- nexa - server-nexa.polito.it

Re: [nexa] [Junk released by Allowed List] Re: nuca rocks (?): Natural Nudity. AI Powered to be You. Just You.

by Daniela Tafani

Buongiorno, Il 22/04/2024 15:02, 380° ha scritto: > Effettivamente le uniche differenze con gli occhiali a raggi X che > spopolarono in Italia negli anni '70 è l'uso dell'AI e una macchina > fotografica al posto degli occhiali (ma solo perché non ci sono ancora > sistemi AI analoghi che forniscono risultati in tempo reale). > O forse, invece, ci sono: Instagram's Nudify Ads https://www.404media.co/email/d2bebba9-5808-44fc-8352-d93d1791a5ff/ Il che non mi pare sorprendente, se l'obiettivo, come immagino, è la mera plausibilità delle immagini (ri)prodotte. Un saluto, Daniela

April 22, 2024

Re: [nexa] nuca rocks (?): Natural Nudity. AI Powered to be You. Just You.

by 380°

Buongiorno Stefano, effettivamente certe cose non cambiano mai, sono *eterne*. Stefano Quintarelli <stefano(a)quintarelli.it> writes: > tse'. > > nell'ultima pagina dell'Intrepido le vendevano gia' 40 anni fa! > LOL Hai avuto la stessa reazione mia e di alti che conosco :-) LOL! :-D Per le persone che malauguratamente dovessero esserseli persi: https://www.postpopuli.it/occhiali-raggi-x-per-vedere-sotto-vestiti-esistev… Tra l'altro la loro invenzione risale al 1906-1908 (ci sono 3 brevetti dietro) e il meccanismo psicologico alla base del loro successo di marketing è lo stesso identico del "AI marketing": --8<---------------cut here---------------start------------->8--- Part of the novelty value lies in provoking the object of the wearer's attentions. These subjects may believe that the device does allow the wearer to compromise their modesty [...] --8<---------------cut here---------------end--------------->8--- (https://en.wikipedia.org/wiki/X-ray_specs#Marketing_themes) Parafrasando: «subjects may believe that the AI powered device does allow the user to compromise their modesty» > On 22/04/24 12:36, 380° wrote: >> Buongiorno, >> >> https://nuca.rocks/ >> >> --8<---------------cut here---------------start------------->8--- >> >> Introducing a new kind of camera. >> >> Natural Nudity. AI Powered to be You. Just You. Effettivamente le uniche differenze con gli occhiali a raggi X che spopolarono in Italia negli anni '70 è l'uso dell'AI e una macchina fotografica al posto degli occhiali (ma solo perché non ci sono ancora sistemi AI analoghi che forniscono risultati in tempo reale). >> NUCA is a speculative design and art project by [Mathias Vef] and >> [Benedikt Groß]. .. ma quella degli occhiali a raggi-x non era una campagna frutto di "speculative design" e men che meno un "art project"... o sì?!? :-D [...] >> This project prompts a crucial discussion on AI's potential, >> emphasizing consent, algorithmic fairness, and the societal impacts of >> AI-generated imagery. Se stimolasse anche la discussione cruciale su come funzionano davvero simili devices frutto di furbissimo e sofisticatissimo marketing sarebbe meglio. >> As Emanuel Maiberg and Samantha Cole put it, we >> must confront that we are facing an “explosion of [...] >> a new type of pornography Eh sì, perché la pornografia è davvero un problema, adesso che è generata *algoritmicamente* da una AI sarà devastante. [...] >> The current NUCA prototype is a 3d-printed camera (19.5 × 6 × 1.5 cm, >> 430g). The device is equipped with a 37 mm wide angle lens and an Tutto interessante eh... se solo simili iniziative servissero a convincere almeno 1 persona su 1000 ad andare a vedere come *effettivamente* funzionano simili devices... OFF-TOPIC (?) ...un po' come un hacker che da bimbo smontò la bambola della sorellina per /dimostrarle/ che non piangeva perché voleva il ciuccio e/o dietro c'era chissà quale strana "magia" ma /semplicemente/ aveva un micro giradischi incorporato azionato da un micro switch nella bocca che veniva azionato dal ciuccio, per quello ci volevano le pile. La sorellina lo odiò per un po' per averle semi distrutto la bambola, ma poi assieme fecero altre interessanti scoperte hackerose, tipo capire assieme come funzionava il "Dolce Forno" [1] (aka "Easy-Bake Oven" negli USA [2]) col quale si divertivano a cucinare assieme. E invece temo che molte persone si concentrerebbero in dibattiti sul bias dei progettista/venditori delle bambole, dei forni giocattolo («un tuffo nella memoria di chiunque fosse bimba in quegli anni.» [1]) o dei giocattoli in /genere/ [3] :-) Sì perché gli occhiali a raggi-x e la macchina fotografica NUCA sono dei *giocattoli*, no? [...] Saluti, 380° [1] https://www.mybubble.it/2021/04/05/1974-ogni-bimba-diventa-una-cuoca-con-il… Roba talmente /insicura/ che oggi metterebbero in galera non solo il progettista ma anche i genitori B-) (see https://en.wikipedia.org/wiki/Easy-Bake_Oven#Recall) [2] https://en.wikipedia.org/wiki/Easy-Bake_Oven [3] https://en.wikipedia.org/wiki/Hasbro#Criticism_and_controversy -- 380° (Giovanni Biscuolo public alter ego) «Noi, incompetenti come siamo, non abbiamo alcun titolo per suggerire alcunché» Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about <https://stallmansupport.org>.

April 22, 2024

EU-Israel data transfer adequacy greenlit again: NGOs call for scrutiny over red flags

by Daniela Tafani

EU-Israel data transfer adequacy greenlit again: NGOs call for scrutiny over red flags Through an open letter, Access Now, EDRi, and nine human rights organisations are calling on the European Commission to scrutinise and reconsider its decision to re-confirm the data transfer adequacy with Israel made on January 15, 2024. Given Israel’s rule of law and human rights track record, its inclusion in the adequacy review list — designed to allow free transfers of personal data with non-EU countries that have essentially equivalent data protection standards — warrants further deliberation. “When greenlighting the re-confirmation of data transfer adequacy with Israel, the European Commission has disregarded the human rights alarm bells that have been ringing since 2011, when the initial adequacy decision was approved,” said Chiara Manfredini, Policy Associate at Access Now. “The Commission should not have brushed off Israel’s use of surveillance and interception powers, and the accusations of genocide in Gaza.” The European Commission’s review raises red flags about the decision, casting doubt on Israel’s compliance with the adequacy criteria. Access Now and partners demand urgent clarification and review on a series of points, including: How the current status of rule of law in Israel, especially the threats to judicial independence and division of powers, ensures an adequate level of data protection; How Israel’s privacy and data protection framework is sufficiently aligned on critical definitions and standards with the General Data Protection Regulation; How Israel’s national security legal framework aligns with EU standards on necessity and proportionality, especially in regards to bulk data powers and surveillance operations; How Israel’s data transfers to the occupied Palestinian territories (oPts) and the Golan Heights — illegally annexed by Israel — aligns with EU rules regarding transfers to territories not deemed adequate under EU law; How stakeholder input to the review decision was collected by the European Commission; and Why the review did not take into consideration the current war Israel is waging on Gaza, recognised to plausibly amount to genocide, particularly in respect to international human rights norms — specific requirement needed to be assessed to issue an adequacy decision. “Israel’s current war on Gaza and its digital occupation of Palestine cannot be dismissed as a trivial footnote by the European Commission,” said Marwa Fatafta, MENA Policy and Advocacy Director at Access Now. “The indiscriminate personal data transfers from and to the oPts has been instrumental for building Israel’s mass surveillance apparatus, including the construction of mass biometric databases of Palestinians and its possible use for AI generated kill lists in Gaza. In no way, Israel can be regarded as a data protection haven, and Access Now urges the Commission to reconsider its decision.” Access Now, together with EDRi and other human rights organisations, are ready to engage further and are awaiting the European Commission’s clarifications on the points raised in this letter and reconsider the decision. Read the open letter: https://edri.org/wp-content/uploads/2024/04/Concerns-Regarding-European-Com… Read this media alert via the Access Now website: https://www.accessnow.org/press-release/eu-israel-data-transfer/

April 22, 2024

Re: [nexa] nuca rocks (?): Natural Nudity. AI Powered to be You. Just You.

by Stefano Quintarelli

tse'. nell'ultima pagina dell'Intrepido le vendevano gia' 40 anni fa! LOL On 22/04/24 12:36, 380° wrote: > Buongiorno, > > https://nuca.rocks/ > > --8<---------------cut here---------------start------------->8--- > > Introducing a new kind of camera. > > Natural Nudity. AI Powered to be You. Just You. > > NUCA is a speculative design and art project by [Mathias Vef] and > [Benedikt Groß]. The project aims to provoke and question the current > trajectory of generative AI in reproducing body images. > > [...] > > NUCA is a speculative consumer product and not meant to be used > uncontrolled in “the wild”. The generated images are not used in any > way, except with explicit consent given. To ensure the safety of > minors, the project is exclusively for adults. > > [...] > > This project prompts a crucial discussion on AI's potential, > emphasizing consent, algorithmic fairness, and the societal impacts of > AI-generated imagery. As Emanuel Maiberg and Samantha Cole put it, we > must confront that we are facing an “explosion of non-consensual > sexual imagery that's seeping out of every crack of internet > infrastructure […] a new type of pornography in which humans are only > a memory that's copied and remixed to instantly generate whatever > sexual image a user can describe with words”. [[Source]] > > The current NUCA prototype is a 3d-printed camera (19.5 × 6 × 1.5 cm, > 430g). The device is equipped with a 37 mm wide angle lens and an > ergonomic grip. The viewfinder displays the input image and can be > configured to show some of the input parameters e.g. pose detection in > real-time. By pressing the trigger, the camera will create an > estimated natural nude representation of the person being > photographed. The inputs of the generative image process are the > photo, the person's pose (estimated skeleton) and the landmarks of the > person's face. The input photo is being analyzed by a custom > classifier on 45 identifiers on gender, age, ethnicity, expression, > hair, glasses, body shape etc. These ratings are then being used to > generate a base image by formulating a prompt for a text-to-image AI > (Stable Diffusion). The base image is a generic estimation of a nude > person fulfilling this prompt. In the last step the image is then > being individualized by taking the person's face and pose into account > in the final development of the nude portrait. > > > [Mathias Vef] <https://mathiasvef.com/> > > [Benedikt Groß] <https://benedikt-gross.de/> > > [Source] > <file:%20https://www.404media.co/inside-the-ai-porn-marketplace-where-everything-and-everyone-is-for-sale/> > > --8<---------------cut here---------------end--------------->8--- > > Saluti, 380° > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa -- You can reach me on Signal: @quinta.01 (no Whatsapp)

April 22, 2024

nuca rocks (?): Natural Nudity. AI Powered to be You. Just You.

by 380°

Buongiorno, https://nuca.rocks/ --8<---------------cut here---------------start------------->8--- Introducing a new kind of camera. Natural Nudity. AI Powered to be You. Just You. NUCA is a speculative design and art project by [Mathias Vef] and [Benedikt Groß]. The project aims to provoke and question the current trajectory of generative AI in reproducing body images. [...] NUCA is a speculative consumer product and not meant to be used uncontrolled in “the wild”. The generated images are not used in any way, except with explicit consent given. To ensure the safety of minors, the project is exclusively for adults. [...] This project prompts a crucial discussion on AI's potential, emphasizing consent, algorithmic fairness, and the societal impacts of AI-generated imagery. As Emanuel Maiberg and Samantha Cole put it, we must confront that we are facing an “explosion of non-consensual sexual imagery that's seeping out of every crack of internet infrastructure […] a new type of pornography in which humans are only a memory that's copied and remixed to instantly generate whatever sexual image a user can describe with words”. [[Source]] The current NUCA prototype is a 3d-printed camera (19.5 × 6 × 1.5 cm, 430g). The device is equipped with a 37 mm wide angle lens and an ergonomic grip. The viewfinder displays the input image and can be configured to show some of the input parameters e.g. pose detection in real-time. By pressing the trigger, the camera will create an estimated natural nude representation of the person being photographed. The inputs of the generative image process are the photo, the person's pose (estimated skeleton) and the landmarks of the person's face. The input photo is being analyzed by a custom classifier on 45 identifiers on gender, age, ethnicity, expression, hair, glasses, body shape etc. These ratings are then being used to generate a base image by formulating a prompt for a text-to-image AI (Stable Diffusion). The base image is a generic estimation of a nude person fulfilling this prompt. In the last step the image is then being individualized by taking the person's face and pose into account in the final development of the nude portrait. [Mathias Vef] <https://mathiasvef.com/> [Benedikt Groß] <https://benedikt-gross.de/> [Source] <file:%20https://www.404media.co/inside-the-ai-porn-marketplace-where-everything-and-everyone-is-for-sale/> --8<---------------cut here---------------end--------------->8--- Saluti, 380° -- 380° (Giovanni Biscuolo public alter ego) «Noi, incompetenti come siamo, non abbiamo alcun titolo per suggerire alcunché» Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about <https://stallmansupport.org>.

April 22, 2024

MEMENTO | 113° Nexa Lunch Seminar | 24 aprile 2024, ore 13.00

by Nexa - Media

Gentilissime, gentilissimi, Vi ricordiamo che mercoledì 24 aprile, dalle ore 13.00 alle ore 14.00, si terrà il 113° Nexa Lunch Seminar con un incontro dal titolo: " Quale futuro per la libertà di espressione online nell'era delle piattaforme?". Ospiti dell'incontro: Maurizio Borghi (co-direttore del Centro Nexa, Università degli Studi di Torino) e Giacomo Conti (project manager del Centro Nexa, Università degli Studi di Torino). L'incontro si terrà IN PRESENZA e ONLINE. SEDE FISICA dell'incontro: Campus Luigi Einaudi, Lungo Dora Siena, 100 Edificio D2, II piano, Meeting Room Dipartimento di Giurisprudenza (MAPS<https://www.google.com/maps/place/Campus+Luigi+Einaudi/@45.0734963,7.699408…>) STANZA VIRTUALE dell'incontro: https://didattica.polito.it/VClass/NexaEvent Per maggiori dettagli è possibile consultare la pagina web dell'evento: https://nexa.polito.it/lunch-113 Cordiali saluti, -- Valeria Bergantino Communication Officer Nexa Center for Internet & Society Politecnico di Torino - DAUIN Via Pier Carlo Boggio, 65/A - 10138 Torino web: https://nexa.polito.it/ mail: valeria.bergantino(a)polito.it<mailto:valeria.bergantino@polito.it> tel: 3473443585

April 22, 2024

How Big Tech and Silicon Valley are Transforming the Military-Industrial Complex

by Daniela Tafani

America’s military-industrial complex has been rapidly expanding from the Capital Beltway to Silicon Valley. Although much of the Pentagon’s budget is spent on conventional weapons systems, the Defense Department has increasingly sought to adopt AI-enabled systems. Big tech companies, venture capital, and private equity firms benefit from multi-billion dollar Defense contracts, and smaller defense tech startups that “move fast and break things” also receive increased Defense funding. This report illustrates how a growing portion of the Defense Department’s spending is going to large, well-known tech firms, including some of the most highly valued corporations in the world. Given the often-classified nature of large defense and intelligence contracts, a lack of transparency makes it difficult to discern the true amount of U.S. spending diverted to Big Tech. Yet, research reveals that the amount is substantial, and growing. According to the nonprofit research organization Tech Inquiry, three of the world’s biggest tech corporations were awarded approximately $28 billion from 2018 to 2022, including Microsoft ($13.5 billion), Amazon ($10.2 billion), and Alphabet, which is Google’s parent company ($4.3 billion). This paper found that the top five contracts to major tech firms between 2019 and 2022 had contract ceilings totaling at least $53 billion combined. >From 2021 through 2023, venture capital firms reportedly pumped nearly $100 billion into defense tech startup companies — an amount 40 percent higher than the previous seven years combined. This report examines how Silicon Valley startups, big tech, and venture capital who benefit from classified Defense contracts will create costly, high-tech defense products that are ineffective, unpredictable, and unsafe – all on the American taxpayer’s dime. Read full paper: https://watson.brown.edu/costsofwar/files/cow/imce/papers/2023/2024/Silicon… Executive summary: https://watson.brown.edu/costsofwar/files/cow/imce/papers/2023/2024/Executi… https://watson.brown.edu/costsofwar/papers/2024/SiliconValley

April 21, 2024

Statement of the Global Encryption Coalition’s Steering Committee on the Belgian Presidency’s compromise proposal on EU CSAM

by Giacomo Tesio

<https://www.globalencryption.org/2024/04/statement-of-the-global-encryption…> Statement of the Global Encryption Coalition’s Steering Committee on the Belgian Presidency’s compromise proposal on EU CSAM The Global Encryption Coalition’s Steering Committee (GEC-SC)1 is alarmed by the latest proposal for a compromise presented by the Belgian Presidency of the Council of the European Union to advance the negotiations on the ‘Regulation laying down rules to prevent and combat child sexual abuse’ (EU CSAM). We are particularly concerned about: 1. The restrictive language used in the new proposal implies that service providers offering encrypted services could still be compelled to undermine or circumvent end-to-end encryption using methods like client-side scanning (CSS). 2. The new wording introduced in Recital 26 narrows the definition and understanding of end-to-end encryption “as data in transit protected by means of encryption”, which subjects stored data to little protection and subsequent CSS. The GEC-SC takes note of the Presidency’s efforts to unblock the negotiations by introducing new provisions aimed at protecting cyber security and encrypted data. However, the latest text maintains end-to-end encrypted services within the scope of detection orders and introduces restrictive interpretations of general concepts that are troublesome. We also take note of news released on 16 April indicating that under the Presidency’s new proposal, messaging services encrypted end-to-end would be deemed “high risk” and thus subject to detection orders that would require providers to scan all messages on their encrypted service. The latest proposal also modifies the language previously agreed under the Spanish presidency2 in Article 1(5) setting out the scope of the Regulation. Article 1(5) now states that “This Regulation shall not create any obligation that would require a provider of hosting services or a provider of interpersonal communications services to decrypt or create access to end-to-end encrypted data, or that would prevent the provision of end-to-end encrypted services.” The Belgian Presidency attempts to address the concerns regarding the necessity of protecting encryption by explicitly stating that the Regulation does not oblige providers to break encryption or create backdoors. However, the restrictive language it uses implies that providers could still be compelled by the regulation to undermine or circumvent end-to-end encrypted mechanisms using alternative methods, such as deploying client-side scanning (CSS). Client-side scanning is fundamentally inconsistent with the promise and purpose of end-to-end encryption, which is that only the user and the intended recipients can access the contents of a communication encrypted end-to-end. This concern is heightened by the proposed new wording inserted in Recital 26 that narrowly defines end-to-end encryption technology, “as data in transit protected by the means of encryption”. This appears to be an attempt to remove stored data from the scope of E2EE services to leave it unprotected from the prohibition against breaking encryption so it can be subjected to client-side scanning. However, as acknowledged by the European Data Protection Supervisor and the European Data Protection Board in their Joint Opinion 4/2022, CSS inherently undermines cybersecurity and mitigation measures for which Recital 26 calls cannot effectively address the risk posed by access to data for purposes such as scanning. The GEC-SC reiterates its long-standing position on CSS and recalls the latest landmark case of the European Court of Human Rights on Podchasov vs Russia. The ECtHR categorically confirmed that solutions that weaken encryption or create backdoors to facilitate access by law enforcement authorities to encrypted communication data violate the right to private life under Article 8 European Convention on Human Rights (ECHR) of all users. The Court took a strong stance in favour of encryption by recognizing not only measures that break encryption, but also any measures that weaken the effectiveness and intended purpose of encryption. The Court took into consideration a number of sources from international bodies such as the Office of the United Nations High Commissioner for Human Rights and the Council of Europe inter alia, that state that techniques that weaken or circumvent security measures or exploit their existing weaknesses should be strictly prohibited just as much as mandated encryption backdoors. We call on the Member States to reject the Belgian Presidency’s proposal and to hew to the language adopted by the European Parliament which would exclude from the scope of this regulation any data to which end-to-end encryption is, has been or will be applied.

April 20, 2024

Fwd: [Creis_Terminal] Fwd: [gdr-cis] offre d'emploi au CIS-CNRS : CDD de recherche en droit sur les licences pour des communs de données ouvertes

by Mariella Berra

-------- Messaggio Inoltrato -------- Oggetto: [Creis_Terminal] Fwd: [gdr-cis] offre d'emploi au CIS-CNRS : CDD de recherche en droit sur les licences pour des communs de données ouvertes Data: Thu, 18 Apr 2024 11:19:25 +0200 Mittente: Melanie Dulong de Rosnay <melanie.ddr(a)gmail.com> A: creis <Creis_terminal(a)lecreis.org> Bonjour, Nous recrutons au CIS un CDD de recherche en droit sur les licences pour des communs de données ouvertes. L'offre est publiée ici : https://emploi.cnrs.fr/Offres/CDD/UPR2000-MELDUL0-004/Default.aspx?lang=FR Le recrutement a lieu dans le cadre de la convention de recherche Sudaco (Sustainable Data Commons) entre le Centre Internet et Société du CNRS et l’Open Knowledge Foundation, dont l’objectif est de définir des modèles de licences pour des communs de données ouvertes durables, inclusives et génératives. Merci de diffuser l'offre dans vos réseaux. Bien cordialement, -- Mélanie Dulong de Rosnay Directrice de recherche au CNRS https://cis.cnrs.fr/melanie-dulong/ Directrice, Centre Internet et Société (CIS), CNRS UPR 2000 et GDR 2091 59-61 rue Pouchet, 75849 Paris cedex 17 http://www.cis.cnrs.fr/

April 18, 2024

Re: [nexa] Make your own backdoor: CFLAGS code injection, Makefile injection, config(was: [CDT:L-1] (supply chain attack) Anatomia di una "backdoor injection" (parte 2))

by Marco A. Calamari

On mer, 2024-04-17 at 23:58 +0200, Giacomo Tesio wrote: > Ciao 380, > > grazie per aver speso il tempo di scrivere questa ottima disanima: sei un > ottimo divulgatore! > > Aggiungo solo qualche considerazione: > > Il 13 Aprile 2024 17:45:54 CEST, "380°" ha scritto: > > Perché build-to-host.m4 è uno dei diversi file autogenerati da autotools > > ... > Conclusione comunque parziale: più in generale se un qualunque software > (kernel, libreria, > script di build...) non può essere compreso interamente (in un tempo > ragionevole) > qualunque sistema cibernetico che ne dipenda è vulnerabile e probabilmente già > compromesso. > Il problema è la complessità. > Aggiungere complessità non lo risolverà, potrà solo nasconderlo. Ecco, questo è il punto. Ottima sintesi finale. Discutiamo di attacchi, mentre il problema vero è la complessità del software che regge il mondo, e la contingenza attuale è che tutto questo software è certamente già compromesso, come le mura già minate ma apparentemente intatte di una città sotto assedio. Sembrano solide, ma il nemico le ha già distrutte, ed aspetta solo il momento giusto. JM2C. Marco

April 18, 2024