-di-no/

1 0

Mercoledì di Nexa del 12 luglio 2023, ore 17.00
by Nexa Media July 5, 2023

July 5, 2023

Gentilissime, gentilissimi, Vi segnaliamo che il *Mercoledì di Nexa del 12 luglio prossimo*, nonostante il rinvio dell'ospite come precedentemente annunciato, rimane *confermato*: vista la prossimità con la chiusura dell'Anno Accademico, si è pensato di organizzare un *incontro dedicato alle riflessioni sull'anno appena passato*, un incontro aperto a tutti, alla nostra comunità, al pubblico che da sempre ci segue, e che ha contribuito nel tempo ad accrescere il dibattito interno al centro, e a chiunque avrà piacere di unirsi a noi. *L'incontro si terrà in un locale in centro a Torino (che indicheremo a breve), mercoledì 12 luglio alle ore 17.00*, cogliendo così l'occasione per salutarci ed augurarci buone vacanze con un brindisi tutti insieme. *Per questo incontro non sarà prevista la possibilità di partecipare da remoto.* Per maggiori informazioni e per rimanere aggiornati sul luogo dell'incontro è possibile consultare la pagina: https://nexa.polito.it/mercoledi-brindisi-chiusura-anno-accademico Cordiali saluti, -- Anita Botta Communication Manager Nexa Center for Internet & Society Politecnico di Torino – DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino web: https://nexa.polito.it/ mail: anita.botta(a)polito.it tel: 011 090 7219

1 0

The Vatican Wrote a Handbook on AI Ethics
by Daniela Tafani July 5, 2023

July 5, 2023

The Vatican Wrote a Handbook on AI Ethics In partnership with Santa Clara University’s Markkula Center for Applied Ethics, the Vatican created a new organization called the Institute for Technology, Ethics, and Culture (ITEC<https://www.scu.edu/institute-for-technology-ethics-and-culture/>). Focused on the betterment of humanity amid developments in technology, the ITEC started the ball rolling with a handbook detailing how the world can navigate ethically ambiguous technology. The handbook, titled "Ethics in the Age of Disruptive Technologies: An Operation Roadmap," isn’t a strict instruction manual for organizations. Rather, it’s just a guide for readers to create their own framework for technology. The Institute for Technology, Ethics, and Culture (ITEC) and the "ITEC Handbook" was featured in an article by GadgetMatch.<https://www.gadgetmatch.com/vatican-ai-ethics-handbook/> Jun 29, 2023 https://www.scu.edu/ethics/media-mentions/stories/the-vatican-wrote-a-handb… Qui il libro: https://www.scu.edu/institute-for-technology-ethics-and-culture/

1 0

Toyota says solid-state battery breakthrough can halve cost and size
by Luigi Scorca July 5, 2023

July 5, 2023

https://www.ft.com/content/87cb8e92-8e82-4755-8fc3-2943f8f63e1d "Solid-state batteries have long been heralded by industry experts as the most promising technology to solve EV battery problems such as charging time, capacity and the risk of catching fire. They replace a liquid electrolyte with a solid one and use lithium metal at the anode instead of graphite, the current standard in lithium-ion batteries." Luigi

1 0