- nexa - server-nexa.polito.it

Small governments big failure
by Giuseppe Attardi May 26, 2020

May 26, 2020

https://www.project-syndicate.org/commentary/small-governments-big-failure-…

2 1

Thai Database Leaks 8.3 Billion Internet Records
by Alberto Cammozzo May 26, 2020

May 26, 2020

<https://rainbowtabl.es/2020/05/25/thai-database-leaks-internet-records/?=ma…> I recently discovered an exposed ElasticSearch database when browsing BinaryEdge and Shodan. This database appears to be controlled by a subsidiary of a major Thailand-based mobile network operator named Advanced Info Service (AIS). According to Wikipedia, AIS is "Thailand's largest GSM mobile phone operator with 39.87 million customers" as of 2016. The database was likely controlled by AIS subsidiary Advanced Wireless Network (AWN). It contained a combination of DNS query logs and NetFlow logs for what appears to be AWN customers. Using this data it is quite simple to paint a picture of what a person does on the Internet. I made multiple attempts to contact AIS to get the database secured without success. At that point I contacted Zack Whittaker – a journalist from TechCrunch – for assistance. We were still unable to make contact with AIS. I then contacted the Thailand National CERT team (ThaiCERT). ThaiCERT who was able to make contact with AIS, and we were successful in getting the database secured. [...]

1 0

Project Gutenberg oscurato (via DNS) in Italia
by Giovanni Biscuolo May 25, 2020

May 25, 2020

Buongiorno, come parte del procedimento penale n. 52127/20 RGNR - n. 35139/2020 RG GIP acceso presso Procura della Repubblica presso Tribunale di Roma è stata emessa una notifica di sequestro preventivo del Nucleo Speciale Tutela Privacy e Frodi Tecnologiche della GdF che include tra altri anche l'oscuramento - tramite oscuramento DNS - di http://www.gutenberg.org/ Questo l'annuncio del progetto: https://twitter.com/gutenberg_org/status/1264512881309085702 Il decreto di sequestro preventivo è qui: https://web.archive.org/web/20200525125134/https://lumendatabase.org/file_u… gutemberg.org è elencato per ben **due** volte: 1. al punto A.25) («in esecuzione di un medesimo disegno criminoso...») 2. al punto 25 del paragrafo «A sostegno di tale ricostruzione, gli operanti hanno individuato i seguenti siti [...] quindi gli operanti hanno provveduto ad estrapolare la relativa home page di accesso e ad individuarne gli elementi identificativi, ovvero: [segue scheda simil whois records per ogni sito, tra cui gnutemberg.org, n.d.r.]» Il documento prosegue poi: --8<---------------cut here---------------start------------->8--- Gli operanti hanno, dunque, verificato quanto effettivamente contenuto nei siti internet sopra indicati, raccogliendo materiale di cui al documento allegato 29. [...] Ciò premesso, le indagini finora condotte sono altamente significative per la sussistenza del fumiu boni iuris del reato ipotizzato, risultando accertate le illecite condotte di divulgazuione del contenuto di pubblicazioni protette dal diritto d'autore attraverso le reti telematiche sopra indicate. [...] il fine di lucro emergendo dagli introiti delle inserzioni pubblicitarie a pagamento. [...] consentire il legittimo sequestro preventivo mediante "oscuramento" di un intero sito telematico o di una pagina web [...] ORDINA il sequestro preventivo dei seguenti siti internet e/o risorse web: [OMISSIS] 14) quotidianionline.blogspot.com [OMISSIS] nonché dei "canali" sotto indicati tramite la piattaforma "Telegram" [OMISSIS] mediante oscuramento con notifica a tutti gli Internet Service Provider italiani al fine di inibirne il raggiungimento da parte degli utenti residenti sul territorio dello Stato Italiano. --8<---------------cut here---------------end--------------->8--- Manca l'allegato 29 nel quale dovrebbe essere raccolto il materiale che prova che anche www.gnutemberg.org stesse distribuendo materiale protetto dal diritto d'autore. Saluti, Giovanni. -- Giovanni Biscuolo

1 1

Copiare i dati e formattare il disco costituisce appropiazione indebita
by Diego Giorio May 25, 2020

May 25, 2020

Mi sembra che non sia ancora passato in lista: https://www.lexology.com/library/detail.aspx?g=58d623c7-984c-4f11-892b-9f9d… Buona settimana D.

4 5

Mark Thompson, grande capo del New York Times: «Fra dieci anni l’addio al giornale su carta, ma poi viene il meglio» – L’intervista
by don Luca Peyron May 25, 2020

May 25, 2020

Un pezzo interessante tra sponde dell'Oceano. Buona lettura dl https://www.open.online/2020/05/24/mark-thompson-new-york-times/?fbclid=IwA… _________________________ www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

2 1

Reminder | 78° Nexa Lunch Seminar | 27 Maggio 2020
by Nexa Media May 25, 2020

May 25, 2020

Gentilissimi, vi ricordiamo che mercoledì 27 maggio, dalle ore 13.00 alle ore 14.00, si svolgerà il 78° Nexa Lunch Seminar, con un incontro dal titolo: *Deep learning e grafi semantici per la comunità scientifica del Politecnico di Torino*. Ospite: /Giovanni Garifo//(Centro Nexa)./ L'incontro si svolgerà in *modalità telematica*, utilizzando il software open source di conference call *Jitsi Meet*. Per chi vorrà partecipare live al seminario sarà quindi possibile accedere alla conference call attraverso il seguente link: https://meet.nexacenter.org/LunchSeminar Per chi non potrà partecipare alla conference call sarà possibile, come di consueto, seguire il seminario live via web sul canale YouTube del Centro Nexa all'indirizzo: https://www.youtube.com/watch?v=nmKAIyfdAho Maggiori informazioni sull'incontro sono disponibili alla pagina: https://nexa.polito.it/lunch-78 Cordiali saluti,   -- Anita Botta Communication Manager Nexa Center for Internet & Society Politecnico di Torino – DAUIN Corso Duca degli Abruzzi, 24 - 10129 Torino _web:_ https://nexa.polito.it/ _mail:_anita.botta@polito.it <mailto:anita.botta@polito.it> tel: 011 090 7219

1 0

Russia's request for Delta Chat user data ... declined.
by Giacomo Tesio May 25, 2020

May 25, 2020

E' decisamente ora di provare Delta.Chat! Giacomo https://delta.chat/en/2020-05-01-roskamnadzor On April 27th we received a letter from Roskomnadzor, the russian supervisor of communications and information technology. They requested us to provide access to Delta Chat user data and register with their state-run provider registry. We declined for the simple reason that Delta Chat developers have no access to user data whatsoever. Delta Chat is a decentralized messenger and doesn’t have their own servers. You choose the e-mail provider which you trust yourself and we don’t know about your choices. Besides, even e-mail providers won’t see Delta Chat message contents because messages are end-to-end encrypted via Autocrypt. Big cheers to the e-mail ecosystem which has a standardized separation of apps (MUAs) from message transport (MTAs), and a planetary-scale and diversely operated system at that … even if a little messy and slow-moving ;)

3 2

Alcuni GAO reports che potrebbero essere di Vostro interesse
by Diego Latella May 25, 2020

May 25, 2020

Forensic Technology: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> Algorithms Used in Federal Law Enforcement <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-479SP, May 12 Science and Technology Spotlight: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> The Science of Social Distancing During Pandemics <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-545SP, May 13 Critical Infrastructure Protection: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> Actions Needed to Enhance DHS Oversight of Cybersecurity at High-Risk Chemical Facilities <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-453, May 14 Science & Tech Spotlight: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> COVID-19 Testing <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-584SP, May 20 Infection Control Deficiencies Were Widespread and Persistent in Nursing Homes Prior to COVID-19 Pandemic <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI6ImRpZWdvLmxhdGVsbGFAY25y…> GAO-20-576R, May 20 Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat

1 0

NSCAI privacy and civil liberties recommendations concerning digital contract tracing during the COVID-19
by Diego.Latella May 25, 2020

May 25, 2020

Source: EPIC Alert 27.08 (www.epic.org [1]) COVID-19 CONTACT TRACING The National Security Commission on Artificial Intelligence [2] has released [3] a set of privacy and civil liberties recommendations concerning digital contract tracing during the COVID-19 pandemic. The Commission urged that contact tracing tools must include data minimization, transparency, explicit user consent, and input from privacy and security professionals. The Commission also warned that contract tracing systems must address "challenges with inclusiveness and potential discrimination." The Commission advised Congress to establish technological standards and to require the Federal Trade Commission to regulate the technology. Since January, the Commission has released hundreds of pages [4] of documents as part of the open government lawsuit EPIC v. AI Commission [5]. EPIC is also litigating [6] to enforce the Commission's obligation to hold open meetings. Diego -- Dott. Diego Latella - Senior Researcher CNR-ISTI, Via Moruzzi 1, 56124 Pisa, Italy (http:www.isti.cnr.it [7]) FM&&T Lab. (http://fmt.isti.cnr.it) http://www.isti.cnr.it/People/D.Latella - ph: +390506212982, mob: +39 348 8283101, fax: +390506212040 =================== The quest for a war-free world has a basic purpose: survival. But if in the process we learn how to achieve it by love rather than by fear, by kindness rather than compulsion; if in the process we learn how to combine the essential with the enjoyable, the expedient with the benevolent, the practical with the beautiful, this will be an extra incentive to embark on this great task. Above all, remember your humanity. -- Sir Joseph Rotblat I don't quite know whether it is especially computer science or its subdiscipline Artificial Intelligence that has such an enormous affection for euphemism. We speak so spectacularly and so readily of computer systems that understand, that see, decide, make judgments, and so on, without ourselves recognizing our own superficiality and immeasurable naivete with respect to these concepts. And, in the process of sospeaking, we anesthetise our ability to evaluate the quality of our work and, what is more important, to identify and become conscious of its end use. […] One can't escape this state without asking, again and again: "What do I actually do? What is the final application and use of the products of my work?" and ultimately, "am I content or ashamed to have contributed to this use?" -- Prof. Joseph Weizenbaum ["Not without us", ACM SIGCAS 16(2-3) 2--7 - Aug. 1986] Links: ------ [1] http://www.epic.org [2] https://www.nscai.gov/ [3] https://epic.org/foia/epic-v-ai-commission/NSCAI-contact-tracing-white-pape… [4] https://epic.org/foia/epic-v-ai-commission/#foiaproduction [5] https://epic.org/foia/epic-v-ai-commission/ [6] https://epic.org/foia/epic-v-ai-commission/EPIC-v-AI-Commission-19-2906-Mot… [7] http://www.isti.cnr.it

1 0

How did the Covidsafe app go from being vital to almost irrelevant?
by Giacomo Tesio May 24, 2020

May 24, 2020

Chi l'avrebbe mai detto? :-D The PM told Australians in April the contact tracing app was key to getting back to normal but just one person has been identified using its data [...] # Plagued by technical issues Where the app has faltered has been in transparency. Developers have reported difficulty communicating with the Digital Transformation Agency about problems. Early on developers noted the iPhone version would not be able to exchange Bluetooth handshakes with other devices unless it was running on the screen – incredibly impractical for users. The government initially denied this, refused to answer questions about it, and only once, before the Covid-19 senate committee, did the agencys chief executive, Randall Brugeaud, admit the Bluetooth function suffered when the app wasn’t on screen. [...] The Apple-Google API is being evaluated by the government but according to a Melbourne cryptographer, Vanessa Teague, it would require a major overhaul to the app. [...] Teague said in order to get the Bluetooth improvements the government could, in effect, change the engine of the app to move to the Apple-Google API, but it would be a lot of work. “It wouldn’t look that much different to the users – it would still keep the cute, you know, Anzac Day-themed interface, but they would have to completely rearrange the underlying cryptographic notification mechanism in order to use the API,” Teague said. “You can’t just improve the Bluetooth of this underlying centralised mechanism they’ve got.” That update, and the 21-day timeframe for recording contacts would mean there would be a period where the app would have to run both the old and new version. “I don’t think it’s an unsolvable mess, but basically you have to have both versions of the app running,” Teague said. “They don’t interoperate at all. Everyone running it would have to run both versions for a few weeks.” Continua su https://www.theguardian.com/world/2020/may/24/how-did-the-covidsafe-app-go-… _____ Si noti come, ora che lo spyware Bluetooth targato USA è pronto ad approdare sui vostri device, si inizi ad imputare il fallimento delle App di contact tracing esistenti all'insipienza tecnica dei governi, che d'altronde hanno completato la propria missione di testimonial della sorveglianza di massa. Giacomo

1 0