- nexa - server-nexa.polito.it

"European cooperative Fairbnb wants to make the short-term rental market more just"
by J.C. DE MARTIN May 3, 2019

May 3, 2019

04.29.19 *European cooperative Fairbnb wants to make the short-term rental market more just** * /The new platform is raising funds to help create a community-oriented alternative to big home-sharing platforms. /https://www.fastcompany.com/90339528/european-cooperative-fairbnb-wants-to-change-the-short-term-rental-market

1 0

Don’t let industry write the rules for AI
by Giacomo Tesio May 2, 2019

May 2, 2019

Technology companies are running a campaign to bend research and regulation for their benefit; society must fight back, says Yochai Benkler. https://www.nature.com/articles/d41586-019-01413-1 Industry has mobilized to shape the science, morality and laws of artificial intelligence. On 10 May, letters of intent are due to the US National Science Foundation (NSF) for a new funding programme for projects on Fairness in Artificial Intelligence, in collaboration with Amazon. In April, after the European Commission released the Ethics Guidelines for Trustworthy AI, an academic member of the expert group that produced them described their creation as industry-dominated “ethics washing”. In March, Google formed an AI ethics board, which was dissolved a week later amid controversy. In January, Facebook invested US$7.5 million in a centre on ethics and AI at the Technical University of Munich, Germany. [...] Inside an algorithmic black box, societal biases are rendered invisible and unaccountable. When designed for profit-making alone, algorithms necessarily diverge from the public interest — information asymmetries, bargaining power and externalities pervade these markets. For example, Facebook and YouTube profit from people staying on their sites and by offering advertisers technology to deliver precisely targeted messages. That could turn out to be illegal or dangerous. The US Department of Housing and Urban Development has charged Facebook with enabling discrimination in housing adverts (correlates of race and religion could be used to affect who sees a listing). YouTube’s recommendation algorithm has been implicated in stoking anti-vaccine conspiracies. I see these sorts of service as the emissions of high-tech industry: they bring profits, but the costs are borne by society. (The companies have stated that they work to ensure their products are socially responsible.) [...] When the NSF lends Amazon the legitimacy of its process for a $7.6-million programme (0.03% of Amazon’s 2018 research and development spending), it undermines the role of public research as a counterweight to industry-funded research. A university abdicates its central role when it accepts funding from a firm to study the moral, political and legal implications of practices that are core to the business model of that firm. So too do governments that delegate policy frameworks to industry-dominated panels. [...] Governments should use that leverage to demand that companies share data in properly-protected databases with access granted to appropriately insulated, publicly-funded researchers. Industry participation in policy panels should be strictly limited. Industry has the data and expertise necessary to design fairness into AI systems. It cannot be excluded from the processes by which we investigate which worries are real and which safeguards work, but it must not be allowed to direct them. Organizations working to ensure that AI is fair and beneficial must be publicly funded, subject to peer review and transparent to civil society. And society must demand increased public investment in independent research rather than hoping that industry funding will fill the gap without corrupting the process. _____ Non credo che si possa limitare l'influenza dell'industria senza escluderla completamente dal processo decisionale. Se partecipa, non può che imporre la propria forza economica e culturale per assicurarsi la massimizzazione dei profitti. Di conseguenza, le Università e gli enti di ricerca che ricevono fondi da privati andrebbero esclusi dal processo. Un'idea interessante potrebbe ispirarsi alla legge 266 del 1991: stabilire per legge che una certa quota dei proventi delle società che si occupano di Informatica vada devoluta a un ente completamente indipendente dalle aziende stesse che li usa per finanziare la ricerca delle Università e degli enti di ricerca non compromessi. Lo stesso, in realtà, si potrebbe fare con la medicina e in generale laddove la ricerca abbia rilevanza economica. Giacomo

1 0

The Do-Not-Track Act of 2019
by Giacomo Tesio May 2, 2019

May 2, 2019

Scusate... aggiungo l'oggetto... :-( On 02/05/2019, Giacomo Tesio <giacomo(a)tesio.it> wrote: > Bell'esempio di proposta di legge dalle buone intenzioni ma > controproducente. > > Potrebbe spingere gli utenti a fidarsi maggiormente del Web, ma senza > appropriato supporto tecnico, il tracciamento rimane possibile e non > osservabile: non c'è modo di scoprire e punire i trasgressori (a meno > che non facciano diversi passi falsi facilmente evitabili). > > L'header "Do Not Track" non può funzionare perché affida la protezione > della privacy al lato sbagliato della connessione TCP: il server non > ha nessun interesse a scartare le informazioni che il browser gli > manda comunque visto che può salvarle dove nessuno le troverà mai. > > Per impedire il tracciamento bisogna intervenire sui browser. > A questi la legge dovrebbe imporre specifiche minime a garanzia degli > utenti. > La sicurezza non può essere Opt-In. > > > > https://spreadprivacy.com/do-not-track-act-2019/ > > When you turn on the setting in your browser that says “Do Not Track”, > you probably expect to no longer be tracked on most websites you > visit. Right? Well, you would be wrong. But don’t worry, you’re not > alone. > > Our recent study on the Do Not Track (DNT) browser setting indicated > that about a quarter of people have turned on this setting, and most > were unaware big sites do not respect it. That means approximately 75 > million Americans, 115 million citizens of the European Union, and > many more people worldwide are, right now, broadcasting a DNT signal. > [...] > > While DuckDuckGo actively supports the passing of strong, > comprehensive privacy laws, we also recognize that it will take time > for them to take effect worldwide. In the meantime, governments can > provide immediate relief by enacting separate, simpler Do Not Track > legislation. [...] > > That’s why we're announcing draft legislation that can serve as a > starting point for legislators in America and beyond. It’s entitled > the "Do-Not-Track Act of 2019" and, if it were to be enacted, would > require sites to respect the Do Not Track browser setting in this > manner: > > - No third-party tracking by default. [...] > - No first-party tracking outside what the user expects. [...] > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >

1 0

(no subject)
by Giacomo Tesio May 2, 2019

May 2, 2019

Bell'esempio di proposta di legge dalle buone intenzioni ma controproducente. Potrebbe spingere gli utenti a fidarsi maggiormente del Web, ma senza appropriato supporto tecnico, il tracciamento rimane possibile e non osservabile: non c'è modo di scoprire e punire i trasgressori (a meno che non facciano diversi passi falsi facilmente evitabili). L'header "Do Not Track" non può funzionare perché affida la protezione della privacy al lato sbagliato della connessione TCP: il server non ha nessun interesse a scartare le informazioni che il browser gli manda comunque visto che può salvarle dove nessuno le troverà mai. Per impedire il tracciamento bisogna intervenire sui browser. A questi la legge dovrebbe imporre specifiche minime a garanzia degli utenti. La sicurezza non può essere Opt-In. https://spreadprivacy.com/do-not-track-act-2019/ When you turn on the setting in your browser that says “Do Not Track”, you probably expect to no longer be tracked on most websites you visit. Right? Well, you would be wrong. But don’t worry, you’re not alone. Our recent study on the Do Not Track (DNT) browser setting indicated that about a quarter of people have turned on this setting, and most were unaware big sites do not respect it. That means approximately 75 million Americans, 115 million citizens of the European Union, and many more people worldwide are, right now, broadcasting a DNT signal. [...] While DuckDuckGo actively supports the passing of strong, comprehensive privacy laws, we also recognize that it will take time for them to take effect worldwide. In the meantime, governments can provide immediate relief by enacting separate, simpler Do Not Track legislation. [...] That’s why we're announcing draft legislation that can serve as a starting point for legislators in America and beyond. It’s entitled the "Do-Not-Track Act of 2019" and, if it were to be enacted, would require sites to respect the Do Not Track browser setting in this manner: - No third-party tracking by default. [...] - No first-party tracking outside what the user expects. [...]

1 0

UK To Introduce New Law For IoT Device Security
by J.C. DE MARTIN May 2, 2019

May 2, 2019

https://www.forbes.com/sites/charlestowersclark/2019/05/02/uk-to-introduce-… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Sabino Cassese: «La democrazia non è soltanto potere del popolo»
by don Luca Peyron May 2, 2019

May 2, 2019

I saggi vanno ascoltati... Buona lettura dl [...] Il secondo problema evoca la disponibilità di una grande quantità di dati. Ma non va ingigantito. Uno dei modi di occultare un dato è quello di fornirne troppi. C’è, invece, la questione dell’offerta di servizi da parte delle grandi imprese che governano il mondo digitale, offerta che consente loro di captare e capitalizzare informazioni sugli utenti. Qui c’è un difetto di disciplina, che deriva dalla estensione globale di quell’offerta. [...] https://www.sicilianpost.it/sabino-cassese-la-democrazia-non-e-soltanto-pot… _________________________ www.universitari.to.it via XX settembre 83, Torino tel. 011 5156239

1 0

Le elezioni ai tempi dei social media
by Niccolò Caranti May 2, 2019

May 2, 2019

Segnalo il policy workshop “Le elezioni ai tempi dei social media. Elezioni europee, disinformazione e micro-targeting: che fare?”, che si terrà il prossimo 14 maggio a Roma, dalle ore 14:00 alle ore 18:00, in Corso Vittorio Emanuele II, 349 (presso la Federazione Nazionale Stampa Italiana). In vista delle elezioni europee, ad un anno dalla Dichiarazione di Perugia <https://globalfreedomofexpression.columbia.edu/wp-content/uploads/2018/02/p…> - che chiedeva nuove regole e maggiore trasparenza nella propaganda politica sui social network in particolare durante le campagne elettorali, ci interroghiamo sui passi compiuti sino ad ora, e su cosa c’è ancora da fare per salvaguardare la trasparenza del discorso pubblico e l'integrità dei processi democratici nel rispetto dei diritti fondamentali. Questo il programma: SALUTI ISTITUZIONALI Mario Raffaelli, Presidente Centro per la Cooperazione Internazionale Rappresentante della Federazione Nazionale Stampa Italiana *PRIMA SESSIONE, La disinformazione all'opera* INTRODUCE E MODERA: Fazila Mat, OBC Transeuropa / Centro per la cooperazione internazionale Fabiana Zollo, Università Ca’ Foscari Venezia Walter Quattrociocchi, Università Ca’ Foscari Venezia Nicola Bruno, Dataninja Giorgio Comai, OBC Transeuropa / Centro per la cooperazione internazionale SECONDA SESSIONE, Ripensare le regole del gioco MODERA: Tommaso Scannicchio, CILD, Coalizione Italiana Libertà e Diritti Civili Fabio Chiusi, Valigia Blu / Nexa Center for Internet & Society Riccardo Acciai, Garante per la protezione dei dati personali Daniele De Bernardin, Openpolis Antonella Napolitano, Privacy International *Conclusioni.* *L'evento è organizzato nell'ambito del progetto ESVEI, Exploring systemic vulnerabilities for external influence in Italy <https://www.balcanicaucaso.org/Progetti/ESVEI>, promosso da Osservatorio Balcani Caucaso Transeuropa / Centro per la Cooperazione Internazionale.* L'incontro è libero, previa registrazione online tramite questo modulo <https://www.eventbrite.it/e/biglietti-le-elezioni-ai-tempi-dei-social-media…> . A presto, Niccolò Caranti OBC Transeuropa *Centro per la Cooperazione Internazionale* vicolo San Marco 1 <https://maps.google.com/?q=vicolo+San+Marco+1+38122+Trento+(TN)+-+Italia&en…> 38122 Trento (TN) - Italia <https://maps.google.com/?q=vicolo+San+Marco+1+38122+Trento+(TN)+-+Italia&en…> www.balcanicaucaso.org www.balcanicaucaso.org/eng Tel: +39 0461 1828617

1 0

A Conspiracy To Kill IE6
by Giacomo Tesio May 2, 2019

May 2, 2019

Divertente storiella di come 10 anni fa, una singola azienda ha "convinto" un utente del web su 5 a cambiare browser... senza _quasi_ farlo apposta. Ma va tutto bene eh... non vi preoccupate! ;-) http://blog.chriszacharias.com/a-conspiracy-to-kill-ie6 IE6 users represented around 18% of our user base at that point. We understood that we could not just drop support for it. However, sitting in that cafeteria, having only slept about a few hours each in the previous days, our compassion for these users had completely eroded away. [...] The plan was very simple. We would put a small banner above the video player that would only show up for IE6 users. It would read “We will be phasing out support for your browser soon. Please upgrade to one of these more modern browsers.” Next to the text would be links to the current versions of the major browsers, including Chrome, Firefox, IE8 and eventually, Opera. [...] The first person to come by our desks was the PR team lead. [...] Fortunately for us, the publications had already settled on a narrative that this was a major benefit to the Internet. [...] Satisfied that he could get back in front of the story, the PR team lead turned and warned us to never do anything like this without telling him first. He did not want to let great public relations opportunities like this slip by ever again. [...] Between YouTube, Google Docs, and several other Google properties posting IE6 banners, Google had given permission to every other site on the web to add their own. IE6 banners suddenly started appearing everywhere. Within one month, our YouTube IE6 user base was cut in half and over 10% of global IE6 traffic had dropped off while all other browsers increased in corresponding amounts. The results were better than our web development team had ever intended.

1 1

Paper: “The Antitrust Case Against Facebook” by Dina Srinivasan :: SSRN
by J.C. DE MARTIN May 2, 2019

May 2, 2019

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3247362 The Antitrust Case Against Facebook Berkeley Business Law Journal Vol. 16, Issue 1, Forthcoming 83 Pages Posted: 7 Feb 2019 Last revised: 9 Feb 2019 Dina Srinivasan Yale University - Law School Date Written: September 10, 2018 Abstract The Facebook, Inc. (“Facebook”) social network, this era’s new communications service, plays an important role in the lives of 2+ billion people across the world. Though the market was highly competitive in the beginning, it has since consolidated in Facebook’s favor. Today, using Facebook means to accept a product linked to broad-scale commercial surveillance — a paradox in a democracy. This Paper argues that Facebook’s ability to extract this qualitative exchange from consumers is merely this titan’s form of monopoly rents. The history of early competition, Facebook’s market entry, and Facebook’s subsequent rise tells the story of Facebook’s monopoly power. However, the history which elucidates this firm’s dominance also presents a story of anticompetitive conduct. Facebook’s pattern of false statements and misleading conduct induced consumers to trust and choose Facebook, to the detriment of market competitors and consumers' own welfare. Keywords: antitrust, competition law, two-sided platforms, two-sided markets, facebook, big tech, anticompetitive, consumer welfare, privacy, democracy, commercial surveillance, surveillance, monopoly power, collusion, sherman act, antitrust (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Hacking College Admissions
by Giacomo Tesio May 2, 2019

May 2, 2019

Questa è una perla. La vulnerabilità è stata identificata da un 17enne solo NAVIGANDO il sito web. E questi geni hanno provato a nascondere^W correggere l'errore con 15 righe di JavaScript da eseguire sul browser dell'attaccante! Sarebbe ridicolo e divertente... se solo non fosse così deprimente... Ma guardiamo il lato positivo: Per un ragazzino curioso di 17 anni penetrare in sistemi informativi istituzionali è come affondare il coltello nel burro. Non usa nessun tool avanzato. Solo un browser. E se ha imparato lui, possono imparare anche gli altri! ;-) https://d4stiny.github.io/Hacking-College-Admissions/ Getting into college is one of the more stressful time of a high school student’s life. Since the admissions process can be quite subjective, students have to consider a variety of factors to convince the admissions officers that “they’re the one”. Some families do as much as they can to improve their chances - even going as far as trying to cheat the system. For wealthier families, this might be donating a very large amount to the school or as we’ve heard in the news recently, bribing school officials. If you don’t know about me already, I’m a 17-year-old high school senior that has an extreme interest in the information security field and was part of the college admissions process this year. Being part of the college admissions process made me interested in investigating, “Can you hack yourself into a school?”. In this article, I’ll be looking into TargetX, a “Student Lifecycle Solution for Higher Education” that serves several schools. All of this research was because of my genuine interest in security, not because I wanted to get into a school through malicious means. [...] After finding this vulnerability, I immediately reached out to WPI’s security team the same day to let them know about the vulnerabilities I found. They were very receptive and within a day they applied their first “patch”. Whenever I tried accessing the backend panel, I would see my screen flash for a quick second and then a 404 Message popped up. The flash had me interested, upon reading the source code of the page, I found all the data still there! I was very confused and diff’d the source code with an older copy I had saved. [...] What they were doing was stopping the page from loading and then replacing the HTML with a 404 error. I could just use NoScript, but I decided to create a simple userscript to disable their tiny “fix”.

1 1