- nexa - server-nexa.polito.it

Re: [nexa] Servizi cloud "made in USA" e compliance EU: l'analisi tedesca

by Roberto Resoli

Il 12 dicembre 2025 21:59:39 CET, Roberto Resoli <roberto(a)resolutions.it> ha scritto: >Il 11 dicembre 2025 20:48:11 CET, Damiano Verzulli <damiano(a)verzulli.it> ha scritto: >>Il documento (in tedesco) da cui è scaturito il tutto è questo: >>https://fragdenstaat.de/anfrage/gutachten-zu-zugriffsmoeglichkeiten-von-us-… >> >> https://www.googlecloudpresscorner.com/2025-11-24-NATO-and-Google-Cloud-Sig… >>[9] https://www.googlecloudpresscorner.com/2025-09-11-Google-Cloud-Awarded-Land… > >Grazie Damiano, il documento é molto interessante, anche se dopo FISA 702 e EO 12333 sono tutto sommato cose note. > >Ne ho tradotto (per ora automaticamente con DeepL) una parte: https://www.resolutions.it/nextcloud/s/sNrp9TtELnB6NDX Ora sostituito da una cartella con l'originale e alcuni commenti raccolti in rete: https://www.resolutions.it/nextcloud/s/zfFmHT9nAFtMSZ9 rob

Dec. 13, 2025

Re: [nexa] Servizi cloud "made in USA" e compliance EU: l'analisi tedesca

by Roberto Resoli

Il 11 dicembre 2025 20:48:11 CET, Damiano Verzulli <damiano(a)verzulli.it> ha scritto: >Il documento (in tedesco) da cui è scaturito il tutto è questo: >https://fragdenstaat.de/anfrage/gutachten-zu-zugriffsmoeglichkeiten-von-us-… > > https://www.googlecloudpresscorner.com/2025-11-24-NATO-and-Google-Cloud-Sig… >[9] https://www.googlecloudpresscorner.com/2025-09-11-Google-Cloud-Awarded-Land… Grazie Damiano, il documento é molto interessante, anche se dopo FISA 702 e EO 12333 sono tutto sommato cose note. Ne ho tradotto (per ora automaticamente con DeepL) una parte: https://www.resolutions.it/nextcloud/s/sNrp9TtELnB6NDX rob

Dec. 12, 2025

Does the ‘Military-Digital Complex’ Control Everything?

by Dario Guarascio

Segnalo: https://tribunemag.co.uk/2025/12/does-the-military-digital-complex-control-… Buona giornata, dario -- *Dario Guarascio* Dipartimento di Economia e Diritto, Sapienza Università di Roma <http://www.uniroma1.it/strutture/dipartimenti> Via del Castro Laurenziano n° 9, 00161 Roma Edificio A (6° piano) -ala B, stanza n° 606 E-mail: dario.guarascio(a)uniroma1.it <nome.cognome(a)uniroma1.it> *Sito web* italiano - https://sites.google.com/a/uniroma1.it/darioguarascio/ inglese - https://sites.google.com/a/uniroma1.it/darioguarascio-eng/ -- *Fai crescere le giovani ricercatrici e i giovani ricercatori*** *con il 5 per mille alla Sapienza* Scrivi il codice fiscale dell'Università *80209930587 **Cinque per mille <https://www.uniroma1.it/it/node/23149>*

Dec. 12, 2025

Servizi cloud "made in USA" e compliance EU: l'analisi tedesca

by Damiano Verzulli

Il documento (in tedesco) da cui è scaturito il tutto è questo: https://fragdenstaat.de/anfrage/gutachten-zu-zugriffsmoeglichkeiten-von-us-… Un'articolo descrittivo (in inglese) è questo: => "Academics advise German gov: almost no way to stop US accessing cloud data" A newly-released expert opinion suggests Germany was worried just before Donald Trump took office, and with good reason. source: https://www.thestack.technology/academics-advise-german-gov-almost-no-way-t… ========================================================================= A month before Donald Trump took office, Germany's Ministry of the Interior asked experts at the University of Cologne to determine if German data on the cloud could be kept out of the reach of US intelligence agencies and law enforcement. A document released this week under a freedom of information request [1] shows, it received a fairly straightforward response back in March: not really, no. Even data stored on servers physically located on German soil and operated by a German company may be exposed to the jurisdiction of US courts, if that company so much as has a website that can be accessed in the USA. (However, this only applies to cases of specific personal jurisdiction which limits prosecution.) In the following months, Microsoft, Google, and AWS all sought to set up structures they said would satisfy the data sovereignty requirements of EU countries. With no changes in the multi-layered American legal framework to access data, though, the formal advice solicited by the German government suggests these efforts could be in vain. Extraterritorial reach According to the FOI request [2], Researcher Moritz Schneider launched a request for the expert opinion in October, after it was referred to in an academic journal, and on Tuesday the interior ministry released a lightly-redacted version the legal opinion. The document shows that, in late 2024, the German government wanted to specifically know if US intelligence agencies could legally get at cloud data – and if hyperscalers could legally preclude themselves from accessing such data, either through encryption or by way of German subsidiaries. The Cologne university's faculty of law (via experts whose identities were redacted) thought not. Between a Reagan-era executive order allowing covert operations and more modern rules requiring access to evidence, they said, a US company would likely have no legal way to resist a US government attempt to access any information it could access, or over which it has control by way a subsidiary. Being party to the encryption of data for which it does not hold the keys could technically work, the experts said, and could also see the hyperscaler face legal sanction for what amounts to evading responsibility. US extraterritorial reach could extend to not only German subsidiaries of US companies, but to German-native companies with only the barest connection to the USA, said the legal scholars. However, the researchers said these possibilities were dependent on the specific case. A German company that offers services to US customers could face access demands, they said – simply by operating a website from which Americans are not specifically excluded. Hyperscaler promises In June, Microsoft announced an update to its EU sovereign-data offering [3] to ensure that European-resident employees must authorise access to data by non-European engineers, with servers under the control of a subsidiary with only European directors. Neither of those measures would make any accessible data proof against US demands, according to the German opinion; as long as Microsoft has control over the staff, servers, or subsidiary, all would be within the reach of the US justice system. Microsoft also said data on Azure could be encrypted via external key management, with the keys hosted on hardware security modules (HSMs) that could be anywhere, including on the customer premises. In such a case, the German analysis suggests, Microsoft would still be liable to hand over any metadata it can access, while facing tough questions and possible sanction for enabling the encryption. In July, the General Counsel of Microsoft France told French courts [4] that the company could not guarantee they would not had over European data to US authorities if a legitimate request was made. However, the lawyer added that situation had never occurred. Also in June, AWS promised a "built, operated, controlled, and secured in Europe" cloud option [5] that is "subject to local laws." German-resident subsidiaries would keep both data and metadata in the EU, Amazon said, with a fully EU-citizen management and oversight board, and the ability to operate indefinitely in isolation if it should be disconnected from the rest of the AWS cloud. As with Microsoft, Amazon's operational control over those subsidiaries and their employees would still give the US theoretical access to data, according to the German opinion. In November, Google held a Digital Sovereignty Summit in Munich [6]. It has been selling "disconnected cloud services" [7] on the continent, providing air-gapped solutions for NATO [8] and the UK Ministry of Defence [9]. Those systems allow for the use of its advanced tools in an environment entirely under the control of the client, Google said – by dint of being on-premises and entirely disconnected from the internet. [1] https://fragdenstaat.de/anfrage/gutachten-zu-zugriffsmoeglichkeiten-von-us-… [2] https://fragdenstaat.de/anfrage/gutachten-zu-zugriffsmoeglichkeiten-von-us-… [3] https://blogs.microsoft.com/blog/2025/06/16/announcing-comprehensive-sovere… [4] https://www.senat.fr/compte-rendu-commissions/20250609/ce_commande_publique… [5] https://www.aboutamazon.eu/news/aws/built-operated-controlled-and-secured-i… [6] https://cloud.google.com/events/digital-sovereignty-summit-munich?hl=en&ref… [7] https://www.googlecloudpresscorner.com/2023-03-15-Proximus-and-Google-Cloud… [8] https://www.googlecloudpresscorner.com/2025-11-24-NATO-and-Google-Cloud-Sig… [9] https://www.googlecloudpresscorner.com/2025-09-11-Google-Cloud-Awarded-Land… ========================================================================= Bye, DV -- Damiano Verzulli e-mail: damiano(a)verzulli.it --- possible?ok:while(!possible){open_mindedness++} --- "...I realized that free software would not generate the kind of income that was needed. Maybe in USA or Europe, you may be able to get a well paying job as a free software developer, but not here [in Africa]..." -- Guido Sohne - 1973-2008 http://ole.kenic.or.ke/pipermail/skunkworks/2008-April/005989.html

Dec. 11, 2025

MEMENTO | 17° Convegno Annuale del Centro Nexa | "Contro la casa di vetro. Opacità, schedatura e potere nell’età digitale" | Lunedì 15 dicembre 2025

by Nexa - Media

Gentilissime, gentilissimi, Vi ricordiamo che lunedì 15 dicembre, dalle ore 9.30 (accoglienza dalle 9.00) alle ore 18.00, presso la Sala Luigi Ciminiera del DAUIN – Politecnico di Torino (5° piano), Corso Castelfidardo 34/D<https://maps.app.goo.gl/PmXAxuEuZ2B7Yact7>, si terrà il 17° Convegno Annuale del Centro Nexa su Internet e Società, dal titolo: "Contro la casa di vetro. Opacità, schedatura e potere nell’età digitale". L'evento verrà registrato, e il video sarà pubblicato sul nostro canale YouTube<https://www.youtube.com/@NexaCenter> e sito web<https://nexa.polito.it/conv2025> nei giorni successivi al convegno. Vi invitiamo a consultare la seguente pagina https://nexa.polito.it/conv2025 per scoprire tutti gli interventi in programma e gli ospiti invitati. L'iscrizione al convegno è libera e gratuita: iscriviti QUI<https://mobilizon.it/events/497677b1-d8a8-4001-89cd-d8bbd0f5667c>. Speriamo di vedervi numerosi! Vi ringraziamo per l'attenzione e vi auguriamo una buona giornata, Un saluto cordiale, -- Valeria Bergantino Communication Manager Nexa Center for Internet & Society Politecnico di Torino - DAUIN Via Pier Carlo Boggio, 65/A - 10138 Torino web: https://nexa.polito.it/ mail: valeria.bergantino(a)polito.it<mailto:valeria.bergantino@polito.it> tel: 3473443585

Dec. 11, 2025

U.S. Department of War - Hegseth Introduces Department to New AI Tool

by Daniela Tafani

Hegseth Introduces Department to New AI Tool Dec. 9, 2025 | By C. Todd Lopez, Pentagon News | Yesterday, several employees at the Pentagon got a pop-up on their computers inviting them to use a new artificial intelligence tool developed for the War Department. Some were skeptical, wondering if the invitation was part of a cybersecurity test. [...] "When GenAI was asked, "How will you help the Department of War achieve its mission," through a user prompt, it replied with a list of capabilities, including, among other things, creating and refining documents, analyzing information, processing and analyzing satellite images, and even auditing computer code for security purposes." <https://www.war.gov/News/News-Stories/Article/Article/4355797/hegseth-intro…>

Dec. 10, 2025

Re: [nexa] [Possible phishing attempt] Account mobilizon di Centro Nexa e ActivityPub

by Roberto Resoli

Il 10/12/25 18:25, Roberto Resoli ha scritto: > Il 10/12/25 18:22, Roberto Resoli ha scritto: >> Il 09/12/25 09:22, B. J. ha scritto: >>> Interessante, a me l'urlhttps://mobilizon.it/ >>> @centro_nexa_su_internet_societa dice "No group found" >> >> Esattamente. > > Probabilmente il motivo è che @centro_nexa_su_internet_societa è stato > configurato come utenza e non come gruppo. Identico comportamento per la mia utenza @rob@mobilizon.it (afferente al gruppo @linuxtrent@mobilizon.it ) Il mio suggerimento è quindi di creare un gruppo (ad es: @centronexa@mobilizon.it ) e agganciare l'utenza @centro_nexa_su_internet_societa (o altre nuove, magari anche _vagamente_ nominali) a quello. Gli eventi creati per il gruppo @centronexa@mobilizon.it dovrebbero essere visibili nel fediverso. rob

Dec. 10, 2025

Re: [nexa] [Possible phishing attempt] Account mobilizon di Centro Nexa e ActivityPub

by Roberto Resoli

Il 10/12/25 18:22, Roberto Resoli ha scritto: > Il 09/12/25 09:22, B. J. ha scritto: >> Interessante, a me l'urlhttps://mobilizon.it/ >> @centro_nexa_su_internet_societa dice "No group found" > > Esattamente. Probabilmente il motivo è che @centro_nexa_su_internet_societa è stato configurato come utenza e non come gruppo. rob

Dec. 10, 2025

Re: [nexa] [Possible phishing attempt] Account mobilizon di Centro Nexa e ActivityPub

by Roberto Resoli

Il 09/12/25 09:22, B. J. ha scritto: > Interessante, a me l'urlhttps://mobilizon.it/@centro_nexa_su_internet_societa dice "No group found" Esattamente. rob

Dec. 10, 2025

$64 billion of data center projects have been blocked or delayed amid local opposition

by Daniela Tafani

$64 billion of data center projects have been blocked or delayed amid local opposition Data Center Watch Executive Summary $18 billion worth of data center projects were blocked, and another $46 billion of projects were delayed over the last two years in the face of opposition from residents and activist groups. There are at least 142 activist groups across 24 states organizing to block data center construction and expansion. Opposition to data center construction is largely motivated by local concerns. While the exact reasons opponents cite vary from location to location, some common themes are higher utility bills, water consumption, noise, impact on property value, and green space preservation. Data center projects that involve building their own power supplies are likely to attract additional opposition related to energy-generating infrastructure. A recent survey shows that while a majority of Americans support data center construction in the abstract, most are skeptical of projects in their communities. The backlash to data center development is bipartisan and does not follow the typical ideological fault lines of American politics. There have been projects blocked in red states and blue states, and there are both Republican and Democratic officials opposing new projects. A review of public statements by elected officials in districts with large data center projects (50 MW>) under consideration found that 55% of the politicians who had taken public positions against the data center projects were Republicans, and 45% were Democrats. This bipartisan opposition is notable because major data center developments tend to be located in red states, with Virginia and Oregon being notable exceptions. Even in famously business-friendly Texas, there is bi-partisan support for additional regulations on data center development in the State Senate. While there is bipartisan opposition to data center development, the exact issues emphasized by activists often differ based on their partisanship. On the left, you often see arguments around environmental concerns, while on the right, conservatives will often cite opposition to tax abatements. However, concerns over power consumption and grid strain have gained support across the political spectrum. And the traditional NIMBY opposition to new developments is driven by local residents and doesn’t tend to have a partisan lean. Data center challenges arise primarily at the local level, as most permitting decisions are made by local authorities. Consequently, even a supportive White House has limited control over delays arising at the local level. Data center development is becoming an important issue in local politics. In Cascade Locks, Oregon, voters recalled two Port Authority officials in June 2023 for supporting a $100 million data center project from Roadhouse Digital. Following the recall election, the new board canceled the data center project in July 2023. In Warrenton, Virginia, residents voted out all town council members who supported Amazon’s proposed data center in the November 2024 election. The newly elected council, composed entirely of project opponents, now has the mandate to block the data center. The future looks like Virginia The tremendous growth of the data center industry in Northern Virginia has spurred intense data center opposition. Virginia is now the focal point for community opposition to data centers in the United States, with 42 activist groups campaigning to slow, stop, or further regulate data center development. Opposition in Virginia is becoming increasingly professional and organized. In 2023, the Data Center Reform Coalition was founded to coordinate efforts among environmental, conservation, and homeowner association groups opposed to data center projects. The Data Center Reform Coalition is a growing organization, adding new members to its platform as opposition to data centers continues to rise in Virginia. Data center development has become an important political issue, with candidates for local, state, and federal office regularly taking positions on it. Legislative and regulatory measures aimed at curtailing data center growth have been introduced at both local and state levels. As data center development accelerates elsewhere in the country, local pushback on data centers is likely to follow the same pattern seen in Virginia. <https://www.datacenterwatch.org/report>

Dec. 10, 2025