- nexa - server-nexa.polito.it

dubbio filosofico (ma pratico) Analisi di piattaforme: segretezza o free software?
by Claudio Agosti Dec. 17, 2018

Dec. 17, 2018

Vagamente inspirato dall'email di Giacomo Tesio, che diceva "*L'etica hacker che il software libero esprime si fonda sul valore della Curiosità, da cui derivano strumentalmente gli altri valori: Libertà, Condivisione, Onestà Intellettuale etc... sono funzionali a massimizzare la conoscenza tecnologica disponibile, verificandone la correttezza sperimentalmente, applicandola attraverso la creazione del software.*", Voglio portvi un quesito non teorico che devo affrontare in questi giorni... Scenario: https://twitter.com/WolfieChristl/status/1071473931784212480 Io lavoro in un progetto che vuole analizzare i dati di facebook; facebook ostacola attiviamente la sua analisi* Io mi sveglio alla mattina, vado a vedere i grafici, e se un parser dei miei è rotto, devo aggiornarlo. e questo task diventa la priorità su qualunque altra cosa. Non mi trovo in una posizione agevole. In questa situazione, pubblicare le logiche che usi, è un modo per rendere il lavoro di facebook più semplice. I poteri in gioco non sono per nulla comparabili. Fb ha dei team dedicati all'antiscraping; La soluzione dovrebbe essere una community solida, la quantità di creatività che potremmo metterci supererebbe quella della compagnia che investe. Ma al momento non siamo in questa condizione, e con che coraggio, quel componente, lo tengo free software (tutto il resto rimane free sw, ma su quel componente, ho dubbi). Come si fa? ciao, Claudio * Il tweet riporta di una una tecnica che hanno messo in atto 1 anno fa, ora ne hanno affiancate altre più subdole. -- Claudio Agosti, https://facebook.tracking.exposed, @_vecna PGP keybase.io/vecna - Research Associate - DATACTIVE University of Amsterdam https://data-activism.net

5 7

Senators aim to give internet companies doctor-like duties to protect our data – TechCrunch
by J.C. DE MARTIN Dec. 14, 2018

Dec. 14, 2018

https://techcrunch.com/2018/12/12/senators-aim-to-give-internet-companies-d… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Intervista sui rapporti Facebook/Stato in Jacobin Italia
by Antonio Casilli Dec. 14, 2018

Dec. 14, 2018

Hello all, appena uscita online: Facebook e gli altri divoratori di mondi https://jacobinitalia.it/facebook-e-gli-altri-divoratori-di-mondi/ Si tratta di una delle mie rare interviste in Italiano, allora ho parlato parecchio. Buona lettura, --a -- Antonio A. Casilli Associate Professor (HDR), Telecom ParisTech Member, Interdisciplinary Institute for Innovation (i3 UMR 9217 CNRS) Associate Member, LACI-IIAC (EHESS) Faculty Fellow, Nexa Center for Internet & Society

1 0

10th Nexa Conference-Workshop Decode Project | 18th December 2018, Turin
by Nexa Media Dec. 14, 2018

Dec. 14, 2018

Conferenza Nexa <http://nexa.polito.it/> *10th Nexa Conference* *Workshop Decode Project* /in cooperation with FULL (Future Urban Legacy Lab)/ ------------------------------------------------------------------------ */Urban Digital Commons and The Future of Cities/* *Tuesday, 18th December 2018* Conference room "Luigi Ciminiera" <http://www.polito.it/ateneo/sedi/index.php?bl_id=TO_CIT11&fl_id=XP05&rm_id=…>, DAUIN, Politecnico, Corso Castelfidardo 34/D, Torino (Map <https://www.google.it/maps/place/45%C2%B003%2751.1%22N+7%C2%B039%2733.5%22E…>) /Free entry while seats last, subject to registration (required) at the address:/http://nexa2018.eventbrite.com *Twitter hashtag* della conferenza: #nexa2018 <https://twitter.com/hashtag/nexa2018?src=hash> The Conference is accredited by The Council of the Turin Bar Association <http://www.ordineavvocatitorino.it/>. The participation entitles the members to 2 training credits. Abstract “Smart Cities” and “Smart Communities” have been recurrent keywords in countless projects and initiatives in the last decade, addressed to the emerging problems of our cities in the XXI century: pollution monitoring systems, smart grids, devices for remote health monitoring, robots for assisting aging population, traffic management systems are some examples. Recently the smart city rhetoric has attracted an increasing number of critics because most of the funding agendas and of the proposed solutions are ascribable to forms of technocratic and market driven governance -often bound to black box technologies and data- which do not really address the real causes of the complex urban issues. To recover the neglected role of societies in the urban governance, several counter-proposals are rooted on the notions of social and civic rights, citizens active participation through technology, and on the idea of urban digital commons. The 10th Nexa Conference is focused on the latter: we will discuss the role of urban digital commons in shaping the future governance of our cities, in the context of two ongoing projects: the Digital Open Urban Twin at the Future Urban Legacy Lab, and the H2020 project DECODE. Information Information about the Conference program and the speakers is available at: https://nexa.polito.it/conf2018 LogoNexaLogodecode <https://decodeproject.eu/>LogoFull <http://urbanlegacylab.net/> LogoUe DECODE is funded by the European Union's Horizon 2020 Programme, under grant agreement number 732546. The Nexa Center for Internet & Society at Politecnico di Torino (DAUIN) - Studying the Internet, exploring its potential, experimenting new ideas. *For more information, visit:* https://nexa.polito.it/ <https://nexa.polito.it>

1 1

US Weapons Systems Are Easy Cyberattack Targets, New Report Finds
by Alberto Cammozzo Dec. 14, 2018

Dec. 14, 2018

lo stesso approccio alla sicurezza dell'IOT, salvo che le "cose" sono armi... Dal rapporto originale: [] Many weapon systems use such systems to carry out essential functions. For example, a ship may use industrial control systems to control engines and fire suppression systems. According to NIST, industrial control systems were originally designed for use in trusted environments, so many did not incorporate security controls. 34 Government and industry reports state that attacks on these systems are increasing. However, DOD officials said that program offices may not know which industrial control systems are embedded in their weapons or what the security implications of using them are. [] <https://www.wired.com/story/us-weapons-systems-easy-cyberattack-targets/> The first step in solving any problem is admitting there is one. But a new report <https://www.gao.gov/products/GAO-19-128> from the US Government Accountability Office finds that the Department of Defense <https://www.wired.com/story/why-big-tech-and-the-government-need-to-work-to…> remains in denial about cybersecurity threats to its weapons systems. Specifically, the report concludes that almost all weapons that the DOD tested between 2012 and 2017 have “mission critical” cyber vulnerabilities. “Using relatively simple tools and techniques, testers were able to take control of systems and largely operate undetected, due in part to basic issues such as poor password management and unencrypted communications,” the report states. And yet, perhaps more alarmingly, the officials who oversee those systems appeared dismissive of the results. The GAO released its report Tuesday, in response to a request from the Senate Armed Services Committee ahead of a planned $1.66 trillion in spending by the Defense Department to develop its current weapons systems. Subtitled "DOD Just Beginning to Grapple with Scale of Vulnerabilities," the report finds that the department "likely has an entire generation of systems that were designed and built without adequately considering cybersecurity." Neither Armed Services Committee chairman James Inhofe nor ranking member Jack Reed responded to requests for comment. The GAO based its report on penetration tests the DOD itself undertook, as well as interviews with officials at various DOD offices. Its findings should be a wakeup call for the Defense Department, which the GAO describes as only now beginning to grapple with the importance of cybersecurity, and the scale of vulnerabilities in its weapons systems. “I will say that the GAO can be prone to cyber hyperbole, but unless their sampling or methodology were way off or deliberately misleading, DOD has a very grave problem on its hands,” says R. David Edelman, who served as special assistant to President Obama on cybersecurity and tech policy. “In the private sector, this is the sort of report that would put the CEO on death watch.” DOD testers found significant vulnerabilities in the department’s weapon systems, some of which began with poor basic password security or lack of encryption. As previous hacks of government systems, like the breach at the Office of Personnel Management <https://www.wired.com/2016/10/inside-cyberattack-shocked-us-government/> or the breach of the DOD’s unclassified email server <https://www.cnn.com/2018/09/17/politics/state-department-email-breach/index…>, have taught us, poor basic security hygiene can be the downfall of otherwise complex systems. "In the private sector, this is the sort of report that would put the CEO on death watch." R. David Edelman, former White House cybersecurity adviser The GAO report says that one tester was able to guess an admin password on a weapons system in nine seconds. Other weapons used commercial or open source software but administers failed to change the default passwords. Yet another tester managed to partially shut down a weapons system by merely scanning it—a technique so basic, the GAO says, it “requires little knowledge or expertise.” Testers were sometimes able to take full control of these weapons. “In one case, it took a two-person test team just one hour to gain initial access to a weapon system and one day to gain full control of the system they were testing,” the report states. The DOD also had a hard time detecting when testers were probing the weapons. In one case, testers were in the weapons system for weeks, according to the GAO, but the administrators never found them. This, despite the testers being intentionally “noisy.” In other cases, the report states that automated systems did detect the testers, but that the humans responsible for monitoring those systems didn’t understand what the intrusion technology was trying to tell them. [...]

1 0

"Legacy Copyright Industries Lobbying Hard For EU Copyright Directive... While Pretending That Only Google Is Lobbying"
by J.C. DE MARTIN Dec. 14, 2018

Dec. 14, 2018

Legacy Copyright Industries Lobbying Hard For EU Copyright Directive... While Pretending That Only Google Is Lobbying Have you heard that all of the opposition to the EU Copyright Directive and its hugely problematic Articles 11 and 13 is really being driven by Google lobbying? Most of you probably realized this was nonsense, but it now turns out that not only was the lobbying almost entirely dominated by the legacy copyright players, but *a key plank of their lobbying campaign was to falsely allege that all opposition was just Google*. If you've been paying attention at all to the crazy fights over the EU Copyright Directive <https://www.techdirt.com/blog/?tag=eu+copyright+directive>, you may have heard some claims being passed around that it's somehow "Google" lobbying heavily against the bill. Indeed, all over Twitter, that's the talking point from tons of EU Copyright Directive supporters. After the EU Parliament put the brakes on the bill back in July, I even saw a former RIAA exec (who has since blocked me on Twitter, so I can't show it to you) tweet that this was a clear perversion of the "will of the people" by Google's corporate lobbying. Of course, it's *hilarious* for that to come from an ex-RIAA exec, who was heavily involved over the past 3 decades in pushing through all sorts of protectionist, anti-public, anti-musician legislation and trade agreements. continua qui: https://www.techdirt.com/articles/20181212/07074641205/legacy-copyright-ind…

1 0

Fwd: Corte Ue: per l'Avvocato generale, non si può inserire in una composizione musicale un breve brano (sampling) di una precedente composizione senza l'autorizzazione dell'autore di quest'ultima (CONCL C-476/17)
by Marco Ciurcina Dec. 12, 2018

Dec. 12, 2018

FYI m.c. <snip> L’avvocato generale Szpunar propone alla Corte di dichiarare che il sampling costituisce una lesione dei diritti del produttore di un fonogramma qualora esso venga realizzato senza la sua autorizzazione (Conclusioni dell’avvocato generale nella causa C‑476/17, Pelham GmbH, Moses Pelham, Martin Haas / Ralf Hütter, Florian Schneider-Esleben) Immagini della lettura delle conclusioni sono disponibili su « Europe by Satellite<http://ec.europa.eu/avservices/ebs/schedule.cfm?page=1>» ( (+32) 2 2964106 In allegato il comunicato stampa in italiano. </snip>

1 0

Congresswoman to Google CEO: Why when I search ‘idiot’ do I get pictures of Trump? - The Washington Post
by Alberto Cammozzo Dec. 12, 2018

Dec. 12, 2018

<https://www.washingtonpost.com/politics/2018/12/11/congresswoman-google-ceo…> In an effort to understand how Google search algorithms work, a Democratic congresswoman asked the tech company’s chief executive a simple question: “If you Google the word ‘idiot' under images, a picture of Donald Trump comes up. How would that happen? How does search work so that that would occur?” In the middle of a congressional hearing ostensibly about privacy and data collection, Rep. Zoe Lofgren (D-Calif.) seemed to perform that search from the dais. As it turns out, the image results for “idiot” does reveal a page of mostly Trump photos. [...]

1 0

Universal income vs. the robots: Meet the presidential candidate fighting automation
by Enrico Nardelli Dec. 11, 2018

Dec. 11, 2018

https://www.technologyreview.com/s/612558/universal-income-vs-the-robots-me… -- EN ===================================================================== Prof. Enrico Nardelli Dipartimento di Matematica - Universita' di Roma "Tor Vergata" Via della Ricerca Scientifica snc - 00133 Roma tel: +39 06 7259.4204 fax: +39 06 7259.4699 mobile: +39 335 590.2331 e-mail: nardelli(a)mat.uniroma2.it home page: http://www.mat.uniroma2.it/~nardelli blog: http://www.ilfattoquotidiano.it/blog/enardelli/ http://link-and-think.blogspot.it/ ===================================================================== --

1 0

Report on the state of the art on algorithmic decision making
by Luigi Scorca Dec. 11, 2018

Dec. 11, 2018

Here you find the preliminary report of the EC consultants on the state of the art on algorithmic decision making: https://www.algoaware.eu/state-of-the-art-report/

1 0