- nexa - server-nexa.polito.it

Website's operator is legitimate to store personal data in order to protect itself against cyberattacks
by Diego Giorio Oct. 22, 2016

Oct. 22, 2016

Segnalo questa interssante sentenza: http://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.… <http://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.…> Buon WE a tutti<http://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.…> <http://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.…> D. <http://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.…>

1 0

Fwd: [ NNSquad ] China's plan to organize its society relies on 'big data' to rate everyone
by J.C. DE MARTIN Oct. 22, 2016

Oct. 22, 2016

-------- Forwarded Message -------- Subject: [ NNSquad ] China's plan to organize its society relies on 'big data' to rate everyone Resent-Date: Sat, 22 Oct 2016 18:37:23 +0200 Resent-From: d004620(a)polito.it Date: Sat, 22 Oct 2016 09:35:57 -0700 From: Lauren Weinstein <lauren(a)vortex.com> To: nnsquad(a)nnsquad.org China's plan to organize its society relies on 'big data' to rate everyone https://www.washingtonpost.com/world/asia_pacific/chinas-plan-to-organize-i… Imagine a world where an authoritarian government monitors everything you do, amasses huge amounts of data on almost every interaction you make, and awards you a single score that measures how "trustworthy" you are. In this world, anything from defaulting on a loan to criticizing the ruling party, from running a red light to failing to care for your parents properly, could cause you to lose points. And in this world, your score becomes the ultimate truth of who you are -- determining whether you can borrow money, get your children into the best schools or travel abroad; whether you get a room in a fancy hotel, a seat in a top restaurant -- or even just get a date. This is not the dystopian superstate of Steven Spielberg's "Minority Report," in which all-knowing police stop crime before it happens. But it could be China by 2020. It is the scenario contained in China's ambitious plans to develop a far-reaching social credit system, a plan that the Communist Party hopes will build a culture of "sincerity" and a "harmonious socialist society" where "keeping trust is glorious." - - - --Lauren-- Care About Science and Tech? Our Job One: STOP TRUMP: https://vortex.com/stop-trump - - - Lauren Weinstein (lauren(a)vortex.com) https://www.vortex.com/lauren Lauren's Blog: https://lauren.vortex.com Founder: Network Neutrality Squad: https://www.nnsquad.org PRIVACY Forum: https://www.vortex.com/privacy-info Co-Founder: People For Internet Responsibility: https://www.pfir.org/pfir-info Member: ACM Committee on Computers and Public Policy Google+: https://google.com/+LaurenWeinstein Twitter: https://twitter.com/laurenweinstein Tel: +1 (818) 225-2800 I have consulted to Google, but I am not currently doing so -- my opinions expressed here are mine alone. - - - The correct term is "Internet" NOT "internet" -- please don't fall into the trap of using the latter. It's just plain wrong! _______________________________________________ nnsquad mailing list https://lists.nnsquad.org/mailman/listinfo/nnsquad

1 0

The U.S. Government Wants to Read Travelers’ Tweets Before Letting Them In
by Alessandro Mantelero Oct. 22, 2016

Oct. 22, 2016

https://theintercept.com/2016/10/21/the-u-s-government-wants-to-read-travel… qui il documento: "Collecting social media data will enhance the existing investigative process and provide DHS greater clarity and visibility to possible nefarious activity and connections by providing an additional tool set which analysts and investigators may use to better analyze and investigate the case" https://www.regulations.gov/document?D=USCBP-2007-0102-0016 Oscillo fra il dubbio se sia inquietante o sciocco... Visti i "grandi risalutati" ottenuti nella prevenzione già effettuabile su social media con profili pubblici, sarei per la seconda ipotesi. Tuttavia questo controllo sociale bulimico mi induce a conservare la prima opzione. -- Prof. Avv. Alessandro Mantelero Politecnico di Torino Nexa Center for Internet and Society | Director of Privacy Politecnico di Torino–Tongji University| Coordinator, Double Degree program in Management and IP Law Nanjing University of Information Science and Technology | Part-time Expert, School of Public Administration European Data Protection Law Review | Associate Editor http://staff.polito.it/alessandro.mantelero @mantelero EMAIL POLICY: once a day (Mon-Fri)

2 1

Hackers used IoT devices to disrupt major websites across U.S - NYTimes
by Antonio Vetrò Oct. 22, 2016

Oct. 22, 2016

Il recente attacco informatico negli stati uniti è partito da dispositivi domestici connessi alla rete e infetti da un malware: http://www.nytimes.com/2016/10/22/business/internet-problems-attack.html <http://www.nytimes.com/2016/10/22/business/internet-problems-attack.html> Un tema che toccheremo anche alla Conferenza Nexa del 2/12. -- Antonio Vetrò, Ph.D. Director of Research Nexa Center for Internet and Society, DAUIN, Politecnico di Torino https://nexa.polito.it/people/avetro

1 0

conferenza "state of the Net", Trieste, (28) - 29 ottobre 2016
by Guido Gorgoni Oct. 21, 2016

Oct. 21, 2016

Buongiorno a tutti, segnalo la conferenza "state of the Net" che si terrà Trieste il prossimo 29 ottobre (preview il giorno 28): http://sotn.it/ "The conference which tries to capture the state of art of the internet in Italy and in the world, considering its impact on our society. SotN is a key meeting for the italian industry and tech community, as it investigates dynamics and opportunities in the current digital scenario". La registrazione è gratuita, il tema di questa edizione sarà "Facts" (cito dal sito): *"Facts.*” will be the main theme of State of the Net 2016. While the open internet allows for the *best fact checking ever available*, many are trapped in echo chambers where lies keep bouncing around until they *sound like truth* and resonate with their beliefs. The press is under pressure and sometimes willing to trade quality and analysis for attention. All this is affecting *how we decide, vote, participate in public life*. And while people struggle with facts, machines are becoming very good at processing reality and finding new meanings: from storing “truth” in the blockchain to develop *artificial intelligence *able to interpret and predict our world and drive around town. Saluti G -- _________________________________________________________ Guido Gorgoni Ricercatore in Filosofia del Diritto ( Assistant Professor in Legal Theory) Dipartimento di Scienze Politiche, Giuridiche e Studi Internazionali (Department of Political Science, Law, and International Studies) Università di Padova (University of Padua) via VIII febbraio, 2 35122 - Padova, Italy tel (+39) 049 827 3441 fax (+39) 049 827 3479 guido.gorgoni(a)unipd.it _________________________________________________________

1 0

Un americano su due è schedato grazie al riconoscimento facciale
by Alberto Cammozzo Oct. 21, 2016

Oct. 21, 2016

<http://www.lastampa.it/2016/10/21/esteri/un-americano-su-due-schedato-grazi…> L'articolo riporta cosa succede in Itala sul fronte riconoscimento facciale: 1) L’Italia lancia un bando: “Strumento utile per l’antiterrorismo” L’industria del riconoscimento facciale è spinta anche dalle richieste di sicurezza degli Stati. Tra gli utilizzi più diffusi finora c’è la ricerca del volto di qualcuno fermato a una frontiera, dopo averlo fotografato con lo smartphone, su un database di sospettati o criminali. Lo fa ad esempio la Turchia. Più complessa, ma molto ambita dalle forze di sicurezza, la ricerca fatta su immagini registrate da telecamere a circuito chiuso o riprese in tempo reale da videocamere di sorveglianza. Ambizione espressa anche del governo italiano che con il ministro dell’Interno Angelino Alfano aveva annunciato un potenziamento del sistema di sicurezza del Paese che includeva anche questo genere di tecnologia. Lo scorso novembre è stata indetta una gara pubblica da 56 milioni di euro per la fornitura di sistemi di videosorveglianza (per edifici pubblici e per il territorio) con funzioni di analisi video in tempo reale e riconoscimento facciale.

1 0

How social media is being weaponized across the world.
by Alberto Cammozzo Oct. 21, 2016

Oct. 21, 2016

<http://www.defenseone.com/ideas/2016/10/war-goes-viral/132233/> Lungo e interessante articolo, denso di fatti e opinioni, sulla weaponization dei social. Riporto i passaggi col paragone particolarmente interessante e preoccupante tra i social (volatili amplificatori facilmente polarizzabili e possibili strumenti di segregazione ideologica), e il ruolo catalizzatore del telegrafo nello scoppio della prima guerra mondiale. ciao, Alberto The internet has long been celebrated for its power to bring people together. Yet as it turns out, this same technology is easily weaponized. [] Social media has already revolutionized everything from dating to business to politics. Now it is reshaping war itself. [] In an exchange of congratulations, President James Buchanan expressed to Queen Victoria his belief that the telegraph would “prove to be a bond of perpetual peace and friendship between the kindred nations, and an instrument designed … to diffuse religion, civilization, liberty, and law throughout the world.” Within a few days, Britain would use the same cable to send orders to its military. [] Indeed, the more we’ve learned about behavior on social media, the more apparent it has become that the mirror is distorted—or rather, that it distorts us. For all the hope that comes from connecting with new people and new ideas, researchers have found that online behavior is dominated by “homophily”: a tendency to listen to and associate with people like yourself, and to exclude outsiders. Social networks are bad at helping you empathize with people unlike you, but good at surrounding you with those who share your outlook. The new information ecosystem does not challenge biases; it reinforces them. [] When Archduke Franz Ferdinand was assassinated in Sarajevo in June 1914, few thought that global conflict was at hand. But over the next several weeks, diplomats and monarchs were left feeling helpless as their nations barreled toward World War I. For some, the prospect of disappointing their own nationalist citizens scared them more than the war itself. German Chancellor Theobald von Bethmann-Hollweg lamented how the public clamor for blood constrained his choices, while Russian Tsar Nicholas II feared the very loss of his throne if he chose any other option than a march to war. He chose war, and the people eventually toppled him all the same. Reading the frantic diplomatic missives that traversed the telegraph lines in the final days before hostilities commenced, one is struck by how the threat of conflict quickly adopted its own terrible logic and momentum. Impassioned populations and real-time reports of mobilizations and countermobilizations helped fuel a sense that, far from a conscious choice, war had become inevitable. [] Today, national leaders engage in Twitter spats, and rapid-fire hashtags draw international attention. Public sentiment can be readily manipulated or even manufactured. And events, filtered through social media, can quickly go viral—the very definition of spinning out of control. Perhaps the greatest danger in this dynamic is that, although information that goes viral holds unquestionable power, it bears no special claim to truth or accuracy. Homophily all but ensures that. [] This extreme ideological segregation, the authors concluded, “comes at the expense of the quality of the information and leads to proliferation of biased narratives fomented by unsubstantiated rumors, mistrust, and paranoia.” As smartphone cameras and streaming video turn every bystander into a reporter (and everyone with an internet connection into an analyst), “truth” becomes a matter of emotional resonance. [] The emergence of a truly interconnected world has long been hailed as a step toward cross-cultural cooperation and global enlightenment. As societies communicate more freely, the thinking has gone, empathy will be nourished, the truth will be easier to find, and many causes of conflict will wither. Thanks to the mobilizing power of social media and the resultant “wisdom of crowds,” citizens will exert more direct control over their governments, helping solve disputes without need for violence. The age of social media, in other words, should be an age of peace and understanding. The same was once said of the telegraph.

1 0

WhatsApp ed il grande regalo dell'end-to-end crypto... o possiamo leggerlo in altri modi?
by Claudio Agosti Oct. 20, 2016

Oct. 20, 2016

Buona settimana, Mi sono interrogato sul significato e le implicazioni della crittografia di whatsapp. Tradurrò il pezzo in italiano (e magari lo estenderò con tutte le footnote che ho dovuto sacrificare perchè con medium non sono supportate) https://medium.com/@_vecna/whatsapp-security-santa-or-cryptography-as-cost-… penso alcune cose suoneranno già lette, per fare una sintesi (con WA intendo WhatApp): 1) il costo dell'apparato legale di WA è maggiore del valore che WA può estrarre da messaggi/foto/audio ? (sempre tenendo conto che se hai facebook+instagram magari i dati via WA diventano secondari). 2) altre aziende più piccole che fan messaggiare gli utenti tra loro, potranno far lo stesso passo ? possiamo in quanto utenti iniziare ad avere questa esigenza, o la si può derubricare a "scelta della software house per spendere di meno in sicurezza interna ed in consuenze legali" 3) quanto i transparecy report devono essere dettagliati? quanto le richieste di meta-dati possono essere articolate ? ad esempio: "forniscimi i dati che hai delle persone che hanno messaggiato verso XXX" o "forniscimi i dati di chi si trovava in piazza XYZ dalle 12 alle 16" 4) l'ambiente mobile rimane insicuro in diversi lati¹, ed i backup automatici, la chiave non protetta da password, possono portare ad una perdita di riservatezza (l'attacco deve essere targeted e non può essere massivo, questo stringi stringi è il vero vantaggio), possiamo dedurre che il trend dei malware possa solo crescere con nuove ramificazioni. ciao! Claudio ¹: https://medium.com/@thegrugq/operational-whatsapp-on-ios-ce9a4231a034#.561w… -- Claudio Agosti, http://www.journalismfestival.com/news/guilty-by-proximity-ijf16-hackers-co…

2 2

FYI: Trump è peggio di Hillary. Anche lui non protegge le email
by A Dicorinto Oct. 20, 2016

Oct. 20, 2016

FYI: Trump è peggio di Hillary. Anche lui non protegge le email Un ricercatore indipendente ha scoperto, analizzando dati pubblici, che i server email dell’organizzazione di Trump usano software obsoleto e malconfigurato Una delle regole basilari della sicurezza informatica è di non usare software che non viene più supportato dai produttori. *Kevin Beaumont*, ricercatore in cybersecurity, ha scoperto che i mail server del gruppo Trump usano software non aggiornato e non più garantito come il Windows Server 2003, e l’Internet Information Server 6. *Microsoft* ha infatti smesso di suportare *Windows Server 2003* nel luglio scorso del 2015, annunciandolo sul proprio sito e suggerendo di migrare altrove la propria infrastruttura informatica per meglio proteggerla. Continua qui: http://cybersecurity.startupitalia.eu/53096-20161020-server-email-trump-buc… -- Arturo Di Corinto www.dicorinto.it ---------------------------------> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003 Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003

1 0

Your dynamic IP address is now protected personal data under EU law
by Alberto Cammozzo Oct. 20, 2016

Oct. 20, 2016

CJEU rules that personal IPs can't be stored, unless to thwart cybernetic attacks or similar. <http://arstechnica.co.uk/tech-policy/2016/10/eu-dynamic-static-ip-personal-…> Europe's top court has ruled that dynamic IP addresses can constitute "personal data," just like static IP addresses, affording them some protection under EU law against being collected and stored by websites. But the Court of Justice of the European Union (CJEU) also said in its judgment on Wednesday that one legitimate reason for a site operator to store them is "to protect itself against cyberattacks." The case was referred to the CJEU by the German Federal Court of Justice, after an action brought by German Pirate Party politician Patrick Breyer. He asked the courts to grant an injunction to prevent websites that he consults, run by federal German bodies, from collecting and storing his dynamic IP addresses. Breyer's fear is that doing so would allow the German authorities to build up a picture of his interests, according to the Austrian newspaper der Standard. Site operators argue that they need to store the data in order to prevent "cybernetic attacks and make it possible to bring criminal proceedings" against those responsible, the CJEU said. It held in its ruling that dynamic IP addresses could be considered personal data, even though they didn't refer consistently to one person, provided a website "has the legal means enabling it to identify the visitor with the help of additional information which that visitor’s Internet service provider has." Since this is generally the case in Germany, the court said that dynamic addresses would then be personal data—an important ruling. [] Il riferimento CJEU dovrebbe essere C-582/14 - Breyer <http://curia.europa.eu/juris/fiche.jsf?id=C%3B582%3B14%3BRP%3B1%3BP%3B1%3BC…> ciao Alberto

3 2