- nexa - server-nexa.polito.it

Re: [nexa] Wired: "So Hey You Should Stop Using Texts for Two-Factor Authentication"
by David Orban May 7, 2017

May 7, 2017

Il mio telefono Google Fi è appena morto e quindi sto procedendo a disabilitare il 2FA sui vari servizi, in attesa di ricevere il rimpiazzo, per poi riabilitarlo. - Google ha gestito il passaggio in modo indolore, permettendomi di abilitare al volo l'iPad come secondo fattore - N26 oltre l'email e un numero segreto, vuole l'invio di un SMS persino per la disabilitazione del 2FA, ma l'SMS non arriva e i loro centri di supporto sono chiusi il fine settimana - Con la mia banca italiana non provo nemmeno, passo direttamente in agenzia domattina... - ce ne saranno molti altri da verificare. Una bella rogna. :) David Orban "What is the question that I should be asking?" twitter, linkedin, etc: davidorban On Sun, May 7, 2017 at 11:12 AM, J.C. DE MARTIN <demartin(a)polito.it> wrote: > *So Hey You Should Stop Using Texts for Two-Factor Authentication* > > Andy Greenberg > > Date of Publication: 06.26.16. > > Since two-factor authentication became the norm for web services that care > about securing your accounts, it’s started to feel like a security blanket, > an extra layer keeping your data safe no matter whether your password is as > strong as 8$&]$@I)9[P&4^s or as dumb as dadada. But a two-factor > setup—which for most users requires a temporary code generated on, or sent > to, your phone in addition to a password—isn’t an invincibility spell. > Especially if that second factor is delivered via text message. > > The last few months have demonstrated that SMS text messages are often the > weakest link in two-step logins: Attacks on political activists in Iran, > Russia, and even here in the US have shown that determined hackers can > sometimes hijack the SMS messages meant to keep you safe. Whenever > possible, it’s worth taking a minute to switch to a better system, like an > authentication smartphone app or a physical token that generates one-time > codes. And for services like Twitter that only offer second factor > protections that depend on SMS, it’s time to wake up, smell the targeted > attacks, and give users better options. > > […] > > Continua qui: https://www.wired.com/2016/06/hey-stop-using-texts-two- > factor-authentication/ > > > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > > ᐧ

1 0

Jaywalkers in Jinan get high-tech slap in face
by Alberto Cammozzo May 6, 2017

May 6, 2017

Esempio estremo di escalation della tecnologia della sicurezza: la citta di Jinan (oltre 7M ab.) installerà sistemi di riconoscimento facciale per rilevare e punire l'attraversamento stradale dei pedoni e altre infrazioni stradali. Verrà usato in combinazione con un sistema "reputazionale" di pubblicazione sociale dell'infrazione e uno sanzionatorio, per cui per i recidivi le multe saranno più salate. Mi travesto da Kurzweil e profetizzo una nuova singolarità. Non quella utopica dei transumanisti, ma una distopica della rivolta contro le social machines. <http://www.ecns.cn/2017/05-05/256173.shtml> Traffic police in Jinan, Shandong province, recently installed facial recognition equipment at street intersections to go after jaywalkers and other violators. "When pedestrians or drivers of nonmotorized vehicles run a red light, the equipment will take four snapshots and a 15-second video," said Wei Jinghuo, director of the Jinan traffic police technology service center. "Jaywalkers can usually be identified the same day by comparing the images with those in the databases of the public security authorities. "The technology enables us to recognize the image of each jaywalker in a crowd." The move is part of a 100-day campaign that will start soon in the city. Once identified, jaywalkers will be notified by the traffic police and asked to accept punishment at local traffic police branches. Jaywalkers will be subject to fines as high as 50 yuan ($7.20). Those caught by police on the spot will be given a choice: half an hour of education on traffic rules or 20 minutes of volunteer work assisting police in traffic guidance. For those who refuse to take their punishment, the police will inform employers or residential communities by letter, and their information will be published in the media. Information on jaywalkers will also be uploaded to the traffic credit system Jinan plans to create before the end of next year. Once it's completed, jaywalkers' information will be included in personal credit archives, which will increase the cost of future violations of traffic rules. Wei said the punishment details are still being developed, as the snapshot system has only been on trial for a month. A number of Chinese cities－including Mianyang, Sichuan province, and Fuzhou, Fujian province－have also started using facial recognition to clamp down on jaywalkers. In Mianyang, data captured by the facial recognition equipment are displayed on a screen next to the street. Dong Xiaoxia, an employee of a State-owned enterprise in the energy industry in Jinan, said more time is needed to know whether or not the system works. "It depends on whether the authorities can enforce it," Dong said. "Can the police authorities really expose jaywalkers' information in the media? How will traffic credit records influence the jaywalkers?" Zhang Qihua, a senior student at a university in Jinan, said the campaign shows authorities' attitude toward clamping down on uncivilized behavior. "It is a good trend. Like the crackdown on drunken driving, I think a crackdown on jaywalkers will also work," Zhang said.

4 6

Taser Will Use Police Body Camera Videos “to Anticipate Criminal Activity”
by Alberto Cammozzo May 5, 2017

May 5, 2017

Algoritmi analizzano i flussi video delle bodycam per prevedere futuri comportamenti criminali e anticiparli <https://theintercept.com/2017/04/30/taser-will-use-police-body-camera-video…> [...] In 2010, Taser’s longtime vice president Steve Tuttle “proudly predicted” to GQ <http://www.gq.com/story/shock-ow-taser-protector-axon-company-profile> that once police can search a crowd for outstanding warrants using real-time face recognition, “every cop will be RoboCop.” Now Taser has announced <http://investor.axon.com/releasedetail.cfm?releaseid=1020306&Year=&Releases…> that it will provide any police department in the nation with free body cameras, along with a year of free “data storage, training, and support.” The company’s goal is not just to corner the camera market, but to dramatically increase the video streaming into its servers. With an estimated one-third of departments using body cameras, police officers have been generating millions of hours of video footage. Taser stores terabytes of such video on Evidence.com <http://evidence.com/>, in private servers, operated by Microsoft, to which police agencies must continuously subscribe for a monthly fee. Data from these recordings is rarely analyzed for investigative purposes, though, and Taser — which recently rebranded itself <https://www.axon.com/company/news/our-future-as-axon> as a technology company and renamed itself “Axon” — is hoping to change that. [...]

2 1

trovato a Padova
by Alberto Cammozzo May 5, 2017

May 5, 2017

adesivo applicato sopra a un pannello informativo videosorveglianza sulla pubblica via a Padova <https://twitter.com/dontTag/status/860436605483483136> ciao, Alberto

2 2

Fear & Loathing of the Online Self - Roma 22 e 23 maggio
by donna d.r. May 5, 2017

May 5, 2017

ciao volevo segnalare alla lista questa cosa che facciamo a Roma insieme a Geert Lovink, alla quale partecipano Wendy Chun, Biella Coleman, Jodi Dean, Bifo la partecipazione è gratuita ma bisogna registrarsi qui perche dobbiamo capire quanta gente viene https://www.eventbrite.com/e/fear-and-loathing-of-the-online-self-tickets-3… spero di vedervi! saluti donatella

1 0

Hey computer scientists stop hating humanities
by Antonio Vetrò May 5, 2017

May 5, 2017

Un bell’articoletto di Wired su un punto caro alla filosofia del Centro Nexa: https://www.wired.com/2017/04/hey-computer-scientists-stop-hating-humanitie… Un saluto, Antonio -- Antonio Vetrò, Ph.D. Director of Research Nexa Center for Internet and Society DAUIN, Politecnico di Torino https://nexa.polito.it/people/avetro

6 5

A False Facial Recognition Match Cost This Man Everything
by Alberto Cammozzo May 4, 2017

May 4, 2017

Denver resident Steve Talley files $10 million lawsuit after face-matching technology ruined his life <http://www.vocativ.com/418052/false-facial-recognition-cost-denver-steve-ta…> One night in September 2014, Steve Talley answered a knock at his door from a man who claimed to have accidentally hit his car. He had no reason to expect that the next few moments would change the course of his life. Dressed only in boxer shorts and a t-shirt, Talley went out and crouched in the driveway to inspect his car — but there was no damage. Suddenly, Talley said, he was ambushed. Three men dressed in what Talley describes as SWAT gear tackled, kicked and punched the then-44-year-old Denver man. After the brutal beating, one explained that Talley was under arrest for two recent armed bank robberies, one of which involved a physical assault on a police officer. “I remember telling them they were crazy, and they had got the wrong guy,” said Talley, a father of two and financial analyst who had recently lost his job. Talley wasn’t lying, though it would take two months for his public defender to prove it. His arrest had followed anonymous tips from people who had seen surveillance footage on the news and mistakenly thought it was Talley. His ex-wife, fighting Talley for custody of their children at the time, also identified him as the suspect. Charges were finally dropped after Talley’s lawyer unearthed an audio recording of him at work at a financial firm at the time of the first robbery. Now dealing with a host of medical, personal and financial problems stemming from his arrest, Talley didn’t know how things could get worse. Then he was arrested again in December 2015, charged with committing the second bank robbery. This time, Denver police, with the assistance of an FBI examiner using facial comparison technology, claimed to match Talley with the sunglasses and hat-clad suspect. The software and approach that was used, it has been shown <https://theintercept.com/2016/10/13/how-a-facial-recognition-mismatch-can-r…>, only garners a subjective estimate as to whether two images show the same person. It’s meant to serve as an investigative tool not evidence. Talley had an alibi for the day of the robbery — he had signed in to a soup kitchen across town. And yet, the case went to trial. But there was even stronger evidence pointing to his innocence. A bank teller told the jury she was absolutely certain Talley was not the robber. Further analysis of a mole on his cheek not visible in the CCTV footage and the fact that his height and weight did not match that of the suspect helped to finally convince the prosecution to drop charges. But the damage was already done. Now homeless, unemployed, facing health complications, and estranged from his children, Talley still struggles with what happened to him. He’s filed a $10 million federal lawsuit <http://www.denverpost.com/2016/09/15/fbi-denver-police-sued-false-arrest-ex…> against the city of Denver and its police department that he hopes will finally clear his name. The lawsuit alleges that officers involved violated identification procedures and protocols in interviewing the bank teller of the second robbery. The Denver City Attorney’s Office did not respond to a request for comment on the ongoing case. []

1 0

Second-Hand Markets for Digital Copies: An EU Copyright Chimera? | U. Bocconi, 5 maggio
by Aura Bertoni May 4, 2017

May 4, 2017

Cari amici della lista Nexa, Vi segnalo il prossimo appuntamento del ciclo seminariale del centro ASK Bocconi. Domani, venerdì 5 maggio, alle ore 12.30 sarà presente Eleonora Rosati (Associate Professor in Intellectual Property Law, University of Southampton) con un intervento dal titolo Second-Hand Markets for Digital Copies: An EU Copyright Chimera? L'incontro si terrà nell'edificio di via Sarfatti 25, stanza 32. Per informazioni: ASK - Art, Science and Knowledge tel. +39 02 5836 3710 ask(a)unibocconi.it A presto, Aura Aura Bertoni, PhD, LLM Bocconi University ASK Research Centre Department of Legal Studies Via Roentgen 1 20136 Milan Italy +39 02 5836 5771 --- Dai il tuo 5x1000 alla Bocconi. Aiuta gli studenti meritevoli a costruire il proprio futuro. CF 80024610158. www.unibocconi.it/5x1000 Please note that the above message is addressed only to individuals filing Italian income tax returns. 5x1000 is a percentage of Italian personal income tax that taxpayers can allocate to Universities, scientific research and non profit organizations. ---

1 0

Zittrain: How Online Platforms Shape American Discourse - The Atlantic
by J.C. DE MARTIN May 3, 2017

May 3, 2017

https://www.theatlantic.com/technology/archive/2017/05/american-discourse-v… (Sent from my wireless device; please excuse brevity and typos (if any))

1 0

Jack Ma Sees Decades of Pain as Internet Upends Old Economy
by Luigi Scorca May 3, 2017

May 3, 2017

Leggilo su https://www.bloomberg.com/news/articles/2017-04-23/jack-ma-sees-decades-of-… Luigi

1 0