- nexa - server-nexa.polito.it

EDPS investigates contractual agreements concerning software used by EU institutions
by Giacomo Tesio April 9, 2019

April 9, 2019

https://edps.europa.eu/press-publications/press-news/press-releases/2019/ed… Wojciech Wiewiórowski, Assistant EDPS, said: “New data protection rules for the EU institutions and bodies came into force on 11 December 2018. Regulation 2018/1725 introduced significant changes to the rules governing outsourcing. Contractors now have direct responsiblities when it comes to ensuring compliance. However, when relying on third parties to provide services, the EU institutions remain accountable for any data processing carried out on their behalf. They also have a duty to ensure that any contractual arrangements respect the new rules and to identify and mitigate any risks. It is with this in mind that the contractual relationship between the EU institutions and Microsoft is now under EDPS scrutiny.” [...] It is in this spirit of cooperation that the EDPS takes note of the Data Protection Impact Assessment Report on diagnostic data in Microsoft Office ProPlus of 5 November 2018, commissioned by the Dutch Ministry of Justice and Security. Any EU institutions using the Microsoft applications investigated in this report are likely to face similar issues to those encountered by national public authorities, including increased risks to the rights and freedoms of individuals.

1 0

US Cloud platforms potentially incompatible with GDPR
by Giacomo Tesio April 9, 2019

April 9, 2019

https://joinup.ec.europa.eu/news/cloudy-risks-gdpr Over the last year it has become more and more clear that non-EU Cloud services, including those from large US providers like Microsoft, Dropbox, Google, etc..., are not compliant with EU privacy regulations like the GDPR. The Dutch government recently concluded this and the Swedish National Procurement Service published, just last month, a pre-study report about Cloud based office platforms. [...] “The permitted purpose of surveillance under E.O. 12333 is quite broad, encompassing all activities and intentions of non-U.S. persons. This broad authority has resulted in broad surveillance programs, including ‘Co-Traveler’, through which the U.S. captured billions of location updates daily from mobile phones around the world, and ‘Muscular’, through which the NSA intercepted all data transmitted between certain Google and Yahoo! data centers outside the U.S.” [...] “We are particularly concerned with the possible disclosure by data brokers to governmental entities of metadata which, if sought by the government directly from a communications service provider, could not be disclosed to governmental entities without legal process.” [...] “De-anonymization techniques that can identify individuals by efficiently combining increasing large volumes of digital data” [...] “The extent of the government’s use of its surveillance authorities to target journalists, dissidents, and others not engaged in wrongdoing is not known. Nor is it publicly known whether surveillance of such individuals represents a significant portion of the government’s foreign intelligence surveillance efforts.” [...] Giovanni Buttarelli, European Data Protection Supervisor (EDPS), stated in a recent interview: “At the moment there is too much power in the hands of a few mega tech companies and governments. We need to decentralise the internet, give more power to people over their digital lives. Engineers have a valid voice but they need to be part of a conversation with lawyers, ethicists, experts from the humanities. IPEN, our initiative, seeks to do this.”

1 0

2 students accused of jamming school's Wi-Fi network to avoid tests
by Giacomo Tesio April 9, 2019

April 9, 2019

Molto educativo: si denunciano due ragazzini invece di licenziare l'amministratore di sistema. http://www.wbrz.com/news/2-students-accused-of-jamming-school-s-wi-fi-netwo… Authorities say two northern New Jersey boys successfully crashed their high school's Wi-Fi network on multiple occasions to get out of taking exams. The two Secaucus High School freshmen are charged with computer criminal activity and conspiracy. Authorities say the 14-year-olds used an app or a computer program to compromise the network, and apparently took requests from other students to bring it down.

1 0

Home Taping Is Killing Music: When the Music Industry Waged War on the Cassette Tape in the 1980s, and Punk Bands Fought Back
by Giacomo Tesio April 9, 2019

April 9, 2019

Salta all'occhio il parallelo fra musica punk e software libero. http://www.openculture.com/2019/04/home-taping-is-killing-music.html The first time I saw the infamous Skullcassette-and-Bones logo was on holiday in the UK and purchased the very un-punky Chariots of Fire soundtrack. It was on the inner sleeve. “Home Taping Is Killing Music” it proclaimed. It was? I asked myself. “And it’s illegal” a subhead added. It is? I also asked myself. (Ironically, this was a few months before I came into possession of my first combination turntable-cassette deck.) Ten years and racks and racks of homemade cassette dubs on my shelves later, music seemed to be doing very well. (Later, by going digital, the music industry killed itself, and I had absolutely nothing to do with it.) British record collectors will no doubt remember this campaign that started in 1981, another business-backed "moral" panic. And funnily enough it had nothing to do with dubbing vinyl. [...] The post-punk crowd knew the campaign was bunkum too. Malcolm McLaren, always the provocateur, released Bow Wow Wow’s cassette-only-single C-30 C-60 C-90 Go with a blank B-side that urged consumers to record their own music. EMI quickly dropped the band. [...] And then there were the parodies. The metal group Venom used “Home Taping Is Killing Music; So Are Venom” on an album; Peter Principle offered “Home Taping Is Making Music”: Billy Bragg kept it Marxist: “Capitalism is killing music - pay no more than £4.99 for this record”. For the industry, music was the product; for the regular folks, music was communication, it was art, it was a language.

1 0

Final report of the High-Level Expert Group on the Impact of the Digital Transformation on EU Labour Markets | Digital Single Market
by J.C. DE MARTIN April 8, 2019

April 8, 2019

https://ec.europa.eu/digital-single-market/en/news/final-report-high-level-… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

The Pentagon Wants to Streamline Security Clearances by Using AI. That’s a Dangerous Idea. - Just Security
by J.C. DE MARTIN April 8, 2019

April 8, 2019

https://www.justsecurity.org/63539/the-pentagon-wants-to-streamline-securit… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Ethics guidelines for trustworthy AI | Digital Single Market
by antonio.vetro＠polito.it April 8, 2019

April 8, 2019

Pubblicato oggi https://ec.europa.eu/digital-single-market/en/news/ethics-guidelines-trustw… AV == Sent from my wireless device ==

2 1

FYI: You could make Tesla's Autopilot swerve into traffic with a few stickers on the road
by Giacomo Tesio April 8, 2019

April 8, 2019

https://www.theregister.co.uk/2019/04/02/tencent_tesla_hacking/ Tencent Keen Security Lab documented this week how it successfully infiltrated the autopilot’s system engine control unit (ECU) to take remote control of the car. The Chinese boffins also described how they fed on-board cameras with dodgy inputs, using stickers on the road surface, to force the vehicle to swerve across lanes, or turn on its windscreen wipers. The flaws were uncovered from 2017 to 2018, and reported to the automaker, which has since seemingly patched the security bugs. An in-depth paper describing the attacks was published at the end of last month, and Tesla CEO Elon Musk praised those behind the discoveries. [...] The researchers manipulated the car's camera image feed by placing three small squares on the ground, thus strategically changing a few pixels around the area where lanes are marked out. Alternatively, malware present in the system could modify the pixels directly as they streamed in from the camera. These adversarial inputs subsequently tricked the neural network into thinking it was in the wrong lane, or drifting into another lane, forcing it to swerve across the roadway to correct itself, potentially resulting in a deadly crash. In one attack, the car failed to identify certain lane markings, as a result of the stickers on the road, and didn’t steer in the appropriate direction to stay in lane. In another scenario, the car was made to see phantom lanes, causing it to change direction for no good reason. This attack posed the frightening possibility of nefarious miscreants making roads unsafe for Model S cars on Autopilot. [...] # Ultimate Mario Kart The team also found that – after gaining root access on the engine control unit (ECU), by getting the in-car dashboard or entertainment system's WebKit-based browser to open a malicious webpage, and then exploiting the underlying Android kernel to pivot through the internal computer network – they could control the vehicle's steering over the air with a Bluetooth game controller. ____ Qui i paper: https://keenlab.tencent.com/en/whitepapers/Experimental_Security_Research_o… https://i.blackhat.com/us-18/Thu-August-9/us-18-Liu-Over-The-Air-How-We-Rem… In fondo JavaScript sul browser non è così male: ci puoi giocare a GTA in 3D! "This is the Web functioning as designed": https://bugzilla.mozilla.org/show_bug.cgi?id=1487081#c15 Giacomo

1 0

The Lab’s Quarterly - Gli algoritmi come costruzione sociale
by Daniele Gambetta April 8, 2019

April 8, 2019

Care/i, allego link del nuovo numero della rivista di Scienze Sociali *The Lab's Quarterly*, che in questo quaderno si occupa di ruolo degli algoritmi nella società. All'interno c'è anche un contributo che ho scritto con Massimo Airoldi (Università di Lione) sul mito della neutralità algoritmica. Da notare che la redazione della rivista ha espressamente cercato per questo numero ricercatori e studiosi di vari background (matematica, fisica, informatica...) proprio per avere un numero fortemente interdisciplinare. https://thelabsquarterly.files.wordpress.com/2019/04/2018.4-the-labs-quarte… Buona lettura e buona settimana. D.

1 0

New York’s mass face recognition trial on drivers has been a spectacular failure - MIT Technology Review
by J.C. DE MARTIN April 8, 2019

April 8, 2019

https://www.technologyreview.com/the-download/613284/new-yorks-mass-face-re… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0