- nexa - server-nexa.polito.it

Alcuni GAO reports che potrebbero essere di Vostro interesse
by Diego Latella May 25, 2020

May 25, 2020

Forensic Technology: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> Algorithms Used in Federal Law Enforcement <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-479SP, May 12 Science and Technology Spotlight: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> The Science of Social Distancing During Pandemics <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-545SP, May 13 Critical Infrastructure Protection: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> Actions Needed to Enhance DHS Oversight of Cybersecurity at High-Risk Chemical Facilities <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-453, May 14 Science & Tech Spotlight: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> COVID-19 Testing <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-584SP, May 20 Infection Control Deficiencies Were Widespread and Persistent in Nursing Homes Prior to COVID-19 Pandemic <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-576R, May 20 Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

1 0

NSCAI privacy and civil liberties recommendations concerning digital contract tracing during the COVID-19
by Diego.Latella May 25, 2020

May 25, 2020

Source: EPIC Alert 27.08 (www.epic.org [1]) COVID-19 CONTACT TRACING The National Security Commission on Artificial Intelligence [2] has released [3] a set of privacy and civil liberties recommendations concerning digital contract tracing during the COVID-19 pandemic. The Commission urged that contact tracing tools must include data minimization, transparency, explicit user consent, and input from privacy and security professionals. The Commission also warned that contract tracing systems must address "challenges with inclusiveness and potential discrimination." The Commission advised Congress to establish technological standards and to require the Federal Trade Commission to regulate the technology. Since January, the Commission has released hundreds of pages [4] of documents as part of the open government lawsuit EPIC v. AI Commission [5]. EPIC is also litigating [6] to enforce the Commission's obligation to hold open meetings. Diego -- Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it [7]) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat I don't quite know whether it is especially computer science or its subdiscipline Artificial Intelligence that has such an enormous affection for euphemism. We speak so spectacularly and so readily of computer systems that understand, that see, decide, make judgments, and so on, without ourselves recognizing our own superficiality and immeasurable naivete with respect to these concepts. And, in the process of sospeaking, we anesthetise our ability to evaluate the quality of our work and, what is more important, to identify and become conscious of its end use. […] One can't escape this state without asking, again and again: "What do I actually do? What is the final application and use of the products of my work?" and ultimately, "am I content or ashamed to have contributed to this use?" -- Prof. Joseph Weizenbaum ["Not without us", ACM SIGCAS 16(2-3) 2--7 - Aug. 1986] Links: ------ [1] http://www.epic.org [2] https://www.nscai.gov/ [3] https://epic.org/foia/epic-v-ai-commission/NSCAI-contact-tracing-white-pape… [4] https://epic.org/foia/epic-v-ai-commission/#foiaproduction [5] https://epic.org/foia/epic-v-ai-commission/ [6] https://epic.org/foia/epic-v-ai-commission/EPIC-v-AI-Commission-19-2906-Mot… [7] http://www.isti.cnr.it

1 0

How did the Covidsafe app go from being vital to almost irrelevant?
by Giacomo Tesio May 24, 2020

May 24, 2020

Chi l'avrebbe mai detto? :-D The PM told Australians in April the contact tracing app was key to getting back to normal but just one person has been identified using its data [...] # Plagued by technical issues Where the app has faltered has been in transparency. Developers have reported difficulty communicating with the Digital Transformation Agency about problems. Early on developers noted the iPhone version would not be able to exchange Bluetooth handshakes with other devices unless it was running on the screen – incredibly impractical for users. The government initially denied this, refused to answer questions about it, and only once, before the Covid-19 senate committee, did the agencys chief executive, Randall Brugeaud, admit the Bluetooth function suffered when the app wasn’t on screen. [...] The Apple-Google API is being evaluated by the government but according to a Melbourne cryptographer, Vanessa Teague, it would require a major overhaul to the app. [...] Teague said in order to get the Bluetooth improvements the government could, in effect, change the engine of the app to move to the Apple-Google API, but it would be a lot of work. “It wouldn’t look that much different to the users – it would still keep the cute, you know, Anzac Day-themed interface, but they would have to completely rearrange the underlying cryptographic notification mechanism in order to use the API,” Teague said. “You can’t just improve the Bluetooth of this underlying centralised mechanism they’ve got.” That update, and the 21-day timeframe for recording contacts would mean there would be a period where the app would have to run both the old and new version. “I don’t think it’s an unsolvable mess, but basically you have to have both versions of the app running,” Teague said. “They don’t interoperate at all. Everyone running it would have to run both versions for a few weeks.” Continua su https://www.theguardian.com/world/2020/may/24/how-did-the-covidsafe-app-go-… _____ Si noti come, ora che lo spyware Bluetooth targato USA è pronto ad approdare sui vostri device, si inizi ad imputare il fallimento delle App di contact tracing esistenti all'insipienza tecnica dei governi, che d'altronde hanno completato la propria missione di testimonial della sorveglianza di massa. Giacomo

1 0

I dati dell’Ospedale “San Raffaele” di Milano rubati dagli hacker?
by Giovanni Biscuolo May 22, 2020

May 22, 2020

Buongiorno, a proposito di colabrodo di sicurezza che meriterebbe un capitolo tutto suo nella politica nazionale, quanto in oggetto lo chiede pubblicamente Umberto Rapetto, che confonde l'emoticon :P con :D ma mi pare sappia quello che dice: https://www.infosec.news/2020/05/21/news/sicurezza-digitale/i-dati-dellospe… --8<---------------cut here---------------start------------->8--- Il tweet [1] è accompagnato da una immagine eloquente, uno “screenshot” che testimonierebbe la fondatezza della provocazione sui social da parte del gruppo di pirati informatici italiani “LulzSec”. “Tanta roba” direbbero in Toscana. Il “cinguettio” non si presta ad interpretazioni e suona fin troppo chiaro. “Beh che dire.. @SanRaffaeleMI, avete comunicato al Garante il #databreach di due mesi fa? Visto che avete già chiuso tutte le vulnerabilità.. anche se troppo tardi”. Il messaggio è esplicito e, se risponde al vero, il nosocomio sarebbe stato oggetto di una grave violazione informatica (“data breach”, ovvero una breccia nella struttura perimetrale di protezione dei dati) che avrebbe avuto luogo nel mese di marzo. Gli hacker chiedono con tono sarcastico se i manager del San Raffaele hanno provveduto a fare la prevista comunicazione al Garante per la Protezione dei dati personali, che – secondo il Regolamento Europeo 679/2016 (o GDPR che dir si voglia)– deve essere effettuata entro le 72 ore dalla constatazione dell’incidente per non incorrere in pesanti sanzioni. Il testo si chiude con la linguaccia degli emoticons ante litteram (le faccine realizzate con i semplici caratteri ASCII) che si “scrive” con i due punti e la lettera D maiuscola… [...] Forse è venuto il momento di congratularsi reciprocamente di meno e di rimboccarsi le maniche. Come a poker, qualcuno ha detto “vedo” e tocca mostrare le carte… --8<---------------cut here---------------end--------------->8--- ... tranne che questa, purtroppo, NON É una partita a carte, nemmeno di quei giochi in cui si puntano soldi: i soldi sono (dovrebbero essere) l'ultimo dei problemi. Rapetto aggiunge particolari sul suo blog sul Fatto Quotidiano: https://www.ilfattoquotidiano.it/2020/05/21/san-raffaele-abbiamo-hackerato-… --8<---------------cut here---------------start------------->8--- [...] Alle domande si affianca anche una preoccupazione tutt’altro che marginale. Ma i file in questione sono stati soltanto copiati oppure è stata apportata qualche modifica così da inquinare irrimediabilmente gli archivi presi di mira? Nella desolante indifferenza globale, persino gli hacker si lamentano. Possibile che non freghi nulla a nessuno? Dove è finito il brioso parterre delle tante convention in materia di cybersecurity? Sono finite le tartine al salmone o i tramezzini prosciutto e formaggio? Nel frattempo i birbaccioni di LulzSec cominciano a pubblicare piccoli assaggi come qualche elenco di file in loro possesso. [...] --8<---------------cut here---------------end--------------->8--- Nell'immagine https://twitter.com/LulzSec_ITA/status/1263370997937451009 (di cui ho screenshot, per mia referenza) ci sono un paio di screenshot in cui la password di quasi tutti gli utenti è praticamente identica al nome utente... non può che essere uno scherzo di cattivo gusto, nel 2020. Saluti, Giovanni. [1] https://twitter.com/LulzSec_ITA/status/1263116071197958144 -- Giovanni Biscuolo

3 4

Man sentenced to death in Singapore via Zoom
by don Luca Peyron May 22, 2020

May 22, 2020

Il caso non ha molti risvolti tecnici - neppure forse dal punto di vista giuridico - certamente ne ha diversi dal punto di vista filosofico e - per quanto di mio interesse - teologico, al di là della questione centrale pena di morte sì/no. Tempi con molti spunti di riflessione, per chi lo desidera. Buona lettura dl https://www.bbc.com/news/technology-52739676 _________________________ www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

1 0

Survey: Nearly Half of Americans Refusing or Unlikely to Opt-In to COVID-19 Contact Tracing Apps
by Enrico Nardelli May 22, 2020

May 22, 2020

... nearly half (48%) say they’re either unlikely or will flat out refuse to opt-in to COVID-19 contact tracing apps. Additionally, another 23% said they’re on the fence about doing so. Meanwhile, just 15% said they are extremely likely to opt-in. This brings about questions of contact tracing effectiveness and accuracy if minimal adoption if seen. ... https://www.checkmarx.com/blog/survey-half-americans-refusing-contact-traci… -- EN ===================================================================== Prof. Enrico Nardelli Dipartimento di Matematica - Universita' di Roma "Tor Vergata" Via della Ricerca Scientifica snc - 00133 Roma tel: +39 06 7259.4204 fax: +39 06 7259.4699 mobile: +39 335 590.2331 e-mail: nardelli(a)mat.uniroma2.it home page: http://www.mat.uniroma2.it/~nardelli blog: http://www.ilfattoquotidiano.it/blog/enardelli/ http://link-and-think.blogspot.it/ ===================================================================== --

2 1

Dutch court rules grandmother must remove photos of grandchildren from social media under GDPR
by J.C. DE MARTIN May 22, 2020

May 22, 2020

*Dutch court rules grandmother must remove photos of grandchildren from social media under GDPR* /Published May 21, 2020 | Gannon Burgett / A Dutch court has ruled a grandmother must delete photographs of her grandchildren she shared on social media without consent from the children’s parents or pay a daily fine. The BBC reports the legal battle ended up in The Court of First Instance of Gelderland after the grandmother refused to remove the images from Facebook and Pinterest, despite requests from the children's’ mother to do so. According to the judge’s ruling, the images violate the EU’s General Data Protection Regulation (GDPR) and, more specifically, the Dutch GDPR Implementation Act (UAVG), which states that posting photos of minors under 16 years old requires their legal representative(s)’ consent. [...] continua qui: https://www.dpreview.com/news/9772343179/dutch-court-rules-grandmother-must…

1 0

Imperial College’s Covid-19 coding is unintelligible
by Giorgio Ventre May 22, 2020

May 22, 2020

Carissimi, un articolo che ho trovato molto interessante. E che tocca alcuni temi che ritengo di interesse per la lista: il Covid e la modellistica, la qualità del codice usata nella ricerca e, last but not least, anche il dilemma publish-or-perish. Un cordiale saluto a tutti. Giorgio https://thecritic.co.uk/a-series-of-tubes/ -- ======================================================================== Prof. Ing. Giorgio Ventre Direttore Dipartimento di Ingegneria Elettrica e Tecnologie dell'Informazione Università degli Studi di Napoli Federico II Via Claudio 21 80125, Napoli, Italy Tel: +39 081 7683908 Fax: +39 081 7683816 Mob: +39 3807679372 E-mail: giorgio(a)unina.it http://www.dieti.unina.it http://www.developeracademy.unina.it/en/ http://www.docenti.unina.it/giorgio.ventre ======================================================================== -- Questa e-mail è stata controllata per individuare virus con Avast antivirus. https://www.avast.com/antivirus

1 0

Dare la laurea a cani e a porci
by don Luca Peyron May 22, 2020

May 22, 2020

Segnalo per un sorriso.... e magari una riflessione ai molti di noi impegnati in università. Buona giornata Dl https://www.ilfoglio.it/bandiera-bianca/2020/05/20/news/dare-la-laurea-a-ca…

1 0

Coronavirus: Security flaws found in NHS contact-tracing app
by Enrico Nardelli May 21, 2020

May 21, 2020

(di un paio di giorni fa ma sempre interessante) ---- Wide-ranging security flaws have been flagged in the Covid-19 contact-tracing app being piloted in the Isle of Wight. The security researchers involved have warned the problems pose risks to users' privacy and could be abused to prevent contagion alerts being sent. GCHQ's National Cyber Security Centre (NCSC) told the BBC it was already aware of most of the issues raised and is in the process of addressing them. But the researchers suggest a more fundamental rethink is required. Specifically, they call for new legal protections to prevent officials using the data for purposes other than identifying those at risk of being infected, or holding on to it indefinitely. In addition, they suggest the NHS considers shifting from its current "centralised" model - where contact-matching happens on a computer server - to a "decentralised" version - where the matching instead happens on people's phones. ... https://www.bbc.com/news/technology-52725810 -- EN ===================================================================== Prof. Enrico Nardelli Dipartimento di Matematica - Universita' di Roma "Tor Vergata" Via della Ricerca Scientifica snc - 00133 Roma tel: +39 06 7259.4204 fax: +39 06 7259.4699 mobile: +39 335 590.2331 e-mail: nardelli(a)mat.uniroma2.it home page: http://www.mat.uniroma2.it/~nardelli blog: http://www.ilfattoquotidiano.it/blog/enardelli/ http://link-and-think.blogspot.it/ ===================================================================== --

1 0